@muni-sanfer/types-gestor-documental 0.0.1-beta.28 → 0.0.1-beta.29

package/dist/base/entities.d.ts

@@ -343,6 +343,32 @@ export declare const DataRightsEventAction: {
     ResponseSent: "ResponseSent";
     ComplaintRegistered: "ComplaintRegistered";
 };
+export type DataBreachKind = 'Destruction' | 'Leak' | 'Loss' | 'Alteration' | 'UnauthorizedAccess';
+export declare const DataBreachKind: {
+    Destruction: "Destruction";
+    Leak: "Leak";
+    Loss: "Loss";
+    Alteration: "Alteration";
+    UnauthorizedAccess: "UnauthorizedAccess";
+};
+export type DataBreachStatus = 'Open' | 'Closed';
+export declare const DataBreachStatus: {
+    Open: "Open";
+    Closed: "Closed";
+};
+export type DataBreachEventAction = 'Registered' | 'Updated' | 'AgencyReported' | 'HoldersNotified' | 'Closed';
+export declare const DataBreachEventAction: {
+    Registered: "Registered";
+    Updated: "Updated";
+    AgencyReported: "AgencyReported";
+    HoldersNotified: "HoldersNotified";
+    Closed: "Closed";
+};
+export type DataBreachNoticeMeans = 'Individual' | 'PublicNotice';
+export declare const DataBreachNoticeMeans: {
+    Individual: "Individual";
+    PublicNotice: "PublicNotice";
+};
 export interface DocumentTypeEntity {
     id: string;
     name: string;
@@ -1046,6 +1072,7 @@ export interface DataTreatmentEntity {
     responsibleUnit?: string | null;
     published: boolean;
     requests?: DataRightsRequestEntity[];
+    breaches?: DataBreachEntity[];
     enabled: boolean;
     deleted: boolean;
     createdAt: string;
@@ -1108,6 +1135,48 @@ export interface DataRightsEventEntity {
     requestId: string;
     createdAt: string;
 }
+export interface DataBreachEntity {
+    id: string;
+    number: number;
+    year: number;
+    detectedAt: string;
+    occurredAt?: string | null;
+    kinds: DataBreachKind[];
+    description: string;
+    effects?: string | null;
+    dataCategories: string[];
+    affectedCount?: number | null;
+    measures?: string | null;
+    sensitiveData: boolean;
+    minorsData: boolean;
+    financialData: boolean;
+    riskToRights: boolean;
+    treatment?: DataTreatmentEntity | null;
+    treatmentId?: string | null;
+    status: DataBreachStatus;
+    agencyReportedAt?: string | null;
+    agencyReportNote?: string | null;
+    holdersNotifiedAt?: string | null;
+    holdersNoticeMeans?: DataBreachNoticeMeans | null;
+    holdersNoticeNote?: string | null;
+    closedAt?: string | null;
+    closeNote?: string | null;
+    createdByEmployeeId: string;
+    createdByFullName: string;
+    events?: DataBreachEventEntity[];
+    createdAt: string;
+    updatedAt: string;
+}
+export interface DataBreachEventEntity {
+    id: string;
+    action: DataBreachEventAction;
+    note?: string | null;
+    employeeId?: string | null;
+    employeeFullName: string;
+    breach?: DataBreachEntity;
+    breachId: string;
+    createdAt: string;
+}
 type JsonValue = string | number | boolean | {
     [key in string]?: JsonValue;
 } | Array<JsonValue> | null;

