@fiado/type-kit 3.139.0 → 3.141.0

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.d.ts

@@ -0,0 +1,7 @@
+declare const ALLOWED_MFA_TYPES: readonly ["SOFTWARE_TOKEN_MFA"];
+export type AllowedMfaType = (typeof ALLOWED_MFA_TYPES)[number];
+export declare class MfaPoolConfig {
+    requireMfa: boolean;
+    mfaTypes: AllowedMfaType[];
+}
+export {};

package/bin/{platformRbac/dtos/ResendSelfRegisterOtpRequest.js → cognitoBackofficeConnector/dtos/MfaPoolConfig.js}

@@ -9,28 +9,28 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendSelfRegisterOtpRequest = void 0;
+exports.MfaPoolConfig = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
-/**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
- */
-class ResendSelfRegisterOtpRequest {
+const MfaTypesRequiresOne_1 = require("../validators/MfaTypesRequiresOne");
+// EMAIL_OTP removido (3.41.0): el cognito-backoffice-connector no provisiona
+// EmailMfaConfiguration a nivel pool (requiere infra SES que no está montada
+// y la integración con messages-lambda aún no tiene diseño). Ver TD-020 +
+// DEC-001 en cognito-backoffice-connector/docs/. Si se reintroduce, agregar
+// 'EMAIL_OTP' a este array.
+const ALLOWED_MFA_TYPES = ['SOFTWARE_TOKEN_MFA'];
+class MfaPoolConfig {
 }
-exports.ResendSelfRegisterOtpRequest = ResendSelfRegisterOtpRequest;
+exports.MfaPoolConfig = MfaPoolConfig;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "tenantId", void 0);
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MfaPoolConfig.prototype, "requireMfa", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
-    __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "email", void 0);
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsIn)(ALLOWED_MFA_TYPES, { each: true }),
+    (0, class_validator_1.Validate)(MfaTypesRequiresOne_1.MfaTypesRequiresOne),
+    __metadata("design:type", Array)
+], MfaPoolConfig.prototype, "mfaTypes", void 0);

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.d.ts

@@ -0,0 +1,20 @@
+import { PoolKind } from '../../rbac/enums/PoolKind';
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+export declare class PoolConfigResponse {
+    userPoolId: string;
+    userPoolArn: string;
+    region: string;
+    poolKind: PoolKind;
+    displayName: string;
+    appClients: Record<string, {
+        clientId: string;
+        clientName: string;
+    }>;
+    status: 'active' | 'deprecated';
+    createdAt: number;
+    updatedAt: number;
+}

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolConfigResponse = void 0;
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+class PoolConfigResponse {
+}
+exports.PoolConfigResponse = PoolConfigResponse;

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.d.ts

@@ -0,0 +1,4 @@
+import { PoolConfigResponse } from './PoolConfigResponse';
+export declare class PoolsListResponse {
+    pools: PoolConfigResponse[];
+}

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolsListResponse = void 0;
+class PoolsListResponse {
+}
+exports.PoolsListResponse = PoolsListResponse;

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.d.ts

@@ -0,0 +1,17 @@
+import { ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+export declare class MfaTypesRequiresOne implements ValidatorConstraintInterface {
+    validate(mfaTypes: unknown, args: ValidationArguments): boolean;
+    defaultMessage(): string;
+}

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaTypesRequiresOne = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+let MfaTypesRequiresOne = class MfaTypesRequiresOne {
+    validate(mfaTypes, args) {
+        const obj = args.object;
+        if (obj.requireMfa === true) {
+            return Array.isArray(mfaTypes) && mfaTypes.length >= 1;
+        }
+        // requireMfa: false → cualquier mfaTypes pasa.
+        return true;
+    }
+    defaultMessage() {
+        return 'mfaTypes requiere al menos un tipo cuando requireMfa=true';
+    }
+};
+exports.MfaTypesRequiresOne = MfaTypesRequiresOne;
+exports.MfaTypesRequiresOne = MfaTypesRequiresOne = __decorate([
+    (0, class_validator_1.ValidatorConstraint)({ name: 'MfaTypesRequiresOneWhenMfaRequired', async: false })
+], MfaTypesRequiresOne);

