feat(f6.9): consolidate act and report documents and simplify follow-up

2026-09-15 18:48:12 -03:00
parent 079728aa6d
commit 5cf99442a8
39 changed files with 1604 additions and 566 deletions
@@ -1,14 +1,9 @@

-import { Body, Controller, Get, Param, ParseUUIDPipe, Patch, Post, Query, Req, Res, UploadedFile, UseInterceptors } from '@nestjs/common';
-import { FileInterceptor } from '@nestjs/platform-express';
+import { Controller, Get, Param, ParseUUIDPipe, Query, Res } from '@nestjs/common';
 import type { Response } from 'express';
-import { CurrentAuth } from '../auth/decorators/current-auth.decorator';
 import { RequirePermissions } from '../authorization/decorators/require-permissions.decorator';
-import type { AuthPrincipal, RequestWithContext } from '../common/http/request-context';
-import { ActAdministrationService, MAX_ACT_RESPONSE_BYTES, type UploadedActResponseFile } from './act-administration.service';
-import { CreateActCompanyResponseDto } from './dto/create-act-company-response.dto';
+import { ActAdministrationService } from './act-administration.service';
 import { ListActAdministrationQueryDto } from './dto/list-act-administration-query.dto';
-import { SetActResponseDeadlineDto } from './dto/set-act-response-deadline.dto';

@Controller('act-administration')
 export class ActAdministrationQueueController {
@@ -21,11 +16,8 @@ export class ActAdministrationQueueController {
 export class ActAdministrationController {
  constructor(private readonly administration: ActAdministrationService) {}
  @Get() @RequirePermissions('inspection_acts.read') get(@Param('actId', new ParseUUIDPipe({ version: '4' })) actId: string) { return this.administration.detail(actId); }
-  @Patch('deadline') @RequirePermissions('inspection_findings.follow_up')
-  setDeadline(@Param('actId', new ParseUUIDPipe({ version: '4' })) actId: string, @Body() dto: SetActResponseDeadlineDto, @CurrentAuth() principal: AuthPrincipal, @Req() request: RequestWithContext) { return this.administration.setDeadline(actId, dto, principal, request); }
-  @Post('responses') @RequirePermissions('inspection_findings.follow_up')
-  @UseInterceptors(FileInterceptor('file', { limits: { fileSize: MAX_ACT_RESPONSE_BYTES, files: 1 } }))
-  addResponse(@Param('actId', new ParseUUIDPipe({ version: '4' })) actId: string, @Body() dto: CreateActCompanyResponseDto, @UploadedFile() file: UploadedActResponseFile | undefined, @CurrentAuth() principal: AuthPrincipal, @Req() request: RequestWithContext) { return this.administration.addResponse(actId, dto, file, principal, request); }
+  // Historic deadlines and responses remain readable here.
+  // New administrative entries are recorded on the related Informe.
 }

@Controller('act-company-responses')
@@ -0,0 +1,33 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+
+export class F69ConsolidatedActDocument1790131800000 implements MigrationInterface {
+  name = 'F69ConsolidatedActDocument1790131800000';
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(`
+      CREATE TABLE inspection_act_consolidated_pdf_artifacts (
+        act_id uuid PRIMARY KEY REFERENCES inspection_acts(id) ON DELETE CASCADE,
+        stored_name varchar(255) NOT NULL,
+        original_name varchar(255) NOT NULL,
+        size_bytes integer NOT NULL CHECK (size_bytes > 0),
+        sha256 char(64) NOT NULL CHECK (sha256 ~ '^[0-9a-f]{64}$'),
+        generated_at timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP
+      )
+    `);
+    await queryRunner.query(`
+      CREATE TABLE inspection_report_consolidated_word_artifacts (
+        report_id uuid PRIMARY KEY REFERENCES inspection_reports(id) ON DELETE CASCADE,
+        stored_name varchar(255) NOT NULL,
+        original_name varchar(255) NOT NULL,
+        size_bytes integer NOT NULL CHECK (size_bytes > 0),
+        sha256 char(64) NOT NULL CHECK (sha256 ~ '^[0-9a-f]{64}$'),
+        generated_at timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP
+      )
+    `);
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query('DROP TABLE inspection_report_consolidated_word_artifacts');
+    await queryRunner.query('DROP TABLE inspection_act_consolidated_pdf_artifacts');
+  }
+}
@@ -629,6 +629,13 @@ export class InspectionFindingsService {
    if (Object.keys(dto).length === 0) {
      throw new BadRequestException({ code: 'NO_CHANGES', message: 'No se recibieron cambios' });
    }
+    if (dto.companyResponse !== undefined || dto.companyResponseReceivedOn !== undefined
+      || dto.companyCommittedCorrectionOn !== undefined) {
+      throw new ConflictException({
+        code: 'INSPECTION_FINDING_COMPANY_RESPONSE_IN_REPORT',
+        message: 'La respuesta de la empresa se registra en el Informe relacionado, conservando este Hallazgo como antecedente.',
+      });
+    }
    return this.dataSource.transaction(async (manager) => {
      const finding = await this.lockFinding(manager, id);
      this.assertFindingOpen(finding);
@@ -1,214 +1,131 @@
 import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import PDFDocument from 'pdfkit';

-function asRecord(value: unknown): Record<string, unknown> {
-  return value && typeof value === 'object' && !Array.isArray(value)
-    ? value as Record<string, unknown>
-    : {};
+export interface ActPdfImage {
+  id: string;
+  findingId?: string;
+  assetId?: string;
+  signerName?: string;
+  title?: string;
+  capturedAt?: string | Date | null;
+  sha256: string;
+  buffer: Buffer;
 }

+function asRecord(value: unknown): Record<string, unknown> {
+  return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {};
+}
 function asArray(value: unknown): Array<Record<string, unknown>> {
  return Array.isArray(value) ? value.map(asRecord) : [];
 }
-
-function text(value: unknown, fallback = '-'): string {
-  const out = String(value ?? '').trim();
-  return out || fallback;
+function text(value: unknown, fallback = ''): string {
+  return String(value ?? '').trim() || fallback;
 }
-
 function date(value: unknown): string {
  const parsed = new Date(String(value ?? ''));
-  return Number.isFinite(parsed.getTime()) ? parsed.toLocaleDateString('es-AR') : '-';
+  return Number.isFinite(parsed.getTime()) ? parsed.toLocaleString('es-AR', { timeZone: 'America/Argentina/Mendoza', dateStyle: 'short', timeStyle: 'short' }) : '-';
+}
+function isPlaceholder(value: unknown): boolean {
+  return text(value).startsWith('Acta de inspección en curso. Los Hallazgos');
 }

