Feature: Capofila

packages/agreement-outbound-writer/package.json

@@ -29,7 +29,7 @@
     "vitest": "1.6.0"
   },
   "dependencies": {
-    "@pagopa/interop-outbound-models": "1.0.10",
+    "@pagopa/interop-outbound-models": "1.0.11a",
     "@protobuf-ts/runtime": "2.9.4",
     "connection-string": "4.4.0",
     "dotenv-flow": "4.1.0",
@@ -40,4 +40,4 @@
     "ts-pattern": "5.2.0",
     "zod": "3.23.8"
   }
-}
+}

packages/agreement-process/src/model/domain/agreement-validators.ts

@@ -156,6 +156,64 @@ export const assertRequesterIsConsumerOrProducer = (
   }
 };
 
+export const assertRequesterIsConsumerOrProducerOrDelegate = async (
+  agreement: Agreement,
+  authData: AuthData,
+  readModelService: ReadModelService
+): Promise<void> => {
+  try {
+    assertRequesterIsConsumer(agreement, authData);
+  } catch (error) {
+    try {
+      assertRequesterIsProducer(agreement, authData);
+    } catch (error) {
+      const delegation = await readModelService.getDelegationByDelegateId(
+        authData.organizationId
+      );
+      assertRequesterIsDelegate(delegation?.data.delegateId, authData);
+    }
+  }
+};
+
+export const assertRequesterIsProducerOrDelegate = (
+  agreement: Agreement,
+  delegateIdActiveDelegation: TenantId | undefined,
+  authData: AuthData
+): void => {
+  if (delegateIdActiveDelegation) {
+    assertRequesterIsDelegate(delegateIdActiveDelegation, authData);
+  } else {
+    assertRequesterIsProducer(agreement, authData);
+  }
+};
+
+export const assertRequesterIsDelegate = (
+  delegateId: TenantId | undefined,
+  authData: AuthData
+): void => {
+  if (authData.organizationId !== delegateId) {
+    throw operationNotAllowed(authData.organizationId);
+  }
+};
+
+export const assertRequesterCanActivate = (
+  agreement: Agreement,
+  delegateIdActiveDelegation: TenantId | undefined,
+  authData: AuthData
+): void => {
+  try {
+    assertRequesterIsConsumer(agreement, authData);
+  } catch (e) {
+    if (delegateIdActiveDelegation) {
+      assertRequesterIsDelegate(delegateIdActiveDelegation, authData);
+    } else {
+      assertRequesterIsProducer(agreement, authData);
+    }
+  }
+};
+
+export const assertRequesterCanSuspend = assertRequesterCanActivate;
+
 export const assertSubmittableState = (
   state: AgreementState,
   agreementId: AgreementId
@@ -207,8 +265,15 @@ const validateLatestDescriptor = (
   descriptorId: DescriptorId,
   allowedStates: DescriptorState[]
 ): Descriptor => {
+  const activeDescriptorStates: DescriptorState[] = [
+    descriptorState.archived,
+    descriptorState.deprecated,
+    descriptorState.published,
+    descriptorState.suspended,
+  ];
+
   const recentActiveDescriptors = eservice.descriptors
-    .filter((d) => d.state !== descriptorState.draft)
+    .filter((d) => activeDescriptorStates.includes(d.state))
     .sort((a, b) => Number(b.version) - Number(a.version));
 
   if (

packages/agreement-process/src/services/agreementActivationProcessor.ts

@@ -9,6 +9,7 @@ import {
   Descriptor,
   EService,
   Tenant,
+  TenantId,
   UserId,
   agreementState,
   genericError,
@@ -47,6 +48,7 @@ export function createActivationUpdateAgreementSeed({
   suspendedByConsumer,
   suspendedByProducer,
   suspendedByPlatform,
+  delegateId,
 }: {
   isFirstActivation: boolean;
   newState: AgreementState;
@@ -58,8 +60,9 @@ export function createActivationUpdateAgreementSeed({
   suspendedByConsumer: boolean | undefined;
   suspendedByProducer: boolean | undefined;
   suspendedByPlatform: boolean | undefined;
+  delegateId?: TenantId | undefined;
 }): UpdateAgreementSeed {
-  const stamp = createStamp(authData.userId);
+  const stamp = createStamp(authData.userId, delegateId);
 
   return isFirstActivation
     ? {
@@ -113,7 +116,8 @@ export async function createActivationEvent(
   suspendedByPlatformChanged: boolean,
   agreementEventStoreVersion: number,
   authData: AuthData,
-  correlationId: CorrelationId
+  correlationId: CorrelationId,
+  delegateId?: TenantId
 ): Promise<Array<CreateEvent<AgreementEventV2>>> {
   if (isFirstActivation) {
     // Pending >>> Active
@@ -150,30 +154,41 @@ export async function createActivationEvent(
       we also create the corresponding suspension/unsuspension by platform event.
     */
 
