@fiado/type-kit 3.184.0 → 3.185.0

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.d.ts

@@ -0,0 +1,7 @@
+declare const ALLOWED_MFA_TYPES: readonly ["SOFTWARE_TOKEN_MFA"];
+export type AllowedMfaType = (typeof ALLOWED_MFA_TYPES)[number];
+export declare class MfaPoolConfig {
+    requireMfa: boolean;
+    mfaTypes: AllowedMfaType[];
+}
+export {};

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaPoolConfig = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const MfaTypesRequiresOne_1 = require("../validators/MfaTypesRequiresOne");
+// EMAIL_OTP removido (3.41.0): el cognito-backoffice-connector no provisiona
+// EmailMfaConfiguration a nivel pool (requiere infra SES que no está montada
+// y la integración con messages-lambda aún no tiene diseño). Ver TD-020 +
+// DEC-001 en cognito-backoffice-connector/docs/. Si se reintroduce, agregar
+// 'EMAIL_OTP' a este array.
+const ALLOWED_MFA_TYPES = ['SOFTWARE_TOKEN_MFA'];
+class MfaPoolConfig {
+}
+exports.MfaPoolConfig = MfaPoolConfig;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MfaPoolConfig.prototype, "requireMfa", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsIn)(ALLOWED_MFA_TYPES, { each: true }),
+    (0, class_validator_1.Validate)(MfaTypesRequiresOne_1.MfaTypesRequiresOne),
+    __metadata("design:type", Array)
+], MfaPoolConfig.prototype, "mfaTypes", void 0);

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.d.ts

@@ -0,0 +1,20 @@
+import { PoolKind } from '../../rbac/enums/PoolKind';
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+export declare class PoolConfigResponse {
+    userPoolId: string;
+    userPoolArn: string;
+    region: string;
+    poolKind: PoolKind;
+    displayName: string;
+    appClients: Record<string, {
+        clientId: string;
+        clientName: string;
+    }>;
+    status: 'active' | 'deprecated';
+    createdAt: number;
+    updatedAt: number;
+}

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolConfigResponse = void 0;
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+class PoolConfigResponse {
+}
+exports.PoolConfigResponse = PoolConfigResponse;

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.d.ts

@@ -0,0 +1,4 @@
+import { PoolConfigResponse } from './PoolConfigResponse';
+export declare class PoolsListResponse {
+    pools: PoolConfigResponse[];
+}

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolsListResponse = void 0;
+class PoolsListResponse {
+}
+exports.PoolsListResponse = PoolsListResponse;

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.d.ts

@@ -0,0 +1,17 @@
+import { ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+export declare class MfaTypesRequiresOne implements ValidatorConstraintInterface {
+    validate(mfaTypes: unknown, args: ValidationArguments): boolean;
+    defaultMessage(): string;
+}

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaTypesRequiresOne = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+let MfaTypesRequiresOne = class MfaTypesRequiresOne {
+    validate(mfaTypes, args) {
+        const obj = args.object;
+        if (obj.requireMfa === true) {
+            return Array.isArray(mfaTypes) && mfaTypes.length >= 1;
+        }
+        // requireMfa: false → cualquier mfaTypes pasa.
+        return true;
+    }
+    defaultMessage() {
+        return 'mfaTypes requiere al menos un tipo cuando requireMfa=true';
+    }
+};
+exports.MfaTypesRequiresOne = MfaTypesRequiresOne;
+exports.MfaTypesRequiresOne = MfaTypesRequiresOne = __decorate([
+    (0, class_validator_1.ValidatorConstraint)({ name: 'MfaTypesRequiresOneWhenMfaRequired', async: false })
+], MfaTypesRequiresOne);

package/bin/index.d.ts

@@ -89,5 +89,6 @@ export * as Modelias from './modelias';
 export * as NetworkConnector from './networkConnector';
 export * as EmailVerification from './emailVerification';
 export * as RetailOrg from './retailOrg';
+export * as LoanConfig from './loanConfig';
 export * from './messaging';
 export * from './complaint';

