@devizovaburza/mdm-sdk 1.2.5-canary.3b970ed → 1.2.5-canary.3d05b5f

package/dist/v1/index.d.mts

@@ -3378,22 +3378,28 @@ declare const partnerApi: OpenAPIHono<{
             };
             output: {
                 message: string;
-                address?: {
+                address: {
                     id: string;
                     partyId: string;
+                    internalId: string | null;
                     addressType: "PERMANENT_ADDRESS" | "REGISTERED_OFFICE" | "CONTACT_ADDRESS";
-                    street: string;
+                    street: string | null;
+                    orientationNumber: string | null;
+                    descriptiveNumber: string | null;
                     municipality: string;
+                    municipalityPart: string | null;
                     zipCode: string;
-                    district: string;
-                    region: string;
+                    district: string | null;
+                    region: string | null;
                     countryCode: "IM" | "AF" | "AL" | "DZ" | "AS" | "AD" | "AO" | "AG" | "AR" | "AM" | "AW" | "AU" | "AT" | "AZ" | "BS" | "BH" | "BD" | "BB" | "BY" | "BE" | "BZ" | "BJ" | "BO" | "BQ" | "BA" | "BW" | "BR" | "IO" | "VG" | "BG" | "BF" | "BI" | "KH" | "CM" | "CA" | "CV" | "CF" | "TD" | "CL" | "CN" | "CO" | "KM" | "CK" | "CR" | "HR" | "CW" | "CY" | "CZ" | "CD" | "DK" | "DJ" | "DM" | "DO" | "TL" | "EC" | "EG" | "SV" | "GQ" | "ER" | "EE" | "ET" | "FO" | "FJ" | "FI" | "FR" | "GF" | "PF" | "GA" | "GM" | "GE" | "DE" | "GH" | "GR" | "GD" | "GP" | "GU" | "GT" | "GN" | "GW" | "GY" | "HT" | "HN" | "HU" | "IS" | "IN" | "ID" | "IR" | "IQ" | "IE" | "IL" | "IT" | "CI" | "JM" | "JP" | "JE" | "JO" | "KZ" | "KE" | "KI" | "XK" | "KW" | "KG" | "LA" | "LV" | "LB" | "LS" | "LR" | "LI" | "LT" | "LU" | "MK" | "MG" | "MW" | "MY" | "MV" | "ML" | "MT" | "MQ" | "MR" | "MU" | "MX" | "FM" | "MD" | "MC" | "MN" | "ME" | "MS" | "MA" | "MZ" | "NA" | "NP" | "NL" | "NZ" | "NI" | "NE" | "NG" | "NU" | "NF" | "KP" | "NO" | "OM" | "PK" | "PS" | "PA" | "PG" | "PY" | "PE" | "PH" | "PL" | "PT" | "PR" | "QA" | "CG" | "RE" | "RO" | "RU" | "RW" | "BL" | "KN" | "LC" | "MF" | "VC" | "WS" | "SM" | "SA" | "SN" | "RS" | "SC" | "SL" | "SG" | "SX" | "SK" | "SI" | "SO" | "ZA" | "KR" | "SS" | "ES" | "LK" | "SD" | "SR" | "SJ" | "SZ" | "SE" | "CH" | "TW" | "TJ" | "TZ" | "TH" | "TG" | "TO" | "TT" | "TN" | "TR" | "TM" | "UM" | "VI" | "UG" | "UA" | "AE" | "GB" | "US" | "UZ" | "VU" | "VE" | "VN" | "WF" | "EH" | "YE" | "ZM" | "ZW";
-                    internalId?: string | undefined;
-                    orientationNumber?: string | undefined;
-                    descriptiveNumber?: string | undefined;
-                    municipalityPart?: string | undefined;
-                    ruianCode?: string | undefined;
-                } | undefined;
+                    ruianCode: string | null;
+                    createdAt: string | null;
+                    createdBy: string | null;
+                    updatedAt: string | null;
+                    updatedBy: string | null;
+                    deletedAt: string | null;
+                    deletedBy: string | null;
+                };
             };
             outputFormat: "json";
             status: 200;
@@ -3914,7 +3920,6 @@ declare const partnerApi: OpenAPIHono<{
                     owners?: {
                         name: string;
                         surname: string;
-                        email: string;
                         birthDate: string;
                         personalId: string;
                         gender: "M" | "F" | "OTHER";
@@ -3941,6 +3946,7 @@ declare const partnerApi: OpenAPIHono<{
                         id?: string | undefined;
                         titleBefore?: string | undefined;
                         titleAfter?: string | undefined;
+                        email?: string | undefined;
                         birthPlace?: string | undefined;
                     }[] | undefined;
                     legalRepresentatives?: {
@@ -4253,7 +4259,6 @@ declare const partnerApi: OpenAPIHono<{
                     owners?: {
                         name: string;
                         surname: string;
-                        email: string;
                         birthDate: string;
                         personalId: string;
                         gender: "M" | "F" | "OTHER";
@@ -4280,6 +4285,7 @@ declare const partnerApi: OpenAPIHono<{
                         id?: string | undefined;
                         titleBefore?: string | undefined;
                         titleAfter?: string | undefined;
+                        email?: string | undefined;
                         birthPlace?: string | undefined;
                     }[] | undefined;
                     legalRepresentatives?: {
@@ -4592,7 +4598,6 @@ declare const partnerApi: OpenAPIHono<{
                     owners?: {
                         name: string;
                         surname: string;
-                        email: string;
                         birthDate: string;
                         personalId: string;
                         gender: "M" | "F" | "OTHER";
@@ -4619,6 +4624,7 @@ declare const partnerApi: OpenAPIHono<{
                         id?: string | undefined;
                         titleBefore?: string | undefined;
                         titleAfter?: string | undefined;
+                        email?: string | undefined;
                         birthPlace?: string | undefined;
                     }[] | undefined;
                     legalRepresentatives?: {
