@fiado/api-invoker 4.70.0 → 4.72.0

package/src/address/interfaces/IAddressApi.ts

@@ -1,4 +1,5 @@
 import { AddressCreateRequest, AddressResponse, AddressShippingCardResponse } from "@fiado/type-kit/bin/address/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 
 export interface IAddressApi {
 
@@ -26,6 +27,14 @@ export interface IAddressApi {
      * @returns Una promesa que resuelve a un objeto de respuesta de dirección de envío.
      * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
      */
-    getAddressLocationShipping(directoryId: string): Promise<AddressShippingCardResponse> 
+    getAddressLocationShipping(directoryId: string): Promise<AddressShippingCardResponse>
+
+    /**
+     * Borra en cascada las direcciones asociadas a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
 
 }

package/src/auth-business/AuthBusinessApi.ts

@@ -0,0 +1,20 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { IAuthBusinessApi } from "./interfaces/IAuthBusinessApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+dotenv.config();
+
+@injectable()
+export class AuthBusinessApi implements IAuthBusinessApi {
+
+    private readonly baseUrl = process.env.AUTH_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+}

package/src/auth-business/index.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IAuthBusinessApi.js';
+export * from './AuthBusinessApi.js';

package/src/auth-business/interfaces/IAuthBusinessApi.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * Interfaz para el servicio Auth Business (auth-business).
+ */
+export interface IAuthBusinessApi {
+
+    /**
+     * Borra en cascada los registros de auth asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+}

package/src/bankAccount/BankAccountApi.ts

@@ -32,4 +32,9 @@ export default class BankAccountApi implements IBankAccountApi {
         };
         return await this.httpRequest.get(url, { params });
     }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}/private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
 }

package/src/bankAccount/interfaces/IBankAccountApi.ts

@@ -1,7 +1,17 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
 export interface IBankAccountApi {
     getBankAccountById(bankAccountId: string): Promise<any>;
 
     getBankById(bankId: string): Promise<any>;
 
     getBankByCode(bankCode?: string, shortBankCode?: string): Promise<any>;
+
+    /**
+     * Borra en cascada las cuentas bancarias asociadas a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
 }

package/src/beneficiary/BeneficiaryApi.ts

@@ -0,0 +1,20 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { IBeneficiaryApi } from "./interfaces/IBeneficiaryApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+dotenv.config();
+
+@injectable()
+export class BeneficiaryApi implements IBeneficiaryApi {
+
+    private readonly baseUrl = process.env.BENEFICIARY_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+}

package/src/beneficiary/index.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IBeneficiaryApi.js';
+export * from './BeneficiaryApi.js';

package/src/beneficiary/interfaces/IBeneficiaryApi.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * Interfaz para el servicio Beneficiary (beneficiary-business).
+ */
+export interface IBeneficiaryApi {
+
+    /**
+     * Borra en cascada los beneficiarios asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+}

package/src/contactInformation/ContactInformationApi.ts

@@ -2,6 +2,7 @@ import { ContactInfoCreateRequest } from "@fiado/type-kit/bin/contactInfo/index.
 import { IContactInformationApi } from "./interface/IContactInformationApi.js";
 import { IHttpRequest } from "@fiado/http-client";
 import { inject } from "inversify";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 
 
 
@@ -18,4 +19,9 @@ export class ContactInformationApi implements IContactInformationApi {
         return await this.httpRequest.post(`${url}`, input);
     }
 
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+
 }

package/src/contactInformation/interface/IContactInformationApi.ts

@@ -1,9 +1,18 @@
 import { ContactInfoCreateRequest } from "@fiado/type-kit/bin/contactInfo/index.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
 
 
 
 export interface IContactInformationApi {
 
-    create(input: ContactInfoCreateRequest): Promise<void> 
+    create(input: ContactInfoCreateRequest): Promise<void>
+
+    /**
+     * Borra en cascada los registros asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
 