package/bin/index.js

@@ -37,7 +37,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Device = exports.Observations = exports.IssuanceBusiness = exports.Blacklist = exports.CentralPayments = exports.Helpdesk = exports.FiadoApiResponse = exports.Auth = exports.LegalDocumentsBusiness = exports.Role = exports.STPAccount = exports.RiskProfile = exports.FraudPreventionEngine = exports.BBVARst = exports.Stp = exports.BenefitCenter = exports.BankAccount = exports.P2pContact = exports.CreditContract = exports.Contract = exports.ProductCatalog = exports.ContactInfo = exports.TransactionAnalytics = exports.Transaction = exports.TransactionProcessor = exports.GenericMessage = exports.EventBridgeMessage = exports.SessionActivity = exports.NotificationMessages = exports.ServicePayment = exports.Header = exports.Identity = exports.UserTags = exports.Group = exports.File = exports.ExchangeRate = exports.Directory = exports.Currency = exports.Country = exports.Card = exports.Authentication = exports.AppContent = exports.App = exports.Offices = exports.Places = exports.Address = exports.Beneficiary = exports.Activity = exports.Account = exports.Crypto = void 0;
-exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = void 0;
+exports.LoanConfig = exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = void 0;
 exports.Crypto = __importStar(require("./crypto"));
 exports.Account = __importStar(require("./account"));
 exports.Activity = __importStar(require("./activity"));
@@ -143,5 +143,7 @@ exports.EmailVerification = __importStar(require("./emailVerification"));
 // RetailOrg: DTOs/enums del lambda retail-org-business (SureKeep Fase 1 — pista Retail).
 // Dominio de retailers → zonas → tiendas → usuarios retail.
 exports.RetailOrg = __importStar(require("./retailOrg"));
+// LoanConfig: DTOs/enums del lambda loan-config-business (comp 09 — parámetros operativos del SOFOM).
+exports.LoanConfig = __importStar(require("./loanConfig"));
 __exportStar(require("./messaging"), exports);
 __exportStar(require("./complaint"), exports);

package/bin/loanConfig/dtos/Parameter.d.ts

@@ -0,0 +1,23 @@
+import { ModifiableByRoleEnum } from '../enums/ModifiableByRoleEnum';
+import { ParameterTypeEnum } from '../enums/ParameterTypeEnum';
+import { ParameterValueTypeEnum } from '../enums/ParameterValueTypeEnum';
+/**
+ * Parameter — parámetro operativo clave/valor del SOFOM (M6 §8 + §5).
+ * Identidad lógica `parameterId = ${paramType}#${key}` (D1). `value` null → aplica `defaultValue`.
+ */
+export declare class Parameter {
+    parameterId: string;
+    paramType: ParameterTypeEnum;
+    key: string;
+    /** Siempre string; `null` cuando el valor está pendiente de definición por negocio. */
+    value: string | null;
+    valueType: ParameterValueTypeEnum;
+    defaultValue: string;
+    description: string;
+    modifiableBy: ModifiableByRoleEnum;
+    lastModifiedByUserId: string;
+    createdBy: string;
+    updatedBy: string;
+    createdAt: string;
+    updatedAt: string;
+}

package/bin/loanConfig/dtos/Parameter.js

@@ -0,0 +1,93 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Parameter = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const regex_1 = require("../../helpers/constans/regex");
+const ModifiableByRoleEnum_1 = require("../enums/ModifiableByRoleEnum");
+const ParameterTypeEnum_1 = require("../enums/ParameterTypeEnum");
+const ParameterValueTypeEnum_1 = require("../enums/ParameterValueTypeEnum");
+/**
+ * Parameter — parámetro operativo clave/valor del SOFOM (M6 §8 + §5).
+ * Identidad lógica `parameterId = ${paramType}#${key}` (D1). `value` null → aplica `defaultValue`.
+ */
+class Parameter {
+}
+exports.Parameter = Parameter;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "parameterId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ParameterTypeEnum_1.ParameterTypeEnum),
+    __metadata("design:type", String)
+], Parameter.prototype, "paramType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "key", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "value", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ParameterValueTypeEnum_1.ParameterValueTypeEnum),
+    __metadata("design:type", String)
+], Parameter.prototype, "valueType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "defaultValue", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "description", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ModifiableByRoleEnum_1.ModifiableByRoleEnum),
+    __metadata("design:type", String)
+], Parameter.prototype, "modifiableBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "lastModifiedByUserId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "createdBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "updatedBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(regex_1.regexIso8601, { message: 'createdAt debe ser una fecha ISO 8601' }),
+    __metadata("design:type", String)
+], Parameter.prototype, "createdAt", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(regex_1.regexIso8601, { message: 'updatedAt debe ser una fecha ISO 8601' }),
+    __metadata("design:type", String)
+], Parameter.prototype, "updatedAt", void 0);

package/bin/loanConfig/dtos/requests/BulkGetParametersRequest.d.ts

@@ -0,0 +1,9 @@
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+export declare class ParameterKeyRef {
+    paramType: ParameterTypeEnum;
+    key: string;
+}
+/** Body de POST /private/parameters/bulk-get — hot path para consumers (cachean 5 min). */
+export declare class BulkGetParametersRequest {
+    items: ParameterKeyRef[];
+}

package/bin/{platformRbac/dtos/ResendSelfRegisterOtpRequest.js → loanConfig/dtos/requests/BulkGetParametersRequest.js}

