@fiado/type-kit 3.184.0 → 3.186.0

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.d.ts

@@ -0,0 +1,7 @@
+declare const ALLOWED_MFA_TYPES: readonly ["SOFTWARE_TOKEN_MFA"];
+export type AllowedMfaType = (typeof ALLOWED_MFA_TYPES)[number];
+export declare class MfaPoolConfig {
+    requireMfa: boolean;
+    mfaTypes: AllowedMfaType[];
+}
+export {};

package/bin/cognitoBackofficeConnector/dtos/MfaPoolConfig.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaPoolConfig = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const MfaTypesRequiresOne_1 = require("../validators/MfaTypesRequiresOne");
+// EMAIL_OTP removido (3.41.0): el cognito-backoffice-connector no provisiona
+// EmailMfaConfiguration a nivel pool (requiere infra SES que no está montada
+// y la integración con messages-lambda aún no tiene diseño). Ver TD-020 +
+// DEC-001 en cognito-backoffice-connector/docs/. Si se reintroduce, agregar
+// 'EMAIL_OTP' a este array.
+const ALLOWED_MFA_TYPES = ['SOFTWARE_TOKEN_MFA'];
+class MfaPoolConfig {
+}
+exports.MfaPoolConfig = MfaPoolConfig;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], MfaPoolConfig.prototype, "requireMfa", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsIn)(ALLOWED_MFA_TYPES, { each: true }),
+    (0, class_validator_1.Validate)(MfaTypesRequiresOne_1.MfaTypesRequiresOne),
+    __metadata("design:type", Array)
+], MfaPoolConfig.prototype, "mfaTypes", void 0);

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.d.ts

@@ -0,0 +1,20 @@
+import { PoolKind } from '../../rbac/enums/PoolKind';
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+export declare class PoolConfigResponse {
+    userPoolId: string;
+    userPoolArn: string;
+    region: string;
+    poolKind: PoolKind;
+    displayName: string;
+    appClients: Record<string, {
+        clientId: string;
+        clientName: string;
+    }>;
+    status: 'active' | 'deprecated';
+    createdAt: number;
+    updatedAt: number;
+}

package/bin/cognitoBackofficeConnector/dtos/PoolConfigResponse.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolConfigResponse = void 0;
+/**
+ * Shape del `PoolConfigRow` expuesto al caller (BFF M18 / otros lambdas Fiado).
+ * Refleja la configuración de un Cognito User Pool registrado en la tabla
+ * `PoolConfigs_GT` del lambda `cognito-backoffice-connector`.
+ */
+class PoolConfigResponse {
+}
+exports.PoolConfigResponse = PoolConfigResponse;

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.d.ts

@@ -0,0 +1,4 @@
+import { PoolConfigResponse } from './PoolConfigResponse';
+export declare class PoolsListResponse {
+    pools: PoolConfigResponse[];
+}

package/bin/cognitoBackofficeConnector/dtos/PoolsListResponse.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolsListResponse = void 0;
+class PoolsListResponse {
+}
+exports.PoolsListResponse = PoolsListResponse;

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.d.ts

@@ -0,0 +1,17 @@
+import { ValidatorConstraintInterface, ValidationArguments } from 'class-validator';
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+export declare class MfaTypesRequiresOne implements ValidatorConstraintInterface {
+    validate(mfaTypes: unknown, args: ValidationArguments): boolean;
+    defaultMessage(): string;
+}

