@fiado/type-kit 3.545.0 → 3.546.0

package/bin/loanRetailAudit/enums/PiiResourceTypeEnum.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PiiResourceTypeEnum = void 0;
+/** Tipo de recurso con PII; arma la pk `RESOURCE#<tipo>#<id>` de `SharedPiiAccessLog`. */
+var PiiResourceTypeEnum;
+(function (PiiResourceTypeEnum) {
+    PiiResourceTypeEnum["RETAIL_CUSTOMER"] = "RETAIL_CUSTOMER";
+    PiiResourceTypeEnum["RETAIL_USER"] = "RETAIL_USER";
+    PiiResourceTypeEnum["RETAILER"] = "RETAILER";
+    PiiResourceTypeEnum["SALE"] = "SALE";
+    PiiResourceTypeEnum["PROSPECT"] = "PROSPECT";
+    PiiResourceTypeEnum["LOAN_PAYMENT"] = "LOAN_PAYMENT";
+})(PiiResourceTypeEnum || (exports.PiiResourceTypeEnum = PiiResourceTypeEnum = {}));

package/bin/loanRetailAudit/enums/RetailAuditEntityTypeEnum.d.ts

@@ -0,0 +1,17 @@
+/** `entityType` de bitácora que escriben los lambdas Retail (customer, org, wizard, commission). */
+export declare enum RetailAuditEntityTypeEnum {
+    CUSTOMER = "CUSTOMER",
+    RETAILER = "RETAILER",
+    STORE = "STORE",
+    RETAIL_USER = "RETAIL_USER",
+    GOAL = "GOAL",
+    WIZARD_SESSION = "WIZARD_SESSION",
+    SALE = "SALE",
+    SALE_EXCEPTION = "SALE_EXCEPTION",
+    REPORT_RUN = "REPORT_RUN",
+    COMMISSION_PLAN = "COMMISSION_PLAN",
+    COMMISSION_PAYOUT = "COMMISSION_PAYOUT",
+    COMMISSION_ADJUSTMENT = "COMMISSION_ADJUSTMENT",
+    COMMISSION_RULE = "COMMISSION_RULE",
+    COMMISSION_POLICY = "COMMISSION_POLICY"
+}

package/bin/loanRetailAudit/enums/RetailAuditEntityTypeEnum.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RetailAuditEntityTypeEnum = void 0;
+/** `entityType` de bitácora que escriben los lambdas Retail (customer, org, wizard, commission). */
+var RetailAuditEntityTypeEnum;
+(function (RetailAuditEntityTypeEnum) {
+    RetailAuditEntityTypeEnum["CUSTOMER"] = "CUSTOMER";
+    RetailAuditEntityTypeEnum["RETAILER"] = "RETAILER";
+    RetailAuditEntityTypeEnum["STORE"] = "STORE";
+    RetailAuditEntityTypeEnum["RETAIL_USER"] = "RETAIL_USER";
+    RetailAuditEntityTypeEnum["GOAL"] = "GOAL";
+    RetailAuditEntityTypeEnum["WIZARD_SESSION"] = "WIZARD_SESSION";
+    RetailAuditEntityTypeEnum["SALE"] = "SALE";
+    RetailAuditEntityTypeEnum["SALE_EXCEPTION"] = "SALE_EXCEPTION";
+    RetailAuditEntityTypeEnum["REPORT_RUN"] = "REPORT_RUN";
+    RetailAuditEntityTypeEnum["COMMISSION_PLAN"] = "COMMISSION_PLAN";
+    RetailAuditEntityTypeEnum["COMMISSION_PAYOUT"] = "COMMISSION_PAYOUT";
+    RetailAuditEntityTypeEnum["COMMISSION_ADJUSTMENT"] = "COMMISSION_ADJUSTMENT";
+    RetailAuditEntityTypeEnum["COMMISSION_RULE"] = "COMMISSION_RULE";
+    RetailAuditEntityTypeEnum["COMMISSION_POLICY"] = "COMMISSION_POLICY";
+})(RetailAuditEntityTypeEnum || (exports.RetailAuditEntityTypeEnum = RetailAuditEntityTypeEnum = {}));