-function clean(value: string): string {
-  return value
-    .normalize('NFKD')
-    .replace(/[\u0300-\u036f]/g, '')
-    .replace(/[–—]/g, '-')
-    .replace(/[“”]/g, '"')
-    .replace(/[‘’]/g, "'")
-    .replace(/[^\x20-\xFF]/g, '?');
-}
-
-function escapePdf(value: string): string {
-  return clean(value).replaceAll('\\', '\\\\').replaceAll('(', '\\(').replaceAll(')', '\\)');
-}
-
-function wrap(value: string, max = 92): string[] {
-  const words = clean(value).split(/\s+/).filter(Boolean);
-  const out: string[] = [];
-  let line = '';
-  for (const word of words) {
-    const next = line ? `${line} ${word}` : word;
-    if (next.length > max && line) {
-      out.push(line);
-      line = word;
-    } else {
-      line = next;
-    }
-  }
-  if (line) out.push(line);
-  return out.length ? out : ['-'];
-}
-
-function lockedSnapshot(snapshot: Record<string, unknown>): {
-  locked: Record<string, unknown>;
-  signatures: Array<Record<string, unknown>>;
-  finalSha256: unknown;
-} {
+// %PDF-1.4 is the document-version contract for consolidated Actas.
+export async function buildInspectionActPdf(snapshot: Record<string, unknown>, images: ActPdfImage[] = [], context: { companyName?: string | null; areaName?: string | null; scopeName?: string | null } = {}): Promise<{ buffer: Buffer; sha256: string }> {
  const sealed = asRecord(snapshot);
  const locked = asRecord(sealed.lockedSnapshot ?? sealed.preparedSnapshot);
-  return {
-    locked,
-    signatures: asArray(sealed.signatures),
-    finalSha256: sealed.finalSha256 ?? sealed.lockedSha256 ?? sealed.preparedSha256,
-  };
-}
-
-function urgencyLabel(value: unknown): string {
-  return text(value, '') === 'URGENT' ? 'Urgente' : 'No urgente';
-}
-
-function dayTypeLabel(value: unknown): string {
-  return text(value, '') === 'CALENDAR' ? 'dias corridos' : 'dias habiles';
-}
-
-function lines(snapshot: Record<string, unknown>): string[] {
-  const source = lockedSnapshot(snapshot);
-  const locked = source.locked;
  const act = asRecord(locked.act);
-  const inspection = asRecord(act.inspection ?? asRecord(act).visit);
+  const inspection = asRecord(act.inspection ?? act.visit);
  const responsible = asRecord(locked.responsible);
  const inventories = asArray(locked.inventories ?? locked.assets);
  const findings = asArray(locked.findings);
-  const signatures = source.signatures;
-  const companySignature = signatures.find((item) => text(item.signerType, '') === 'COMPANY_RESPONSIBLE');
-  const inspectorSignatures = signatures.filter((item) => text(item.signerType, '') === 'INSPECTOR');
+  const signatures = asArray(sealed.signatures);
+  const hash = text(sealed.finalSha256 ?? sealed.lockedSha256);
+  const logo = resolve(process.cwd(), 'assets/logo-mendoza.png');
+  const doc = new PDFDocument({ size: 'A4', pdfVersion: '1.4', margins: { top: 146, bottom: 80, left: 54, right: 54 }, compress: true });
+  doc.registerFont('body', resolve(process.cwd(), 'assets/fonts/DejaVuSans.ttf'));
+  doc.registerFont('body-bold', resolve(process.cwd(), 'assets/fonts/DejaVuSans-Bold.ttf'));
+  const chunks: Buffer[] = [];
+  doc.on('data', (part: Buffer) => chunks.push(part));
+  const done = new Promise<Buffer>((complete, reject) => { doc.on('end', () => complete(Buffer.concat(chunks))); doc.on('error', reject); });
+  const blue = '#162D69';
+  const header = () => {
+    doc.font('body-bold').fillColor(blue).fontSize(11).text('MINISTERIO DE ENERGÍA Y AMBIENTE', 54, 42);
+    doc.text('DIRECCIÓN DE HIDROCARBUROS', 54, 58);
+    if (existsSync(logo)) doc.image(logo, 474, 32, { fit: [62, 82] });
+    doc.moveTo(54, 121).lineTo(540, 121).strokeColor('#BAC5DA').stroke();
+    doc.y = 146;
+  };
+  doc.on('pageAdded', header);
+  header();
+  const need = (height: number) => { if (doc.y + height > doc.page.height - 85) doc.addPage(); };
+  const heading = (label: string) => { need(48); doc.moveDown(1); doc.font('body-bold').fillColor(blue).fontSize(12).text(label.toUpperCase()); doc.moveDown(0.35); };
+  const body = (value: unknown) => { need(22); doc.font('body').fillColor('#202939').fontSize(10.5).text(text(value, '-'), { lineGap: 3 }); doc.moveDown(0.4); };
+  const label = (name: string, value: unknown) => { if (!text(value)) return; need(22); doc.font('body-bold').fillColor('#202939').fontSize(10).text(`${name}: `, { continued: true }); doc.font('body').text(text(value)); doc.moveDown(0.35); };
+  const image = (entry: ActPdfImage, caption: string) => {
+    need(290);
+    const y = doc.y;
+    doc.image(entry.buffer, 58, y, { fit: [470, 245] });
+    doc.y = y + 250;
+    doc.font('body').fontSize(8).fillColor('#47536A').text(`${caption} · SHA-256 ${entry.sha256}`, 58, doc.y, { width: 475 });
+    doc.moveDown(0.5);
+  };

