@fiado/api-invoker 5.33.1 → 5.35.0

package/bin/loanCredit/api/LoanCreditDeviceApi.d.ts

@@ -0,0 +1,27 @@
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import { LoanDeviceEnrollRequest, LoanDeviceEnrollResponse, LoanDeviceEnrollStatusRequest, LoanDeviceEnrollStatusResponse, LoanDeviceLastSeenRequest, LoanDeviceLastSeenResponse, LoanDeviceManualLockRequest, LoanDeviceManualLockResponse, LoanDeviceManualUnlockRequest, LoanDeviceManualUnlockResponse, LoanDeviceStatusRequest, LoanDeviceStatusResponse } from "@fiado/type-kit/bin/loanCredit/index.js";
+import { ILoanCreditDeviceApi } from "./interfaces/ILoanCreditDeviceApi.js";
+/**
+ * Publisher HTTP de los endpoints de dispositivo/MDM del lambda `loan-credit-business`
+ * (componente 09 SureKeep F2). Contrato y semántica completos → `ILoanCreditDeviceApi`
+ * (tenantId obligatorio, `StandardResponse` → leer `result.data`, granularidad por ítem).
+ *
+ * Env var requerida en el consumer: `LOAN_CREDIT_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   LOAN_CREDIT_BUSINESS_URL: '{{resolve:ssm:loan-credit-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+export default class LoanCreditDeviceApi implements ILoanCreditDeviceApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    enroll(input: LoanDeviceEnrollRequest, tenantId: string): Promise<StandardResponse<LoanDeviceEnrollResponse>>;
+    getEnrollStatus(input: LoanDeviceEnrollStatusRequest, tenantId: string): Promise<StandardResponse<LoanDeviceEnrollStatusResponse>>;
+    getStatus(input: LoanDeviceStatusRequest, tenantId: string): Promise<StandardResponse<LoanDeviceStatusResponse>>;
+    getLastSeen(input: LoanDeviceLastSeenRequest, tenantId: string): Promise<StandardResponse<LoanDeviceLastSeenResponse>>;
+    manualLock(input: LoanDeviceManualLockRequest, tenantId: string): Promise<StandardResponse<LoanDeviceManualLockResponse>>;
+    manualUnlock(input: LoanDeviceManualUnlockRequest, tenantId: string): Promise<StandardResponse<LoanDeviceManualUnlockResponse>>;
+}

package/bin/loanCredit/api/LoanCreditDeviceApi.js

@@ -0,0 +1,63 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+/**
+ * Publisher HTTP de los endpoints de dispositivo/MDM del lambda `loan-credit-business`
+ * (componente 09 SureKeep F2). Contrato y semántica completos → `ILoanCreditDeviceApi`
+ * (tenantId obligatorio, `StandardResponse` → leer `result.data`, granularidad por ítem).
+ *
+ * Env var requerida en el consumer: `LOAN_CREDIT_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   LOAN_CREDIT_BUSINESS_URL: '{{resolve:ssm:loan-credit-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+let LoanCreditDeviceApi = class LoanCreditDeviceApi {
+    httpRequest;
+    // El buildspec publica la URL en SSM con "/" final — se normaliza para no armar "//private".
+    baseUrl = (process.env.LOAN_CREDIT_BUSINESS_URL || "").replace(/\/+$/, "");
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async enroll(input, tenantId) {
+        const url = `${this.baseUrl}/private/devices/enroll?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+    async getEnrollStatus(input, tenantId) {
+        const url = `${this.baseUrl}/private/devices/enroll-status?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+    async getStatus(input, tenantId) {
+        const url = `${this.baseUrl}/private/devices/status?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+    async getLastSeen(input, tenantId) {
+        const url = `${this.baseUrl}/private/devices/last-seen?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+    async manualLock(input, tenantId) {
+        const url = `${this.baseUrl}/private/devices/manual-lock?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+    async manualUnlock(input, tenantId) {
+        const url = `${this.baseUrl}/private/devices/manual-unlock?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+};
+LoanCreditDeviceApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], LoanCreditDeviceApi);
+export default LoanCreditDeviceApi;