package/bin/rbac/enums/PoolKind.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tipo de User Pool de Cognito desde la perspectiva del modelo RBAC Fiado.
+ *
+ * Origen: spec del proyecto `cognito-backoffice-connector` (Fase 0, componente 01
+ * documento `docs/superpowers/specs/2026-05-26-cognito-connector-decisiones-pendientes-design.md`).
+ *
+ * Decisión (TD-003): el proyecto converge en estos 2 valores. El documento componente 03
+ * lista 3 valores (incluyendo una variante adicional) pero queda como outlier — la
+ * decisión vigente en los 6 docs restantes y en el plan de implementación es 2 valores:
+ *  - BACKOFFICE_PLATFORM — pool del backoffice de plataforma (cross-tenant)
+ *  - BACKOFFICE_TENANT — pool por tenant (multi-tenant isolation)
+ */
+export declare enum PoolKind {
+    BACKOFFICE_PLATFORM = "BACKOFFICE_PLATFORM",
+    BACKOFFICE_TENANT = "BACKOFFICE_TENANT"
+}

package/bin/rbac/enums/PoolKind.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolKind = void 0;
+/**
+ * Tipo de User Pool de Cognito desde la perspectiva del modelo RBAC Fiado.
+ *
+ * Origen: spec del proyecto `cognito-backoffice-connector` (Fase 0, componente 01
+ * documento `docs/superpowers/specs/2026-05-26-cognito-connector-decisiones-pendientes-design.md`).
+ *
+ * Decisión (TD-003): el proyecto converge en estos 2 valores. El documento componente 03
+ * lista 3 valores (incluyendo una variante adicional) pero queda como outlier — la
+ * decisión vigente en los 6 docs restantes y en el plan de implementación es 2 valores:
+ *  - BACKOFFICE_PLATFORM — pool del backoffice de plataforma (cross-tenant)
+ *  - BACKOFFICE_TENANT — pool por tenant (multi-tenant isolation)
+ */
+var PoolKind;
+(function (PoolKind) {
+    PoolKind["BACKOFFICE_PLATFORM"] = "BACKOFFICE_PLATFORM";
+    PoolKind["BACKOFFICE_TENANT"] = "BACKOFFICE_TENANT";
+})(PoolKind || (exports.PoolKind = PoolKind = {}));

package/bin/rbac/index.d.ts

@@ -0,0 +1 @@
+export * from './enums/PoolKind';

package/bin/rbac/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./enums/PoolKind"), exports);

package/bin/remittance/dtos/RemittanceAuditLog.d.ts

@@ -0,0 +1,42 @@
+import { AuditAction } from "../enums/AuditAction";
+import { AuditEntityType } from "../enums/AuditEntityType";
+/**
+ * DTOs del audit trail del backoffice de remesas (RemittanceAuditLog_GT, dueño:
+ * remittance-business). Append-only: registra "quién cambió qué, cuándo" en cada
+ * mutación (Configuración, Variables Operativas y, a futuro, suspend/reactivate
+ * desde el connector vía api-invoker — por eso el request vive en type-kit).
+ *
+ * MVP persiste `summary` + `after` (snapshot nuevo); `before` se agrega después
+ * si la UI quiere diff visual.
+ */
+/** Request de append (helper `recordAudit` en rb; futuro cross-lambda). */
+export declare class AuditAppendRequest {
+    entityType: AuditEntityType;
+    /** Id de la entidad afectada (cohortId, segmentId, directoryId…). */
+    entityId: string;
+    action: AuditAction;
+    /** Email del operador (claim del JWT) o "sistema" para jobs. */
+    actor: string;
+    /** Descripción legible ("Editó condiciones del cohort 'Activo'"). */
+    summary: string;
+    /** Snapshot del estado nuevo de la entidad (opcional). */
+    after?: Record<string, unknown>;
+}
+/** Entrada del audit trail (response). */
+export declare class AuditLogEntry {
+    entityType: AuditEntityType;
+    /** SK: ISO-8601 + `#<uuid>` (orden cronológico + unicidad dentro del entityType). */
+    at: string;
+    actor: string;
+    entityId: string;
+    action: AuditAction;
+    summary: string;
+    after: Record<string, unknown> | null;
+    createdAt: string;
+}
+/** Response de GET /backoffice/audit (paginación estándar index/pageSize). */
+export declare class AuditListResponse {
+    items: AuditLogEntry[];
+    /** Cursor opaco (base64) para la próxima página; null/ausente = última. */
+    index?: string | null;
+}