@@ -19310,7 +19316,7 @@ declare const partyUpdateInputSchema: z.ZodObject<{
         name: z.ZodString;
         surname: z.ZodString;
         titleAfter: z.ZodOptional<z.ZodString>;
-        email: z.ZodEmail;
+        email: z.ZodOptional<z.ZodEmail>;
         birthDate: z.ZodString;
         birthPlace: z.ZodOptional<z.ZodString>;
         personalId: z.ZodString;

package/dist/v1/index.d.ts

@@ -3378,22 +3378,28 @@ declare const partnerApi: OpenAPIHono<{
             };
             output: {
                 message: string;
-                address?: {
+                address: {
                     id: string;
                     partyId: string;
+                    internalId: string | null;
                     addressType: "PERMANENT_ADDRESS" | "REGISTERED_OFFICE" | "CONTACT_ADDRESS";
-                    street: string;
+                    street: string | null;
+                    orientationNumber: string | null;
+                    descriptiveNumber: string | null;
                     municipality: string;
+                    municipalityPart: string | null;
                     zipCode: string;
-                    district: string;
-                    region: string;
+                    district: string | null;
+                    region: string | null;
                     countryCode: "IM" | "AF" | "AL" | "DZ" | "AS" | "AD" | "AO" | "AG" | "AR" | "AM" | "AW" | "AU" | "AT" | "AZ" | "BS" | "BH" | "BD" | "BB" | "BY" | "BE" | "BZ" | "BJ" | "BO" | "BQ" | "BA" | "BW" | "BR" | "IO" | "VG" | "BG" | "BF" | "BI" | "KH" | "CM" | "CA" | "CV" | "CF" | "TD" | "CL" | "CN" | "CO" | "KM" | "CK" | "CR" | "HR" | "CW" | "CY" | "CZ" | "CD" | "DK" | "DJ" | "DM" | "DO" | "TL" | "EC" | "EG" | "SV" | "GQ" | "ER" | "EE" | "ET" | "FO" | "FJ" | "FI" | "FR" | "GF" | "PF" | "GA" | "GM" | "GE" | "DE" | "GH" | "GR" | "GD" | "GP" | "GU" | "GT" | "GN" | "GW" | "GY" | "HT" | "HN" | "HU" | "IS" | "IN" | "ID" | "IR" | "IQ" | "IE" | "IL" | "IT" | "CI" | "JM" | "JP" | "JE" | "JO" | "KZ" | "KE" | "KI" | "XK" | "KW" | "KG" | "LA" | "LV" | "LB" | "LS" | "LR" | "LI" | "LT" | "LU" | "MK" | "MG" | "MW" | "MY" | "MV" | "ML" | "MT" | "MQ" | "MR" | "MU" | "MX" | "FM" | "MD" | "MC" | "MN" | "ME" | "MS" | "MA" | "MZ" | "NA" | "NP" | "NL" | "NZ" | "NI" | "NE" | "NG" | "NU" | "NF" | "KP" | "NO" | "OM" | "PK" | "PS" | "PA" | "PG" | "PY" | "PE" | "PH" | "PL" | "PT" | "PR" | "QA" | "CG" | "RE" | "RO" | "RU" | "RW" | "BL" | "KN" | "LC" | "MF" | "VC" | "WS" | "SM" | "SA" | "SN" | "RS" | "SC" | "SL" | "SG" | "SX" | "SK" | "SI" | "SO" | "ZA" | "KR" | "SS" | "ES" | "LK" | "SD" | "SR" | "SJ" | "SZ" | "SE" | "CH" | "TW" | "TJ" | "TZ" | "TH" | "TG" | "TO" | "TT" | "TN" | "TR" | "TM" | "UM" | "VI" | "UG" | "UA" | "AE" | "GB" | "US" | "UZ" | "VU" | "VE" | "VN" | "WF" | "EH" | "YE" | "ZM" | "ZW";
-                    internalId?: string | undefined;
-                    orientationNumber?: string | undefined;
-                    descriptiveNumber?: string | undefined;
-                    municipalityPart?: string | undefined;
-                    ruianCode?: string | undefined;
-                } | undefined;
+                    ruianCode: string | null;
+                    createdAt: string | null;
+                    createdBy: string | null;
+                    updatedAt: string | null;
+                    updatedBy: string | null;
+                    deletedAt: string | null;
+                    deletedBy: string | null;
+                };
             };
             outputFormat: "json";
             status: 200;
@@ -3914,7 +3920,6 @@ declare const partnerApi: OpenAPIHono<{
                     owners?: {
                         name: string;
                         surname: string;
-                        email: string;
                         birthDate: string;
                         personalId: string;
                         gender: "M" | "F" | "OTHER";
@@ -3941,6 +3946,7 @@ declare const partnerApi: OpenAPIHono<{
                         id?: string | undefined;
                         titleBefore?: string | undefined;
                         titleAfter?: string | undefined;
+                        email?: string | undefined;
                         birthPlace?: string | undefined;
                     }[] | undefined;
                     legalRepresentatives?: {
@@ -4253,7 +4259,6 @@ declare const partnerApi: OpenAPIHono<{
                     owners?: {
                         name: string;
                         surname: string;
-                        email: string;
                         birthDate: string;
                         personalId: string;
                         gender: "M" | "F" | "OTHER";
@@ -4280,6 +4285,7 @@ declare const partnerApi: OpenAPIHono<{
                         id?: string | undefined;
                         titleBefore?: string | undefined;
                         titleAfter?: string | undefined;
+                        email?: string | undefined;
                         birthPlace?: string | undefined;
                     }[] | undefined;
                     legalRepresentatives?: {
@@ -4592,7 +4598,6 @@ declare const partnerApi: OpenAPIHono<{
                     owners?: {
                         name: string;
                         surname: string;
-                        email: string;
                         birthDate: string;
                         personalId: string;
                         gender: "M" | "F" | "OTHER";
@@ -4619,6 +4624,7 @@ declare const partnerApi: OpenAPIHono<{
                         id?: string | undefined;