package/bin/loanRetailAudit/events/AuditTrailRecordedV1.d.ts

@@ -0,0 +1,20 @@
+import { AuditTrailEntityType } from '../constants/auditTrailEntityTypes';
+import { AuditTrailChange } from '../dtos/AuditTrailChange';
+import { AuditTrailContextEntry } from '../dtos/AuditTrailContextEntry';
+import { AuditTrailActionEnum } from '../enums/AuditTrailActionEnum';
+/** Mensaje de la cola `LoanRetailAuditQueue`; el central lo guarda una sola vez por `eventId`. */
+export declare class AuditTrailRecordedV1 {
+    eventId: string;
+    entityType: AuditTrailEntityType;
+    entityId: string;
+    action: AuditTrailActionEnum;
+    changes: AuditTrailChange[];
+    context: AuditTrailContextEntry[];
+    /** userId del actor, o `system` si lo disparó un proceso interno. */
+    performedBy: string;
+    sourceLambda: string;
+    occurredAt: string;
+    tenantId?: string;
+    reason?: string;
+    ip?: string;
+}

package/bin/loanRetailAudit/events/AuditTrailRecordedV1.js

@@ -0,0 +1,94 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditTrailRecordedV1 = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const auditTrailEntityTypes_1 = require("../constants/auditTrailEntityTypes");
+const AuditTrailChange_1 = require("../dtos/AuditTrailChange");
+const AuditTrailContextEntry_1 = require("../dtos/AuditTrailContextEntry");
+const AuditTrailActionEnum_1 = require("../enums/AuditTrailActionEnum");
+/** Mensaje de la cola `LoanRetailAuditQueue`; el central lo guarda una sola vez por `eventId`. */
+class AuditTrailRecordedV1 {
+}
+exports.AuditTrailRecordedV1 = AuditTrailRecordedV1;
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "eventId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsIn)(auditTrailEntityTypes_1.AUDIT_TRAIL_ENTITY_TYPES),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "entityType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "entityId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(AuditTrailActionEnum_1.AuditTrailActionEnum),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "action", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => AuditTrailChange_1.AuditTrailChange),
+    __metadata("design:type", Array)
+], AuditTrailRecordedV1.prototype, "changes", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => AuditTrailContextEntry_1.AuditTrailContextEntry),
+    __metadata("design:type", Array)
+], AuditTrailRecordedV1.prototype, "context", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "performedBy", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "sourceLambda", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "occurredAt", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "tenantId", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "reason", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], AuditTrailRecordedV1.prototype, "ip", void 0);

package/bin/loanRetailAudit/index.d.ts

@@ -0,0 +1,13 @@
+export * from './enums/LoanAuditEntityTypeEnum';
+export * from './enums/RetailAuditEntityTypeEnum';
+export * from './enums/AuditTrailActionEnum';
+export * from './enums/PiiResourceTypeEnum';
+export * from './enums/PiiAccessActionEnum';
+export * from './constants/auditTrailEntityTypes';
+export * from './dtos/AuditTrailChange';
+export * from './dtos/AuditTrailContextEntry';
+export * from './dtos/requests/CreatePiiAccessLogRequest';
+export * from './dtos/requests/ListAuditTrailQuery';
+export * from './dtos/responses/CreatePiiAccessLogResponse';
+export * from './dtos/responses/ListAuditTrailResponse';
+export * from './events/AuditTrailRecordedV1';

package/bin/loanRetailAudit/index.js

@@ -0,0 +1,33 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Enums
+__exportStar(require("./enums/LoanAuditEntityTypeEnum"), exports);
+__exportStar(require("./enums/RetailAuditEntityTypeEnum"), exports);
+__exportStar(require("./enums/AuditTrailActionEnum"), exports);
+__exportStar(require("./enums/PiiResourceTypeEnum"), exports);
+__exportStar(require("./enums/PiiAccessActionEnum"), exports);
+// Constantes
+__exportStar(require("./constants/auditTrailEntityTypes"), exports);
+// DTOs
+__exportStar(require("./dtos/AuditTrailChange"), exports);
+__exportStar(require("./dtos/AuditTrailContextEntry"), exports);
+__exportStar(require("./dtos/requests/CreatePiiAccessLogRequest"), exports);
+__exportStar(require("./dtos/requests/ListAuditTrailQuery"), exports);
+__exportStar(require("./dtos/responses/CreatePiiAccessLogResponse"), exports);
+__exportStar(require("./dtos/responses/ListAuditTrailResponse"), exports);
+// Contratos de eventos
+__exportStar(require("./events/AuditTrailRecordedV1"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.545.0",
+  "version": "3.546.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/index.ts