-  const deadlineText = act.deadlineAt
-    ? `${date(act.deadlineAt)} (${text(act.deadlineDays)} ${dayTypeLabel(act.deadlineDayType)})`
-    : act.deadlineBasis === 'GEDO_DATE'
-      ? `${text(act.deadlineDays)} ${dayTypeLabel(act.deadlineDayType)} desde fecha GEDO`
-      : '-';
-
-  const out: string[] = [
-    'ACTA DE INSPECCION',
-    '',
-    `Acta: ${text(act.code)}`,
-    `Inspeccion: ${text(inspection.code)}`,
-    `Fecha: ${date(act.occurredAt)}`,
-    `Urgencia: ${urgencyLabel(act.urgency)}`,
-    `Plazo: ${deadlineText}`,
-    `Representante de la empresa: ${text(responsible.fullName)}`,
-    `DNI: ${text(responsible.documentNumber)}`,
-    `Cargo / funcion: ${text(responsible.position)}`,
-    `Email: ${text(responsible.email)}`,
-    '',
-    'RESUMEN',
-    ...wrap(text(act.summary)),
-    '',
-    'OBSERVACIONES',
-    ...wrap(text(act.observations)),
-    '',
-    'INVENTARIO INSPECCIONADO',
-  ];
-
-  if (!inventories.length) out.push('-');
-  for (const item of inventories) {
-    out.push(...wrap(`${text(item.code)} | ${text(item.name)} | ${text(item.typeName ?? item.typeCode)}`));
+  doc.font('body-bold').fillColor('#202939').fontSize(19).text(`ACTA DE INSPECCIÓN ${text(act.code)}`);
+  doc.moveDown(0.5);
+  label('Inspección', inspection.code);
+  label('Empresa inspeccionada', context.companyName);
+  label('Área', context.areaName);
+  label('Yacimiento o instalación', context.scopeName);
+  label('Fecha y hora', date(act.occurredAt));
+  label('Urgencia del Acta', text(act.urgency) === 'URGENT' ? 'Urgente' : text(act.urgency) === 'NON_URGENT' ? 'No urgente' : '');
+  label('Representante de la empresa', responsible.fullName);
+  label('DNI', responsible.documentNumber);
+  label('Cargo o función', responsible.position);
+  heading('Lo actuado');
+  if (text(act.summary) && !isPlaceholder(act.summary)) body(act.summary);
+  else body(`Se realizó la inspección ${text(inspection.code)}. El contenido constatado se detalla en los hallazgos registrados a continuación.`);
+  if (act.observations) { label('Observaciones', act.observations); }
+  if (inventories.length) {
+    heading('Instalaciones inspeccionadas');
+    for (const item of inventories) body(`${text(item.name)} (${text(item.code)}) · ${text(item.typeName ?? item.typeCode)}`);
  }
-
-  out.push('', 'HALLAZGOS');
-  if (!findings.length) out.push('Sin hallazgos registrados.');
-  for (const item of findings) {
-    const recurrence = item.isRecurrence
-      ? ` | REINCIDENCIA${item.recurrenceOfFindingId ? ` de ${text(item.recurrenceOfFindingCode ?? item.recurrenceOfFindingId)}` : ''}`
-      : '';
-    out.push(...wrap(`${text(item.code)} | ${text(item.title)}${recurrence}`));
-    out.push(...wrap(`Descripcion: ${text(item.description)}`));
-    if (item.legalBasis) out.push(...wrap(`Base legal: ${text(item.legalBasis)}`));
+  heading('Hallazgos y fotografías');
+  if (!findings.length) body('No se registraron hallazgos.');
+  const shownAssetPhotos = new Set<string>();
+  for (const finding of findings) {
+    need(75);
+    doc.font('body-bold').fillColor(blue).fontSize(11).text(`${text(finding.code)} · ${text(finding.title)}`);
+    label('Descripción', finding.description);
+    if (finding.legalBasis) label('Normativa consignada', finding.legalBasis);
+    if (finding.severity != null) label('Gravedad', `${text(finding.severity)}/10`);
+    for (const photo of images.filter((item) => item.findingId === text(finding.id))) image(photo, `Fotografía del hallazgo ${text(finding.code)}${photo.capturedAt ? ` · ${date(photo.capturedAt)}` : ''}`);
+    for (const photo of images.filter((item) => item.assetId === text(finding.assetId))) {
+      if (shownAssetPhotos.has(photo.id)) continue;
+      shownAssetPhotos.add(photo.id);
+      image(photo, `Fotografía de inventario ${text(photo.title)}${photo.capturedAt ? ` · ${date(photo.capturedAt)}` : ''}`);
+    }
+    doc.moveDown(0.4);
  }
-
-  out.push('', 'FIRMAS Y CONSTANCIAS');
-  if (!inspectorSignatures.length) out.push('Firma de inspector: pendiente.');
-  for (const signature of inspectorSignatures) {
-    out.push(...wrap(`Inspector: ${text(signature.signerName)} | ${text(signature.status)} | ${date(signature.signedAt ?? signature.createdAt)}`));
+  if (!findings.length) for (const photo of images.filter((item) => item.assetId)) image(photo, `Fotografía de inventario ${text(photo.title)}`);
+  heading('Intervinientes y firmas');
+  for (const signature of signatures) {
+    const name = text(signature.signerName);
+    const role = text(signature.signerType) === 'INSPECTOR' ? 'Inspector/a' : 'Representante de la empresa';
+    const status = text(signature.status);
+    label(role, `${name} · ${status === 'SIGNED' ? 'Firmó' : status === 'REFUSED' ? 'Se negó a firmar' : 'No firmó'} · ${date(signature.signedAt ?? signature.createdAt)}`);
+    if (signature.companyManifestation === 'DISSENT') label('Disconformidad', signature.companyStatement);
+    if (status === 'REFUSED') label('Motivo de negativa', signature.reason);
+    const signatureImage = images.find((item) => item.signerName === name && item.sha256 === text(signature.imageSha256));
+    if (signatureImage) { need(100); const y = doc.y; doc.image(signatureImage.buffer, 60, y, { fit: [230, 60] }); doc.y = y + 66; }
  }
-  if (!companySignature) {
-    out.push('Manifestacion de empresa: pendiente.');
-  } else if (text(companySignature.status, '') === 'SIGNED') {
-    const manifestation = text(companySignature.companyManifestation, 'CONFORMITY');
-    out.push(manifestation === 'DISSENT' ? 'Empresa: firma en disconformidad' : 'Empresa: firma en conformidad');
-    if (manifestation === 'DISSENT') out.push(...wrap(text(companySignature.companyStatement)));
-  } else {
-    out.push(...wrap(`Empresa: ${text(companySignature.status)} - ${text(companySignature.reason)}`));
-  }
-
-  out.push(
-    '',
-    'INTEGRIDAD',
-    `Hash del Acta sellada: ${text(source.finalSha256)}`,
-    `Hash del contenido bloqueado: ${text(snapshot.lockedSha256 ?? snapshot.preparedSha256)}`,
-  );
-  return out;
-}
-
-function objectBuffer(id: number, body: Buffer | string): Buffer {
-  const data = Buffer.isBuffer(body) ? body : Buffer.from(body, 'latin1');
-  return Buffer.concat([
-    Buffer.from(`${id} 0 obj\n`, 'ascii'),
-    data,
-    Buffer.from('\nendobj\n', 'ascii'),
-  ]);
-}
-
-export function buildInspectionActPdf(snapshot: Record<string, unknown>): { buffer: Buffer; sha256: string } {
-  const all = lines(snapshot);
-  const chunks: Array<string[]> = [];
-  for (let index = 0; index < all.length; index += 56) chunks.push(all.slice(index, index + 56));
-  if (!chunks.length) chunks.push(['ACTA DE INSPECCION']);
-
-  const pageCount = chunks.length;
-  const pageIds = Array.from({ length: pageCount }, (_, index) => 4 + index * 2);
-  const contentIds = Array.from({ length: pageCount }, (_, index) => 5 + index * 2);
-  const objects: Buffer[] = [];
-  objects.push(objectBuffer(1, '<< /Type /Catalog /Pages 2 0 R >>'));
-  objects.push(objectBuffer(2, `<< /Type /Pages /Count ${pageCount} /Kids [${pageIds.map((id) => `${id} 0 R`).join(' ')}] >>`));
-  objects.push(objectBuffer(3, '<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica >>'));
-
-  chunks.forEach((chunk, index) => {
-    const content = chunk
-      .map((line, lineIndex) => `${lineIndex === 0 ? '' : 'T* '}(${escapePdf(line)}) Tj`)
-      .join('\n');
-    const stream = Buffer.from(`BT\n/F1 9 Tf\n40 800 Td\n12 TL\n${content}\nET`, 'latin1');
-    objects.push(objectBuffer(
-      pageIds[index]!,
-      `<< /Type /Page /Parent 2 0 R /MediaBox [0 0 595 842] /Resources << /Font << /F1 3 0 R >> >> /Contents ${contentIds[index]} 0 R >>`,
-    ));
-    objects.push(objectBuffer(
-      contentIds[index]!,
-      Buffer.concat([
-        Buffer.from(`<< /Length ${stream.length} >>\nstream\n`, 'ascii'),
-        stream,
-        Buffer.from('\nendstream', 'ascii'),
-      ]),
-    ));
-  });
-
-  const header = Buffer.from('%PDF-1.4\n%\xE2\xE3\xCF\xD3\n', 'binary');
-  const offsets: number[] = [0];
-  let position = header.length;
-  for (const object of objects) {
-    offsets.push(position);
-    position += object.length;
-  }
-  const xrefOffset = position;
-  const xref = [
-    `xref\n0 ${objects.length + 1}\n`,
-    '0000000000 65535 f \n',
-    ...objects.map((_, index) => `${String(offsets[index + 1]).padStart(10, '0')} 00000 n \n`),
-  ].join('');
-  const trailer = `trailer\n<< /Size ${objects.length + 1} /Root 1 0 R >>\nstartxref\n${xrefOffset}\n%%EOF\n`;
-  const buffer = Buffer.concat([header, ...objects, Buffer.from(xref + trailer, 'ascii')]);
+  heading('Integridad del Acta');
+  body(`SHA-256 del cierre: ${hash}`);
+  body(`SHA-256 del contenido cerrado: ${text(sealed.lockedSha256)}`);
+  need(25);
+  doc.fontSize(8).fillColor('#637088').text(`Acta ${text(act.code)} · documento consolidado · ${date(asRecord(sealed.seal).serverSealedAt)}`, 54, doc.y);
+  doc.end();
+  const buffer = await done;
  return { buffer, sha256: createHash('sha256').update(buffer).digest('hex') };
 }
@@ -4,11 +4,15 @@ import { isAbsolute, parse, resolve } from 'node:path';
 import { ConfigService } from '@nestjs/config';
 import { Injectable, InternalServerErrorException, NotFoundException } from '@nestjs/common';
 import { DataSource } from 'typeorm';
-import { buildInspectionActPdf } from './inspection-act-pdf-builder';
+import { buildInspectionActPdf, type ActPdfImage } from './inspection-act-pdf-builder';
+import { renderableInspectionImage } from './inspection-document-images';

@Injectable()
 export class InspectionActPdfService {
  private readonly root: string;
+  private readonly evidenceRoot: string;
+  private readonly assetRoot: string;
+  private readonly signatureRoot: string;

  constructor(private readonly dataSource: DataSource, config: ConfigService) {
    const configured = config.get<string>('INSPECTION_ACT_PDF_ROOT')
@@ -16,6 +20,9 @@ export class InspectionActPdfService {
    if (!isAbsolute(configured)) throw new Error('INSPECTION_ACT_PDF_ROOT must be an absolute path');
    this.root = resolve(configured);
    if (this.root === parse(this.root).root) throw new Error('INSPECTION_ACT_PDF_ROOT cannot be the filesystem root');
+    this.evidenceRoot = resolve(config.get<string>('INSPECTION_EVIDENCE_ROOT') ?? '/app/storage/asset-media/inspection-findings');
+    this.assetRoot = resolve(config.get<string>('ASSET_MEDIA_ROOT') ?? '/app/storage/asset-media');
+    this.signatureRoot = resolve(config.get<string>('INSPECTION_SIGNATURE_ROOT') ?? '/app/storage/asset-media/inspection-signatures');
  }

  async ensure(actId: string): Promise<void> {
@@ -59,7 +66,7 @@ export class InspectionActPdfService {
    `, [actId]);
    try {
      const snapshot = { ...row.finalSnapshot, finalSha256: row.closureSha256 };
-      const built = buildInspectionActPdf(snapshot);
+      const built = await buildInspectionActPdf(snapshot, await this.fieldImages(actId), await this.actContext(actId));
      await mkdir(this.root, { recursive: true, mode: 0o700 });
      const storedName = `${actId}.pdf`;
      const originalName = `${row.code}.pdf`;
@@ -82,6 +89,120 @@ export class InspectionActPdfService {
    }
  }