package/bin/cognitoBackofficeConnector/validators/MfaTypesRequiresOne.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaTypesRequiresOne = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * Cross-field validator: si `requireMfa: true`, entonces `mfaTypes` debe tener
+ * al menos 1 elemento. Si `requireMfa: false`, `mfaTypes` puede ser vacío.
+ *
+ * Razón: cuando el pool nace con MFA habilitado, el connector llama
+ * `SetUserPoolMfaConfigCommand` con la lista de tipos del DTO. Si el array
+ * llega vacío con `requireMfa: true`, el SDK rechaza con InvalidParameterException
+ * y el pool queda en estado inconsistente (MfaConfiguration:'ON' sin tipos).
+ * Mejor rechazar en validación del DTO antes de tocar AWS.
+ *
+ * Ver pivote v1.4.1 TD-017 cerrado + spec doc §1 R3.
+ */
+let MfaTypesRequiresOne = class MfaTypesRequiresOne {
+    validate(mfaTypes, args) {
+        const obj = args.object;
+        if (obj.requireMfa === true) {
+            return Array.isArray(mfaTypes) && mfaTypes.length >= 1;
+        }
+        // requireMfa: false → cualquier mfaTypes pasa.
+        return true;
+    }
+    defaultMessage() {
+        return 'mfaTypes requiere al menos un tipo cuando requireMfa=true';
+    }
+};
+exports.MfaTypesRequiresOne = MfaTypesRequiresOne;
+exports.MfaTypesRequiresOne = MfaTypesRequiresOne = __decorate([
+    (0, class_validator_1.ValidatorConstraint)({ name: 'MfaTypesRequiresOneWhenMfaRequired', async: false })
+], MfaTypesRequiresOne);

package/bin/index.d.ts

@@ -89,5 +89,7 @@ export * as Modelias from './modelias';
 export * as NetworkConnector from './networkConnector';
 export * as EmailVerification from './emailVerification';
 export * as RetailOrg from './retailOrg';
+export * as LoanConfig from './loanConfig';
+export * as LoanOfferings from './loanOfferings';
 export * from './messaging';
 export * from './complaint';

package/bin/index.js

@@ -37,7 +37,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Device = exports.Observations = exports.IssuanceBusiness = exports.Blacklist = exports.CentralPayments = exports.Helpdesk = exports.FiadoApiResponse = exports.Auth = exports.LegalDocumentsBusiness = exports.Role = exports.STPAccount = exports.RiskProfile = exports.FraudPreventionEngine = exports.BBVARst = exports.Stp = exports.BenefitCenter = exports.BankAccount = exports.P2pContact = exports.CreditContract = exports.Contract = exports.ProductCatalog = exports.ContactInfo = exports.TransactionAnalytics = exports.Transaction = exports.TransactionProcessor = exports.GenericMessage = exports.EventBridgeMessage = exports.SessionActivity = exports.NotificationMessages = exports.ServicePayment = exports.Header = exports.Identity = exports.UserTags = exports.Group = exports.File = exports.ExchangeRate = exports.Directory = exports.Currency = exports.Country = exports.Card = exports.Authentication = exports.AppContent = exports.App = exports.Offices = exports.Places = exports.Address = exports.Beneficiary = exports.Activity = exports.Account = exports.Crypto = void 0;
-exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = void 0;
+exports.LoanOfferings = exports.LoanConfig = exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = void 0;
 exports.Crypto = __importStar(require("./crypto"));
 exports.Account = __importStar(require("./account"));
 exports.Activity = __importStar(require("./activity"));
@@ -143,5 +143,10 @@ exports.EmailVerification = __importStar(require("./emailVerification"));
 // RetailOrg: DTOs/enums del lambda retail-org-business (SureKeep Fase 1 — pista Retail).
 // Dominio de retailers → zonas → tiendas → usuarios retail.
 exports.RetailOrg = __importStar(require("./retailOrg"));
+// LoanConfig: DTOs/enums del lambda loan-config-business (comp 09 — parámetros operativos del SOFOM).
+exports.LoanConfig = __importStar(require("./loanConfig"));
+// LoanOfferings: DTOs/enums del lambda loan-offerings-business (comp 07 — planes de crédito,
+// financieras, M:N retailer↔plan y simulador de cuota; SureKeep Fase 1 — pista Loan).
+exports.LoanOfferings = __importStar(require("./loanOfferings"));
 __exportStar(require("./messaging"), exports);
 __exportStar(require("./complaint"), exports);