@@ -217,3 +217,7 @@ export * as PdfRender from './pdfRender';
 
 // Rules: DTOs del lambda central rules-business (catálogo, validación, generación con IA y evaluación de reglas).
 export * as Rules from './rules';
+
+// LoanRetailAudit: contrato del lambda central loan-retail-audit-business (bitácora y accesos a PII
+// de Loan y Retail): mensaje de su cola, POST /private/pii-access-logs y GET /private/audit-trail.
+export * as LoanRetailAudit from './loanRetailAudit';

package/src/loanRetailAudit/constants/auditTrailEntityTypes.ts

@@ -0,0 +1,12 @@
+import { LoanAuditEntityTypeEnum } from '../enums/LoanAuditEntityTypeEnum';
+import { RetailAuditEntityTypeEnum } from '../enums/RetailAuditEntityTypeEnum';
+
+/** Cualquier `entityType` que acepta el central, de Loan o de Retail. */
+export type AuditTrailEntityType = LoanAuditEntityTypeEnum | RetailAuditEntityTypeEnum;
+
+export const AUDIT_TRAIL_ENTITY_TYPES: readonly AuditTrailEntityType[] = [
+    ...Object.values(LoanAuditEntityTypeEnum),
+    ...Object.values(RetailAuditEntityTypeEnum),
+];
+
+export const AUDIT_TRAIL_MAX_PAGE_SIZE = 100;

package/src/loanRetailAudit/dtos/AuditTrailChange.ts

@@ -0,0 +1,22 @@
+import { Expose } from 'class-transformer';
+import { IsNotEmpty, IsOptional, IsString } from 'class-validator';
+
+/** Un campo que cambió; los valores van serializados a string y nunca llevan PII. */
+export class AuditTrailChange {
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    field!: string;
+
+    /** Ausente en un alta. */
+    @Expose()
+    @IsOptional()
+    @IsString()
+    oldValue?: string;
+
+    /** Ausente en una baja. */
+    @Expose()
+    @IsOptional()
+    @IsString()
+    newValue?: string;
+}

package/src/loanRetailAudit/dtos/AuditTrailContextEntry.ts

@@ -0,0 +1,14 @@
+import { Expose } from 'class-transformer';
+import { IsNotEmpty, IsString } from 'class-validator';
+
+/** Dato que la acción no cambió y se guarda para leer la entrada sin abrir otra pantalla. */
+export class AuditTrailContextEntry {
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    key!: string;
+
+    @Expose()
+    @IsString()
+    value!: string;
+}

package/src/loanRetailAudit/dtos/requests/CreatePiiAccessLogRequest.ts

@@ -0,0 +1,64 @@
+import { Expose } from 'class-transformer';
+import { ArrayNotEmpty, IsArray, IsEnum, IsISO8601, IsNotEmpty, IsOptional, IsString } from 'class-validator';
+import { PiiAccessActionEnum } from '../../enums/PiiAccessActionEnum';
+import { PiiResourceTypeEnum } from '../../enums/PiiResourceTypeEnum';
+
+/** Body de `POST /private/pii-access-logs` (privateCreatePiiAccessLog); el tenant va en `?tenantId=`. */
+export class CreatePiiAccessLogRequest {
+    /** ULID generado por quien llama; con `occurredAt` forma el sk, así un reintento no duplica. */
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    accessId!: string;
+
+    @Expose()
+    @IsISO8601()
+    occurredAt!: string;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    correlationId!: string;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    actorId!: string;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    sourceLambda!: string;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    operationName!: string;
+
+    @Expose()
+    @IsEnum(PiiAccessActionEnum)
+    action!: PiiAccessActionEnum;
+
+    @Expose()
+    @IsEnum(PiiResourceTypeEnum)
+    resourceType!: PiiResourceTypeEnum;
+
+    /** Id del recurso, o `(list)` en un listado con los ids en `resourceIds`. */
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    resourceId!: string;
+
+    /** Nombres de los campos PII que viajaron; nunca sus valores. */
+    @Expose()
+    @IsArray()
+    @ArrayNotEmpty()
+    @IsString({ each: true })
+    fields!: string[];
+
+    @Expose()
+    @IsOptional()
+    @IsArray()
+    @IsString({ each: true })
+    resourceIds?: string[];
+}