+  // The original sealed PDF remains immutable for historic delivery and audit.
+  // A consolidated presentation is stored separately and frozen at its first generation.
+  async consolidatedContent(actId: string): Promise<{ buffer: Buffer; originalName: string; mimeType: string }> {
+    const [existing] = await this.dataSource.query(`
+      SELECT stored_name AS "storedName",original_name AS "originalName",
+             size_bytes AS "sizeBytes",sha256
+      FROM inspection_act_consolidated_pdf_artifacts WHERE act_id=$1
+    `, [actId]) as Array<{ storedName: string; originalName: string; sizeBytes: number; sha256: string }>;
+    if (existing) {
+      const buffer = await this.verifiedImage(this.root, existing);
+      return { buffer, originalName: existing.originalName, mimeType: 'application/pdf' };
+    }
+    const [row] = await this.dataSource.query(`
+      SELECT act.code,act.closure_sha256 AS "closureSha256",closure.final_snapshot AS "finalSnapshot"
+      FROM inspection_acts act
+      JOIN inspection_act_closures closure ON closure.act_id=act.id
+      WHERE act.id=$1 AND act.status='SEALED'
+    `, [actId]) as Array<{ code: string; closureSha256: string; finalSnapshot: Record<string, unknown> }>;
+    if (!row) throw new NotFoundException({
+      code: 'INSPECTION_ACT_NOT_SEALED',
+      message: 'El Acta debe estar firmada y sellada para generar el documento consolidado',
+    });
+    const snapshot = { ...row.finalSnapshot, finalSha256: row.closureSha256 };
+    const built = await buildInspectionActPdf(snapshot, await this.fieldImages(actId), await this.actContext(actId));
+    await mkdir(this.root, { recursive: true, mode: 0o700 });
+    const storedName = `${actId}-consolidado-${built.sha256.slice(0, 24)}.pdf`;
+    const originalName = `${row.code}-consolidada.pdf`;
+    await writeFile(resolve(this.root, storedName), built.buffer, { flag: 'wx', mode: 0o600 }).catch(async (error: NodeJS.ErrnoException) => {
+      if (error.code !== 'EEXIST') throw error;
+      const previous = await this.verifiedImage(this.root, {
+        storedName, sizeBytes: built.buffer.length, sha256: built.sha256,
+      });
+      if (!previous.equals(built.buffer)) throw this.storageError();
+    });
+    await this.dataSource.query(`
+      INSERT INTO inspection_act_consolidated_pdf_artifacts(act_id,stored_name,original_name,size_bytes,sha256)
+      VALUES($1,$2,$3,$4,$5) ON CONFLICT (act_id) DO NOTHING
+    `, [actId, storedName, originalName, built.buffer.length, built.sha256]);
+    const [saved] = await this.dataSource.query(`
+      SELECT stored_name AS "storedName",original_name AS "originalName",
+             size_bytes AS "sizeBytes",sha256
+      FROM inspection_act_consolidated_pdf_artifacts WHERE act_id=$1
+    `, [actId]) as Array<{ storedName: string; originalName: string; sizeBytes: number; sha256: string }>;
+    if (!saved) throw this.storageError();
+    return {
+      buffer: await this.verifiedImage(this.root, saved),
+      originalName: saved.originalName, mimeType: 'application/pdf',
+    };
+  }
+
+  private async actContext(actId: string): Promise<{ companyName: string | null; areaName: string | null; scopeName: string | null }> {
+    const [row] = await this.dataSource.query(`
+      SELECT company.name AS "companyName",area.name AS "areaName",scope.name AS "scopeName"
+      FROM inspection_acts act
+      JOIN inspection_visits visit ON visit.id=act.visit_id
+      LEFT JOIN assets company ON company.id=visit.operator_company_id
+      LEFT JOIN assets area ON area.id=visit.operational_area_id
+      LEFT JOIN assets scope ON scope.id=visit.scope_asset_id
+      WHERE act.id=$1
+    `, [actId]) as Array<{ companyName: string | null; areaName: string | null; scopeName: string | null }>;
+    return row ?? { companyName: null, areaName: null, scopeName: null };
+  }
+
+  private async verifiedImage(root: string, row: { storedName: string; sha256: string; sizeBytes: number }): Promise<Buffer> {
+    if (!/^[A-Za-z0-9_.-]+$/.test(row.storedName)) throw new Error('Ruta inválida de evidencia del Acta');
+    const path = resolve(root, row.storedName);
+    if (!path.startsWith(`${root}/`)) throw new Error('Ruta inválida de evidencia del Acta');
+    const file = await stat(path);
+    if (!file.isFile() || file.size !== Number(row.sizeBytes)) throw new Error('Evidencia incompleta del Acta');
+    const buffer = await readFile(path);
+    if (createHash('sha256').update(buffer).digest('hex') !== row.sha256) throw new Error('Hash de evidencia distinto del registrado');
+    return buffer;
+  }
+
+  async fieldImages(actId: string): Promise<ActPdfImage[]> {
+    type ImageRow = { id: string; findingId?: string; assetId?: string; signerName?: string; title?: string; capturedAt?: Date; storedName: string; sha256: string; sizeBytes: number };
+    const findings = await this.dataSource.query(`
+      SELECT evidence.id, finding.id AS "findingId", evidence.title,
+             evidence.captured_at AS "capturedAt", evidence.stored_name AS "storedName",
+             evidence.sha256, evidence.size_bytes AS "sizeBytes"
+      FROM inspection_findings finding
+      JOIN inspection_acts act ON act.id=finding.act_id
+      JOIN inspection_finding_evidence evidence ON evidence.finding_id=finding.id
+      WHERE act.id=$1 AND evidence.kind='PHOTO' AND evidence.purpose='OBSERVATION'
+        AND evidence.created_at<=act.locked_at
+      ORDER BY finding.finding_number,evidence.captured_at,evidence.id
+    `, [actId]) as ImageRow[];
+    const assets = await this.dataSource.query(`
+      SELECT media.id,asset.id AS "assetId", asset.name AS title,
+             capture.device_captured_at AS "capturedAt",media.stored_name AS "storedName",
+             media.sha256,media.size_bytes AS "sizeBytes"
+      FROM inspection_acts act
+      JOIN inspection_act_assets link ON link.act_id=act.id AND link.included=true
+      JOIN assets asset ON asset.id=link.asset_id
+      JOIN asset_field_capture_events capture ON capture.visit_id=act.visit_id
+        AND capture.asset_id=asset.id AND capture.event_type='PHOTO'
+      JOIN asset_media media ON media.id=capture.media_id AND media.deleted_at IS NULL AND media.kind='PHOTO'
+      WHERE act.id=$1 AND capture.created_at<=act.locked_at
+      ORDER BY capture.device_captured_at,media.id
+    `, [actId]) as ImageRow[];
+    const signatures = await this.dataSource.query(`
+      SELECT signature.id,signature.signer_name AS "signerName",signature.stored_name AS "storedName",
+             signature.image_sha256 AS sha256,signature.size_bytes AS "sizeBytes"
+      FROM inspection_act_signatures signature WHERE signature.act_id=$1
+        AND signature.status='SIGNED' AND signature.stored_name IS NOT NULL
+      ORDER BY signature.created_at,signature.id
+    `, [actId]) as ImageRow[];
+    const result: ActPdfImage[] = [];
+    for (const row of findings) result.push({ ...row, buffer: await renderableInspectionImage(await this.verifiedImage(this.evidenceRoot, row)) });
+    for (const row of assets) result.push({ ...row, buffer: await renderableInspectionImage(await this.verifiedImage(this.assetRoot, row)) });
+    for (const row of signatures) result.push({ ...row, buffer: await this.verifiedImage(this.signatureRoot, row) });
+    return result;
+  }
+
  async content(actId: string): Promise<{ buffer: Buffer; originalName: string; mimeType: string }> {
    const [row] = await this.dataSource.query(`
      SELECT original_name AS "originalName",stored_name AS "storedName",
@@ -0,0 +1,14 @@
+import sharp from 'sharp';
+
+// PDFKit and the Word image renderer accept JPEG/PNG. The source bytes and
+// their recorded SHA-256 remain untouched; WebP is only converted for display.
+export async function renderableInspectionImage(source: Buffer): Promise<Buffer> {
+  const isWebp = source.length >= 12
+    && source.subarray(0, 4).toString('ascii') === 'RIFF'
+    && source.subarray(8, 12).toString('ascii') === 'WEBP';
+  if (!isWebp) return source;
+  return sharp(source)
+    .resize({ width: 1600, height: 1200, fit: 'inside', withoutEnlargement: true })
+    .png()
+    .toBuffer();
+}
@@ -1,4 +1,6 @@
 import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';

