@fiado/api-invoker 4.68.0 → 4.70.0

package/bin/container.config.js

@@ -68,6 +68,7 @@ import { EventHistoryApi } from "./event-history-business/index.js";
 import ReportProcessorBusinessApi from "./report-processor-business/api/ReportProcessorBusinessApi.js";
 import NotificationWSMessagePublisher from "./notificationWebsockets/queue/NotificationWSMessagePublisher.js";
 import PeopleBusinessApi from "./people-business/api/PeopleBusinessApi.js";
+import PlacesBusinessApi from "./places-business/api/PlacesBusinessApi.js";
 import STPBusinessApi from "./stp-business/api/STPBusinessApi.js";
 import MulticommServicePaymentApi from "./multicommServicePayment/api/MulticommServicePaymentApi.js";
 import ProductPaymentApi from "./product-payment/api/ProductPaymentApi.js";
@@ -191,6 +192,7 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     bind("IEventHistoryApi").to(EventHistoryApi);
     bind("IReportProcessorBusinessApi").to(ReportProcessorBusinessApi);
     bind("IPeopleBusinessApi").to(PeopleBusinessApi);
+    bind("IPlacesBusinessApi").to(PlacesBusinessApi);
     bind("ISTPBusinessApi").to(STPBusinessApi);
     bind("IProductPaymentApi").to(ProductPaymentApi);
     bind("ICommissionBusinessApi").to(CommissionBusinessApi);

package/bin/index.d.ts

@@ -61,6 +61,7 @@ export * from "./event-history-business/index.js";
 export * from "./report-processor-business/index.js";
 export * from "./notificationWebsockets/index.js";
 export * from "./people-business/index.js";
+export * from "./places-business/index.js";
 export * from "./stp-business/index.js";
 export * from "./multicommServicePayment/index.js";
 export * from "./product-payment/index.js";
@@ -77,6 +78,7 @@ export * from "./milestone-business/index.js";
 export * from "./cognitoBackofficeConnector/index.js";
 export * from "./platformRbac/index.js";
 export * from "./retailOrg/index.js";
+export * from "./retailCustomer/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";
 export * from "./loanCollectorAssignment/index.js";

package/bin/index.js

@@ -61,6 +61,7 @@ export * from "./event-history-business/index.js";
 export * from "./report-processor-business/index.js";
 export * from "./notificationWebsockets/index.js";
 export * from "./people-business/index.js";
+export * from "./places-business/index.js";
 export * from "./stp-business/index.js";
 export * from "./multicommServicePayment/index.js";
 export * from "./product-payment/index.js";
@@ -77,6 +78,7 @@ export * from "./milestone-business/index.js";
 export * from "./cognitoBackofficeConnector/index.js";
 export * from "./platformRbac/index.js";
 export * from "./retailOrg/index.js";
+export * from "./retailCustomer/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";
 export * from "./loanCollectorAssignment/index.js";

package/bin/places-business/api/PlacesBusinessApi.d.ts

@@ -0,0 +1,12 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { SearchAddressRequest, SearchAddressResponse, ReverseGeocodeRequest, ReverseGeocodeResponse } from "@fiado/type-kit/bin/places/index.js";
+import { IPlacesBusinessApi } from "./interfaces/IPlacesBusinessApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export default class PlacesBusinessApi implements IPlacesBusinessApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    searchAddress(request: SearchAddressRequest): Promise<FiadoApiResponse<SearchAddressResponse>>;
+    reverseGeocode(request: ReverseGeocodeRequest): Promise<FiadoApiResponse<ReverseGeocodeResponse>>;
+}
+export {};

package/bin/places-business/api/PlacesBusinessApi.js

@@ -0,0 +1,32 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+let PlacesBusinessApi = class PlacesBusinessApi {
+    httpRequest;
+    baseUrl = process.env.PLACES_BUSINESS_LAMBDA_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async searchAddress(request) {
+        return await this.httpRequest.post(`${this.baseUrl}private/search-address`, request, { operationName: "privateSearchAddress" });
+    }
+    async reverseGeocode(request) {
+        return await this.httpRequest.post(`${this.baseUrl}private/reverse-geocode`, request, { operationName: "privateReverseGeocode" });
+    }
+};
+PlacesBusinessApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], PlacesBusinessApi);
+export default PlacesBusinessApi;