package/src/loanRetailAudit/dtos/requests/ListAuditTrailQuery.ts

@@ -0,0 +1,35 @@
+import { Expose, Type } from 'class-transformer';
+import { IsEnum, IsIn, IsInt, IsNotEmpty, IsOptional, IsString, Max, Min } from 'class-validator';
+import { SortDirEnum } from '../../../passport/enums/SortDirEnum';
+import { AUDIT_TRAIL_ENTITY_TYPES, AUDIT_TRAIL_MAX_PAGE_SIZE, AuditTrailEntityType } from '../../constants/auditTrailEntityTypes';
+
+/** Query de `GET /private/audit-trail` (privateListAuditTrail): bitácora de una entidad, paginada por sk. */
+export class ListAuditTrailQuery {
+    @Expose()
+    @IsIn(AUDIT_TRAIL_ENTITY_TYPES)
+    entityType!: AuditTrailEntityType;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    entityId!: string;
+
+    /** Por default `desc`, lo más reciente primero. */
+    @Expose()
+    @IsOptional()
+    @IsEnum(SortDirEnum)
+    order?: SortDirEnum;
+
+    @Expose()
+    @IsOptional()
+    @Type(() => Number)
+    @IsInt()
+    @Min(1)
+    @Max(AUDIT_TRAIL_MAX_PAGE_SIZE)
+    limit?: number;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    nextToken?: string;
+}

package/src/loanRetailAudit/dtos/responses/CreatePiiAccessLogResponse.ts

@@ -0,0 +1,4 @@
+/** Respuesta 201 de privateCreatePiiAccessLog; el mismo `accessId` en un reintento no duplica la fila. */
+export interface CreatePiiAccessLogResponse {
+    accessId: string;
+}

package/src/loanRetailAudit/dtos/responses/ListAuditTrailResponse.ts

@@ -0,0 +1,31 @@
+import { AuditTrailEntityType } from '../../constants/auditTrailEntityTypes';
+import { AuditTrailActionEnum } from '../../enums/AuditTrailActionEnum';
+
+/** Un campo que cambió, como lo devuelve la lectura. */
+export interface AuditTrailChangeView {
+    field: string;
+    oldValue: string | null;
+    newValue: string | null;
+}
+
+/** Una entrada de la bitácora; `eventId` y `sourceLambda` son `null` en filas Loan de forma vieja. */
+export interface AuditTrailEntry {
+    eventId: string | null;
+    sourceLambda: string | null;
+    entityType: AuditTrailEntityType;
+    entityId: string;
+    tenantId: string | null;
+    action: AuditTrailActionEnum;
+    performedBy: string;
+    reason: string | null;
+    ip: string | null;
+    changes: AuditTrailChangeView[];
+    context: { key: string; value: string }[];
+    occurredAt: string;
+}
+
+/** Página de privateListAuditTrail; `nextToken` es `null` en la última. */
+export interface ListAuditTrailResponse {
+    items: AuditTrailEntry[];
+    nextToken: string | null;
+}

