- Shipped
- May 15, 2026 at 5:10 PM UTC
- Author
- Kamo
- Commit
- cbc4b4b
New REST controller exposing the full URLA application lifecycle: GET /api/security/mortgage-apps list (summary) GET **************** full graph POST **************** blank or from-lead DELETE **************** delete PATCH /{uid}/loan-file | /loan | /property | /originator top sections POST /{uid}/pairs add BorrowerPair PATCH /{uid}/pairs/{pairId} edit pair DELETE /{uid}/pairs/{pairId} remove pair POST /{uid}/pairs/{pairId}/borrowers add Borrower PATCH /{uid}/borrowers/{borrowerUid} edit Borrower DELETE /{uid}/borrowers/{borrowerUid} remove Borrower POST/PATCH/DELETE **************** **************** + /{section}/{id} PUT **************** POST/PATCH/DELETE /{uid}/gifts and /{uid}/other-mortgages GET /{uid}/lookups ← enum dump Org-scoped via OTKPreAuthFilter session; uniform {error: msg} envelope on 400/401/404/500; uses existing service-layer @Transactional rules.