package/dist/base/entities.js

@@ -1,7 +1,7 @@
 "use strict";
 // This file was auto-generated by prisma-generator-typescript-interfaces
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DataRightsEventAction = exports.DataRightsResolution = exports.DataRightsRequestStatus = exports.DataRightsChannel = exports.DataRight = exports.DataLegalBasis = exports.TransparencyStatus = exports.AccessRequestEventAction = exports.AccessRequestResolution = exports.AccessRequestStatus = exports.AccessRequestChannel = exports.DispositionKind = exports.FinalDisposition = exports.AuditAction = exports.AuditEntity = exports.DocumentAccessAction = exports.QualityMetricKey = exports.ServiceOutageKind = exports.WorkFolderItemKind = exports.TextSnippetSection = exports.ScanSessionStatus = exports.CaseFileAccessAction = exports.CaseFileTrackingAction = exports.CaseFileActorType = exports.CaseFileActorRelation = exports.CaseFileEntryKind = exports.CaseFileActuationType = exports.CaseFileIncorporationMechanism = exports.CaseFileStatus = exports.DocumentInstruction = exports.DocumentDeliveryOrigin = exports.DocumentRecipientType = exports.DocumentAttachmentType = exports.DocumentFlowStepType = exports.DocDigitalInboundStatus = exports.DocumentDispatchStatus = exports.CommunicationMeans = exports.DocumentOrigin = exports.DocumentTrackingAction = exports.DocumentParticipantStatus = exports.DocumentParticipantRole = exports.DocumentAccessLevel = exports.DocumentStatus = exports.DocumentCategory = void 0;
+exports.DataBreachNoticeMeans = exports.DataBreachEventAction = exports.DataBreachStatus = exports.DataBreachKind = exports.DataRightsEventAction = exports.DataRightsResolution = exports.DataRightsRequestStatus = exports.DataRightsChannel = exports.DataRight = exports.DataLegalBasis = exports.TransparencyStatus = exports.AccessRequestEventAction = exports.AccessRequestResolution = exports.AccessRequestStatus = exports.AccessRequestChannel = exports.DispositionKind = exports.FinalDisposition = exports.AuditAction = exports.AuditEntity = exports.DocumentAccessAction = exports.QualityMetricKey = exports.ServiceOutageKind = exports.WorkFolderItemKind = exports.TextSnippetSection = exports.ScanSessionStatus = exports.CaseFileAccessAction = exports.CaseFileTrackingAction = exports.CaseFileActorType = exports.CaseFileActorRelation = exports.CaseFileEntryKind = exports.CaseFileActuationType = exports.CaseFileIncorporationMechanism = exports.CaseFileStatus = exports.DocumentInstruction = exports.DocumentDeliveryOrigin = exports.DocumentRecipientType = exports.DocumentAttachmentType = exports.DocumentFlowStepType = exports.DocDigitalInboundStatus = exports.DocumentDispatchStatus = exports.CommunicationMeans = exports.DocumentOrigin = exports.DocumentTrackingAction = exports.DocumentParticipantStatus = exports.DocumentParticipantRole = exports.DocumentAccessLevel = exports.DocumentStatus = exports.DocumentCategory = void 0;
 exports.DocumentCategory = {
     Decree: 'Decree',
     Communication: 'Communication',
@@ -303,3 +303,25 @@ exports.DataRightsEventAction = {
     ResponseSent: 'ResponseSent',
     ComplaintRegistered: 'ComplaintRegistered',
 };
+exports.DataBreachKind = {
+    Destruction: 'Destruction',
+    Leak: 'Leak',
+    Loss: 'Loss',
+    Alteration: 'Alteration',
+    UnauthorizedAccess: 'UnauthorizedAccess',
+};
+exports.DataBreachStatus = {
+    Open: 'Open',
+    Closed: 'Closed',
+};
+exports.DataBreachEventAction = {
+    Registered: 'Registered',
+    Updated: 'Updated',
+    AgencyReported: 'AgencyReported',
+    HoldersNotified: 'HoldersNotified',
+    Closed: 'Closed',
+};
+exports.DataBreachNoticeMeans = {
+    Individual: 'Individual',
+    PublicNotice: 'PublicNotice',
+};

