@fiado/type-kit 3.77.0 → 3.78.0

package/bin/platformRbac/dtos/TenantSecurityPolicyResponse.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Output de la consulta/actualización de la security policy del tenant. Response plain sin
+ * validators (no validamos lo que mandamos al cliente — fiado-validation-and-dtos § 7).
+ *
+ * TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP' (string), distinto de
+ * MfaMethodEnum ('EMAIL_OTP'|'TOTP') a propósito. Ver TECH_DEBT.md del platform-rbac-business.
+ */
+export interface TenantSecurityPolicyResponse {
+    methodsAllowed: ('EMAIL' | 'TOTP')[];
+}

package/bin/platformRbac/dtos/UpdateTenantSecurityPolicyRequest.d.ts

@@ -0,0 +1,3 @@
+export declare class UpdateTenantSecurityPolicyRequest {
+    methodsAllowed: ('EMAIL' | 'TOTP')[];
+}

package/bin/{benefitCenter/dtos/InputSchemaOverrideRequest.js → platformRbac/dtos/UpdateTenantSecurityPolicyRequest.js}

@@ -9,21 +9,17 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.InputSchemaOverrideRequest = void 0;
-const class_validator_1 = require("class-validator");
+exports.UpdateTenantSecurityPolicyRequest = void 0;
 const class_transformer_1 = require("class-transformer");
-const FieldOverrideRequest_1 = require("./FieldOverrideRequest");
-/**
- * Override del inputSchema completo. El array `fieldOverrides[]` lista overrides
- * parciales por `key`. La validación cruzada de que cada `key` exista en el
- * inputSchema del conector la hace el manager (no se puede expresar con class-validator).
- */
-class InputSchemaOverrideRequest {
+const class_validator_1 = require("class-validator");
+// TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP' (string), distinto de MfaMethodEnum
+// ('EMAIL_OTP'|'TOTP') a propósito. Ver TECH_DEBT.md del platform-rbac-business.
+class UpdateTenantSecurityPolicyRequest {
 }
-exports.InputSchemaOverrideRequest = InputSchemaOverrideRequest;
+exports.UpdateTenantSecurityPolicyRequest = UpdateTenantSecurityPolicyRequest;
 __decorate([
-    (0, class_validator_1.IsArray)(),
-    (0, class_validator_1.ValidateNested)({ each: true }),
-    (0, class_transformer_1.Type)(() => FieldOverrideRequest_1.FieldOverrideRequest),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.ArrayNotEmpty)(),
+    (0, class_validator_1.IsIn)(['EMAIL', 'TOTP'], { each: true }),
     __metadata("design:type", Array)
-], InputSchemaOverrideRequest.prototype, "fieldOverrides", void 0);
+], UpdateTenantSecurityPolicyRequest.prototype, "methodsAllowed", void 0);

package/bin/platformRbac/index.d.ts

@@ -20,9 +20,12 @@ export * from './mfa/EnrollTotpResponse';
 export * from './mfa/VerifyTotpEnrollmentRequest';
 export * from './mfa/ChangeMfaMethodRequest';
 export * from './mfa/MfaStatusResponse';
+export * from './mfa/MfaOptionsResponse';
 export { AuthorizeDenyReason } from './enums/AuthorizeDenyReason';
 export * from './dtos/AuthorizeRequest';
 export * from './dtos/AuthorizeResponse';
 export * from './dtos/CreateTenantRequest';
 export type { CreateTenantResponse } from './dtos/CreateTenantResponse';
+export * from './dtos/UpdateTenantSecurityPolicyRequest';
+export type { TenantSecurityPolicyResponse } from './dtos/TenantSecurityPolicyResponse';
 export { TenantType, TENANT_TYPES, levelsOf, tableSuffixForLevel, scopeRankOrder } from './tenantTypes';