package/bin/remittance/dtos/RemittanceAuditLog.js

@@ -0,0 +1,62 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditListResponse = exports.AuditLogEntry = exports.AuditAppendRequest = void 0;
+const class_validator_1 = require("class-validator");
+const AuditAction_1 = require("../enums/AuditAction");
+const AuditEntityType_1 = require("../enums/AuditEntityType");
+/**
+ * DTOs del audit trail del backoffice de remesas (RemittanceAuditLog_GT, dueño:
+ * remittance-business). Append-only: registra "quién cambió qué, cuándo" en cada
+ * mutación (Configuración, Variables Operativas y, a futuro, suspend/reactivate
+ * desde el connector vía api-invoker — por eso el request vive en type-kit).
+ *
+ * MVP persiste `summary` + `after` (snapshot nuevo); `before` se agrega después
+ * si la UI quiere diff visual.
+ */
+/** Request de append (helper `recordAudit` en rb; futuro cross-lambda). */
+class AuditAppendRequest {
+}
+exports.AuditAppendRequest = AuditAppendRequest;
+__decorate([
+    (0, class_validator_1.IsEnum)(AuditEntityType_1.AuditEntityType),
+    __metadata("design:type", String)
+], AuditAppendRequest.prototype, "entityType", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditAppendRequest.prototype, "entityId", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(AuditAction_1.AuditAction),
+    __metadata("design:type", String)
+], AuditAppendRequest.prototype, "action", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditAppendRequest.prototype, "actor", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", String)
+], AuditAppendRequest.prototype, "summary", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], AuditAppendRequest.prototype, "after", void 0);
+/** Entrada del audit trail (response). */
+class AuditLogEntry {
+}
+exports.AuditLogEntry = AuditLogEntry;
+/** Response de GET /backoffice/audit (paginación estándar index/pageSize). */
+class AuditListResponse {
+}
+exports.AuditListResponse = AuditListResponse;

package/bin/remittance/dtos/RemittanceBackofficeTransaction.d.ts

@@ -8,6 +8,12 @@ export declare class RemittanceBackofficeTransaction {
     directoryId: string;
     txNumber: string;
     marketplaceTransactionNumber?: string;
+    /**
+     * Nombre del remitente (usuario de remesas). Se resuelve en el connector
+     * uniendo `directoryId` → `RemittanceUser.fullName` (tabla de remesas), NO
+     * viene de directory. `null` si el usuario aún no tiene `fullName` snapshotteado.
+     */
+    senderName?: string | null;
     beneficiaryId: string;
     beneficiaryName: string;
     countryISO: string;

package/bin/remittance/dtos/RemittanceBackofficeUserView.d.ts

@@ -6,6 +6,12 @@
 export declare class RemittanceBackofficeUserView {
     directoryId: string;
     unirEmail: string;
+    /** Nombre del usuario (snapshot de identidad UNIR en la tabla de remesas). `null` si aún no se snapshoteó. */
+    fullName?: string | null;
+    /** Ciudad del usuario (RemittanceUser.addressCity). `null` si no está poblada. */
+    city?: string | null;
+    /** Estado/provincia del usuario (RemittanceUser.addressState). `null` si no está poblada. */
+    state?: string | null;
     status: string;
     remitterStatus?: string;
     remitterLevel?: string;

package/bin/remittance/dtos/RemittanceCohort.d.ts

@@ -0,0 +1,62 @@
+import { CohortField } from "../enums/CohortField";
+import { CohortOperator } from "../enums/CohortOperator";
+import { CohortRefresh } from "../enums/CohortRefresh";
+/**
+ * DTOs de Cohorts (Dashboard Ops · Configuración §3, EP-26..30).
+ *
+ * Un cohort es un grupo dinámico de clientes definido por condiciones en AND
+ * (rule builder del mockup) que se recalcula periódicamente. Dueño de la tabla:
+ * remittance-business (RemittanceCohorts_GT). Solo se persiste el count (D4.5),
+ * nunca la membership.
+ */
+/** Condición del rule builder: `SI <field> <op> <value>`. Todas en AND. */
+export declare class CohortCondition {
+    field: CohortField;
+    op: CohortOperator;
+    value: number;
+}
+/** Body de EP-27 POST /backoffice/config/cohorts. */
+export declare class CreateCohortRequest {
+    name: string;
+    description?: string;
+    conditions: CohortCondition[];
+    refresh: CohortRefresh;
+}
+/** Body de EP-28 PUT /backoffice/config/cohorts/{id} (reemplazo completo, patrón Save del mockup). */
+export declare class UpdateCohortRequest {
+    name: string;
+    description?: string;
+    conditions: CohortCondition[];
+    refresh: CohortRefresh;
+}
+/** Cohort completo (response). `memberCount`/`pctTotal` son null si nunca se calculó. */
+export declare class Cohort {
+    id: string;
+    name: string;
+    description: string | null;
+    conditions: CohortCondition[];
+    refresh: CohortRefresh;
+    /** Clientes actualmente en el cohort (snapshot del último recálculo). */
+    memberCount: number | null;
+    /** % del total de RemittanceUsers (denominador = todos, no solo ACTIVE). 0-100. */
+    pctTotal: number | null;
+    lastCalculatedAt: string | null;
+    /** ISO — próxima corrida que el cron horario debe honrar (derivado de `refresh`). */
+    nextCalculationAt: string;
+    createdAt: string;
+    updatedAt: string;
+    createdBy: string;
+    updatedBy: string;
+}
+/** Response de EP-26 GET /backoffice/config/cohorts (tabla chica, sin paginación). */
+export declare class CohortListResponse {
+    items: Cohort[];
+}
+/** Response de EP-30 POST /backoffice/config/cohorts/{id}/recalcular. */
+export declare class RecalculateCohortResponse {
+    id: string;
+    memberCount: number;
+    pctTotal: number;
+    lastCalculatedAt: string;
+    nextCalculationAt: string;
+}