package/dist/contracts/dataProtection.contract.d.ts

@@ -1,5 +1,5 @@
-import { type CommunicationMeans, type DataLegalBasis, type DataRight, type DataRightsChannel, type DataRightsResolution } from '../base/entities';
-import { type DataProtectionPolicyEntity, type DataRightsRequestDetailEntity, type DataRightsRequestListItemEntity, type DataRightsSummaryEntity, type DataTreatmentResponseEntity } from '../entities';
+import { type CommunicationMeans, type DataBreachKind, type DataBreachNoticeMeans, type DataLegalBasis, type DataRight, type DataRightsChannel, type DataRightsResolution } from '../base/entities';
+import { type DataBreachResponseEntity, type DataProtectionPolicyEntity, type IndicatorsFileEntity, type DataRightsRequestDetailEntity, type DataRightsRequestListItemEntity, type DataRightsSummaryEntity, type DataTreatmentResponseEntity } from '../entities';
 import { type RpcPage } from './contract';
 /** Patrones NATS de `dataProtection`: tratamientos de datos y solicitudes de los titulares (Ley 19.628). */
 export declare const DataProtectionPatterns: {
@@ -14,6 +14,12 @@ export declare const DataProtectionPatterns: {
     readonly createRequest: "gestorDocumental.dataProtection.createRequest";
     readonly updateRequest: "gestorDocumental.dataProtection.updateRequest";
     readonly actOnRequest: "gestorDocumental.dataProtection.actOnRequest";
+    readonly getBreaches: "gestorDocumental.dataProtection.getBreaches";
+    readonly getBreach: "gestorDocumental.dataProtection.getBreach";
+    readonly createBreach: "gestorDocumental.dataProtection.createBreach";
+    readonly updateBreach: "gestorDocumental.dataProtection.updateBreach";
+    readonly actOnBreach: "gestorDocumental.dataProtection.actOnBreach";
+    readonly getBreachPdf: "gestorDocumental.dataProtection.getBreachPdf";
 };
 type TActor = {
     employeeId: string;
@@ -92,6 +98,40 @@ export type DataRightsAction = {
     complaintAt?: string | null;
     note: string;
 };
+/** Datos de una vulneración al registrarla o corregirla. */
+export interface DataBreachWritePayload {
+    detectedAt: string;
+    occurredAt?: string | null;
+    kinds: DataBreachKind[];
+    description: string;
+    effects?: string | null;
+    dataCategories: string[];
+    affectedCount?: number | null;
+    measures?: string | null;
+    sensitiveData?: boolean;
+    minorsData?: boolean;
+    financialData?: boolean;
+    riskToRights?: boolean;
+    treatmentId?: string | null;
+}
+/** Un paso de la gestión de una vulneración. */
+export type DataBreachAction = 
+/** Reporte a la Agencia, con el medio y su número o folio. */
+{
+    type: 'reportAgency';
+    reportedAt?: string | null;
+    note: string;
+}
+/** Comunicación a los titulares: a cada uno o, si no es posible, un aviso en un medio masivo nacional. */
+ | {
+    type: 'notifyHolders';
+    notifiedAt?: string | null;
+    means: DataBreachNoticeMeans;
+    note: string;
+} | {
+    type: 'close';
+    note?: string | null;
+};
 export interface DataProtectionContract {
     [DataProtectionPatterns.getTreatments]: {
         payload: {
@@ -164,5 +204,48 @@ export interface DataProtectionContract {
         };
         response: DataRightsRequestDetailEntity;
     };
+    /** Las vulneraciones del año (o todas las abiertas), de la más reciente a la más antigua. */
+    [DataProtectionPatterns.getBreaches]: {
+        payload: {
+            year?: number | null;
+            openOnly?: boolean;
+        };
+        response: DataBreachResponseEntity[];
+    };
+    [DataProtectionPatterns.getBreach]: {
+        payload: {
+            id: string;
+        };
+        response: DataBreachResponseEntity;
+    };
+    [DataProtectionPatterns.createBreach]: {
+        payload: DataBreachWritePayload & {
+            actor: TActor;
+        };
+        response: DataBreachResponseEntity;
+    };
+    [DataProtectionPatterns.updateBreach]: {
+        payload: DataBreachWritePayload & {
+            id: string;
+            actor: TActor;
+        };
+        response: DataBreachResponseEntity;
+    };
+    [DataProtectionPatterns.actOnBreach]: {
+        payload: {
+            id: string;
+            action: DataBreachAction;
+            actor: TActor;
+        };
+        response: DataBreachResponseEntity;
+    };
+    /** El registro de la vulneración en PDF, para reportarla o archivarla. */
+    [DataProtectionPatterns.getBreachPdf]: {
+        payload: {
+            id: string;
+            generatedBy: string;
+        };
+        response: IndicatorsFileEntity;
+    };
 }
 export {};

