@fiado/type-kit 3.545.0 → 3.546.0

package/_test_/unit/loanRetailAudit/loanRetailAuditContracts.test.ts

@@ -0,0 +1,139 @@
+import 'reflect-metadata';
+import { plainToInstance } from 'class-transformer';
+import { validateSync } from 'class-validator';
+import * as LoanRetailAudit from '../../../src/loanRetailAudit';
+import { LoanRetailAudit as FromRoot } from '../../../src';
+
+const {
+    AuditTrailRecordedV1,
+    CreatePiiAccessLogRequest,
+    ListAuditTrailQuery,
+    AuditTrailActionEnum,
+    LoanAuditEntityTypeEnum,
+    RetailAuditEntityTypeEnum,
+    PiiResourceTypeEnum,
+    PiiAccessActionEnum,
+    AUDIT_TRAIL_ENTITY_TYPES,
+} = LoanRetailAudit;
+
+function errorsOf<T extends object>(cls: new () => T, payload: Record<string, unknown>): string[] {
+    const dto = plainToInstance(cls, payload, { excludeExtraneousValues: true });
+    return validateSync(dto).map((e) => e.property);
+}
+
+const validEvent = {
+    eventId: '01JABCDEF0123456789XYZABCD',
+    entityType: RetailAuditEntityTypeEnum.SALE,
+    entityId: 'sale-1',
+    action: AuditTrailActionEnum.SALE_CANCEL,
+    changes: [{ field: 'status', oldValue: 'COMPLETED', newValue: 'CANCELLED' }],
+    context: [{ key: 'saleType', value: 'CASH' }],
+    performedBy: 'user-1',
+    sourceLambda: 'retail-wizard-business',
+    occurredAt: '2026-10-19T12:00:00.000Z',
+    tenantId: 'surekeep',
+    reason: 'cliente se arrepintió',
+};
+
+describe('AuditTrailRecordedV1', () => {
+    it('acepta un evento completo de Retail', () => {
+        expect(errorsOf(AuditTrailRecordedV1, validEvent)).toEqual([]);
+    });
+
+    it('acepta un entityType de Loan y un alta sin oldValue ni contexto', () => {
+        expect(
+            errorsOf(AuditTrailRecordedV1, {
+                ...validEvent,
+                entityType: LoanAuditEntityTypeEnum.CREDIT,
+                action: AuditTrailActionEnum.CREATE,
+                changes: [{ field: 'status', newValue: 'ACTIVE' }],
+                context: [],
+                tenantId: undefined,
+                reason: undefined,
+            }),
+        ).toEqual([]);
+    });
+
+    it('rechaza entityType y action fuera del catálogo', () => {
+        expect(errorsOf(AuditTrailRecordedV1, { ...validEvent, entityType: 'RetailCustomer' })).toContain('entityType');
+        expect(errorsOf(AuditTrailRecordedV1, { ...validEvent, action: 'BOOM' })).toContain('action');
+    });
+
+    it('exige eventId, sourceLambda, performedBy y occurredAt ISO', () => {
+        const errors = errorsOf(AuditTrailRecordedV1, {
+            ...validEvent,
+            eventId: '',
+            sourceLambda: undefined,
+            performedBy: '',
+            occurredAt: 'ayer',
+        });
+        expect(errors).toEqual(expect.arrayContaining(['eventId', 'sourceLambda', 'performedBy', 'occurredAt']));
+    });
+
+    it('valida cada cambio y cada entrada de contexto', () => {
+        expect(errorsOf(AuditTrailRecordedV1, { ...validEvent, changes: [{ oldValue: 'x' }] })).toContain('changes');
