@fiado/api-invoker 5.109.0 → 5.111.0

package/bin/cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi.d.ts

@@ -1,6 +1,6 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
+import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, AuthStartLoginRequest, AuthStartLoginResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
 import { ICognitoBackofficeConnectorApi } from "./interfaces/ICognitoBackofficeConnectorApi.js";
 /**
  * Publisher HTTP del lambda `cognito-backoffice-connector` (componente 05 SureKeep Fase 0).
@@ -40,6 +40,7 @@ export default class CognitoBackofficeConnectorApi implements ICognitoBackoffice
     resetUserMfa(cognitoSub: string, input: MfaResetRequest): Promise<ApiGatewayResponse<void>>;
     authInitiate(input: InitiateAuthRequest): Promise<ApiGatewayResponse<InitiateAuthResponse>>;
     authVerifyPassword(input: VerifyPasswordRequest): Promise<ApiGatewayResponse<VerifyPasswordResponse>>;
+    authStartLogin(input: AuthStartLoginRequest): Promise<ApiGatewayResponse<AuthStartLoginResponse>>;
     introspect(input: IntrospectRequest): Promise<ApiGatewayResponse<IntrospectResponse>>;
     authRespondChallenge(input: RespondToChallengeRequest): Promise<ApiGatewayResponse<RespondToChallengeResponse>>;
     authRefreshTokens(input: RefreshTokensRequest): Promise<ApiGatewayResponse<RefreshTokensResponse>>;

package/bin/cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi.js

@@ -97,6 +97,10 @@ let CognitoBackofficeConnectorApi = class CognitoBackofficeConnectorApi {
         const url = `${this.baseUrl}/auth/verify-password`;
         return await this.httpRequest.post(url, input);
     }
+    async authStartLogin(input) {
+        const url = `${this.baseUrl}/auth/start-login`;
+        return await this.httpRequest.post(url, input);
+    }
     async introspect(input) {
         const url = `${this.baseUrl}/auth/introspect`;
         return await this.httpRequest.post(url, input);

package/bin/cognitoBackofficeConnector/api/interfaces/ICognitoBackofficeConnectorApi.d.ts

@@ -1,5 +1,5 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
-import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
+import { CreateUserRequest, CreateUserResponse, UpdateUserAttributesRequest, UserActionRequest, ResendInvitationRequest, SetUserPasswordRequest, UserDetailResponse, AuthEventsRequest, AuthEventResponse, InitiateAuthRequest, InitiateAuthResponse, RespondToChallengeRequest, RespondToChallengeResponse, RefreshTokensRequest, RefreshTokensResponse, ForgotPasswordRequest, ConfirmForgotPasswordRequest, ResendConfirmationRequest, ChangePasswordRequest, TotpBeginRequest, TotpBeginResponse, TotpVerifyRequest, MfaVerifyResponse, SetMfaPreferenceRequest, MfaResetRequest, UpdateEmailRequest, VerifyEmailRequest, UpdateProfileRequest, CreatePoolRequest, CreatePoolResponse, CreatePoolClientRequest, CreatePoolClientResponse, HealthcheckResponse, VerifyPasswordRequest, VerifyPasswordResponse, AuthStartLoginRequest, AuthStartLoginResponse, IntrospectRequest, IntrospectResponse } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
 /**
  * Contrato del publisher HTTP del lambda `cognito-backoffice-connector` (componente 05 SureKeep Fase 0).
  *
@@ -58,6 +58,14 @@ export interface ICognitoBackofficeConnectorApi {
      * solo un veredicto `{ valid }`. El caller (rbac) NO conoce el mecanismo.
      */
     authVerifyPassword(input: VerifyPasswordRequest): Promise<ApiGatewayResponse<VerifyPasswordResponse>>;
+    /**
+     * POST /auth/start-login — login de un solo flujo (SRP dentro de CUSTOM_AUTH).
+     * El connector hace InitiateAuth(CUSTOM_AUTH, SRP_A) y responde PASSWORD_VERIFIER
+     * firmado en una sola operacion; la contraseña nunca viaja en claro. Devuelve
+     * tokens (2FA apagado) o el challenge pendiente (NEW_PASSWORD_REQUIRED / el
+     * CUSTOM_CHALLENGE del 2do factor). El caller (rbac) decide por que rama sigue.
+     */
+    authStartLogin(input: AuthStartLoginRequest): Promise<ApiGatewayResponse<AuthStartLoginResponse>>;
     /**
      * POST /auth/introspect — valida un token (firma + exp + iss + client_id +
      * token_use) y devuelve `{ valid, cognitoSub?, reason? }`. El connector es

package/bin/index.d.ts

@@ -90,6 +90,7 @@ export * from "./retailCards/index.js";
 export * from "./retailNotifications/index.js";
 export * from "./retailWizard/index.js";
 export * from "./retailPromotions/index.js";
+export * from "./retailIntegration/index.js";
 export * from "./shortlink/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";

