@fiado/type-kit 3.86.0 → 3.88.0

package/bin/networkConnector/enums/ProfileStatusEnum.d.ts

@@ -0,0 +1,5 @@
+export declare enum ProfileStatusEnum {
+    ACTIVE = "ACTIVE",
+    INACTIVE = "INACTIVE",
+    DRAFT = "DRAFT"
+}

package/bin/networkConnector/enums/ProfileStatusEnum.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProfileStatusEnum = void 0;
+var ProfileStatusEnum;
+(function (ProfileStatusEnum) {
+    ProfileStatusEnum["ACTIVE"] = "ACTIVE";
+    ProfileStatusEnum["INACTIVE"] = "INACTIVE";
+    ProfileStatusEnum["DRAFT"] = "DRAFT";
+})(ProfileStatusEnum || (exports.ProfileStatusEnum = ProfileStatusEnum = {}));

package/bin/networkConnector/index.d.ts

@@ -0,0 +1,21 @@
+export * from './enums/ProfileStatusEnum';
+export * from './enums/LeadSourceEnum';
+export * from './enums/LeadStatusEnum';
+export * from './enums/PhotoContentType';
+export * from './dtos/CreateProfileRequest';
+export * from './dtos/UpdateProfileRequest';
+export * from './dtos/ProfileResponse';
+export * from './dtos/ListProfilesResponse';
+export * from './dtos/DeleteProfileResponse';
+export * from './dtos/SaveLeadRequest';
+export * from './dtos/SaveLeadResponse';
+export * from './dtos/LeadResponse';
+export * from './dtos/ListLeadsResponse';
+export * from './dtos/CreateLeadGroupRequest';
+export * from './dtos/UpdateLeadGroupRequest';
+export * from './dtos/AssignLeadToGroupRequest';
+export * from './dtos/LeadGroupResponse';
+export * from './dtos/ListLeadGroupsResponse';
+export * from './dtos/GetPhotoUploadUrlRequest';
+export * from './dtos/PhotoUploadUrlResponse';
+export * from './dtos/DeletePhotoResponse';

package/bin/networkConnector/index.js

@@ -0,0 +1,42 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Enums
+__exportStar(require("./enums/ProfileStatusEnum"), exports);
+__exportStar(require("./enums/LeadSourceEnum"), exports);
+__exportStar(require("./enums/LeadStatusEnum"), exports);
+__exportStar(require("./enums/PhotoContentType"), exports);
+// Profile DTOs
+__exportStar(require("./dtos/CreateProfileRequest"), exports);
+__exportStar(require("./dtos/UpdateProfileRequest"), exports);
+__exportStar(require("./dtos/ProfileResponse"), exports);
+__exportStar(require("./dtos/ListProfilesResponse"), exports);
+__exportStar(require("./dtos/DeleteProfileResponse"), exports);
+// Lead DTOs
+__exportStar(require("./dtos/SaveLeadRequest"), exports);
+__exportStar(require("./dtos/SaveLeadResponse"), exports);
+__exportStar(require("./dtos/LeadResponse"), exports);
+__exportStar(require("./dtos/ListLeadsResponse"), exports);
+// Lead Group DTOs
+__exportStar(require("./dtos/CreateLeadGroupRequest"), exports);
+__exportStar(require("./dtos/UpdateLeadGroupRequest"), exports);
+__exportStar(require("./dtos/AssignLeadToGroupRequest"), exports);
+__exportStar(require("./dtos/LeadGroupResponse"), exports);
+__exportStar(require("./dtos/ListLeadGroupsResponse"), exports);
+// Photo DTOs
+__exportStar(require("./dtos/GetPhotoUploadUrlRequest"), exports);
+__exportStar(require("./dtos/PhotoUploadUrlResponse"), exports);
+__exportStar(require("./dtos/DeletePhotoResponse"), exports);