package/dist/contracts/dataProtection.contract.js

@@ -14,4 +14,10 @@ exports.DataProtectionPatterns = {
     createRequest: 'gestorDocumental.dataProtection.createRequest',
     updateRequest: 'gestorDocumental.dataProtection.updateRequest',
     actOnRequest: 'gestorDocumental.dataProtection.actOnRequest',
+    getBreaches: 'gestorDocumental.dataProtection.getBreaches',
+    getBreach: 'gestorDocumental.dataProtection.getBreach',
+    createBreach: 'gestorDocumental.dataProtection.createBreach',
+    updateBreach: 'gestorDocumental.dataProtection.updateBreach',
+    actOnBreach: 'gestorDocumental.dataProtection.actOnBreach',
+    getBreachPdf: 'gestorDocumental.dataProtection.getBreachPdf',
 };

package/dist/contracts/index.d.ts

@@ -132,6 +132,7 @@ export declare const GestorDocumentalPatterns: {
         readonly checkEnablement: "gestorDocumental.partsOffice.checkEnablement";
         readonly dispatchByContingency: "gestorDocumental.partsOffice.dispatchByContingency";
         readonly registerManualIntake: "gestorDocumental.partsOffice.registerManualIntake";
+        readonly addCaseFileReceipt: "gestorDocumental.partsOffice.addCaseFileReceipt";
     };
     readonly registerBook: {
         readonly get: "gestorDocumental.registerBook.get";
@@ -243,6 +244,12 @@ export declare const GestorDocumentalPatterns: {
         readonly createRequest: "gestorDocumental.dataProtection.createRequest";
         readonly updateRequest: "gestorDocumental.dataProtection.updateRequest";
         readonly actOnRequest: "gestorDocumental.dataProtection.actOnRequest";
+        readonly getBreaches: "gestorDocumental.dataProtection.getBreaches";
+        readonly getBreach: "gestorDocumental.dataProtection.getBreach";
+        readonly createBreach: "gestorDocumental.dataProtection.createBreach";
+        readonly updateBreach: "gestorDocumental.dataProtection.updateBreach";
+        readonly actOnBreach: "gestorDocumental.dataProtection.actOnBreach";
+        readonly getBreachPdf: "gestorDocumental.dataProtection.getBreachPdf";
     };
 };
 /** Contrato completo de gestor-documental-ms: la unión de los contratos de sus recursos. */

package/dist/contracts/partsOffice.contract.d.ts

@@ -1,5 +1,5 @@
 import { type CommunicationMeans, type DocumentAccessLevel, type DocumentInstruction } from '../base/entities';
-import { type DocDigitalDocumentTypeEntity, type DocDigitalEntityEntity, type PartsOfficeInboundEntity, type DocDigitalUserEntity, type EnablementPersonInput, type PartsOfficeEnablementEntity, type PartsOfficeDispatchEntity, type PartsOfficeFileEntity, type PartsOfficeOkResponseEntity, type PartsOfficeRegisterResponseEntity, type PartsOfficeStatusEntity, type PartsOfficeSummaryEntity, type PartsOfficeSyncResponseEntity } from '../entities';
+import { type CaseFileAddEntryResponseEntity, type DocDigitalDocumentTypeEntity, type DocDigitalEntityEntity, type PartsOfficeInboundEntity, type DocDigitalUserEntity, type EnablementPersonInput, type PartsOfficeEnablementEntity, type PartsOfficeDispatchEntity, type PartsOfficeFileEntity, type PartsOfficeOkResponseEntity, type PartsOfficeRegisterResponseEntity, type PartsOfficeStatusEntity, type PartsOfficeSummaryEntity, type PartsOfficeSyncResponseEntity } from '../entities';
 import { type RpcPage } from './contract';
 import { type DocumentActor, type DocumentExternalRecipientInput } from './document.contract';
 /** Patrones NATS de `partsOffice` (Oficina de Partes y DocDigital): `<servicio>.<recurso>.<acción>`. */
@@ -24,6 +24,7 @@ export declare const PartsOfficePatterns: {
     readonly checkEnablement: "gestorDocumental.partsOffice.checkEnablement";
     readonly dispatchByContingency: "gestorDocumental.partsOffice.dispatchByContingency";
     readonly registerManualIntake: "gestorDocumental.partsOffice.registerManualIntake";
+    readonly addCaseFileReceipt: "gestorDocumental.partsOffice.addCaseFileReceipt";
 };
 /** Destinatario interno de un ingreso, ya resuelto por el gateway (las áreas con sus integrantes). */
 export type PartsOfficeRecipientInput = {
@@ -244,5 +245,19 @@ export interface PartsOfficeContract {
         payload: ManualIntakePayload;
         response: PartsOfficeRegisterResponseEntity;
     };
+    /**
+     * Comprobante de trazabilidad de DocDigital de un documento del índice de un expediente (despachado o recibido por
+     * DocDigital): se arma con el estado y el historial que informa DocDigital y entra como comunicación oficial.
+     */
+    [PartsOfficePatterns.addCaseFileReceipt]: {
+        payload: {
+            caseFileId: string;
+            documentId: string;
+            actor: {
+                employeeId: string;
+            };
+        };
+        response: CaseFileAddEntryResponseEntity;
+    };
 }
 export {};