+        expect(errorsOf(AuditTrailRecordedV1, { ...validEvent, context: [{ key: 'k', value: 3 }] })).toContain('context');
+    });
+});
+
+describe('CreatePiiAccessLogRequest', () => {
+    const valid = {
+        accessId: '01JABCDEF0123456789XYZABCD',
+        occurredAt: '2026-10-19T12:00:00.000Z',
+        correlationId: 'req-1',
+        actorId: 'user-1',
+        sourceLambda: 'retail-customer-business',
+        operationName: 'publicGetCustomer',
+        action: PiiAccessActionEnum.READ,
+        resourceType: PiiResourceTypeEnum.RETAIL_CUSTOMER,
+        resourceId: 'cust-1',
+        fields: ['phone', 'curp'],
+    };
+
+    it('acepta un acceso de detalle y uno de listado con resourceIds', () => {
+        expect(errorsOf(CreatePiiAccessLogRequest, valid)).toEqual([]);
+        expect(errorsOf(CreatePiiAccessLogRequest, { ...valid, resourceId: '(list)', resourceIds: ['a', 'b'] })).toEqual([]);
+    });
+
+    it('rechaza el resourceType viejo y una acción desconocida', () => {
+        expect(errorsOf(CreatePiiAccessLogRequest, { ...valid, resourceType: 'RetailCustomer' })).toContain('resourceType');
+        expect(errorsOf(CreatePiiAccessLogRequest, { ...valid, action: 'DELETE' })).toContain('action');
+    });
+
+    it('exige accessId, actor, campos y fecha ISO', () => {
+        const errors = errorsOf(CreatePiiAccessLogRequest, { ...valid, accessId: '', actorId: undefined, fields: [], occurredAt: 'x' });
+        expect(errors).toEqual(expect.arrayContaining(['accessId', 'actorId', 'fields', 'occurredAt']));
+    });
+});
+
+describe('ListAuditTrailQuery', () => {
+    it('acepta entityType de Loan o Retail con orden, límite y cursor', () => {
+        expect(errorsOf(ListAuditTrailQuery, { entityType: 'CUSTOMER', entityId: 'c-1', order: 'asc', limit: '50', nextToken: 'abc' })).toEqual([]);
+        expect(errorsOf(ListAuditTrailQuery, { entityType: 'LoanParameter', entityId: 'p-1' })).toEqual([]);
+    });
+
+    it('rechaza entityType desconocido, orden inválido y límite fuera de rango', () => {
+        const errors = errorsOf(ListAuditTrailQuery, { entityType: 'FOO', entityId: 'x', order: 'up', limit: '500' });
+        expect(errors).toEqual(expect.arrayContaining(['entityType', 'order', 'limit']));
+    });
+
+    it('exige entityId', () => {
+        expect(errorsOf(ListAuditTrailQuery, { entityType: 'SALE' })).toContain('entityId');
+    });
+});
+
+describe('catálogos', () => {
+    it('AUDIT_TRAIL_ENTITY_TYPES une Loan y Retail sin repetidos', () => {
+        const all = [...Object.values(LoanAuditEntityTypeEnum), ...Object.values(RetailAuditEntityTypeEnum)];
+        expect([...AUDIT_TRAIL_ENTITY_TYPES].sort()).toEqual([...all].sort());
+        expect(new Set(all).size).toBe(all.length);
+    });
+
+    it('PiiResourceTypeEnum es SCREAMING_SNAKE', () => {
+        Object.values(PiiResourceTypeEnum).forEach((v) => expect(v).toMatch(/^[A-Z][A-Z_]*$/));
+    });
+
+    it('se exporta en la raíz como LoanRetailAudit', () => {
+        expect(FromRoot.AuditTrailRecordedV1).toBe(AuditTrailRecordedV1);
+    });
+});