package/bin/platformRbac/dtos/AuthContext.d.ts

@@ -18,10 +18,10 @@ export interface AuthContext {
     permissions: Permission[];
     resolvedAt: string;
     issuer?: string;
-    /** Bitset base64url de permisos efectivos (token-as-cache). Ausente → fallback al resolver/claim. */
+    /** @deprecated RBAC Token Flaco (DEC-RBAC-008): el bitset muere; el adapter resuelve permisos frescos desde DDB. Se conserva el campo para compat de tokens viejos en transición. */
     permBits?: string;
-    /** Versión del catálogo (PERMS_VERSION) con la que se construyó permBits. */
+    /** @deprecated DEC-RBAC-008: versión del catálogo del bitset. No se usa en el modelo token-flaco. */
     permVer?: number;
-    /** Epoch de permisos del tenant al momento de emitir el token. */
+    /** @deprecated DEC-RBAC-008: epoch de permisos. El authorizer ya no lo chequea. */
     permsEpoch?: number;
 }

package/bin/platformRbac/tenantTypes.d.ts

@@ -18,9 +18,10 @@ export declare const TENANT_TYPES: Record<TenantType, TenantTypeDef>;
 export declare function levelsOf(type: TenantType): PermissionScope[];
 export declare function tableSuffixForLevel(type: TenantType, level: PermissionScope): string | undefined;
 /**
- * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
- * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
- * así que un orden global concatenado es seguro. Sin duplicados.
+ * Orden global de scopes para ORDENAR (ej. UI): PLATFORM, TENANT + niveles de cada tipo.
+ * ⚠️ NO usar para COBERTURA de autorización: es un orden total que cruzaría ramas
+ * (sugeriría falsamente que RETAILER cubre GROUP). La cobertura se decide con una relación
+ * explícita por niveles — ver `canAccess`/`scopeCovers` en @fiado/gateway-adapter (DEC-RBAC-010).
  */
 export declare function scopeRankOrder(): PermissionScope[];
 export {};

package/bin/platformRbac/tenantTypes.js

@@ -37,9 +37,10 @@ function tableSuffixForLevel(type, level) {
     return exports.TENANT_TYPES[type].tableSuffix[level];
 }
 /**
- * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
- * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
- * así que un orden global concatenado es seguro. Sin duplicados.
+ * Orden global de scopes para ORDENAR (ej. UI): PLATFORM, TENANT + niveles de cada tipo.
+ * ⚠️ NO usar para COBERTURA de autorización: es un orden total que cruzaría ramas
+ * (sugeriría falsamente que RETAILER cubre GROUP). La cobertura se decide con una relación
+ * explícita por niveles — ver `canAccess`/`scopeCovers` en @fiado/gateway-adapter (DEC-RBAC-010).
  */
 function scopeRankOrder() {
     const order = [PermissionScope_1.PermissionScope.PLATFORM, PermissionScope_1.PermissionScope.TENANT];

package/bin/transaction/dtos/CreateDisputePrivateRequest.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Request de alta multi-canal de reclamación por el OC (BO-R27 Fase A, §3.5).
+ * POST disputes — privado (VPC/VPN). Para reclamaciones recibidas por canal no-app
+ * (teléfono 202, correo 204, otros 205) que hoy no generan folio y se pierden del R27.
+ */
+export declare class CreateDisputePrivateRequest {
+    directoryId: string;
+    channel: number;
+    originatorRole: string;
+    originatorUserId: string;
+    disputeReason: number;
+    disputeObject: number;
+    disputeObjectChannel: number;
+    amount: number;
+    description: string;
+    dateOfDisputedTx: string;
+    disputedTxNumber?: string;
+    clientRequestId: string;
+}

package/bin/transaction/dtos/CreateDisputePrivateRequest.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateDisputePrivateRequest = void 0;
+/**
+ * Request de alta multi-canal de reclamación por el OC (BO-R27 Fase A, §3.5).
+ * POST disputes — privado (VPC/VPN). Para reclamaciones recibidas por canal no-app
+ * (teléfono 202, correo 204, otros 205) que hoy no generan folio y se pierden del R27.
+ */
+class CreateDisputePrivateRequest {
+}
+exports.CreateDisputePrivateRequest = CreateDisputePrivateRequest;

package/bin/transaction/dtos/ReopenDisputeRequest.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Request de reapertura de reclamación (BO-R27 Fase A, §3.1).
+ * POST disputes/{folioId}/reopen — privado (VPC/VPN). Transición 102 -> 103.
+ * La dispara la app móvil del cliente cuando discrepa con un dictamen improcedente.
+ */
+export declare class ReopenDisputeRequest {
+    reopenReason: string;
+}

