@fiado/api-invoker 5.115.0 → 5.117.0

package/bin/container.config.js

@@ -74,6 +74,7 @@ import { EventHistoryApi } from "./event-history-business/index.js";
 import ReportProcessorBusinessApi from "./report-processor-business/api/ReportProcessorBusinessApi.js";
 import NotificationWSMessagePublisher from "./notificationWebsockets/queue/NotificationWSMessagePublisher.js";
 import PeopleBusinessApi from "./people-business/api/PeopleBusinessApi.js";
+import DatalakeReportsApi from "./datalake-reports-business/api/DatalakeReportsApi.js";
 import PlacesBusinessApi from "./places-business/api/PlacesBusinessApi.js";
 import STPBusinessApi from "./stp-business/api/STPBusinessApi.js";
 import MulticommServicePaymentApi from "./multicommServicePayment/api/MulticommServicePaymentApi.js";
@@ -139,6 +140,10 @@ import { KycVerificationsBusinessApi } from "./kyc/index.js";
 // Webhook business — publisher de la cola compartida de entrega de eventos a suscriptores externos
 import { WebhookBusinessPublisher } from "./webhook-business/index.js";
 import { CentralPaymentsWebhookApi } from "./central-payments-webhook/index.js";
+// Rewards — publisher de pedidos de entrega + cliente de lecturas privadas (rewards-business) y
+// publisher de GRANT_FAILED + cliente del validador (rewards-eligibility-business)
+import { RewardsGrantPublisher, RewardsBusinessApi } from "./rewards-business/index.js";
+import { RewardsEligibilityPublisher, RewardsEligibilityBusinessApi } from "./rewards-eligibility-business/index.js";
 import CollectionEngineApi from "./collection-engine/api/CollectionEngineApi.js";
 import DomainCallbackApi from "./domain-callback/api/DomainCallbackApi.js";
 export const apiInvokerBindings = new ContainerModule(({ bind }) => {
@@ -221,6 +226,7 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     bind("IEventHistoryApi").to(EventHistoryApi);
     bind("IReportProcessorBusinessApi").to(ReportProcessorBusinessApi);
     bind("IPeopleBusinessApi").to(PeopleBusinessApi);
+    bind("IDatalakeReportsApi").to(DatalakeReportsApi);
     bind("IPlacesBusinessApi").to(PlacesBusinessApi);
     bind("ISTPBusinessApi").to(STPBusinessApi);
     bind("IProductPaymentApi").to(ProductPaymentApi);
@@ -298,6 +304,14 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     // El productor necesita WEBHOOK_BUSINESS_QUEUE_URL y sqs:SendMessage sobre la cola.
     bind("IWebhookBusinessPublisher").to(WebhookBusinessPublisher);
     bind("ICentralPaymentsWebhookApi").to(CentralPaymentsWebhookApi);
+    // Rewards — cola compartida RewardsGrantQueue (pedidos de entrega) y lecturas privadas de rewards-business.
+    // El productor necesita REWARDS_GRANT_QUEUE_URL y sqs:SendMessage sobre la cola.
+    bind("IRewardsGrantPublisher").to(RewardsGrantPublisher);
+    bind("IRewardsBusinessApi").to(RewardsBusinessApi);
+    // Rewards eligibility — GRANT_FAILED hacia la cola del validador y cliente de POST /events.
+    // El productor necesita REWARDS_ELIGIBILITY_QUEUE_URL y sqs:SendMessage sobre la cola.
+    bind("IRewardsEligibilityPublisher").to(RewardsEligibilityPublisher);
+    bind("IRewardsEligibilityBusinessApi").to(RewardsEligibilityBusinessApi);
     // Collection engine — motor de cobro central multitenant (collect/deregister)
     bind("ICollectionEngineApi").to(CollectionEngineApi);
     // Domain callback — el motor notifica al dominio dueño del cargo (applyCollectionResult)

package/bin/datalake-reports-business/api/DatalakeReportsApi.d.ts

@@ -0,0 +1,13 @@
+import type { IHttpRequest } from "@fiado/http-client";
+import { DatalakeReportDefinition, DatalakeReportResult, IDatalakeReportsApi } from "./interfaces/IDatalakeReportsApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export default class DatalakeReportsApi implements IDatalakeReportsApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    listReports(): Promise<FiadoApiResponse<DatalakeReportDefinition[]>>;
+    getReport(id: string): Promise<FiadoApiResponse<DatalakeReportDefinition>>;
+    runReport(id: string, params: Record<string, unknown>): Promise<FiadoApiResponse<DatalakeReportResult>>;
+    getJob(jobId: string, nextToken?: string): Promise<FiadoApiResponse<DatalakeReportResult>>;
+}
+export {};

package/bin/datalake-reports-business/api/DatalakeReportsApi.js

@@ -0,0 +1,39 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+let DatalakeReportsApi = class DatalakeReportsApi {
+    httpRequest;
+    baseUrl = process.env.DATALAKE_REPORTS_BUSINESS_LAMBDA_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    listReports() {
+        return this.httpRequest.get(`${this.baseUrl}private/reports`);
+    }
+    getReport(id) {
+        return this.httpRequest.get(`${this.baseUrl}private/reports/${encodeURIComponent(id)}`);
+    }
+    runReport(id, params) {
+        return this.httpRequest.post(`${this.baseUrl}private/reports/${encodeURIComponent(id)}/run`, { params });
+    }
+    getJob(jobId, nextToken) {
+        const qs = nextToken ? `?nextToken=${encodeURIComponent(nextToken)}` : "";
+        return this.httpRequest.get(`${this.baseUrl}private/reports/jobs/${encodeURIComponent(jobId)}${qs}`);
+    }
+};
+DatalakeReportsApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], DatalakeReportsApi);
+export default DatalakeReportsApi;

package/bin/datalake-reports-business/api/interfaces/IDatalakeReportsApi.d.ts

@@ -0,0 +1,58 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+/** Contrato local hasta que @fiado/type-kit publique el dominio DatalakeReports (misma forma). */
+export interface DatalakeReportDefinition {
+    id: string;
+    version: number;
+    title: string;
+    description: string;
+    source: {
+        layer: "gold" | "silver";
+        databases: string[];
+    };
+    pii: boolean;
+    audiences: string[];
+    permission: string;
+    mode: "sync" | "async";
+    cacheSeconds: number;
+    params: Record<string, {
+        type: string;
+        required?: boolean;
+        default?: unknown;
+        values?: string[];
+        max?: number;
+        min?: number;
+    }>;
+    principalParams: string[];
+    columns: Array<{
+        name: string;
+        type: string;
+        label: string;
+    }>;
+}
+export interface DatalakeReportResult {
+    status: "RUNNING" | "DONE" | "FAILED";
+    reportId?: string;
+    version?: number;
+    jobId: string;
+    columns?: Array<{
+        name: string;
+        type: string;
+        label: string;
+    }>;
+    rows?: Array<Record<string, string | number | boolean | null>>;
+    rowCount?: number;
+    nextToken?: string;
+    computedAt?: string;
+    fromCache?: boolean;
+    bytesScanned?: number;
+    reason?: string;
+}
+/** Canal privado de datalake-reports-business (reportes predefinidos sobre Gold y Silver). */
+export interface IDatalakeReportsApi {
+    listReports(): Promise<FiadoApiResponse<DatalakeReportDefinition[]>>;
+    getReport(id: string): Promise<FiadoApiResponse<DatalakeReportDefinition>>;
+    /** 200 con filas, o 200 con status RUNNING y jobId si la corrida cae a asíncrono. */
+    runReport(id: string, params: Record<string, unknown>): Promise<FiadoApiResponse<DatalakeReportResult>>;
+    getJob(jobId: string, nextToken?: string): Promise<FiadoApiResponse<DatalakeReportResult>>;
+}
+export {};