package/dist/contracts/partsOffice.contract.js

@@ -23,4 +23,5 @@ exports.PartsOfficePatterns = {
     checkEnablement: 'gestorDocumental.partsOffice.checkEnablement',
     dispatchByContingency: 'gestorDocumental.partsOffice.dispatchByContingency',
     registerManualIntake: 'gestorDocumental.partsOffice.registerManualIntake',
+    addCaseFileReceipt: 'gestorDocumental.partsOffice.addCaseFileReceipt',
 };

package/dist/entities/caseFile/caseFile.entity.d.ts

@@ -29,6 +29,8 @@ export interface CaseFileEntryDocumentEntity {
     correlative: DocumentEntity['correlative'];
     correlativeYear: DocumentEntity['correlativeYear'];
     documentType: DocumentTypeSummaryEntity;
+    /** N° del documento en DocDigital, si se despachó o se recibió por ahí: tiene comprobante de trazabilidad. */
+    docDigitalDocumentId: string | null;
 }
 /** Entrada del índice electrónico: una actuación, en su orden de incorporación. */
 export interface CaseFileEntryResponseEntity {

package/dist/entities/dataProtection/dataProtection.entity.d.ts

@@ -1,4 +1,4 @@
-import { type CommunicationMeans, type DataLegalBasis, type DataRight, type DataRightsChannel, type DataRightsEventAction, type DataRightsRequestStatus, type DataRightsResolution } from '../../base/entities';
+import { type CommunicationMeans, type DataBreachEventAction, type DataBreachKind, type DataBreachNoticeMeans, type DataBreachStatus, type DataLegalBasis, type DataRight, type DataRightsChannel, type DataRightsEventAction, type DataRightsRequestStatus, type DataRightsResolution } from '../../base/entities';
 /** Tratamiento de datos personales de la municipalidad: lo que se informa al público (Ley 19.628, art. 14 ter). */
 export interface DataTreatmentResponseEntity {
     id: string;
@@ -127,3 +127,48 @@ export interface PersonalDataHintsEntity {
     /** Algunos ejemplos enmascarados («11.1••.•••-1»). */
     samples: string[];
 }
+/** Vulneración de las medidas de seguridad que afecta datos personales (Ley 19.628, art. 14 sexies). */
+export interface DataBreachResponseEntity {
+    id: string;
+    /** «N° 2/2026». */
+    label: string;
+    year: number;
+    number: number;
+    detectedAt: string;
+    occurredAt: string | null;
+    kinds: DataBreachKind[];
+    description: string;
+    effects: string | null;
+    dataCategories: string[];
+    affectedCount: number | null;
+    measures: string | null;
+    sensitiveData: boolean;
+    minorsData: boolean;
+    financialData: boolean;
+    riskToRights: boolean;
+    treatmentId: string | null;
+    treatmentName: string | null;
+    status: DataBreachStatus;
+    /** Hay riesgo razonable para los titulares: se reporta a la Agencia sin dilaciones indebidas. */
+    mustReportAgency: boolean;
+    /** Además, datos sensibles, de menores de 14 o de obligaciones económicas: se comunica a los titulares. */
+    mustNotifyHolders: boolean;
+    agencyReportedAt: string | null;
+    agencyReportNote: string | null;
+    /** Horas entre la detección y el reporte a la Agencia (o hasta ahora, si falta reportarla). */
+    agencyDelayHours: number | null;
+    holdersNotifiedAt: string | null;
+    holdersNoticeMeans: DataBreachNoticeMeans | null;
+    holdersNoticeNote: string | null;
+    closedAt: string | null;
+    closeNote: string | null;
+    createdByFullName: string;
+    /** Por qué todavía no se puede cerrar, o `null` si se puede. */
+    closeBlock: string | null;
+    events: {
+        action: DataBreachEventAction;
+        note: string | null;
+        employeeFullName: string;
+        createdAt: string;
+    }[];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@muni-sanfer/types-gestor-documental",
-  "version": "0.0.1-beta.28",
+  "version": "0.0.1-beta.29",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {

