@carbonbox/domain 0.49.1 → 0.51.0

package/build/carbonbox/company-resources/events/domain/entity/Event.js

@@ -10,7 +10,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _Event_code, _Event_name, _Event_description, _Event_editions;
+var _Event_carbonClientId, _Event_code, _Event_name, _Event_description, _Event_editions;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Event = void 0;
 const AggregateRoot_1 = require("../../../../shared/domain/entities/AggregateRoot");
@@ -19,18 +19,21 @@ const EventCode_1 = require("../value-objects/EventCode");
 const EventName_1 = require("../value-objects/EventName");
 const EventEditions_1 = require("../value-objects/EventEditions");
 const EventId_1 = require("../value-objects/EventId");
+const CarbonClientId_1 = require("../../../../stakeholders/carbon-clients/domain/value-objects/CarbonClientId");
 class Event extends AggregateRoot_1.AggregateRoot {
     constructor(props, skipDomainValidation) {
         const id = skipDomainValidation
             ? EventId_1.EventId.fromPrimitives(props.id).toPrimitives()
             : EventId_1.EventId.create(props.id).toPrimitives();
         super({ id }, skipDomainValidation);
+        _Event_carbonClientId.set(this, void 0);
         _Event_code.set(this, void 0);
         _Event_name.set(this, void 0);
         _Event_description.set(this, void 0);
         _Event_editions.set(this, void 0);
         if (skipDomainValidation === false) {
             // Initialize with domain validation
+            __classPrivateFieldSet(this, _Event_carbonClientId, CarbonClientId_1.CarbonClientId.create(props.carbonClientId), "f");
             __classPrivateFieldSet(this, _Event_code, EventCode_1.EventCode.create(props.code), "f");
             __classPrivateFieldSet(this, _Event_name, EventName_1.EventName.create(props.name), "f");
             __classPrivateFieldSet(this, _Event_description, EventDescription_1.EventDescription.create(props.description), "f");
@@ -38,6 +41,7 @@ class Event extends AggregateRoot_1.AggregateRoot {
         }
         else {
             // Initialize from primitives (no domain validation)
+            __classPrivateFieldSet(this, _Event_carbonClientId, CarbonClientId_1.CarbonClientId.fromPrimitives(props.carbonClientId), "f");
             __classPrivateFieldSet(this, _Event_code, EventCode_1.EventCode.fromPrimitives(props.code), "f");
             __classPrivateFieldSet(this, _Event_name, EventName_1.EventName.fromPrimitives(props.name), "f");
             __classPrivateFieldSet(this, _Event_description, EventDescription_1.EventDescription.fromPrimitives(props.description), "f");
@@ -50,6 +54,7 @@ class Event extends AggregateRoot_1.AggregateRoot {
     static fromPrimitives(primitives) {
         const props = {
             id: primitives.id,
+            carbonClientId: primitives.carbonClientId,
             code: primitives.code,
             name: primitives.name,
             description: primitives.description,
@@ -60,12 +65,16 @@ class Event extends AggregateRoot_1.AggregateRoot {
     get toPrimitives() {
         return {
             id: this.id.toPrimitives(),
+            carbonClientId: __classPrivateFieldGet(this, _Event_carbonClientId, "f").toPrimitives(),
             code: __classPrivateFieldGet(this, _Event_code, "f").toPrimitives(),
             name: __classPrivateFieldGet(this, _Event_name, "f").toPrimitives(),
             description: __classPrivateFieldGet(this, _Event_description, "f").toPrimitives(),
             editions: __classPrivateFieldGet(this, _Event_editions, "f").toPrimitives(),
         };
     }
+    get carbonClientId() {
+        return __classPrivateFieldGet(this, _Event_carbonClientId, "f");
+    }
     get code() {
         return __classPrivateFieldGet(this, _Event_code, "f");
     }
@@ -80,4 +89,4 @@ class Event extends AggregateRoot_1.AggregateRoot {
     }
 }
 exports.Event = Event;
-_Event_code = new WeakMap(), _Event_name = new WeakMap(), _Event_description = new WeakMap(), _Event_editions = new WeakMap();
+_Event_carbonClientId = new WeakMap(), _Event_code = new WeakMap(), _Event_name = new WeakMap(), _Event_description = new WeakMap(), _Event_editions = new WeakMap();

package/build/carbonbox/company-resources/events/editions/domain/entity/EventEdition.js