 interface ZipEntry {
  name: string;
@@ -13,6 +15,10 @@ interface ReportWordInput {
  frozenSnapshot: Record<string, unknown>;
  executiveSummary?: string | null;
  reportDescription?: string | null;
+  companyName?: string | null;
+  areaName?: string | null;
+  scopeName?: string | null;
+  photos?: Array<{ id: string; findingId?: string; assetId?: string; title?: string; sha256: string; buffer: Buffer }>;
 }

 const crcTable = (() => {
@@ -68,7 +74,7 @@ function paragraph(value: string, style?: 'Title' | 'Heading1' | 'Heading2'): st
 }

 function labelValue(label: string, value: string): string {
-  return `<w:p><w:r><w:rPr><w:b/></w:rPr><w:t>${xmlEscape(label)}: </w:t></w:r><w:r><w:t xml:space="preserve">${xmlEscape(value)}</w:t></w:r></w:p>`;
+  return `<w:p><w:r><w:rPr><w:b/></w:rPr><w:t xml:space="preserve">${xmlEscape(label)}: </w:t></w:r><w:r><w:t xml:space="preserve">${xmlEscape(value)}</w:t></w:r></w:p>`;
 }

 function table(headers: string[], rows: string[][]): string {
@@ -102,75 +108,80 @@ function deadline(act: Record<string, unknown>): string {
  return '—';
 }

-function documentXml(input: ReportWordInput): string {
+function imageDimensions(buffer: Buffer): { width: number; height: number } {
+  if (buffer.subarray(0, 4).toString('hex') === '89504e47') return { width: buffer.readUInt32BE(16), height: buffer.readUInt32BE(20) };
+  let offset = 2;
+  while (offset + 9 < buffer.length) {
+    if (buffer[offset] !== 0xff) break;
+    const marker = buffer[offset + 1]!;
+    if ([0xc0,0xc1,0xc2,0xc3,0xc5,0xc6,0xc7,0xc9,0xca,0xcb,0xcd,0xce,0xcf].includes(marker)) return { height: buffer.readUInt16BE(offset + 5), width: buffer.readUInt16BE(offset + 7) };
+    const size = buffer.readUInt16BE(offset + 2);
+    if (size < 2) break;
+    offset += size + 2;
+  }
+  return { width: 800, height: 500 };
+}
+
+function drawing(relationship: number, image: Buffer, name: string, maxWidth = 4572000, maxHeight = 2743200, right = false): string {
+  const dimensions = imageDimensions(image);
+  const scale = Math.min(maxWidth / dimensions.width, maxHeight / dimensions.height);
+  const cx = Math.round(dimensions.width * scale);
+  const cy = Math.round(dimensions.height * scale);
+  const alt = xmlEscape(name);
+  return `<w:p>${right ? '<w:pPr><w:jc w:val="right"/></w:pPr>' : ''}<w:r><w:drawing><wp:inline><wp:extent cx="${cx}" cy="${cy}"/><wp:docPr id="${relationship}" name="${alt}" descr="${alt}"/><a:graphic><a:graphicData uri="http://schemas.openxmlformats.org/drawingml/2006/picture"><pic:pic><pic:nvPicPr><pic:cNvPr id="0" name="${alt}"/><pic:cNvPicPr/></pic:nvPicPr><pic:blipFill><a:blip r:embed="rId${relationship}"/><a:stretch><a:fillRect/></a:stretch></pic:blipFill><pic:spPr><a:xfrm><a:off x="0" y="0"/><a:ext cx="${cx}" cy="${cy}"/></a:xfrm><a:prstGeom prst="rect"><a:avLst/></a:prstGeom></pic:spPr></pic:pic></a:graphicData></a:graphic></wp:inline></w:drawing></w:r></w:p>`;
+}
+
+function documentXml(input: ReportWordInput, logo: Buffer): string {
  const snapshot = f4Snapshot(input);
-  const findingRows = snapshot.findings.map((item) => [
-    text(item.code),
-    text(item.title),
-    text(item.description),
-    item.isRecurrence ? `Sí${item.recurrenceOfFindingCode ? ` · ${text(item.recurrenceOfFindingCode)}` : ''}` : 'No',
-    item.severity == null ? '—' : `${text(item.severity)}/10`,
-  ]);
-  const inventoryRows = snapshot.inventories.map((item) => [
-    text(item.code),
-    text(item.name),
-    text(item.typeName ?? item.typeCode),
-  ]);
-  const signatureRows = snapshot.signatures.map((item) => [
-    text(item.signerType),
-    text(item.signerName),
-    text(item.status),
-    text(item.companyManifestation, ''),
-    isoDate(item.signedAt ?? item.createdAt),
-  ]);
-
-  const executive = input.executiveSummary?.trim()
-    || '[EDITAR] Incorporar aquí el resumen ejecutivo del informe.';
-  const description = input.reportDescription?.trim()
-    || '[EDITAR] Incorporar aquí la descripción técnica, análisis y consideraciones del inspector.';
-
-  const body = [
-    paragraph('INFORME TÉCNICO DE INSPECCIÓN', 'Title'),
-    paragraph('Documento Word editable para revisión del Inspector antes de su incorporación a GEDO', 'Heading2'),
-    labelValue('Informe', input.code),
-    labelValue('Acta fuente', text(snapshot.source.actCode ?? snapshot.act.code)),
+  const photos = input.photos ?? [];
+  const authors = snapshot.signatures.filter((item) => text(item.signerType, '') === 'INSPECTOR').map((item) => text(item.signerName)).join(', ');
+  const legalBasis = [...new Set(snapshot.findings.map((item) => text(item.legalBasis, '')).filter(Boolean))];
+  const entries: string[] = [
+    paragraph('MINISTERIO DE ENERGÍA Y AMBIENTE'),
+    paragraph('DIRECCIÓN DE HIDROCARBUROS'),
+    drawing(2, logo, 'Identidad institucional Mendoza', 594360, 1005840, true),
+    paragraph(`Mendoza, ${input.generatedAt.toLocaleDateString('es-AR')}`),
+    paragraph(`INFORME TÉCNICO ${input.code}`, 'Title'),
+    paragraph('Sr. Director de Hidrocarburos'),
+    labelValue('Referencia', text(input.scopeName ?? snapshot.inventories[0]?.name, 'Instalación inspeccionada')),
+    labelValue('Inspector/a', authors || 'No consignado'),
+    labelValue('Acta', text(snapshot.source.actCode ?? snapshot.act.code)),
    labelValue('Inspección', text(snapshot.source.inspectionCode ?? snapshot.inspection.code)),
-    labelValue('Fecha de inspección', isoDate(snapshot.act.occurredAt)),
-    labelValue('Urgencia', urgency(snapshot.act.urgency)),
-    labelValue('Plazo', deadline(snapshot.act)),
-    labelValue('Fecha de generación', input.generatedAt.toLocaleString('es-AR')),
-    paragraph('Resumen ejecutivo', 'Heading1'),
-    paragraph(executive),
-    paragraph('Descripción / análisis técnico', 'Heading1'),
-    paragraph(description),
-    paragraph('Acta fuente · contenido inmutable', 'Heading1'),
-    paragraph('El bloque siguiente reproduce información proveniente del Acta sellada. Debe conservarse sin alterar su sentido ni sustituir los Hallazgos originales.'),
-    labelValue('Resumen del Acta', text(snapshot.act.summary)),
-    labelValue('Observaciones del Acta', text(snapshot.act.observations)),
-    labelValue('Representante de la empresa', text(snapshot.responsible.fullName)),
-    labelValue('DNI', text(snapshot.responsible.documentNumber)),
-    labelValue('Cargo / función', text(snapshot.responsible.position)),
-    labelValue('Email', text(snapshot.responsible.email)),
-    paragraph('Inventario inspeccionado', 'Heading1'),
-    inventoryRows.length
-      ? table(['Código', 'Nombre', 'Tipo'], inventoryRows)
-      : paragraph('No se registraron elementos de Inventario en el Acta.'),
-    paragraph('Hallazgos', 'Heading1'),
-    findingRows.length
-      ? table(['Código', 'Título', 'Descripción', 'Reincidencia', 'Gravedad'], findingRows)
-      : paragraph('El Acta no contiene Hallazgos.'),
-    paragraph('Firmas y manifestaciones', 'Heading1'),
-    signatureRows.length
-      ? table(['Tipo', 'Firmante', 'Estado', 'Manifestación', 'Fecha'], signatureRows)
-      : paragraph('No se registraron firmas en la instantánea sellada.'),
-    paragraph('Integridad de la fuente', 'Heading1'),
-    labelValue('Hash de la fuente del INF', input.frozenSha256),
-    labelValue('Hash del Acta sellada', text(snapshot.source.actClosureSha256 ?? snapshot.sealedAct.finalSha256)),
-    labelValue('Hash del contenido bloqueado', text(snapshot.sealedAct.lockedSha256)),
-    paragraph('Este INF permanece editable mientras está en preparación. La edición del informe no modifica el Acta fuente ni los Hallazgos contenidos en ella. La versión oficial será la que se registre posteriormente en GEDO con su identificador IF y PDF oficial.'),
-  ].join('');
-
-  return `<?xml version="1.0" encoding="UTF-8" standalone="yes"?><w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"><w:body>${body}<w:sectPr><w:pgSz w:w="11906" w:h="16838"/><w:pgMar w:top="1134" w:right="1134" w:bottom="1134" w:left="1134" w:header="708" w:footer="708" w:gutter="0"/></w:sectPr></w:body></w:document>`;
+    labelValue('Área o Yacimiento', text(input.scopeName ?? input.areaName)),
+    labelValue('Empresa inspeccionada', text(input.companyName)),
+    paragraph('OBJETIVOS', 'Heading1'),
+    labelValue('General', 'Documentar los resultados de la inspección consignados en el Acta fuente.'),
+    labelValue('Particular', 'Analizar los hallazgos y el estado de las instalaciones inspeccionadas para definir las acciones y verificaciones que correspondan.'),
+    paragraph('MARCO LEGAL', 'Heading1'),
+    ...(legalBasis.length ? legalBasis.map((basis) => paragraph(basis)) : [paragraph('No se consignó normativa específica en los hallazgos del Acta fuente.')]),
+    paragraph('DESCRIPCIÓN Y ANÁLISIS TÉCNICO', 'Heading1'),
+    paragraph(input.reportDescription?.trim() || `Según el Acta ${text(snapshot.act.code)}, se documentaron ${snapshot.findings.length} hallazgo(s) durante la inspección. Se detallan las observaciones y evidencias consignadas a continuación.`),
+    paragraph('FOTOS Y HALLAZGOS', 'Heading1'),
+  ];
+  if (!snapshot.findings.length) entries.push(paragraph('El Acta fuente no registra hallazgos.'));
+  for (const finding of snapshot.findings) {
+    entries.push(paragraph(`${text(finding.code)}  ${text(finding.title)}`, 'Heading2'));
+    entries.push(labelValue('Instalación', text(snapshot.inventories.find((item) => text(item.id) === text(finding.assetId))?.name)));
+    entries.push(paragraph(text(finding.description)));
+    if (finding.legalBasis) entries.push(labelValue('Normativa', text(finding.legalBasis)));
+    if (finding.severity != null) entries.push(labelValue('Gravedad', `${text(finding.severity)}/10`));
+    for (let index = 0; index < photos.length; index++) {
+      const photo = photos[index]!;
+      if (photo.findingId !== text(finding.id) && photo.assetId !== text(finding.assetId)) continue;
+      entries.push(drawing(index + 3, photo.buffer, photo.title || text(finding.title)));
+      entries.push(paragraph(`Fotografía vinculada · SHA-256 ${photo.sha256}`));
+    }
+  }
+  entries.push(
+    paragraph('CONCLUSIONES', 'Heading1'),
+    paragraph(input.executiveSummary?.trim() || `La inspección registró ${snapshot.findings.length} hallazgo(s). Su seguimiento y la respuesta de la empresa se documentan en el Informe.`),
+    paragraph('ACTA FUENTE E INTEGRIDAD', 'Heading1'),
+    labelValue('Acta sellada', text(snapshot.source.actCode ?? snapshot.act.code)),
+    labelValue('SHA-256 del cierre del Acta', text(snapshot.source.actClosureSha256 ?? snapshot.sealedAct.finalSha256)),
+    labelValue('SHA-256 de la fuente del Informe', input.frozenSha256),
+  );
+  const body = entries.join('');
+  return `<?xml version="1.0" encoding="UTF-8" standalone="yes"?><w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:wp="http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:pic="http://schemas.openxmlformats.org/drawingml/2006/picture"><w:body>${body}<w:sectPr><w:pgSz w:w="11906" w:h="16838"/><w:pgMar w:top="1134" w:right="1134" w:bottom="1134" w:left="1134" w:header="708" w:footer="708" w:gutter="0"/></w:sectPr></w:body></w:document>`;
 }

