@carbonbox/domain 0.51.0 → 0.53.0

package/build/carbonbox/activity-data-collection/stakeholder-adaptations/domain/value-objects/StakeholderAdaptationStakeholderType.js

@@ -59,6 +59,7 @@ class StakeholderAdaptationStakeholderType extends String_1.String {
             [StakeholderRole_1.StakeholderRole.CARBON_MANAGER]: 3,
             [StakeholderRole_1.StakeholderRole.CARBON_COORDINATOR]: 2,
             [StakeholderRole_1.StakeholderRole.CARBON_CLIENT]: 1,
+            [StakeholderRole_1.StakeholderRole.CARBON_AUDITOR]: 0, // Not a valid adaptation role (AUD-D04)
         };
         return hierarchy[this.stakeholderRole] > hierarchy[otherRole.stakeholderRole];
     }
@@ -78,4 +79,6 @@ _a = StakeholderAdaptationStakeholderType, _StakeholderAdaptationStakeholderType
     return _a.VALID_STAKEHOLDER_ROLES.includes(value);
 };
 StakeholderAdaptationStakeholderType.PROPERTY_NAME = 'stakeholderType';
-StakeholderAdaptationStakeholderType.VALID_STAKEHOLDER_ROLES = Object.values(StakeholderRole_1.StakeholderRole);
+// AUD-D04: the carbon auditor never fills activity data, so forms are never adapted to it
+StakeholderAdaptationStakeholderType.VALID_STAKEHOLDER_ROLES = Object.values(StakeholderRole_1.StakeholderRole)
+    .filter((role) => role !== StakeholderRole_1.StakeholderRole.CARBON_AUDITOR);

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/entity/AuditEngagement.js

@@ -0,0 +1,418 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _AuditEngagement_instances, _a, _AuditEngagement_carbonClientId, _AuditEngagement_carbonAuditorId, _AuditEngagement_sourcePurchaseContractId, _AuditEngagement_serviceCode, _AuditEngagement_validFrom, _AuditEngagement_validTo, _AuditEngagement_auditedCarbonFootprintConfigurations, _AuditEngagement_status, _AuditEngagement_statusHistory, _AuditEngagement_independenceDeclaration, _AuditEngagement_replacesAuditEngagementId, _AuditEngagement_withStatusChange, _AuditEngagement_toProps, _AuditEngagement_guardAgainstStatusOutside, _AuditEngagement_guardAgainstNotLive, _AuditEngagement_guardAgainstNotAssignedCarbonAuditor, _AuditEngagement_guardAgainstValidityEndNotAfterStart, _AuditEngagement_guardAgainstStatusDifferentFromLastChange, _AuditEngagement_guardAgainstActiveWithoutIndependenceDeclaration;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEngagement = void 0;
+const AggregateRoot_1 = require("../../../../shared/domain/entities/AggregateRoot");
+const StakeholderRole_1 = require("../../../../shared/domain/enums/StakeholderRole");
+const InvalidAssignerRoleError_1 = require("../../../../shared/domain/exceptions/InvalidAssignerRoleError");
+const InvalidDateRangeError_1 = require("../../../../shared/domain/exceptions/InvalidDateRangeError");
+const InvalidPropertyValueError_1 = require("../../../../shared/domain/exceptions/InvalidPropertyValueError");
+const CarbonClientId_1 = require("../../../../stakeholders/carbon-clients/domain/value-objects/CarbonClientId");
+const AuditEngagementStatus_1 = require("../enums/AuditEngagementStatus");
+const AuditEngagementId_1 = require("../value-objects/AuditEngagementId");
+const AuditEngagementCarbonAuditorId_1 = require("../value-objects/AuditEngagementCarbonAuditorId");
+const AuditEngagementSourcePurchaseContractId_1 = require("../value-objects/AuditEngagementSourcePurchaseContractId");
+const AuditEngagementServiceCode_1 = require("../value-objects/AuditEngagementServiceCode");
+const AuditEngagementValidFrom_1 = require("../value-objects/AuditEngagementValidFrom");
+const AuditEngagementValidTo_1 = require("../value-objects/AuditEngagementValidTo");
+const AuditEngagementAuditedCarbonFootprintConfigurations_1 = require("../value-objects/AuditEngagementAuditedCarbonFootprintConfigurations");
+const AuditEngagementStatus_2 = require("../value-objects/AuditEngagementStatus");
+const AuditEngagementStatusHistory_1 = require("../value-objects/AuditEngagementStatusHistory");
+const AuditEngagementIndependenceDeclaration_1 = require("../value-objects/AuditEngagementIndependenceDeclaration");
+const AuditEngagementReplacesAuditEngagementId_1 = require("../value-objects/AuditEngagementReplacesAuditEngagementId");
+const AuditEngagementEvaluatedAt_1 = require("../value-objects/AuditEngagementEvaluatedAt");
+const AuditEngagementInvalidStatusTransitionError_1 = require("../exceptions/AuditEngagementInvalidStatusTransitionError");
+const AuditEngagementNotActiveError_1 = require("../exceptions/AuditEngagementNotActiveError");
+const AuditEngagementNotAssignedToCarbonAuditorError_1 = require("../exceptions/AuditEngagementNotAssignedToCarbonAuditorError");
+const AuditEngagementAccessPolicy_1 = require("../policies/AuditEngagementAccessPolicy");
+/**
+ * AuditEngagement aggregate (AUD-D05): the engagement between a carbon client and the carbon
+ * auditor who verifies the carbon footprints the client chose, sold through a purchase contract
+ * with the auditor service (D1). The auditor is never part of the carbon client: one auditor has
+ * 1..N engagements, each with its own validity.