package/bin/platformRbac/index.js

@@ -51,6 +51,7 @@ __exportStar(require("./mfa/EnrollTotpResponse"), exports);
 __exportStar(require("./mfa/VerifyTotpEnrollmentRequest"), exports);
 __exportStar(require("./mfa/ChangeMfaMethodRequest"), exports);
 __exportStar(require("./mfa/MfaStatusResponse"), exports);
+__exportStar(require("./mfa/MfaOptionsResponse"), exports);
 // RBAC enforcement (capa de protección) — DTOs del POST /internal/authorize.
 var AuthorizeDenyReason_1 = require("./enums/AuthorizeDenyReason");
 Object.defineProperty(exports, "AuthorizeDenyReason", { enumerable: true, get: function () { return AuthorizeDenyReason_1.AuthorizeDenyReason; } });
@@ -59,6 +60,10 @@ __exportStar(require("./dtos/AuthorizeResponse"), exports);
 // F-11 — onboarding de tenant (POST backoffice createTenant). CreateTenantRequest lleva
 // decoradores class-validator → export de valor; CreateTenantResponse es interface → type-only.
 __exportStar(require("./dtos/CreateTenantRequest"), exports);
+// MFA por tenant — methodsAllowed (value-set 'EMAIL'|'TOTP', TD-RBAC-071, DEC-095).
+// UpdateTenantSecurityPolicyRequest lleva decoradores class-validator → export de valor;
+// TenantSecurityPolicyResponse es interface plain → type-only.
+__exportStar(require("./dtos/UpdateTenantSecurityPolicyRequest"), exports);
 // A1 — registro data-driven de tenant-types (niveles debajo de TENANT, por tipo).
 // Consumido por ScopeValidationService._rank vía scopeRankOrder() y por los seeds.
 // Accesible bajo el namespace PlatformRbac (el index raíz hace export * as PlatformRbac).

package/bin/platformRbac/mfa/MfaOptionsResponse.d.ts

@@ -0,0 +1,6 @@
+import { MfaMethodEnum } from '../enums/MfaMethodEnum';
+export declare class MfaOptionsResponse {
+    allowedMethods: MfaMethodEnum[];
+    currentMethod: MfaMethodEnum;
+    mfaConfigured: boolean;
+}

package/bin/{credit/dtos/internal/CreditReversalRequest.js → platformRbac/mfa/MfaOptionsResponse.js}

@@ -9,23 +9,22 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CreditReversalRequest = void 0;
+exports.MfaOptionsResponse = void 0;
 const class_validator_1 = require("class-validator");
-class CreditReversalRequest {
+const MfaMethodEnum_1 = require("../enums/MfaMethodEnum");
+class MfaOptionsResponse {
 }
-exports.CreditReversalRequest = CreditReversalRequest;
+exports.MfaOptionsResponse = MfaOptionsResponse;
 __decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], CreditReversalRequest.prototype, "originalTransactionId", void 0);
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsEnum)(MfaMethodEnum_1.MfaMethodEnum, { each: true }),
+    __metadata("design:type", Array)
+], MfaOptionsResponse.prototype, "allowedMethods", void 0);
 __decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsEnum)(MfaMethodEnum_1.MfaMethodEnum),
     __metadata("design:type", String)
-], CreditReversalRequest.prototype, "creditId", void 0);
+], MfaOptionsResponse.prototype, "currentMethod", void 0);
 __decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], CreditReversalRequest.prototype, "reason", void 0);
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MfaOptionsResponse.prototype, "mfaConfigured", void 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.77.0",
+  "version": "3.78.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/platformRbac/dtos/TenantSecurityPolicyResponse.ts

@@ -0,0 +1,10 @@
+/**
+ * Output de la consulta/actualización de la security policy del tenant. Response plain sin
+ * validators (no validamos lo que mandamos al cliente — fiado-validation-and-dtos § 7).
+ *
+ * TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP' (string), distinto de
+ * MfaMethodEnum ('EMAIL_OTP'|'TOTP') a propósito. Ver TECH_DEBT.md del platform-rbac-business.
+ */
+export interface TenantSecurityPolicyResponse {
+    methodsAllowed: ('EMAIL' | 'TOTP')[];
+}