package/bin/loanCredit/api/interfaces/ILoanCreditDeviceApi.d.ts

@@ -0,0 +1,57 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import { LoanDeviceEnrollRequest, LoanDeviceEnrollResponse, LoanDeviceEnrollStatusRequest, LoanDeviceEnrollStatusResponse, LoanDeviceLastSeenRequest, LoanDeviceLastSeenResponse, LoanDeviceManualLockRequest, LoanDeviceManualLockResponse, LoanDeviceManualUnlockRequest, LoanDeviceManualUnlockResponse, LoanDeviceStatusRequest, LoanDeviceStatusResponse } from "@fiado/type-kit/bin/loanCredit/index.js";
+/**
+ * Contrato del publisher de dispositivo/MDM de `loan-credit-business` (componente 09 SureKeep F2).
+ * Endpoints PRIVADOS (VPC) que envuelven al motor MDM: enrolamiento del equipo, consulta de estado
+ * y bloqueo/desbloqueo manual. El contrato de crédito vive en `ILoanCreditBusinessApi`.
+ *
+ * Convenciones (idénticas a `ILoanCreditBusinessApi`):
+ * - `tenantId` OBLIGATORIO en todos los métodos — viaja por query `?tenantId=` (convención de los
+ *   privados Fiado). Sin él el lambda responde `400 UNKNOWN_TENANT` (fail-closed, nunca default).
+ * - Retorna `StandardResponse<T>` → leer `result.data` (NO `result.body`).
+ * - Errores de transporte (falla el lambda entero, no un ítem): el publisher RECHAZA con el
+ *   `DomainError` tipado del motor — `400 UNKNOWN_TENANT` / `400` de validación del body /
+ *   `5xx` del motor. Nunca fallback: el caller jamás recibe un batch vacío disfrazado de éxito.
+ * - Idempotencia: las 3 mutaciones (`enroll`, `manualLock`, `manualUnlock`) son idempotentes por
+ *   `input.operationReference` — es el idempotencyKey del caller. Reintentar el mismo lote con la
+ *   misma referencia no vuelve a enrolar ni a bloquear; sin ella un retry tras timeout duplica.
+ *
+ * Granularidad POR ÍTEM — el batch NUNCA falla entero:
+ * - Cada `results[i]` trae su propio `status` (`SUCCESS` | `PENDING` | `ERROR`) y un `error`
+ *   opcional. Un `StandardResponse` 200 puede traer ítems en `ERROR`: el caller TIENE que recorrer
+ *   `results` y decidir por ítem — nunca asumir éxito global por el status HTTP.
+ * - El `error.code` del ítem es un `MdmErrorCodeEnum` (`PROVIDER_NOT_SUPPORTED`, `DEVICE_NOT_FOUND`,
+ *   `PROVIDER_TIMEOUT`, …). El `status` del ítem NO lleva el motivo: el motivo vive solo en `error`.
+ * - `status: PENDING` = operación asíncrona en vuelo (típico de `enroll`). La resuelve el polling
+ *   interno del motor; el caller la consulta después con `getEnrollStatus`.
+ *
+ * Env var requerida en el consumer:
+ *
+ *   LOAN_CREDIT_BUSINESS_URL: '{{resolve:ssm:loan-credit-business}}'
+ */
+export interface ILoanCreditDeviceApi {
+    /**
+     * Enrola el equipo del crédito en el MDM (paso 09 del wizard). Típicamente devuelve el ítem en
+     * `PENDING`: el enrolamiento es asíncrono y se confirma después con `getEnrollStatus`.
+     */
+    enroll(input: LoanDeviceEnrollRequest, tenantId: string): Promise<StandardResponse<LoanDeviceEnrollResponse>>;
+    /**
+     * Consulta en qué punto va el enrolamiento de cada crédito.
+     * Es POST y no GET porque el lote de `creditIds` puede traer miles de ids y no caben en la URL.
+     */
+    getEnrollStatus(input: LoanDeviceEnrollStatusRequest, tenantId: string): Promise<StandardResponse<LoanDeviceEnrollStatusResponse>>;
+    /**
+     * Estado actual del dispositivo de cada crédito (bloqueado, libre, sin enrolar).
+     * Es POST y no GET porque el lote de `creditIds` puede traer miles de ids y no caben en la URL.
+     */
+    getStatus(input: LoanDeviceStatusRequest, tenantId: string): Promise<StandardResponse<LoanDeviceStatusResponse>>;
+    /**
+     * Último contacto reportado por el dispositivo de cada crédito (señal de vida para cobranza).
+     * Es POST y no GET porque el lote de `creditIds` puede traer miles de ids y no caben en la URL.
+     */
+    getLastSeen(input: LoanDeviceLastSeenRequest, tenantId: string): Promise<StandardResponse<LoanDeviceLastSeenResponse>>;
+    /** Bloqueo manual del dispositivo disparado desde el backoffice (acción de un operador). */
+    manualLock(input: LoanDeviceManualLockRequest, tenantId: string): Promise<StandardResponse<LoanDeviceManualLockResponse>>;
+    /** Desbloqueo manual del dispositivo disparado desde el backoffice (acción de un operador). */
+    manualUnlock(input: LoanDeviceManualUnlockRequest, tenantId: string): Promise<StandardResponse<LoanDeviceManualUnlockResponse>>;
+}

package/bin/loanCredit/api/interfaces/ILoanCreditDeviceApi.js

@@ -0,0 +1 @@
+export {};