+ *
+ * The validity is copied from the purchase contract and kept in sync by the contract events
+ * (renewed ⇒ `extendValidity`, suspended ⇒ `suspend`, cancelled ⇒ `revoke`, expired ⇒ `expire`).
+ * Access is decided by `AuditEngagementAccessPolicy` (ACTIVE and within the validity).
+ *
+ * The domain does not read the clock: every transition receives the current moment
+ * (`DD/MM/YYYY HH:mm:ss`) and records it in the status history. Changes return a new instance.
+ *
+ * Lifecycle: PENDING_ACCEPTANCE → ACTIVE | DECLINED | REPLACED | SUSPENDED | EXPIRED | REVOKED;
+ * ACTIVE → REPLACED | SUSPENDED | EXPIRED | REVOKED; SUSPENDED → EXPIRED | REVOKED. Reactivating a
+ * suspended engagement waits for contract reactivation (DT-65).
+ *
+ * Rules that span aggregates stay in the application: at most one live engagement per purchase
+ * contract (`IAuditEngagementRepository.findLiveBySourcePurchaseContractId`), the audited footprints
+ * belong to the carbon client, and `validTo` does not exceed the contract end.
+ */
+class AuditEngagement extends AggregateRoot_1.AggregateRoot {
+    constructor(props, skipDomainValidation) {
+        const id = skipDomainValidation
+            ? AuditEngagementId_1.AuditEngagementId.fromPrimitives(props.id).toPrimitives()
+            : AuditEngagementId_1.AuditEngagementId.create(props.id).toPrimitives();
+        super({ id }, skipDomainValidation);
+        _AuditEngagement_instances.add(this);
+        _AuditEngagement_carbonClientId.set(this, void 0);
+        _AuditEngagement_carbonAuditorId.set(this, void 0);
+        _AuditEngagement_sourcePurchaseContractId.set(this, void 0);
+        _AuditEngagement_serviceCode.set(this, void 0);
+        _AuditEngagement_validFrom.set(this, void 0);
+        _AuditEngagement_validTo.set(this, void 0);
+        _AuditEngagement_auditedCarbonFootprintConfigurations.set(this, void 0);
+        _AuditEngagement_status.set(this, void 0);
+        _AuditEngagement_statusHistory.set(this, void 0);
+        _AuditEngagement_independenceDeclaration.set(this, void 0);
+        _AuditEngagement_replacesAuditEngagementId.set(this, void 0);
+        if (skipDomainValidation === false) {
+            // Initialize with domain validation
+            __classPrivateFieldSet(this, _AuditEngagement_carbonClientId, CarbonClientId_1.CarbonClientId.create(props.carbonClientId), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_carbonAuditorId, AuditEngagementCarbonAuditorId_1.AuditEngagementCarbonAuditorId.create(props.carbonAuditorId), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_sourcePurchaseContractId, AuditEngagementSourcePurchaseContractId_1.AuditEngagementSourcePurchaseContractId.create(props.sourcePurchaseContractId), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_serviceCode, AuditEngagementServiceCode_1.AuditEngagementServiceCode.create(props.serviceCode), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_validFrom, AuditEngagementValidFrom_1.AuditEngagementValidFrom.create(props.validFrom), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_validTo, AuditEngagementValidTo_1.AuditEngagementValidTo.create(props.validTo), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_auditedCarbonFootprintConfigurations, AuditEngagementAuditedCarbonFootprintConfigurations_1.AuditEngagementAuditedCarbonFootprintConfigurations.create(props.auditedCarbonFootprintConfigurations), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_status, AuditEngagementStatus_2.AuditEngagementStatus.create(props.status), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_statusHistory, AuditEngagementStatusHistory_1.AuditEngagementStatusHistory.create(props.statusHistory), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_independenceDeclaration, AuditEngagementIndependenceDeclaration_1.AuditEngagementIndependenceDeclaration.create(props.independenceDeclaration), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_replacesAuditEngagementId, AuditEngagementReplacesAuditEngagementId_1.AuditEngagementReplacesAuditEngagementId.create(props.replacesAuditEngagementId), "f");
+            __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstValidityEndNotAfterStart).call(this);
+            __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstStatusDifferentFromLastChange).call(this);
+            __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstActiveWithoutIndependenceDeclaration).call(this);
+        }
+        else {
+            // Initialize from primitives (no domain validation)
+            __classPrivateFieldSet(this, _AuditEngagement_carbonClientId, CarbonClientId_1.CarbonClientId.fromPrimitives(props.carbonClientId), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_carbonAuditorId, AuditEngagementCarbonAuditorId_1.AuditEngagementCarbonAuditorId.fromPrimitives(props.carbonAuditorId), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_sourcePurchaseContractId, AuditEngagementSourcePurchaseContractId_1.AuditEngagementSourcePurchaseContractId.fromPrimitives(props.sourcePurchaseContractId), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_serviceCode, AuditEngagementServiceCode_1.AuditEngagementServiceCode.fromPrimitives(props.serviceCode), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_validFrom, AuditEngagementValidFrom_1.AuditEngagementValidFrom.fromPrimitives(props.validFrom), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_validTo, AuditEngagementValidTo_1.AuditEngagementValidTo.fromPrimitives(props.validTo), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_auditedCarbonFootprintConfigurations, AuditEngagementAuditedCarbonFootprintConfigurations_1.AuditEngagementAuditedCarbonFootprintConfigurations.fromPrimitives(props.auditedCarbonFootprintConfigurations), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_status, AuditEngagementStatus_2.AuditEngagementStatus.fromPrimitives(props.status), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_statusHistory, AuditEngagementStatusHistory_1.AuditEngagementStatusHistory.fromPrimitives(props.statusHistory), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_independenceDeclaration, AuditEngagementIndependenceDeclaration_1.AuditEngagementIndependenceDeclaration.fromPrimitives(props.independenceDeclaration), "f");