                         titleBefore?: string | undefined;
                         titleAfter?: string | undefined;
+                        email?: string | undefined;
                         birthPlace?: string | undefined;
                     }[] | undefined;
                     legalRepresentatives?: {
@@ -19310,7 +19316,7 @@ declare const partyUpdateInputSchema: z.ZodObject<{
         name: z.ZodString;
         surname: z.ZodString;
         titleAfter: z.ZodOptional<z.ZodString>;
-        email: z.ZodEmail;
+        email: z.ZodOptional<z.ZodEmail>;
         birthDate: z.ZodString;
         birthPlace: z.ZodOptional<z.ZodString>;
         personalId: z.ZodString;

package/dist/v1/index.mjs

@@ -310,6 +310,38 @@ const RISK_BUSINESS_AREA = [
   "VIRTUAL_ASSET_SERVICES"
 ];
 
+function logAuditEvent(context, input) {
+  const identity = context.get("identity");
+  const sourceIp = context.req.header("CF-Connecting-IP");
+  const correlationId = input.correlationId ?? context.get("correlationId");
+  if (!correlationId) {
+    throw new Error(
+      "logAuditEvent: missing correlationId \u2014 auditLog() middleware must be mounted before handlers that call logAuditEvent"
+    );
+  }
+  context.executionCtx.waitUntil(
+    context.env.ACTIVITY_SERVICE.logAuditEvent({
+      logType: "event",
+      service: "gateway",
+      eventType: input.eventType,
+      correlationId,
+      actorUserId: input.actorUserId ?? identity?.user?.id,
+      actorEmail: input.actorEmail ?? identity?.user?.email ?? "not-authorized@system.internal",
+      actorOrganizationId: input.actorOrganizationId ?? identity?.user?.organizationId,
+      targetType: input.targetType,
+      targetId: input.targetId,
+      outcome: input.outcome,
+      description: input.description,
+      severity: input.severity ?? "low",
+      details: input.details,
+      userAgent: context.req.header("User-Agent"),
+      ...sourceIp && { sourceIp }
+    }).catch((error) => {
+      console.error(`Failed to log audit event "${input.eventType}":`, error);
+    })
+  );
+}
+
 z.object({
   message: z.string(),
   data: z.null(),
@@ -627,101 +659,211 @@ const createPartyRoute = createRoute({
     ...errorResponse("Party", "Creation")
   }
 });
-new OpenAPIHono().openapi(
-  createPartyRoute,
-  async (context) => {
-    const { owners, legalRepresentatives, ...partyInput } = context.req.valid("json");
-    const disponentsWithDocs = (partyInput.disponents ?? []).filter(
-      (d) => d.partyType === "INDIVIDUAL" && !!d.data.identityDocuments?.length
-    );
-    const disponentsForBatch = (partyInput.disponents ?? []).filter(
-      (d) => !(d.partyType === "INDIVIDUAL" && !!d.data.identityDocuments?.length)
+new OpenAPIHono().openapi(createPartyRoute, async (context) => {
+  const { owners, legalRepresentatives, ...partyInput } = context.req.valid("json");
+  const disponentsWithDocs = (partyInput.disponents ?? []).filter(
+    (d) => d.partyType === "INDIVIDUAL" && !!d.data.identityDocuments?.length
+  );
+  const disponentsForBatch = (partyInput.disponents ?? []).filter(
+    (d) => !(d.partyType === "INDIVIDUAL" && !!d.data.identityDocuments?.length)
+  );
+  const { data: partyData, error } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.createParty({
+    ...partyInput,
+    disponents: disponentsForBatch,
+    party: { ...partyInput.party, isRoot: true }
+  });
+  if (!partyData || error) {
+    logAuditEvent(context, {
+      eventType: "party.created",
+      targetType: "party",
+      outcome: "failure",
+      severity: "medium",
+      description: "Failed to create party",
+      details: { partyType: partyInput.party.partyType }
+    });
+    return context.json(
+      {
+        message: "Could not create a party"
+      },
+      500
     );
-    const { data: partyData, error } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.createParty({
-      ...partyInput,
-      disponents: disponentsForBatch,
-      party: { ...partyInput.party, isRoot: true }
+  }
+  const mdm = context.env.MASTER_DATA_MANAGEMENT_SERVICE;
+  const docService = context.env.DOCUMENT_SERVICE;
+  if (partyInput.organizationData?.registerUri) {
+    await docService.acknowledgeDocument({
+      storageUrl: partyInput.organizationData.registerUri,
+      entityId: partyData.id
     });
-    if (!partyData || error) {
-      return context.json(
-        {
-          message: "Could not create a party"
-        },
-        500
-      );
-    }
-    const mdm = context.env.MASTER_DATA_MANAGEMENT_SERVICE;
-    const docService = context.env.DOCUMENT_SERVICE;
-    if (partyInput.organizationData?.registerUri) {
+  }
+  for (const ba of partyInput.bankAccounts ?? []) {
+    if (ba.statementUri) {
       await docService.acknowledgeDocument({
-        storageUrl: partyInput.organizationData.registerUri,
+        storageUrl: ba.statementUri,
         entityId: partyData.id
       });
     }
-    for (const ba of partyInput.bankAccounts ?? []) {
-      if (ba.statementUri) {
-        await docService.acknowledgeDocument({
-          storageUrl: ba.statementUri,
-          entityId: partyData.id
-        });
-      }
+  }
+  for (const [i, doc] of (partyInput.personalData?.identityDocuments ?? []).entries()) {
+    const idDocId = partyData.personalIdDocIds?.[i] ?? partyData.id;
+    if (doc.frontImageUri) {
+      await docService.acknowledgeDocument({
+        storageUrl: doc.frontImageUri,
+        entityId: idDocId
+      });
+    }
+    if (doc.backImageUri) {
+      await docService.acknowledgeDocument({
+        storageUrl: doc.backImageUri,
+        entityId: idDocId