package/bin/index.d.ts

@@ -129,3 +129,4 @@ export * as RewardsEligibility from './rewardsEligibility';
 export * as DatalakeReports from './datalakeReports';
 export * as PdfRender from './pdfRender';
 export * as Rules from './rules';
+export * as LoanRetailAudit from './loanRetailAudit';

package/bin/index.js

@@ -38,7 +38,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CentralPayments = exports.Helpdesk = exports.FiadoApiResponse = exports.Auth = exports.LegalDocumentsBusiness = exports.Role = exports.STPAccount = exports.RiskProfile = exports.FraudPreventionEngine = exports.BBVARst = exports.Stp = exports.BenefitCenter = exports.FiadoIncFavorite = exports.BankAccount = exports.P2pContact = exports.CreditContract = exports.Contract = exports.ProductCatalog = exports.ContactInfo = exports.TransactionAnalytics = exports.Transaction = exports.TransactionProcessor = exports.GenericMessage = exports.EventBridgeMessage = exports.SessionActivity = exports.MessageMoments = exports.NotificationMessages = exports.ServicePayment = exports.Header = exports.Identity = exports.UserTags = exports.Group = exports.File = exports.ExchangeRate = exports.Directory = exports.Currency = exports.Country = exports.Card = exports.Authentication = exports.AppContent = exports.App = exports.Offices = exports.Places = exports.Address = exports.Beneficiary = exports.Activity = exports.Biometrics = exports.MetamapConnector = exports.Account = exports.Crypto = void 0;
 exports.RetailCards = exports.RetailCatalog = exports.RetailCommission = exports.RetailOrg = exports.EmailVerification = exports.NetworkConnector = exports.Modelias = exports.TotpSecurity = exports.Passport = exports.WalletFunding = exports.Remittance = exports.PlatformRbac = exports.CognitoBackofficeConnector = exports.WhatsappConnector = exports.TwilioConnector = exports.MessagesConnector = exports.Mdm = exports.MilestoneBusiness = exports.CirculoCredito = exports.CreditStatements = exports.Sentry = exports.AiEngine = exports.Funnel = exports.TeamsConnector = exports.PlatformErrorEvents = exports.CustomerFile = exports.CreditBackoffice = exports.CreditDashboard = exports.CreditEngine = exports.Credit = exports.ComissionBusiness = exports.UsMarketGrowthBusiness = exports.ReferralBusiness = exports.ZendeskMessaging = exports.NotificationWS = exports.Event = exports.PayrollBusiness = exports.Cnbv = exports.DirectorySetting = exports.InvoiceCollector = exports.Collector = exports.Pricelist = exports.Company = exports.Services = exports.AccountIssuanceBusiness = exports.AppSelectionData = exports.Device = exports.Observations = exports.IssuanceBusiness = exports.Blacklist = void 0;
-exports.Rules = exports.PdfRender = exports.DatalakeReports = exports.RewardsEligibility = exports.Rewards = exports.DynamicForm = exports.FileStorage = exports.MoneyTransfer = exports.RetailLoan = exports.Membership = exports.WebhookBusiness = exports.PeopleBusiness = exports.UserConfirmations = exports.Collection = exports.Shipping = exports.PhoneSales = exports.Onboarding = exports.Kyc = exports.LoanScoring = exports.LoanCredit = exports.LoanCollectorAssignment = exports.LoanOfferings = exports.Shortlink = exports.LoanConfig = exports.DatalakeQuery = exports.RetailIntegration = exports.RetailPromotions = exports.RetailWizard = exports.RetailCustomer = void 0;
+exports.LoanRetailAudit = exports.Rules = exports.PdfRender = exports.DatalakeReports = exports.RewardsEligibility = exports.Rewards = exports.DynamicForm = exports.FileStorage = exports.MoneyTransfer = exports.RetailLoan = exports.Membership = exports.WebhookBusiness = exports.PeopleBusiness = exports.UserConfirmations = exports.Collection = exports.Shipping = exports.PhoneSales = exports.Onboarding = exports.Kyc = exports.LoanScoring = exports.LoanCredit = exports.LoanCollectorAssignment = exports.LoanOfferings = exports.Shortlink = exports.LoanConfig = exports.DatalakeQuery = exports.RetailIntegration = exports.RetailPromotions = exports.RetailWizard = exports.RetailCustomer = void 0;
 exports.Crypto = __importStar(require("./crypto"));
 exports.Account = __importStar(require("./account"));
 exports.MetamapConnector = __importStar(require("./metamapConnector"));
@@ -252,3 +252,6 @@ exports.DatalakeReports = __importStar(require("./datalakeReports"));
 exports.PdfRender = __importStar(require("./pdfRender"));
 // Rules: DTOs del lambda central rules-business (catálogo, validación, generación con IA y evaluación de reglas).
 exports.Rules = __importStar(require("./rules"));
+// LoanRetailAudit: contrato del lambda central loan-retail-audit-business (bitácora y accesos a PII
+// de Loan y Retail): mensaje de su cola, POST /private/pii-access-logs y GET /private/audit-trail.
+exports.LoanRetailAudit = __importStar(require("./loanRetailAudit"));