+            __classPrivateFieldSet(this, _AuditEngagement_replacesAuditEngagementId, AuditEngagementReplacesAuditEngagementId_1.AuditEngagementReplacesAuditEngagementId.fromPrimitives(props.replacesAuditEngagementId), "f");
+        }
+    }
+    static create(props) {
+        return new _a(props, false);
+    }
+    /**
+     * Assigns an auditor: a new engagement waiting for the auditor to accept it. The first entry of
+     * the history records who assigned it and when. Only a carbon client or the host assigns
+     * (InvalidAssignerRoleError).
+     */
+    static assign(props) {
+        _a.guardAgainstInvalidAssignerRole(props.assignedByStakeholder);
+        return new _a({
+            id: props.id,
+            carbonClientId: props.carbonClientId,
+            carbonAuditorId: props.carbonAuditorId,
+            sourcePurchaseContractId: props.sourcePurchaseContractId,
+            serviceCode: props.serviceCode,
+            validFrom: props.validFrom,
+            validTo: props.validTo,
+            auditedCarbonFootprintConfigurations: props.auditedCarbonFootprintConfigurations,
+            status: AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE,
+            statusHistory: [{
+                    status: AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE,
+                    changedAt: props.assignedAt,
+                    changedByStakeholder: props.assignedByStakeholder,
+                    reason: null,
+                }],
+            independenceDeclaration: null,
+            replacesAuditEngagementId: props.replacesAuditEngagementId,
+        }, false);
+    }
+    static fromPrimitives(primitives) {
+        const props = {
+            id: primitives.id,
+            carbonClientId: primitives.carbonClientId,
+            carbonAuditorId: primitives.carbonAuditorId,
+            sourcePurchaseContractId: primitives.sourcePurchaseContractId,
+            serviceCode: primitives.serviceCode,
+            validFrom: primitives.validFrom,
+            validTo: primitives.validTo,
+            auditedCarbonFootprintConfigurations: primitives.auditedCarbonFootprintConfigurations,
+            status: primitives.status,
+            statusHistory: primitives.statusHistory,
+            independenceDeclaration: primitives.independenceDeclaration,
+            replacesAuditEngagementId: primitives.replacesAuditEngagementId,
+        };
+        return new _a(props, true);
+    }
+    get toPrimitives() {
+        return {
+            id: this.id.toPrimitives(),
+            carbonClientId: __classPrivateFieldGet(this, _AuditEngagement_carbonClientId, "f").toPrimitives(),
+            carbonAuditorId: __classPrivateFieldGet(this, _AuditEngagement_carbonAuditorId, "f").toPrimitives(),
+            sourcePurchaseContractId: __classPrivateFieldGet(this, _AuditEngagement_sourcePurchaseContractId, "f").toPrimitives(),
+            serviceCode: __classPrivateFieldGet(this, _AuditEngagement_serviceCode, "f").toPrimitives(),
+            validFrom: __classPrivateFieldGet(this, _AuditEngagement_validFrom, "f").toPrimitives(),
+            validTo: __classPrivateFieldGet(this, _AuditEngagement_validTo, "f").toPrimitives(),
+            auditedCarbonFootprintConfigurations: __classPrivateFieldGet(this, _AuditEngagement_auditedCarbonFootprintConfigurations, "f").toPrimitives(),
+            status: __classPrivateFieldGet(this, _AuditEngagement_status, "f").toEnum(),
+            statusHistory: __classPrivateFieldGet(this, _AuditEngagement_statusHistory, "f").toPrimitives(),
+            independenceDeclaration: __classPrivateFieldGet(this, _AuditEngagement_independenceDeclaration, "f").toPrimitives(),
+            replacesAuditEngagementId: __classPrivateFieldGet(this, _AuditEngagement_replacesAuditEngagementId, "f").toPrimitives(),
+        };
+    }
+    get carbonClientId() {
+        return __classPrivateFieldGet(this, _AuditEngagement_carbonClientId, "f");
+    }
+    get carbonAuditorId() {
+        return __classPrivateFieldGet(this, _AuditEngagement_carbonAuditorId, "f");
+    }
+    get sourcePurchaseContractId() {
+        return __classPrivateFieldGet(this, _AuditEngagement_sourcePurchaseContractId, "f");
+    }
+    get serviceCode() {
+        return __classPrivateFieldGet(this, _AuditEngagement_serviceCode, "f");
+    }
+    get validFrom() {
+        return __classPrivateFieldGet(this, _AuditEngagement_validFrom, "f");
+    }
+    get validTo() {
+        return __classPrivateFieldGet(this, _AuditEngagement_validTo, "f");
+    }
+    get auditedCarbonFootprintConfigurations() {
+        return __classPrivateFieldGet(this, _AuditEngagement_auditedCarbonFootprintConfigurations, "f");
+    }
+    get status() {
+        return __classPrivateFieldGet(this, _AuditEngagement_status, "f");
+    }
+    get statusHistory() {
+        return __classPrivateFieldGet(this, _AuditEngagement_statusHistory, "f");
+    }
+    get independenceDeclaration() {
+        return __classPrivateFieldGet(this, _AuditEngagement_independenceDeclaration, "f");
+    }
+    get replacesAuditEngagementId() {
+        return __classPrivateFieldGet(this, _AuditEngagement_replacesAuditEngagementId, "f");
+    }
+    /**
+     * Whether the engagement can still change (PENDING_ACCEPTANCE, ACTIVE or SUSPENDED).