+      });
+    }
+  }
+  for (const disponent of disponentsWithDocs) {
+    const { identityDocuments, ...individualData } = disponent.data;
+    const { data: disponentParty, error: disponentError } = await mdm.createParty({
+      party: {
+        partyType: "INDIVIDUAL",
+        language: partyInput.party.language,
+        customerStatus: "NEW"
+      },
+      personalData: individualData,
+      organizationData: null,
+      bankAccounts: null,
+      recipients: null,
+      disponents: null,
+      addresses: [],
+      aml: null
+    });
+    if (!disponentParty || disponentError) {
+      return context.json({ message: "Could not create disponent party" }, 500);
+    }
+    const { error: linkDisponentError } = await mdm.linkPartyToParty({
+      fromPartyId: disponentParty.id,
+      toPartyId: partyData.id,
+      relationshipType: "AUTHORIZED_SIGNATORY"
+    });
+    if (linkDisponentError) {
+      return context.json({ message: "Could not link disponent to party" }, 500);
     }
-    for (const [i, doc] of (partyInput.personalData?.identityDocuments ?? []).entries()) {
-      const idDocId = partyData.personalIdDocIds?.[i] ?? partyData.id;
+    for (const doc of identityDocuments ?? []) {
+      const { data: createdIdDoc, error: idDocError } = await mdm.createIdDocument({
+        partyId: disponentParty.id,
+        idDocument: {
+          partyId: disponentParty.id,
+          idDocType: doc.idDocType,
+          idDocNumber: doc.idDocNumber,
+          idDocHolderName: `${individualData.name} ${individualData.surname}`,
+          issueDate: doc.issueDate,
+          expirationDate: doc.expirationDate,
+          issuer: doc.issuer,
+          frontImageUri: doc.frontImageUri,
+          backImageUri: doc.backImageUri
+        }
+      });
+      if (!createdIdDoc || idDocError) {
+        return context.json(
+          { message: "Could not create disponent identity document" },
+          500
+        );
+      }
       if (doc.frontImageUri) {
         await docService.acknowledgeDocument({
           storageUrl: doc.frontImageUri,
-          entityId: idDocId
+          entityId: createdIdDoc.id
         });
       }
       if (doc.backImageUri) {
         await docService.acknowledgeDocument({
           storageUrl: doc.backImageUri,
-          entityId: idDocId
+          entityId: createdIdDoc.id
         });
       }
     }
-    for (const disponent of disponentsWithDocs) {
-      const { identityDocuments, ...individualData } = disponent.data;
-      const { data: disponentParty, error: disponentError } = await mdm.createParty({
+  }
+  if (owners?.length) {
+    for (const owner of owners) {
+      const { address, sharePercentage, shareEstablishedAt, ...individual } = owner;
+      const { data: ownerParty, error: ownerError } = await mdm.createParty({
         party: {
           partyType: "INDIVIDUAL",
           language: partyInput.party.language,
           customerStatus: "NEW"
         },
-        personalData: individualData,
+        personalData: { ...individual, email: individual.email ?? "" },
         organizationData: null,
         bankAccounts: null,
         recipients: null,
         disponents: null,
-        addresses: [],
+        addresses: [
+          {
+            ...address,
+            district: address.district ?? "",
+            region: address.region ?? ""
+          }
+        ],
         aml: null
       });
-      if (!disponentParty || disponentError) {
+      if (ownerParty && !ownerError) {
+        await mdm.linkPartyToParty({
+          fromPartyId: ownerParty.id,
+          toPartyId: partyData.id,
+          relationshipType: "UBO",
+          sharePercentage,
+          fromDate: new Date(shareEstablishedAt)
+        });
+      }
+    }
+  }
+  if (legalRepresentatives?.length) {
+    for (const rep of legalRepresentatives) {
+      const { address, identityDocuments, dateOfEstablishment, ...individual } = rep;
+      const { data: repParty, error: repError } = await mdm.createParty({
+        party: {
+          partyType: "INDIVIDUAL",
+          language: partyInput.party.language,
+          customerStatus: "NEW"
+        },
+        personalData: individual,
+        organizationData: null,
+        bankAccounts: null,
+        recipients: null,
+        disponents: null,
+        addresses: [
+          {
+            ...address,
+            district: address.district ?? "",
+            region: address.region ?? ""
+          }
+        ],
+        aml: null
+      });
+      if (!repParty || repError) {
         return context.json(
-          { message: "Could not create disponent party" },
+          { message: "Could not create legal representative party" },
           500
         );
       }
-      const { error: linkDisponentError } = await mdm.linkPartyToParty({
-        fromPartyId: disponentParty.id,
+      const { error: linkRepError } = await mdm.linkPartyToParty({
+        fromPartyId: repParty.id,
         toPartyId: partyData.id,
-        relationshipType: "AUTHORIZED_SIGNATORY"
+        relationshipType: "BOARD_MEMBER",
+        fromDate: new Date(dateOfEstablishment)
       });
-      if (linkDisponentError) {
+      if (linkRepError) {
         return context.json(
-          { message: "Could not link disponent to party" },
+          { message: "Could not link legal representative to party" },
           500
         );
       }
       for (const doc of identityDocuments ?? []) {
         const { data: createdIdDoc, error: idDocError } = await mdm.createIdDocument({
-          partyId: disponentParty.id,