package/bin/loanCredit/index.d.ts

@@ -1,2 +1,4 @@
 export * from "./api/interfaces/ILoanCreditBusinessApi.js";
 export { default as LoanCreditBusinessApi } from "./api/LoanCreditBusinessApi.js";
+export * from "./api/interfaces/ILoanCreditDeviceApi.js";
+export { default as LoanCreditDeviceApi } from "./api/LoanCreditDeviceApi.js";

package/bin/loanCredit/index.js

@@ -1,2 +1,4 @@
 export * from "./api/interfaces/ILoanCreditBusinessApi.js";
 export { default as LoanCreditBusinessApi } from "./api/LoanCreditBusinessApi.js";
+export * from "./api/interfaces/ILoanCreditDeviceApi.js";
+export { default as LoanCreditDeviceApi } from "./api/LoanCreditDeviceApi.js";

package/bin/membership/MembershipApi.d.ts

@@ -0,0 +1,12 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { IMembershipApi } from "./interfaces/IMembershipApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export declare class MembershipApi implements IMembershipApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/membership/MembershipApi.js

@@ -0,0 +1,32 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+import dotenv from 'dotenv';
+dotenv.config();
+let MembershipApi = class MembershipApi {
+    httpRequest;
+    baseUrl = process.env.MEMBERSHIP_BUSINESS_LAMBDA_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async deleteByDirectoryId(directoryId) {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete(url);
+    }
+};
+MembershipApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], MembershipApi);
+export { MembershipApi };

package/bin/membership/index.d.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IMembershipApi.js';
+export * from './MembershipApi.js';

package/bin/membership/index.js

@@ -0,0 +1,2 @@
+export * from './interfaces/IMembershipApi.js';
+export * from './MembershipApi.js';

package/bin/membership/interfaces/IMembershipApi.d.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+/**
+ * Interfaz para el servicio Membership (membership-business).
+ */
+export interface IMembershipApi {
+    /**
+     * Borra en cascada las membresías asociadas a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/membership/interfaces/IMembershipApi.js

@@ -0,0 +1 @@
+export {};

package/bin/notificationWebsockets/NotificationWebsocketApi.d.ts

@@ -0,0 +1,12 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { INotificationWebsocketApi } from "./interfaces/INotificationWebsocketApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export declare class NotificationWebsocketApi implements INotificationWebsocketApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/notificationWebsockets/NotificationWebsocketApi.js

@@ -0,0 +1,32 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+import dotenv from 'dotenv';
+dotenv.config();
+let NotificationWebsocketApi = class NotificationWebsocketApi {
+    httpRequest;
+    baseUrl = process.env.NOTIFICATIONS_WEBSOCKET_LAMBDA_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async deleteByDirectoryId(directoryId) {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete(url);
+    }
+};
+NotificationWebsocketApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], NotificationWebsocketApi);
+export { NotificationWebsocketApi };

package/bin/notificationWebsockets/interfaces/INotificationWebsocketApi.d.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+/**
+ * Interfaz para el servicio Notifications Websocket (notifications-websocket).
+ */
+export interface INotificationWebsocketApi {
+    /**
+     * Borra en cascada las conexiones/notificaciones WS asociadas a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/notificationWebsockets/interfaces/INotificationWebsocketApi.js

@@ -0,0 +1 @@
+export {};

package/bin/performance-profile/PerformanceProfileApi.d.ts

@@ -0,0 +1,12 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { IPerformanceProfileApi } from "./interfaces/IPerformanceProfileApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export declare class PerformanceProfileApi implements IPerformanceProfileApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/performance-profile/PerformanceProfileApi.js

@@ -0,0 +1,32 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+import dotenv from 'dotenv';
+dotenv.config();
+let PerformanceProfileApi = class PerformanceProfileApi {
+    httpRequest;
+    baseUrl = process.env.PERFORMANCE_PROFILE_BUSINESS_LAMBDA_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async deleteByDirectoryId(directoryId) {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete(url);
+    }
+};
+PerformanceProfileApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], PerformanceProfileApi);
+export { PerformanceProfileApi };

package/bin/performance-profile/index.d.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IPerformanceProfileApi.js';
+export * from './PerformanceProfileApi.js';

package/bin/performance-profile/index.js

@@ -0,0 +1,2 @@
+export * from './interfaces/IPerformanceProfileApi.js';
+export * from './PerformanceProfileApi.js';

package/bin/performance-profile/interfaces/IPerformanceProfileApi.d.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+/**
+ * Interfaz para el servicio Performance Profile (performance-profile-business).
+ */
+export interface IPerformanceProfileApi {
+    /**
+     * Borra en cascada los perfiles de desempeño asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/performance-profile/interfaces/IPerformanceProfileApi.js

@@ -0,0 +1 @@
+export {};

package/bin/presence-websocket/PresenceWebsocketApi.d.ts

@@ -0,0 +1,12 @@
+import { IHttpRequest } from "@fiado/http-client";
+import { IPresenceWebsocketApi } from "./interfaces/IPresenceWebsocketApi.js";
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+export declare class PresenceWebsocketApi implements IPresenceWebsocketApi {
+    private httpRequest;
+    private readonly baseUrl;
+    constructor(httpRequest: IHttpRequest);
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/presence-websocket/PresenceWebsocketApi.js