package/bin/datalake-reports-business/api/interfaces/IDatalakeReportsApi.js

@@ -0,0 +1 @@
+export {};

package/bin/datalake-reports-business/index.d.ts

@@ -0,0 +1,2 @@
+export * from './api/DatalakeReportsApi.js';
+export * from './api/interfaces/IDatalakeReportsApi.js';

package/bin/datalake-reports-business/index.js

@@ -0,0 +1,2 @@
+export * from './api/DatalakeReportsApi.js';
+export * from './api/interfaces/IDatalakeReportsApi.js';

package/bin/index.d.ts

@@ -65,6 +65,7 @@ export * from "./event-history-business/index.js";
 export * from "./report-processor-business/index.js";
 export * from "./notificationWebsockets/index.js";
 export * from "./people-business/index.js";
+export * from "./datalake-reports-business/index.js";
 export * from "./places-business/index.js";
 export * from "./stp-business/index.js";
 export * from "./multicommServicePayment/index.js";
@@ -122,3 +123,5 @@ export * from "./domain-callback/index.js";
 export * from "./datacultrConnector/index.js";
 export * from "./webhook-business/index.js";
 export * from "./trustonicConnector/index.js";
+export * from "./rewards-business/index.js";
+export * from "./rewards-eligibility-business/index.js";

package/bin/index.js

@@ -65,6 +65,7 @@ export * from "./event-history-business/index.js";
 export * from "./report-processor-business/index.js";
 export * from "./notificationWebsockets/index.js";
 export * from "./people-business/index.js";
+export * from "./datalake-reports-business/index.js";
 export * from "./places-business/index.js";
 export * from "./stp-business/index.js";
 export * from "./multicommServicePayment/index.js";
@@ -122,3 +123,5 @@ export * from "./domain-callback/index.js";
 export * from "./datacultrConnector/index.js";
 export * from "./webhook-business/index.js";
 export * from "./trustonicConnector/index.js";
+export * from "./rewards-business/index.js";
+export * from "./rewards-eligibility-business/index.js";

package/bin/rewards-business/api/RewardsBusinessApi.d.ts

@@ -0,0 +1,12 @@
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { IHttpRequest } from "@fiado/http-client";
+import type { GrantResponse, PackageContractResponse } from "@fiado/type-kit/bin/rewards/index.js";
+import type { IRewardsBusinessApi } from "./interfaces/IRewardsBusinessApi.js";
+/** Contrato y semántica completos → `IRewardsBusinessApi` (`StandardResponse` → leer `result.data`). */
+export declare class RewardsBusinessApi implements IRewardsBusinessApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    getPackage(packageId: string): Promise<StandardResponse<PackageContractResponse>>;
+    getGrant(grantId: string): Promise<StandardResponse<GrantResponse>>;
+}

package/bin/rewards-business/api/RewardsBusinessApi.js

@@ -0,0 +1,38 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+/** Contrato y semántica completos → `IRewardsBusinessApi` (`StandardResponse` → leer `result.data`). */
+let RewardsBusinessApi = class RewardsBusinessApi {
+    httpRequest;
+    // El buildspec publica la URL en SSM con "/" final (`.../v1/`): se normaliza para no armar "//packages".
+    baseUrl = (process.env.REWARDS_BUSINESS_LAMBDA_URL || "").replace(/\/+$/, "");
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async getPackage(packageId) {
+        // PROVISIONAL: sin prefijo `/private` (la API que resuelve el SSM es la PRIVADA de rewards-business).
+        // La ruta base exacta (con o sin `/private`) la fija el plan de rewards-business; si cambia, ajustar aquí.
+        const url = `${this.baseUrl}/packages/${encodeURIComponent(packageId)}`;
+        return await this.httpRequest.get(url);
+    }
+    async getGrant(grantId) {
+        const url = `${this.baseUrl}/grants/${encodeURIComponent(grantId)}`;
+        return await this.httpRequest.get(url);
+    }
+};
+RewardsBusinessApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], RewardsBusinessApi);
+export { RewardsBusinessApi };

package/bin/rewards-business/api/interfaces/IRewardsBusinessApi.d.ts

@@ -0,0 +1,33 @@
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { GrantResponse, PackageContractResponse } from "@fiado/type-kit/bin/rewards/index.js";
+/**
+ * Cliente de la API privada de `rewards-business`. SOLO LECTURA: no hay endpoint privado de
+ * escritura (spec 2026-10-05, D11); los pedidos de entrega se publican con `IRewardsGrantPublisher`.
+ *
+ * Devuelve `StandardResponse<T>` → leer `result.data`. NO uses `FiadoApiResponse`: los dos tipos no
+ * son intercambiables en TypeScript (`code`/`date` admiten `null` en uno y no en el otro).
+ *
+ * Env var requerida en el consumer: `REWARDS_BUSINESS_LAMBDA_URL`. El template.yml del consumer la
+ * setea con:
+ *
+ *   REWARDS_BUSINESS_LAMBDA_URL: '{{resolve:ssm:fiado-rewardsbusiness-lambda}}'
+ *
+ * El nombre del parámetro SSM es el `stack_name` del `samconfig.toml` de rewards-business (el
+ * buildspec registra el SSM con ese nombre): debe coincidir con el de arriba.
+ */
+export interface IRewardsBusinessApi {
+    /**
+     * Contrato de entrada de un paquete: por `itemKey`, las `dependencies` de su recompensa, más
+     * nombre, descripción, costo y `totalCost` por moneda. El backoffice del validador lo usa para
+     * no dejar activar una evaluación con un paquete inactivo o con inputs que no cubren el contrato.
+     *
+     * @throws propaga el error del destino (404 `PACKAGE_NOT_FOUND`); nunca devuelve fallback.
+     */
+    getPackage(packageId: string): Promise<StandardResponse<PackageContractResponse>>;
+    /**
+     * Estado de una entrega y de cada ítem. El `grantId` se calcula con `grantIdFor`.
+     *
+     * @throws propaga el error del destino (404 `GRANT_NOT_FOUND`); nunca devuelve fallback.
+     */
+    getGrant(grantId: string): Promise<StandardResponse<GrantResponse>>;
+}

package/bin/rewards-business/api/interfaces/IRewardsBusinessApi.js

@@ -0,0 +1 @@
+export {};

package/bin/rewards-business/grantIdFor.d.ts

@@ -0,0 +1,17 @@
+/** Largo (hex) del `grantId`. 128 bits: colisión despreciable. */
+export declare const REWARDS_GRANT_ID_LENGTH = 32;
+/** Límite de `BenefitPaymentRequest.transactionNumber`. */
+export declare const REWARDS_TRANSACTION_NUMBER_MAX_LENGTH = 64;
+/**
+ * Largo máximo del `itemKey` de un paquete para que `RW-{grantId}-{itemKey}` quepa en 64:
+ * 64 − len('RW-') − len('-') − 32 = 28. rewards-business debe validarlo al guardar un paquete.
+ */
+export declare const REWARDS_MAX_ITEM_KEY_LENGTH: number;
+/**
+ * `grantId` determinístico de una entrega de rewards (spec A 5.3, D11). Lo calcula el llamador al
+ * publicar `GRANT_REQUESTED` (para conocerlo sin esperar respuesta) y el worker de rewards al
+ * consumirlo: tienen que dar lo mismo, por eso es UNA función compartida.
+ *
+ * El largo de `service` va como prefijo para que ('a:b','c') y ('a','b:c') no colisionen.
+ */
+export declare function grantIdFor(service: string, idempotencyKey: string): string;