 function buildZip(entries: ZipEntry[]): Buffer {
@@ -232,10 +243,13 @@ function buildZip(entries: ZipEntry[]): Buffer {
 }

 export function buildInspectionReportWord(input: ReportWordInput): { buffer: Buffer; sha256: string } {
+  const logo = readFileSync(resolve(process.cwd(), 'assets/logo-mendoza.png'));
+  const photos = input.photos ?? [];
+  const mediaRelationships = photos.map((photo, index) => `<Relationship Id="rId${index + 3}" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/image" Target="media/photo-${index + 1}.${photo.buffer.subarray(0,4).toString('hex') === '89504e47' ? 'png' : 'jpg'}"/>`).join('');
  const entries: ZipEntry[] = [
    {
      name: '[Content_Types].xml',
-      data: Buffer.from('<?xml version="1.0" encoding="UTF-8" standalone="yes"?><Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Override PartName="/word/document.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml"/><Override PartName="/word/styles.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.styles+xml"/><Override PartName="/docProps/core.xml" ContentType="application/vnd.openxmlformats-package.core-properties+xml"/><Override PartName="/docProps/app.xml" ContentType="application/vnd.openxmlformats-officedocument.extended-properties+xml"/></Types>', 'utf8'),
+      data: Buffer.from('<?xml version="1.0" encoding="UTF-8" standalone="yes"?><Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types"><Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/><Default Extension="xml" ContentType="application/xml"/><Default Extension="jpg" ContentType="image/jpeg"/><Default Extension="png" ContentType="image/png"/><Override PartName="/word/document.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml"/><Override PartName="/word/styles.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.styles+xml"/><Override PartName="/docProps/core.xml" ContentType="application/vnd.openxmlformats-package.core-properties+xml"/><Override PartName="/docProps/app.xml" ContentType="application/vnd.openxmlformats-officedocument.extended-properties+xml"/></Types>', 'utf8'),
    },
    {
      name: '_rels/.rels',
@@ -243,13 +257,15 @@ export function buildInspectionReportWord(input: ReportWordInput): { buffer: Buf
    },
    {
      name: 'word/_rels/document.xml.rels',
-      data: Buffer.from('<?xml version="1.0" encoding="UTF-8" standalone="yes"?><Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles" Target="styles.xml"/></Relationships>', 'utf8'),
+      data: Buffer.from(`<?xml version="1.0" encoding="UTF-8" standalone="yes"?><Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles" Target="styles.xml"/><Relationship Id="rId2" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/image" Target="media/logo-mendoza.png"/>${mediaRelationships}</Relationships>`, 'utf8'),
    },
    {
      name: 'word/styles.xml',
-      data: Buffer.from('<?xml version="1.0" encoding="UTF-8" standalone="yes"?><w:styles xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"><w:style w:type="paragraph" w:default="1" w:styleId="Normal"><w:name w:val="Normal"/><w:rPr><w:sz w:val="20"/></w:rPr></w:style><w:style w:type="paragraph" w:styleId="Title"><w:name w:val="Title"/><w:basedOn w:val="Normal"/><w:next w:val="Normal"/><w:rPr><w:b/><w:sz w:val="34"/></w:rPr></w:style><w:style w:type="paragraph" w:styleId="Heading1"><w:name w:val="heading 1"/><w:basedOn w:val="Normal"/><w:next w:val="Normal"/><w:rPr><w:b/><w:sz w:val="28"/></w:rPr></w:style><w:style w:type="paragraph" w:styleId="Heading2"><w:name w:val="heading 2"/><w:basedOn w:val="Normal"/><w:next w:val="Normal"/><w:rPr><w:b/><w:sz w:val="22"/></w:rPr></w:style></w:styles>', 'utf8'),
+      data: Buffer.from('<?xml version="1.0" encoding="UTF-8" standalone="yes"?><w:styles xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"><w:style w:type="paragraph" w:default="1" w:styleId="Normal"><w:name w:val="Normal"/><w:rPr><w:rFonts w:ascii="Arial" w:hAnsi="Arial"/><w:sz w:val="20"/></w:rPr><w:pPr><w:spacing w:after="120" w:line="300" w:lineRule="auto"/></w:pPr></w:style><w:style w:type="paragraph" w:styleId="Title"><w:name w:val="Title"/><w:basedOn w:val="Normal"/><w:next w:val="Normal"/><w:rPr><w:b/><w:sz w:val="34"/></w:rPr><w:pPr><w:spacing w:before="160" w:after="180"/></w:pPr></w:style><w:style w:type="paragraph" w:styleId="Heading1"><w:name w:val="heading 1"/><w:basedOn w:val="Normal"/><w:next w:val="Normal"/><w:rPr><w:b/><w:sz w:val="26"/></w:rPr><w:pPr><w:keepNext/><w:spacing w:before="260" w:after="130"/></w:pPr></w:style><w:style w:type="paragraph" w:styleId="Heading2"><w:name w:val="heading 2"/><w:basedOn w:val="Normal"/><w:next w:val="Normal"/><w:rPr><w:b/><w:sz w:val="22"/></w:rPr><w:pPr><w:keepNext/><w:spacing w:before="180" w:after="100"/></w:pPr></w:style></w:styles>', 'utf8'),
    },
-    { name: 'word/document.xml', data: Buffer.from(documentXml(input), 'utf8') },
+    { name: 'word/document.xml', data: Buffer.from(documentXml(input, logo), 'utf8') },
+    { name: 'word/media/logo-mendoza.png', data: logo },
+    ...photos.map((photo, index) => ({ name: `word/media/photo-${index + 1}.${photo.buffer.subarray(0,4).toString('hex') === '89504e47' ? 'png' : 'jpg'}`, data: photo.buffer })),
    {
      name: 'docProps/core.xml',
      data: Buffer.from(`<?xml version="1.0" encoding="UTF-8" standalone="yes"?><cp:coreProperties xmlns:cp="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><dc:title>${xmlEscape(input.title)}</dc:title><dc:creator>DH Inspección</dc:creator><cp:lastModifiedBy>DH Inspección</cp:lastModifiedBy><dcterms:created xsi:type="dcterms:W3CDTF">${input.generatedAt.toISOString()}</dcterms:created></cp:coreProperties>`, 'utf8'),
@@ -5,11 +5,16 @@ import { Injectable, InternalServerErrorException, NotFoundException } from '@ne
 import { ConfigService } from '@nestjs/config';
 import { DataSource } from 'typeorm';
 import { buildInspectionReportWord } from './inspection-report-word-builder';
+import { InspectionActPdfService } from './inspection-act-pdf.service';