@@ -10,7 +10,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _EventEdition_code, _EventEdition_name, _EventEdition_referenceVenue, _EventEdition_expectedAttendees, _EventEdition_staffCount, _EventEdition_executionPeriod, _EventEdition_parentEvent;
+var _EventEdition_carbonClientId, _EventEdition_code, _EventEdition_name, _EventEdition_referenceVenue, _EventEdition_expectedAttendees, _EventEdition_staffCount, _EventEdition_executionPeriod, _EventEdition_parentEvent;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EventEdition = void 0;
 const AggregateRoot_1 = require("../../../../../shared/domain/entities/AggregateRoot");
@@ -22,12 +22,14 @@ const EventEditionParentEvent_1 = require("../value-objects/EventEditionParentEv
 const EventEditionReferenceVenue_1 = require("../value-objects/EventEditionReferenceVenue");
 const EventEditionStaffCount_1 = require("../value-objects/EventEditionStaffCount");
 const EventEditionId_1 = require("../value-objects/EventEditionId");
+const CarbonClientId_1 = require("../../../../../stakeholders/carbon-clients/domain/value-objects/CarbonClientId");
 class EventEdition extends AggregateRoot_1.AggregateRoot {
     constructor(props, skipDomainValidation) {
         const id = skipDomainValidation
             ? EventEditionId_1.EventEditionId.fromPrimitives(props.id).toPrimitives()
             : EventEditionId_1.EventEditionId.create(props.id).toPrimitives();
         super({ id }, skipDomainValidation);
+        _EventEdition_carbonClientId.set(this, void 0);
         _EventEdition_code.set(this, void 0);
         _EventEdition_name.set(this, void 0);
         _EventEdition_referenceVenue.set(this, void 0);
@@ -37,6 +39,7 @@ class EventEdition extends AggregateRoot_1.AggregateRoot {
         _EventEdition_parentEvent.set(this, void 0);
         if (skipDomainValidation === false) {
             // Initialize with domain validation
+            __classPrivateFieldSet(this, _EventEdition_carbonClientId, CarbonClientId_1.CarbonClientId.create(props.carbonClientId), "f");
             __classPrivateFieldSet(this, _EventEdition_code, EventEditionCode_1.EventEditionCode.create(props.code), "f");
             __classPrivateFieldSet(this, _EventEdition_name, EventEditionName_1.EventEditionName.create(props.name), "f");
             __classPrivateFieldSet(this, _EventEdition_referenceVenue, EventEditionReferenceVenue_1.EventEditionReferenceVenue.create(props.referenceVenue), "f");
@@ -47,6 +50,7 @@ class EventEdition extends AggregateRoot_1.AggregateRoot {
         }
         else {
             // Initialize from primitives (no domain validation)
+            __classPrivateFieldSet(this, _EventEdition_carbonClientId, CarbonClientId_1.CarbonClientId.fromPrimitives(props.carbonClientId), "f");
             __classPrivateFieldSet(this, _EventEdition_code, EventEditionCode_1.EventEditionCode.fromPrimitives(props.code), "f");
             __classPrivateFieldSet(this, _EventEdition_name, EventEditionName_1.EventEditionName.fromPrimitives(props.name), "f");
             __classPrivateFieldSet(this, _EventEdition_referenceVenue, EventEditionReferenceVenue_1.EventEditionReferenceVenue.fromPrimitives(props.referenceVenue), "f");
@@ -62,6 +66,7 @@ class EventEdition extends AggregateRoot_1.AggregateRoot {
     static fromPrimitives(primitives) {
         const props = {
             id: primitives.id,
+            carbonClientId: primitives.carbonClientId,
             code: primitives.code,
             name: primitives.name,
             referenceVenue: primitives.referenceVenue,
@@ -75,6 +80,7 @@ class EventEdition extends AggregateRoot_1.AggregateRoot {
     get toPrimitives() {
         return {
             id: this.id.toPrimitives(),
+            carbonClientId: __classPrivateFieldGet(this, _EventEdition_carbonClientId, "f").toPrimitives(),
             code: __classPrivateFieldGet(this, _EventEdition_code, "f").toPrimitives(),
             name: __classPrivateFieldGet(this, _EventEdition_name, "f").toPrimitives(),
             expectedAttendees: __classPrivateFieldGet(this, _EventEdition_expectedAttendees, "f").toPrimitives(),
@@ -84,6 +90,9 @@ class EventEdition extends AggregateRoot_1.AggregateRoot {
             parentEvent: __classPrivateFieldGet(this, _EventEdition_parentEvent, "f").toPrimitives(),
         };
     }
+    get carbonClientId() {
+        return __classPrivateFieldGet(this, _EventEdition_carbonClientId, "f");
+    }
     get code() {
         return __classPrivateFieldGet(this, _EventEdition_code, "f");
     }
@@ -107,4 +116,4 @@ class EventEdition extends AggregateRoot_1.AggregateRoot {
     }
 }
 exports.EventEdition = EventEdition;
-_EventEdition_code = new WeakMap(), _EventEdition_name = new WeakMap(), _EventEdition_referenceVenue = new WeakMap(), _EventEdition_expectedAttendees = new WeakMap(), _EventEdition_staffCount = new WeakMap(), _EventEdition_executionPeriod = new WeakMap(), _EventEdition_parentEvent = new WeakMap();
+_EventEdition_carbonClientId = new WeakMap(), _EventEdition_code = new WeakMap(), _EventEdition_name = new WeakMap(), _EventEdition_referenceVenue = new WeakMap(), _EventEdition_expectedAttendees = new WeakMap(), _EventEdition_staffCount = new WeakMap(), _EventEdition_executionPeriod = new WeakMap(), _EventEdition_parentEvent = new WeakMap();