+     */
+    isLive() {
+        return __classPrivateFieldGet(this, _AuditEngagement_status, "f").isLive();
+    }
+    /**
+     * Whether the engagement grants the auditor access at `now` (`AuditEngagementAccessPolicy`).
+     */
+    grantsAccessAt(now) {
+        return AuditEngagementAccessPolicy_1.AuditEngagementAccessPolicy.grantsAccessAt(this, now);
+    }
+    auditsCarbonFootprintConfiguration(carbonFootprintConfigurationId) {
+        return __classPrivateFieldGet(this, _AuditEngagement_auditedCarbonFootprintConfigurations, "f").includes(carbonFootprintConfigurationId);
+    }
+    isAssignedTo(carbonAuditorId) {
+        return __classPrivateFieldGet(this, _AuditEngagement_carbonAuditorId, "f").toPrimitives() === carbonAuditorId;
+    }
+    /**
+     * The reason the auditor gave when declining (E10), or null when it was not declined.
+     */
+    findDeclineReason() {
+        return __classPrivateFieldGet(this, _AuditEngagement_statusHistory, "f").findLastChangeTo(AuditEngagementStatus_1.AuditEngagementStatus.DECLINED)?.reason ?? null;
+    }
+    /**
+     * Returns the engagement accepted by its auditor at `now`, with the signed independence
+     * declaration (D9). Checked in this order: status PENDING_ACCEPTANCE
+     * (AuditEngagementInvalidStatusTransitionError), the stakeholder is the assigned auditor
+     * (AuditEngagementNotAssignedToCarbonAuditorError) and the validity did not end
+     * (AuditEngagementNotActiveError).
+     */
+    accept(now, acceptedByStakeholder, declarationVersion) {
+        const evaluatedAt = AuditEngagementEvaluatedAt_1.AuditEngagementEvaluatedAt.create(now);
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstStatusOutside).call(this, [AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE], 'accept');
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstNotAssignedCarbonAuditor).call(this, acceptedByStakeholder, 'accept');
+        if (__classPrivateFieldGet(this, _AuditEngagement_validTo, "f").isPassedAt(evaluatedAt)) {
+            throw AuditEngagementNotActiveError_1.AuditEngagementNotActiveError.create(this.id.toPrimitives(), __classPrivateFieldGet(this, _AuditEngagement_validTo, "f").toPrimitives());
+        }
+        return __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_withStatusChange).call(this, AuditEngagementStatus_1.AuditEngagementStatus.ACTIVE, evaluatedAt, acceptedByStakeholder, null, {
+            independenceDeclaration: { declarationVersion, acceptedAt: evaluatedAt.toPrimitives() },
+        });
+    }
+    /**
+     * Returns the engagement declined by its auditor at `now` (E10). The reason is required and is
+     * visible to the carbon client and the host.
+     */
+    decline(now, declinedByStakeholder, reason) {
+        const evaluatedAt = AuditEngagementEvaluatedAt_1.AuditEngagementEvaluatedAt.create(now);
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstStatusOutside).call(this, [AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE], 'decline');
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstNotAssignedCarbonAuditor).call(this, declinedByStakeholder, 'decline');
+        if (typeof reason !== 'string' || reason.trim() === '') {
+            throw InvalidPropertyValueError_1.InvalidPropertyValueError.create('reason', 'a reason when declining an audit engagement', String(reason));
+        }
+        return __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_withStatusChange).call(this, AuditEngagementStatus_1.AuditEngagementStatus.DECLINED, evaluatedAt, declinedByStakeholder, reason, {});
+    }
+    /**
+     * Returns the engagement replaced at `now` (D5, E6): the auditor loses access at once. The new
+     * engagement is assigned with `replacesAuditEngagementId` pointing to this one. The reason of the
+     * carbon client is not recorded, so the auditor only gets a neutral notice.