package/bin/rewards-business/grantIdFor.js

@@ -0,0 +1,30 @@
+import { createHash } from 'node:crypto';
+/** Largo (hex) del `grantId`. 128 bits: colisión despreciable. */
+export const REWARDS_GRANT_ID_LENGTH = 32;
+/** Límite de `BenefitPaymentRequest.transactionNumber`. */
+export const REWARDS_TRANSACTION_NUMBER_MAX_LENGTH = 64;
+const TRANSACTION_NUMBER_PREFIX = 'RW-';
+/**
+ * Largo máximo del `itemKey` de un paquete para que `RW-{grantId}-{itemKey}` quepa en 64:
+ * 64 − len('RW-') − len('-') − 32 = 28. rewards-business debe validarlo al guardar un paquete.
+ */
+export const REWARDS_MAX_ITEM_KEY_LENGTH = REWARDS_TRANSACTION_NUMBER_MAX_LENGTH - TRANSACTION_NUMBER_PREFIX.length - 1 - REWARDS_GRANT_ID_LENGTH;
+/**
+ * `grantId` determinístico de una entrega de rewards (spec A 5.3, D11). Lo calcula el llamador al
+ * publicar `GRANT_REQUESTED` (para conocerlo sin esperar respuesta) y el worker de rewards al
+ * consumirlo: tienen que dar lo mismo, por eso es UNA función compartida.
+ *
+ * El largo de `service` va como prefijo para que ('a:b','c') y ('a','b:c') no colisionen.
+ */
+export function grantIdFor(service, idempotencyKey) {
+    if (!service) {
+        throw new Error('grantIdFor: service es obligatorio');
+    }
+    if (!idempotencyKey) {
+        throw new Error('grantIdFor: idempotencyKey es obligatoria');
+    }
+    return createHash('sha256')
+        .update(`${service.length}:${service}:${idempotencyKey}`)
+        .digest('hex')
+        .slice(0, REWARDS_GRANT_ID_LENGTH);
+}

package/bin/rewards-business/index.d.ts

@@ -0,0 +1,5 @@
+export * from './grantIdFor.js';
+export * from './queue/interfaces/IRewardsGrantPublisher.js';
+export * from './queue/RewardsGrantPublisher.js';
+export * from './api/interfaces/IRewardsBusinessApi.js';
+export * from './api/RewardsBusinessApi.js';

package/bin/rewards-business/index.js

@@ -0,0 +1,5 @@
+export * from './grantIdFor.js';
+export * from './queue/interfaces/IRewardsGrantPublisher.js';
+export * from './queue/RewardsGrantPublisher.js';
+export * from './api/interfaces/IRewardsBusinessApi.js';
+export * from './api/RewardsBusinessApi.js';

package/bin/rewards-business/queue/RewardsGrantPublisher.d.ts

@@ -0,0 +1,7 @@
+import type { GrantRequestedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+import { IRewardsGrantPublisher, RewardsGrantBatchResult } from "./interfaces/IRewardsGrantPublisher.js";
+export declare class RewardsGrantPublisher implements IRewardsGrantPublisher {
+    private readonly REWARDS_GRANT_QUEUE_URL;
+    publish(message: GrantRequestedMessage): Promise<void>;
+    publishBatch(messages: GrantRequestedMessage[]): Promise<RewardsGrantBatchResult>;
+}

package/bin/rewards-business/queue/RewardsGrantPublisher.js

@@ -0,0 +1,83 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { SendMessageBatchCommand, SendMessageCommand, SQSClient } from "@aws-sdk/client-sqs";
+import { injectable } from "inversify";
+const SQS_BATCH_MAX_ENTRIES = 10;
+// Límite SQS: 262 144 bytes por SendMessageBatch. Margen para no rozarlo.
+const SQS_BATCH_MAX_BYTES = 250_000;
+let RewardsGrantPublisher = class RewardsGrantPublisher {
+    REWARDS_GRANT_QUEUE_URL = process.env.REWARDS_GRANT_QUEUE_URL;
+    async publish(message) {
+        if (!this.REWARDS_GRANT_QUEUE_URL) {
+            throw new Error("Error publishing message to RewardsGrantQueue: REWARDS_GRANT_QUEUE_URL no está configurada");
+        }
+        try {
+            const client = new SQSClient();
+            // Cola ESTÁNDAR (no FIFO): sin MessageGroupId/MessageDeduplicationId ni orden garantizado.
+            // La idempotencia la hace el consumidor con el `grantId` derivado de (source.service +
+            // idempotencyKey) y un PutItem condicional.
+            const sendMessageRequest = {
+                QueueUrl: this.REWARDS_GRANT_QUEUE_URL,
+                MessageBody: JSON.stringify(message),
+            };
+            await client.send(new SendMessageCommand(sendMessageRequest));
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing message to RewardsGrantQueue: ${errorMessage}`);
+        }
+    }
+    async publishBatch(messages) {
+        const failedIdempotencyKeys = [];
+        const senderFaultIdempotencyKeys = [];
+        if (messages.length === 0) {
+            return { failedIdempotencyKeys, senderFaultIdempotencyKeys };
+        }
+        if (!this.REWARDS_GRANT_QUEUE_URL) {
+            throw new Error("Error publishing batch to RewardsGrantQueue: REWARDS_GRANT_QUEUE_URL no está configurada");
+        }
+        try {
+            const client = new SQSClient();
+            const keyByEntryId = new Map();
+            let current = [];
+            let currentBytes = 0;
+            const flush = async () => {
+                if (current.length === 0)
+                    return;
+                const result = await client.send(new SendMessageBatchCommand({ QueueUrl: this.REWARDS_GRANT_QUEUE_URL, Entries: current }));
+                for (const failed of result.Failed ?? []) {
+                    const key = failed.Id ? keyByEntryId.get(failed.Id) : undefined;
+                    if (key)
+                        (failed.SenderFault ? senderFaultIdempotencyKeys : failedIdempotencyKeys).push(key);
+                }
+                current = [];
+                currentBytes = 0;
+            };
+            for (let index = 0; index < messages.length; index += 1) {
+                const body = JSON.stringify(messages[index]);
+                const bytes = Buffer.byteLength(body, "utf8");
+                if (current.length >= SQS_BATCH_MAX_ENTRIES || (current.length > 0 && currentBytes + bytes > SQS_BATCH_MAX_BYTES)) {
+                    await flush();
+                }
+                const id = `m${index}`;
+                keyByEntryId.set(id, messages[index].idempotencyKey);
+                current.push({ Id: id, MessageBody: body });
+                currentBytes += bytes;
+            }
+            await flush();
+            return { failedIdempotencyKeys, senderFaultIdempotencyKeys };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing batch to RewardsGrantQueue: ${errorMessage}`);
+        }
+    }
+};
+RewardsGrantPublisher = __decorate([
+    injectable()
+], RewardsGrantPublisher);
+export { RewardsGrantPublisher };