package/bin/loanRetailAudit/constants/auditTrailEntityTypes.d.ts

@@ -0,0 +1,6 @@
+import { LoanAuditEntityTypeEnum } from '../enums/LoanAuditEntityTypeEnum';
+import { RetailAuditEntityTypeEnum } from '../enums/RetailAuditEntityTypeEnum';
+/** Cualquier `entityType` que acepta el central, de Loan o de Retail. */
+export type AuditTrailEntityType = LoanAuditEntityTypeEnum | RetailAuditEntityTypeEnum;
+export declare const AUDIT_TRAIL_ENTITY_TYPES: readonly AuditTrailEntityType[];
+export declare const AUDIT_TRAIL_MAX_PAGE_SIZE = 100;

package/bin/loanRetailAudit/constants/auditTrailEntityTypes.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_TRAIL_MAX_PAGE_SIZE = exports.AUDIT_TRAIL_ENTITY_TYPES = void 0;
+const LoanAuditEntityTypeEnum_1 = require("../enums/LoanAuditEntityTypeEnum");
+const RetailAuditEntityTypeEnum_1 = require("../enums/RetailAuditEntityTypeEnum");
+exports.AUDIT_TRAIL_ENTITY_TYPES = [
+    ...Object.values(LoanAuditEntityTypeEnum_1.LoanAuditEntityTypeEnum),
+    ...Object.values(RetailAuditEntityTypeEnum_1.RetailAuditEntityTypeEnum),
+];
+exports.AUDIT_TRAIL_MAX_PAGE_SIZE = 100;

package/bin/loanRetailAudit/dtos/AuditTrailChange.d.ts

@@ -0,0 +1,8 @@
+/** Un campo que cambió; los valores van serializados a string y nunca llevan PII. */
+export declare class AuditTrailChange {
+    field: string;
+    /** Ausente en un alta. */
+    oldValue?: string;
+    /** Ausente en una baja. */
+    newValue?: string;
+}

package/bin/loanRetailAudit/dtos/AuditTrailChange.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditTrailChange = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/** Un campo que cambió; los valores van serializados a string y nunca llevan PII. */
+class AuditTrailChange {
+}
+exports.AuditTrailChange = AuditTrailChange;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailChange.prototype, "field", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditTrailChange.prototype, "oldValue", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditTrailChange.prototype, "newValue", void 0);

package/bin/loanRetailAudit/dtos/AuditTrailContextEntry.d.ts

@@ -0,0 +1,5 @@
+/** Dato que la acción no cambió y se guarda para leer la entrada sin abrir otra pantalla. */
+export declare class AuditTrailContextEntry {
+    key: string;
+    value: string;
+}

package/bin/loanRetailAudit/dtos/AuditTrailContextEntry.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditTrailContextEntry = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/** Dato que la acción no cambió y se guarda para leer la entrada sin abrir otra pantalla. */
+class AuditTrailContextEntry {
+}
+exports.AuditTrailContextEntry = AuditTrailContextEntry;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailContextEntry.prototype, "key", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditTrailContextEntry.prototype, "value", void 0);