package/build/carbonbox/company-resources/products/domain/entity/Product.js

@@ -10,7 +10,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _Product_code, _Product_name, _Product_description, _Product_productionLocation;
+var _Product_carbonClientId, _Product_code, _Product_name, _Product_description, _Product_productionLocation;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Product = void 0;
 const AggregateRoot_1 = require("../../../../shared/domain/entities/AggregateRoot");
@@ -19,18 +19,21 @@ const ProductCode_1 = require("../value-objects/ProductCode");
 const ProductProductionLocation_1 = require("../value-objects/ProductProductionLocation");
 const ProductName_1 = require("../value-objects/ProductName");
 const ProductId_1 = require("../value-objects/ProductId");
+const CarbonClientId_1 = require("../../../../stakeholders/carbon-clients/domain/value-objects/CarbonClientId");
 class Product extends AggregateRoot_1.AggregateRoot {
     constructor(props, skipDomainValidation) {
         const id = skipDomainValidation
             ? ProductId_1.ProductId.fromPrimitives(props.id).toPrimitives()
             : ProductId_1.ProductId.create(props.id).toPrimitives();
         super({ id }, skipDomainValidation);
+        _Product_carbonClientId.set(this, void 0);
         _Product_code.set(this, void 0);
         _Product_name.set(this, void 0);
         _Product_description.set(this, void 0);
         _Product_productionLocation.set(this, void 0);
         if (skipDomainValidation === false) {
             // Initialize with domain validation
+            __classPrivateFieldSet(this, _Product_carbonClientId, CarbonClientId_1.CarbonClientId.create(props.carbonClientId), "f");
             __classPrivateFieldSet(this, _Product_code, ProductCode_1.ProductCode.create(props.code), "f");
             __classPrivateFieldSet(this, _Product_name, ProductName_1.ProductName.create(props.name), "f");
             __classPrivateFieldSet(this, _Product_description, ProductDescription_1.ProductDescription.create(props.description), "f");
@@ -38,6 +41,7 @@ class Product extends AggregateRoot_1.AggregateRoot {
         }
         else {
             // Initialize from primitives (no domain validation)
+            __classPrivateFieldSet(this, _Product_carbonClientId, CarbonClientId_1.CarbonClientId.fromPrimitives(props.carbonClientId), "f");
             __classPrivateFieldSet(this, _Product_code, ProductCode_1.ProductCode.fromPrimitives(props.code), "f");
             __classPrivateFieldSet(this, _Product_name, ProductName_1.ProductName.fromPrimitives(props.name), "f");
             __classPrivateFieldSet(this, _Product_description, ProductDescription_1.ProductDescription.fromPrimitives(props.description), "f");
@@ -50,6 +54,7 @@ class Product extends AggregateRoot_1.AggregateRoot {
     static fromPrimitives(primitives) {
         const props = {
             id: primitives.id,
+            carbonClientId: primitives.carbonClientId,
             code: primitives.code,
             name: primitives.name,
             description: primitives.description,
@@ -60,12 +65,16 @@ class Product extends AggregateRoot_1.AggregateRoot {
     get toPrimitives() {
         return {
             id: this.id.toPrimitives(),
+            carbonClientId: __classPrivateFieldGet(this, _Product_carbonClientId, "f").toPrimitives(),
             code: __classPrivateFieldGet(this, _Product_code, "f").toPrimitives(),
             name: __classPrivateFieldGet(this, _Product_name, "f").toPrimitives(),
             description: __classPrivateFieldGet(this, _Product_description, "f").toPrimitives(),
             productionLocation: __classPrivateFieldGet(this, _Product_productionLocation, "f").toPrimitives(),
         };
     }
+    get carbonClientId() {
+        return __classPrivateFieldGet(this, _Product_carbonClientId, "f");
+    }
     get code() {
         return __classPrivateFieldGet(this, _Product_code, "f");
     }
@@ -80,4 +89,4 @@ class Product extends AggregateRoot_1.AggregateRoot {
     }
 }
 exports.Product = Product;
-_Product_code = new WeakMap(), _Product_name = new WeakMap(), _Product_description = new WeakMap(), _Product_productionLocation = new WeakMap();
+_Product_carbonClientId = new WeakMap(), _Product_code = new WeakMap(), _Product_name = new WeakMap(), _Product_description = new WeakMap(), _Product_productionLocation = new WeakMap();