@@ -0,0 +1,32 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from "inversify";
+import dotenv from 'dotenv';
+dotenv.config();
+let PresenceWebsocketApi = class PresenceWebsocketApi {
+    httpRequest;
+    baseUrl = process.env.PRESENCE_WEBSOCKET_LAMBDA_URL || "";
+    constructor(httpRequest) {
+        this.httpRequest = httpRequest;
+    }
+    async deleteByDirectoryId(directoryId) {
+        const url = `${this.baseUrl}private/directory/${directoryId}`;
+        return await this.httpRequest.delete(url);
+    }
+};
+PresenceWebsocketApi = __decorate([
+    injectable(),
+    __param(0, inject("IHttpRequest")),
+    __metadata("design:paramtypes", [Object])
+], PresenceWebsocketApi);
+export { PresenceWebsocketApi };

package/bin/presence-websocket/index.d.ts

@@ -0,0 +1,2 @@
+export * from './interfaces/IPresenceWebsocketApi.js';
+export * from './PresenceWebsocketApi.js';

package/bin/presence-websocket/index.js

@@ -0,0 +1,2 @@
+export * from './interfaces/IPresenceWebsocketApi.js';
+export * from './PresenceWebsocketApi.js';

package/bin/presence-websocket/interfaces/IPresenceWebsocketApi.d.ts

@@ -0,0 +1,15 @@
+type FiadoApiResponse<T> = import("@fiado/type-kit/bin/apiResponse/dtos/FiadoApiResponse.js").default<T>;
+/**
+ * Interfaz para el servicio Presence Websocket (presence-websocket).
+ */
+export interface IPresenceWebsocketApi {
+    /**
+     * Borra en cascada los registros de presencia asociados a un directoryId.
+     * @param directoryId ID del directorio.
+     * @throws {Error} Lanza un error si los parámetros de entrada son inválidos.
+     */
+    deleteByDirectoryId(directoryId: string): Promise<FiadoApiResponse<{
+        deletedCount: number;
+    }>>;
+}
+export {};

package/bin/presence-websocket/interfaces/IPresenceWebsocketApi.js

@@ -0,0 +1 @@
+export {};

package/bin/synergypay-connector/api/SynergyPayConnectorApi.d.ts

@@ -1,7 +1,7 @@
-import { IHttpRequest } from "@fiado/http-client";
+import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
 import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
-import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, ListFundingReferencesResponse, ApplyWalletFundingRequest, ApplyWalletFundingResponse } from "@fiado/type-kit/bin/walletFunding/index.js";
+import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, ListFundingReferencesResponse, ApplyWalletFundingRequest, ApplyWalletFundingResponse, ListFundingStoresRequest, ListFundingStoresResponse, WalletFundingReferenceStatusEnum } from "@fiado/type-kit/bin/walletFunding/index.js";
 import { ISynergyPayConnectorApi } from "./interfaces/ISynergyPayConnectorApi.js";
 export default class SynergyPayConnectorApi implements ISynergyPayConnectorApi {
     private httpRequest;
@@ -14,5 +14,11 @@ export default class SynergyPayConnectorApi implements ISynergyPayConnectorApi {
         includeDisabled?: boolean;
     }): Promise<ApiGatewayResponse<ConnectorCatalogResponse>>;
     applyFunding(request: ApplyWalletFundingRequest): Promise<ApiGatewayResponse<ApplyWalletFundingResponse>>;
+    listStores(query: ListFundingStoresRequest): Promise<ApiGatewayResponse<ListFundingStoresResponse>>;
+    cancelFundingReference(reference: string, reason?: "USER" | "WALLET_DEACTIVATED" | "OPS"): Promise<ApiGatewayResponse<{
+        reference: string;
+        status: WalletFundingReferenceStatusEnum;
+        cancelled: boolean;
+    }>>;
     getPendingFunding(directoryId: string): Promise<ApiGatewayResponse<any>>;
 }

