@fiado/type-kit 3.78.0 → 3.80.0

package/_test_/unit/platformRbac/enums/__snapshots__/permissionBits.test.ts.snap

@@ -1,6 +1,6 @@
 // Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
 
-exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `4037934643`;
+exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `1113835415`;
 
 exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción) 1`] = `
 [
@@ -94,5 +94,28 @@ exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe an
   "mdm.operation_log.view",
   "mdm.test",
   "pay.transaction.view",
+  "agents.agent.list",
+  "agents.agent.create",
+  "agents.agent.create_bulk",
+  "agents.agent.move",
+  "agents.agent.delete",
+  "agents.referral.view",
+  "agents.ranking.view",
+  "agents.production.view",
+  "agents.person.search",
+  "agents.person.view",
+  "agents.person.update",
+  "agents.document.view",
+  "agents.document.upload",
+  "agents.address.view",
+  "agents.address.manage",
+  "agents.beneficiary.view",
+  "agents.beneficiary.manage",
+  "agents.card.issue",
+  "agents.chat.view",
+  "agents.chat.send",
+  "agents.notification.send",
+  "agents.export.run",
+  "agents.catalog.view",
 ]
 `;

package/bin/platformRbac/enums/Permission.d.ts

@@ -118,7 +118,30 @@ export declare enum Permission {
     MDM_DEVICE_STATUS_VIEW = "mdm.device.status.view",
     MDM_OPERATION_LOG_VIEW = "mdm.operation_log.view",
     MDM_TEST = "mdm.test",
-    PAY_TRANSACTION_VIEW = "pay.transaction.view"
+    PAY_TRANSACTION_VIEW = "pay.transaction.view",
+    AGENTS_AGENT_LIST = "agents.agent.list",
+    AGENTS_AGENT_CREATE = "agents.agent.create",
+    AGENTS_AGENT_CREATE_BULK = "agents.agent.create_bulk",
+    AGENTS_AGENT_MOVE = "agents.agent.move",
+    AGENTS_AGENT_DELETE = "agents.agent.delete",
+    AGENTS_REFERRAL_VIEW = "agents.referral.view",
+    AGENTS_RANKING_VIEW = "agents.ranking.view",
+    AGENTS_PRODUCTION_VIEW = "agents.production.view",
+    AGENTS_PERSON_SEARCH = "agents.person.search",
+    AGENTS_PERSON_VIEW = "agents.person.view",
+    AGENTS_PERSON_UPDATE = "agents.person.update",
+    AGENTS_DOCUMENT_VIEW = "agents.document.view",
+    AGENTS_DOCUMENT_UPLOAD = "agents.document.upload",
+    AGENTS_ADDRESS_VIEW = "agents.address.view",
+    AGENTS_ADDRESS_MANAGE = "agents.address.manage",
+    AGENTS_BENEFICIARY_VIEW = "agents.beneficiary.view",
+    AGENTS_BENEFICIARY_MANAGE = "agents.beneficiary.manage",
+    AGENTS_CARD_ISSUE = "agents.card.issue",
+    AGENTS_CHAT_VIEW = "agents.chat.view",
+    AGENTS_CHAT_SEND = "agents.chat.send",
+    AGENTS_NOTIFICATION_SEND = "agents.notification.send",
+    AGENTS_EXPORT_RUN = "agents.export.run",
+    AGENTS_CATALOG_VIEW = "agents.catalog.view"
 }
 /**
  * Orden CANÓNICO y APPEND-ONLY de los permisos para el bitset del token.