package/bin/places-business/api/interfaces/IPlacesBusinessApi.d.ts

@@ -0,0 +1,9 @@
+import { SearchAddressRequest, SearchAddressResponse, ReverseGeocodeRequest, ReverseGeocodeResponse } from "@fiado/type-kit/bin/places/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export interface IPlacesBusinessApi {
+    /** Geocoding por texto (POST /private/search-address, operationId privateSearchAddress). */
+    searchAddress(request: SearchAddressRequest): Promise<FiadoApiResponse<SearchAddressResponse>>;
+    /** Reverse geocoding (POST /private/reverse-geocode, operationId privateReverseGeocode). */
+    reverseGeocode(request: ReverseGeocodeRequest): Promise<FiadoApiResponse<ReverseGeocodeResponse>>;
+}
+export {};

package/bin/places-business/api/interfaces/IPlacesBusinessApi.js

@@ -0,0 +1 @@
+export {};

package/bin/places-business/index.d.ts

@@ -0,0 +1,2 @@
+export * from './api/PlacesBusinessApi.js';
+export * from './api/interfaces/IPlacesBusinessApi.js';

package/bin/places-business/index.js

@@ -0,0 +1,2 @@
+export * from './api/PlacesBusinessApi.js';
+export * from './api/interfaces/IPlacesBusinessApi.js';

package/bin/retailCustomer/api/RetailCustomerBusinessApi.d.ts

@@ -0,0 +1,27 @@
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import { UpsertCustomerFromKycRequest, AccountResultRequest, CustomerResponse } from "@fiado/type-kit/bin/retailCustomer/index.js";
+import { IRetailCustomerBusinessApi } from "./interfaces/IRetailCustomerBusinessApi.js";
+/**
+ * Publisher HTTP del lambda `retail-customer-business` (SureKeep Fase 2, pista Retail) para sus 4
+ * endpoints privados de cliente. Contrato y semántica completos → `IRetailCustomerBusinessApi`.
+ *
+ * Los paths y el `?tenantId=` matchean `openapi/private.yaml` del lambda destino (mismo patrón que
+ * `retail-org-business`: el silo se resuelve por el `tenantId` canónico que manda el caller).
+ *
+ * Env var requerida en el consumer: `RETAIL_CUSTOMER_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CUSTOMER_BUSINESS_URL: '{{resolve:ssm:retail-customer-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+export default class RetailCustomerBusinessApi implements IRetailCustomerBusinessApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    upsertCustomerFromKyc(payload: UpsertCustomerFromKycRequest, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+    setAccountResult(customerId: string, payload: AccountResultRequest, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+    getCustomerByPhone(phone: string, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+    getCustomer(customerId: string, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+}

package/bin/retailCustomer/api/RetailCustomerBusinessApi.js

@@ -0,0 +1,56 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+/**
+ * Publisher HTTP del lambda `retail-customer-business` (SureKeep Fase 2, pista Retail) para sus 4
+ * endpoints privados de cliente. Contrato y semántica completos → `IRetailCustomerBusinessApi`.
+ *
+ * Los paths y el `?tenantId=` matchean `openapi/private.yaml` del lambda destino (mismo patrón que
+ * `retail-org-business`: el silo se resuelve por el `tenantId` canónico que manda el caller).
+ *
+ * Env var requerida en el consumer: `RETAIL_CUSTOMER_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CUSTOMER_BUSINESS_URL: '{{resolve:ssm:retail-customer-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+let RetailCustomerBusinessApi = class RetailCustomerBusinessApi {
+    httpRequest;
+    baseUrl = process.env.RETAIL_CUSTOMER_BUSINESS_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async upsertCustomerFromKyc(payload, tenantId) {
+        const url = `${this.baseUrl}/private/customers/upsert-from-kyc?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, payload);
+    }
+    async setAccountResult(customerId, payload, tenantId) {
+        const url = `${this.baseUrl}/private/customers/${encodeURIComponent(customerId)}/account-result?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.put(url, payload);
+    }
+    async getCustomerByPhone(phone, tenantId) {
+        const url = `${this.baseUrl}/private/customers/by-phone/${encodeURIComponent(phone)}?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
+    async getCustomer(customerId, tenantId) {
+        const url = `${this.baseUrl}/private/customers/${encodeURIComponent(customerId)}?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
+};
+RetailCustomerBusinessApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], RetailCustomerBusinessApi);
+export default RetailCustomerBusinessApi;