 }

package/src/container.config.ts

@@ -179,6 +179,12 @@ import { IWalletFundingRulesApi, WalletFundingRulesApi } from "./wallet-funding-
 import { ISnsSesConnectorApi, SnsSesConnectorApi } from "./sns-ses-connector/index.js";
 // Remittance business — pricingResolve (Dashboard Ops Fase B, puente de resolución de precio en send-time)
 import { IRemittanceBusinessApi, RemittanceBusinessApi } from "./remittance-business/index.js";
+import { IBeneficiaryApi, BeneficiaryApi } from "./beneficiary/index.js";
+import { IMembershipApi, MembershipApi } from "./membership/index.js";
+import { IPerformanceProfileApi, PerformanceProfileApi } from "./performance-profile/index.js";
+import { IAuthBusinessApi, AuthBusinessApi } from "./auth-business/index.js";
+import { IPresenceWebsocketApi, PresenceWebsocketApi } from "./presence-websocket/index.js";
+import { INotificationWebsocketApi, NotificationWebsocketApi } from "./notificationWebsockets/index.js";
 
 export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     // UTILS bindings
@@ -332,4 +338,12 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
 
     // Remittance business — pricingResolve (Dashboard Ops Fase B, puente de resolución de precio en send-time)
     bind<IRemittanceBusinessApi>("IRemittanceBusinessApi").to(RemittanceBusinessApi);
+
+    // Borrado en cascada del directorio — deleteByDirectoryId por dominio
+    bind<IBeneficiaryApi>("IBeneficiaryApi").to(BeneficiaryApi);
+    bind<IMembershipApi>("IMembershipApi").to(MembershipApi);
+    bind<IPerformanceProfileApi>("IPerformanceProfileApi").to(PerformanceProfileApi);
+    bind<IAuthBusinessApi>("IAuthBusinessApi").to(AuthBusinessApi);
+    bind<IPresenceWebsocketApi>("IPresenceWebsocketApi").to(PresenceWebsocketApi);
+    bind<INotificationWebsocketApi>("INotificationWebsocketApi").to(NotificationWebsocketApi);
 });

package/src/directorySetting/DirectorySettingApi.ts

@@ -39,4 +39,9 @@ export class DirectorySettingApi implements IDirectorySettingApi {
         }
         return await this.httpRequest.get(url);
     }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
 }

package/src/directorySetting/interfaces/IDirectorySettingApi.ts

@@ -52,5 +52,12 @@ export interface IDirectorySettingApi {
 }
     >>;
 
-    
+    /**
+     * Borra en cascada los settings asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+
 }

package/src/group/GroupApi.ts

@@ -72,4 +72,9 @@ export class GroupApi implements IGroupApi {
         const url = `${this.baseUrl}groups/counts`;
         return await this.httpRequest.get(`${url}`);
     }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
 }

package/src/group/interfaces/IGroupApi.ts

@@ -44,4 +44,12 @@ export interface IGroupApi {
      * (GET groups/counts, privado en fiado-group-business).
      */
     findAllWithCounts(): Promise<FiadoApiResponse<GroupCountsResponse>>;
+
+    /**
+     * Borra en cascada los grupos/membresías asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
 }

package/src/index.ts

@@ -79,6 +79,8 @@ export * from "./cognitoBackofficeConnector/index.js";
 export * from "./platformRbac/index.js";
 export * from "./retailOrg/index.js";
 export * from "./retailCustomer/index.js";
+export * from "./retailCatalog/index.js";
+export * from "./retailCards/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";
 export * from "./loanCollectorAssignment/index.js";
@@ -87,9 +89,15 @@ export * from "./totp-security/index.js";
 export * from "./equality-connector/index.js";
 export * from "./synergypay-connector/index.js";
 export * from "./contacts-business/index.js";
+export * from "./contactInformation/index.js";
 export * from "./uniteller-connector/index.js";
 export * from "./walletFundingSettlement/index.js";
 export * from "./wallet-funding-rules/index.js";
 export * from "./sns-ses-connector/index.js";
 export * from "./remittance-business/index.js";
 export * from "./modelias-connector/index.js";
+export * from "./beneficiary/index.js";
+export * from "./membership/index.js";
+export * from "./performance-profile/index.js";
+export * from "./auth-business/index.js";
+export * from "./presence-websocket/index.js";