package/build/carbonbox/shared/domain/enums/ErrorCode.js

@@ -17,7 +17,7 @@ exports.ErrorCode = void 0;
  * - RPT: Reporting
  * - SHR: Shared/Common
  *
- * Total Codes: 177
+ * Total Codes: 182
  * Total Exceptions Migrated: 171 (100%)
  *
  * @since 1.0.0
@@ -87,6 +87,12 @@ var ErrorCode;
     ErrorCode["INVALID_USER_PREFERENCE_CODE"] = "CBX-STK-009";
     ErrorCode["DUPLICATE_USER_PREFERENCE_CODE"] = "CBX-STK-010";
     ErrorCode["USER_PREFERENCE_CODE_LIMIT_EXCEEDED"] = "CBX-STK-011";
+    // Permission Ceiling Errors (CBX-STK-012) — AIS-D01
+    ErrorCode["PERMISSION_ABOVE_ROLE_CEILING"] = "CBX-STK-012";
+    // User Invitation Errors (CBX-STK-013 to CBX-STK-015) — AIS-D04
+    ErrorCode["USER_INVITATION_EXPIRED"] = "CBX-STK-013";
+    ErrorCode["USER_INVITATION_ALREADY_CONSUMED"] = "CBX-STK-014";
+    ErrorCode["USER_INVITATION_REVOKED"] = "CBX-STK-015";
     // Carbon Footprint Configuration Errors (CBX-CFC-XXX)
     ErrorCode["CONFIGURATION_NOT_FOUND"] = "CBX-CFC-001";
     ErrorCode["INVALID_REPORTING_STANDARD"] = "CBX-CFC-002";
@@ -254,4 +260,6 @@ var ErrorCode;
     ErrorCode["INVALID_NATIONAL_NUMBER"] = "CBX-SHR-073";
     ErrorCode["INVALID_MINUTES_DURATION"] = "CBX-SHR-074";
     ErrorCode["INVALID_FULL_INTERNATIONAL_NUMBER"] = "CBX-SHR-075";
+    // Tenant Isolation Errors (CBX-SHR-076) — AIS-D02/AIS-D03
+    ErrorCode["INVALID_CROSS_TENANT_REFERENCE"] = "CBX-SHR-076";
 })(ErrorCode || (exports.ErrorCode = ErrorCode = {}));

package/build/carbonbox/shared/domain/enums/SemanticUuidPrefix.js

@@ -68,6 +68,8 @@ var SemanticUuidPrefix;
     SemanticUuidPrefix["USR_STH_COORDINATOR"] = "USR-STH-CRD";
     SemanticUuidPrefix["USR_STH_HOST"] = "USR-STH-CHO";
     SemanticUuidPrefix["USR_STH_MANAGER"] = "USR-STH-MGR";
+    // Users - Invitations (AIS-D04)
+    SemanticUuidPrefix["USR_INVITATION"] = "USR-INV";
     // Purchase Management System
     SemanticUuidPrefix["PMS_SERVICE_CATALOG"] = "PMS-SC";
     SemanticUuidPrefix["PMS_SERVICE_PRICING"] = "PMS-SP";

package/build/carbonbox/shared/domain/exceptions/InvalidCrossTenantReferenceError.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidCrossTenantReferenceError = void 0;
+const CodedRootError_1 = require("./CodedRootError");
+const ErrorCode_1 = require("../enums/ErrorCode");
+/**
+ * AIS-D03 (tenant isolation): a resource references another one that belongs to a different
+ * Carbon Client (a product footprint over another client's product, an event edition under
+ * another client's event, ...).
+ *
+ * The message is generic on purpose: it never includes the foreign resource's data or ids, so it
+ * cannot be used to probe other tenants. The backend answers it exactly like "the referenced
+ * resource does not exist".
+ */
+class InvalidCrossTenantReferenceError extends CodedRootError_1.CodedRootError {
+    constructor(referenceName) {
+        const technicalMessage = `The referenced '${referenceName}' is not valid for this resource.`;
+        const context = {
+            referenceName,
+            timestamp: new Date().toISOString(),
+        };
+        const suggestions = [
+            `Verify that the '${referenceName}' exists and belongs to the same Carbon Client`,
+            'Select the reference again from the list of available resources',
+        ];
+        super(ErrorCode_1.ErrorCode.INVALID_CROSS_TENANT_REFERENCE, technicalMessage, context, suggestions);
+        this.name = 'InvalidCrossTenantReferenceError';
+    }
+    static create(referenceName) {
+        return new InvalidCrossTenantReferenceError(referenceName);
+    }
+    logError() {
+        return `${this.name}: ${this.technicalMessage}`;
+    }
+}
+exports.InvalidCrossTenantReferenceError = InvalidCrossTenantReferenceError;