package/bin/index.js

@@ -90,6 +90,7 @@ export * from "./retailCards/index.js";
 export * from "./retailNotifications/index.js";
 export * from "./retailWizard/index.js";
 export * from "./retailPromotions/index.js";
+export * from "./retailIntegration/index.js";
 export * from "./shortlink/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";

package/bin/retailCatalog/api/RetailCatalogBusinessApi.d.ts

@@ -1,6 +1,7 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { StandardResponse } from "@fiado/gateway-adapter";
 import type { GetStoreStockCatalogResponse, HoldStockRequest, HoldStockResponse, InventoryLensQuery, InventoryLensResponse, ReleaseStockRequest, ReleaseStockResponse, RenewReservationsRequest, RenewReservationsResponse, ReserveStockRequest, ReserveStockResponse, ReturnStockRequest, ReturnStockResponse, SellStockRequest, SellStockResponse, SuggestPiecesQuery, SuggestPiecesResponse, SyncInventoryRequest, SyncInventoryResponse, ValidateProductResponse } from "@fiado/type-kit/bin/retailCatalog/index.js";
+import type { ApplyInventoryEventRequest, ApplyInventoryEventResponse, ApplyProductEventRequest, ApplyProductEventResponse } from "@fiado/type-kit/bin/retailIntegration/index.js";
 import { IRetailCatalogBusinessApi, ProductsByRetailersResponse, ReleaseReservationBody, ReserveInventoryBody, ReserveInventoryResult, SellInventoryBody, StoreCatalogItem } from "./interfaces/IRetailCatalogBusinessApi.js";
 /**
  * Publisher HTTP del lambda `retail-catalog-business` (SureKeep Fase 1, pista Retail) para sus
@@ -39,4 +40,7 @@ export default class RetailCatalogBusinessApi implements IRetailCatalogBusinessA
     syncInventory(retailerId: string, body: SyncInventoryRequest, tenantId: string): Promise<StandardResponse<SyncInventoryResponse>>;
     getStoreStockCatalog(storeId: string, tenantId: string): Promise<StandardResponse<GetStoreStockCatalogResponse>>;
     getInventoryLens(tenantId: string, retailerId: string, query: InventoryLensQuery): Promise<StandardResponse<InventoryLensResponse>>;
+    privateApplyProductEvent(request: ApplyProductEventRequest): Promise<StandardResponse<ApplyProductEventResponse>>;
+    privateApplyInventoryEvent(request: ApplyInventoryEventRequest): Promise<StandardResponse<ApplyInventoryEventResponse>>;
+    private applyRetailEvent;
 }

package/bin/retailCatalog/api/RetailCatalogBusinessApi.js

@@ -115,6 +115,17 @@ let RetailCatalogBusinessApi = class RetailCatalogBusinessApi {
             params.set("storeId", query.storeId);
         return await this.httpRequest.get(`${this.baseUrl}/private/inventory/lens?${params.toString()}`);
     }
+    async privateApplyProductEvent(request) {
+        return await this.applyRetailEvent("/private/integration/product-events", request);
+    }
+    async privateApplyInventoryEvent(request) {
+        return await this.applyRetailEvent("/private/integration/inventory-events", request);
+    }
+    // Reenvía un evento del retailer; `enableTimeout` usa HTTP_CLIENT_REQUEST_TIMEOUT_MILISECONDS del consumidor.
+    async applyRetailEvent(path, request) {
+        const url = `${this.baseUrl}${path}?tenantId=${encodeURIComponent(request.tenantId)}`;
+        return await this.httpRequest.post(url, request, {}, undefined, true);
+    }
 };
 RetailCatalogBusinessApi = __decorate([
     injectable(),

