@i4e/invest4edu-access-core 0.39.0 → 0.40.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@i4e/invest4edu-access-core",
-  "version": "0.39.0",
+  "version": "0.40.0",
   "description": "Shared access-control primitives for NeoFindesk: tenant keystone, role capabilities, reportee tree, entity/role vocabulary, mobile app identity, feature flags, and the unified access engine (registry schema, snapshot resolver, visibleWhen).",
   "type": "module",
   "exports": {

package/src/client-profile/index.js

@@ -79,3 +79,4 @@ export {
   effectivePolicyFor,
   changedFields,
 } from "./field-policy.js";
+export { UCC_RULE_NAME_OF_CLIENT_FIELD, uccFieldsTouched, uccSyncedRuleNames } from "./ucc-followup.js";

package/src/client-profile/settings.js

@@ -124,6 +124,15 @@ export const DEFAULT_CLIENT_PROFILE_SETTINGS = deepFreeze({
   change_request: {
     ttl_minutes: 10,
   },
+  corrections: {
+    // Details a client cannot change in the app; asking sends their RM a WhatsApp and an email.
+    fields: ["client_name", "pan_card_no", "primary_mobile"],
+  },
+  ucc_followup: {
+    // A client's app edit to one of this product's UCC fields is never pushed to BSE by the client:
+    // the profile is flagged for backoffice / the RM to run the UCC update (uccfieldrules).
+    product_code: "mf",
+  },
   goals: {
     partner_goal_requires_approval: true,
     corporate_goals_stay_with_corporate: true,
@@ -138,6 +147,8 @@ export const DEFAULT_CLIENT_PROFILE_SETTINGS = deepFreeze({
     goal_rejected: "client.goal.rejected",
     goal_share_requested: "client.goal.share_requested",
     goals_share_requested: "client.goals.share_requested",
+    profile_correction_requested: "client.profile.correction_requested",
+    ucc_update_pending: "client.profile.ucc_update_pending",
     goal_shared: "client.goal.shared",
     goal_share_revoked: "client.goal.revoked",
     relationship_attached: "client.relationship.attached",
@@ -202,6 +213,8 @@ export const CLIENT_PROFILE_SETTING_DESCRIPTIONS = Object.freeze({
   "field_lock.lock_requires_kyc_verified": "The personal lock starts only once KYC is verified.",
   "field_lock.lock_requires_ucc": "The personal lock starts only once a UCC exists.",
   "change_request.ttl_minutes": "Minutes a corporate change request waits for the client's OTP.",
+  "corrections.fields": "Details a client asks their RM to correct (WhatsApp + email to the RM), never edits in the app.",
+  "ucc_followup.product_code": "Product whose UCC field rules (uccfieldrules) decide which client edits flag the profile for a UCC update.",
   "goals.partner_goal_requires_approval": "Goals added by partners or employees wait for the client's approval.",
   "goals.corporate_goals_stay_with_corporate": "Corporate-profile goals are never shown to main-profile partners.",
   "events.profile_change_requested": "Event name: a corporate change was sent to the client.",
@@ -212,6 +225,8 @@ export const CLIENT_PROFILE_SETTING_DESCRIPTIONS = Object.freeze({
   "events.goal_approved": "Event name: the client approved a goal.",
   "events.goal_rejected": "Event name: the client rejected a goal.",
   "events.goal_share_requested": "Event name: a partner asked to see a goal.",
+  "events.profile_correction_requested": "Event name: a client asked their RM to correct a detail they cannot edit.",
+  "events.ucc_update_pending": "Event name: a client changed UCC details in the app; backoffice / the RM must run the UCC update.",
   "events.goals_share_requested": "Event name: a partner asked the client to share their goals (no goal named — R16).",
   "events.goal_shared": "Event name: the client shared a goal with a partner.",
   "events.goal_share_revoked": "Event name: the client stopped sharing a goal.",

package/src/client-profile/ucc-followup.js

@@ -0,0 +1,45 @@
+/**
+ * UCC follow-up — which of a client's own app edits leave their UCC (BSE) out of date.
+ *
+ * A client never pushes to BSE from the app. When they change a detail the product's UCC field
+ * rules (`uccfieldrules`, one document per product) mark as synced to the UCC, the profile is
+ * flagged instead, and backoffice or the RM runs the UCC update from the web.
+ *
+ * Pure: the backend loads the rules document and applies the result.
+ */
+
+/**
+ * The rules name a client's contact lists by their UCC meaning; the client record by its field.
+ * A data-model fact, not configuration — the two names never diverge per environment.
+ */
+export const UCC_RULE_NAME_OF_CLIENT_FIELD = Object.freeze({
+  phone_list: "mobile",
+  email_list: "email",
+});
+
+/** Rule names a client edit can leave out of date: warn-locked fields synced to the UCC, and
+ *  collections (bank, nominees) whose tagged entries warn on edit. */
+export function uccSyncedRuleNames(rules) {
+  if (!rules || rules.is_active === false) return [];
+  const fields = Object.entries(rules.fields ?? {})
+    .filter(([, rule]) => rule && rule.lock === "warn" && rule.syncEndpoint)
+    .map(([name]) => name);
+  const collections = Object.entries(rules.collections ?? {})
+    .filter(([, rule]) => rule && rule.edit_tagged === "warn")
+    .map(([name]) => name);
+  return [...new Set([...fields, ...collections])];
+}
+
+/**
+ * Of the client fields an edit touched, the ones that leave the UCC out of date — by the rule
+ * name backoffice will recognise ("mobile", not "phone_list").
+ */
+export function uccFieldsTouched(touchedClientFields, rules) {
+  const synced = new Set(uccSyncedRuleNames(rules));
+  const out = new Set();
+  for (const field of touchedClientFields ?? []) {
+    const ruleName = UCC_RULE_NAME_OF_CLIENT_FIELD[field] ?? field;
+    if (synced.has(ruleName)) out.add(ruleName);
+  }
+  return [...out];
+}