@@ -9,28 +9,32 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendSelfRegisterOtpRequest = void 0;
+exports.BulkGetParametersRequest = exports.ParameterKeyRef = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
-/**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
- */
-class ResendSelfRegisterOtpRequest {
+const ParameterTypeEnum_1 = require("../../enums/ParameterTypeEnum");
+class ParameterKeyRef {
 }
-exports.ResendSelfRegisterOtpRequest = ResendSelfRegisterOtpRequest;
+exports.ParameterKeyRef = ParameterKeyRef;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsEnum)(ParameterTypeEnum_1.ParameterTypeEnum),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "tenantId", void 0);
+], ParameterKeyRef.prototype, "paramType", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "email", void 0);
+], ParameterKeyRef.prototype, "key", void 0);
+/** Body de POST /private/parameters/bulk-get — hot path para consumers (cachean 5 min). */
+class BulkGetParametersRequest {
+}
+exports.BulkGetParametersRequest = BulkGetParametersRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayNotEmpty)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => ParameterKeyRef),
+    __metadata("design:type", Array)
+], BulkGetParametersRequest.prototype, "items", void 0);

package/bin/loanConfig/dtos/requests/BulkUpdateParametersRequest.d.ts

@@ -0,0 +1,11 @@
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+export declare class BulkUpdateParameterItem {
+    paramType: ParameterTypeEnum;
+    key: string;
+    value: string | null;
+    reason?: string;
+}
+/** Body de POST /parameters/bulk-update — carga inicial / ajuste masivo. */
+export declare class BulkUpdateParametersRequest {
+    parameters: BulkUpdateParameterItem[];
+}

package/bin/loanConfig/dtos/requests/BulkUpdateParametersRequest.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BulkUpdateParametersRequest = exports.BulkUpdateParameterItem = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const ParameterTypeEnum_1 = require("../../enums/ParameterTypeEnum");
+class BulkUpdateParameterItem {
+}
+exports.BulkUpdateParameterItem = BulkUpdateParameterItem;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ParameterTypeEnum_1.ParameterTypeEnum),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "paramType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "key", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "value", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "reason", void 0);
+/** Body de POST /parameters/bulk-update — carga inicial / ajuste masivo. */
+class BulkUpdateParametersRequest {
+}
+exports.BulkUpdateParametersRequest = BulkUpdateParametersRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayNotEmpty)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => BulkUpdateParameterItem),
+    __metadata("design:type", Array)
+], BulkUpdateParametersRequest.prototype, "parameters", void 0);

package/bin/loanConfig/dtos/requests/UpdateParameterRequest.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Body de PUT /parameters/:paramType/:key. `value` puede ser null (parámetro pendiente).
+ * `reason` opcional en F1; el manager lo exigirá para cambios críticos (modelo-datos §10).
+ */
+export declare class UpdateParameterRequest {
+    value: string | null;
+    reason?: string;
+}

package/bin/{platformRbac/dtos/ResendOtpRequest.js → loanConfig/dtos/requests/UpdateParameterRequest.js}

@@ -9,28 +9,25 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendOtpRequest = void 0;
+exports.UpdateParameterRequest = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 /**
- * Body del POST /auth/resend-otp (público, anónimo). DEC-RBAC-054.
- * Reenvía el OTP del login re-disparando el challenge real CUSTOM_AUTH (EMAIL_OTP) para la
- * identidad SIN password. `tenantId` obligatorio (DEC-064 — el picker ya lo resolvió, NO "solo email").
- * El email se normaliza lowercase server-side. Postura anti-enumeración: respuesta 200 genérica
- * siempre, sin filtrar existencia (ver AuthLoginManager.resendChallengeOtp).
+ * Body de PUT /parameters/:paramType/:key. `value` puede ser null (parámetro pendiente).
+ * `reason` opcional en F1; el manager lo exigirá para cambios críticos (modelo-datos §10).
  */
-class ResendOtpRequest {
+class UpdateParameterRequest {
 }
-exports.ResendOtpRequest = ResendOtpRequest;
+exports.UpdateParameterRequest = UpdateParameterRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "email", void 0);
+], UpdateParameterRequest.prototype, "value", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "tenantId", void 0);
+], UpdateParameterRequest.prototype, "reason", void 0);

package/bin/loanConfig/dtos/responses/ParameterResponse.d.ts

@@ -0,0 +1,28 @@
+import { ModifiableByRoleEnum } from '../../enums/ModifiableByRoleEnum';
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+import { ParameterValueTypeEnum } from '../../enums/ParameterValueTypeEnum';
+/** Shape de salida de un parámetro. `effectiveValue` = value ?? defaultValue. */
+export interface ParameterResponse {
+    parameterId: string;
+    paramType: ParameterTypeEnum;
+    key: string;
+    value: string | null;
+    effectiveValue: string;
+    valueType: ParameterValueTypeEnum;
+    defaultValue: string;
+    description: string;
+    modifiableBy: ModifiableByRoleEnum;
+    lastModifiedByUserId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Respuesta de GET /parameters — agrupado por paramType (flow 08.1). */
+export type ParametersByTypeResponse = Partial<Record<ParameterTypeEnum, ParameterResponse[]>>;
+/** Respuesta de POST /private/parameters/bulk-get. */
+export interface BulkGetParametersResponse {
+    parameters: ParameterResponse[];
+    notFound: {
+        paramType: ParameterTypeEnum;
+        key: string;
+    }[];
+}