package/bin/remittance/dtos/RemittanceCohort.js

@@ -0,0 +1,105 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RecalculateCohortResponse = exports.CohortListResponse = exports.Cohort = exports.UpdateCohortRequest = exports.CreateCohortRequest = exports.CohortCondition = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const CohortField_1 = require("../enums/CohortField");
+const CohortOperator_1 = require("../enums/CohortOperator");
+const CohortRefresh_1 = require("../enums/CohortRefresh");
+/**
+ * DTOs de Cohorts (Dashboard Ops · Configuración §3, EP-26..30).
+ *
+ * Un cohort es un grupo dinámico de clientes definido por condiciones en AND
+ * (rule builder del mockup) que se recalcula periódicamente. Dueño de la tabla:
+ * remittance-business (RemittanceCohorts_GT). Solo se persiste el count (D4.5),
+ * nunca la membership.
+ */
+/** Condición del rule builder: `SI <field> <op> <value>`. Todas en AND. */
+class CohortCondition {
+}
+exports.CohortCondition = CohortCondition;
+__decorate([
+    (0, class_validator_1.IsEnum)(CohortField_1.CohortField),
+    __metadata("design:type", String)
+], CohortCondition.prototype, "field", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(CohortOperator_1.CohortOperator),
+    __metadata("design:type", String)
+], CohortCondition.prototype, "op", void 0);
+__decorate([
+    (0, class_validator_1.IsNumber)(),
+    __metadata("design:type", Number)
+], CohortCondition.prototype, "value", void 0);
+/** Body de EP-27 POST /backoffice/config/cohorts. */
+class CreateCohortRequest {
+}
+exports.CreateCohortRequest = CreateCohortRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Length)(3, 100),
+    __metadata("design:type", String)
+], CreateCohortRequest.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", String)
+], CreateCohortRequest.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => CohortCondition),
+    __metadata("design:type", Array)
+], CreateCohortRequest.prototype, "conditions", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(CohortRefresh_1.CohortRefresh),
+    __metadata("design:type", String)
+], CreateCohortRequest.prototype, "refresh", void 0);
+/** Body de EP-28 PUT /backoffice/config/cohorts/{id} (reemplazo completo, patrón Save del mockup). */
+class UpdateCohortRequest {
+}
+exports.UpdateCohortRequest = UpdateCohortRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Length)(3, 100),
+    __metadata("design:type", String)
+], UpdateCohortRequest.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", String)
+], UpdateCohortRequest.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => CohortCondition),
+    __metadata("design:type", Array)
+], UpdateCohortRequest.prototype, "conditions", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(CohortRefresh_1.CohortRefresh),
+    __metadata("design:type", String)
+], UpdateCohortRequest.prototype, "refresh", void 0);
+/** Cohort completo (response). `memberCount`/`pctTotal` son null si nunca se calculó. */
+class Cohort {
+}
+exports.Cohort = Cohort;
+/** Response de EP-26 GET /backoffice/config/cohorts (tabla chica, sin paginación). */
+class CohortListResponse {
+}
+exports.CohortListResponse = CohortListResponse;
+/** Response de EP-30 POST /backoffice/config/cohorts/{id}/recalcular. */
+class RecalculateCohortResponse {
+}
+exports.RecalculateCohortResponse = RecalculateCohortResponse;