package/src/membership/MembershipApi.ts

@@ -0,0 +1,20 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { IMembershipApi } from "./interfaces/IMembershipApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+dotenv.config();
+
+@injectable()
+export class MembershipApi implements IMembershipApi {
+
+    private readonly baseUrl = process.env.MEMBERSHIP_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+}

package/src/membership/index.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IMembershipApi.js';
+export * from './MembershipApi.js';

package/src/membership/interfaces/IMembershipApi.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * Interfaz para el servicio Membership (membership-business).
+ */
+export interface IMembershipApi {
+
+    /**
+     * Borra en cascada las membresías asociadas a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+}

package/src/notificationWebsockets/NotificationWebsocketApi.ts

@@ -0,0 +1,20 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { INotificationWebsocketApi } from "./interfaces/INotificationWebsocketApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+dotenv.config();
+
+@injectable()
+export class NotificationWebsocketApi implements INotificationWebsocketApi {
+
+    private readonly baseUrl = process.env.NOTIFICATIONS_WEBSOCKET_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+}

package/src/notificationWebsockets/index.ts

@@ -1,2 +1,4 @@
 export * from './queue/NotificationWSMessagePublisher.js';
-export * from './queue/interfaces/INotificationWSMessagesPublisher.js';
+export * from './queue/interfaces/INotificationWSMessagesPublisher.js';
+export * from './interfaces/INotificationWebsocketApi.js';
+export * from './NotificationWebsocketApi.js';

package/src/notificationWebsockets/interfaces/INotificationWebsocketApi.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * Interfaz para el servicio Notifications Websocket (notifications-websocket).
+ */
+export interface INotificationWebsocketApi {
+
+    /**
+     * Borra en cascada las conexiones/notificaciones WS asociadas a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+}

package/src/performance-profile/PerformanceProfileApi.ts

@@ -0,0 +1,20 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { IPerformanceProfileApi } from "./interfaces/IPerformanceProfileApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+dotenv.config();
+
+@injectable()
+export class PerformanceProfileApi implements IPerformanceProfileApi {
+
+    private readonly baseUrl = process.env.PERFORMANCE_PROFILE_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+}

package/src/performance-profile/index.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IPerformanceProfileApi.js';
+export * from './PerformanceProfileApi.js';

package/src/performance-profile/interfaces/IPerformanceProfileApi.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * Interfaz para el servicio Performance Profile (performance-profile-business).
+ */
+export interface IPerformanceProfileApi {
+
+    /**
+     * Borra en cascada los perfiles de desempeño asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+}

package/src/presence-websocket/PresenceWebsocketApi.ts

@@ -0,0 +1,20 @@
+import { inject, injectable } from "inversify";
+import { IHttpRequest } from "@fiado/http-client";
+import dotenv from 'dotenv';
+import { IPresenceWebsocketApi } from "./interfaces/IPresenceWebsocketApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+dotenv.config();
+
+@injectable()
+export class PresenceWebsocketApi implements IPresenceWebsocketApi {
+
+    private readonly baseUrl = process.env.PRESENCE_WEBSOCKET_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>> {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete<FiadoApiResponse<{ deletedCount: number }>>(url);
+    }
+}

package/src/presence-websocket/index.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IPresenceWebsocketApi.js';
+export * from './PresenceWebsocketApi.js';

package/src/presence-websocket/interfaces/IPresenceWebsocketApi.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/**
+ * Interfaz para el servicio Presence Websocket (presence-websocket).
+ */
+export interface IPresenceWebsocketApi {
+
+    /**
+     * Borra en cascada los registros de presencia asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    // TODO(type-kit): swap a Directory.DeleteByDirectoryResponse cuando se publique
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{ deletedCount: number }>>;
+}