package/bin/retailCatalog/api/interfaces/IRetailCatalogBusinessApi.d.ts

@@ -1,5 +1,6 @@
 import { StandardResponse } from "@fiado/gateway-adapter";
 import type { GetStoreStockCatalogResponse, HoldStockRequest, HoldStockResponse, InventoryLensQuery, InventoryLensResponse, MdmLockModeEnum, MdmProviderEnum, ReleaseStockRequest, ReleaseStockResponse, RenewReservationsRequest, RenewReservationsResponse, ReserveStockRequest, ReserveStockResponse, ReturnStockRequest, ReturnStockResponse, SellStockRequest, SellStockResponse, SuggestPiecesQuery, SuggestPiecesResponse, SyncInventoryRequest, SyncInventoryResponse, ValidateProductResponse } from "@fiado/type-kit/bin/retailCatalog/index.js";
+import type { ApplyInventoryEventRequest, ApplyInventoryEventResponse, ApplyProductEventRequest, ApplyProductEventResponse } from "@fiado/type-kit/bin/retailIntegration/index.js";
 /**
  * Contrato del publisher HTTP del lambda `retail-catalog-business` (SureKeep Fase 1, pista Retail)
  * para sus endpoints privados del ciclo de venta del IMEI, consumidos por el wizard F2.
@@ -175,4 +176,8 @@ export interface IRetailCatalogBusinessApi {
     getStoreStockCatalog(storeId: string, tenantId: string): Promise<StandardResponse<GetStoreStockCatalogResponse>>;
     /** GET `/private/inventory/lens` — lente de inventario del retailer; `period` y `storeId` solo aplican a `filter=list`. */
     getInventoryLens(tenantId: string, retailerId: string, query: InventoryLensQuery): Promise<StandardResponse<InventoryLensResponse>>;
+    /** `POST /private/integration/product-events?tenantId=` — aplica un evento de producto del retailer. */
+    privateApplyProductEvent(request: ApplyProductEventRequest): Promise<StandardResponse<ApplyProductEventResponse>>;
+    /** `POST /private/integration/inventory-events?tenantId=` — aplica un movimiento de inventario del retailer. */
+    privateApplyInventoryEvent(request: ApplyInventoryEventRequest): Promise<StandardResponse<ApplyInventoryEventResponse>>;
 }

package/bin/retailIntegration/api/RetailIntegrationConnectorApi.d.ts

@@ -0,0 +1,17 @@
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import type { GetRetailInventoryRequest, GetRetailInventoryResponse, ListRetailCatalogRequest, ListRetailCatalogResponse, ListRetailStoresRequest, ListRetailStoresResponse, ListRetailUsersRequest, ListRetailUsersResponse, RegisterRetailSaleRequest, RegisterRetailSaleResponse, RetailSystemSale } from "@fiado/type-kit/bin/retailIntegration/index.js";
+import { IRetailIntegrationConnectorApi } from "./interfaces/IRetailIntegrationConnectorApi.js";
+/** Publisher de la salida privada de `retail-integration-connector`. */
+export default class RetailIntegrationConnectorApi implements IRetailIntegrationConnectorApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    listRetailStores(request: ListRetailStoresRequest): Promise<StandardResponse<ListRetailStoresResponse>>;
+    listRetailCatalog(request: ListRetailCatalogRequest): Promise<StandardResponse<ListRetailCatalogResponse>>;
+    getRetailInventory(request: GetRetailInventoryRequest): Promise<StandardResponse<GetRetailInventoryResponse>>;
+    listRetailUsers(request: ListRetailUsersRequest): Promise<StandardResponse<ListRetailUsersResponse>>;
+    registerRetailSale(request: RegisterRetailSaleRequest, sale: RetailSystemSale): Promise<StandardResponse<RegisterRetailSaleResponse>>;
+    private getWithTimeout;
+    private toQuery;
+}

package/bin/retailIntegration/api/RetailIntegrationConnectorApi.js

@@ -0,0 +1,76 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+/** Mayor que el Timeout de 10 s del connector, para no cortar una venta en vuelo. */
+const RETAIL_INTEGRATION_CONNECTOR_TIMEOUT_MS = 12000;
+/** Publisher de la salida privada de `retail-integration-connector`. */
+let RetailIntegrationConnectorApi = class RetailIntegrationConnectorApi {
+    httpRequest;
+    baseUrl = (process.env.RETAIL_INTEGRATION_CONNECTOR_URL || "").replace(/\/+$/, "");
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async listRetailStores(request) {
+        return await this.getWithTimeout("/private/retail/stores", {
+            tenantId: request.tenantId,
+            limit: request.limit,
+            nextToken: request.nextToken,
+        });
+    }
+    async listRetailCatalog(request) {
+        return await this.getWithTimeout("/private/retail/catalog", {
+            tenantId: request.tenantId,
+            limit: request.limit,
+            nextToken: request.nextToken,
+        });
+    }
+    async getRetailInventory(request) {
+        return await this.getWithTimeout("/private/retail/inventory", {
+            tenantId: request.tenantId,
+            storeId: request.storeId,
+        });
+    }
+    async listRetailUsers(request) {
+        return await this.getWithTimeout("/private/retail/users", {
+            tenantId: request.tenantId,
+            storeId: request.storeId,
+            limit: request.limit,
+            nextToken: request.nextToken,
+        });
+    }
+    async registerRetailSale(request, sale) {
+        const url = `${this.baseUrl}/private/retail/sales?${this.toQuery({ tenantId: request.tenantId })}`;
+        return await this.httpRequest.post(url, sale, {}, undefined, false, {
+            timeout: RETAIL_INTEGRATION_CONNECTOR_TIMEOUT_MS,
+        });
+    }
+    // GET con timeout propio; nunca `enableTimeout`, que tomaría el timeout corto del consumidor.
+    async getWithTimeout(path, fields) {
+        const url = `${this.baseUrl}${path}?${this.toQuery(fields)}`;
+        return await this.httpRequest.get(url, {}, {}, undefined, { timeout: RETAIL_INTEGRATION_CONNECTOR_TIMEOUT_MS }, false);
+    }
+    toQuery(fields) {
+        const params = new URLSearchParams();
+        for (const [key, value] of Object.entries(fields)) {
+            if (value !== undefined)
+                params.set(key, String(value));
+        }
+        return params.toString();
+    }
+};
+RetailIntegrationConnectorApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], RetailIntegrationConnectorApi);
+export default RetailIntegrationConnectorApi;