package/bin/loanConfig/dtos/responses/ParameterResponse.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/loanConfig/enums/ModifiableByRoleEnum.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
+ * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
+ * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
+ * @enum {string}
+ */
+export declare enum ModifiableByRoleEnum {
+    SUPER_ADMIN = "super_admin",
+    SOFOM_ADMIN = "sofom_admin",
+    RETAILER_ADMIN = "retailer_admin"
+}

package/bin/loanConfig/enums/ModifiableByRoleEnum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModifiableByRoleEnum = void 0;
+/**
+ * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
+ * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
+ * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
+ * @enum {string}
+ */
+var ModifiableByRoleEnum;
+(function (ModifiableByRoleEnum) {
+    ModifiableByRoleEnum["SUPER_ADMIN"] = "super_admin";
+    ModifiableByRoleEnum["SOFOM_ADMIN"] = "sofom_admin";
+    ModifiableByRoleEnum["RETAILER_ADMIN"] = "retailer_admin";
+})(ModifiableByRoleEnum || (exports.ModifiableByRoleEnum = ModifiableByRoleEnum = {}));

package/bin/loanConfig/enums/ParameterTypeEnum.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Sub-tipos de parámetro operativo del SOFOM (M6 §8 = 13 + SCORING de §5 = 14).
+ * @enum {string}
+ */
+export declare enum ParameterTypeEnum {
+    CREDIT = "CREDIT",
+    WARRANTY = "WARRANTY",
+    WELCOME_BONUS = "WELCOME_BONUS",
+    MORA_BLOCK = "MORA_BLOCK",
+    UNBLOCK = "UNBLOCK",
+    PAY_INVESTIGATION = "PAY_INVESTIGATION",
+    COLLECTIONS = "COLLECTIONS",
+    ANTI_FRAUD = "ANTI_FRAUD",
+    REMITTANCE = "REMITTANCE",
+    NOTIFICATIONS = "NOTIFICATIONS",
+    CROSS_BORDER = "CROSS_BORDER",
+    WIZARD = "WIZARD",
+    INTEGRATIONS = "INTEGRATIONS",
+    SCORING = "SCORING"
+}

package/bin/loanConfig/enums/ParameterTypeEnum.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterTypeEnum = void 0;
+/**
+ * Sub-tipos de parámetro operativo del SOFOM (M6 §8 = 13 + SCORING de §5 = 14).
+ * @enum {string}
+ */
+var ParameterTypeEnum;
+(function (ParameterTypeEnum) {
+    ParameterTypeEnum["CREDIT"] = "CREDIT";
+    ParameterTypeEnum["WARRANTY"] = "WARRANTY";
+    ParameterTypeEnum["WELCOME_BONUS"] = "WELCOME_BONUS";
+    ParameterTypeEnum["MORA_BLOCK"] = "MORA_BLOCK";
+    ParameterTypeEnum["UNBLOCK"] = "UNBLOCK";
+    ParameterTypeEnum["PAY_INVESTIGATION"] = "PAY_INVESTIGATION";
+    ParameterTypeEnum["COLLECTIONS"] = "COLLECTIONS";
+    ParameterTypeEnum["ANTI_FRAUD"] = "ANTI_FRAUD";
+    ParameterTypeEnum["REMITTANCE"] = "REMITTANCE";
+    ParameterTypeEnum["NOTIFICATIONS"] = "NOTIFICATIONS";
+    ParameterTypeEnum["CROSS_BORDER"] = "CROSS_BORDER";
+    ParameterTypeEnum["WIZARD"] = "WIZARD";
+    ParameterTypeEnum["INTEGRATIONS"] = "INTEGRATIONS";
+    ParameterTypeEnum["SCORING"] = "SCORING";
+})(ParameterTypeEnum || (exports.ParameterTypeEnum = ParameterTypeEnum = {}));

package/bin/loanConfig/enums/ParameterValueTypeEnum.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Tipo lógico del `value` (siempre persistido como string; el consumer parsea según esto).
+ * Valores en minúscula por contrato del modelo (modelo-datos §8).
+ * @enum {string}
+ */
+export declare enum ParameterValueTypeEnum {
+    STRING = "string",
+    NUMBER = "number",
+    BOOLEAN = "boolean",
+    JSON = "json"
+}

package/bin/loanConfig/enums/ParameterValueTypeEnum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterValueTypeEnum = void 0;
+/**
+ * Tipo lógico del `value` (siempre persistido como string; el consumer parsea según esto).
+ * Valores en minúscula por contrato del modelo (modelo-datos §8).
+ * @enum {string}
+ */
+var ParameterValueTypeEnum;
+(function (ParameterValueTypeEnum) {
+    ParameterValueTypeEnum["STRING"] = "string";
+    ParameterValueTypeEnum["NUMBER"] = "number";
+    ParameterValueTypeEnum["BOOLEAN"] = "boolean";
+    ParameterValueTypeEnum["JSON"] = "json";
+})(ParameterValueTypeEnum || (exports.ParameterValueTypeEnum = ParameterValueTypeEnum = {}));