package/bin/loanRetailAudit/dtos/requests/CreatePiiAccessLogRequest.d.ts

@@ -0,0 +1,19 @@
+import { PiiAccessActionEnum } from '../../enums/PiiAccessActionEnum';
+import { PiiResourceTypeEnum } from '../../enums/PiiResourceTypeEnum';
+/** Body de `POST /private/pii-access-logs` (privateCreatePiiAccessLog); el tenant va en `?tenantId=`. */
+export declare class CreatePiiAccessLogRequest {
+    /** ULID generado por quien llama; con `occurredAt` forma el sk, así un reintento no duplica. */
+    accessId: string;
+    occurredAt: string;
+    correlationId: string;
+    actorId: string;
+    sourceLambda: string;
+    operationName: string;
+    action: PiiAccessActionEnum;
+    resourceType: PiiResourceTypeEnum;
+    /** Id del recurso, o `(list)` en un listado con los ids en `resourceIds`. */
+    resourceId: string;
+    /** Nombres de los campos PII que viajaron; nunca sus valores. */
+    fields: string[];
+    resourceIds?: string[];
+}

package/bin/loanRetailAudit/dtos/requests/CreatePiiAccessLogRequest.js

@@ -0,0 +1,85 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreatePiiAccessLogRequest = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const PiiAccessActionEnum_1 = require("../../enums/PiiAccessActionEnum");
+const PiiResourceTypeEnum_1 = require("../../enums/PiiResourceTypeEnum");
+/** Body de `POST /private/pii-access-logs` (privateCreatePiiAccessLog); el tenant va en `?tenantId=`. */
+class CreatePiiAccessLogRequest {
+}
+exports.CreatePiiAccessLogRequest = CreatePiiAccessLogRequest;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "accessId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "occurredAt", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "correlationId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "actorId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "sourceLambda", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "operationName", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(PiiAccessActionEnum_1.PiiAccessActionEnum),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "action", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(PiiResourceTypeEnum_1.PiiResourceTypeEnum),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "resourceType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreatePiiAccessLogRequest.prototype, "resourceId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayNotEmpty)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], CreatePiiAccessLogRequest.prototype, "fields", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], CreatePiiAccessLogRequest.prototype, "resourceIds", void 0);

package/bin/loanRetailAudit/dtos/requests/ListAuditTrailQuery.d.ts

@@ -0,0 +1,11 @@
+import { SortDirEnum } from '../../../passport/enums/SortDirEnum';
+import { AuditTrailEntityType } from '../../constants/auditTrailEntityTypes';
+/** Query de `GET /private/audit-trail` (privateListAuditTrail): bitácora de una entidad, paginada por sk. */
+export declare class ListAuditTrailQuery {
+    entityType: AuditTrailEntityType;
+    entityId: string;
+    /** Por default `desc`, lo más reciente primero. */
+    order?: SortDirEnum;
+    limit?: number;
+    nextToken?: string;
+}

package/bin/loanRetailAudit/dtos/requests/ListAuditTrailQuery.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListAuditTrailQuery = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const SortDirEnum_1 = require("../../../passport/enums/SortDirEnum");
+const auditTrailEntityTypes_1 = require("../../constants/auditTrailEntityTypes");
+/** Query de `GET /private/audit-trail` (privateListAuditTrail): bitácora de una entidad, paginada por sk. */
+class ListAuditTrailQuery {
+}
+exports.ListAuditTrailQuery = ListAuditTrailQuery;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsIn)(auditTrailEntityTypes_1.AUDIT_TRAIL_ENTITY_TYPES),
+    __metadata("design:type", String)
+], ListAuditTrailQuery.prototype, "entityType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], ListAuditTrailQuery.prototype, "entityId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsEnum)(SortDirEnum_1.SortDirEnum),
+    __metadata("design:type", String)
+], ListAuditTrailQuery.prototype, "order", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(auditTrailEntityTypes_1.AUDIT_TRAIL_MAX_PAGE_SIZE),
+    __metadata("design:type", Number)
+], ListAuditTrailQuery.prototype, "limit", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], ListAuditTrailQuery.prototype, "nextToken", void 0);

package/bin/loanRetailAudit/dtos/responses/CreatePiiAccessLogResponse.d.ts

@@ -0,0 +1,4 @@
+/** Respuesta 201 de privateCreatePiiAccessLog; el mismo `accessId` en un reintento no duplica la fila. */
+export interface CreatePiiAccessLogResponse {
+    accessId: string;
+}

package/bin/loanRetailAudit/dtos/responses/CreatePiiAccessLogResponse.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/loanRetailAudit/dtos/responses/ListAuditTrailResponse.d.ts