package/bin/retailIntegration/api/interfaces/IRetailIntegrationConnectorApi.d.ts

@@ -0,0 +1,18 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import type { GetRetailInventoryRequest, GetRetailInventoryResponse, ListRetailCatalogRequest, ListRetailCatalogResponse, ListRetailStoresRequest, ListRetailStoresResponse, ListRetailUsersRequest, ListRetailUsersResponse, RegisterRetailSaleRequest, RegisterRetailSaleResponse, RetailSystemSale } from "@fiado/type-kit/bin/retailIntegration/index.js";
+/**
+ * Salida privada de `retail-integration-connector` hacia el sistema del retailer del tenant.
+ * Env var del consumidor: `RETAIL_INTEGRATION_CONNECTOR_URL: '{{resolve:ssm:retail-integration-connector}}'`.
+ */
+export interface IRetailIntegrationConnectorApi {
+    /** `GET /private/retail/stores` — una página de tiendas del retailer. */
+    listRetailStores(request: ListRetailStoresRequest): Promise<StandardResponse<ListRetailStoresResponse>>;
+    /** `GET /private/retail/catalog` — una página del catálogo del retailer. */
+    listRetailCatalog(request: ListRetailCatalogRequest): Promise<StandardResponse<ListRetailCatalogResponse>>;
+    /** `GET /private/retail/inventory` — piezas y existencias de una tienda. */
+    getRetailInventory(request: GetRetailInventoryRequest): Promise<StandardResponse<GetRetailInventoryResponse>>;
+    /** `GET /private/retail/users` — una página de usuarios, opcionalmente de una tienda. */
+    listRetailUsers(request: ListRetailUsersRequest): Promise<StandardResponse<ListRetailUsersResponse>>;
+    /** `POST /private/retail/sales` — registra la venta; ante timeout o 502, reintenta con el mismo `saleId`. */
+    registerRetailSale(request: RegisterRetailSaleRequest, sale: RetailSystemSale): Promise<StandardResponse<RegisterRetailSaleResponse>>;
+}

package/bin/retailIntegration/api/interfaces/IRetailIntegrationConnectorApi.js

@@ -0,0 +1 @@
+export {};

package/bin/retailIntegration/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailIntegrationConnectorApi.js";
+export { default as RetailIntegrationConnectorApi } from "./api/RetailIntegrationConnectorApi.js";

package/bin/retailIntegration/index.js

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailIntegrationConnectorApi.js";
+export { default as RetailIntegrationConnectorApi } from "./api/RetailIntegrationConnectorApi.js";

package/bin/retailOrg/api/RetailOrgBusinessApi.d.ts

@@ -1,6 +1,7 @@
 import type { IHttpRequest } from "@fiado/http-client";
 import { StandardResponse } from "@fiado/gateway-adapter";
 import { RetailerValidationDto, StoreValidationDto, RetailUserValidationDto, CollectorValidationDto, PrivateSellerListResponse, RetailUserStatusEnum } from "@fiado/type-kit/bin/retailOrg/index.js";
+import type { ApplyRetailUserEventRequest, ApplyRetailUserEventResponse, ApplyStoreEventRequest, ApplyStoreEventResponse } from "@fiado/type-kit/bin/retailIntegration/index.js";
 import { IRetailOrgBusinessApi, RetailerRosterStatusFilter, StoreRosterStatusFilter } from "./interfaces/IRetailOrgBusinessApi.js";
 /**
  * Publisher HTTP del lambda `retail-org-business` (componente 04 SureKeep Fase 1) para sus 9
@@ -49,4 +50,7 @@ export default class RetailOrgBusinessApi implements IRetailOrgBusinessApi {
      * path: el caller no está validando un recurso, está pidiendo una colección entera.
      */
     listSellers(retailerId: string, tenantId: string, callerService: string, status?: RetailUserStatusEnum): Promise<StandardResponse<PrivateSellerListResponse>>;
+    privateApplyStoreEvent(request: ApplyStoreEventRequest): Promise<StandardResponse<ApplyStoreEventResponse>>;
+    privateApplyRetailUserEvent(request: ApplyRetailUserEventRequest): Promise<StandardResponse<ApplyRetailUserEventResponse>>;
+    private applyRetailEvent;
 }