+     */
+    replace(now, replacedByStakeholder) {
+        const evaluatedAt = AuditEngagementEvaluatedAt_1.AuditEngagementEvaluatedAt.create(now);
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstStatusOutside).call(this, _a.REPLACEABLE_STATUSES, 'replace');
+        return __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_withStatusChange).call(this, AuditEngagementStatus_1.AuditEngagementStatus.REPLACED, evaluatedAt, replacedByStakeholder, null, {});
+    }
+    /**
+     * Returns the engagement revoked at `now` (E8 contract cancelled, E17 auditor deactivated, or the
+     * host revokes it). `revokedByStakeholder` is null when the system revokes it. Revoking an already
+     * revoked engagement returns it unchanged.
+     */
+    revoke(now, revokedByStakeholder, reason) {
+        const evaluatedAt = AuditEngagementEvaluatedAt_1.AuditEngagementEvaluatedAt.create(now);
+        if (__classPrivateFieldGet(this, _AuditEngagement_status, "f").is(AuditEngagementStatus_1.AuditEngagementStatus.REVOKED)) {
+            return this;
+        }
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstNotLive).call(this, 'revoke');
+        return __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_withStatusChange).call(this, AuditEngagementStatus_1.AuditEngagementStatus.REVOKED, evaluatedAt, revokedByStakeholder, reason, {});
+    }
+    /**
+     * Returns the engagement suspended at `now` because its purchase contract was suspended (E8).
+     * Suspending an already suspended engagement returns it unchanged.
+     */
+    suspend(now) {
+        const evaluatedAt = AuditEngagementEvaluatedAt_1.AuditEngagementEvaluatedAt.create(now);
+        if (__classPrivateFieldGet(this, _AuditEngagement_status, "f").is(AuditEngagementStatus_1.AuditEngagementStatus.SUSPENDED)) {
+            return this;
+        }
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstStatusOutside).call(this, _a.SUSPENDABLE_STATUSES, 'suspend');
+        return __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_withStatusChange).call(this, AuditEngagementStatus_1.AuditEngagementStatus.SUSPENDED, evaluatedAt, null, null, {});
+    }
+    /**
+     * Returns the engagement expired at `now` because the last day of its purchase contract ended
+     * (E3, E9). Expiring an already expired engagement returns it unchanged.
+     */
+    expire(now) {
+        const evaluatedAt = AuditEngagementEvaluatedAt_1.AuditEngagementEvaluatedAt.create(now);
+        if (__classPrivateFieldGet(this, _AuditEngagement_status, "f").is(AuditEngagementStatus_1.AuditEngagementStatus.EXPIRED)) {
+            return this;
+        }
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstNotLive).call(this, 'expire');
+        return __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_withStatusChange).call(this, AuditEngagementStatus_1.AuditEngagementStatus.EXPIRED, evaluatedAt, null, null, {});
+    }
+    /**
+     * Returns the engagement with its validity extended to `newValidTo` because its purchase contract
+     * was renewed (E7). The same end returns it unchanged (the renewal event may arrive twice); an end
+     * that is not later than the current one is rejected (InvalidDateRangeError).
+     */
+    extendValidity(newValidTo) {
+        const extendedValidTo = AuditEngagementValidTo_1.AuditEngagementValidTo.create(newValidTo);
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstNotLive).call(this, 'extend the validity of');
+        if (extendedValidTo.toPrimitives() === __classPrivateFieldGet(this, _AuditEngagement_validTo, "f").toPrimitives()) {
+            return this;
+        }
+        if (extendedValidTo.isAfter(__classPrivateFieldGet(this, _AuditEngagement_validTo, "f")) === false) {
+            throw InvalidDateRangeError_1.InvalidDateRangeError.create(__classPrivateFieldGet(this, _AuditEngagement_validTo, "f").toPrimitives(), extendedValidTo.toPrimitives());
+        }
+        return _a.create({
+            ...__classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_toProps).call(this),
+            validTo: extendedValidTo.toPrimitives(),
+        });
+    }
+    /**
+     * Returns the engagement with a new list of audited footprints (E13). Removing a footprint cuts the
+     * auditor access to it at once; a footprint created later only joins when the carbon client adds it
+     * (D10, E14).