package/src/retailCards/api/RetailCardsBusinessApi.ts

@@ -0,0 +1,44 @@
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import { AssignCardRequest } from "@fiado/type-kit/bin/retailCards/index.js";
+import {
+    IRetailCardsBusinessApi,
+    MarkDeliveredBody,
+    ReleaseCardBody,
+} from "./interfaces/IRetailCardsBusinessApi.js";
+
+/**
+ * Publisher HTTP del lambda `retail-cards-business` (SureKeep Fase 1, pista Retail) para sus endpoints
+ * privados de la tarjeta física PCF. Contrato y semántica completos → `IRetailCardsBusinessApi`
+ * (tenant por `?tenantId=` canónico, `StandardResponse` → leer `result.data`).
+ *
+ * Env var requerida en el consumer: `RETAIL_CARDS_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CARDS_BUSINESS_URL: '{{resolve:ssm:retail-cards-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+@injectable()
+export default class RetailCardsBusinessApi implements IRetailCardsBusinessApi {
+    // El buildspec publica la URL en SSM con "/" final — se normaliza para no armar "//private".
+    private readonly baseUrl = (process.env.RETAIL_CARDS_BUSINESS_URL || "").replace(/\/+$/, "");
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
+
+    async assign(cardNumber: string, body: AssignCardRequest, tenantId: string): Promise<StandardResponse<void>> {
+        const url = `${this.baseUrl}/private/cards/${encodeURIComponent(cardNumber)}/assign?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, body);
+    }
+
+    async markDelivered(cardNumber: string, body: MarkDeliveredBody, tenantId: string): Promise<StandardResponse<void>> {
+        const url = `${this.baseUrl}/private/cards/${encodeURIComponent(cardNumber)}/deliver?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, body);
+    }
+
+    async release(cardNumber: string, body: ReleaseCardBody, tenantId: string): Promise<StandardResponse<void>> {
+        const url = `${this.baseUrl}/private/cards/${encodeURIComponent(cardNumber)}/release?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, body);
+    }
+}

package/src/retailCards/api/interfaces/IRetailCardsBusinessApi.ts

@@ -0,0 +1,47 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import { AssignCardRequest } from "@fiado/type-kit/bin/retailCards/index.js";
+
+/**
+ * Contrato del publisher HTTP del lambda `retail-cards-business` (SureKeep Fase 1, pista Retail) para
+ * sus endpoints privados de la tarjeta física PCF, consumidos por el wizard F2 (paso 09, spike S7).
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * TENANT — `?tenantId=` CANÓNICO (query), NO header `x-tenant-issuer`.
+ * ─────────────────────────────────────────────────────────────────────────────
+ * El silo se resuelve por el `tenantId` canónico que manda el caller (`?tenantId=` →
+ * `withContextByTenantId`). Los privados son `Feature.ANONIMUS` (sin RBAC; protección VPC). Sin
+ * `tenantId` → `UnknownTenantError` (fail-closed).
+ *
+ * ⚠️ Retorno `StandardResponse<T>` — el consumer lee `result.data`, NO `result.body`.
+ * Errores: el destino lanza `DomainError` tipado → el publisher RECHAZA (no devuelve null).
+ *
+ * `deliver`/`release` reciben un body ligero (`{ deliveredByUserId? }` / `{ releasedByUserId? }`) que el
+ * destino no publica como DTO en `@fiado/type-kit` → se declara INLINE aquí. `assign` sí usa el DTO
+ * `AssignCardRequest` del type-kit (`{ assignedToCustomerId, assignedByUserId, creditId? }`).
+ *
+ * Env var requerida en el consumer: `RETAIL_CARDS_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CARDS_BUSINESS_URL: '{{resolve:ssm:retail-cards-business}}'
+ */
+
+/** Body de POST `/private/cards/{cardNumber}/deliver`. */
+export interface MarkDeliveredBody {
+    deliveredByUserId?: string;
+}
+
+/** Body de POST `/private/cards/{cardNumber}/release`. */
+export interface ReleaseCardBody {
+    releasedByUserId?: string;
+}
+
+export interface IRetailCardsBusinessApi {
+    /** POST `/private/cards/{cardNumber}/assign` — asigna la tarjeta física a un cliente (paso 09). */
+    assign(cardNumber: string, body: AssignCardRequest, tenantId: string): Promise<StandardResponse<void>>;
+
+    /** POST `/private/cards/{cardNumber}/deliver` — marca la tarjeta como entregada al cliente (D8). */
+    markDelivered(cardNumber: string, body: MarkDeliveredBody, tenantId: string): Promise<StandardResponse<void>>;
+
+    /** POST `/private/cards/{cardNumber}/release` — revierte la asignación si la venta se cancela (DEC-007 destino). */
+    release(cardNumber: string, body: ReleaseCardBody, tenantId: string): Promise<StandardResponse<void>>;
+}