package/build/carbonbox/shared/domain/policies/CarbonClientOwnershipPolicy.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CarbonClientOwnershipPolicy = void 0;
+const InvalidCrossTenantReferenceError_1 = require("../exceptions/InvalidCrossTenantReferenceError");
+/**
+ * AIS-D03 (tenant isolation): references between resources stay inside one Carbon Client.
+ *
+ * Reference snapshots (`ProductReference`, `EventEditionReference`, `EventReference`) carry only
+ * `{ id, code, name }`, so the rule cannot live inside a single aggregate: the caller loads both
+ * aggregates and asks this policy. Static-only, like the footprint activation and completion
+ * policies; unlike them it throws, because every caller must stop on the first violation.
+ *
+ * A mismatch of the referenced id and a mismatch of the owner raise the same
+ * `InvalidCrossTenantReferenceError`, so "wrong reference" and "someone else's resource" are
+ * indistinguishable (anti-enumeration, AIS principle "not found ≡ out of scope").
+ *
+ * It lives in `shared` because it spans two bounded contexts (company resources and carbon
+ * footprint configurations).
+ */
+class CarbonClientOwnershipPolicy {
+    constructor() {
+        // Static-only — not instantiable.
+    }
+    /**
+     * The edition is one of `event`'s editions and has the same owner.
+     */
+    static assertEventEditionBelongsToParentEvent(eventEdition, event) {
+        const isChildOfEvent = eventEdition.parentEvent.toPrimitives().id === event.id.toPrimitives();
+        const hasSameOwner = eventEdition.carbonClientId.toPrimitives() === event.carbonClientId.toPrimitives();
+        if (isChildOfEvent === false || hasSameOwner === false) {
+            throw InvalidCrossTenantReferenceError_1.InvalidCrossTenantReferenceError.create('parentEvent');
+        }
+    }
+    /**
+     * The footprint references `product` and both belong to the same Carbon Client.
+     */
+    static assertProductCarbonFootprintConfigurationReferencesOwnProduct(configuration, product) {
+        const referencesProduct = configuration.product.toPrimitives().id === product.id.toPrimitives();
+        const hasSameOwner = configuration.ownedByCarbonClient.toPrimitives().id === product.carbonClientId.toPrimitives();
+        if (referencesProduct === false || hasSameOwner === false) {
+            throw InvalidCrossTenantReferenceError_1.InvalidCrossTenantReferenceError.create('product');
+        }
+    }
+    /**
+     * The footprint references `eventEdition` and both belong to the same Carbon Client.
+     */
+    static assertEventCarbonFootprintConfigurationReferencesOwnEventEdition(configuration, eventEdition) {
+        const referencesEventEdition = configuration.eventEdition.toPrimitives().id === eventEdition.id.toPrimitives();
+        const hasSameOwner = configuration.ownedByCarbonClient.toPrimitives().id === eventEdition.carbonClientId.toPrimitives();
+        if (referencesEventEdition === false || hasSameOwner === false) {
+            throw InvalidCrossTenantReferenceError_1.InvalidCrossTenantReferenceError.create('eventEdition');
+        }
+    }
+}
+exports.CarbonClientOwnershipPolicy = CarbonClientOwnershipPolicy;

package/build/carbonbox/stakeholders/carbon-clients/domain/value-objects/CarbonClientPermissions.js

@@ -1,7 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CarbonClientPermissions = void 0;
+const StakeholderRole_1 = require("../../../../shared/domain/enums/StakeholderRole");
 const StakeholderPermissions_1 = require("../../../shared/domain/value-objects/StakeholderPermissions");
+const RolePermissionCeilingPolicy_1 = require("../../../shared/domain/policies/RolePermissionCeilingPolicy");
+/**
+ * Permissions of a Carbon Client. `create` rejects permissions outside the Carbon Client
+ * ceiling (AIS-D01, `PermissionAboveRoleCeilingError`); `fromPrimitives` loads stored records as is.
+ */
 class CarbonClientPermissions extends StakeholderPermissions_1.StakeholderPermissions {
+    constructor(value, skipDomainValidation) {
+        super(value, skipDomainValidation);
+    }
+    static create(value) {
+        const permissions = new CarbonClientPermissions(value, false);
+        RolePermissionCeilingPolicy_1.RolePermissionCeilingPolicy.assertWithinCeiling(StakeholderRole_1.StakeholderRole.CARBON_CLIENT, permissions.toEnums());
+        return permissions;
+    }
+    static fromPrimitives(primitives) {
+        const value = primitives.map((primitive) => primitive);
+        return new CarbonClientPermissions(value, true);
+    }
 }
 exports.CarbonClientPermissions = CarbonClientPermissions;

package/build/carbonbox/stakeholders/carbon-coordinators/domain/value-objects/CarbonCoordinatorPermissions.js