+     */
+    changeAuditedCarbonFootprintConfigurations(auditedCarbonFootprintConfigurations) {
+        __classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_guardAgainstStatusOutside).call(this, _a.FOOTPRINTS_CHANGEABLE_STATUSES, 'change the audited footprints of');
+        return _a.create({
+            ...__classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_toProps).call(this),
+            auditedCarbonFootprintConfigurations,
+        });
+    }
+    static guardAgainstInvalidAssignerRole(assignedByStakeholder) {
+        if (_a.ALLOWED_ASSIGNER_ROLES.includes(assignedByStakeholder.roleType) === false) {
+            throw InvalidAssignerRoleError_1.InvalidAssignerRoleError.create(assignedByStakeholder.roleType, _a.ALLOWED_ASSIGNER_ROLES, 'An auditor can only be assigned by the carbon client or the host');
+        }
+    }
+}
+exports.AuditEngagement = AuditEngagement;
+_a = AuditEngagement, _AuditEngagement_carbonClientId = new WeakMap(), _AuditEngagement_carbonAuditorId = new WeakMap(), _AuditEngagement_sourcePurchaseContractId = new WeakMap(), _AuditEngagement_serviceCode = new WeakMap(), _AuditEngagement_validFrom = new WeakMap(), _AuditEngagement_validTo = new WeakMap(), _AuditEngagement_auditedCarbonFootprintConfigurations = new WeakMap(), _AuditEngagement_status = new WeakMap(), _AuditEngagement_statusHistory = new WeakMap(), _AuditEngagement_independenceDeclaration = new WeakMap(), _AuditEngagement_replacesAuditEngagementId = new WeakMap(), _AuditEngagement_instances = new WeakSet(), _AuditEngagement_withStatusChange = function _AuditEngagement_withStatusChange(status, evaluatedAt, changedByStakeholder, reason, changes) {
+    const statusHistory = __classPrivateFieldGet(this, _AuditEngagement_statusHistory, "f").append({
+        status,
+        changedAt: evaluatedAt.toPrimitives(),
+        changedByStakeholder,
+        reason,
+    });
+    return _a.create({
+        ...__classPrivateFieldGet(this, _AuditEngagement_instances, "m", _AuditEngagement_toProps).call(this),
+        ...changes,
+        status,
+        statusHistory: statusHistory.toPrimitives(),
+    });
+}, _AuditEngagement_toProps = function _AuditEngagement_toProps() {
+    return {
+        id: this.id.toPrimitives(),
+        carbonClientId: __classPrivateFieldGet(this, _AuditEngagement_carbonClientId, "f").toPrimitives(),
+        carbonAuditorId: __classPrivateFieldGet(this, _AuditEngagement_carbonAuditorId, "f").toPrimitives(),
+        sourcePurchaseContractId: __classPrivateFieldGet(this, _AuditEngagement_sourcePurchaseContractId, "f").toPrimitives(),
+        serviceCode: __classPrivateFieldGet(this, _AuditEngagement_serviceCode, "f").toPrimitives(),
+        validFrom: __classPrivateFieldGet(this, _AuditEngagement_validFrom, "f").toPrimitives(),
+        validTo: __classPrivateFieldGet(this, _AuditEngagement_validTo, "f").toPrimitives(),
+        auditedCarbonFootprintConfigurations: __classPrivateFieldGet(this, _AuditEngagement_auditedCarbonFootprintConfigurations, "f").toPrimitives(),
+        status: __classPrivateFieldGet(this, _AuditEngagement_status, "f").toEnum(),
+        statusHistory: __classPrivateFieldGet(this, _AuditEngagement_statusHistory, "f").toPrimitives(),
+        independenceDeclaration: __classPrivateFieldGet(this, _AuditEngagement_independenceDeclaration, "f").toPrimitives(),
+        replacesAuditEngagementId: __classPrivateFieldGet(this, _AuditEngagement_replacesAuditEngagementId, "f").toPrimitives(),
+    };
+}, _AuditEngagement_guardAgainstStatusOutside = function _AuditEngagement_guardAgainstStatusOutside(allowedStatuses, action) {
+    if (__classPrivateFieldGet(this, _AuditEngagement_status, "f").isOneOf(allowedStatuses) === false) {
+        throw AuditEngagementInvalidStatusTransitionError_1.AuditEngagementInvalidStatusTransitionError.create(__classPrivateFieldGet(this, _AuditEngagement_status, "f").toEnum(), action);
+    }
+}, _AuditEngagement_guardAgainstNotLive = function _AuditEngagement_guardAgainstNotLive(action) {
+    if (__classPrivateFieldGet(this, _AuditEngagement_status, "f").isLive() === false) {
+        throw AuditEngagementInvalidStatusTransitionError_1.AuditEngagementInvalidStatusTransitionError.create(__classPrivateFieldGet(this, _AuditEngagement_status, "f").toEnum(), action);
+    }
+}, _AuditEngagement_guardAgainstNotAssignedCarbonAuditor = function _AuditEngagement_guardAgainstNotAssignedCarbonAuditor(stakeholder, action) {
+    if (stakeholder.roleType !== StakeholderRole_1.StakeholderRole.CARBON_AUDITOR || this.isAssignedTo(stakeholder.id) === false) {
+        throw AuditEngagementNotAssignedToCarbonAuditorError_1.AuditEngagementNotAssignedToCarbonAuditorError.create(this.id.toPrimitives(), action);
+    }