@@ -0,0 +1,31 @@
+import { AuditTrailEntityType } from '../../constants/auditTrailEntityTypes';
+import { AuditTrailActionEnum } from '../../enums/AuditTrailActionEnum';
+/** Un campo que cambió, como lo devuelve la lectura. */
+export interface AuditTrailChangeView {
+    field: string;
+    oldValue: string | null;
+    newValue: string | null;
+}
+/** Una entrada de la bitácora; `eventId` y `sourceLambda` son `null` en filas Loan de forma vieja. */
+export interface AuditTrailEntry {
+    eventId: string | null;
+    sourceLambda: string | null;
+    entityType: AuditTrailEntityType;
+    entityId: string;
+    tenantId: string | null;
+    action: AuditTrailActionEnum;
+    performedBy: string;
+    reason: string | null;
+    ip: string | null;
+    changes: AuditTrailChangeView[];
+    context: {
+        key: string;
+        value: string;
+    }[];
+    occurredAt: string;
+}
+/** Página de privateListAuditTrail; `nextToken` es `null` en la última. */
+export interface ListAuditTrailResponse {
+    items: AuditTrailEntry[];
+    nextToken: string | null;
+}

package/bin/loanRetailAudit/dtos/responses/ListAuditTrailResponse.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/bin/loanRetailAudit/enums/AuditTrailActionEnum.d.ts

@@ -0,0 +1,39 @@
+/** Acción auditada en `SharedAuditTrail`; une las de Loan y Retail. */
+export declare enum AuditTrailActionEnum {
+    CREATE = "CREATE",
+    UPDATE = "UPDATE",
+    DELETE = "DELETE",
+    UPSERT = "UPSERT",
+    STATUS_CHANGE = "STATUS_CHANGE",
+    TRANSFER = "TRANSFER",
+    KYC_VERIFIED = "KYC_VERIFIED",
+    KYC_REVIEW = "KYC_REVIEW",
+    ACCOUNT_RESULT = "ACCOUNT_RESULT",
+    WELCOME_ACCREDITED = "WELCOME_ACCREDITED",
+    WELCOME_ACCREDITATION_RESULT = "WELCOME_ACCREDITATION_RESULT",
+    WELCOME_ACCREDITATION_RECONCILED = "WELCOME_ACCREDITATION_RECONCILED",
+    SESSION_CREATE = "SESSION_CREATE",
+    STEP_ADVANCE = "STEP_ADVANCE",
+    OTP_SKIP = "OTP_SKIP",
+    SESSION_RESUME = "SESSION_RESUME",
+    SESSION_CANCEL = "SESSION_CANCEL",
+    SESSION_CREDIT_ENABLED = "SESSION_CREDIT_ENABLED",
+    PAYMENT_REGISTERED = "PAYMENT_REGISTERED",
+    SALE_COMPLETE = "SALE_COMPLETE",
+    SALE_CANCEL = "SALE_CANCEL",
+    SALE_CARD_DELIVERED = "SALE_CARD_DELIVERED",
+    KYC_CONFIRM = "KYC_CONFIRM",
+    COMPLIANCE_VERDICT = "COMPLIANCE_VERDICT",
+    EXCEPTION_CREATE = "EXCEPTION_CREATE",
+    EXCEPTION_REVIEW = "EXCEPTION_REVIEW",
+    EXCEPTION_RESOLVE = "EXCEPTION_RESOLVE",
+    EXCEPTION_APPLY = "EXCEPTION_APPLY",
+    EXCEPTION_NOTE = "EXCEPTION_NOTE",
+    REPORT_RUN_REQUEST = "REPORT_RUN_REQUEST",
+    PUBLISH = "PUBLISH",
+    CLOSE = "CLOSE",
+    ADJUST = "ADJUST",
+    PAUSE = "PAUSE",
+    RESUME = "RESUME",
+    EXPIRE = "EXPIRE"
+}