package/bin/synergypay-connector/api/SynergyPayConnectorApi.js

@@ -39,6 +39,29 @@ let SynergyPayConnectorApi = class SynergyPayConnectorApi {
         const url = `${this.baseUrl}/funding/apply`;
         return await this.httpRequest.post(url, request);
     }
+    async listStores(query) {
+        const params = new URLSearchParams({
+            latitude: String(query.latitude),
+            longitude: String(query.longitude),
+        });
+        // `radius` y `product` ausentes se OMITEN: el connector aplica sus
+        // defaults (el radio del proveedor y `cashin`). Mandarlos vacios los
+        // convertiria en filtros invalidos.
+        if (query.radius !== undefined)
+            params.set("radius", String(query.radius));
+        if (query.product !== undefined)
+            params.set("product", query.product);
+        const url = `${this.baseUrl}/stores?${params.toString()}`;
+        return await this.httpRequest.get(url);
+    }
+    async cancelFundingReference(reference, reason) {
+        const params = new URLSearchParams();
+        if (reason)
+            params.set("reason", reason);
+        const qs = params.toString();
+        const url = `${this.baseUrl}/funding/references/${encodeURIComponent(reference)}${qs ? `?${qs}` : ""}`;
+        return await this.httpRequest.delete(url);
+    }
     async getPendingFunding(directoryId) {
         const url = `${this.baseUrl}/funding/pending?directoryId=${encodeURIComponent(directoryId)}`;
         return await this.httpRequest.get(url);

package/bin/synergypay-connector/api/interfaces/ISynergyPayConnectorApi.d.ts

@@ -1,6 +1,6 @@
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
 import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
-import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, ListFundingReferencesResponse, ApplyWalletFundingRequest, ApplyWalletFundingResponse } from "@fiado/type-kit/bin/walletFunding/index.js";
+import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, ListFundingReferencesResponse, ApplyWalletFundingRequest, ApplyWalletFundingResponse, ListFundingStoresRequest, ListFundingStoresResponse, WalletFundingReferenceStatusEnum } from "@fiado/type-kit/bin/walletFunding/index.js";
 /**
  * Cliente del marketplace hacia synergypay-connector (privado, dentro de la VPC).
  *
@@ -14,6 +14,8 @@ import { CreateFundingReferenceRequest, CreateFundingReferenceResponse, ListFund
  *  - GET  /funding/references?directoryId=&status=
  *  - GET  /catalog/standard?benefitId=&includeDisabled=
  *  - POST /funding/apply
+ *  - GET  /stores?latitude=&longitude=&radius=&product=
+ *  - DELETE /funding/references/{reference}?reason=
  *
  * NOTA: los endpoints `/passport/*` del BackOffice (SPEC 1.3) NO están incluidos —
  * el synergypay-connector aún no los expone (F6.1 construyó solo el money-path).
@@ -42,6 +44,35 @@ export interface ISynergyPayConnectorApi {
      * queda para el cierre SETTLED (conciliación bancaria) — mismo contrato canónico.
      */
     applyFunding(request: ApplyWalletFundingRequest): Promise<ApiGatewayResponse<ApplyWalletFundingResponse>>;
+    /**
+     * Directorio de tiendas cercanas donde el cliente puede presentar su
+     * referencia y entregar el efectivo.
+     *
+     * Va APARTE de la referencia a proposito: una referencia sirve en cualquier
+     * tienda afiliada, asi que el directorio cambia —altas, bajas, horarios,
+     * comisiones— sin tocar referencias vivas. El connector filtra por
+     * `product=cashin` cuando no se especifica: sin ese filtro, buena parte de
+     * las tiendas que devuelve el proveedor no aceptan deposito.
+     */
+    listStores(query: ListFundingStoresRequest): Promise<ApiGatewayResponse<ListFundingStoresResponse>>;
+    /**
+     * Cancela una referencia en el proveedor Y en la tabla del connector, en ese
+     * orden.
+     *
+     * Es la unica palanca que frena el efectivo ANTES de que entre a la caja:
+     * rechazar el webhook no alcanza, porque cuando el proveedor llama el cobro
+     * ya ocurrio. NO cancelar por fuera (curl directo al proveedor) — las dos
+     * mitades quedan desincronizadas y creeriamos que el cliente puede
+     * depositar cuando la caja ya no se lo permite.
+     *
+     * Idempotente: cancelar algo ya cancelado devuelve `cancelled: false`, no
+     * un error.
+     */
+    cancelFundingReference(reference: string, reason?: "USER" | "WALLET_DEACTIVATED" | "OPS"): Promise<ApiGatewayResponse<{
+        reference: string;
+        status: WalletFundingReferenceStatusEnum;
+        cancelled: boolean;
+    }>>;
     /**
      * Cash-in AUTORIZADO pero aun no acreditado del cliente, en el mes en curso.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/api-invoker",
-  "version": "5.33.1",
+    "version": "5.35.0",
   "description": "Sirve como un puente entre diferentes funciones lambda, facilitando la comunicación entre ellas a través de invocaciones http",
   "type": "module",
   "main": "bin/index.js",
@@ -34,7 +34,7 @@
     "@fiado/gateway-adapter": "^3.9.0",
     "@fiado/http-client": "^2.0.1",
     "@fiado/logger": "^1.1.3",
-    "@fiado/type-kit": "^3.319.0",
+    "@fiado/type-kit": "^3.329.0",
     "dotenv": "^16.4.7"
   },
   "peerDependencies": {