package/bin/transaction/dtos/ReopenDisputeRequest.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReopenDisputeRequest = void 0;
+/**
+ * Request de reapertura de reclamación (BO-R27 Fase A, §3.1).
+ * POST disputes/{folioId}/reopen — privado (VPC/VPN). Transición 102 -> 103.
+ * La dispara la app móvil del cliente cuando discrepa con un dictamen improcedente.
+ */
+class ReopenDisputeRequest {
+}
+exports.ReopenDisputeRequest = ReopenDisputeRequest;

package/bin/transaction/index.d.ts

@@ -1,6 +1,8 @@
 export * from './dtos/CounterQueryResponse';
 export * from './dtos/UpdateR27StatusRequest';
 export * from './dtos/UpdateR27StatusResponse';
+export * from './dtos/ReopenDisputeRequest';
+export * from './dtos/CreateDisputePrivateRequest';
 export * from './dtos/TransactionCreateRequest';
 export * from './dtos/TransactionCreateResponse';
 export * from './dtos/TransactionGetDetailResponse';

package/bin/transaction/index.js

@@ -18,6 +18,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./dtos/CounterQueryResponse"), exports);
 __exportStar(require("./dtos/UpdateR27StatusRequest"), exports);
 __exportStar(require("./dtos/UpdateR27StatusResponse"), exports);
+__exportStar(require("./dtos/ReopenDisputeRequest"), exports);
+__exportStar(require("./dtos/CreateDisputePrivateRequest"), exports);
 __exportStar(require("./dtos/TransactionCreateRequest"), exports);
 __exportStar(require("./dtos/TransactionCreateResponse"), exports);
 __exportStar(require("./dtos/TransactionGetDetailResponse"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.86.0",
+  "version": "3.88.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/index.ts

@@ -85,5 +85,8 @@ export * as PlatformRbac from './platformRbac';
 export * as Remittance from './remittance';
 export * as WalletFunding from './walletFunding';
 export * as TotpSecurity from './totpSecurity';
+// NetworkConnector: módulo del lambda fiado-network-business (Access Card / Digital Business Card).
+// Contiene DTOs y enums para perfiles, leads, lead groups y fotos.
+export * as NetworkConnector from './networkConnector';
 export * from './messaging';
 export * from './complaint';

package/src/networkConnector/dtos/AssignLeadToGroupRequest.ts

@@ -0,0 +1,6 @@
+import { Expose } from 'class-transformer';
+import { IsString } from 'class-validator';
+
+export class AssignLeadToGroupRequest {
+    @Expose() @IsString() leadId!: string;
+}

package/src/networkConnector/dtos/CreateLeadGroupRequest.ts

@@ -0,0 +1,8 @@
+import { Expose } from 'class-transformer';
+import { IsString, IsOptional, MaxLength, MinLength } from 'class-validator';
+
+export class CreateLeadGroupRequest {
+    @Expose() @IsString() @MinLength(1) @MaxLength(100) name!: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(500) description?: string;
+    @Expose() @IsString() profileId!: string;
+}

package/src/networkConnector/dtos/CreateProfileRequest.ts

@@ -0,0 +1,15 @@
+import { Expose } from 'class-transformer';
+import { IsString, IsOptional, IsObject, MaxLength, MinLength } from 'class-validator';
+
+export class CreateProfileRequest {
+    @Expose() @IsString() @MinLength(1) @MaxLength(100) firstName!: string;
+    @Expose() @IsString() @MinLength(1) @MaxLength(100) lastName!: string;
+    @Expose() @IsString() @MinLength(1) @MaxLength(200) title!: string;
+    @Expose() @IsString() @MinLength(1) @MaxLength(200) company!: string;
+    @Expose() @IsString() @MinLength(2) @MaxLength(100) slug!: string;
+    @Expose() @IsString() directoryId!: string;
+    @Expose() @IsOptional() @IsString() phone?: string;
+    @Expose() @IsOptional() @IsString() email?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(500) bio?: string;
+    @Expose() @IsOptional() @IsObject() socialLinks?: Record<string, string>;
+}