package/bin/loanRetailAudit/enums/AuditTrailActionEnum.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditTrailActionEnum = void 0;
+/** Acción auditada en `SharedAuditTrail`; une las de Loan y Retail. */
+var AuditTrailActionEnum;
+(function (AuditTrailActionEnum) {
+    AuditTrailActionEnum["CREATE"] = "CREATE";
+    AuditTrailActionEnum["UPDATE"] = "UPDATE";
+    AuditTrailActionEnum["DELETE"] = "DELETE";
+    AuditTrailActionEnum["UPSERT"] = "UPSERT";
+    AuditTrailActionEnum["STATUS_CHANGE"] = "STATUS_CHANGE";
+    AuditTrailActionEnum["TRANSFER"] = "TRANSFER";
+    AuditTrailActionEnum["KYC_VERIFIED"] = "KYC_VERIFIED";
+    AuditTrailActionEnum["KYC_REVIEW"] = "KYC_REVIEW";
+    AuditTrailActionEnum["ACCOUNT_RESULT"] = "ACCOUNT_RESULT";
+    AuditTrailActionEnum["WELCOME_ACCREDITED"] = "WELCOME_ACCREDITED";
+    AuditTrailActionEnum["WELCOME_ACCREDITATION_RESULT"] = "WELCOME_ACCREDITATION_RESULT";
+    AuditTrailActionEnum["WELCOME_ACCREDITATION_RECONCILED"] = "WELCOME_ACCREDITATION_RECONCILED";
+    AuditTrailActionEnum["SESSION_CREATE"] = "SESSION_CREATE";
+    AuditTrailActionEnum["STEP_ADVANCE"] = "STEP_ADVANCE";
+    AuditTrailActionEnum["OTP_SKIP"] = "OTP_SKIP";
+    AuditTrailActionEnum["SESSION_RESUME"] = "SESSION_RESUME";
+    AuditTrailActionEnum["SESSION_CANCEL"] = "SESSION_CANCEL";
+    AuditTrailActionEnum["SESSION_CREDIT_ENABLED"] = "SESSION_CREDIT_ENABLED";
+    AuditTrailActionEnum["PAYMENT_REGISTERED"] = "PAYMENT_REGISTERED";
+    AuditTrailActionEnum["SALE_COMPLETE"] = "SALE_COMPLETE";
+    AuditTrailActionEnum["SALE_CANCEL"] = "SALE_CANCEL";
+    AuditTrailActionEnum["SALE_CARD_DELIVERED"] = "SALE_CARD_DELIVERED";
+    AuditTrailActionEnum["KYC_CONFIRM"] = "KYC_CONFIRM";
+    AuditTrailActionEnum["COMPLIANCE_VERDICT"] = "COMPLIANCE_VERDICT";
+    AuditTrailActionEnum["EXCEPTION_CREATE"] = "EXCEPTION_CREATE";
+    AuditTrailActionEnum["EXCEPTION_REVIEW"] = "EXCEPTION_REVIEW";
+    AuditTrailActionEnum["EXCEPTION_RESOLVE"] = "EXCEPTION_RESOLVE";
+    AuditTrailActionEnum["EXCEPTION_APPLY"] = "EXCEPTION_APPLY";
+    AuditTrailActionEnum["EXCEPTION_NOTE"] = "EXCEPTION_NOTE";
+    AuditTrailActionEnum["REPORT_RUN_REQUEST"] = "REPORT_RUN_REQUEST";
+    AuditTrailActionEnum["PUBLISH"] = "PUBLISH";
+    AuditTrailActionEnum["CLOSE"] = "CLOSE";
+    AuditTrailActionEnum["ADJUST"] = "ADJUST";
+    AuditTrailActionEnum["PAUSE"] = "PAUSE";
+    AuditTrailActionEnum["RESUME"] = "RESUME";
+    AuditTrailActionEnum["EXPIRE"] = "EXPIRE";
+})(AuditTrailActionEnum || (exports.AuditTrailActionEnum = AuditTrailActionEnum = {}));