package/src/loanCredit/api/LoanCreditDeviceApi.ts

@@ -0,0 +1,86 @@
+import { inject, injectable } from "inversify";
+import type { IHttpRequest } from "@fiado/http-client";
+import { StandardResponse } from "@fiado/gateway-adapter";
+import {
+    LoanDeviceEnrollRequest,
+    LoanDeviceEnrollResponse,
+    LoanDeviceEnrollStatusRequest,
+    LoanDeviceEnrollStatusResponse,
+    LoanDeviceLastSeenRequest,
+    LoanDeviceLastSeenResponse,
+    LoanDeviceManualLockRequest,
+    LoanDeviceManualLockResponse,
+    LoanDeviceManualUnlockRequest,
+    LoanDeviceManualUnlockResponse,
+    LoanDeviceStatusRequest,
+    LoanDeviceStatusResponse,
+} from "@fiado/type-kit/bin/loanCredit/index.js";
+import { ILoanCreditDeviceApi } from "./interfaces/ILoanCreditDeviceApi.js";
+
+/**
+ * Publisher HTTP de los endpoints de dispositivo/MDM del lambda `loan-credit-business`
+ * (componente 09 SureKeep F2). Contrato y semántica completos → `ILoanCreditDeviceApi`
+ * (tenantId obligatorio, `StandardResponse` → leer `result.data`, granularidad por ítem).
+ *
+ * Env var requerida en el consumer: `LOAN_CREDIT_BUSINESS_URL`.
+ * El template.yml del consumer la setea con:
+ *
+ *   LOAN_CREDIT_BUSINESS_URL: '{{resolve:ssm:loan-credit-business}}'
+ *
+ * Convención CLAUDE.md global: SSM key = nombre del lambda owner de la URL.
+ */
+@injectable()
+export default class LoanCreditDeviceApi implements ILoanCreditDeviceApi {
+    // El buildspec publica la URL en SSM con "/" final — se normaliza para no armar "//private".
+    private readonly baseUrl = (process.env.LOAN_CREDIT_BUSINESS_URL || "").replace(/\/+$/, "");
+
+    constructor(@inject("IHttpRequest") private httpRequest: IHttpRequest) {}
+
+    async enroll(
+        input: LoanDeviceEnrollRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceEnrollResponse>> {
+        const url = `${this.baseUrl}/private/devices/enroll?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async getEnrollStatus(
+        input: LoanDeviceEnrollStatusRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceEnrollStatusResponse>> {
+        const url = `${this.baseUrl}/private/devices/enroll-status?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async getStatus(
+        input: LoanDeviceStatusRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceStatusResponse>> {
+        const url = `${this.baseUrl}/private/devices/status?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async getLastSeen(
+        input: LoanDeviceLastSeenRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceLastSeenResponse>> {
+        const url = `${this.baseUrl}/private/devices/last-seen?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async manualLock(
+        input: LoanDeviceManualLockRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceManualLockResponse>> {
+        const url = `${this.baseUrl}/private/devices/manual-lock?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+
+    async manualUnlock(
+        input: LoanDeviceManualUnlockRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceManualUnlockResponse>> {
+        const url = `${this.baseUrl}/private/devices/manual-unlock?tenantId=${encodeURIComponent(tenantId)}`;
+        return await this.httpRequest.post(url, input);
+    }
+}