package/src/retailCards/index.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailCardsBusinessApi.js";
+export { default as RetailCardsBusinessApi } from "./api/RetailCardsBusinessApi.js";

package/src/retailCatalog/api/RetailCatalogBusinessApi.ts

@@ -0,0 +1,68 @@
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import {
+    IRetailCatalogBusinessApi,
+    ReleaseReservationBody,
+    ReserveInventoryBody,
+    ReserveInventoryResult,
+    SellInventoryBody,
+    StoreCatalogItem,
+} from "./interfaces/IRetailCatalogBusinessApi.js";
+
+/** Header por el que el destino resuelve el silo (issuer Cognito forwardeado por el caller). */
+const TENANT_ISSUER_HEADER = "x-tenant-issuer";
+
+/**
+ * Publisher HTTP del lambda `retail-catalog-business` (SureKeep Fase 1, pista Retail) para sus
+ * endpoints privados del ciclo de venta del IMEI. Contrato y semántica completos →
+ * `IRetailCatalogBusinessApi` (tenant por header `x-tenant-issuer`, `StandardResponse` → leer
+ * `result.data`).
+ *
+ * Env var requerida en el consumer: `RETAIL_CATALOG_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   RETAIL_CATALOG_BUSINESS_URL: '{{resolve:ssm:retail-catalog-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+@injectable()
+export default class RetailCatalogBusinessApi implements IRetailCatalogBusinessApi {
+    // El buildspec publica la URL en SSM con "/" final — se normaliza para no armar "//private".
+    private readonly baseUrl = (process.env.RETAIL_CATALOG_BUSINESS_URL || "").replace(/\/+$/, "");
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
+
+    private tenantHeader(issuer: string): Record<string, string> {
+        return { [TENANT_ISSUER_HEADER]: issuer };
+    }
+
+    async getStoreCatalog(storeId: string, issuer: string): Promise<StandardResponse<StoreCatalogItem[]>> {
+        const url = `${this.baseUrl}/private/stores/${encodeURIComponent(storeId)}/catalog`;
+        return await this.httpRequest.get(url, undefined, this.tenantHeader(issuer));
+    }
+
+    async reserveInventory(
+        imei: string,
+        body: ReserveInventoryBody,
+        issuer: string,
+    ): Promise<StandardResponse<ReserveInventoryResult>> {
+        const url = `${this.baseUrl}/private/inventory/${encodeURIComponent(imei)}/reserve`;
+        return await this.httpRequest.put(url, body, this.tenantHeader(issuer));
+    }
+
+    async sellInventory(imei: string, body: SellInventoryBody, issuer: string): Promise<StandardResponse<void>> {
+        const url = `${this.baseUrl}/private/inventory/${encodeURIComponent(imei)}/sell`;
+        return await this.httpRequest.put(url, body, this.tenantHeader(issuer));
+    }
+
+    async releaseInventory(imei: string, body: ReleaseReservationBody, issuer: string): Promise<StandardResponse<void>> {
+        const url = `${this.baseUrl}/private/inventory/${encodeURIComponent(imei)}/release`;
+        return await this.httpRequest.put(url, body, this.tenantHeader(issuer));
+    }
+
+    async returnInventory(imei: string, issuer: string): Promise<StandardResponse<void>> {
+        const url = `${this.baseUrl}/private/inventory/${encodeURIComponent(imei)}/return`;
+        return await this.httpRequest.put(url, undefined, this.tenantHeader(issuer));
+    }
+}