package/bin/retailOrg/api/RetailOrgBusinessApi.js

@@ -100,6 +100,18 @@ let RetailOrgBusinessApi = class RetailOrgBusinessApi {
             query.set("status", status);
         return await this.httpRequest.get(`${this.baseUrl}/private/sellers?${query.toString()}`);
     }
+    async privateApplyStoreEvent(request) {
+        return await this.applyRetailEvent("/private/integration/store-events", request);
+    }
+    async privateApplyRetailUserEvent(request) {
+        return await this.applyRetailEvent("/private/integration/retail-user-events", request);
+    }
+    // Reenvía un evento del retailer; quita la "/" final de la base porque el SSM la publica con ella.
+    async applyRetailEvent(path, request) {
+        const base = this.baseUrl.replace(/\/+$/, "");
+        const url = `${base}${path}?tenantId=${encodeURIComponent(request.tenantId)}`;
+        return await this.httpRequest.post(url, request, {}, undefined, true);
+    }
 };
 RetailOrgBusinessApi = __decorate([
     injectable(),

package/bin/retailOrg/api/interfaces/IRetailOrgBusinessApi.d.ts

@@ -1,5 +1,6 @@
 import { StandardResponse } from "@fiado/gateway-adapter";
 import { RetailerValidationDto, StoreValidationDto, RetailUserValidationDto, CollectorValidationDto, PrivateSellerListResponse, RetailUserStatusEnum, RetailerStatusEnum, StoreStatusEnum } from "@fiado/type-kit/bin/retailOrg/index.js";
+import type { ApplyRetailUserEventRequest, ApplyRetailUserEventResponse, ApplyStoreEventRequest, ApplyStoreEventResponse } from "@fiado/type-kit/bin/retailIntegration/index.js";
 /**
  * Filtro de `listStoresByRetailer`. `"ALL"` no es un estado de tienda: es la ausencia de filtro, y
  * va en el MISMO parámetro que los estados porque los dos hablan del mismo eje — un segundo flag
@@ -218,4 +219,8 @@ export interface IRetailOrgBusinessApi {
      * @throws `400 VALIDATION_ERROR` si `retailerId` no es un ULID · `400 UNKNOWN_TENANT` sin `tenantId`.
      */
     listSellers(retailerId: string, tenantId: string, callerService: string, status?: RetailUserStatusEnum): Promise<StandardResponse<PrivateSellerListResponse>>;
+    /** `POST /private/integration/store-events?tenantId=` — aplica un evento de tienda del retailer. */
+    privateApplyStoreEvent(request: ApplyStoreEventRequest): Promise<StandardResponse<ApplyStoreEventResponse>>;
+    /** `POST /private/integration/retail-user-events?tenantId=` — aplica un evento de usuario del retailer. */
+    privateApplyRetailUserEvent(request: ApplyRetailUserEventRequest): Promise<StandardResponse<ApplyRetailUserEventResponse>>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "5.109.0",
+  "version": "5.111.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -31,10 +31,10 @@
   "license": "ISC",
   "dependencies": {
     "@aws-sdk/client-sqs": "^3.919.0",
-    "@fiado/gateway-adapter": "^3.9.0",
+    "@fiado/gateway-adapter": "^3.14.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.490.0",
+    "@fiado/type-kit": "^3.500.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/cognitoBackofficeConnector/api/CognitoBackofficeConnectorApi.ts

@@ -38,6 +38,8 @@ import {
     HealthcheckResponse,
     VerifyPasswordRequest,
     VerifyPasswordResponse,
+    AuthStartLoginRequest,
+    AuthStartLoginResponse,
     IntrospectRequest,
     IntrospectResponse,
 } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
@@ -190,6 +192,13 @@ export default class CognitoBackofficeConnectorApi implements ICognitoBackoffice
         return await this.httpRequest.post(url, input);
     }
 
+    async authStartLogin(
+        input: AuthStartLoginRequest,
+    ): Promise<ApiGatewayResponse<AuthStartLoginResponse>> {
+        const url = `${this.baseUrl}/auth/start-login`;
+        return await this.httpRequest.post(url, input);
+    }
+
     async introspect(
         input: IntrospectRequest,
     ): Promise<ApiGatewayResponse<IntrospectResponse>> {

package/src/cognitoBackofficeConnector/api/interfaces/ICognitoBackofficeConnectorApi.ts

@@ -36,6 +36,8 @@ import {
     HealthcheckResponse,
     VerifyPasswordRequest,
     VerifyPasswordResponse,
+    AuthStartLoginRequest,
+    AuthStartLoginResponse,
     IntrospectRequest,
     IntrospectResponse,
 } from "@fiado/type-kit/bin/cognitoBackofficeConnector/index.js";
@@ -141,6 +143,17 @@ export interface ICognitoBackofficeConnectorApi {
         input: VerifyPasswordRequest,
     ): Promise<ApiGatewayResponse<VerifyPasswordResponse>>;
 