package/src/loanCredit/api/interfaces/ILoanCreditDeviceApi.ts

@@ -0,0 +1,94 @@
+import { StandardResponse } from "@fiado/gateway-adapter";
+import {
+    LoanDeviceEnrollRequest,
+    LoanDeviceEnrollResponse,
+    LoanDeviceEnrollStatusRequest,
+    LoanDeviceEnrollStatusResponse,
+    LoanDeviceLastSeenRequest,
+    LoanDeviceLastSeenResponse,
+    LoanDeviceManualLockRequest,
+    LoanDeviceManualLockResponse,
+    LoanDeviceManualUnlockRequest,
+    LoanDeviceManualUnlockResponse,
+    LoanDeviceStatusRequest,
+    LoanDeviceStatusResponse,
+} from "@fiado/type-kit/bin/loanCredit/index.js";
+
+/**
+ * Contrato del publisher de dispositivo/MDM de `loan-credit-business` (componente 09 SureKeep F2).
+ * Endpoints PRIVADOS (VPC) que envuelven al motor MDM: enrolamiento del equipo, consulta de estado
+ * y bloqueo/desbloqueo manual. El contrato de crédito vive en `ILoanCreditBusinessApi`.
+ *
+ * Convenciones (idénticas a `ILoanCreditBusinessApi`):
+ * - `tenantId` OBLIGATORIO en todos los métodos — viaja por query `?tenantId=` (convención de los
+ *   privados Fiado). Sin él el lambda responde `400 UNKNOWN_TENANT` (fail-closed, nunca default).
+ * - Retorna `StandardResponse<T>` → leer `result.data` (NO `result.body`).
+ * - Errores de transporte (falla el lambda entero, no un ítem): el publisher RECHAZA con el
+ *   `DomainError` tipado del motor — `400 UNKNOWN_TENANT` / `400` de validación del body /
+ *   `5xx` del motor. Nunca fallback: el caller jamás recibe un batch vacío disfrazado de éxito.
+ * - Idempotencia: las 3 mutaciones (`enroll`, `manualLock`, `manualUnlock`) son idempotentes por
+ *   `input.operationReference` — es el idempotencyKey del caller. Reintentar el mismo lote con la
+ *   misma referencia no vuelve a enrolar ni a bloquear; sin ella un retry tras timeout duplica.
+ *
+ * Granularidad POR ÍTEM — el batch NUNCA falla entero:
+ * - Cada `results[i]` trae su propio `status` (`SUCCESS` | `PENDING` | `ERROR`) y un `error`
+ *   opcional. Un `StandardResponse` 200 puede traer ítems en `ERROR`: el caller TIENE que recorrer
+ *   `results` y decidir por ítem — nunca asumir éxito global por el status HTTP.
+ * - El `error.code` del ítem es un `MdmErrorCodeEnum` (`PROVIDER_NOT_SUPPORTED`, `DEVICE_NOT_FOUND`,
+ *   `PROVIDER_TIMEOUT`, …). El `status` del ítem NO lleva el motivo: el motivo vive solo en `error`.
+ * - `status: PENDING` = operación asíncrona en vuelo (típico de `enroll`). La resuelve el polling
+ *   interno del motor; el caller la consulta después con `getEnrollStatus`.
+ *
+ * Env var requerida en el consumer:
+ *
+ *   LOAN_CREDIT_BUSINESS_URL: '{{resolve:ssm:loan-credit-business}}'
+ */
+export interface ILoanCreditDeviceApi {
+    /**
+     * Enrola el equipo del crédito en el MDM (paso 09 del wizard). Típicamente devuelve el ítem en
+     * `PENDING`: el enrolamiento es asíncrono y se confirma después con `getEnrollStatus`.
+     */
+    enroll(
+        input: LoanDeviceEnrollRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceEnrollResponse>>;
+
+    /**
+     * Consulta en qué punto va el enrolamiento de cada crédito.
+     * Es POST y no GET porque el lote de `creditIds` puede traer miles de ids y no caben en la URL.
+     */
+    getEnrollStatus(
+        input: LoanDeviceEnrollStatusRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceEnrollStatusResponse>>;
+
+    /**
+     * Estado actual del dispositivo de cada crédito (bloqueado, libre, sin enrolar).
+     * Es POST y no GET porque el lote de `creditIds` puede traer miles de ids y no caben en la URL.
+     */
+    getStatus(
+        input: LoanDeviceStatusRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceStatusResponse>>;
+
+    /**
+     * Último contacto reportado por el dispositivo de cada crédito (señal de vida para cobranza).
+     * Es POST y no GET porque el lote de `creditIds` puede traer miles de ids y no caben en la URL.
+     */
+    getLastSeen(
+        input: LoanDeviceLastSeenRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceLastSeenResponse>>;
+
+    /** Bloqueo manual del dispositivo disparado desde el backoffice (acción de un operador). */
+    manualLock(
+        input: LoanDeviceManualLockRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceManualLockResponse>>;
+
+    /** Desbloqueo manual del dispositivo disparado desde el backoffice (acción de un operador). */
+    manualUnlock(
+        input: LoanDeviceManualUnlockRequest,
+        tenantId: string,
+    ): Promise<StandardResponse<LoanDeviceManualUnlockResponse>>;
+}

package/src/loanCredit/index.ts

@@ -1,2 +1,5 @@
 export * from "./api/interfaces/ILoanCreditBusinessApi.js";
 export { default as LoanCreditBusinessApi } from "./api/LoanCreditBusinessApi.js";
+
+export * from "./api/interfaces/ILoanCreditDeviceApi.js";
+export { default as LoanCreditDeviceApi } from "./api/LoanCreditDeviceApi.js";

package/src/synergypay-connector/api/SynergyPayConnectorApi.ts

@@ -1,5 +1,5 @@
 import { inject, injectable } from "inversify";
-import { IHttpRequest } from "@fiado/http-client";
+import type { IHttpRequest } from "@fiado/http-client";
 import { ApiGatewayResponse } from "@fiado/gateway-adapter";
 import { ConnectorCatalogResponse } from "@fiado/type-kit/bin/benefitCenter/index.js";
 import {
@@ -8,6 +8,9 @@ import {
     ListFundingReferencesResponse,
     ApplyWalletFundingRequest,
     ApplyWalletFundingResponse,
+    ListFundingStoresRequest,
+    ListFundingStoresResponse,
+    WalletFundingReferenceStatusEnum,
 } from "@fiado/type-kit/bin/walletFunding/index.js";
 import { ISynergyPayConnectorApi } from "./interfaces/ISynergyPayConnectorApi.js";
 