package/bin/loanConfig/dtos/Parameter.d.ts

@@ -0,0 +1,23 @@
+import { ModifiableByRoleEnum } from '../enums/ModifiableByRoleEnum';
+import { ParameterTypeEnum } from '../enums/ParameterTypeEnum';
+import { ParameterValueTypeEnum } from '../enums/ParameterValueTypeEnum';
+/**
+ * Parameter — parámetro operativo clave/valor del SOFOM (M6 §8 + §5).
+ * Identidad lógica `parameterId = ${paramType}#${key}` (D1). `value` null → aplica `defaultValue`.
+ */
+export declare class Parameter {
+    parameterId: string;
+    paramType: ParameterTypeEnum;
+    key: string;
+    /** Siempre string; `null` cuando el valor está pendiente de definición por negocio. */
+    value: string | null;
+    valueType: ParameterValueTypeEnum;
+    defaultValue: string;
+    description: string;
+    modifiableBy: ModifiableByRoleEnum;
+    lastModifiedByUserId: string;
+    createdBy: string;
+    updatedBy: string;
+    createdAt: string;
+    updatedAt: string;
+}

package/bin/loanConfig/dtos/Parameter.js

@@ -0,0 +1,93 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Parameter = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const regex_1 = require("../../helpers/constans/regex");
+const ModifiableByRoleEnum_1 = require("../enums/ModifiableByRoleEnum");
+const ParameterTypeEnum_1 = require("../enums/ParameterTypeEnum");
+const ParameterValueTypeEnum_1 = require("../enums/ParameterValueTypeEnum");
+/**
+ * Parameter — parámetro operativo clave/valor del SOFOM (M6 §8 + §5).
+ * Identidad lógica `parameterId = ${paramType}#${key}` (D1). `value` null → aplica `defaultValue`.
+ */
+class Parameter {
+}
+exports.Parameter = Parameter;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "parameterId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ParameterTypeEnum_1.ParameterTypeEnum),
+    __metadata("design:type", String)
+], Parameter.prototype, "paramType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "key", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "value", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ParameterValueTypeEnum_1.ParameterValueTypeEnum),
+    __metadata("design:type", String)
+], Parameter.prototype, "valueType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "defaultValue", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "description", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ModifiableByRoleEnum_1.ModifiableByRoleEnum),
+    __metadata("design:type", String)
+], Parameter.prototype, "modifiableBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "lastModifiedByUserId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "createdBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], Parameter.prototype, "updatedBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(regex_1.regexIso8601, { message: 'createdAt debe ser una fecha ISO 8601' }),
+    __metadata("design:type", String)
+], Parameter.prototype, "createdAt", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(regex_1.regexIso8601, { message: 'updatedAt debe ser una fecha ISO 8601' }),
+    __metadata("design:type", String)
+], Parameter.prototype, "updatedAt", void 0);

package/bin/loanConfig/dtos/requests/BulkGetParametersRequest.d.ts

@@ -0,0 +1,9 @@
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+export declare class ParameterKeyRef {
+    paramType: ParameterTypeEnum;
+    key: string;
+}
+/** Body de POST /private/parameters/bulk-get — hot path para consumers (cachean 5 min). */
+export declare class BulkGetParametersRequest {
+    items: ParameterKeyRef[];
+}

package/bin/{platformRbac/dtos/ResendSelfRegisterOtpRequest.js → loanConfig/dtos/requests/BulkGetParametersRequest.js}