package/bin/retailCustomer/api/interfaces/IRetailCustomerBusinessApi.d.ts

@@ -0,0 +1,76 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import { UpsertCustomerFromKycRequest, AccountResultRequest, CustomerResponse } from "@fiado/type-kit/bin/retailCustomer/index.js";
+/**
+ * Contrato del publisher HTTP del lambda `retail-customer-business` (SureKeep Fase 2, pista Retail)
+ * para sus 4 endpoints privados de cliente (service-to-service, VPC-only).
+ *
+ * Consumidor previsto:
+ *   - `retail-wizard-business` → upsert del cliente post-KYC, aterrizaje del resultado de apertura
+ *     de cuenta (D35), y lecturas del cliente por teléfono / id durante la saga de venta.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `tenantId` es OBLIGATORIO en los 4 métodos — no es un detalle de firma.
+ * ─────────────────────────────────────────────────────────────────────────────
+ * Los privados NO llevan token de usuario (`Feature.ANONIMUS`; la protección es la red VPC), así que
+ * el lambda destino no tiene `AuthContext.issuer` y NO puede inferir el silo. El caller declara el
+ * tenant explícito por query (`?tenantId=`) y `@fiado/tenant-context` (`withContextByTenantId`) asume
+ * el rol de ESE silo. Sin `tenantId` → `400 UNKNOWN_TENANT` (fail-closed). Nunca hay default: caer a un
+ * tenant por default sería fail-OPEN y podría devolver datos de otra SOFOM.
+ *
+ * ⚠️ `tenantId` = el tenant CANÓNICO (p.ej. `'surekeep'`), NO el issuer Cognito ni la URL del pool.
+ * Es el mismo valor que consume `retail-org-business` en sus privados (`withContextByTenantId`).
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * ⚠️ Patrón de retorno: `StandardResponse<T>` — el consumer accede `result.data`, NO `result.body`.
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `@fiado/http-client` entrega el BODY PELADO (hace `return response.data` en `AxiosHttpRequest`), así
+ * que `.statusCode`/`.body` no existen en runtime. El envelope real del lambda destino es
+ * `{ code, date, data, msg, description }` = `StandardResponse<T>` (ya exportado por
+ * `@fiado/gateway-adapter`). El consumer lee el shape del cliente en `result.data`.
+ *
+ * Errores: el lambda destino lanza `DomainError` tipado → el publisher RECHAZA (no devuelve null).
+ * Cada consumer mapea a su propio error de dominio (ver `fiado-api-invoker § 6`):
+ *   `404 CUSTOMER_NOT_FOUND` (por id / por teléfono inexistente)
+ *   `400 UNKNOWN_TENANT` (tenantId ausente o desconocido)
+ *
+ * Env var requerida en el consumer: `RETAIL_CUSTOMER_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CUSTOMER_BUSINESS_URL: '{{resolve:ssm:retail-customer-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+export interface IRetailCustomerBusinessApi {
+    /**
+     * POST /private/customers/upsert-from-kyc?tenantId= — upsert idempotente del cliente tras el KYC
+     * (paso 02f). El lambda resuelve UNIQ#PHONE + UNIQ#CURP en la misma TX y setea
+     * `accountStatus=OPENING` server-side (la apertura corre en background, D35). Responde `201`.
+     *
+     * NOTA (TD-014 del customer): el `address` del type-kit tipa el `AddressBase` canónico (pesado);
+     * el lambda valida con un DTO local ligero. El domicilio OCR-parcial se salda con `RetailAddress`
+     * aditivo al type-kit (backlog) — no acá.
+     */
+    upsertCustomerFromKyc(payload: UpsertCustomerFromKycRequest, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+    /**
+     * PUT /private/customers/{customerId}/account-result?tenantId= — aterriza el resultado terminal de
+     * la apertura de cuenta async (D35). Solo acepta OPEN/FAILED (nunca el intermedio OPENING). OPEN
+     * llega con `pcfClabe`/`pcfAccountLevel`; FAILED con `failReason`.
+     *
+     * @throws si el cliente no existe (`404 CUSTOMER_NOT_FOUND`).
+     */
+    setAccountResult(customerId: string, payload: AccountResultRequest, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+    /**
+     * GET /private/customers/by-phone/{phone}?tenantId= — resuelve el cliente por su teléfono MX (10
+     * dígitos, ya normalizado sin separadores). Usado por el wizard para saber si el teléfono ya es
+     * cliente del silo.
+     *
+     * @throws si no hay cliente con ese teléfono (`404 CUSTOMER_NOT_FOUND`).
+     */
+    getCustomerByPhone(phone: string, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+    /**
+     * GET /private/customers/{customerId}?tenantId= — resuelve el cliente por su id.
+     *
+     * @throws si el cliente no existe (`404 CUSTOMER_NOT_FOUND`).
+     */
+    getCustomer(customerId: string, tenantId: string): Promise<StandardResponse<CustomerResponse>>;
+}