+}, _AuditEngagement_guardAgainstValidityEndNotAfterStart = function _AuditEngagement_guardAgainstValidityEndNotAfterStart() {
+    if (__classPrivateFieldGet(this, _AuditEngagement_validTo, "f").isAfter(__classPrivateFieldGet(this, _AuditEngagement_validFrom, "f")) === false) {
+        throw InvalidDateRangeError_1.InvalidDateRangeError.create(__classPrivateFieldGet(this, _AuditEngagement_validFrom, "f").toPrimitives(), __classPrivateFieldGet(this, _AuditEngagement_validTo, "f").toPrimitives());
+    }
+}, _AuditEngagement_guardAgainstStatusDifferentFromLastChange = function _AuditEngagement_guardAgainstStatusDifferentFromLastChange() {
+    const statusHistory = __classPrivateFieldGet(this, _AuditEngagement_statusHistory, "f").toPrimitives();
+    const lastChange = statusHistory[statusHistory.length - 1];
+    if (lastChange.status !== __classPrivateFieldGet(this, _AuditEngagement_status, "f").toEnum()) {
+        throw InvalidPropertyValueError_1.InvalidPropertyValueError.create('status', `the status of the last history entry (${lastChange.status})`, __classPrivateFieldGet(this, _AuditEngagement_status, "f").toEnum());
+    }
+}, _AuditEngagement_guardAgainstActiveWithoutIndependenceDeclaration = function _AuditEngagement_guardAgainstActiveWithoutIndependenceDeclaration() {
+    if (__classPrivateFieldGet(this, _AuditEngagement_status, "f").isActive() && __classPrivateFieldGet(this, _AuditEngagement_independenceDeclaration, "f").hasValue() === false) {
+        throw InvalidPropertyValueError_1.InvalidPropertyValueError.create('independenceDeclaration', 'the declaration signed by the auditor when the engagement is ACTIVE', 'null');
+    }
+};
+// D14: the carbon client assigns its auditor; the host can do it on its behalf
+AuditEngagement.ALLOWED_ASSIGNER_ROLES = [
+    StakeholderRole_1.StakeholderRole.CARBON_CLIENT,
+    StakeholderRole_1.StakeholderRole.CARBON_HOST,
+];
+AuditEngagement.REPLACEABLE_STATUSES = [
+    AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE,
+    AuditEngagementStatus_1.AuditEngagementStatus.ACTIVE,
+];
+AuditEngagement.SUSPENDABLE_STATUSES = [
+    AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE,
+    AuditEngagementStatus_1.AuditEngagementStatus.ACTIVE,
+];
+// Footprints can change while the auditor can still work on the engagement (E13)
+AuditEngagement.FOOTPRINTS_CHANGEABLE_STATUSES = [
+    AuditEngagementStatus_1.AuditEngagementStatus.PENDING_ACCEPTANCE,
+    AuditEngagementStatus_1.AuditEngagementStatus.ACTIVE,
+];

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/entity/IAuditEngagement.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/enums/AuditEngagementStatus.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEngagementStatus = void 0;
+/**
+ * Audit engagement status enumeration (AUD-D05)
+ * Lifecycle of the engagement between a carbon client and the carbon auditor who verifies its
+ * carbon footprints. Only ACTIVE grants access, and only within the validity window
+ * (`AuditEngagementAccessPolicy`).
+ */
+var AuditEngagementStatus;
+(function (AuditEngagementStatus) {
+    /**
+     * Assigned by the carbon client (or the host) and waiting for the auditor to accept it
+     */
+    AuditEngagementStatus["PENDING_ACCEPTANCE"] = "PENDING_ACCEPTANCE";
+    /**
+     * Accepted with the independence declaration: the auditor can read the audited footprints
+     */
+    AuditEngagementStatus["ACTIVE"] = "ACTIVE";
+    /**
+     * Declined by the auditor, with a reason visible to the carbon client and the host
+     */
+    AuditEngagementStatus["DECLINED"] = "DECLINED";
+    /**
+     * The carbon client assigned another auditor for the same purchase contract
+     */
+    AuditEngagementStatus["REPLACED"] = "REPLACED";
+    /**
+     * The last day of the purchase contract ended
+     */
+    AuditEngagementStatus["EXPIRED"] = "EXPIRED";
+    /**
+     * The purchase contract was suspended
+     */
+    AuditEngagementStatus["SUSPENDED"] = "SUSPENDED";
+    /**
+     * Revoked: the purchase contract was cancelled, the auditor account was deactivated or the host revoked it
+     */
+    AuditEngagementStatus["REVOKED"] = "REVOKED";
+})(AuditEngagementStatus || (exports.AuditEngagementStatus = AuditEngagementStatus = {}));

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/exceptions/AuditEngagementInvalidStatusTransitionError.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEngagementInvalidStatusTransitionError = void 0;
+const CodedRootError_1 = require("../../../../shared/domain/exceptions/CodedRootError");
+const ErrorCode_1 = require("../../../../shared/domain/enums/ErrorCode");
+/**
+ * The action is not allowed in the current status of the audit engagement (for example, accepting
+ * an engagement that was already replaced).