@@ -9,28 +9,32 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendSelfRegisterOtpRequest = void 0;
+exports.BulkGetParametersRequest = exports.ParameterKeyRef = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
-/**
- * Body del POST /self-register/resend-otp (público, anónimo). DEC-RBAC-054.
- * Re-envía el OTP del autoregistro (mecanismo messages-business, NO Cognito) tras validar un
- * `pending` existente. Misma postura anti-enumeración del start. El email se normaliza lowercase
- * server-side. DTO propio por endpoint (NO reusa SelfRegisterStartRequest, que exige roleId/scope/
- * scopeRef, ni SelfRegisterVerifyOtpRequest, que exige otp).
- */
-class ResendSelfRegisterOtpRequest {
+const ParameterTypeEnum_1 = require("../../enums/ParameterTypeEnum");
+class ParameterKeyRef {
 }
-exports.ResendSelfRegisterOtpRequest = ResendSelfRegisterOtpRequest;
+exports.ParameterKeyRef = ParameterKeyRef;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsEnum)(ParameterTypeEnum_1.ParameterTypeEnum),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "tenantId", void 0);
+], ParameterKeyRef.prototype, "paramType", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
-], ResendSelfRegisterOtpRequest.prototype, "email", void 0);
+], ParameterKeyRef.prototype, "key", void 0);
+/** Body de POST /private/parameters/bulk-get — hot path para consumers (cachean 5 min). */
+class BulkGetParametersRequest {
+}
+exports.BulkGetParametersRequest = BulkGetParametersRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayNotEmpty)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => ParameterKeyRef),
+    __metadata("design:type", Array)
+], BulkGetParametersRequest.prototype, "items", void 0);

package/bin/loanConfig/dtos/requests/BulkUpdateParametersRequest.d.ts

@@ -0,0 +1,11 @@
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+export declare class BulkUpdateParameterItem {
+    paramType: ParameterTypeEnum;
+    key: string;
+    value: string | null;
+    reason?: string;
+}
+/** Body de POST /parameters/bulk-update — carga inicial / ajuste masivo. */
+export declare class BulkUpdateParametersRequest {
+    parameters: BulkUpdateParameterItem[];
+}

package/bin/loanConfig/dtos/requests/BulkUpdateParametersRequest.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BulkUpdateParametersRequest = exports.BulkUpdateParameterItem = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const ParameterTypeEnum_1 = require("../../enums/ParameterTypeEnum");
+class BulkUpdateParameterItem {
+}
+exports.BulkUpdateParameterItem = BulkUpdateParameterItem;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(ParameterTypeEnum_1.ParameterTypeEnum),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "paramType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "key", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "value", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], BulkUpdateParameterItem.prototype, "reason", void 0);
+/** Body de POST /parameters/bulk-update — carga inicial / ajuste masivo. */
+class BulkUpdateParametersRequest {
+}
+exports.BulkUpdateParametersRequest = BulkUpdateParametersRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayNotEmpty)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => BulkUpdateParameterItem),
+    __metadata("design:type", Array)
+], BulkUpdateParametersRequest.prototype, "parameters", void 0);

package/bin/loanConfig/dtos/requests/UpdateParameterRequest.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Body de PUT /parameters/:paramType/:key. `value` puede ser null (parámetro pendiente).
+ * `reason` opcional en F1; el manager lo exigirá para cambios críticos (modelo-datos §10).
+ */
+export declare class UpdateParameterRequest {
+    value: string | null;
+    reason?: string;
+}

package/bin/{platformRbac/dtos/ResendOtpRequest.js → loanConfig/dtos/requests/UpdateParameterRequest.js}

@@ -9,28 +9,25 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResendOtpRequest = void 0;
+exports.UpdateParameterRequest = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 /**
- * Body del POST /auth/resend-otp (público, anónimo). DEC-RBAC-054.
- * Reenvía el OTP del login re-disparando el challenge real CUSTOM_AUTH (EMAIL_OTP) para la
- * identidad SIN password. `tenantId` obligatorio (DEC-064 — el picker ya lo resolvió, NO "solo email").
- * El email se normaliza lowercase server-side. Postura anti-enumeración: respuesta 200 genérica
- * siempre, sin filtrar existencia (ver AuthLoginManager.resendChallengeOtp).
+ * Body de PUT /parameters/:paramType/:key. `value` puede ser null (parámetro pendiente).
+ * `reason` opcional en F1; el manager lo exigirá para cambios críticos (modelo-datos §10).
  */
-class ResendOtpRequest {
+class UpdateParameterRequest {
 }
-exports.ResendOtpRequest = ResendOtpRequest;
+exports.UpdateParameterRequest = UpdateParameterRequest;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, class_validator_1.IsEmail)(),
-    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "email", void 0);
+], UpdateParameterRequest.prototype, "value", void 0);
 __decorate([
     (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
     (0, class_validator_1.IsString)(),
-    (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
-], ResendOtpRequest.prototype, "tenantId", void 0);
+], UpdateParameterRequest.prototype, "reason", void 0);