package/bin/platformRbac/enums/Permission.js

@@ -154,6 +154,35 @@ var Permission;
     // PAY — futuro FiadoPay (placeholder, no usado en MVP)
     // ====================================================
     Permission["PAY_TRANSACTION_VIEW"] = "pay.transaction.view";
+    // ====================================================
+    // AGENTS — Fiado Agents (tenant type AGENTS, roles scope GROUP).
+    // Permisos de DOMINIO derivados de los endpoints/pantallas reales del webapp de agents
+    // (ver fiado-agents-webapp/docs/rbac/RBAC-agents.md §5.2). El aislamiento entre orgs lo da el
+    // scope GROUP del roleAssignment (scopeRef = Group_GT.id), no un permiso aparte.
+    // ====================================================
+    Permission["AGENTS_AGENT_LIST"] = "agents.agent.list";
+    Permission["AGENTS_AGENT_CREATE"] = "agents.agent.create";
+    Permission["AGENTS_AGENT_CREATE_BULK"] = "agents.agent.create_bulk";
+    Permission["AGENTS_AGENT_MOVE"] = "agents.agent.move";
+    Permission["AGENTS_AGENT_DELETE"] = "agents.agent.delete";
+    Permission["AGENTS_REFERRAL_VIEW"] = "agents.referral.view";
+    Permission["AGENTS_RANKING_VIEW"] = "agents.ranking.view";
+    Permission["AGENTS_PRODUCTION_VIEW"] = "agents.production.view";
+    Permission["AGENTS_PERSON_SEARCH"] = "agents.person.search";
+    Permission["AGENTS_PERSON_VIEW"] = "agents.person.view";
+    Permission["AGENTS_PERSON_UPDATE"] = "agents.person.update";
+    Permission["AGENTS_DOCUMENT_VIEW"] = "agents.document.view";
+    Permission["AGENTS_DOCUMENT_UPLOAD"] = "agents.document.upload";
+    Permission["AGENTS_ADDRESS_VIEW"] = "agents.address.view";
+    Permission["AGENTS_ADDRESS_MANAGE"] = "agents.address.manage";
+    Permission["AGENTS_BENEFICIARY_VIEW"] = "agents.beneficiary.view";
+    Permission["AGENTS_BENEFICIARY_MANAGE"] = "agents.beneficiary.manage";
+    Permission["AGENTS_CARD_ISSUE"] = "agents.card.issue";
+    Permission["AGENTS_CHAT_VIEW"] = "agents.chat.view";
+    Permission["AGENTS_CHAT_SEND"] = "agents.chat.send";
+    Permission["AGENTS_NOTIFICATION_SEND"] = "agents.notification.send";
+    Permission["AGENTS_EXPORT_RUN"] = "agents.export.run";
+    Permission["AGENTS_CATALOG_VIEW"] = "agents.catalog.view";
 })(Permission || (exports.Permission = Permission = {}));
 /**
  * Orden CANÓNICO y APPEND-ONLY de los permisos para el bitset del token.
@@ -257,6 +286,30 @@ exports.PERMISSION_BIT_ORDER = [
     Permission.MDM_OPERATION_LOG_VIEW,
     Permission.MDM_TEST,
     Permission.PAY_TRANSACTION_VIEW,
+    // AGENTS (append-only) — Fiado Agents domain perms.
+    Permission.AGENTS_AGENT_LIST,
+    Permission.AGENTS_AGENT_CREATE,
+    Permission.AGENTS_AGENT_CREATE_BULK,
+    Permission.AGENTS_AGENT_MOVE,
+    Permission.AGENTS_AGENT_DELETE,
+    Permission.AGENTS_REFERRAL_VIEW,
+    Permission.AGENTS_RANKING_VIEW,
+    Permission.AGENTS_PRODUCTION_VIEW,
+    Permission.AGENTS_PERSON_SEARCH,
+    Permission.AGENTS_PERSON_VIEW,
+    Permission.AGENTS_PERSON_UPDATE,
+    Permission.AGENTS_DOCUMENT_VIEW,
+    Permission.AGENTS_DOCUMENT_UPLOAD,
+    Permission.AGENTS_ADDRESS_VIEW,
+    Permission.AGENTS_ADDRESS_MANAGE,
+    Permission.AGENTS_BENEFICIARY_VIEW,
+    Permission.AGENTS_BENEFICIARY_MANAGE,
+    Permission.AGENTS_CARD_ISSUE,
+    Permission.AGENTS_CHAT_VIEW,
+    Permission.AGENTS_CHAT_SEND,
+    Permission.AGENTS_NOTIFICATION_SEND,
+    Permission.AGENTS_EXPORT_RUN,
+    Permission.AGENTS_CATALOG_VIEW,
 ];
 function djb2(input) {
     let h = 5381;

package/bin/platformRbac/enums/PermissionCategory.d.ts

@@ -10,5 +10,6 @@ export declare enum PermissionCategory {
     LEND = "lend",
     MDM = "mdm",
     AUDIT = "audit",
-    PAY = "pay"
+    PAY = "pay",
+    AGENTS = "agents"
 }

package/bin/platformRbac/enums/PermissionCategory.js

@@ -15,4 +15,5 @@ var PermissionCategory;
     PermissionCategory["MDM"] = "mdm";
     PermissionCategory["AUDIT"] = "audit";
     PermissionCategory["PAY"] = "pay";
+    PermissionCategory["AGENTS"] = "agents";
 })(PermissionCategory || (exports.PermissionCategory = PermissionCategory = {}));