package/src/platformRbac/dtos/UpdateTenantSecurityPolicyRequest.ts

@@ -0,0 +1,11 @@
+import { Expose } from 'class-transformer';
+import { ArrayNotEmpty, IsIn } from 'class-validator';
+
+// TD-RBAC-071: methodsAllowed usa el value-set 'EMAIL'|'TOTP' (string), distinto de MfaMethodEnum
+// ('EMAIL_OTP'|'TOTP') a propósito. Ver TECH_DEBT.md del platform-rbac-business.
+export class UpdateTenantSecurityPolicyRequest {
+    @Expose()
+    @ArrayNotEmpty()
+    @IsIn(['EMAIL', 'TOTP'], { each: true })
+    methodsAllowed!: ('EMAIL' | 'TOTP')[];
+}

package/src/platformRbac/index.ts

@@ -40,6 +40,7 @@ export * from './mfa/EnrollTotpResponse';
 export * from './mfa/VerifyTotpEnrollmentRequest';
 export * from './mfa/ChangeMfaMethodRequest';
 export * from './mfa/MfaStatusResponse';
+export * from './mfa/MfaOptionsResponse';
 
 // RBAC enforcement (capa de protección) — DTOs del POST /internal/authorize.
 export { AuthorizeDenyReason } from './enums/AuthorizeDenyReason';
@@ -51,6 +52,12 @@ export * from './dtos/AuthorizeResponse';
 export * from './dtos/CreateTenantRequest';
 export type { CreateTenantResponse } from './dtos/CreateTenantResponse';
 
+// MFA por tenant — methodsAllowed (value-set 'EMAIL'|'TOTP', TD-RBAC-071, DEC-095).
+// UpdateTenantSecurityPolicyRequest lleva decoradores class-validator → export de valor;
+// TenantSecurityPolicyResponse es interface plain → type-only.
+export * from './dtos/UpdateTenantSecurityPolicyRequest';
+export type { TenantSecurityPolicyResponse } from './dtos/TenantSecurityPolicyResponse';
+
 // A1 — registro data-driven de tenant-types (niveles debajo de TENANT, por tipo).
 // Consumido por ScopeValidationService._rank vía scopeRankOrder() y por los seeds.
 // Accesible bajo el namespace PlatformRbac (el index raíz hace export * as PlatformRbac).

package/src/platformRbac/mfa/MfaOptionsResponse.ts

@@ -0,0 +1,14 @@
+import { IsArray, IsBoolean, IsEnum } from 'class-validator';
+import { MfaMethodEnum } from '../enums/MfaMethodEnum';
+
+export class MfaOptionsResponse {
+    @IsArray()
+    @IsEnum(MfaMethodEnum, { each: true })
+    allowedMethods!: MfaMethodEnum[];
+
+    @IsEnum(MfaMethodEnum)
+    currentMethod!: MfaMethodEnum;
+
+    @IsBoolean()
+    mfaConfigured!: boolean;
+}

package/bin/benefitCenter/dtos/BackofficeLeafOverrideUpsertRequest.d.ts

@@ -1,22 +0,0 @@
-import { InputSchemaOverrideRequest } from "./InputSchemaOverrideRequest";
-/**
- * Body de PUT /backoffice/leaves/{leafId}. Upsert parcial:
- *   - undefined → no se toca
- *   - string/number/boolean seteado → pisa el valor previo del override
- *   - null NO se acepta (para borrar un campo, usar DELETE /fields/{fieldName})
- *
- * Si todos los campos llegan undefined → 400 INVALID_PATCH_PAYLOAD.
- */
-export declare class BackofficeLeafOverrideUpsertRequest {
-    serviceName?: string;
-    logo?: string;
-    description?: string;
-    helpText?: string;
-    serviceOrder?: number;
-    subcategoryOrder?: number;
-    enabled?: boolean;
-    category?: string;
-    subcategory?: string;
-    requiresReferenceVerification?: boolean;
-    inputSchema?: InputSchemaOverrideRequest;
-}