 const WORD_MIME = 'application/vnd.openxmlformats-officedocument.wordprocessingml.document';

 interface WordRow {
  id: string;
+  actId: string;
+  companyName: string | null;
+  areaName: string | null;
+  scopeName: string | null;
  code: string;
  title: string;
  executiveSummary: string | null;
@@ -30,7 +35,7 @@ interface WordRow {
 export class InspectionReportWordService {
  private readonly root: string;

-  constructor(private readonly dataSource: DataSource, config: ConfigService) {
+  constructor(private readonly dataSource: DataSource, private readonly actPdf: InspectionActPdfService, config: ConfigService) {
    const configured = config.get<string>('INSPECTION_REPORT_WORD_ROOT')
      ?? '/app/storage/asset-media/inspection-reports-word';
    if (!isAbsolute(configured)) throw new Error('INSPECTION_REPORT_WORD_ROOT must be an absolute path');
@@ -48,6 +53,7 @@ export class InspectionReportWordService {
      } catch {}
    }
    try {
+      const photos = (await this.actPdf.fieldImages(row.actId)).filter((image) => image.findingId || image.assetId);
      const built = buildInspectionReportWord({
        code: row.code,
        title: row.title,
@@ -56,6 +62,10 @@ export class InspectionReportWordService {
        frozenSnapshot: row.frozenSnapshot,
        executiveSummary: row.executiveSummary,
        reportDescription: row.reportDescription,
+        companyName: row.companyName,
+        areaName: row.areaName,
+        scopeName: row.scopeName,
+        photos,
      });
      await mkdir(this.root, { recursive: true, mode: 0o700 });
      const storedName = `${row.id}-${built.sha256.slice(0, 16)}.docx`;
@@ -114,6 +124,56 @@ export class InspectionReportWordService {
    };
  }

+  // The prior editable Word and its revision history stay available unchanged.
+  async consolidatedContent(reportId: string): Promise<{ filePath: string; originalName: string; mimeType: string }> {
+    const [existing] = await this.dataSource.query(`
+      SELECT stored_name AS "storedName",original_name AS "originalName",
+             size_bytes AS "sizeBytes",sha256
+      FROM inspection_report_consolidated_word_artifacts WHERE report_id=$1
+    `, [reportId]) as Array<{ storedName: string; originalName: string; sizeBytes: number; sha256: string }>;
+    if (existing) return this.verifiedConsolidated(existing);
+    const row = await this.load(reportId);
+    const photos = (await this.actPdf.fieldImages(row.actId)).filter((image) => image.findingId || image.assetId);
+    const built = buildInspectionReportWord({
+      code: row.code, title: row.title, generatedAt: new Date(row.generatedAt),
+      frozenSha256: row.frozenSha256, frozenSnapshot: row.frozenSnapshot,
+      executiveSummary: row.executiveSummary, reportDescription: row.reportDescription,
+      companyName: row.companyName, areaName: row.areaName, scopeName: row.scopeName, photos,
+    });
+    await mkdir(this.root, { recursive: true, mode: 0o700 });
+    const storedName = `${row.id}-consolidado-${built.sha256.slice(0, 24)}.docx`;
+    const originalName = `${row.code}-consolidado.docx`;
+    await writeFile(resolve(this.root, storedName), built.buffer, { flag: 'wx', mode: 0o600 }).catch(async (error: NodeJS.ErrnoException) => {
+      if (error.code !== 'EEXIST') throw error;
+      const previous = await this.verifiedConsolidated({
+        storedName, originalName, sizeBytes: built.buffer.length, sha256: built.sha256,
+      });
+      if (!(await readFile(previous.filePath)).equals(built.buffer)) throw this.storageError();
+    });
+    await this.dataSource.query(`
+      INSERT INTO inspection_report_consolidated_word_artifacts(report_id,stored_name,original_name,size_bytes,sha256)
+      VALUES($1,$2,$3,$4,$5) ON CONFLICT (report_id) DO NOTHING
+    `, [reportId, storedName, originalName, built.buffer.length, built.sha256]);
+    const [saved] = await this.dataSource.query(`
+      SELECT stored_name AS "storedName",original_name AS "originalName",
+             size_bytes AS "sizeBytes",sha256
+      FROM inspection_report_consolidated_word_artifacts WHERE report_id=$1
+    `, [reportId]) as Array<{ storedName: string; originalName: string; sizeBytes: number; sha256: string }>;
+    if (!saved) throw this.storageError();
+    return this.verifiedConsolidated(saved);
+  }
+
+  private async verifiedConsolidated(row: { storedName: string; originalName: string; sizeBytes: number; sha256: string }): Promise<{ filePath: string; originalName: string; mimeType: string }> {
+    if (!/^[A-Za-z0-9_.-]+$/.test(row.storedName)) throw this.storageError();
+    const filePath = resolve(this.root, row.storedName);
+    if (!filePath.startsWith(`${this.root}/`)) throw this.storageError();
+    const file = await stat(filePath).catch(() => null);
+    if (!file?.isFile() || file.size !== Number(row.sizeBytes)) throw this.storageError();
+    const buffer = await readFile(filePath);
+    if (createHash('sha256').update(buffer).digest('hex') !== row.sha256) throw this.storageError();
+    return { filePath, originalName: row.originalName, mimeType: WORD_MIME };
+  }
+
  private async ensureInitialRevision(row: WordRow): Promise<void> {
    if (
      row.wordStatus !== 'READY'
@@ -150,21 +210,26 @@ export class InspectionReportWordService {

