feat(f6.9): consolidate act and report documents and simplify follow-up

api-v3/src/inspection-reports/inspection-report-workflow.service.ts

@@ -258,6 +258,23 @@ export class InspectionReportWorkflowService {
     };
   }
 
+  async followUpContent(reportId: string, followUpId: string): Promise<{ filePath: string; originalName: string; mimeType: string; sizeBytes: number }> {
+    const [item] = await this.dataSource.query(`
+      SELECT original_name AS "originalName",stored_name AS "storedName",
+             mime_type AS "mimeType",size_bytes::integer AS "sizeBytes",sha256
+      FROM inspection_report_follow_ups WHERE report_id=$1 AND id=$2 AND stored_name IS NOT NULL
+    `, [reportId, followUpId]) as Array<{ originalName: string; storedName: string; mimeType: string; sizeBytes: number; sha256: string }>;
+    if (!item) throw new NotFoundException({ code: 'REPORT_FOLLOW_UP_FILE_NOT_FOUND', message: 'Adjunto de seguimiento inexistente' });
+    if (!/^followup-[a-f0-9-]+\.[a-z0-9]+$/.test(item.storedName)) throw this.reportStorageError();
+    const filePath = resolve(this.root, item.storedName);
+    if (!filePath.startsWith(`${this.root}/`)) throw this.reportStorageError();
+    const file = await stat(filePath).catch(() => null);
+    if (!file?.isFile() || file.size !== item.sizeBytes) throw this.reportStorageError();
+    const buffer = await readFile(filePath);
+    if (createHash('sha256').update(buffer).digest('hex') !== item.sha256) throw this.reportStorageError();
+    return { filePath, originalName: item.originalName, mimeType: item.mimeType, sizeBytes: item.sizeBytes };
+  }
+
   async addFollowUp(
     reportId: string,
     dto: CreateInspectionReportFollowUpDto,