package/bin/loanConfig/index.d.ts

@@ -0,0 +1,8 @@
+export * from './enums/ParameterTypeEnum';
+export * from './enums/ParameterValueTypeEnum';
+export * from './enums/ModifiableByRoleEnum';
+export * from './dtos/Parameter';
+export * from './dtos/requests/UpdateParameterRequest';
+export * from './dtos/requests/BulkUpdateParametersRequest';
+export * from './dtos/requests/BulkGetParametersRequest';
+export * from './dtos/responses/ParameterResponse';

package/bin/loanConfig/index.js

@@ -0,0 +1,27 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./enums/ParameterTypeEnum"), exports);
+__exportStar(require("./enums/ParameterValueTypeEnum"), exports);
+__exportStar(require("./enums/ModifiableByRoleEnum"), exports);
+// Entity DTOs
+__exportStar(require("./dtos/Parameter"), exports);
+// Request DTOs
+__exportStar(require("./dtos/requests/UpdateParameterRequest"), exports);
+__exportStar(require("./dtos/requests/BulkUpdateParametersRequest"), exports);
+__exportStar(require("./dtos/requests/BulkGetParametersRequest"), exports);
+// Response DTOs
+__exportStar(require("./dtos/responses/ParameterResponse"), exports);

package/bin/rbac/enums/PoolKind.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tipo de User Pool de Cognito desde la perspectiva del modelo RBAC Fiado.
+ *
+ * Origen: spec del proyecto `cognito-backoffice-connector` (Fase 0, componente 01
+ * documento `docs/superpowers/specs/2026-05-26-cognito-connector-decisiones-pendientes-design.md`).
+ *
+ * Decisión (TD-003): el proyecto converge en estos 2 valores. El documento componente 03
+ * lista 3 valores (incluyendo una variante adicional) pero queda como outlier — la
+ * decisión vigente en los 6 docs restantes y en el plan de implementación es 2 valores:
+ *  - BACKOFFICE_PLATFORM — pool del backoffice de plataforma (cross-tenant)
+ *  - BACKOFFICE_TENANT — pool por tenant (multi-tenant isolation)
+ */
+export declare enum PoolKind {
+    BACKOFFICE_PLATFORM = "BACKOFFICE_PLATFORM",
+    BACKOFFICE_TENANT = "BACKOFFICE_TENANT"
+}

package/bin/rbac/enums/PoolKind.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolKind = void 0;
+/**
+ * Tipo de User Pool de Cognito desde la perspectiva del modelo RBAC Fiado.
+ *
+ * Origen: spec del proyecto `cognito-backoffice-connector` (Fase 0, componente 01
+ * documento `docs/superpowers/specs/2026-05-26-cognito-connector-decisiones-pendientes-design.md`).
+ *
+ * Decisión (TD-003): el proyecto converge en estos 2 valores. El documento componente 03
+ * lista 3 valores (incluyendo una variante adicional) pero queda como outlier — la
+ * decisión vigente en los 6 docs restantes y en el plan de implementación es 2 valores:
+ *  - BACKOFFICE_PLATFORM — pool del backoffice de plataforma (cross-tenant)
+ *  - BACKOFFICE_TENANT — pool por tenant (multi-tenant isolation)
+ */
+var PoolKind;
+(function (PoolKind) {
+    PoolKind["BACKOFFICE_PLATFORM"] = "BACKOFFICE_PLATFORM";
+    PoolKind["BACKOFFICE_TENANT"] = "BACKOFFICE_TENANT";
+})(PoolKind || (exports.PoolKind = PoolKind = {}));

package/bin/rbac/index.d.ts

@@ -0,0 +1 @@
+export * from './enums/PoolKind';

package/bin/rbac/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./enums/PoolKind"), exports);

package/bin/walletFunding/dtos/CancelFundingReferenceRequest.d.ts

@@ -0,0 +1,5 @@
+export declare class CancelFundingReferenceRequest {
+    fundingId: string;
+    directoryId: string;
+    idempotencyKey: string;
+}

package/bin/walletFunding/dtos/CancelFundingReferenceRequest.js

@@ -0,0 +1,31 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingReferenceRequest = void 0;
+const class_validator_1 = require("class-validator");
+class CancelFundingReferenceRequest {
+}
+exports.CancelFundingReferenceRequest = CancelFundingReferenceRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingReferenceRequest.prototype, "fundingId", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingReferenceRequest.prototype, "directoryId", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingReferenceRequest.prototype, "idempotencyKey", void 0);

package/bin/walletFunding/dtos/CancelFundingReferenceResponse.d.ts

@@ -0,0 +1,7 @@
+import { BenefitPaymentStatusEnum } from "../../benefitCenter/enums/BenefitPaymentStatusEnum";
+import { WalletFundingErrorCodeEnum } from "../enums/WalletFundingErrorCodeEnum";
+export declare class CancelFundingReferenceResponse {
+    fundingId: string;
+    status: BenefitPaymentStatusEnum;
+    errorCode?: WalletFundingErrorCodeEnum;
+}