package/bin/benefitCenter/dtos/BackofficeLeafOverrideUpsertRequest.js

@@ -1,91 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BackofficeLeafOverrideUpsertRequest = void 0;
-const class_validator_1 = require("class-validator");
-const class_transformer_1 = require("class-transformer");
-const InputSchemaOverrideRequest_1 = require("./InputSchemaOverrideRequest");
-/**
- * Body de PUT /backoffice/leaves/{leafId}. Upsert parcial:
- *   - undefined → no se toca
- *   - string/number/boolean seteado → pisa el valor previo del override
- *   - null NO se acepta (para borrar un campo, usar DELETE /fields/{fieldName})
- *
- * Si todos los campos llegan undefined → 400 INVALID_PATCH_PAYLOAD.
- */
-class BackofficeLeafOverrideUpsertRequest {
-}
-exports.BackofficeLeafOverrideUpsertRequest = BackofficeLeafOverrideUpsertRequest;
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(120),
-    __metadata("design:type", String)
-], BackofficeLeafOverrideUpsertRequest.prototype, "serviceName", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsUrl)({ protocols: ["https"], require_protocol: true }),
-    (0, class_validator_1.MaxLength)(500),
-    __metadata("design:type", String)
-], BackofficeLeafOverrideUpsertRequest.prototype, "logo", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(2000),
-    __metadata("design:type", String)
-], BackofficeLeafOverrideUpsertRequest.prototype, "description", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(1000),
-    __metadata("design:type", String)
-], BackofficeLeafOverrideUpsertRequest.prototype, "helpText", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsInt)(),
-    (0, class_validator_1.Min)(0),
-    __metadata("design:type", Number)
-], BackofficeLeafOverrideUpsertRequest.prototype, "serviceOrder", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsInt)(),
-    (0, class_validator_1.Min)(0),
-    __metadata("design:type", Number)
-], BackofficeLeafOverrideUpsertRequest.prototype, "subcategoryOrder", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsBoolean)(),
-    __metadata("design:type", Boolean)
-], BackofficeLeafOverrideUpsertRequest.prototype, "enabled", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(60),
-    (0, class_validator_1.Matches)(/^[A-Z][A-Z0-9_ ]*$/, { message: "category must be uppercase with underscores or spaces" }),
-    __metadata("design:type", String)
-], BackofficeLeafOverrideUpsertRequest.prototype, "category", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(60),
-    __metadata("design:type", String)
-], BackofficeLeafOverrideUpsertRequest.prototype, "subcategory", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsBoolean)(),
-    __metadata("design:type", Boolean)
-], BackofficeLeafOverrideUpsertRequest.prototype, "requiresReferenceVerification", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.ValidateNested)(),
-    (0, class_transformer_1.Type)(() => InputSchemaOverrideRequest_1.InputSchemaOverrideRequest),
-    __metadata("design:type", InputSchemaOverrideRequest_1.InputSchemaOverrideRequest)
-], BackofficeLeafOverrideUpsertRequest.prototype, "inputSchema", void 0);

package/bin/benefitCenter/dtos/FieldOverrideRequest.d.ts

@@ -1,19 +0,0 @@
-import { InputFieldTypeEnum } from "../enums/InputFieldTypeEnum";
-import { InputValidation } from "./InputValidation";
-import { SelectOption } from "./SelectOption";
-/**
- * Override parcial de un field individual del `inputSchema` por `key`.
- * El admin no puede agregar ni quitar fields — solo editar los existentes.
- */
-export declare class FieldOverrideRequest {
-    key: string;
-    type?: InputFieldTypeEnum;
-    label?: string;
-    placeholder?: string;
-    required?: boolean;
-    helpImage?: string;
-    showHelp?: boolean;
-    options?: SelectOption[];
-    dependsOn?: string;
-    validation?: InputValidation;
-}