package/bin/riskProfile/dtos/private/CreateProfileNoteRequest.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Request de `POST /risk/backoffice/profiles/{directoryId}/notes` (BO-03 §3.3).
+ *
+ * Nota de revisión humana del OC sobre el perfil. Cualquier nota cuenta como
+ * revisión y reinicia el sello `lastReviewedAt`/`lastReviewedBy` del perfil
+ * (Manual de Cumplimiento sec. 8.25 / Art. 24 — re-evaluación cíclica).
+ * No se distingue "Revisión OK" de "Nota libre".
+ */
+export declare class CreateProfileNoteRequest {
+    email: string;
+    comment: string;
+    attachmentKeys?: string[];
+}

package/bin/riskProfile/dtos/private/CreateProfileNoteRequest.js

@@ -0,0 +1,44 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateProfileNoteRequest = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/**
+ * Request de `POST /risk/backoffice/profiles/{directoryId}/notes` (BO-03 §3.3).
+ *
+ * Nota de revisión humana del OC sobre el perfil. Cualquier nota cuenta como
+ * revisión y reinicia el sello `lastReviewedAt`/`lastReviewedBy` del perfil
+ * (Manual de Cumplimiento sec. 8.25 / Art. 24 — re-evaluación cíclica).
+ * No se distingue "Revisión OK" de "Nota libre".
+ */
+class CreateProfileNoteRequest {
+}
+exports.CreateProfileNoteRequest = CreateProfileNoteRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEmail)({}, { message: "email debe ser un correo válido" }),
+    __metadata("design:type", String)
+], CreateProfileNoteRequest.prototype, "email", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(10),
+    (0, class_validator_1.MaxLength)(2000),
+    __metadata("design:type", String)
+], CreateProfileNoteRequest.prototype, "comment", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], CreateProfileNoteRequest.prototype, "attachmentKeys", void 0);

package/bin/riskProfile/index.d.ts

@@ -40,3 +40,4 @@ export * from './dtos/private/SetDeclaredIncomeResponse';
 export * from './dtos/private/CreateClientFinancialHistoryRequest';
 export * from './dtos/private/ClientFinancialHistoryResponse';
 export * from './dtos/private/ListClientFinancialHistoryResponse';
+export * from './dtos/private/CreateProfileNoteRequest';

package/bin/riskProfile/index.js

@@ -58,3 +58,4 @@ __exportStar(require("./dtos/private/SetDeclaredIncomeResponse"), exports);
 __exportStar(require("./dtos/private/CreateClientFinancialHistoryRequest"), exports);
 __exportStar(require("./dtos/private/ClientFinancialHistoryResponse"), exports);
 __exportStar(require("./dtos/private/ListClientFinancialHistoryResponse"), exports);
+__exportStar(require("./dtos/private/CreateProfileNoteRequest"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.78.0",
+  "version": "3.80.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/platformRbac/enums/Permission.ts

@@ -154,6 +154,36 @@ export enum Permission {
     // PAY — futuro FiadoPay (placeholder, no usado en MVP)
     // ====================================================
     PAY_TRANSACTION_VIEW = 'pay.transaction.view',
+
+    // ====================================================
+    // AGENTS — Fiado Agents (tenant type AGENTS, roles scope GROUP).
+    // Permisos de DOMINIO derivados de los endpoints/pantallas reales del webapp de agents
+    // (ver fiado-agents-webapp/docs/rbac/RBAC-agents.md §5.2). El aislamiento entre orgs lo da el
+    // scope GROUP del roleAssignment (scopeRef = Group_GT.id), no un permiso aparte.
+    // ====================================================
+    AGENTS_AGENT_LIST = 'agents.agent.list',
+    AGENTS_AGENT_CREATE = 'agents.agent.create',
+    AGENTS_AGENT_CREATE_BULK = 'agents.agent.create_bulk',
+    AGENTS_AGENT_MOVE = 'agents.agent.move',
+    AGENTS_AGENT_DELETE = 'agents.agent.delete',
+    AGENTS_REFERRAL_VIEW = 'agents.referral.view',
+    AGENTS_RANKING_VIEW = 'agents.ranking.view',
+    AGENTS_PRODUCTION_VIEW = 'agents.production.view',
+    AGENTS_PERSON_SEARCH = 'agents.person.search',
+    AGENTS_PERSON_VIEW = 'agents.person.view',
+    AGENTS_PERSON_UPDATE = 'agents.person.update',
+    AGENTS_DOCUMENT_VIEW = 'agents.document.view',
+    AGENTS_DOCUMENT_UPLOAD = 'agents.document.upload',
+    AGENTS_ADDRESS_VIEW = 'agents.address.view',
+    AGENTS_ADDRESS_MANAGE = 'agents.address.manage',
+    AGENTS_BENEFICIARY_VIEW = 'agents.beneficiary.view',
+    AGENTS_BENEFICIARY_MANAGE = 'agents.beneficiary.manage',
+    AGENTS_CARD_ISSUE = 'agents.card.issue',
+    AGENTS_CHAT_VIEW = 'agents.chat.view',
+    AGENTS_CHAT_SEND = 'agents.chat.send',
+    AGENTS_NOTIFICATION_SEND = 'agents.notification.send',
+    AGENTS_EXPORT_RUN = 'agents.export.run',
+    AGENTS_CATALOG_VIEW = 'agents.catalog.view',
 }
 