package/bin/rewards-business/queue/interfaces/IRewardsGrantPublisher.d.ts

@@ -0,0 +1,32 @@
+import type { GrantRequestedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+/**
+ * Resultado de `publishBatch`: las `idempotencyKey` que SQS NO aceptó.
+ * - `failedIdempotencyKeys`: `SenderFault=false` (falla transitoria de SQS) → el llamador PUEDE reintentar.
+ * - `senderFaultIdempotencyKeys`: `SenderFault=true` (el mensaje es inválido para SQS) → NO reintentar:
+ *   volver a mandarlo falla igual.
+ */
+export interface RewardsGrantBatchResult {
+    failedIdempotencyKeys: string[];
+    senderFaultIdempotencyKeys: string[];
+}
+/**
+ * Publisher de pedidos de entrega hacia `RewardsGrantQueue`, que consume `rewards-business`
+ * (spec 2026-10-05, D11). La cola es COMPARTIDA entre lambdas: el estándar Fiado publica a una cola
+ * compartida con un publisher de `@fiado/api-invoker` (mismo patrón que `ITransactionPublisher`).
+ *
+ * Que `publish` funcione ES la aceptación del pedido: no hay respuesta síncrona. El `grantId` no
+ * viaja en el mensaje; el llamador lo conoce con `grantIdFor(source.service, idempotencyKey)`.
+ *
+ * Env var requerida en el consumer: `REWARDS_GRANT_QUEUE_URL`
+ *   (`!ImportValue SqsRewardsGrantQueueUrl`) y el permiso `sqs:SendMessage` sobre la cola.
+ */
+export interface IRewardsGrantPublisher {
+    publish(message: GrantRequestedMessage): Promise<void>;
+    /**
+     * Publica varios pedidos con `SendMessageBatch` (tandas de 10 y de ≤ 250 000 bytes). El validador
+     * suelta lo masivo por tramos con esto (spec B 7.1 y 7.6). Un fallo parcial NO lanza: se devuelve
+     * en `failedIdempotencyKeys` (reintentables) o `senderFaultIdempotencyKeys` (NO reintentar). Si la
+     * llamada entera falla, lanza (reintento idempotente por `grantId`).
+     */
+    publishBatch(messages: GrantRequestedMessage[]): Promise<RewardsGrantBatchResult>;
+}

package/bin/rewards-business/queue/interfaces/IRewardsGrantPublisher.js

@@ -0,0 +1 @@
+export {};

package/bin/rewards-eligibility-business/api/RewardsEligibilityBusinessApi.d.ts

@@ -0,0 +1,12 @@
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { IHttpRequest } from "@fiado/http-client";
+import type { GetRunResponse, PostEventRequest, PostEventResponse } from "@fiado/type-kit/bin/rewardsEligibility/index.js";
+import type { IRewardsEligibilityBusinessApi } from "./interfaces/IRewardsEligibilityBusinessApi.js";
+/** Contrato y semántica completos → `IRewardsEligibilityBusinessApi` (`StandardResponse` → leer `result.data`). */
+export declare class RewardsEligibilityBusinessApi implements IRewardsEligibilityBusinessApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    postEvent(request: PostEventRequest): Promise<StandardResponse<PostEventResponse>>;
+    getRun(runId: string): Promise<StandardResponse<GetRunResponse>>;
+}

package/bin/rewards-eligibility-business/api/RewardsEligibilityBusinessApi.js

@@ -0,0 +1,37 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+/** Contrato y semántica completos → `IRewardsEligibilityBusinessApi` (`StandardResponse` → leer `result.data`). */
+let RewardsEligibilityBusinessApi = class RewardsEligibilityBusinessApi {
+    httpRequest;
+    // El buildspec publica la URL en SSM con "/" final (`.../v1/`): se normaliza para no armar "//events".
+    baseUrl = (process.env.REWARDS_ELIGIBILITY_BUSINESS_LAMBDA_URL || "").replace(/\/+$/, "");
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async postEvent(request) {
+        // PROVISIONAL: sin prefijo `/private` (la API que resuelve el SSM es la PRIVADA).
+        // La ruta base exacta (con o sin `/private`) la fija el plan del validador; si cambia, ajustar aquí.
+        return await this.httpRequest.post(`${this.baseUrl}/events`, request);
+    }
+    async getRun(runId) {
+        const url = `${this.baseUrl}/runs/${encodeURIComponent(runId)}`;
+        return await this.httpRequest.get(url);
+    }
+};
+RewardsEligibilityBusinessApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], RewardsEligibilityBusinessApi);
+export { RewardsEligibilityBusinessApi };

package/bin/rewards-eligibility-business/api/interfaces/IRewardsEligibilityBusinessApi.d.ts

@@ -0,0 +1,34 @@
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { GetRunResponse, PostEventRequest, PostEventResponse } from "@fiado/type-kit/bin/rewardsEligibility/index.js";
+/**
+ * Cliente de la API privada de `rewards-eligibility-business` (spec 2026-10-06, §6).
+ *
+ * Devuelve `StandardResponse<T>` → leer `result.data`. Env var requerida en el consumer:
+ * `REWARDS_ELIGIBILITY_BUSINESS_LAMBDA_URL`, seteada con
+ *
+ *   REWARDS_ELIGIBILITY_BUSINESS_LAMBDA_URL: '{{resolve:ssm:fiado-rewardseligibilitybusiness-lambda}}'
+ *
+ * (el nombre del SSM es el `stack_name` del `samconfig.toml` del validador).
+ *
+ * El emisor NO decide la elegibilidad: informa qué pasó y quién participó (E3). La llamada es NO
+ * bloqueante para el flujo del emisor: si falla, el emisor sigue y reintenta con el mismo
+ * `idempotencyKey`.
+ *
+ * RUTA BASE PROVISIONAL: se fija en el plan del validador (`rewards-eligibility-business`); si cambia
+ * (con o sin `/private`), se ajusta este cliente y se republica.
+ */
+export interface IRewardsEligibilityBusinessApi {
+    /**
+     * Dispara las evaluaciones suscritas al `eventKey`. Responde 202 con una corrida por evaluación
+     * (`runs` vacío si nadie escucha el evento).
+     *
+     * @throws propaga el error del destino (400 `INPUT_INVALID`, 404 `EVENT_TYPE_NOT_FOUND`).
+     */
+    postEvent(request: PostEventRequest): Promise<StandardResponse<PostEventResponse>>;
+    /**
+     * Estado de una corrida y una página de sus resultados.
+     *
+     * @throws propaga el error del destino (404 `RUN_NOT_FOUND`); nunca devuelve fallback.
+     */
+    getRun(runId: string): Promise<StandardResponse<GetRunResponse>>;
+}

package/bin/rewards-eligibility-business/api/interfaces/IRewardsEligibilityBusinessApi.js

@@ -0,0 +1 @@
+export {};

package/bin/rewards-eligibility-business/index.d.ts

@@ -0,0 +1,4 @@
+export * from './queue/interfaces/IRewardsEligibilityPublisher.js';
+export * from './queue/RewardsEligibilityPublisher.js';
+export * from './api/interfaces/IRewardsEligibilityBusinessApi.js';
+export * from './api/RewardsEligibilityBusinessApi.js';

package/bin/rewards-eligibility-business/index.js

@@ -0,0 +1,4 @@
+export * from './queue/interfaces/IRewardsEligibilityPublisher.js';
+export * from './queue/RewardsEligibilityPublisher.js';
+export * from './api/interfaces/IRewardsEligibilityBusinessApi.js';
+export * from './api/RewardsEligibilityBusinessApi.js';

package/bin/rewards-eligibility-business/queue/RewardsEligibilityPublisher.d.ts

@@ -0,0 +1,6 @@
+import type { GrantFailedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+import { IRewardsEligibilityPublisher } from "./interfaces/IRewardsEligibilityPublisher.js";
+export declare class RewardsEligibilityPublisher implements IRewardsEligibilityPublisher {
+    private readonly REWARDS_ELIGIBILITY_QUEUE_URL;
+    publish(message: GrantFailedMessage): Promise<void>;
+}