+    /**
+     * POST /auth/start-login — login de un solo flujo (SRP dentro de CUSTOM_AUTH).
+     * El connector hace InitiateAuth(CUSTOM_AUTH, SRP_A) y responde PASSWORD_VERIFIER
+     * firmado en una sola operacion; la contraseña nunca viaja en claro. Devuelve
+     * tokens (2FA apagado) o el challenge pendiente (NEW_PASSWORD_REQUIRED / el
+     * CUSTOM_CHALLENGE del 2do factor). El caller (rbac) decide por que rama sigue.
+     */
+    authStartLogin(
+        input: AuthStartLoginRequest,
+    ): Promise<ApiGatewayResponse<AuthStartLoginResponse>>;
+
     /**
      * POST /auth/introspect — valida un token (firma + exp + iss + client_id +
      * token_use) y devuelve `{ valid, cognitoSub?, reason? }`. El connector es

package/src/index.ts

@@ -90,6 +90,7 @@ export * from "./retailCards/index.js";
 export * from "./retailNotifications/index.js";
 export * from "./retailWizard/index.js";
 export * from "./retailPromotions/index.js";
+export * from "./retailIntegration/index.js";
 export * from "./shortlink/index.js";
 export * from "./loanConfig/index.js";
 export * from "./loanOfferings/index.js";

package/src/retailCatalog/api/RetailCatalogBusinessApi.ts

@@ -23,6 +23,14 @@ import type {
     SyncInventoryResponse,
     ValidateProductResponse,
 } from "@fiado/type-kit/bin/retailCatalog/index.js";
+import type {
+    ApplyInventoryEventRequest,
+    ApplyInventoryEventResponse,
+    ApplyProductEventRequest,
+    ApplyProductEventResponse,
+    ApplyRetailEventRequest,
+    ApplyRetailEventResponse,
+} from "@fiado/type-kit/bin/retailIntegration/index.js";
 import {
     IRetailCatalogBusinessApi,
     ProductsByRetailersBody,
@@ -210,4 +218,25 @@ export default class RetailCatalogBusinessApi implements IRetailCatalogBusinessA
         if (query.storeId) params.set("storeId", query.storeId);
         return await this.httpRequest.get(`${this.baseUrl}/private/inventory/lens?${params.toString()}`);
     }
+
+    async privateApplyProductEvent(
+        request: ApplyProductEventRequest,
+    ): Promise<StandardResponse<ApplyProductEventResponse>> {
+        return await this.applyRetailEvent("/private/integration/product-events", request);
+    }
+
+    async privateApplyInventoryEvent(
+        request: ApplyInventoryEventRequest,
+    ): Promise<StandardResponse<ApplyInventoryEventResponse>> {
+        return await this.applyRetailEvent("/private/integration/inventory-events", request);
+    }
+
+    // Reenvía un evento del retailer; `enableTimeout` usa HTTP_CLIENT_REQUEST_TIMEOUT_MILISECONDS del consumidor.
+    private async applyRetailEvent(
+        path: string,
+        request: ApplyRetailEventRequest,
+    ): Promise<StandardResponse<ApplyRetailEventResponse>> {
+        const url = `${this.baseUrl}${path}?tenantId=${encodeURIComponent(request.tenantId)}`;
+        return await this.httpRequest.post(url, request, {}, undefined, true);
+    }
 }

package/src/retailCatalog/api/interfaces/IRetailCatalogBusinessApi.ts

@@ -23,6 +23,12 @@ import type {
     SyncInventoryResponse,
     ValidateProductResponse,
 } from "@fiado/type-kit/bin/retailCatalog/index.js";
+import type {
+    ApplyInventoryEventRequest,
+    ApplyInventoryEventResponse,
+    ApplyProductEventRequest,
+    ApplyProductEventResponse,
+} from "@fiado/type-kit/bin/retailIntegration/index.js";
 
 /**
  * Contrato del publisher HTTP del lambda `retail-catalog-business` (SureKeep Fase 1, pista Retail)
@@ -268,4 +274,12 @@ export interface IRetailCatalogBusinessApi {
         retailerId: string,
         query: InventoryLensQuery,
     ): Promise<StandardResponse<InventoryLensResponse>>;
+
+    /** `POST /private/integration/product-events?tenantId=` — aplica un evento de producto del retailer. */
+    privateApplyProductEvent(request: ApplyProductEventRequest): Promise<StandardResponse<ApplyProductEventResponse>>;
+
+    /** `POST /private/integration/inventory-events?tenantId=` — aplica un movimiento de inventario del retailer. */
+    privateApplyInventoryEvent(
+        request: ApplyInventoryEventRequest,
+    ): Promise<StandardResponse<ApplyInventoryEventResponse>>;
 }