  private async load(reportId: string): Promise<WordRow> {
    const [row] = await this.dataSource.query(`
-      SELECT id,code,title,
-             executive_summary AS "executiveSummary",
-             report_description AS "reportDescription",
-             generated_at AS "generatedAt",
-             frozen_sha256 AS "frozenSha256",
-             frozen_snapshot AS "frozenSnapshot",
-             word_status AS "wordStatus",
-             word_original_name AS "wordOriginalName",
-             word_stored_name AS "wordStoredName",
-             word_mime_type AS "wordMimeType",
+      SELECT report.id,report.act_id AS "actId",report.code,report.title,
+             company.name AS "companyName",area.name AS "areaName",scope.name AS "scopeName",
+             report.executive_summary AS "executiveSummary",
+             report.report_description AS "reportDescription",
+             report.generated_at AS "generatedAt",
+             report.frozen_sha256 AS "frozenSha256",
+             report.frozen_snapshot AS "frozenSnapshot",
+             report.word_status AS "wordStatus",
+             report.word_original_name AS "wordOriginalName",
+             report.word_stored_name AS "wordStoredName",
+             report.word_mime_type AS "wordMimeType",
             word_size_bytes::integer AS "wordSizeBytes",
-             word_sha256 AS "wordSha256",
-             generated_by AS "generatedBy"
-      FROM inspection_reports
-      WHERE id=$1
+             report.word_sha256 AS "wordSha256",
+             report.generated_by AS "generatedBy"
+      FROM inspection_reports report
+      JOIN inspection_visits visit ON visit.id=report.visit_id
+      LEFT JOIN assets company ON company.id=visit.operator_company_id
+      LEFT JOIN assets area ON area.id=visit.operational_area_id
+      LEFT JOIN assets scope ON scope.id=visit.scope_asset_id
+      WHERE report.id=$1
    `, [reportId]) as WordRow[];
    if (!row) {
      throw new NotFoundException({
@@ -258,6 +258,23 @@ export class InspectionReportWorkflowService {
    };
  }

+  async followUpContent(reportId: string, followUpId: string): Promise<{ filePath: string; originalName: string; mimeType: string; sizeBytes: number }> {
+    const [item] = await this.dataSource.query(`
+      SELECT original_name AS "originalName",stored_name AS "storedName",
+             mime_type AS "mimeType",size_bytes::integer AS "sizeBytes",sha256
+      FROM inspection_report_follow_ups WHERE report_id=$1 AND id=$2 AND stored_name IS NOT NULL
+    `, [reportId, followUpId]) as Array<{ originalName: string; storedName: string; mimeType: string; sizeBytes: number; sha256: string }>;
+    if (!item) throw new NotFoundException({ code: 'REPORT_FOLLOW_UP_FILE_NOT_FOUND', message: 'Adjunto de seguimiento inexistente' });
+    if (!/^followup-[a-f0-9-]+\.[a-z0-9]+$/.test(item.storedName)) throw this.reportStorageError();
+    const filePath = resolve(this.root, item.storedName);
+    if (!filePath.startsWith(`${this.root}/`)) throw this.reportStorageError();
+    const file = await stat(filePath).catch(() => null);
+    if (!file?.isFile() || file.size !== item.sizeBytes) throw this.reportStorageError();
+    const buffer = await readFile(filePath);
+    if (createHash('sha256').update(buffer).digest('hex') !== item.sha256) throw this.reportStorageError();
+    return { filePath, originalName: item.originalName, mimeType: item.mimeType, sizeBytes: item.sizeBytes };
+  }
+
  async addFollowUp(
    reportId: string,
    dto: CreateInspectionReportFollowUpDto,
@@ -69,6 +69,20 @@ export class InspectionReportsController {
    return response.sendFile(content.filePath);
  }

+  @Get(':id/consolidated-word')
+  @RequirePermissions('inspection_reports.read')
+  async consolidatedWordContent(
+    @Param('id', new ParseUUIDPipe({ version: '4' })) id: string,
+    @Res() response: Response,
+  ) {
+    const content = await this.word.consolidatedContent(id);
+    response.setHeader('Content-Type', content.mimeType);
+    response.setHeader('Content-Disposition', `attachment; filename="${content.originalName.replaceAll('"', '')}"`);
+    response.setHeader('Cache-Control', 'private, no-store');
+    response.setHeader('X-Content-Type-Options', 'nosniff');
+    return response.sendFile(content.filePath);
+  }
+
  @Get(':id/gedo-pdf')
  @RequirePermissions('inspection_reports.read')
  async gedoPdfContent(
@@ -113,6 +127,23 @@ export class InspectionReportsController {
    return this.workflow.listFollowUps(id);
  }

+  @Get(':id/follow-ups/:followUpId/content')
+  @RequirePermissions('inspection_reports.read')
+  async followUpContent(
+    @Param('id', new ParseUUIDPipe({ version: '4' })) id: string,
+    @Param('followUpId', new ParseUUIDPipe({ version: '4' })) followUpId: string,
+    @Res() response: Response,
+  ): Promise<void> {
+    const file = await this.workflow.followUpContent(id, followUpId);
+    const safeName = file.originalName.replace(/[^\x20-\x7e]/g, '_').replace(/["\\]/g, '_');
+    response.setHeader('Content-Type', file.mimeType);
+    response.setHeader('Content-Length', String(file.sizeBytes));
+    response.setHeader('Content-Disposition', `attachment; filename="${safeName}"; filename*=UTF-8''${encodeURIComponent(file.originalName)}`);
+    response.setHeader('Cache-Control', 'private, no-store');
+    response.setHeader('X-Content-Type-Options', 'nosniff');
+    await new Promise<void>((resolveSend, rejectSend) => response.sendFile(file.filePath, (error) => error ? rejectSend(error) : resolveSend()));
+  }
+
  @Post(':id/follow-ups')
  @RequirePermissions('inspection_reports.generate')
  @UseInterceptors(FileInterceptor('file', {
@@ -170,3 +201,23 @@ export class InspectionActPdfController {
    return response.send(content.buffer);
  }
 }
+
+@Controller('inspection-acts/:actId/consolidated-pdf')
+export class InspectionActConsolidatedPdfController {
+  constructor(private readonly pdf: InspectionActPdfService) {}
+
+  @Get()
+  @RequirePermissions('inspection_acts.read')
+  async content(
+    @Param('actId', new ParseUUIDPipe({ version: '4' })) actId: string,
+    @Res() response: Response,
+  ) {
+    const content = await this.pdf.consolidatedContent(actId);
+    response.setHeader('Content-Type', content.mimeType);
+    response.setHeader('Content-Length', String(content.buffer.length));
+    response.setHeader('Content-Disposition', `inline; filename="${content.originalName.replaceAll('"', '')}"`);
+    response.setHeader('Cache-Control', 'private, no-store');
+    response.setHeader('X-Content-Type-Options', 'nosniff');
+    return response.send(content.buffer);
+  }
+}
@@ -7,7 +7,7 @@ import { InspectionDeadlineAdminService } from './inspection-deadline-admin.serv
 import { InspectionDocumentDeliveryService } from './inspection-document-delivery.service';
 import { InspectionReportWorkflowService } from './inspection-report-workflow.service';
 import { InspectionReportWordService } from './inspection-report-word.service';
-import { InspectionActPdfController, InspectionActReportController, InspectionReportsController } from './inspection-reports.controller';
+import { InspectionActConsolidatedPdfController, InspectionActPdfController, InspectionActReportController, InspectionReportsController } from './inspection-reports.controller';
 import { InspectionReportsService } from './inspection-reports.service';
 import { SmtpDeliveryService } from './smtp-delivery.service';

@@ -17,6 +17,7 @@ import { SmtpDeliveryService } from './smtp-delivery.service';
    InspectionReportsController,
    InspectionActReportController,
    InspectionActPdfController,
+    InspectionActConsolidatedPdfController,
    InspectionDeadlineAdminController,
    DocumentDeliveryController,
  ],
@@ -1,2 +1,2 @@
-export const API_VERSION = '0.29.0-8';
-export const API_PHASE = 'F6.8';
+export const API_VERSION = '0.29.0-9';
+export const API_PHASE = 'F6.9';