+          partyId: repParty.id,
           idDocument: {
-            partyId: disponentParty.id,
+            partyId: repParty.id,
             idDocType: doc.idDocType,
             idDocNumber: doc.idDocNumber,
-            idDocHolderName: `${individualData.name} ${individualData.surname}`,
+            idDocHolderName: `${individual.name} ${individual.surname}`,
             issueDate: doc.issueDate,
             expirationDate: doc.expirationDate,
             issuer: doc.issuer,
@@ -731,7 +873,9 @@ new OpenAPIHono().openapi(
         });
         if (!createdIdDoc || idDocError) {
           return context.json(
-            { message: "Could not create disponent identity document" },
+            {
+              message: "Could not create legal representative identity document"
+            },
             500
           );
         }
@@ -749,133 +893,30 @@ new OpenAPIHono().openapi(
         }
       }
     }
-    if (owners?.length) {
-      for (const owner of owners) {
-        const { address, sharePercentage, shareEstablishedAt, ...individual } = owner;
-        const { data: ownerParty, error: ownerError } = await mdm.createParty({
-          party: {
-            partyType: "INDIVIDUAL",
-            language: partyInput.party.language,
-            customerStatus: "NEW"
-          },
-          personalData: { ...individual, email: individual.email ?? "" },
-          organizationData: null,
-          bankAccounts: null,
-          recipients: null,
-          disponents: null,
-          addresses: [
-            {
-              ...address,
-              district: address.district ?? "",
-              region: address.region ?? ""
-            }
-          ],
-          aml: null
-        });
-        if (ownerParty && !ownerError) {
-          await mdm.linkPartyToParty({
-            fromPartyId: ownerParty.id,
-            toPartyId: partyData.id,
-            relationshipType: "UBO",
-            sharePercentage,
-            fromDate: new Date(shareEstablishedAt)
-          });
-        }
-      }
-    }
-    if (legalRepresentatives?.length) {
-      for (const rep of legalRepresentatives) {
-        const {
-          address,
-          identityDocuments,
-          dateOfEstablishment,
-          ...individual
-        } = rep;
-        const { data: repParty, error: repError } = await mdm.createParty({
-          party: {
-            partyType: "INDIVIDUAL",
-            language: partyInput.party.language,
-            customerStatus: "NEW"
-          },
-          personalData: individual,
-          organizationData: null,
-          bankAccounts: null,
-          recipients: null,
-          disponents: null,
-          addresses: [
-            {
-              ...address,
-              district: address.district ?? "",
-              region: address.region ?? ""
-            }
-          ],
-          aml: null
-        });
-        if (!repParty || repError) {
-          return context.json(
-            { message: "Could not create legal representative party" },
-            500
-          );
-        }
-        const { error: linkRepError } = await mdm.linkPartyToParty({
-          fromPartyId: repParty.id,
-          toPartyId: partyData.id,
-          relationshipType: "BOARD_MEMBER",
-          fromDate: new Date(dateOfEstablishment)
-        });
-        if (linkRepError) {
-          return context.json(
-            { message: "Could not link legal representative to party" },
-            500
-          );
-        }
-        for (const doc of identityDocuments ?? []) {
-          const { data: createdIdDoc, error: idDocError } = await mdm.createIdDocument({
-            partyId: repParty.id,
-            idDocument: {
-              partyId: repParty.id,
-              idDocType: doc.idDocType,
-              idDocNumber: doc.idDocNumber,
-              idDocHolderName: `${individual.name} ${individual.surname}`,
-              issueDate: doc.issueDate,
-              expirationDate: doc.expirationDate,
-              issuer: doc.issuer,
-              frontImageUri: doc.frontImageUri,
-              backImageUri: doc.backImageUri
-            }
-          });
-          if (!createdIdDoc || idDocError) {
-            return context.json(
-              {
-                message: "Could not create legal representative identity document"
-              },
-              500
-            );
-          }
-          if (doc.frontImageUri) {
-            await docService.acknowledgeDocument({
-              storageUrl: doc.frontImageUri,
-              entityId: createdIdDoc.id
-            });
-          }
-          if (doc.backImageUri) {
-            await docService.acknowledgeDocument({
-              storageUrl: doc.backImageUri,
-              entityId: createdIdDoc.id
-            });
-          }
-        }
-      }
-    }
-    return context.json(
-      {
-        message: "party created",
-        party: partyData
-      },
-      200
-    );
   }
-);
+  logAuditEvent(context, {
+    eventType: "party.created",
+    targetType: "party",
+    targetId: partyData.id,
+    outcome: "success",
+    severity: "medium",
+    description: `Party ${partyData.id} created`,
+    details: {
+      partyType: partyInput.party.partyType,
+      disponentCount: partyInput.disponents?.length ?? 0,
+      bankAccountCount: partyInput.bankAccounts?.length ?? 0,
+      ownerCount: owners?.length ?? 0,
+      legalRepresentativeCount: legalRepresentatives?.length ?? 0
+    }
+  });
+  return context.json(
+    {
+      message: "party created",