package/src/loanRetailAudit/enums/AuditTrailActionEnum.ts

@@ -0,0 +1,39 @@
+/** Acción auditada en `SharedAuditTrail`; une las de Loan y Retail. */
+export enum AuditTrailActionEnum {
+    CREATE = 'CREATE',
+    UPDATE = 'UPDATE',
+    DELETE = 'DELETE',
+    UPSERT = 'UPSERT',
+    STATUS_CHANGE = 'STATUS_CHANGE',
+    TRANSFER = 'TRANSFER',
+    KYC_VERIFIED = 'KYC_VERIFIED',
+    KYC_REVIEW = 'KYC_REVIEW',
+    ACCOUNT_RESULT = 'ACCOUNT_RESULT',
+    WELCOME_ACCREDITED = 'WELCOME_ACCREDITED',
+    WELCOME_ACCREDITATION_RESULT = 'WELCOME_ACCREDITATION_RESULT',
+    WELCOME_ACCREDITATION_RECONCILED = 'WELCOME_ACCREDITATION_RECONCILED',
+    SESSION_CREATE = 'SESSION_CREATE',
+    STEP_ADVANCE = 'STEP_ADVANCE',
+    OTP_SKIP = 'OTP_SKIP',
+    SESSION_RESUME = 'SESSION_RESUME',
+    SESSION_CANCEL = 'SESSION_CANCEL',
+    SESSION_CREDIT_ENABLED = 'SESSION_CREDIT_ENABLED',
+    PAYMENT_REGISTERED = 'PAYMENT_REGISTERED',
+    SALE_COMPLETE = 'SALE_COMPLETE',
+    SALE_CANCEL = 'SALE_CANCEL',
+    SALE_CARD_DELIVERED = 'SALE_CARD_DELIVERED',
+    KYC_CONFIRM = 'KYC_CONFIRM',
+    COMPLIANCE_VERDICT = 'COMPLIANCE_VERDICT',
+    EXCEPTION_CREATE = 'EXCEPTION_CREATE',
+    EXCEPTION_REVIEW = 'EXCEPTION_REVIEW',
+    EXCEPTION_RESOLVE = 'EXCEPTION_RESOLVE',
+    EXCEPTION_APPLY = 'EXCEPTION_APPLY',
+    EXCEPTION_NOTE = 'EXCEPTION_NOTE',
+    REPORT_RUN_REQUEST = 'REPORT_RUN_REQUEST',
+    PUBLISH = 'PUBLISH',
+    CLOSE = 'CLOSE',
+    ADJUST = 'ADJUST',
+    PAUSE = 'PAUSE',
+    RESUME = 'RESUME',
+    EXPIRE = 'EXPIRE',
+}

package/src/loanRetailAudit/enums/LoanAuditEntityTypeEnum.ts

@@ -0,0 +1,12 @@
+/** `entityType` de bitácora que escriben los lambdas Loan; los valores son los que ya están en la pk. */
+export enum LoanAuditEntityTypeEnum {
+    CREDIT = 'CREDIT',
+    INSTALLMENT = 'INSTALLMENT',
+    RESTRUCTURE = 'RESTRUCTURE',
+    CREDIT_PLAN = 'CREDIT_PLAN',
+    STORE_POLICY = 'STORE_POLICY',
+    SEGMENT = 'SEGMENT',
+    LOAN_PARAMETER = 'LoanParameter',
+    LOAN_ASSIGNMENT_RULE = 'LoanAssignmentRule',
+    LOAN_COLLECTOR_ASSIGNMENT = 'LoanCollectorAssignment',
+}

package/src/loanRetailAudit/enums/PiiAccessActionEnum.ts

@@ -0,0 +1,5 @@
+/** Qué se hizo con la PII: verla o cambiarla. */
+export enum PiiAccessActionEnum {
+    READ = 'READ',
+    WRITE = 'WRITE',
+}

package/src/loanRetailAudit/enums/PiiResourceTypeEnum.ts

@@ -0,0 +1,9 @@
+/** Tipo de recurso con PII; arma la pk `RESOURCE#<tipo>#<id>` de `SharedPiiAccessLog`. */
+export enum PiiResourceTypeEnum {
+    RETAIL_CUSTOMER = 'RETAIL_CUSTOMER',
+    RETAIL_USER = 'RETAIL_USER',
+    RETAILER = 'RETAILER',
+    SALE = 'SALE',
+    PROSPECT = 'PROSPECT',
+    LOAN_PAYMENT = 'LOAN_PAYMENT',
+}