package/bin/retailCustomer/api/interfaces/IRetailCustomerBusinessApi.js

@@ -0,0 +1 @@
+export {};

package/bin/retailCustomer/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailCustomerBusinessApi.js";
+export { default as RetailCustomerBusinessApi } from "./api/RetailCustomerBusinessApi.js";

package/bin/retailCustomer/index.js

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailCustomerBusinessApi.js";
+export { default as RetailCustomerBusinessApi } from "./api/RetailCustomerBusinessApi.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "4.68.0",
+  "version": "4.70.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^3.9.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.193.0",
+    "@fiado/type-kit": "^3.196.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/container.config.ts

@@ -99,6 +99,8 @@ import { INotificationWSMessagesPublisher } from "./notificationWebsockets/index
 import NotificationWSMessagePublisher from "./notificationWebsockets/queue/NotificationWSMessagePublisher.js";
 import PeopleBusinessApi from "./people-business/api/PeopleBusinessApi.js";
 import { IPeopleBusinessApi } from "./people-business/index.js";
+import PlacesBusinessApi from "./places-business/api/PlacesBusinessApi.js";
+import { IPlacesBusinessApi } from "./places-business/index.js";
 import STPBusinessApi from "./stp-business/api/STPBusinessApi.js";
 import { ISTPBusinessApi } from "./stp-business/index.js";
 import { IMulticommServicePaymentApi } from "./multicommServicePayment/index.js";
@@ -252,6 +254,7 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     bind<IEventHistoryApi>("IEventHistoryApi").to(EventHistoryApi);
     bind<IReportProcessorBusinessApi>("IReportProcessorBusinessApi").to(ReportProcessorBusinessApi);
     bind<IPeopleBusinessApi>("IPeopleBusinessApi").to(PeopleBusinessApi);
+    bind<IPlacesBusinessApi>("IPlacesBusinessApi").to(PlacesBusinessApi);
     bind<ISTPBusinessApi>("ISTPBusinessApi").to(STPBusinessApi);
     bind<IProductPaymentApi>("IProductPaymentApi").to(ProductPaymentApi);
     bind<ICommissionBusinessApi>("ICommissionBusinessApi").to(CommissionBusinessApi);

package/src/index.ts

@@ -61,6 +61,7 @@ export * from "./event-history-business/index.js";
 export * from "./report-processor-business/index.js";
 export * from "./notificationWebsockets/index.js";
 export * from "./people-business/index.js";
+export * from "./places-business/index.js";
 export * from "./stp-business/index.js";
 export * from "./multicommServicePayment/index.js";
 export * from "./product-payment/index.js";
@@ -77,6 +78,7 @@ export * from "./milestone-business/index.js";
 export * from "./cognitoBackofficeConnector/index.js";
 export * from "./platformRbac/index.js";
 export * from "./retailOrg/index.js";
+export * from "./retailCustomer/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";
 export * from "./loanCollectorAssignment/index.js";

package/src/places-business/api/PlacesBusinessApi.ts

@@ -0,0 +1,22 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import { SearchAddressRequest, SearchAddressResponse, ReverseGeocodeRequest, ReverseGeocodeResponse } from "@fiado/type-kit/bin/places/index.js";
+import { IPlacesBusinessApi } from "./interfaces/IPlacesBusinessApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+@injectable()
+export default class PlacesBusinessApi implements IPlacesBusinessApi {
+
+    private readonly baseUrl = process.env.PLACES_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
+    }
+
+    async searchAddress(request: SearchAddressRequest): Promise<FiadoApiResponse<SearchAddressResponse>> {
+        return await this.httpRequest.post(`${this.baseUrl}private/search-address`, request, { operationName: "privateSearchAddress" });
+    }
+
+    async reverseGeocode(request: ReverseGeocodeRequest): Promise<FiadoApiResponse<ReverseGeocodeResponse>> {
+        return await this.httpRequest.post(`${this.baseUrl}private/reverse-geocode`, request, { operationName: "privateReverseGeocode" });
+    }
+}