package/src/base/entities.ts

@@ -518,6 +518,40 @@ export const DataRightsEventAction = {
   ComplaintRegistered: 'ComplaintRegistered',
 } satisfies Record<string, DataRightsEventAction>;
 
+export type DataBreachKind = 'Destruction' | 'Leak' | 'Loss' | 'Alteration' | 'UnauthorizedAccess';
+
+export const DataBreachKind = {
+  Destruction: 'Destruction',
+  Leak: 'Leak',
+  Loss: 'Loss',
+  Alteration: 'Alteration',
+  UnauthorizedAccess: 'UnauthorizedAccess',
+} satisfies Record<string, DataBreachKind>;
+
+export type DataBreachStatus = 'Open' | 'Closed';
+
+export const DataBreachStatus = {
+  Open: 'Open',
+  Closed: 'Closed',
+} satisfies Record<string, DataBreachStatus>;
+
+export type DataBreachEventAction = 'Registered' | 'Updated' | 'AgencyReported' | 'HoldersNotified' | 'Closed';
+
+export const DataBreachEventAction = {
+  Registered: 'Registered',
+  Updated: 'Updated',
+  AgencyReported: 'AgencyReported',
+  HoldersNotified: 'HoldersNotified',
+  Closed: 'Closed',
+} satisfies Record<string, DataBreachEventAction>;
+
+export type DataBreachNoticeMeans = 'Individual' | 'PublicNotice';
+
+export const DataBreachNoticeMeans = {
+  Individual: 'Individual',
+  PublicNotice: 'PublicNotice',
+} satisfies Record<string, DataBreachNoticeMeans>;
+
 export interface DocumentTypeEntity {
   id: string;
   name: string;
@@ -1263,6 +1297,7 @@ export interface DataTreatmentEntity {
   responsibleUnit?: string | null;
   published: boolean;
   requests?: DataRightsRequestEntity[];
+  breaches?: DataBreachEntity[];
   enabled: boolean;
   deleted: boolean;
   createdAt: string;
@@ -1328,4 +1363,48 @@ export interface DataRightsEventEntity {
   createdAt: string;
 }
 
+export interface DataBreachEntity {
+  id: string;
+  number: number;
+  year: number;
+  detectedAt: string;
+  occurredAt?: string | null;
+  kinds: DataBreachKind[];
+  description: string;
+  effects?: string | null;
+  dataCategories: string[];
+  affectedCount?: number | null;
+  measures?: string | null;
+  sensitiveData: boolean;
+  minorsData: boolean;
+  financialData: boolean;
+  riskToRights: boolean;
+  treatment?: DataTreatmentEntity | null;
+  treatmentId?: string | null;
+  status: DataBreachStatus;
+  agencyReportedAt?: string | null;
+  agencyReportNote?: string | null;
+  holdersNotifiedAt?: string | null;
+  holdersNoticeMeans?: DataBreachNoticeMeans | null;
+  holdersNoticeNote?: string | null;
+  closedAt?: string | null;
+  closeNote?: string | null;
+  createdByEmployeeId: string;
+  createdByFullName: string;
+  events?: DataBreachEventEntity[];
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface DataBreachEventEntity {
+  id: string;
+  action: DataBreachEventAction;
+  note?: string | null;
+  employeeId?: string | null;
+  employeeFullName: string;
+  breach?: DataBreachEntity;
+  breachId: string;
+  createdAt: string;
+}
+
 type JsonValue = string | number | boolean | { [key in string]?: JsonValue } | Array<JsonValue> | null;