@@ -1,7 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CarbonCoordinatorPermissions = void 0;
+const StakeholderRole_1 = require("../../../../shared/domain/enums/StakeholderRole");
 const StakeholderPermissions_1 = require("../../../shared/domain/value-objects/StakeholderPermissions");
+const RolePermissionCeilingPolicy_1 = require("../../../shared/domain/policies/RolePermissionCeilingPolicy");
+/**
+ * Permissions of a Carbon Coordinator. `create` rejects permissions outside the Carbon Coordinator
+ * ceiling (AIS-D01, `PermissionAboveRoleCeilingError`); `fromPrimitives` loads stored records as is.
+ */
 class CarbonCoordinatorPermissions extends StakeholderPermissions_1.StakeholderPermissions {
+    constructor(value, skipDomainValidation) {
+        super(value, skipDomainValidation);
+    }
+    static create(value) {
+        const permissions = new CarbonCoordinatorPermissions(value, false);
+        RolePermissionCeilingPolicy_1.RolePermissionCeilingPolicy.assertWithinCeiling(StakeholderRole_1.StakeholderRole.CARBON_COORDINATOR, permissions.toEnums());
+        return permissions;
+    }
+    static fromPrimitives(primitives) {
+        const value = primitives.map((primitive) => primitive);
+        return new CarbonCoordinatorPermissions(value, true);
+    }
 }
 exports.CarbonCoordinatorPermissions = CarbonCoordinatorPermissions;

package/build/carbonbox/stakeholders/carbon-managers/domain/value-objects/CarbonManagerPermissions.js

@@ -1,7 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CarbonManagerPermissions = void 0;
+const StakeholderRole_1 = require("../../../../shared/domain/enums/StakeholderRole");
 const StakeholderPermissions_1 = require("../../../shared/domain/value-objects/StakeholderPermissions");
+const RolePermissionCeilingPolicy_1 = require("../../../shared/domain/policies/RolePermissionCeilingPolicy");
+/**
+ * Permissions of a Carbon Manager. `create` rejects permissions outside the Carbon Manager
+ * ceiling (AIS-D01, `PermissionAboveRoleCeilingError`); `fromPrimitives` loads stored records as is.
+ */
 class CarbonManagerPermissions extends StakeholderPermissions_1.StakeholderPermissions {
+    constructor(value, skipDomainValidation) {
+        super(value, skipDomainValidation);
+    }
+    static create(value) {
+        const permissions = new CarbonManagerPermissions(value, false);
+        RolePermissionCeilingPolicy_1.RolePermissionCeilingPolicy.assertWithinCeiling(StakeholderRole_1.StakeholderRole.CARBON_MANAGER, permissions.toEnums());
+        return permissions;
+    }
+    static fromPrimitives(primitives) {
+        const value = primitives.map((primitive) => primitive);
+        return new CarbonManagerPermissions(value, true);
+    }
 }
 exports.CarbonManagerPermissions = CarbonManagerPermissions;

package/build/carbonbox/stakeholders/shared/domain/constants/CARBON_CLIENT_PERMISSION_CEILING.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CARBON_CLIENT_PERMISSION_CEILING = void 0;
+const Permission_1 = require("../../../../shared/domain/authorization/enums/Permission");
+/**
+ * Carbon Client permission ceiling (AIS-D01, decision D9).
+ *
+ * The most a Carbon Client can ever hold: a validated `CarbonClientPermissions` rejects anything
+ * outside this list, whoever grants it (the host included). Initially it equals the backend
+ * `CARBON_CLIENT_PERMISSION_PRESET` (2026-10-22). The host may grant LESS (remove permissions
+ * within the ceiling), never more.
+ *
+ * Raising a ceiling is a deliberate decision that requires publishing the domain package. The
+ * backend presets must stay ⊆ ceiling, or creating a user with the default preset fails.
+ */
+exports.CARBON_CLIENT_PERMISSION_CEILING = [
+    // === User Profile (self-management) ===
+    Permission_1.Permission.USER_PROFILE_VIEW_OWN_PROFILE,
+    Permission_1.Permission.USER_PROFILE_UPDATE_OWN_PROFILE,
+    Permission_1.Permission.USER_PROFILE_CHANGE_OWN_PASSWORD,
+    // === Activity Data Collection (self-service) ===
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_CREATE_NEW_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_UPDATE_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_SUBMIT_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_DELETE_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_ACTIVITY_DATA_SUBMISSION_LIST,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_BULK_LOAD_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_DOWNLOAD_ACTIVITY_DATA_TEMPLATE,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_BULK_IMPORT_JOB,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_COLLECTION_FIELD,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_COLLECTION_FIELD_LIST,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_DYNAMIC_FORM,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_DYNAMIC_FORM_LIST,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_CONDITIONAL_RULE,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_CONDITIONAL_RULE_LIST,
+    // === Carbon Footprint Configurations (self-service lifecycle) ===
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_CREATE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_UPDATE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_ACTIVATE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_COMPLETE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_DELETE_CORPORATE_CONFIGURATION,
+    // Segment configurations: read-only, they are a host catalog (D1).
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CATALOG,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CATALOG_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SUBSEGMENT_CATALOG,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SUBSEGMENT_CATALOG_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_PRODUCT_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_PRODUCT_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_EVENT_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_EVENT_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_EVENT_LIFECYCLE_STAGE_LIST,
+    // === Company Resources (own facilities) ===
+    Permission_1.Permission.COMPANY_RESOURCES_CREATE_FACILITY,
+    Permission_1.Permission.COMPANY_RESOURCES_VIEW_FACILITY,
+    Permission_1.Permission.COMPANY_RESOURCES_VIEW_FACILITY_LIST,
+    Permission_1.Permission.COMPANY_RESOURCES_UPDATE_FACILITY,
+    Permission_1.Permission.COMPANY_RESOURCES_DELETE_FACILITY,
+    // === Purchase Management System (own contracts) ===
+    Permission_1.Permission.PURCHASE_MANAGEMENT_SYSTEM_SIGN_CONTRACT_CLIENT,
+    Permission_1.Permission.PURCHASE_MANAGEMENT_SYSTEM_VIEW_PURCHASE_CONTRACT,
+    Permission_1.Permission.PURCHASE_MANAGEMENT_SYSTEM_VIEW_CONTRACTS_BY_CLIENT,
+    // === Emission Calculation Process (view + execute own workflows) ===
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_PROCESS,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_PROCESS_LIST,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_EXECUTE_CALCULATION_WORKFLOW,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_WORKFLOW,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_WORKFLOW_LIST,
+    // === Reporting (own report preparation questionnaire and report instances) ===
+    Permission_1.Permission.REPORTING_CREATE_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_ANSWER_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_COMPLETE_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_MANAGE_REPORT_PREPARATION_QUESTIONNAIRE_CUSTOM_QUESTIONS,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_PREPARATION_QUESTIONNAIRE_LIST,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_TEMPLATE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_TEMPLATE_LIST,
+    Permission_1.Permission.REPORTING_CREATE_REPORT_INSTANCE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_INSTANCE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_INSTANCE_LIST,
+    Permission_1.Permission.REPORTING_APPROVE_REPORT_BY_CLIENT,
+    Permission_1.Permission.REPORTING_REJECT_REPORT,
+];