package/bin/rewards-eligibility-business/queue/RewardsEligibilityPublisher.js

@@ -0,0 +1,34 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { SendMessageCommand, SQSClient } from "@aws-sdk/client-sqs";
+import { injectable } from "inversify";
+let RewardsEligibilityPublisher = class RewardsEligibilityPublisher {
+    REWARDS_ELIGIBILITY_QUEUE_URL = process.env.REWARDS_ELIGIBILITY_QUEUE_URL;
+    async publish(message) {
+        if (!this.REWARDS_ELIGIBILITY_QUEUE_URL) {
+            throw new Error("Error publishing message to RewardsEligibilityQueue: REWARDS_ELIGIBILITY_QUEUE_URL no está configurada");
+        }
+        try {
+            const client = new SQSClient();
+            // Cola ESTÁNDAR: el consumidor descarta avisos repetidos o atrasados comparando el `n`
+            // de la idempotencyKey con el del ledger (spec B 7.7), así que no hace falta dedup en la cola.
+            const sendMessageRequest = {
+                QueueUrl: this.REWARDS_ELIGIBILITY_QUEUE_URL,
+                MessageBody: JSON.stringify(message),
+            };
+            await client.send(new SendMessageCommand(sendMessageRequest));
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing message to RewardsEligibilityQueue: ${errorMessage}`);
+        }
+    }
+};
+RewardsEligibilityPublisher = __decorate([
+    injectable()
+], RewardsEligibilityPublisher);
+export { RewardsEligibilityPublisher };

package/bin/rewards-eligibility-business/queue/interfaces/IRewardsEligibilityPublisher.d.ts

@@ -0,0 +1,15 @@
+import type { GrantFailedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+/**
+ * Publisher del aviso `GRANT_FAILED` hacia la cola del validador (`RewardsEligibilityQueue`), que
+ * consume `rewards-eligibility-business` para liberar ledger y cupo (spec A 6.5, spec B 7.7).
+ *
+ * Lo produce `rewards-business` cuando una entrega termina SIN ningún ítem entregado (FAILED o
+ * REJECTED). Una entrega PARTIAL no avisa. El tipo es una unión cerrada a propósito: meter otro
+ * mensaje en una cola compartida obliga a tocar también al consumidor.
+ *
+ * Env var requerida en el consumer: `REWARDS_ELIGIBILITY_QUEUE_URL`
+ *   (`!ImportValue SqsRewardsEligibilityQueueUrl`) y el permiso `sqs:SendMessage` sobre la cola.
+ */
+export interface IRewardsEligibilityPublisher {
+    publish(message: GrantFailedMessage): Promise<void>;
+}

package/bin/rewards-eligibility-business/queue/interfaces/IRewardsEligibilityPublisher.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "5.115.0",
+  "version": "5.117.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^3.14.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.509.0",
+    "@fiado/type-kit": "^3.510.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/container.config.ts

@@ -107,6 +107,8 @@ import { IReportProcessorBusinessApi } from "./report-processor-business/index.j
 import { INotificationWSMessagesPublisher } from "./notificationWebsockets/index.js";
 import NotificationWSMessagePublisher from "./notificationWebsockets/queue/NotificationWSMessagePublisher.js";
 import PeopleBusinessApi from "./people-business/api/PeopleBusinessApi.js";
+import DatalakeReportsApi from "./datalake-reports-business/api/DatalakeReportsApi.js";
+import { IDatalakeReportsApi } from "./datalake-reports-business/index.js";
 import { IPeopleBusinessApi } from "./people-business/index.js";
 import PlacesBusinessApi from "./places-business/api/PlacesBusinessApi.js";
 import { IPlacesBusinessApi } from "./places-business/index.js";
@@ -204,6 +206,10 @@ import { IKycVerificationsBusinessApi, KycVerificationsBusinessApi } from "./kyc
 // Webhook business — publisher de la cola compartida de entrega de eventos a suscriptores externos
 import { IWebhookBusinessPublisher, WebhookBusinessPublisher } from "./webhook-business/index.js";
 import { ICentralPaymentsWebhookApi, CentralPaymentsWebhookApi } from "./central-payments-webhook/index.js";
+// Rewards — publisher de pedidos de entrega + cliente de lecturas privadas (rewards-business) y
+// publisher de GRANT_FAILED + cliente del validador (rewards-eligibility-business)
+import { IRewardsGrantPublisher, IRewardsBusinessApi, RewardsGrantPublisher, RewardsBusinessApi } from "./rewards-business/index.js";
+import { IRewardsEligibilityPublisher, IRewardsEligibilityBusinessApi, RewardsEligibilityPublisher, RewardsEligibilityBusinessApi } from "./rewards-eligibility-business/index.js";
 // Collection engine — cliente del motor de cobro central (collect/deregister)
 import { ICollectionEngineApi } from "./collection-engine/index.js";
 import CollectionEngineApi from "./collection-engine/api/CollectionEngineApi.js";
@@ -293,6 +299,7 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     bind<IEventHistoryApi>("IEventHistoryApi").to(EventHistoryApi);
     bind<IReportProcessorBusinessApi>("IReportProcessorBusinessApi").to(ReportProcessorBusinessApi);
     bind<IPeopleBusinessApi>("IPeopleBusinessApi").to(PeopleBusinessApi);
+    bind<IDatalakeReportsApi>("IDatalakeReportsApi").to(DatalakeReportsApi);
     bind<IPlacesBusinessApi>("IPlacesBusinessApi").to(PlacesBusinessApi);
     bind<ISTPBusinessApi>("ISTPBusinessApi").to(STPBusinessApi);
     bind<IProductPaymentApi>("IProductPaymentApi").to(ProductPaymentApi);
@@ -395,6 +402,16 @@ export const apiInvokerBindings = new ContainerModule(({ bind }) => {
     bind<IWebhookBusinessPublisher>("IWebhookBusinessPublisher").to(WebhookBusinessPublisher);
     bind<ICentralPaymentsWebhookApi>("ICentralPaymentsWebhookApi").to(CentralPaymentsWebhookApi);
 
+    // Rewards — cola compartida RewardsGrantQueue (pedidos de entrega) y lecturas privadas de rewards-business.
+    // El productor necesita REWARDS_GRANT_QUEUE_URL y sqs:SendMessage sobre la cola.
+    bind<IRewardsGrantPublisher>("IRewardsGrantPublisher").to(RewardsGrantPublisher);
+    bind<IRewardsBusinessApi>("IRewardsBusinessApi").to(RewardsBusinessApi);
+
+    // Rewards eligibility — GRANT_FAILED hacia la cola del validador y cliente de POST /events.
+    // El productor necesita REWARDS_ELIGIBILITY_QUEUE_URL y sqs:SendMessage sobre la cola.
+    bind<IRewardsEligibilityPublisher>("IRewardsEligibilityPublisher").to(RewardsEligibilityPublisher);
+    bind<IRewardsEligibilityBusinessApi>("IRewardsEligibilityBusinessApi").to(RewardsEligibilityBusinessApi);
+
     // Collection engine — motor de cobro central multitenant (collect/deregister)
     bind<ICollectionEngineApi>("ICollectionEngineApi").to(CollectionEngineApi);
 

package/src/datalake-reports-business/api/DatalakeReportsApi.ts

@@ -0,0 +1,30 @@
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { DatalakeReportDefinition, DatalakeReportResult, IDatalakeReportsApi } from "./interfaces/IDatalakeReportsApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+@injectable()
+export default class DatalakeReportsApi implements IDatalakeReportsApi {
+
+    private readonly baseUrl = process.env.DATALAKE_REPORTS_BUSINESS_LAMBDA_URL || "";
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {
+    }
+
+    listReports(): Promise<FiadoApiResponse<DatalakeReportDefinition[]>> {
+        return this.httpRequest.get(`${this.baseUrl}private/reports`);
+    }
+
+    getReport(id: string): Promise<FiadoApiResponse<DatalakeReportDefinition>> {
+        return this.httpRequest.get(`${this.baseUrl}private/reports/${encodeURIComponent(id)}`);
+    }
+
+    runReport(id: string, params: Record<string, unknown>): Promise<FiadoApiResponse<DatalakeReportResult>> {
+        return this.httpRequest.post(`${this.baseUrl}private/reports/${encodeURIComponent(id)}/run`, { params });
+    }
+
+    getJob(jobId: string, nextToken?: string): Promise<FiadoApiResponse<DatalakeReportResult>> {
+        const qs = nextToken ? `?nextToken=${encodeURIComponent(nextToken)}` : "";
+        return this.httpRequest.get(`${this.baseUrl}private/reports/jobs/${encodeURIComponent(jobId)}${qs}`);
+    }
+}