package/src/contracts/dataProtection.contract.ts

@@ -1,12 +1,16 @@
 import {
   type CommunicationMeans,
+  type DataBreachKind,
+  type DataBreachNoticeMeans,
   type DataLegalBasis,
   type DataRight,
   type DataRightsChannel,
   type DataRightsResolution,
 } from '../base/entities';
 import {
+  type DataBreachResponseEntity,
   type DataProtectionPolicyEntity,
+  type IndicatorsFileEntity,
   type DataRightsRequestDetailEntity,
   type DataRightsRequestListItemEntity,
   type DataRightsSummaryEntity,
@@ -27,6 +31,12 @@ export const DataProtectionPatterns = {
   createRequest: 'gestorDocumental.dataProtection.createRequest',
   updateRequest: 'gestorDocumental.dataProtection.updateRequest',
   actOnRequest: 'gestorDocumental.dataProtection.actOnRequest',
+  getBreaches: 'gestorDocumental.dataProtection.getBreaches',
+  getBreach: 'gestorDocumental.dataProtection.getBreach',
+  createBreach: 'gestorDocumental.dataProtection.createBreach',
+  updateBreach: 'gestorDocumental.dataProtection.updateBreach',
+  actOnBreach: 'gestorDocumental.dataProtection.actOnBreach',
+  getBreachPdf: 'gestorDocumental.dataProtection.getBreachPdf',
 } as const;
 
 type TActor = { employeeId: string; fullName: string };
@@ -91,6 +101,31 @@ export type DataRightsAction =
     }
   | { type: 'registerComplaint'; complaintAt?: string | null; note: string };
 
+/** Datos de una vulneración al registrarla o corregirla. */
+export interface DataBreachWritePayload {
+  detectedAt: string;
+  occurredAt?: string | null;
+  kinds: DataBreachKind[];
+  description: string;
+  effects?: string | null;
+  dataCategories: string[];
+  affectedCount?: number | null;
+  measures?: string | null;
+  sensitiveData?: boolean;
+  minorsData?: boolean;
+  financialData?: boolean;
+  riskToRights?: boolean;
+  treatmentId?: string | null;
+}
+
+/** Un paso de la gestión de una vulneración. */
+export type DataBreachAction =
+  /** Reporte a la Agencia, con el medio y su número o folio. */
+  | { type: 'reportAgency'; reportedAt?: string | null; note: string }
+  /** Comunicación a los titulares: a cada uno o, si no es posible, un aviso en un medio masivo nacional. */
+  | { type: 'notifyHolders'; notifiedAt?: string | null; means: DataBreachNoticeMeans; note: string }
+  | { type: 'close'; note?: string | null };
+
 export interface DataProtectionContract {
   [DataProtectionPatterns.getTreatments]: {
     payload: { enabled?: boolean | null };
@@ -134,4 +169,27 @@ export interface DataProtectionContract {
     payload: { id: string; action: DataRightsAction; actor: TActor };
     response: DataRightsRequestDetailEntity;
   };
+  /** Las vulneraciones del año (o todas las abiertas), de la más reciente a la más antigua. */
+  [DataProtectionPatterns.getBreaches]: {
+    payload: { year?: number | null; openOnly?: boolean };
+    response: DataBreachResponseEntity[];
+  };
+  [DataProtectionPatterns.getBreach]: { payload: { id: string }; response: DataBreachResponseEntity };
+  [DataProtectionPatterns.createBreach]: {
+    payload: DataBreachWritePayload & { actor: TActor };
+    response: DataBreachResponseEntity;
+  };
+  [DataProtectionPatterns.updateBreach]: {
+    payload: DataBreachWritePayload & { id: string; actor: TActor };
+    response: DataBreachResponseEntity;
+  };
+  [DataProtectionPatterns.actOnBreach]: {
+    payload: { id: string; action: DataBreachAction; actor: TActor };
+    response: DataBreachResponseEntity;
+  };
+  /** El registro de la vulneración en PDF, para reportarla o archivarla. */
+  [DataProtectionPatterns.getBreachPdf]: {
+    payload: { id: string; generatedBy: string };
+    response: IndicatorsFileEntity;
+  };
 }