package/src/retailIntegration/api/RetailIntegrationConnectorApi.ts

@@ -0,0 +1,86 @@
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import type {
+    GetRetailInventoryRequest,
+    GetRetailInventoryResponse,
+    ListRetailCatalogRequest,
+    ListRetailCatalogResponse,
+    ListRetailStoresRequest,
+    ListRetailStoresResponse,
+    ListRetailUsersRequest,
+    ListRetailUsersResponse,
+    RegisterRetailSaleRequest,
+    RegisterRetailSaleResponse,
+    RetailSystemSale,
+} from "@fiado/type-kit/bin/retailIntegration/index.js";
+import { IRetailIntegrationConnectorApi } from "./interfaces/IRetailIntegrationConnectorApi.js";
+
+/** Mayor que el Timeout de 10 s del connector, para no cortar una venta en vuelo. */
+const RETAIL_INTEGRATION_CONNECTOR_TIMEOUT_MS = 12000;
+
+type QueryFields = Record<string, string | number | undefined>;
+
+/** Publisher de la salida privada de `retail-integration-connector`. */
+@injectable()
+export default class RetailIntegrationConnectorApi implements IRetailIntegrationConnectorApi {
+    private readonly baseUrl = (process.env.RETAIL_INTEGRATION_CONNECTOR_URL || "").replace(/\/+$/, "");
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
+
+    async listRetailStores(request: ListRetailStoresRequest): Promise<StandardResponse<ListRetailStoresResponse>> {
+        return await this.getWithTimeout("/private/retail/stores", {
+            tenantId: request.tenantId,
+            limit: request.limit,
+            nextToken: request.nextToken,
+        });
+    }
+
+    async listRetailCatalog(request: ListRetailCatalogRequest): Promise<StandardResponse<ListRetailCatalogResponse>> {
+        return await this.getWithTimeout("/private/retail/catalog", {
+            tenantId: request.tenantId,
+            limit: request.limit,
+            nextToken: request.nextToken,
+        });
+    }
+
+    async getRetailInventory(request: GetRetailInventoryRequest): Promise<StandardResponse<GetRetailInventoryResponse>> {
+        return await this.getWithTimeout("/private/retail/inventory", {
+            tenantId: request.tenantId,
+            storeId: request.storeId,
+        });
+    }
+
+    async listRetailUsers(request: ListRetailUsersRequest): Promise<StandardResponse<ListRetailUsersResponse>> {
+        return await this.getWithTimeout("/private/retail/users", {
+            tenantId: request.tenantId,
+            storeId: request.storeId,
+            limit: request.limit,
+            nextToken: request.nextToken,
+        });
+    }
+
+    async registerRetailSale(
+        request: RegisterRetailSaleRequest,
+        sale: RetailSystemSale,
+    ): Promise<StandardResponse<RegisterRetailSaleResponse>> {
+        const url = `${this.baseUrl}/private/retail/sales?${this.toQuery({ tenantId: request.tenantId })}`;
+        return await this.httpRequest.post(url, sale, {}, undefined, false, {
+            timeout: RETAIL_INTEGRATION_CONNECTOR_TIMEOUT_MS,
+        });
+    }
+
+    // GET con timeout propio; nunca `enableTimeout`, que tomaría el timeout corto del consumidor.
+    private async getWithTimeout<T>(path: string, fields: QueryFields): Promise<StandardResponse<T>> {
+        const url = `${this.baseUrl}${path}?${this.toQuery(fields)}`;
+        return await this.httpRequest.get(url, {}, {}, undefined, { timeout: RETAIL_INTEGRATION_CONNECTOR_TIMEOUT_MS }, false);
+    }
+
+    private toQuery(fields: QueryFields): string {
+        const params = new URLSearchParams();
+        for (const [key, value] of Object.entries(fields)) {
+            if (value !== undefined) params.set(key, String(value));
+        }
+        return params.toString();
+    }
+}