package/src/loanRetailAudit/enums/RetailAuditEntityTypeEnum.ts

@@ -0,0 +1,17 @@
+/** `entityType` de bitácora que escriben los lambdas Retail (customer, org, wizard, commission). */
+export enum RetailAuditEntityTypeEnum {
+    CUSTOMER = 'CUSTOMER',
+    RETAILER = 'RETAILER',
+    STORE = 'STORE',
+    RETAIL_USER = 'RETAIL_USER',
+    GOAL = 'GOAL',
+    WIZARD_SESSION = 'WIZARD_SESSION',
+    SALE = 'SALE',
+    SALE_EXCEPTION = 'SALE_EXCEPTION',
+    REPORT_RUN = 'REPORT_RUN',
+    COMMISSION_PLAN = 'COMMISSION_PLAN',
+    COMMISSION_PAYOUT = 'COMMISSION_PAYOUT',
+    COMMISSION_ADJUSTMENT = 'COMMISSION_ADJUSTMENT',
+    COMMISSION_RULE = 'COMMISSION_RULE',
+    COMMISSION_POLICY = 'COMMISSION_POLICY',
+}

package/src/loanRetailAudit/events/AuditTrailRecordedV1.ts

@@ -0,0 +1,70 @@
+import { Expose, Type } from 'class-transformer';
+import { IsArray, IsIn, IsEnum, IsISO8601, IsNotEmpty, IsOptional, IsString, ValidateNested } from 'class-validator';
+import { AUDIT_TRAIL_ENTITY_TYPES, AuditTrailEntityType } from '../constants/auditTrailEntityTypes';
+import { AuditTrailChange } from '../dtos/AuditTrailChange';
+import { AuditTrailContextEntry } from '../dtos/AuditTrailContextEntry';
+import { AuditTrailActionEnum } from '../enums/AuditTrailActionEnum';
+
+/** Mensaje de la cola `LoanRetailAuditQueue`; el central lo guarda una sola vez por `eventId`. */
+export class AuditTrailRecordedV1 {
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    eventId!: string;
+
+    @Expose()
+    @IsIn(AUDIT_TRAIL_ENTITY_TYPES)
+    entityType!: AuditTrailEntityType;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    entityId!: string;
+
+    @Expose()
+    @IsEnum(AuditTrailActionEnum)
+    action!: AuditTrailActionEnum;
+
+    @Expose()
+    @IsArray()
+    @ValidateNested({ each: true })
+    @Type(() => AuditTrailChange)
+    changes!: AuditTrailChange[];
+
+    @Expose()
+    @IsArray()
+    @ValidateNested({ each: true })
+    @Type(() => AuditTrailContextEntry)
+    context!: AuditTrailContextEntry[];
+
+    /** userId del actor, o `system` si lo disparó un proceso interno. */
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    performedBy!: string;
+
+    @Expose()
+    @IsString()
+    @IsNotEmpty()
+    sourceLambda!: string;
+
+    @Expose()
+    @IsISO8601()
+    occurredAt!: string;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    @IsNotEmpty()
+    tenantId?: string;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    reason?: string;
+
+    @Expose()
+    @IsOptional()
+    @IsString()
+    ip?: string;
+}

package/src/loanRetailAudit/index.ts

@@ -0,0 +1,20 @@
+// Enums
+export * from './enums/LoanAuditEntityTypeEnum';
+export * from './enums/RetailAuditEntityTypeEnum';
+export * from './enums/AuditTrailActionEnum';
+export * from './enums/PiiResourceTypeEnum';
+export * from './enums/PiiAccessActionEnum';
+
+// Constantes
+export * from './constants/auditTrailEntityTypes';
+
+// DTOs
+export * from './dtos/AuditTrailChange';
+export * from './dtos/AuditTrailContextEntry';
+export * from './dtos/requests/CreatePiiAccessLogRequest';
+export * from './dtos/requests/ListAuditTrailQuery';
+export * from './dtos/responses/CreatePiiAccessLogResponse';
+export * from './dtos/responses/ListAuditTrailResponse';
+
+// Contratos de eventos
+export * from './events/AuditTrailRecordedV1';