package/src/contracts/partsOffice.contract.ts

@@ -1,5 +1,6 @@
 import { type CommunicationMeans, type DocumentAccessLevel, type DocumentInstruction } from '../base/entities';
 import {
+  type CaseFileAddEntryResponseEntity,
   type DocDigitalDocumentTypeEntity,
   type DocDigitalEntityEntity,
   type PartsOfficeInboundEntity,
@@ -39,6 +40,7 @@ export const PartsOfficePatterns = {
   checkEnablement: 'gestorDocumental.partsOffice.checkEnablement',
   dispatchByContingency: 'gestorDocumental.partsOffice.dispatchByContingency',
   registerManualIntake: 'gestorDocumental.partsOffice.registerManualIntake',
+  addCaseFileReceipt: 'gestorDocumental.partsOffice.addCaseFileReceipt',
 } as const;
 
 /** Destinatario interno de un ingreso, ya resuelto por el gateway (las áreas con sus integrantes). */
@@ -186,4 +188,12 @@ export interface PartsOfficeContract {
     payload: ManualIntakePayload;
     response: PartsOfficeRegisterResponseEntity;
   };
+  /**
+   * Comprobante de trazabilidad de DocDigital de un documento del índice de un expediente (despachado o recibido por
+   * DocDigital): se arma con el estado y el historial que informa DocDigital y entra como comunicación oficial.
+   */
+  [PartsOfficePatterns.addCaseFileReceipt]: {
+    payload: { caseFileId: string; documentId: string; actor: { employeeId: string } };
+    response: CaseFileAddEntryResponseEntity;
+  };
 }

package/src/entities/caseFile/caseFile.entity.ts

@@ -42,6 +42,8 @@ export interface CaseFileEntryDocumentEntity {
   correlative: DocumentEntity['correlative'];
   correlativeYear: DocumentEntity['correlativeYear'];
   documentType: DocumentTypeSummaryEntity;
+  /** N° del documento en DocDigital, si se despachó o se recibió por ahí: tiene comprobante de trazabilidad. */
+  docDigitalDocumentId: string | null;
 }
 
 /** Entrada del índice electrónico: una actuación, en su orden de incorporación. */

package/src/entities/dataProtection/dataProtection.entity.ts

@@ -1,5 +1,9 @@
 import {
   type CommunicationMeans,
+  type DataBreachEventAction,
+  type DataBreachKind,
+  type DataBreachNoticeMeans,
+  type DataBreachStatus,
   type DataLegalBasis,
   type DataRight,
   type DataRightsChannel,
@@ -138,3 +142,44 @@ export interface PersonalDataHintsEntity {
   /** Algunos ejemplos enmascarados («11.1••.•••-1»). */
   samples: string[];
 }
+
+/** Vulneración de las medidas de seguridad que afecta datos personales (Ley 19.628, art. 14 sexies). */
+export interface DataBreachResponseEntity {
+  id: string;
+  /** «N° 2/2026». */
+  label: string;
+  year: number;
+  number: number;
+  detectedAt: string;
+  occurredAt: string | null;
+  kinds: DataBreachKind[];
+  description: string;
+  effects: string | null;
+  dataCategories: string[];
+  affectedCount: number | null;
+  measures: string | null;
+  sensitiveData: boolean;
+  minorsData: boolean;
+  financialData: boolean;
+  riskToRights: boolean;
+  treatmentId: string | null;
+  treatmentName: string | null;
+  status: DataBreachStatus;
+  /** Hay riesgo razonable para los titulares: se reporta a la Agencia sin dilaciones indebidas. */
+  mustReportAgency: boolean;
+  /** Además, datos sensibles, de menores de 14 o de obligaciones económicas: se comunica a los titulares. */
+  mustNotifyHolders: boolean;
+  agencyReportedAt: string | null;
+  agencyReportNote: string | null;
+  /** Horas entre la detección y el reporte a la Agencia (o hasta ahora, si falta reportarla). */
+  agencyDelayHours: number | null;
+  holdersNotifiedAt: string | null;
+  holdersNoticeMeans: DataBreachNoticeMeans | null;
+  holdersNoticeNote: string | null;
+  closedAt: string | null;
+  closeNote: string | null;
+  createdByFullName: string;
+  /** Por qué todavía no se puede cerrar, o `null` si se puede. */
+  closeBlock: string | null;
+  events: { action: DataBreachEventAction; note: string | null; employeeFullName: string; createdAt: string }[];
+}