+      party: partyData
+    },
+    200
+  );
+});
 
 const partySchema = z.object({
   partyType: z.enum(PARTY_TYPE),
@@ -1091,7 +1132,7 @@ const ownerSyncSchema = z.object({
   name: z.string(),
   surname: z.string(),
   titleAfter: z.string().optional(),
-  email: z.email("E-mail je povinn\xFD"),
+  email: z.email("E-mail je povinn\xFD").optional(),
   birthDate: z.string(),
   birthPlace: z.string().optional(),
   personalId: z.string(),
@@ -1181,48 +1222,75 @@ const updatePartyRoute = createRoute({
     ...errorResponse("Party", "Update")
   }
 });
-new OpenAPIHono().openapi(
-  updatePartyRoute,
-  async (context) => {
-    const party = context.req.valid("json");
-    const { partyId } = context.req.valid("param");
-    const { data: updatedParty, error: partyError } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.updateParty({
-      partyId,
-      party: party.party,
-      personalData: party.personalData ?? void 0,
-      organizationData: party.organizationData ?? void 0,
-      bankAccounts: party.bankAccounts ?? void 0,
-      disponents: party.disponents ?? void 0,
-      addresses: party.addresses ?? void 0,
-      recipients: party.recipients ?? void 0,
-      aml: party.aml ?? void 0,
-      products: party.products ?? void 0,
-      traderIds: party.traderIds ?? void 0,
-      legalRepresentatives: party.legalRepresentatives ?? void 0,
-      owners: party.owners ?? void 0
+new OpenAPIHono().openapi(updatePartyRoute, async (context) => {
+  const party = context.req.valid("json");
+  const { partyId } = context.req.valid("param");
+  const { data: updatedParty, error: partyError } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.updateParty({
+    partyId,
+    party: party.party,
+    personalData: party.personalData ?? void 0,
+    organizationData: party.organizationData ?? void 0,
+    bankAccounts: party.bankAccounts ?? void 0,
+    disponents: party.disponents ?? void 0,
+    addresses: party.addresses ?? void 0,
+    recipients: party.recipients ?? void 0,
+    aml: party.aml ?? void 0,
+    products: party.products ?? void 0,
+    traderIds: party.traderIds ?? void 0,
+    legalRepresentatives: party.legalRepresentatives ?? void 0,
+    owners: party.owners ?? void 0
+  });
+  if (!updatedParty || partyError) {
+    logAuditEvent(context, {
+      eventType: "party.updated",
+      targetType: "party",
+      targetId: partyId,
+      outcome: "failure",
+      severity: "medium",
+      description: `Failed to update party ${partyId}`,
+      details: { partyType: party.party.partyType }
     });
-    if (!updatedParty || partyError) {
-      return context.json({ message: "Could not update a Party" }, 404);
-    }
-    const docService = context.env.DOCUMENT_SERVICE;
-    if (party.organizationData?.registerUri) {
+    return context.json({ message: "Could not update a Party" }, 404);
+  }
+  const docService = context.env.DOCUMENT_SERVICE;
+  if (party.organizationData?.registerUri) {
+    await docService.acknowledgeDocument({
+      storageUrl: party.organizationData.registerUri,
+      entityId: partyId
+    });
+  }
+  for (const ba of party.bankAccounts ?? []) {
+    if (ba.statementUri) {
       await docService.acknowledgeDocument({
-        storageUrl: party.organizationData.registerUri,
+        storageUrl: ba.statementUri,
         entityId: partyId
       });
     }
-    for (const ba of party.bankAccounts ?? []) {
-      if (ba.statementUri) {
+  }
+  if (party.personalData?.identityDocuments?.length) {
+    let newDocIdx = 0;
+    for (const doc of party.personalData.identityDocuments) {
+      const idDocEntityId = doc.id ? doc.id : updatedParty.newPersonalIdDocIds?.[newDocIdx++] ?? partyId;
+      if (doc.frontImageUri) {
         await docService.acknowledgeDocument({
-          storageUrl: ba.statementUri,
-          entityId: partyId
+          storageUrl: doc.frontImageUri,
+          entityId: idDocEntityId
+        });
+      }
+      if (doc.backImageUri) {
+        await docService.acknowledgeDocument({
+          storageUrl: doc.backImageUri,
+          entityId: idDocEntityId
         });
       }
     }
-    if (party.personalData?.identityDocuments?.length) {
-      let newDocIdx = 0;
-      for (const doc of party.personalData.identityDocuments) {
-        const idDocEntityId = doc.id ? doc.id : updatedParty.newPersonalIdDocIds?.[newDocIdx++] ?? partyId;
+  }
+  if (party.legalRepresentatives?.length) {
+    let newBmDocIdx = 0;
+    for (const rep of party.legalRepresentatives) {
+      if (rep.id) continue;
+      for (const doc of rep.identityDocuments ?? []) {
+        const idDocEntityId = updatedParty.newBoardMemberIdDocIds?.[newBmDocIdx++] ?? partyId;
         if (doc.frontImageUri) {
           await docService.acknowledgeDocument({
             storageUrl: doc.frontImageUri,
@@ -1237,54 +1305,45 @@ new OpenAPIHono().openapi(
         }
       }
     }
-    if (party.legalRepresentatives?.length) {
-      let newBmDocIdx = 0;
-      for (const rep of party.legalRepresentatives) {
-        if (rep.id) continue;
-        for (const doc of rep.identityDocuments ?? []) {
-          const idDocEntityId = updatedParty.newBoardMemberIdDocIds?.[newBmDocIdx++] ?? partyId;
-          if (doc.frontImageUri) {
-            await docService.acknowledgeDocument({
-              storageUrl: doc.frontImageUri,
-              entityId: idDocEntityId
-            });
-          }
-          if (doc.backImageUri) {
-            await docService.acknowledgeDocument({
-              storageUrl: doc.backImageUri,
-              entityId: idDocEntityId