package/src/retailIntegration/api/interfaces/IRetailIntegrationConnectorApi.ts

@@ -0,0 +1,38 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import type {
+    GetRetailInventoryRequest,
+    GetRetailInventoryResponse,
+    ListRetailCatalogRequest,
+    ListRetailCatalogResponse,
+    ListRetailStoresRequest,
+    ListRetailStoresResponse,
+    ListRetailUsersRequest,
+    ListRetailUsersResponse,
+    RegisterRetailSaleRequest,
+    RegisterRetailSaleResponse,
+    RetailSystemSale,
+} from "@fiado/type-kit/bin/retailIntegration/index.js";
+
+/**
+ * Salida privada de `retail-integration-connector` hacia el sistema del retailer del tenant.
+ * Env var del consumidor: `RETAIL_INTEGRATION_CONNECTOR_URL: '{{resolve:ssm:retail-integration-connector}}'`.
+ */
+export interface IRetailIntegrationConnectorApi {
+    /** `GET /private/retail/stores` — una página de tiendas del retailer. */
+    listRetailStores(request: ListRetailStoresRequest): Promise<StandardResponse<ListRetailStoresResponse>>;
+
+    /** `GET /private/retail/catalog` — una página del catálogo del retailer. */
+    listRetailCatalog(request: ListRetailCatalogRequest): Promise<StandardResponse<ListRetailCatalogResponse>>;
+
+    /** `GET /private/retail/inventory` — piezas y existencias de una tienda. */
+    getRetailInventory(request: GetRetailInventoryRequest): Promise<StandardResponse<GetRetailInventoryResponse>>;
+
+    /** `GET /private/retail/users` — una página de usuarios, opcionalmente de una tienda. */
+    listRetailUsers(request: ListRetailUsersRequest): Promise<StandardResponse<ListRetailUsersResponse>>;
+
+    /** `POST /private/retail/sales` — registra la venta; ante timeout o 502, reintenta con el mismo `saleId`. */
+    registerRetailSale(
+        request: RegisterRetailSaleRequest,
+        sale: RetailSystemSale,
+    ): Promise<StandardResponse<RegisterRetailSaleResponse>>;
+}

package/src/retailIntegration/index.ts

@@ -0,0 +1,2 @@
+export * from "./api/interfaces/IRetailIntegrationConnectorApi.js";
+export { default as RetailIntegrationConnectorApi } from "./api/RetailIntegrationConnectorApi.js";

package/src/retailOrg/api/RetailOrgBusinessApi.ts

@@ -9,6 +9,14 @@ import {
     PrivateSellerListResponse,
     RetailUserStatusEnum,
 } from "@fiado/type-kit/bin/retailOrg/index.js";
+import type {
+    ApplyRetailEventRequest,
+    ApplyRetailEventResponse,
+    ApplyRetailUserEventRequest,
+    ApplyRetailUserEventResponse,
+    ApplyStoreEventRequest,
+    ApplyStoreEventResponse,
+} from "@fiado/type-kit/bin/retailIntegration/index.js";
 import {
     IRetailOrgBusinessApi,
     RetailerRosterStatusFilter,
@@ -141,4 +149,24 @@ export default class RetailOrgBusinessApi implements IRetailOrgBusinessApi {
         if (status) query.set("status", status);
         return await this.httpRequest.get(`${this.baseUrl}/private/sellers?${query.toString()}`);
     }
+
+    async privateApplyStoreEvent(request: ApplyStoreEventRequest): Promise<StandardResponse<ApplyStoreEventResponse>> {
+        return await this.applyRetailEvent("/private/integration/store-events", request);
+    }
+
+    async privateApplyRetailUserEvent(
+        request: ApplyRetailUserEventRequest,
+    ): Promise<StandardResponse<ApplyRetailUserEventResponse>> {
+        return await this.applyRetailEvent("/private/integration/retail-user-events", request);
+    }
+
+    // Reenvía un evento del retailer; quita la "/" final de la base porque el SSM la publica con ella.
+    private async applyRetailEvent(
+        path: string,
+        request: ApplyRetailEventRequest,
+    ): Promise<StandardResponse<ApplyRetailEventResponse>> {
+        const base = this.baseUrl.replace(/\/+$/, "");
+        const url = `${base}${path}?tenantId=${encodeURIComponent(request.tenantId)}`;
+        return await this.httpRequest.post(url, request, {}, undefined, true);
+    }
 }

package/src/retailOrg/api/interfaces/IRetailOrgBusinessApi.ts

@@ -9,6 +9,12 @@ import {
     RetailerStatusEnum,
     StoreStatusEnum,
 } from "@fiado/type-kit/bin/retailOrg/index.js";
+import type {
+    ApplyRetailUserEventRequest,
+    ApplyRetailUserEventResponse,
+    ApplyStoreEventRequest,
+    ApplyStoreEventResponse,
+} from "@fiado/type-kit/bin/retailIntegration/index.js";
 
 /**
  * Filtro de `listStoresByRetailer`. `"ALL"` no es un estado de tienda: es la ausencia de filtro, y
@@ -270,4 +276,12 @@ export interface IRetailOrgBusinessApi {
         callerService: string,
         status?: RetailUserStatusEnum,
     ): Promise<StandardResponse<PrivateSellerListResponse>>;
+
+    /** `POST /private/integration/store-events?tenantId=` — aplica un evento de tienda del retailer. */
+    privateApplyStoreEvent(request: ApplyStoreEventRequest): Promise<StandardResponse<ApplyStoreEventResponse>>;
+
+    /** `POST /private/integration/retail-user-events?tenantId=` — aplica un evento de usuario del retailer. */
+    privateApplyRetailUserEvent(
+        request: ApplyRetailUserEventRequest,
+    ): Promise<StandardResponse<ApplyRetailUserEventResponse>>;
 }