package/bin/loanRetailAudit/enums/LoanAuditEntityTypeEnum.d.ts

@@ -0,0 +1,12 @@
+/** `entityType` de bitácora que escriben los lambdas Loan; los valores son los que ya están en la pk. */
+export declare enum LoanAuditEntityTypeEnum {
+    CREDIT = "CREDIT",
+    INSTALLMENT = "INSTALLMENT",
+    RESTRUCTURE = "RESTRUCTURE",
+    CREDIT_PLAN = "CREDIT_PLAN",
+    STORE_POLICY = "STORE_POLICY",
+    SEGMENT = "SEGMENT",
+    LOAN_PARAMETER = "LoanParameter",
+    LOAN_ASSIGNMENT_RULE = "LoanAssignmentRule",
+    LOAN_COLLECTOR_ASSIGNMENT = "LoanCollectorAssignment"
+}

package/bin/loanRetailAudit/enums/LoanAuditEntityTypeEnum.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoanAuditEntityTypeEnum = void 0;
+/** `entityType` de bitácora que escriben los lambdas Loan; los valores son los que ya están en la pk. */
+var LoanAuditEntityTypeEnum;
+(function (LoanAuditEntityTypeEnum) {
+    LoanAuditEntityTypeEnum["CREDIT"] = "CREDIT";
+    LoanAuditEntityTypeEnum["INSTALLMENT"] = "INSTALLMENT";
+    LoanAuditEntityTypeEnum["RESTRUCTURE"] = "RESTRUCTURE";
+    LoanAuditEntityTypeEnum["CREDIT_PLAN"] = "CREDIT_PLAN";
+    LoanAuditEntityTypeEnum["STORE_POLICY"] = "STORE_POLICY";
+    LoanAuditEntityTypeEnum["SEGMENT"] = "SEGMENT";
+    LoanAuditEntityTypeEnum["LOAN_PARAMETER"] = "LoanParameter";
+    LoanAuditEntityTypeEnum["LOAN_ASSIGNMENT_RULE"] = "LoanAssignmentRule";
+    LoanAuditEntityTypeEnum["LOAN_COLLECTOR_ASSIGNMENT"] = "LoanCollectorAssignment";
+})(LoanAuditEntityTypeEnum || (exports.LoanAuditEntityTypeEnum = LoanAuditEntityTypeEnum = {}));

package/bin/loanRetailAudit/enums/PiiAccessActionEnum.d.ts

@@ -0,0 +1,5 @@
+/** Qué se hizo con la PII: verla o cambiarla. */
+export declare enum PiiAccessActionEnum {
+    READ = "READ",
+    WRITE = "WRITE"
+}

package/bin/loanRetailAudit/enums/PiiAccessActionEnum.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PiiAccessActionEnum = void 0;
+/** Qué se hizo con la PII: verla o cambiarla. */
+var PiiAccessActionEnum;
+(function (PiiAccessActionEnum) {
+    PiiAccessActionEnum["READ"] = "READ";
+    PiiAccessActionEnum["WRITE"] = "WRITE";
+})(PiiAccessActionEnum || (exports.PiiAccessActionEnum = PiiAccessActionEnum = {}));

package/bin/loanRetailAudit/enums/PiiResourceTypeEnum.d.ts

@@ -0,0 +1,9 @@
+/** Tipo de recurso con PII; arma la pk `RESOURCE#<tipo>#<id>` de `SharedPiiAccessLog`. */
+export declare enum PiiResourceTypeEnum {
+    RETAIL_CUSTOMER = "RETAIL_CUSTOMER",
+    RETAIL_USER = "RETAIL_USER",
+    RETAILER = "RETAILER",
+    SALE = "SALE",
+    PROSPECT = "PROSPECT",
+    LOAN_PAYMENT = "LOAN_PAYMENT"
+}