package/bin/walletFunding/dtos/CancelFundingReferenceResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingReferenceResponse = void 0;
+class CancelFundingReferenceResponse {
+}
+exports.CancelFundingReferenceResponse = CancelFundingReferenceResponse;

package/bin/walletFunding/dtos/CancelFundingRequest.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Request del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `fundingId` viaja en el path, `directoryId` se resuelve del JWT.
+ * `providerModuleName` permite al marketplace rutear al publisher correcto
+ * sin tener que persistir el mapping (el wallet-app sabe el moduleName
+ * porque vino en la respuesta del authorize).
+ */
+export declare class CancelFundingRequest {
+    idempotencyKey: string;
+    providerModuleName: string;
+}

package/bin/walletFunding/dtos/CancelFundingRequest.js

@@ -0,0 +1,33 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingRequest = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * Request del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `fundingId` viaja en el path, `directoryId` se resuelve del JWT.
+ * `providerModuleName` permite al marketplace rutear al publisher correcto
+ * sin tener que persistir el mapping (el wallet-app sabe el moduleName
+ * porque vino en la respuesta del authorize).
+ */
+class CancelFundingRequest {
+}
+exports.CancelFundingRequest = CancelFundingRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelFundingRequest.prototype, "idempotencyKey", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(128),
+    __metadata("design:type", String)
+], CancelFundingRequest.prototype, "providerModuleName", void 0);

package/bin/walletFunding/dtos/CancelFundingResponse.d.ts

@@ -0,0 +1,14 @@
+import { BenefitPaymentStatusEnum } from "../../benefitCenter/enums/BenefitPaymentStatusEnum";
+import { WalletFundingErrorCodeEnum } from "../enums/WalletFundingErrorCodeEnum";
+/**
+ * Response del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `status` reusa `BenefitPaymentStatusEnum` (APPROVED = cancel aceptado;
+ * REJECTED = no se pudo) para consistencia con `CancelFundingReferenceResponse`
+ * (marketplace ↔ connector). Idempotente: re-cancelar devuelve APPROVED.
+ */
+export declare class CancelFundingResponse {
+    fundingId: string;
+    status: BenefitPaymentStatusEnum;
+    errorCode?: WalletFundingErrorCodeEnum;
+    message?: string;
+}

package/bin/walletFunding/dtos/CancelFundingResponse.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelFundingResponse = void 0;
+/**
+ * Response del cancel via Centro de Beneficios (spec 13 v2.0).
+ * `status` reusa `BenefitPaymentStatusEnum` (APPROVED = cancel aceptado;
+ * REJECTED = no se pudo) para consistencia con `CancelFundingReferenceResponse`
+ * (marketplace ↔ connector). Idempotente: re-cancelar devuelve APPROVED.
+ */
+class CancelFundingResponse {
+}
+exports.CancelFundingResponse = CancelFundingResponse;

package/bin/walletFunding/dtos/CancelWalletFundingRequest.d.ts

@@ -0,0 +1,3 @@
+export declare class CancelWalletFundingRequest {
+    idempotencyKey: string;
+}

package/bin/walletFunding/dtos/CancelWalletFundingRequest.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelWalletFundingRequest = void 0;
+const class_validator_1 = require("class-validator");
+class CancelWalletFundingRequest {
+}
+exports.CancelWalletFundingRequest = CancelWalletFundingRequest;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    __metadata("design:type", String)
+], CancelWalletFundingRequest.prototype, "idempotencyKey", void 0);

package/bin/walletFunding/dtos/CancelWalletFundingResponse.d.ts

@@ -0,0 +1,7 @@
+import { BenefitPaymentStatusEnum } from "../../benefitCenter/enums/BenefitPaymentStatusEnum";
+import { WalletFundingErrorCodeEnum } from "../enums/WalletFundingErrorCodeEnum";
+export declare class CancelWalletFundingResponse {
+    status: BenefitPaymentStatusEnum;
+    errorCode?: WalletFundingErrorCodeEnum;
+    fundingId?: string;
+}

package/bin/walletFunding/dtos/CancelWalletFundingResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CancelWalletFundingResponse = void 0;
+class CancelWalletFundingResponse {
+}
+exports.CancelWalletFundingResponse = CancelWalletFundingResponse;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.184.0",
+  "version": "3.185.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/index.ts