package/src/datalake-reports-business/api/interfaces/IDatalakeReportsApi.ts

@@ -0,0 +1,27 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+
+/** Contrato local hasta que @fiado/type-kit publique el dominio DatalakeReports (misma forma). */
+export interface DatalakeReportDefinition {
+    id: string; version: number; title: string; description: string;
+    source: { layer: "gold" | "silver"; databases: string[] };
+    pii: boolean; audiences: string[]; permission: string; mode: "sync" | "async"; cacheSeconds: number;
+    params: Record<string, { type: string; required?: boolean; default?: unknown; values?: string[]; max?: number; min?: number }>;
+    principalParams: string[];
+    columns: Array<{ name: string; type: string; label: string }>;
+}
+export interface DatalakeReportResult {
+    status: "RUNNING" | "DONE" | "FAILED";
+    reportId?: string; version?: number; jobId: string;
+    columns?: Array<{ name: string; type: string; label: string }>;
+    rows?: Array<Record<string, string | number | boolean | null>>;
+    rowCount?: number; nextToken?: string; computedAt?: string; fromCache?: boolean; bytesScanned?: number; reason?: string;
+}
+
+/** Canal privado de datalake-reports-business (reportes predefinidos sobre Gold y Silver). */
+export interface IDatalakeReportsApi {
+    listReports(): Promise<FiadoApiResponse<DatalakeReportDefinition[]>>;
+    getReport(id: string): Promise<FiadoApiResponse<DatalakeReportDefinition>>;
+    /** 200 con filas, o 200 con status RUNNING y jobId si la corrida cae a asíncrono. */
+    runReport(id: string, params: Record<string, unknown>): Promise<FiadoApiResponse<DatalakeReportResult>>;
+    getJob(jobId: string, nextToken?: string): Promise<FiadoApiResponse<DatalakeReportResult>>;
+}

package/src/datalake-reports-business/index.ts

@@ -0,0 +1,2 @@
+export * from './api/DatalakeReportsApi.js';
+export * from './api/interfaces/IDatalakeReportsApi.js';

package/src/index.ts

@@ -65,6 +65,7 @@ export * from "./event-history-business/index.js";
 export * from "./report-processor-business/index.js";
 export * from "./notificationWebsockets/index.js";
 export * from "./people-business/index.js";
+export * from "./datalake-reports-business/index.js";
 export * from "./places-business/index.js";
 export * from "./stp-business/index.js";
 export * from "./multicommServicePayment/index.js";
@@ -122,3 +123,5 @@ export * from "./domain-callback/index.js";
 export * from "./datacultrConnector/index.js";
 export * from "./webhook-business/index.js";
 export * from "./trustonicConnector/index.js";
+export * from "./rewards-business/index.js";
+export * from "./rewards-eligibility-business/index.js";

package/src/rewards-business/api/RewardsBusinessApi.ts

@@ -0,0 +1,27 @@
+import { inject, injectable } from "inversify";
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { IHttpRequest } from "@fiado/http-client";
+import type { GrantResponse, PackageContractResponse } from "@fiado/type-kit/bin/rewards/index.js";
+import type { IRewardsBusinessApi } from "./interfaces/IRewardsBusinessApi.js";
+
+/** Contrato y semántica completos → `IRewardsBusinessApi` (`StandardResponse` → leer `result.data`). */
+@injectable()
+export class RewardsBusinessApi implements IRewardsBusinessApi {
+
+    // El buildspec publica la URL en SSM con "/" final (`.../v1/`): se normaliza para no armar "//packages".
+    private readonly baseUrl = (process.env.REWARDS_BUSINESS_LAMBDA_URL || "").replace(/\/+$/, "");
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async getPackage(packageId: string): Promise<StandardResponse<PackageContractResponse>> {
+        // PROVISIONAL: sin prefijo `/private` (la API que resuelve el SSM es la PRIVADA de rewards-business).
+        // La ruta base exacta (con o sin `/private`) la fija el plan de rewards-business; si cambia, ajustar aquí.
+        const url = `${this.baseUrl}/packages/${encodeURIComponent(packageId)}`;
+        return await this.httpRequest.get<StandardResponse<PackageContractResponse>>(url);
+    }
+
+    async getGrant(grantId: string): Promise<StandardResponse<GrantResponse>> {
+        const url = `${this.baseUrl}/grants/${encodeURIComponent(grantId)}`;
+        return await this.httpRequest.get<StandardResponse<GrantResponse>>(url);
+    }
+}

package/src/rewards-business/api/interfaces/IRewardsBusinessApi.ts

@@ -0,0 +1,35 @@
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { GrantResponse, PackageContractResponse } from "@fiado/type-kit/bin/rewards/index.js";
+
+/**
+ * Cliente de la API privada de `rewards-business`. SOLO LECTURA: no hay endpoint privado de
+ * escritura (spec 2026-10-05, D11); los pedidos de entrega se publican con `IRewardsGrantPublisher`.
+ *
+ * Devuelve `StandardResponse<T>` → leer `result.data`. NO uses `FiadoApiResponse`: los dos tipos no
+ * son intercambiables en TypeScript (`code`/`date` admiten `null` en uno y no en el otro).
+ *
+ * Env var requerida en el consumer: `REWARDS_BUSINESS_LAMBDA_URL`. El template.yml del consumer la
+ * setea con:
+ *
+ *   REWARDS_BUSINESS_LAMBDA_URL: '{{resolve:ssm:fiado-rewardsbusiness-lambda}}'
+ *
+ * El nombre del parámetro SSM es el `stack_name` del `samconfig.toml` de rewards-business (el
+ * buildspec registra el SSM con ese nombre): debe coincidir con el de arriba.
+ */
+export interface IRewardsBusinessApi {
+    /**
+     * Contrato de entrada de un paquete: por `itemKey`, las `dependencies` de su recompensa, más
+     * nombre, descripción, costo y `totalCost` por moneda. El backoffice del validador lo usa para
+     * no dejar activar una evaluación con un paquete inactivo o con inputs que no cubren el contrato.
+     *
+     * @throws propaga el error del destino (404 `PACKAGE_NOT_FOUND`); nunca devuelve fallback.
+     */
+    getPackage(packageId: string): Promise<StandardResponse<PackageContractResponse>>;
+
+    /**
+     * Estado de una entrega y de cada ítem. El `grantId` se calcula con `grantIdFor`.
+     *
+     * @throws propaga el error del destino (404 `GRANT_NOT_FOUND`); nunca devuelve fallback.
+     */
+    getGrant(grantId: string): Promise<StandardResponse<GrantResponse>>;
+}