package/src/places-business/api/interfaces/IPlacesBusinessApi.ts

@@ -0,0 +1,9 @@
+import { SearchAddressRequest, SearchAddressResponse, ReverseGeocodeRequest, ReverseGeocodeResponse } from "@fiado/type-kit/bin/places/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+export interface IPlacesBusinessApi {
+    /** Geocoding por texto (POST /private/search-address, operationId privateSearchAddress). */
+    searchAddress(request: SearchAddressRequest): Promise<FiadoApiResponse<SearchAddressResponse>>;
+    /** Reverse geocoding (POST /private/reverse-geocode, operationId privateReverseGeocode). */
+    reverseGeocode(request: ReverseGeocodeRequest): Promise<FiadoApiResponse<ReverseGeocodeResponse>>;
+}

package/src/places-business/index.ts

@@ -0,0 +1,2 @@
+export * from './api/PlacesBusinessApi.js';
+export * from './api/interfaces/IPlacesBusinessApi.js';

package/src/retailCustomer/api/RetailCustomerBusinessApi.ts

@@ -0,0 +1,63 @@
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import {
+    UpsertCustomerFromKycRequest,
+    AccountResultRequest,
+    CustomerResponse,
+} from "@fiado/type-kit/bin/retailCustomer/index.js";
+import { IRetailCustomerBusinessApi } from "./interfaces/IRetailCustomerBusinessApi.js";
+
+/**
+ * Publisher HTTP del lambda `retail-customer-business` (SureKeep Fase 2, pista Retail) para sus 4
+ * endpoints privados de cliente. Contrato y semántica completos → `IRetailCustomerBusinessApi`.
+ *
+ * Los paths y el `?tenantId=` matchean `openapi/private.yaml` del lambda destino (mismo patrón que
+ * `retail-org-business`: el silo se resuelve por el `tenantId` canónico que manda el caller).
+ *
+ * Env var requerida en el consumer: `RETAIL_CUSTOMER_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CUSTOMER_BUSINESS_URL: '{{resolve:ssm:retail-customer-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+@injectable()
+export default class RetailCustomerBusinessApi implements IRetailCustomerBusinessApi {
+    private readonly baseUrl = process.env.RETAIL_CUSTOMER_BUSINESS_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
+
+    async upsertCustomerFromKyc(
+        payload: UpsertCustomerFromKycRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>> {
+        const url = `${this.baseUrl}/private/customers/upsert-from-kyc?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, payload);
+    }
+
+    async setAccountResult(
+        customerId: string,
+        payload: AccountResultRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>> {
+        const url = `${this.baseUrl}/private/customers/${encodeURIComponent(customerId)}/account-result?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.put(url, payload);
+    }
+
+    async getCustomerByPhone(
+        phone: string,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>> {
+        const url = `${this.baseUrl}/private/customers/by-phone/${encodeURIComponent(phone)}?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
+
+    async getCustomer(
+        customerId: string,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>> {
+        const url = `${this.baseUrl}/private/customers/${encodeURIComponent(customerId)}?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.get(url);
+    }
+}