@@ -103,5 +103,7 @@ export * as EmailVerification from './emailVerification';
 // RetailOrg: DTOs/enums del lambda retail-org-business (SureKeep Fase 1 — pista Retail).
 // Dominio de retailers → zonas → tiendas → usuarios retail.
 export * as RetailOrg from './retailOrg';
+// LoanConfig: DTOs/enums del lambda loan-config-business (comp 09 — parámetros operativos del SOFOM).
+export * as LoanConfig from './loanConfig';
 export * from './messaging';
 export * from './complaint';

package/src/loanConfig/dtos/Parameter.ts

@@ -0,0 +1,68 @@
+import { Expose } from 'class-transformer';
+import { IsEnum, IsOptional, IsString, Matches } from 'class-validator';
+import { regexIso8601 } from '../../helpers/constans/regex';
+import { ModifiableByRoleEnum } from '../enums/ModifiableByRoleEnum';
+import { ParameterTypeEnum } from '../enums/ParameterTypeEnum';
+import { ParameterValueTypeEnum } from '../enums/ParameterValueTypeEnum';
+
+/**
+ * Parameter — parámetro operativo clave/valor del SOFOM (M6 §8 + §5).
+ * Identidad lógica `parameterId = ${paramType}#${key}` (D1). `value` null → aplica `defaultValue`.
+ */
+export class Parameter {
+    @Expose()
+    @IsString()
+    parameterId!: string;
+
+    @Expose()
+    @IsEnum(ParameterTypeEnum)
+    paramType!: ParameterTypeEnum;
+
+    @Expose()
+    @IsString()
+    key!: string;
+
+    /** Siempre string; `null` cuando el valor está pendiente de definición por negocio. */
+    @Expose()
+    @IsOptional()
+    @IsString()
+    value!: string | null;
+
+    @Expose()
+    @IsEnum(ParameterValueTypeEnum)
+    valueType!: ParameterValueTypeEnum;
+
+    @Expose()
+    @IsString()
+    defaultValue!: string;
+
+    @Expose()
+    @IsString()
+    description!: string;
+
+    @Expose()
+    @IsEnum(ModifiableByRoleEnum)
+    modifiableBy!: ModifiableByRoleEnum;
+
+    @Expose()
+    @IsString()
+    lastModifiedByUserId!: string;
+
+    @Expose()
+    @IsString()
+    createdBy!: string;
+
+    @Expose()
+    @IsString()
+    updatedBy!: string;
+
+    @Expose()
+    @IsString()
+    @Matches(regexIso8601, { message: 'createdAt debe ser una fecha ISO 8601' })
+    createdAt!: string;
+
+    @Expose()
+    @IsString()
+    @Matches(regexIso8601, { message: 'updatedAt debe ser una fecha ISO 8601' })
+    updatedAt!: string;
+}

package/src/loanConfig/dtos/requests/BulkGetParametersRequest.ts

@@ -0,0 +1,23 @@
+import { Expose, Type } from 'class-transformer';
+import { ArrayNotEmpty, IsArray, IsEnum, IsString, ValidateNested } from 'class-validator';
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+
+export class ParameterKeyRef {
+    @Expose()
+    @IsEnum(ParameterTypeEnum)
+    paramType!: ParameterTypeEnum;
+
+    @Expose()
+    @IsString()
+    key!: string;
+}
+
+/** Body de POST /private/parameters/bulk-get — hot path para consumers (cachean 5 min). */
+export class BulkGetParametersRequest {
+    @Expose()
+    @IsArray()
+    @ArrayNotEmpty()
+    @ValidateNested({ each: true })
+    @Type(() => ParameterKeyRef)
+    items!: ParameterKeyRef[];
+}

package/src/loanConfig/dtos/requests/BulkUpdateParametersRequest.ts

@@ -0,0 +1,33 @@
+import { Expose, Type } from 'class-transformer';
+import { ArrayNotEmpty, IsArray, IsEnum, IsOptional, IsString, ValidateNested } from 'class-validator';
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+
+export class BulkUpdateParameterItem {
+    @Expose()
+    @IsEnum(ParameterTypeEnum)
+    paramType!: ParameterTypeEnum;
+
+    @Expose()
+    @IsString()
+    key!: string;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    value!: string | null;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    reason?: string;
+}
+
+/** Body de POST /parameters/bulk-update — carga inicial / ajuste masivo. */
+export class BulkUpdateParametersRequest {
+    @Expose()
+    @IsArray()
+    @ArrayNotEmpty()
+    @ValidateNested({ each: true })
+    @Type(() => BulkUpdateParameterItem)
+    parameters!: BulkUpdateParameterItem[];
+}

package/src/loanConfig/dtos/requests/UpdateParameterRequest.ts

@@ -0,0 +1,18 @@
+import { Expose } from 'class-transformer';
+import { IsOptional, IsString } from 'class-validator';
+
+/**
+ * Body de PUT /parameters/:paramType/:key. `value` puede ser null (parámetro pendiente).
+ * `reason` opcional en F1; el manager lo exigirá para cambios críticos (modelo-datos §10).
+ */
+export class UpdateParameterRequest {
+    @Expose()
+    @IsOptional()
+    @IsString()
+    value!: string | null;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    reason?: string;
+}