+ */
+class AuditEngagementInvalidStatusTransitionError extends CodedRootError_1.CodedRootError {
+    constructor(currentStatus, action) {
+        const technicalMessage = `Cannot ${action} an audit engagement in status ${currentStatus}.`;
+        const context = {
+            currentStatus,
+            action,
+            timestamp: new Date().toISOString(),
+        };
+        const suggestions = [
+            'Reload the audit engagement to see its current status',
+            'Only PENDING_ACCEPTANCE engagements can be accepted or declined',
+            'Engagements that were declined, replaced, expired or revoked cannot change anymore',
+        ];
+        super(ErrorCode_1.ErrorCode.AUDIT_ENGAGEMENT_INVALID_STATUS_TRANSITION, technicalMessage, context, suggestions);
+        this.name = 'AuditEngagementInvalidStatusTransitionError';
+    }
+    static create(currentStatus, action) {
+        return new AuditEngagementInvalidStatusTransitionError(currentStatus, action);
+    }
+    logError() {
+        return `${this.name}: ${this.technicalMessage}`;
+    }
+}
+exports.AuditEngagementInvalidStatusTransitionError = AuditEngagementInvalidStatusTransitionError;

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/exceptions/AuditEngagementNotActiveError.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEngagementNotActiveError = void 0;
+const CodedRootError_1 = require("../../../../shared/domain/exceptions/CodedRootError");
+const ErrorCode_1 = require("../../../../shared/domain/enums/ErrorCode");
+/**
+ * The audit engagement does not grant access at this moment: it is not ACTIVE or the moment is
+ * outside its validity window (`AuditEngagementAccessPolicy`, scenario E24). The validity end is
+ * part of the message so the auditor knows when the access ended.
+ */
+class AuditEngagementNotActiveError extends CodedRootError_1.CodedRootError {
+    constructor(auditEngagementId, validTo) {
+        const technicalMessage = `The audit engagement '${auditEngagementId}' does not grant access. Its access ends on ${validTo}.`;
+        const context = {
+            auditEngagementId,
+            validTo,
+            timestamp: new Date().toISOString(),
+        };
+        const suggestions = [
+            'Go back to your audit engagements to see the ones in force',
+            'Ask the carbon client to renew the auditor service if the audit is not finished',
+        ];
+        super(ErrorCode_1.ErrorCode.AUDIT_ENGAGEMENT_NOT_ACTIVE, technicalMessage, context, suggestions);
+        this.name = 'AuditEngagementNotActiveError';
+    }
+    static create(auditEngagementId, validTo) {
+        return new AuditEngagementNotActiveError(auditEngagementId, validTo);
+    }
+    logError() {
+        return `${this.name}: ${this.technicalMessage}`;
+    }
+}
+exports.AuditEngagementNotActiveError = AuditEngagementNotActiveError;

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/exceptions/AuditEngagementNotAssignedToCarbonAuditorError.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditEngagementNotAssignedToCarbonAuditorError = void 0;
+const CodedRootError_1 = require("../../../../shared/domain/exceptions/CodedRootError");
+const ErrorCode_1 = require("../../../../shared/domain/enums/ErrorCode");
+/**
+ * Only the carbon auditor assigned to the engagement can accept or decline it.
+ * The message never names the assigned auditor.
+ */
+class AuditEngagementNotAssignedToCarbonAuditorError extends CodedRootError_1.CodedRootError {
+    constructor(auditEngagementId, action) {
+        const technicalMessage = `Only the carbon auditor assigned to the audit engagement '${auditEngagementId}' can ${action} it.`;
+        const context = {
+            auditEngagementId,
+            action,
+            timestamp: new Date().toISOString(),
+        };
+        const suggestions = [
+            'Sign in with the account the invitation was sent to',
+        ];
+        super(ErrorCode_1.ErrorCode.AUDIT_ENGAGEMENT_NOT_ASSIGNED_TO_CARBON_AUDITOR, technicalMessage, context, suggestions);
+        this.name = 'AuditEngagementNotAssignedToCarbonAuditorError';
+    }
+    static create(auditEngagementId, action) {
+        return new AuditEngagementNotAssignedToCarbonAuditorError(auditEngagementId, action);
+    }
+    logError() {
+        return `${this.name}: ${this.technicalMessage}`;
+    }
+}
+exports.AuditEngagementNotAssignedToCarbonAuditorError = AuditEngagementNotAssignedToCarbonAuditorError;

package/build/carbonbox/carbon-footprint-audits/audit-engagements/domain/exceptions/InvalidAuditEngagementStatusError.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidAuditEngagementStatusError = void 0;
+const CodedRootError_1 = require("../../../../shared/domain/exceptions/CodedRootError");
+const ErrorCode_1 = require("../../../../shared/domain/enums/ErrorCode");
+/**
+ * The status of an audit engagement is not a value of AuditEngagementStatus.
+ */
+class InvalidAuditEngagementStatusError extends CodedRootError_1.CodedRootError {
+    constructor(invalidStatus, validStatuses) {
+        const technicalMessage = `Invalid audit engagement status: '${invalidStatus}'. Valid statuses: ${validStatuses.join(', ')}.`;
+        const context = {
+            invalidStatus,
+            validStatuses: Array.from(validStatuses),
+            timestamp: new Date().toISOString(),
+        };
+        const suggestions = [
+            `Use one of: ${validStatuses.join(', ')}`,
+            'The status changes through the engagement transitions, not directly',
+        ];
+        super(ErrorCode_1.ErrorCode.INVALID_AUDIT_ENGAGEMENT_STATUS, technicalMessage, context, suggestions);
+        this.name = 'InvalidAuditEngagementStatusError';
+    }
+    static create(invalidStatus, validStatuses) {
+        return new InvalidAuditEngagementStatusError(invalidStatus, validStatuses);
+    }
+    logError() {
+        return `${this.name}: ${this.technicalMessage}`;
+    }
+}
+exports.InvalidAuditEngagementStatusError = InvalidAuditEngagementStatusError;