package/build/carbonbox/stakeholders/shared/domain/constants/CARBON_COORDINATOR_PERMISSION_CEILING.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CARBON_COORDINATOR_PERMISSION_CEILING = void 0;
+const Permission_1 = require("../../../../shared/domain/authorization/enums/Permission");
+/**
+ * Carbon Coordinator permission ceiling (AIS-D01, decision D9).
+ *
+ * The most a Carbon Coordinator can ever hold: a validated `CarbonCoordinatorPermissions` rejects
+ * anything outside this list, whoever grants it (the host included). Initially it equals the
+ * backend `CARBON_COORDINATOR_PERMISSION_PRESET` (2026-10-22). The host may grant LESS, never more.
+ *
+ * Raising a ceiling is a deliberate decision that requires publishing the domain package. The
+ * backend presets must stay ⊆ ceiling, or creating a user with the default preset fails. The
+ * manager ceiling is derived from this one (`CARBON_MANAGER_PERMISSION_CEILING`).
+ */
+exports.CARBON_COORDINATOR_PERMISSION_CEILING = [
+    // === User Profile ===
+    Permission_1.Permission.USER_PROFILE_VIEW_OWN_PROFILE,
+    Permission_1.Permission.USER_PROFILE_UPDATE_OWN_PROFILE,
+    Permission_1.Permission.USER_PROFILE_CHANGE_OWN_PASSWORD,
+    Permission_1.Permission.USER_PROFILE_VIEW_OTHER_USER_PROFILES,
+    // === Stakeholders (view + manage their clients) ===
+    Permission_1.Permission.STAKEHOLDERS_VIEW_CARBON_CLIENT_PROFILE,
+    Permission_1.Permission.STAKEHOLDERS_VIEW_CARBON_CLIENT_LIST,
+    Permission_1.Permission.STAKEHOLDERS_CREATE_NEW_CARBON_CLIENT,
+    Permission_1.Permission.STAKEHOLDERS_UPDATE_CARBON_CLIENT_PROFILE,
+    // === Activity Data Collection (reviewer + fills in for assigned clients) ===
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_ACTIVITY_DATA_SUBMISSION_LIST,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_APPROVE_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_REJECT_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_CREATE_NEW_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_UPDATE_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_SUBMIT_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_BULK_LOAD_ACTIVITY_DATA_SUBMISSION,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_DOWNLOAD_ACTIVITY_DATA_TEMPLATE,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_BULK_IMPORT_JOB,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_COLLECTION_FIELD,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_COLLECTION_FIELD_LIST,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_DYNAMIC_FORM,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_DYNAMIC_FORM_LIST,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_CONDITIONAL_RULE,
+    Permission_1.Permission.ACTIVITY_DATA_COLLECTION_VIEW_CONDITIONAL_RULE_LIST,
+    // === Carbon Footprint Configurations (view + edit their clients' configurations) ===
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_CREATE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_UPDATE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_ACTIVATE_CORPORATE_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_COMPLETE_CORPORATE_CONFIGURATION,
+    // Segment configurations: read-only, they are a host catalog (D1).
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CATALOG,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SEGMENT_CATALOG_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SUBSEGMENT_CATALOG,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_CORPORATE_SUBSEGMENT_CATALOG_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_PRODUCT_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_PRODUCT_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_EVENT_CONFIGURATION,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_EVENT_CONFIGURATION_LIST,
+    Permission_1.Permission.CARBON_FOOTPRINT_CONFIGURATIONS_VIEW_EVENT_LIFECYCLE_STAGE_LIST,
+    // === Company Resources (manage their clients' facilities) ===
+    Permission_1.Permission.COMPANY_RESOURCES_VIEW_FACILITY,
+    Permission_1.Permission.COMPANY_RESOURCES_VIEW_FACILITY_LIST,
+    Permission_1.Permission.COMPANY_RESOURCES_CREATE_FACILITY,
+    Permission_1.Permission.COMPANY_RESOURCES_UPDATE_FACILITY,
+    // === Emission Calculation Process (view results + execute their clients' workflows) ===
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_PROCESS,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_PROCESS_LIST,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_WORKFLOW,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_VIEW_CALCULATION_WORKFLOW_LIST,
+    Permission_1.Permission.EMISSION_CALCULATION_PROCESS_EXECUTE_CALCULATION_WORKFLOW,
+    // === Reporting (questionnaires and report instances of their clients) ===
+    Permission_1.Permission.REPORTING_CREATE_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_ANSWER_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_COMPLETE_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_MANAGE_REPORT_PREPARATION_QUESTIONNAIRE_CUSTOM_QUESTIONS,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_PREPARATION_QUESTIONNAIRE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_PREPARATION_QUESTIONNAIRE_LIST,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_TEMPLATE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_TEMPLATE_LIST,
+    Permission_1.Permission.REPORTING_CREATE_REPORT_INSTANCE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_INSTANCE,
+    Permission_1.Permission.REPORTING_VIEW_REPORT_INSTANCE_LIST,
+    Permission_1.Permission.REPORTING_APPROVE_REPORT_BY_CLIENT,
+    Permission_1.Permission.REPORTING_REJECT_REPORT,
+];