package/src/loanConfig/dtos/responses/ParameterResponse.ts

@@ -0,0 +1,28 @@
+import { ModifiableByRoleEnum } from '../../enums/ModifiableByRoleEnum';
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+import { ParameterValueTypeEnum } from '../../enums/ParameterValueTypeEnum';
+
+/** Shape de salida de un parámetro. `effectiveValue` = value ?? defaultValue. */
+export interface ParameterResponse {
+    parameterId: string;
+    paramType: ParameterTypeEnum;
+    key: string;
+    value: string | null;
+    effectiveValue: string;
+    valueType: ParameterValueTypeEnum;
+    defaultValue: string;
+    description: string;
+    modifiableBy: ModifiableByRoleEnum;
+    lastModifiedByUserId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+
+/** Respuesta de GET /parameters — agrupado por paramType (flow 08.1). */
+export type ParametersByTypeResponse = Partial<Record<ParameterTypeEnum, ParameterResponse[]>>;
+
+/** Respuesta de POST /private/parameters/bulk-get. */
+export interface BulkGetParametersResponse {
+    parameters: ParameterResponse[];
+    notFound: { paramType: ParameterTypeEnum; key: string }[];
+}

package/src/loanConfig/enums/ModifiableByRoleEnum.ts

@@ -0,0 +1,11 @@
+/**
+ * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
+ * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
+ * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
+ * @enum {string}
+ */
+export enum ModifiableByRoleEnum {
+    SUPER_ADMIN = 'super_admin',
+    SOFOM_ADMIN = 'sofom_admin',
+    RETAILER_ADMIN = 'retailer_admin',
+}

package/src/loanConfig/enums/ParameterTypeEnum.ts

@@ -0,0 +1,20 @@
+/**
+ * Sub-tipos de parámetro operativo del SOFOM (M6 §8 = 13 + SCORING de §5 = 14).
+ * @enum {string}
+ */
+export enum ParameterTypeEnum {
+    CREDIT = 'CREDIT',
+    WARRANTY = 'WARRANTY',
+    WELCOME_BONUS = 'WELCOME_BONUS',
+    MORA_BLOCK = 'MORA_BLOCK',
+    UNBLOCK = 'UNBLOCK',
+    PAY_INVESTIGATION = 'PAY_INVESTIGATION',
+    COLLECTIONS = 'COLLECTIONS',
+    ANTI_FRAUD = 'ANTI_FRAUD',
+    REMITTANCE = 'REMITTANCE',
+    NOTIFICATIONS = 'NOTIFICATIONS',
+    CROSS_BORDER = 'CROSS_BORDER',
+    WIZARD = 'WIZARD',
+    INTEGRATIONS = 'INTEGRATIONS',
+    SCORING = 'SCORING',
+}

package/src/loanConfig/enums/ParameterValueTypeEnum.ts

@@ -0,0 +1,11 @@
+/**
+ * Tipo lógico del `value` (siempre persistido como string; el consumer parsea según esto).
+ * Valores en minúscula por contrato del modelo (modelo-datos §8).
+ * @enum {string}
+ */
+export enum ParameterValueTypeEnum {
+    STRING = 'string',
+    NUMBER = 'number',
+    BOOLEAN = 'boolean',
+    JSON = 'json',
+}

package/src/loanConfig/index.ts

@@ -0,0 +1,14 @@
+export * from './enums/ParameterTypeEnum';
+export * from './enums/ParameterValueTypeEnum';
+export * from './enums/ModifiableByRoleEnum';
+
+// Entity DTOs
+export * from './dtos/Parameter';
+
+// Request DTOs
+export * from './dtos/requests/UpdateParameterRequest';
+export * from './dtos/requests/BulkUpdateParametersRequest';
+export * from './dtos/requests/BulkGetParametersRequest';
+
+// Response DTOs
+export * from './dtos/responses/ParameterResponse';

package/bin/platformRbac/dtos/ResendOtpRequest.d.ts

@@ -1,22 +0,0 @@
-import { MfaMethodEnum } from '../enums/MfaMethodEnum';
-/**
- * Body del POST /auth/resend-otp (público, anónimo). DEC-RBAC-054.
- * Reenvía el OTP del login re-disparando el challenge real CUSTOM_AUTH (EMAIL_OTP) para la
- * identidad SIN password. `tenantId` obligatorio (DEC-064 — el picker ya lo resolvió, NO "solo email").
- * El email se normaliza lowercase server-side. Postura anti-enumeración: respuesta 200 genérica
- * siempre, sin filtrar existencia (ver AuthLoginManager.resendChallengeOtp).
- */
-export declare class ResendOtpRequest {
-    email: string;
-    tenantId: string;
-}
-/**
- * Respuesta del resend-otp. `session`/`mfaMethod` frescos del nuevo challenge CUSTOM_AUTH.
- * Plain sin validators (no validamos lo que mandamos al cliente — fiado-validation-and-dtos § 7).
- * Ambos opcionales: en los caminos de rechazo silencioso (anti-enumeración) o ramas sin CUSTOM_AUTH
- * el server responde 200 genérico sin session ni método.
- */
-export interface ResendOtpResponse {
-    session?: string;
-    mfaMethod?: MfaMethodEnum;
-}

package/bin/platformRbac/dtos/ResendSelfRegisterOtpRequest.d.ts

@@ -1,11 +0,0 @@
-/**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
- */
-export declare class ResendSelfRegisterOtpRequest {
-    tenantId: string;
-    email: string;
-}