package/src/networkConnector/dtos/DeletePhotoResponse.ts

@@ -0,0 +1,4 @@
+export interface DeletePhotoResponse {
+    deleted: boolean;
+    profileId: string;
+}

package/src/networkConnector/dtos/DeleteProfileResponse.ts

@@ -0,0 +1,4 @@
+export interface DeleteProfileResponse {
+    deleted: boolean;
+    profileId: string;
+}

package/src/networkConnector/dtos/GetPhotoUploadUrlRequest.ts

@@ -0,0 +1,8 @@
+import { Expose } from 'class-transformer';
+import { IsString, IsOptional, IsEnum } from 'class-validator';
+import { PhotoContentType } from '../enums/PhotoContentType';
+
+export class GetPhotoUploadUrlRequest {
+    @Expose() @IsString() profileId!: string;
+    @Expose() @IsOptional() @IsEnum(PhotoContentType) contentType?: PhotoContentType;
+}

package/src/networkConnector/dtos/LeadGroupResponse.ts

@@ -0,0 +1,8 @@
+export interface LeadGroupResponse {
+    id: string;
+    profileId: string;
+    name: string;
+    description?: string;
+    createdAt: number;
+    updatedAt: number;
+}

package/src/networkConnector/dtos/LeadResponse.ts

@@ -0,0 +1,17 @@
+import { LeadSourceEnum } from '../enums/LeadSourceEnum';
+import { LeadStatusEnum } from '../enums/LeadStatusEnum';
+
+export interface LeadResponse {
+    id: string;
+    profileId: string;
+    name: string;
+    email?: string;
+    phone?: string;
+    company?: string;
+    notes?: string;
+    source: LeadSourceEnum;
+    status: LeadStatusEnum;
+    groupId?: string;
+    createdAt: number;
+    updatedAt: number;
+}

package/src/networkConnector/dtos/ListLeadGroupsResponse.ts

@@ -0,0 +1,6 @@
+import { LeadGroupResponse } from './LeadGroupResponse';
+
+export interface ListLeadGroupsResponse {
+    groups: LeadGroupResponse[];
+    total: number;
+}

package/src/networkConnector/dtos/ListLeadsResponse.ts

@@ -0,0 +1,6 @@
+import { LeadResponse } from './LeadResponse';
+
+export interface ListLeadsResponse {
+    leads: LeadResponse[];
+    total: number;
+}

package/src/networkConnector/dtos/ListProfilesResponse.ts

@@ -0,0 +1,6 @@
+import { ProfileResponse } from './ProfileResponse';
+
+export interface ListProfilesResponse {
+    profiles: ProfileResponse[];
+    total: number;
+}

package/src/networkConnector/dtos/PhotoUploadUrlResponse.ts

@@ -0,0 +1,5 @@
+export interface PhotoUploadUrlResponse {
+    uploadUrl: string;
+    photoUrl: string;
+    expiresIn: number;
+}

package/src/networkConnector/dtos/ProfileResponse.ts

@@ -0,0 +1,19 @@
+import { ProfileStatusEnum } from '../enums/ProfileStatusEnum';
+
+export interface ProfileResponse {
+    id: string;
+    slug: string;
+    firstName: string;
+    lastName: string;
+    title: string;
+    company: string;
+    phone?: string;
+    email?: string;
+    photoUrl?: string;
+    bio?: string;
+    socialLinks?: Record<string, string>;
+    status: ProfileStatusEnum;
+    directoryId: string;
+    createdAt: number;
+    updatedAt: number;
+}

package/src/networkConnector/dtos/SaveLeadRequest.ts

@@ -0,0 +1,12 @@
+import { Expose } from 'class-transformer';
+import { IsString, IsOptional, IsEnum, IsEmail, MaxLength, MinLength } from 'class-validator';
+import { LeadSourceEnum } from '../enums/LeadSourceEnum';
+
+export class SaveLeadRequest {
+    @Expose() @IsString() @MinLength(1) @MaxLength(200) name!: string;
+    @Expose() @IsOptional() @IsEmail() email?: string;
+    @Expose() @IsOptional() @IsString() phone?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(200) company?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(500) notes?: string;
+    @Expose() @IsOptional() @IsEnum(LeadSourceEnum) source?: LeadSourceEnum;
+}