 /**
@@ -258,6 +288,30 @@ export const PERMISSION_BIT_ORDER: readonly Permission[] = [
     Permission.MDM_OPERATION_LOG_VIEW,
     Permission.MDM_TEST,
     Permission.PAY_TRANSACTION_VIEW,
+    // AGENTS (append-only) — Fiado Agents domain perms.
+    Permission.AGENTS_AGENT_LIST,
+    Permission.AGENTS_AGENT_CREATE,
+    Permission.AGENTS_AGENT_CREATE_BULK,
+    Permission.AGENTS_AGENT_MOVE,
+    Permission.AGENTS_AGENT_DELETE,
+    Permission.AGENTS_REFERRAL_VIEW,
+    Permission.AGENTS_RANKING_VIEW,
+    Permission.AGENTS_PRODUCTION_VIEW,
+    Permission.AGENTS_PERSON_SEARCH,
+    Permission.AGENTS_PERSON_VIEW,
+    Permission.AGENTS_PERSON_UPDATE,
+    Permission.AGENTS_DOCUMENT_VIEW,
+    Permission.AGENTS_DOCUMENT_UPLOAD,
+    Permission.AGENTS_ADDRESS_VIEW,
+    Permission.AGENTS_ADDRESS_MANAGE,
+    Permission.AGENTS_BENEFICIARY_VIEW,
+    Permission.AGENTS_BENEFICIARY_MANAGE,
+    Permission.AGENTS_CARD_ISSUE,
+    Permission.AGENTS_CHAT_VIEW,
+    Permission.AGENTS_CHAT_SEND,
+    Permission.AGENTS_NOTIFICATION_SEND,
+    Permission.AGENTS_EXPORT_RUN,
+    Permission.AGENTS_CATALOG_VIEW,
 ] as const;
 
 function djb2(input: string): number {

package/src/platformRbac/enums/PermissionCategory.ts

@@ -11,4 +11,5 @@ export enum PermissionCategory {
     MDM = 'mdm',
     AUDIT = 'audit',
     PAY = 'pay',
+    AGENTS = 'agents',
 }

package/src/riskProfile/dtos/private/CreateProfileNoteRequest.ts

@@ -0,0 +1,32 @@
+import { Expose } from "class-transformer";
+import { IsArray, IsEmail, IsOptional, IsString, MaxLength, MinLength } from "class-validator";
+
+/**
+ * Request de `POST /risk/backoffice/profiles/{directoryId}/notes` (BO-03 §3.3).
+ *
+ * Nota de revisión humana del OC sobre el perfil. Cualquier nota cuenta como
+ * revisión y reinicia el sello `lastReviewedAt`/`lastReviewedBy` del perfil
+ * (Manual de Cumplimiento sec. 8.25 / Art. 24 — re-evaluación cíclica).
+ * No se distingue "Revisión OK" de "Nota libre".
+ */
+export class CreateProfileNoteRequest {
+
+    // Email del OC que registra la nota → se persiste como autor + lastReviewedBy.
+    @Expose()
+    @IsEmail({}, { message: "email debe ser un correo válido" })
+    email!: string;
+
+    // Texto de la nota. Entre 10 y 2000 caracteres.
+    @Expose()
+    @IsString()
+    @MinLength(10)
+    @MaxLength(2000)
+    comment!: string;
+
+    // Claves S3 de adjuntos opcionales (PDF/imagen). El Dashboard firma y sube.
+    @Expose()
+    @IsOptional()
+    @IsArray()
+    @IsString({ each: true })
+    attachmentKeys?: string[];
+}

package/src/riskProfile/index.ts

@@ -45,4 +45,5 @@ export * from './dtos/private/SetDeclaredIncomeResponse';
 export * from './dtos/private/CreateClientFinancialHistoryRequest';
 export * from './dtos/private/ClientFinancialHistoryResponse';
 export * from './dtos/private/ListClientFinancialHistoryResponse';
+export * from './dtos/private/CreateProfileNoteRequest';