-            });
-          }
+    for (const rep of party.legalRepresentatives) {
+      if (!rep.id) continue;
+      for (const doc of rep.identityDocuments ?? []) {
+        const idDocEntityId = doc.id ? doc.id : updatedParty.newBoardMemberIdDocIds?.[newBmDocIdx++] ?? partyId;
+        if (doc.frontImageUri) {
+          await docService.acknowledgeDocument({
+            storageUrl: doc.frontImageUri,
+            entityId: idDocEntityId
+          });
         }
-      }
-      for (const rep of party.legalRepresentatives) {
-        if (!rep.id) continue;
-        for (const doc of rep.identityDocuments ?? []) {
-          const idDocEntityId = doc.id ? doc.id : updatedParty.newBoardMemberIdDocIds?.[newBmDocIdx++] ?? partyId;
-          if (doc.frontImageUri) {
-            await docService.acknowledgeDocument({
-              storageUrl: doc.frontImageUri,
-              entityId: idDocEntityId
-            });
-          }
-          if (doc.backImageUri) {
-            await docService.acknowledgeDocument({
-              storageUrl: doc.backImageUri,
-              entityId: idDocEntityId
-            });
-          }
+        if (doc.backImageUri) {
+          await docService.acknowledgeDocument({
+            storageUrl: doc.backImageUri,
+            entityId: idDocEntityId
+          });
         }
       }
     }
-    return context.json(
-      {
-        message: "Party updated successfully",
-        party: updatedParty
-      },
-      200
-    );
   }
-);
+  logAuditEvent(context, {
+    eventType: "party.updated",
+    targetType: "party",
+    targetId: partyId,
+    outcome: "success",
+    severity: "medium",
+    description: `Party ${partyId} updated`,
+    details: {
+      partyType: party.party.partyType,
+      customerStatus: updatedParty.customerStatus
+    }
+  });
+  return context.json(
+    {
+      message: "Party updated successfully",
+      party: updatedParty
+    },
+    200
+  );
+});
 
 const DOCUMENT_SIDE = ["front", "back"];
 const paramsSchema$2 = z.object({
@@ -1388,64 +1447,91 @@ const createDocumentRoute = createRoute({
     }
   }
 });
-new OpenAPIHono().openapi(
-  createDocumentRoute,
-  async (context) => {
-    const rawBody = await context.req.parseBody();
-    const { partyId } = context.req.valid("param");
-    const idDocumentRaw = rawBody.idDocument;
-    const documentSide = rawBody.documentSide;
-    const file = rawBody.file;
-    if (typeof idDocumentRaw !== "string" || !DOCUMENT_SIDE.includes(documentSide) || !(file instanceof File)) {
-      return context.json({ message: "Invalid multipart payload" }, 400);
-    }
-    const idDocumentJson = JSON.parse(JSON.parse(idDocumentRaw));
-    const idDocumentResult = idDocumentCreateInputSchema.safeParse(idDocumentJson);
-    if (!idDocumentResult.success) {
-      console.error(idDocumentResult.error);
-      return context.json({ message: "Could not parse IdDocument" }, 400);
-    }
-    const {
-      data: createdIdDocument,
-      error: createError,
-      message
-    } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.createIdDocument({
-      idDocument: idDocumentResult.data,
-      partyId
+new OpenAPIHono().openapi(createDocumentRoute, async (context) => {
+  const rawBody = await context.req.parseBody();
+  const { partyId } = context.req.valid("param");
+  const idDocumentRaw = rawBody.idDocument;
+  const documentSide = rawBody.documentSide;
+  const file = rawBody.file;
+  if (typeof idDocumentRaw !== "string" || !DOCUMENT_SIDE.includes(documentSide) || !(file instanceof File)) {
+    return context.json({ message: "Invalid multipart payload" }, 400);
+  }
+  const idDocumentJson = JSON.parse(JSON.parse(idDocumentRaw));
+  const idDocumentResult = idDocumentCreateInputSchema.safeParse(idDocumentJson);
+  if (!idDocumentResult.success) {
+    console.error(idDocumentResult.error);
+    return context.json({ message: "Could not parse IdDocument" }, 400);
+  }
+  const {
+    data: createdIdDocument,
+    error: createError,
+    message
+  } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.createIdDocument({
+    idDocument: idDocumentResult.data,
+    partyId
+  });
+  if (!createdIdDocument || createError) {
+    console.error(message);
+    logAuditEvent(context, {
+      eventType: "id-document.created",
+      targetType: "id-document",
+      outcome: "failure",
+      severity: "medium",
+      description: `Failed to create ID document for party ${partyId}`,
+      details: { partyId, idDocType: idDocumentResult.data.idDocType }
     });
-    if (!createdIdDocument || createError) {
-      console.error(message);
-      return context.json({ message: "Could not create IdDocument" }, 500);
+    return context.json({ message: "Could not create IdDocument" }, 500);
+  }
+  const bytes = new Uint8Array(await file.arrayBuffer());
+  const { data: uploadResult, error: uploadError } = await context.env.DOCUMENT_SERVICE.uploadDocument({
+    entityType: "client",
+    entityId: createdIdDocument.id,
+    type: "kyc",
+    metadata: {},
+    file: {
+      bytes,
+      type: file.type,
+      name: file.name,
+      size: file.size
     }
-    const bytes = new Uint8Array(await file.arrayBuffer());
-    const { data: uploadResult, error: uploadError } = await context.env.DOCUMENT_SERVICE.uploadDocument({
-      entityType: "client",
-      entityId: createdIdDocument.id,
-      type: "kyc",
-      metadata: {},
-      file: {
-        bytes,
-        type: file.type,
-        name: file.name,
-        size: file.size
-      }
+  });
+  if (!uploadResult || uploadError) {