package/src/networkConnector/dtos/SaveLeadResponse.ts

@@ -0,0 +1,5 @@
+export interface SaveLeadResponse {
+    leadId: string;
+    profileId: string;
+    createdAt: number;
+}

package/src/networkConnector/dtos/UpdateLeadGroupRequest.ts

@@ -0,0 +1,7 @@
+import { Expose } from 'class-transformer';
+import { IsString, IsOptional, MaxLength, MinLength } from 'class-validator';
+
+export class UpdateLeadGroupRequest {
+    @Expose() @IsOptional() @IsString() @MinLength(1) @MaxLength(100) name?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(500) description?: string;
+}

package/src/networkConnector/dtos/UpdateProfileRequest.ts

@@ -0,0 +1,16 @@
+import { Expose } from 'class-transformer';
+import { IsString, IsOptional, IsEnum, IsObject, MaxLength, MinLength } from 'class-validator';
+import { ProfileStatusEnum } from '../enums/ProfileStatusEnum';
+
+export class UpdateProfileRequest {
+    @Expose() @IsOptional() @IsString() @MinLength(1) @MaxLength(100) firstName?: string;
+    @Expose() @IsOptional() @IsString() @MinLength(1) @MaxLength(100) lastName?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(200) title?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(200) company?: string;
+    @Expose() @IsOptional() @IsString() @MinLength(2) @MaxLength(100) slug?: string;
+    @Expose() @IsOptional() @IsString() phone?: string;
+    @Expose() @IsOptional() @IsString() email?: string;
+    @Expose() @IsOptional() @IsString() @MaxLength(500) bio?: string;
+    @Expose() @IsOptional() @IsObject() socialLinks?: Record<string, string>;
+    @Expose() @IsOptional() @IsEnum(ProfileStatusEnum) status?: ProfileStatusEnum;
+}

package/src/networkConnector/enums/LeadSourceEnum.ts

@@ -0,0 +1,6 @@
+export enum LeadSourceEnum {
+    QR_SCAN = 'QR_SCAN',
+    DIRECT_LINK = 'DIRECT_LINK',
+    SHARED_CONTACT = 'SHARED_CONTACT',
+    WALLET_PASS = 'WALLET_PASS',
+}

package/src/networkConnector/enums/LeadStatusEnum.ts

@@ -0,0 +1,6 @@
+export enum LeadStatusEnum {
+    NEW = 'NEW',
+    CONTACTED = 'CONTACTED',
+    CONVERTED = 'CONVERTED',
+    ARCHIVED = 'ARCHIVED',
+}

package/src/networkConnector/enums/PhotoContentType.ts

@@ -0,0 +1,5 @@
+export enum PhotoContentType {
+    JPEG = 'image/jpeg',
+    PNG = 'image/png',
+    WEBP = 'image/webp',
+}

package/src/networkConnector/enums/ProfileStatusEnum.ts

@@ -0,0 +1,5 @@
+export enum ProfileStatusEnum {
+    ACTIVE = 'ACTIVE',
+    INACTIVE = 'INACTIVE',
+    DRAFT = 'DRAFT',
+}

package/src/networkConnector/index.ts

@@ -0,0 +1,30 @@
+// Enums
+export * from './enums/ProfileStatusEnum';
+export * from './enums/LeadSourceEnum';
+export * from './enums/LeadStatusEnum';
+export * from './enums/PhotoContentType';
+
+// Profile DTOs
+export * from './dtos/CreateProfileRequest';
+export * from './dtos/UpdateProfileRequest';
+export * from './dtos/ProfileResponse';
+export * from './dtos/ListProfilesResponse';
+export * from './dtos/DeleteProfileResponse';
+
+// Lead DTOs
+export * from './dtos/SaveLeadRequest';
+export * from './dtos/SaveLeadResponse';
+export * from './dtos/LeadResponse';
+export * from './dtos/ListLeadsResponse';
+
+// Lead Group DTOs
+export * from './dtos/CreateLeadGroupRequest';
+export * from './dtos/UpdateLeadGroupRequest';
+export * from './dtos/AssignLeadToGroupRequest';
+export * from './dtos/LeadGroupResponse';
+export * from './dtos/ListLeadGroupsResponse';
+
+// Photo DTOs
+export * from './dtos/GetPhotoUploadUrlRequest';
+export * from './dtos/PhotoUploadUrlResponse';
+export * from './dtos/DeletePhotoResponse';