@@ -50,6 +53,36 @@ export default class SynergyPayConnectorApi implements ISynergyPayConnectorApi {
         return await this.httpRequest.post(url, request);
     }
 
+    async listStores(
+        query: ListFundingStoresRequest,
+    ): Promise<ApiGatewayResponse<ListFundingStoresResponse>> {
+        const params = new URLSearchParams({
+            latitude: String(query.latitude),
+            longitude: String(query.longitude),
+        });
+        // `radius` y `product` ausentes se OMITEN: el connector aplica sus
+        // defaults (el radio del proveedor y `cashin`). Mandarlos vacios los
+        // convertiria en filtros invalidos.
+        if (query.radius !== undefined) params.set("radius", String(query.radius));
+        if (query.product !== undefined) params.set("product", query.product);
+        const url = `${this.baseUrl}/stores?${params.toString()}`;
+        return await this.httpRequest.get(url);
+    }
+
+    async cancelFundingReference(
+        reference: string,
+        reason?: "USER" | "WALLET_DEACTIVATED" | "OPS",
+    ): Promise<ApiGatewayResponse<{
+        reference: string;
+        status: WalletFundingReferenceStatusEnum;
+        cancelled: boolean;
+    }>> {
+        const params = new URLSearchParams();
+        if (reason) params.set("reason", reason);
+        const qs = params.toString();
+        const url = `${this.baseUrl}/funding/references/${encodeURIComponent(reference)}${qs ? `?${qs}` : ""}`;
+        return await this.httpRequest.delete(url);
+    }
     async getPendingFunding(directoryId: string): Promise<ApiGatewayResponse<any>> {
         const url = `${this.baseUrl}/funding/pending?directoryId=${encodeURIComponent(directoryId)}`;
         return await this.httpRequest.get(url);

package/src/synergypay-connector/api/interfaces/ISynergyPayConnectorApi.ts

@@ -6,6 +6,9 @@ import {
     ListFundingReferencesResponse,
     ApplyWalletFundingRequest,
     ApplyWalletFundingResponse,
+    ListFundingStoresRequest,
+    ListFundingStoresResponse,
+    WalletFundingReferenceStatusEnum,
 } from "@fiado/type-kit/bin/walletFunding/index.js";
 
 /**
@@ -21,6 +24,8 @@ import {
  *  - GET  /funding/references?directoryId=&status=
  *  - GET  /catalog/standard?benefitId=&includeDisabled=
  *  - POST /funding/apply
+ *  - GET  /stores?latitude=&longitude=&radius=&product=
+ *  - DELETE /funding/references/{reference}?reason=
  *
  * NOTA: los endpoints `/passport/*` del BackOffice (SPEC 1.3) NO están incluidos —
  * el synergypay-connector aún no los expone (F6.1 construyó solo el money-path).
@@ -58,6 +63,39 @@ export interface ISynergyPayConnectorApi {
     applyFunding(
         request: ApplyWalletFundingRequest,
     ): Promise<ApiGatewayResponse<ApplyWalletFundingResponse>>;
+
+    /**
+     * Directorio de tiendas cercanas donde el cliente puede presentar su
+     * referencia y entregar el efectivo.
+     *
+     * Va APARTE de la referencia a proposito: una referencia sirve en cualquier
+     * tienda afiliada, asi que el directorio cambia —altas, bajas, horarios,
+     * comisiones— sin tocar referencias vivas. El connector filtra por
+     * `product=cashin` cuando no se especifica: sin ese filtro, buena parte de
+     * las tiendas que devuelve el proveedor no aceptan deposito.
+     */
+    listStores(query: ListFundingStoresRequest): Promise<ApiGatewayResponse<ListFundingStoresResponse>>;
+    /**
+     * Cancela una referencia en el proveedor Y en la tabla del connector, en ese
+     * orden.
+     *
+     * Es la unica palanca que frena el efectivo ANTES de que entre a la caja:
+     * rechazar el webhook no alcanza, porque cuando el proveedor llama el cobro
+     * ya ocurrio. NO cancelar por fuera (curl directo al proveedor) — las dos
+     * mitades quedan desincronizadas y creeriamos que el cliente puede
+     * depositar cuando la caja ya no se lo permite.
+     *
+     * Idempotente: cancelar algo ya cancelado devuelve `cancelled: false`, no
+     * un error.
+     */
+    cancelFundingReference(
+        reference: string,
+        reason?: "USER" | "WALLET_DEACTIVATED" | "OPS",
+    ): Promise<ApiGatewayResponse<{
+        reference: string;
+        status: WalletFundingReferenceStatusEnum;
+        cancelled: boolean;
+    }>>;
     /**
      * Cash-in AUTORIZADO pero aun no acreditado del cliente, en el mes en curso.
      *