package/bin/benefitCenter/dtos/FieldOverrideRequest.js

@@ -1,80 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FieldOverrideRequest = void 0;
-const class_validator_1 = require("class-validator");
-const class_transformer_1 = require("class-transformer");
-const InputFieldTypeEnum_1 = require("../enums/InputFieldTypeEnum");
-const InputValidation_1 = require("./InputValidation");
-const SelectOption_1 = require("./SelectOption");
-/**
- * Override parcial de un field individual del `inputSchema` por `key`.
- * El admin no puede agregar ni quitar fields — solo editar los existentes.
- */
-class FieldOverrideRequest {
-}
-exports.FieldOverrideRequest = FieldOverrideRequest;
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], FieldOverrideRequest.prototype, "key", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsEnum)(InputFieldTypeEnum_1.InputFieldTypeEnum),
-    __metadata("design:type", String)
-], FieldOverrideRequest.prototype, "type", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(120),
-    __metadata("design:type", String)
-], FieldOverrideRequest.prototype, "label", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(120),
-    __metadata("design:type", String)
-], FieldOverrideRequest.prototype, "placeholder", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsBoolean)(),
-    __metadata("design:type", Boolean)
-], FieldOverrideRequest.prototype, "required", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsUrl)({ protocols: ["https"], require_protocol: true }),
-    __metadata("design:type", String)
-], FieldOverrideRequest.prototype, "helpImage", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsBoolean)(),
-    __metadata("design:type", Boolean)
-], FieldOverrideRequest.prototype, "showHelp", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsArray)(),
-    (0, class_validator_1.ValidateNested)({ each: true }),
-    (0, class_transformer_1.Type)(() => SelectOption_1.SelectOption),
-    __metadata("design:type", Array)
-], FieldOverrideRequest.prototype, "options", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MaxLength)(60),
-    __metadata("design:type", String)
-], FieldOverrideRequest.prototype, "dependsOn", void 0);
-__decorate([
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.ValidateNested)(),
-    (0, class_transformer_1.Type)(() => InputValidation_1.InputValidation),
-    __metadata("design:type", InputValidation_1.InputValidation)
-], FieldOverrideRequest.prototype, "validation", void 0);

package/bin/benefitCenter/dtos/InputSchemaOverrideRequest.d.ts

@@ -1,9 +0,0 @@
-import { FieldOverrideRequest } from "./FieldOverrideRequest";
-/**
- * Override del inputSchema completo. El array `fieldOverrides[]` lista overrides
- * parciales por `key`. La validación cruzada de que cada `key` exista en el
- * inputSchema del conector la hace el manager (no se puede expresar con class-validator).
- */
-export declare class InputSchemaOverrideRequest {
-    fieldOverrides: FieldOverrideRequest[];
-}

package/bin/benefitCenter/enums/LeafOverrideStatusEnum.d.ts

@@ -1,10 +0,0 @@
-/**
- * Estado de un leaf en el listado del backoffice de overrides.
- *
- * - ACTIVE: el override (si existe) tiene un base correspondiente en el catálogo del conector.
- * - ORPHANED: existe override pero el conector ya no devuelve este leafId — el provider lo retiró.
- */
-export declare enum LeafOverrideStatusEnum {
-    ACTIVE = "ACTIVE",
-    ORPHANED = "ORPHANED"
-}

package/bin/benefitCenter/enums/LeafOverrideStatusEnum.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LeafOverrideStatusEnum = void 0;
-/**
- * Estado de un leaf en el listado del backoffice de overrides.
- *
- * - ACTIVE: el override (si existe) tiene un base correspondiente en el catálogo del conector.
- * - ORPHANED: existe override pero el conector ya no devuelve este leafId — el provider lo retiró.
- */
-var LeafOverrideStatusEnum;
-(function (LeafOverrideStatusEnum) {
-    LeafOverrideStatusEnum["ACTIVE"] = "ACTIVE";
-    LeafOverrideStatusEnum["ORPHANED"] = "ORPHANED";
-})(LeafOverrideStatusEnum || (exports.LeafOverrideStatusEnum = LeafOverrideStatusEnum = {}));

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.d.ts

@@ -1,7 +0,0 @@
-declare const ALLOWED_MFA_TYPES: readonly ["SOFTWARE_TOKEN_MFA"];
-export type AllowedMfaType = (typeof ALLOWED_MFA_TYPES)[number];
-export declare class MfaPoolConfig {
-    requireMfa: boolean;
-    mfaTypes: AllowedMfaType[];
-}
-export {};