package/src/platformRbac/dtos/AuthContext.ts

@@ -19,10 +19,10 @@ export interface AuthContext {
     permissions: Permission[];
     resolvedAt: string;
     issuer?: string;
-    /** Bitset base64url de permisos efectivos (token-as-cache). Ausente → fallback al resolver/claim. */
+    /** @deprecated RBAC Token Flaco (DEC-RBAC-008): el bitset muere; el adapter resuelve permisos frescos desde DDB. Se conserva el campo para compat de tokens viejos en transición. */
     permBits?: string;
-    /** Versión del catálogo (PERMS_VERSION) con la que se construyó permBits. */
+    /** @deprecated DEC-RBAC-008: versión del catálogo del bitset. No se usa en el modelo token-flaco. */
     permVer?: number;
-    /** Epoch de permisos del tenant al momento de emitir el token. */
+    /** @deprecated DEC-RBAC-008: epoch de permisos. El authorizer ya no lo chequea. */
     permsEpoch?: number;
 }

package/src/platformRbac/tenantTypes.ts

@@ -43,9 +43,10 @@ export function tableSuffixForLevel(type: TenantType, level: PermissionScope): s
 }
 
 /**
- * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
- * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
- * así que un orden global concatenado es seguro. Sin duplicados.
+ * Orden global de scopes para ORDENAR (ej. UI): PLATFORM, TENANT + niveles de cada tipo.
+ * ⚠️ NO usar para COBERTURA de autorización: es un orden total que cruzaría ramas
+ * (sugeriría falsamente que RETAILER cubre GROUP). La cobertura se decide con una relación
+ * explícita por niveles — ver `canAccess`/`scopeCovers` en @fiado/gateway-adapter (DEC-RBAC-010).
  */
 export function scopeRankOrder(): PermissionScope[] {
     const order: PermissionScope[] = [PermissionScope.PLATFORM, PermissionScope.TENANT];

package/src/transaction/dtos/CreateDisputePrivateRequest.ts

@@ -0,0 +1,19 @@
+/**
+ * Request de alta multi-canal de reclamación por el OC (BO-R27 Fase A, §3.5).
+ * POST disputes — privado (VPC/VPN). Para reclamaciones recibidas por canal no-app
+ * (teléfono 202, correo 204, otros 205) que hoy no generan folio y se pierden del R27.
+ */
+export class CreateDisputePrivateRequest {
+    directoryId: string;            // uuid cliente, requerido
+    channel: number;                // 202|204|205 (206 sólo si el OC captura lo dictado por la app)
+    originatorRole: string;         // "OC"
+    originatorUserId: string;       // email del OC
+    disputeReason: number;          // catálogo R27
+    disputeObject: number;          // catálogo R27
+    disputeObjectChannel: number;   // catálogo R27
+    amount: number;                 // > 0
+    description: string;            // 20-2000 chars
+    dateOfDisputedTx: string;       // ISO, no futura
+    disputedTxNumber?: string;      // opcional
+    clientRequestId: string;        // uuid-v4 del Dashboard, idempotencia
+}

package/src/transaction/dtos/ReopenDisputeRequest.ts

@@ -0,0 +1,8 @@
+/**
+ * Request de reapertura de reclamación (BO-R27 Fase A, §3.1).
+ * POST disputes/{folioId}/reopen — privado (VPC/VPN). Transición 102 -> 103.
+ * La dispara la app móvil del cliente cuando discrepa con un dictamen improcedente.
+ */
+export class ReopenDisputeRequest {
+    reopenReason: string;   // requerido, max 500 chars
+}

package/src/transaction/index.ts

@@ -2,6 +2,8 @@
 export * from './dtos/CounterQueryResponse';
 export * from './dtos/UpdateR27StatusRequest';
 export * from './dtos/UpdateR27StatusResponse';
+export * from './dtos/ReopenDisputeRequest';
+export * from './dtos/CreateDisputePrivateRequest';
 export * from './dtos/TransactionCreateRequest';
 export * from './dtos/TransactionCreateResponse';
 export * from './dtos/TransactionGetDetailResponse';