package/bin/loanConfig/dtos/responses/ParameterResponse.d.ts

@@ -0,0 +1,28 @@
+import { ModifiableByRoleEnum } from '../../enums/ModifiableByRoleEnum';
+import { ParameterTypeEnum } from '../../enums/ParameterTypeEnum';
+import { ParameterValueTypeEnum } from '../../enums/ParameterValueTypeEnum';
+/** Shape de salida de un parámetro. `effectiveValue` = value ?? defaultValue. */
+export interface ParameterResponse {
+    parameterId: string;
+    paramType: ParameterTypeEnum;
+    key: string;
+    value: string | null;
+    effectiveValue: string;
+    valueType: ParameterValueTypeEnum;
+    defaultValue: string;
+    description: string;
+    modifiableBy: ModifiableByRoleEnum;
+    lastModifiedByUserId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Respuesta de GET /parameters — agrupado por paramType (flow 08.1). */
+export type ParametersByTypeResponse = Partial<Record<ParameterTypeEnum, ParameterResponse[]>>;
+/** Respuesta de POST /private/parameters/bulk-get. */
+export interface BulkGetParametersResponse {
+    parameters: ParameterResponse[];
+    notFound: {
+        paramType: ParameterTypeEnum;
+        key: string;
+    }[];
+}

package/bin/loanConfig/dtos/responses/ParameterResponse.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/loanConfig/enums/ModifiableByRoleEnum.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
+ * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
+ * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
+ * @enum {string}
+ */
+export declare enum ModifiableByRoleEnum {
+    SUPER_ADMIN = "super_admin",
+    SOFOM_ADMIN = "sofom_admin",
+    RETAILER_ADMIN = "retailer_admin"
+}

package/bin/loanConfig/enums/ModifiableByRoleEnum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModifiableByRoleEnum = void 0;
+/**
+ * Rol RBAC mínimo que puede modificar un parámetro (RBAC a nivel de parámetro, modelo-datos §8).
+ * `retailer_admin` = "Admin VentasLuga" de M6 §8. Valores = identificadores de rol de RBAC F0.
+ * TD-004: confirmar mapeo super_admin ↔ platform_super_admin con el naming real de F0.
+ * @enum {string}
+ */
+var ModifiableByRoleEnum;
+(function (ModifiableByRoleEnum) {
+    ModifiableByRoleEnum["SUPER_ADMIN"] = "super_admin";
+    ModifiableByRoleEnum["SOFOM_ADMIN"] = "sofom_admin";
+    ModifiableByRoleEnum["RETAILER_ADMIN"] = "retailer_admin";
+})(ModifiableByRoleEnum || (exports.ModifiableByRoleEnum = ModifiableByRoleEnum = {}));

package/bin/loanConfig/enums/ParameterTypeEnum.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Sub-tipos de parámetro operativo del SOFOM (M6 §8 = 13 + SCORING de §5 = 14).
+ * @enum {string}
+ */
+export declare enum ParameterTypeEnum {
+    CREDIT = "CREDIT",
+    WARRANTY = "WARRANTY",
+    WELCOME_BONUS = "WELCOME_BONUS",
+    MORA_BLOCK = "MORA_BLOCK",
+    UNBLOCK = "UNBLOCK",
+    PAY_INVESTIGATION = "PAY_INVESTIGATION",
+    COLLECTIONS = "COLLECTIONS",
+    ANTI_FRAUD = "ANTI_FRAUD",
+    REMITTANCE = "REMITTANCE",
+    NOTIFICATIONS = "NOTIFICATIONS",
+    CROSS_BORDER = "CROSS_BORDER",
+    WIZARD = "WIZARD",
+    INTEGRATIONS = "INTEGRATIONS",
+    SCORING = "SCORING"
+}