package/bin/remittance/dtos/index.d.ts

@@ -36,3 +36,5 @@ export * from "./RemittanceBackofficeTxListResponse";
 export * from "./RemittanceBackofficeStats";
 export * from "./RemittanceUserLimits";
 export * from "./RemittanceKyc";
+export * from "./RemittanceCohort";
+export * from "./RemittanceAuditLog";

package/bin/remittance/dtos/index.js

@@ -52,3 +52,5 @@ __exportStar(require("./RemittanceBackofficeTxListResponse"), exports);
 __exportStar(require("./RemittanceBackofficeStats"), exports);
 __exportStar(require("./RemittanceUserLimits"), exports);
 __exportStar(require("./RemittanceKyc"), exports);
+__exportStar(require("./RemittanceCohort"), exports);
+__exportStar(require("./RemittanceAuditLog"), exports);

package/bin/remittance/dtos/internal/RemittanceCohortCount.d.ts

@@ -0,0 +1,16 @@
+import { CohortCondition } from "../RemittanceCohort";
+/**
+ * Contrato interno del puente de recálculo de Cohorts (Opción A):
+ * remittance-business pide al uniteller-connector (dueño de RemittanceUsers_GT /
+ * RemittanceTransactions_GT) cuántos usuarios cumplen las condiciones, vía
+ * api-invoker → POST /backoffice/config/cohorts/count (privado).
+ */
+export declare class CohortCountRequest {
+    conditions: CohortCondition[];
+}
+export declare class CohortCountResponse {
+    /** Usuarios que cumplen TODAS las condiciones (AND). */
+    count: number;
+    /** Universo total de RemittanceUsers (denominador del % — todos, no solo ACTIVE). */
+    total: number;
+}

package/bin/remittance/dtos/internal/RemittanceCohortCount.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CohortCountResponse = exports.CohortCountRequest = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const RemittanceCohort_1 = require("../RemittanceCohort");
+/**
+ * Contrato interno del puente de recálculo de Cohorts (Opción A):
+ * remittance-business pide al uniteller-connector (dueño de RemittanceUsers_GT /
+ * RemittanceTransactions_GT) cuántos usuarios cumplen las condiciones, vía
+ * api-invoker → POST /backoffice/config/cohorts/count (privado).
+ */
+class CohortCountRequest {
+}
+exports.CohortCountRequest = CohortCountRequest;
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => RemittanceCohort_1.CohortCondition),
+    __metadata("design:type", Array)
+], CohortCountRequest.prototype, "conditions", void 0);
+class CohortCountResponse {
+}
+exports.CohortCountResponse = CohortCountResponse;

package/bin/remittance/enums/AuditAction.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Acción registrada en el audit trail del backoffice de remesas (RemittanceAuditLog_GT).
+ * SUSPEND/REACTIVATE quedan listos para el flujo futuro de Operación (EP-02/03).
+ */
+export declare enum AuditAction {
+    CREATE = "CREATE",
+    UPDATE = "UPDATE",
+    DELETE = "DELETE",
+    RECALCULATE = "RECALCULATE",
+    SUSPEND = "SUSPEND",
+    REACTIVATE = "REACTIVATE"
+}

package/bin/remittance/enums/AuditAction.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditAction = void 0;
+/**
+ * Acción registrada en el audit trail del backoffice de remesas (RemittanceAuditLog_GT).
+ * SUSPEND/REACTIVATE quedan listos para el flujo futuro de Operación (EP-02/03).
+ */
+var AuditAction;
+(function (AuditAction) {
+    AuditAction["CREATE"] = "CREATE";
+    AuditAction["UPDATE"] = "UPDATE";
+    AuditAction["DELETE"] = "DELETE";
+    AuditAction["RECALCULATE"] = "RECALCULATE";
+    AuditAction["SUSPEND"] = "SUSPEND";
+    AuditAction["REACTIVATE"] = "REACTIVATE";
+})(AuditAction || (exports.AuditAction = AuditAction = {}));

package/bin/remittance/enums/AuditEntityType.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Módulo/dominio afectado por una entrada del audit trail (PK de RemittanceAuditLog_GT).
+ */
+export declare enum AuditEntityType {
+    COHORT = "COHORT",
+    COMMITTEE = "COMMITTEE",
+    SEGMENT = "SEGMENT",
+    PRICING = "PRICING",
+    PROMOTION = "PROMOTION",
+    RULE = "RULE",
+    USER = "USER"
+}