package/src/retailCustomer/api/interfaces/IRetailCustomerBusinessApi.ts

@@ -0,0 +1,97 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import {
+    UpsertCustomerFromKycRequest,
+    AccountResultRequest,
+    CustomerResponse,
+} from "@fiado/type-kit/bin/retailCustomer/index.js";
+
+/**
+ * Contrato del publisher HTTP del lambda `retail-customer-business` (SureKeep Fase 2, pista Retail)
+ * para sus 4 endpoints privados de cliente (service-to-service, VPC-only).
+ *
+ * Consumidor previsto:
+ *   - `retail-wizard-business` → upsert del cliente post-KYC, aterrizaje del resultado de apertura
+ *     de cuenta (D35), y lecturas del cliente por teléfono / id durante la saga de venta.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `tenantId` es OBLIGATORIO en los 4 métodos — no es un detalle de firma.
+ * ─────────────────────────────────────────────────────────────────────────────
+ * Los privados NO llevan token de usuario (`Feature.ANONIMUS`; la protección es la red VPC), así que
+ * el lambda destino no tiene `AuthContext.issuer` y NO puede inferir el silo. El caller declara el
+ * tenant explícito por query (`?tenantId=`) y `@fiado/tenant-context` (`withContextByTenantId`) asume
+ * el rol de ESE silo. Sin `tenantId` → `400 UNKNOWN_TENANT` (fail-closed). Nunca hay default: caer a un
+ * tenant por default sería fail-OPEN y podría devolver datos de otra SOFOM.
+ *
+ * ⚠️ `tenantId` = el tenant CANÓNICO (p.ej. `'surekeep'`), NO el issuer Cognito ni la URL del pool.
+ * Es el mismo valor que consume `retail-org-business` en sus privados (`withContextByTenantId`).
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * ⚠️ Patrón de retorno: `StandardResponse<T>` — el consumer accede `result.data`, NO `result.body`.
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `@fiado/http-client` entrega el BODY PELADO (hace `return response.data` en `AxiosHttpRequest`), así
+ * que `.statusCode`/`.body` no existen en runtime. El envelope real del lambda destino es
+ * `{ code, date, data, msg, description }` = `StandardResponse<T>` (ya exportado por
+ * `@fiado/gateway-adapter`). El consumer lee el shape del cliente en `result.data`.
+ *
+ * Errores: el lambda destino lanza `DomainError` tipado → el publisher RECHAZA (no devuelve null).
+ * Cada consumer mapea a su propio error de dominio (ver `fiado-api-invoker § 6`):
+ *   `404 CUSTOMER_NOT_FOUND` (por id / por teléfono inexistente)
+ *   `400 UNKNOWN_TENANT` (tenantId ausente o desconocido)
+ *
+ * Env var requerida en el consumer: `RETAIL_CUSTOMER_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CUSTOMER_BUSINESS_URL: '{{resolve:ssm:retail-customer-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+export interface IRetailCustomerBusinessApi {
+    /**
+     * POST /private/customers/upsert-from-kyc?tenantId= — upsert idempotente del cliente tras el KYC
+     * (paso 02f). El lambda resuelve UNIQ#PHONE + UNIQ#CURP en la misma TX y setea
+     * `accountStatus=OPENING` server-side (la apertura corre en background, D35). Responde `201`.
+     *
+     * NOTA (TD-014 del customer): el `address` del type-kit tipa el `AddressBase` canónico (pesado);
+     * el lambda valida con un DTO local ligero. El domicilio OCR-parcial se salda con `RetailAddress`
+     * aditivo al type-kit (backlog) — no acá.
+     */
+    upsertCustomerFromKyc(
+        payload: UpsertCustomerFromKycRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>>;
+
+    /**
+     * PUT /private/customers/{customerId}/account-result?tenantId= — aterriza el resultado terminal de
+     * la apertura de cuenta async (D35). Solo acepta OPEN/FAILED (nunca el intermedio OPENING). OPEN
+     * llega con `pcfClabe`/`pcfAccountLevel`; FAILED con `failReason`.
+     *
+     * @throws si el cliente no existe (`404 CUSTOMER_NOT_FOUND`).
+     */
+    setAccountResult(
+        customerId: string,
+        payload: AccountResultRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>>;
+
+    /**
+     * GET /private/customers/by-phone/{phone}?tenantId= — resuelve el cliente por su teléfono MX (10
+     * dígitos, ya normalizado sin separadores). Usado por el wizard para saber si el teléfono ya es
+     * cliente del silo.
+     *
+     * @throws si no hay cliente con ese teléfono (`404 CUSTOMER_NOT_FOUND`).
+     */
+    getCustomerByPhone(
+        phone: string,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>>;
+
+    /**
+     * GET /private/customers/{customerId}?tenantId= — resuelve el cliente por su id.
+     *
+     * @throws si el cliente no existe (`404 CUSTOMER_NOT_FOUND`).
+     */
+    getCustomer(
+        customerId: string,
+        tenantId: string,
+    ): Promise<StandardResponse<CustomerResponse>>;
+}

package/src/retailCustomer/index.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailCustomerBusinessApi.js";
+export { default as RetailCustomerBusinessApi } from "./api/RetailCustomerBusinessApi.js";