package/bin/loanConfig/enums/ParameterTypeEnum.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterTypeEnum = void 0;
+/**
+ * Sub-tipos de parámetro operativo del SOFOM (M6 §8 = 13 + SCORING de §5 = 14).
+ * @enum {string}
+ */
+var ParameterTypeEnum;
+(function (ParameterTypeEnum) {
+    ParameterTypeEnum["CREDIT"] = "CREDIT";
+    ParameterTypeEnum["WARRANTY"] = "WARRANTY";
+    ParameterTypeEnum["WELCOME_BONUS"] = "WELCOME_BONUS";
+    ParameterTypeEnum["MORA_BLOCK"] = "MORA_BLOCK";
+    ParameterTypeEnum["UNBLOCK"] = "UNBLOCK";
+    ParameterTypeEnum["PAY_INVESTIGATION"] = "PAY_INVESTIGATION";
+    ParameterTypeEnum["COLLECTIONS"] = "COLLECTIONS";
+    ParameterTypeEnum["ANTI_FRAUD"] = "ANTI_FRAUD";
+    ParameterTypeEnum["REMITTANCE"] = "REMITTANCE";
+    ParameterTypeEnum["NOTIFICATIONS"] = "NOTIFICATIONS";
+    ParameterTypeEnum["CROSS_BORDER"] = "CROSS_BORDER";
+    ParameterTypeEnum["WIZARD"] = "WIZARD";
+    ParameterTypeEnum["INTEGRATIONS"] = "INTEGRATIONS";
+    ParameterTypeEnum["SCORING"] = "SCORING";
+})(ParameterTypeEnum || (exports.ParameterTypeEnum = ParameterTypeEnum = {}));

package/bin/loanConfig/enums/ParameterValueTypeEnum.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Tipo lógico del `value` (siempre persistido como string; el consumer parsea según esto).
+ * Valores en minúscula por contrato del modelo (modelo-datos §8).
+ * @enum {string}
+ */
+export declare enum ParameterValueTypeEnum {
+    STRING = "string",
+    NUMBER = "number",
+    BOOLEAN = "boolean",
+    JSON = "json"
+}

package/bin/loanConfig/enums/ParameterValueTypeEnum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterValueTypeEnum = void 0;
+/**
+ * Tipo lógico del `value` (siempre persistido como string; el consumer parsea según esto).
+ * Valores en minúscula por contrato del modelo (modelo-datos §8).
+ * @enum {string}
+ */
+var ParameterValueTypeEnum;
+(function (ParameterValueTypeEnum) {
+    ParameterValueTypeEnum["STRING"] = "string";
+    ParameterValueTypeEnum["NUMBER"] = "number";
+    ParameterValueTypeEnum["BOOLEAN"] = "boolean";
+    ParameterValueTypeEnum["JSON"] = "json";
+})(ParameterValueTypeEnum || (exports.ParameterValueTypeEnum = ParameterValueTypeEnum = {}));

package/bin/loanConfig/index.d.ts

@@ -0,0 +1,8 @@
+export * from './enums/ParameterTypeEnum';
+export * from './enums/ParameterValueTypeEnum';
+export * from './enums/ModifiableByRoleEnum';
+export * from './dtos/Parameter';
+export * from './dtos/requests/UpdateParameterRequest';
+export * from './dtos/requests/BulkUpdateParametersRequest';
+export * from './dtos/requests/BulkGetParametersRequest';
+export * from './dtos/responses/ParameterResponse';