package/src/rewards-business/grantIdFor.ts

@@ -0,0 +1,36 @@
+import { createHash } from 'node:crypto';
+
+/** Largo (hex) del `grantId`. 128 bits: colisión despreciable. */
+export const REWARDS_GRANT_ID_LENGTH = 32;
+
+/** Límite de `BenefitPaymentRequest.transactionNumber`. */
+export const REWARDS_TRANSACTION_NUMBER_MAX_LENGTH = 64;
+
+const TRANSACTION_NUMBER_PREFIX = 'RW-';
+
+/**
+ * Largo máximo del `itemKey` de un paquete para que `RW-{grantId}-{itemKey}` quepa en 64:
+ * 64 − len('RW-') − len('-') − 32 = 28. rewards-business debe validarlo al guardar un paquete.
+ */
+export const REWARDS_MAX_ITEM_KEY_LENGTH =
+    REWARDS_TRANSACTION_NUMBER_MAX_LENGTH - TRANSACTION_NUMBER_PREFIX.length - 1 - REWARDS_GRANT_ID_LENGTH;
+
+/**
+ * `grantId` determinístico de una entrega de rewards (spec A 5.3, D11). Lo calcula el llamador al
+ * publicar `GRANT_REQUESTED` (para conocerlo sin esperar respuesta) y el worker de rewards al
+ * consumirlo: tienen que dar lo mismo, por eso es UNA función compartida.
+ *
+ * El largo de `service` va como prefijo para que ('a:b','c') y ('a','b:c') no colisionen.
+ */
+export function grantIdFor(service: string, idempotencyKey: string): string {
+    if (!service) {
+        throw new Error('grantIdFor: service es obligatorio');
+    }
+    if (!idempotencyKey) {
+        throw new Error('grantIdFor: idempotencyKey es obligatoria');
+    }
+    return createHash('sha256')
+        .update(`${service.length}:${service}:${idempotencyKey}`)
+        .digest('hex')
+        .slice(0, REWARDS_GRANT_ID_LENGTH);
+}

package/src/rewards-business/index.ts

@@ -0,0 +1,5 @@
+export * from './grantIdFor.js';
+export * from './queue/interfaces/IRewardsGrantPublisher.js';
+export * from './queue/RewardsGrantPublisher.js';
+export * from './api/interfaces/IRewardsBusinessApi.js';
+export * from './api/RewardsBusinessApi.js';

package/src/rewards-business/queue/RewardsGrantPublisher.ts

@@ -0,0 +1,80 @@
+import { SendMessageBatchCommand, SendMessageBatchRequestEntry, SendMessageCommand, SendMessageRequest, SQSClient } from "@aws-sdk/client-sqs";
+import { injectable } from "inversify";
+import type { GrantRequestedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+import { IRewardsGrantPublisher, RewardsGrantBatchResult } from "./interfaces/IRewardsGrantPublisher.js";
+
+const SQS_BATCH_MAX_ENTRIES = 10;
+// Límite SQS: 262 144 bytes por SendMessageBatch. Margen para no rozarlo.
+const SQS_BATCH_MAX_BYTES = 250_000;
+
+@injectable()
+export class RewardsGrantPublisher implements IRewardsGrantPublisher {
+    private readonly REWARDS_GRANT_QUEUE_URL = process.env.REWARDS_GRANT_QUEUE_URL;
+
+    async publish(message: GrantRequestedMessage): Promise<void> {
+        if (!this.REWARDS_GRANT_QUEUE_URL) {
+            throw new Error("Error publishing message to RewardsGrantQueue: REWARDS_GRANT_QUEUE_URL no está configurada");
+        }
+        try {
+            const client: SQSClient = new SQSClient();
+            // Cola ESTÁNDAR (no FIFO): sin MessageGroupId/MessageDeduplicationId ni orden garantizado.
+            // La idempotencia la hace el consumidor con el `grantId` derivado de (source.service +
+            // idempotencyKey) y un PutItem condicional.
+            const sendMessageRequest: SendMessageRequest = {
+                QueueUrl: this.REWARDS_GRANT_QUEUE_URL,
+                MessageBody: JSON.stringify(message),
+            };
+            await client.send(new SendMessageCommand(sendMessageRequest));
+        } catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing message to RewardsGrantQueue: ${errorMessage}`);
+        }
+    }
+
+    async publishBatch(messages: GrantRequestedMessage[]): Promise<RewardsGrantBatchResult> {
+        const failedIdempotencyKeys: string[] = [];
+        const senderFaultIdempotencyKeys: string[] = [];
+        if (messages.length === 0) {
+            return { failedIdempotencyKeys, senderFaultIdempotencyKeys };
+        }
+        if (!this.REWARDS_GRANT_QUEUE_URL) {
+            throw new Error("Error publishing batch to RewardsGrantQueue: REWARDS_GRANT_QUEUE_URL no está configurada");
+        }
+        try {
+            const client: SQSClient = new SQSClient();
+            const keyByEntryId = new Map<string, string>();
+            let current: SendMessageBatchRequestEntry[] = [];
+            let currentBytes = 0;
+
+            const flush = async (): Promise<void> => {
+                if (current.length === 0) return;
+                const result = await client.send(
+                    new SendMessageBatchCommand({ QueueUrl: this.REWARDS_GRANT_QUEUE_URL, Entries: current }),
+                );
+                for (const failed of result.Failed ?? []) {
+                    const key = failed.Id ? keyByEntryId.get(failed.Id) : undefined;
+                    if (key) (failed.SenderFault ? senderFaultIdempotencyKeys : failedIdempotencyKeys).push(key);
+                }
+                current = [];
+                currentBytes = 0;
+            };
+
+            for (let index = 0; index < messages.length; index += 1) {
+                const body = JSON.stringify(messages[index]);
+                const bytes = Buffer.byteLength(body, "utf8");
+                if (current.length >= SQS_BATCH_MAX_ENTRIES || (current.length > 0 && currentBytes + bytes > SQS_BATCH_MAX_BYTES)) {
+                    await flush();
+                }
+                const id = `m${index}`;
+                keyByEntryId.set(id, messages[index].idempotencyKey);
+                current.push({ Id: id, MessageBody: body });
+                currentBytes += bytes;
+            }
+            await flush();
+            return { failedIdempotencyKeys, senderFaultIdempotencyKeys };
+        } catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing batch to RewardsGrantQueue: ${errorMessage}`);
+        }
+    }
+}

package/src/rewards-business/queue/interfaces/IRewardsGrantPublisher.ts

@@ -0,0 +1,35 @@
+import type { GrantRequestedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+
+/**
+ * Resultado de `publishBatch`: las `idempotencyKey` que SQS NO aceptó.
+ * - `failedIdempotencyKeys`: `SenderFault=false` (falla transitoria de SQS) → el llamador PUEDE reintentar.
+ * - `senderFaultIdempotencyKeys`: `SenderFault=true` (el mensaje es inválido para SQS) → NO reintentar:
+ *   volver a mandarlo falla igual.
+ */
+export interface RewardsGrantBatchResult {
+    failedIdempotencyKeys: string[];
+    senderFaultIdempotencyKeys: string[];
+}
+
+/**
+ * Publisher de pedidos de entrega hacia `RewardsGrantQueue`, que consume `rewards-business`
+ * (spec 2026-10-05, D11). La cola es COMPARTIDA entre lambdas: el estándar Fiado publica a una cola
+ * compartida con un publisher de `@fiado/api-invoker` (mismo patrón que `ITransactionPublisher`).
+ *
+ * Que `publish` funcione ES la aceptación del pedido: no hay respuesta síncrona. El `grantId` no
+ * viaja en el mensaje; el llamador lo conoce con `grantIdFor(source.service, idempotencyKey)`.
+ *
+ * Env var requerida en el consumer: `REWARDS_GRANT_QUEUE_URL`
+ *   (`!ImportValue SqsRewardsGrantQueueUrl`) y el permiso `sqs:SendMessage` sobre la cola.
+ */
+export interface IRewardsGrantPublisher {
+    publish(message: GrantRequestedMessage): Promise<void>;
+
+    /**
+     * Publica varios pedidos con `SendMessageBatch` (tandas de 10 y de ≤ 250 000 bytes). El validador
+     * suelta lo masivo por tramos con esto (spec B 7.1 y 7.6). Un fallo parcial NO lanza: se devuelve
+     * en `failedIdempotencyKeys` (reintentables) o `senderFaultIdempotencyKeys` (NO reintentar). Si la
+     * llamada entera falla, lanza (reintento idempotente por `grantId`).
+     */
+    publishBatch(messages: GrantRequestedMessage[]): Promise<RewardsGrantBatchResult>;
+}