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.js

@@ -1,36 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MfaPoolConfig = void 0;
-const class_transformer_1 = require("class-transformer");
-const class_validator_1 = require("class-validator");
-const MfaTypesRequiresOne_1 = require("../validators/MfaTypesRequiresOne");
-// EMAIL_OTP removido (3.41.0): el cognito-backoffice-connector no provisiona
-// EmailMfaConfiguration a nivel pool (requiere infra SES que no está montada
-// y la integración con messages-lambda aún no tiene diseño). Ver TD-020 +
-// DEC-001 en cognito-backoffice-connector/docs/. Si se reintroduce, agregar
-// 'EMAIL_OTP' a este array.
-const ALLOWED_MFA_TYPES = ['SOFTWARE_TOKEN_MFA'];
-class MfaPoolConfig {
-}
-exports.MfaPoolConfig = MfaPoolConfig;
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsBoolean)(),
-    __metadata("design:type", Boolean)
-], MfaPoolConfig.prototype, "requireMfa", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsArray)(),
-    (0, class_validator_1.IsIn)(ALLOWED_MFA_TYPES, { each: true }),
-    (0, class_validator_1.Validate)(MfaTypesRequiresOne_1.MfaTypesRequiresOne),
-    __metadata("design:type", Array)
-], MfaPoolConfig.prototype, "mfaTypes", void 0);

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.d.ts

@@ -1,17 +0,0 @@
-import { ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
-/**
- * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
- * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
- *
- * Razón: cuando el pool nace con MFA habilitado, el connector llama
- * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
- * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
- * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
- * Mejor rechazar en validación del DTO antes de tocar AWS.
- *
- * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
- */
-export declare class MfaTypesRequiresOne implements ValidatorConstraintInterface {
-    validate(mfaTypes: unknown, args: ValidationArguments): boolean;
-    defaultMessage(): string;
-}

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.js

@@ -1,39 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MfaTypesRequiresOne = void 0;
-const class_validator_1 = require("class-validator");
-/**
- * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
- * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
- *
- * Razón: cuando el pool nace con MFA habilitado, el connector llama
- * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
- * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
- * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
- * Mejor rechazar en validación del DTO antes de tocar AWS.
- *
- * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
- */
-let MfaTypesRequiresOne = class MfaTypesRequiresOne {
-    validate(mfaTypes, args) {
-        const obj = args.object;
-        if (obj.requireMfa === true) {
-            return Array.isArray(mfaTypes) && mfaTypes.length >= 1;
-        }
-        // requireMfa: false → cualquier mfaTypes pasa.
-        return true;
-    }
-    defaultMessage() {
-        return 'mfaTypes requiere al menos un tipo cuando requireMfa=true';
-    }
-};
-exports.MfaTypesRequiresOne = MfaTypesRequiresOne;
-exports.MfaTypesRequiresOne = MfaTypesRequiresOne = __decorate([
-    (0, class_validator_1.ValidatorConstraint)({ name: 'MfaTypesRequiresOneWhenMfaRequired', async: false })
-], MfaTypesRequiresOne);

package/bin/cognitoConnector/dtos/SignUpBackofficeRequest.d.ts

@@ -1,13 +0,0 @@
-export declare class SignUpBackofficeRequest {
-    name: string;
-    phoneNumber: string;
-    countryOfBirth: string;
-    MEX_DebitAccountWish: boolean;
-    USA_DebitAccountWish: boolean;
-    countryOfDomicile: string;
-    myReferralCode?: string;
-    referralCode?: string;
-    groupId?: string;
-    isAgent: boolean;
-    agentGroupId?: string;
-}

package/bin/cognitoConnector/dtos/SignUpBackofficeRequest.js

@@ -1,71 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignUpBackofficeRequest = void 0;
-const class_validator_1 = require("class-validator");
-class SignUpBackofficeRequest {
-}
-exports.SignUpBackofficeRequest = SignUpBackofficeRequest;
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "name", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "phoneNumber", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "countryOfBirth", void 0);
-__decorate([
-    (0, class_validator_1.IsBoolean)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", Boolean)
-], SignUpBackofficeRequest.prototype, "MEX_DebitAccountWish", void 0);
-__decorate([
-    (0, class_validator_1.IsBoolean)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", Boolean)
-], SignUpBackofficeRequest.prototype, "USA_DebitAccountWish", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "countryOfDomicile", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "myReferralCode", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "referralCode", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "groupId", void 0);
-__decorate([
-    (0, class_validator_1.IsBoolean)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", Boolean)
-], SignUpBackofficeRequest.prototype, "isAgent", void 0);
-__decorate([
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsOptional)(),
-    __metadata("design:type", String)
-], SignUpBackofficeRequest.prototype, "agentGroupId", void 0);