package/build/carbonbox/stakeholders/shared/domain/constants/CARBON_MANAGER_PERMISSION_CEILING.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CARBON_MANAGER_PERMISSION_CEILING = void 0;
+const Permission_1 = require("../../../../shared/domain/authorization/enums/Permission");
+const CARBON_COORDINATOR_PERMISSION_CEILING_1 = require("./CARBON_COORDINATOR_PERMISSION_CEILING");
+/**
+ * Carbon Manager permission ceiling (AIS-D01, decision D9).
+ *
+ * = CARBON_COORDINATOR_PERMISSION_CEILING + team management, mirroring how the backend
+ * `CARBON_MANAGER_PERMISSION_PRESET` derives from the coordinator preset (2026-10-22).
+ * Granting and removing permissions (STAKEHOLDERS_ASSIGN/REMOVE_PERMISSIONS*) stays host-only.
+ *
+ * Raising a ceiling is a deliberate decision that requires publishing the domain package. The
+ * backend presets must stay ⊆ ceiling, or creating a user with the default preset fails. Do not
+ * repeat coordinator entries here: `UserPermissions` rejects duplicates.
+ */
+exports.CARBON_MANAGER_PERMISSION_CEILING = [
+    ...CARBON_COORDINATOR_PERMISSION_CEILING_1.CARBON_COORDINATOR_PERMISSION_CEILING,
+    // === Stakeholders (team management) ===
+    Permission_1.Permission.STAKEHOLDERS_CREATE_NEW_CARBON_COORDINATOR,
+    Permission_1.Permission.STAKEHOLDERS_VIEW_CARBON_COORDINATOR_PROFILE,
+    Permission_1.Permission.STAKEHOLDERS_VIEW_CARBON_COORDINATOR_LIST,
+    Permission_1.Permission.STAKEHOLDERS_UPDATE_CARBON_COORDINATOR_PROFILE,
+    Permission_1.Permission.STAKEHOLDERS_ACTIVATE_CARBON_COORDINATOR_ACCOUNT,
+    Permission_1.Permission.STAKEHOLDERS_DEACTIVATE_CARBON_COORDINATOR_ACCOUNT,
+    Permission_1.Permission.STAKEHOLDERS_ASSIGN_CARBON_CLIENTS_TO_CARBON_COORDINATOR,
+    Permission_1.Permission.STAKEHOLDERS_CHANGE_CARBON_COORDINATOR_REPORTS_TO,
+    Permission_1.Permission.STAKEHOLDERS_VIEW_CARBON_MANAGER_LIST,
+];