package/src/rewards-eligibility-business/api/RewardsEligibilityBusinessApi.ts

@@ -0,0 +1,26 @@
+import { inject, injectable } from "inversify";
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { IHttpRequest } from "@fiado/http-client";
+import type { GetRunResponse, PostEventRequest, PostEventResponse } from "@fiado/type-kit/bin/rewardsEligibility/index.js";
+import type { IRewardsEligibilityBusinessApi } from "./interfaces/IRewardsEligibilityBusinessApi.js";
+
+/** Contrato y semántica completos → `IRewardsEligibilityBusinessApi` (`StandardResponse` → leer `result.data`). */
+@injectable()
+export class RewardsEligibilityBusinessApi implements IRewardsEligibilityBusinessApi {
+
+    // El buildspec publica la URL en SSM con "/" final (`.../v1/`): se normaliza para no armar "//events".
+    private readonly baseUrl = (process.env.REWARDS_ELIGIBILITY_BUSINESS_LAMBDA_URL || "").replace(/\/+$/, "");
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) { }
+
+    async postEvent(request: PostEventRequest): Promise<StandardResponse<PostEventResponse>> {
+        // PROVISIONAL: sin prefijo `/private` (la API que resuelve el SSM es la PRIVADA).
+        // La ruta base exacta (con o sin `/private`) la fija el plan del validador; si cambia, ajustar aquí.
+        return await this.httpRequest.post<StandardResponse<PostEventResponse>>(`${this.baseUrl}/events`, request);
+    }
+
+    async getRun(runId: string): Promise<StandardResponse<GetRunResponse>> {
+        const url = `${this.baseUrl}/runs/${encodeURIComponent(runId)}`;
+        return await this.httpRequest.get<StandardResponse<GetRunResponse>>(url);
+    }
+}

package/src/rewards-eligibility-business/api/interfaces/IRewardsEligibilityBusinessApi.ts

@@ -0,0 +1,36 @@
+import type { StandardResponse } from "@fiado/gateway-adapter";
+import type { GetRunResponse, PostEventRequest, PostEventResponse } from "@fiado/type-kit/bin/rewardsEligibility/index.js";
+
+/**
+ * Cliente de la API privada de `rewards-eligibility-business` (spec 2026-10-06, §6).
+ *
+ * Devuelve `StandardResponse<T>` → leer `result.data`. Env var requerida en el consumer:
+ * `REWARDS_ELIGIBILITY_BUSINESS_LAMBDA_URL`, seteada con
+ *
+ *   REWARDS_ELIGIBILITY_BUSINESS_LAMBDA_URL: '{{resolve:ssm:fiado-rewardseligibilitybusiness-lambda}}'
+ *
+ * (el nombre del SSM es el `stack_name` del `samconfig.toml` del validador).
+ *
+ * El emisor NO decide la elegibilidad: informa qué pasó y quién participó (E3). La llamada es NO
+ * bloqueante para el flujo del emisor: si falla, el emisor sigue y reintenta con el mismo
+ * `idempotencyKey`.
+ *
+ * RUTA BASE PROVISIONAL: se fija en el plan del validador (`rewards-eligibility-business`); si cambia
+ * (con o sin `/private`), se ajusta este cliente y se republica.
+ */
+export interface IRewardsEligibilityBusinessApi {
+    /**
+     * Dispara las evaluaciones suscritas al `eventKey`. Responde 202 con una corrida por evaluación
+     * (`runs` vacío si nadie escucha el evento).
+     *
+     * @throws propaga el error del destino (400 `INPUT_INVALID`, 404 `EVENT_TYPE_NOT_FOUND`).
+     */
+    postEvent(request: PostEventRequest): Promise<StandardResponse<PostEventResponse>>;
+
+    /**
+     * Estado de una corrida y una página de sus resultados.
+     *
+     * @throws propaga el error del destino (404 `RUN_NOT_FOUND`); nunca devuelve fallback.
+     */
+    getRun(runId: string): Promise<StandardResponse<GetRunResponse>>;
+}

package/src/rewards-eligibility-business/index.ts

@@ -0,0 +1,4 @@
+export * from './queue/interfaces/IRewardsEligibilityPublisher.js';
+export * from './queue/RewardsEligibilityPublisher.js';
+export * from './api/interfaces/IRewardsEligibilityBusinessApi.js';
+export * from './api/RewardsEligibilityBusinessApi.js';

package/src/rewards-eligibility-business/queue/RewardsEligibilityPublisher.ts

@@ -0,0 +1,28 @@
+import { SendMessageCommand, SendMessageRequest, SQSClient } from "@aws-sdk/client-sqs";
+import { injectable } from "inversify";
+import type { GrantFailedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+import { IRewardsEligibilityPublisher } from "./interfaces/IRewardsEligibilityPublisher.js";
+
+@injectable()
+export class RewardsEligibilityPublisher implements IRewardsEligibilityPublisher {
+    private readonly REWARDS_ELIGIBILITY_QUEUE_URL = process.env.REWARDS_ELIGIBILITY_QUEUE_URL;
+
+    async publish(message: GrantFailedMessage): Promise<void> {
+        if (!this.REWARDS_ELIGIBILITY_QUEUE_URL) {
+            throw new Error("Error publishing message to RewardsEligibilityQueue: REWARDS_ELIGIBILITY_QUEUE_URL no está configurada");
+        }
+        try {
+            const client: SQSClient = new SQSClient();
+            // Cola ESTÁNDAR: el consumidor descarta avisos repetidos o atrasados comparando el `n`
+            // de la idempotencyKey con el del ledger (spec B 7.7), así que no hace falta dedup en la cola.
+            const sendMessageRequest: SendMessageRequest = {
+                QueueUrl: this.REWARDS_ELIGIBILITY_QUEUE_URL,
+                MessageBody: JSON.stringify(message),
+            };
+            await client.send(new SendMessageCommand(sendMessageRequest));
+        } catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Error publishing message to RewardsEligibilityQueue: ${errorMessage}`);
+        }
+    }
+}

package/src/rewards-eligibility-business/queue/interfaces/IRewardsEligibilityPublisher.ts

@@ -0,0 +1,16 @@
+import type { GrantFailedMessage } from "@fiado/type-kit/bin/rewards/index.js";
+
+/**
+ * Publisher del aviso `GRANT_FAILED` hacia la cola del validador (`RewardsEligibilityQueue`), que
+ * consume `rewards-eligibility-business` para liberar ledger y cupo (spec A 6.5, spec B 7.7).
+ *
+ * Lo produce `rewards-business` cuando una entrega termina SIN ningún ítem entregado (FAILED o
+ * REJECTED). Una entrega PARTIAL no avisa. El tipo es una unión cerrada a propósito: meter otro
+ * mensaje en una cola compartida obliga a tocar también al consumidor.
+ *
+ * Env var requerida en el consumer: `REWARDS_ELIGIBILITY_QUEUE_URL`
+ *   (`!ImportValue SqsRewardsEligibilityQueueUrl`) y el permiso `sqs:SendMessage` sobre la cola.
+ */
+export interface IRewardsEligibilityPublisher {
+    publish(message: GrantFailedMessage): Promise<void>;
+}