+    logAuditEvent(context, {
+      eventType: "id-document.created",
+      targetType: "id-document",
+      targetId: createdIdDocument.id,
+      outcome: "error",
+      severity: "medium",
+      description: `ID document ${createdIdDocument.id} created but file upload failed`,
+      details: { partyId, documentSide }
     });
-    if (!uploadResult || uploadError) {
-      return context.json({ message: "File upload failed" }, 500);
-    }
-    return context.json(
-      {
-        message: "IdDocument created successfully",
-        idDocument: {
-          ...createdIdDocument,
-          frontImageUri: documentSide === "front" ? uploadResult.storageUrl : createdIdDocument.frontImageUri,
-          backImageUri: documentSide === "back" ? uploadResult.storageUrl : createdIdDocument.backImageUri
-        }
-      },
-      200
-    );
+    return context.json({ message: "File upload failed" }, 500);
   }
-);
+  logAuditEvent(context, {
+    eventType: "id-document.created",
+    targetType: "id-document",
+    targetId: createdIdDocument.id,
+    outcome: "success",
+    severity: "medium",
+    description: `ID document ${createdIdDocument.id} created for party ${partyId}`,
+    details: {
+      partyId,
+      idDocType: createdIdDocument.idDocType,
+      documentSide
+    }
+  });
+  return context.json(
+    {
+      message: "IdDocument created successfully",
+      idDocument: {
+        ...createdIdDocument,
+        frontImageUri: documentSide === "front" ? uploadResult.storageUrl : createdIdDocument.frontImageUri,
+        backImageUri: documentSide === "back" ? uploadResult.storageUrl : createdIdDocument.backImageUri
+      }
+    },
+    200
+  );
+});
 
 const partyBaseOutputSchema = z.object({
   customerStatus: z.enum(CUSTOMER_STATUS),
@@ -1960,35 +2046,57 @@ const updateIdDocumentRoute = createRoute({
     }
   }
 });
-new OpenAPIHono().openapi(
-  updateIdDocumentRoute,
-  async (context) => {
-    const { id } = context.req.valid("param");
-    const patch = context.req.valid("json");
-    const { data: existingDocument, error: fetchError } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.getIdDocument({ id });
-    if (!existingDocument || fetchError) {
-      return context.json({ message: "ID document not found" }, 404);
-    }
-    const fullIdDocument = {
-      ...existingDocument,
-      ...patch,
-      id
-    };
-    const { data: updatedIdDocument, error: updateError } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.updateIdDocument({
-      idDocument: fullIdDocument
+new OpenAPIHono().openapi(updateIdDocumentRoute, async (context) => {
+  const { id } = context.req.valid("param");
+  const patch = context.req.valid("json");
+  const { data: existingDocument, error: fetchError } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.getIdDocument({ id });
+  if (!existingDocument || fetchError) {
+    logAuditEvent(context, {
+      eventType: "id-document.updated",
+      targetType: "id-document",
+      targetId: id,
+      outcome: "failure",
+      severity: "medium",
+      description: `Failed to update ID document ${id}: not found`
     });
-    if (!updatedIdDocument || updateError) {
-      return context.json({ message: "Could not update ID document" }, 500);
-    }
-    return context.json(
-      {
-        message: "ID document updated successfully",
-        idDocument: updatedIdDocument
-      },
-      200
-    );
+    return context.json({ message: "ID document not found" }, 404);
   }
-);
+  const fullIdDocument = {
+    ...existingDocument,
+    ...patch,
+    id
+  };
+  const { data: updatedIdDocument, error: updateError } = await context.env.MASTER_DATA_MANAGEMENT_SERVICE.updateIdDocument({
+    idDocument: fullIdDocument
+  });
+  if (!updatedIdDocument || updateError) {
+    logAuditEvent(context, {
+      eventType: "id-document.updated",
+      targetType: "id-document",
+      targetId: id,
+      outcome: "failure",
+      severity: "medium",
+      description: `Failed to update ID document ${id}`
+    });
+    return context.json({ message: "Could not update ID document" }, 500);
+  }
+  logAuditEvent(context, {
+    eventType: "id-document.updated",
+    targetType: "id-document",
+    targetId: id,
+    outcome: "success",
+    severity: "medium",
+    description: `ID document ${id} updated`,
+    details: { partyId: updatedIdDocument.partyId }
+  });
+  return context.json(
+    {
+      message: "ID document updated successfully",
+      idDocument: updatedIdDocument
+    },
+    200
+  );
+});
 
 const messageResponseSchema = z.object({
   message: z.string()

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@devizovaburza/mdm-sdk",
-  "version": "1.2.5-canary.3b970ed",
+  "version": "1.2.5-canary.3d05b5f",
   "author": "Devizová burza a.s.",
   "license": "ISC",
   "type": "module",
   "scripts": {
     "prepare": "bun run build",
-    "build": "unbuild"
+    "build": "unbuild",
+    "test": "vitest --project $npm_package_name --root ../.."
   },
   "exports": {
     "./v1": {
@@ -18,18 +19,18 @@
     "dist"
   ],
   "dependencies": {
-    "@develit-io/backend-sdk": "^10.0.2",
+    "@develit-io/backend-sdk": "^10.0.3",
     "@develit-io/general-codes": "^1.17.0",
-    "@hono/zod-openapi": "^1.2.0",
+    "@hono/zod-openapi": "^1.3.0",
     "drizzle-orm": "^0.45.2",
     "drizzle-zod": "^0.8.3",
     "zod": "^4.3.6"
   },
   "peerDependencies": {
-    "hono": "^4.12.9"
+    "hono": "^4.12.14"
   },
   "devDependencies": {
     "@apps/gateway": "workspace:*",
-    "unbuild": "^3.5.0"
+    "unbuild": "3.6.1"
   }
 }