-    return match([authData.organizationId, updatedAgreement.state])
-      .with([updatedAgreement.producerId, agreementState.active], () => [
-        toCreateEventAgreementUnsuspendedByProducer(
-          updatedAgreement,
-          agreementEventStoreVersion,
-          correlationId
-        ),
-      ])
-      .with([updatedAgreement.producerId, agreementState.suspended], () => [
-        toCreateEventAgreementUnsuspendedByProducer(
-          {
-            ...updatedAgreement,
-            suspendedByPlatform: originalSuspendedByPlatform,
-          },
-          agreementEventStoreVersion,
-          correlationId
-        ),
-        ...maybeCreateSuspensionByPlatformEvents(
-          updatedAgreement,
-          suspendedByPlatformChanged,
-          agreementEventStoreVersion + 1,
-          correlationId
-        ),
-      ])
+    return match<[TenantId | undefined, AgreementState]>([
+      authData.organizationId,
+      updatedAgreement.state,
+    ])
+      .with(
+        [updatedAgreement.producerId, agreementState.active],
+        [delegateId, agreementState.active],
+        () => [
+          toCreateEventAgreementUnsuspendedByProducer(
+            updatedAgreement,
+            agreementEventStoreVersion,
+            correlationId
+          ),
+        ]
+      )
+      .with(
+        [updatedAgreement.producerId, agreementState.suspended],
+        [delegateId, agreementState.suspended],
+        () => [
+          toCreateEventAgreementUnsuspendedByProducer(
+            {
+              ...updatedAgreement,
+              suspendedByPlatform: originalSuspendedByPlatform,
+            },
+            agreementEventStoreVersion,
+            correlationId
+          ),
+          ...maybeCreateSuspensionByPlatformEvents(
+            updatedAgreement,
+            suspendedByPlatformChanged,
+            agreementEventStoreVersion + 1,
+            correlationId
+          ),
+        ]
+      )
       .with([updatedAgreement.consumerId, agreementState.active], () => [
         toCreateEventAgreementUnsuspendedByConsumer(
           updatedAgreement,

packages/agreement-process/src/services/agreementService.ts

@@ -37,6 +37,7 @@ import {
   unsafeBrandId,
   CompactTenant,
   CorrelationId,
+  Delegation,
 } from "pagopa-interop-models";
 import {
   declaredAttributesSatisfied,
@@ -87,9 +88,11 @@ import {
   assertActivableState,
   assertCanWorkOnConsumerDocuments,
   assertExpectedState,
+  assertRequesterCanActivate,
+  assertRequesterCanSuspend,
   assertRequesterIsConsumer,
-  assertRequesterIsConsumerOrProducer,
-  assertRequesterIsProducer,
+  assertRequesterIsConsumerOrProducerOrDelegate,
+  assertRequesterIsProducerOrDelegate,
   assertSubmittableState,
   failOnActivationFailure,
   matchingCertifiedAttributes,
@@ -172,6 +175,18 @@ export const retrieveTenant = async (
   return tenant;
 };
 
+export const retrieveDelegationByDelegateId = async (
+  delegateId: TenantId,
+  readModelService: ReadModelService
+): Promise<WithMetadata<Delegation> | undefined> =>
+  await readModelService.getDelegationByDelegateId(delegateId);
+
+export const retrieveActiveDelegationByEserviceId = async (
+  eserviceId: EServiceId,
+  readModelService: ReadModelService
+): Promise<WithMetadata<Delegation> | undefined> =>
+  await readModelService.getActiveDelegationByEserviceId(eserviceId);
+
 const retrieveDescriptor = (
   descriptorId: DescriptorId,
   eservice: EService
@@ -401,10 +416,17 @@ export function agreementServiceBuilder(
         readModelService
       );
 
+      const activeDelegation = await retrieveActiveDelegationByEserviceId(
+        agreement.data.eserviceId,
+        readModelService
+      );
+      const delegateId = activeDelegation?.data.delegateId;
+
       const nextStateByAttributes = nextStateByAttributesFSM(
         agreement.data,
         descriptor,
-        consumer
+        consumer,
+        delegateId
       );
 
       const suspendedByPlatform = suspendedByPlatformFlag(
@@ -757,7 +779,12 @@ export function agreementServiceBuilder(
         `Retrieving consumer document ${documentId} from agreement ${agreementId}`
       );
       const agreement = await retrieveAgreement(agreementId, readModelService);
-      assertRequesterIsConsumerOrProducer(agreement.data, authData);
+
+      await assertRequesterIsConsumerOrProducerOrDelegate(
+        agreement.data,
+        authData,
+        readModelService
+      );
 
       return retrieveAgreementDocument(agreement.data, documentId);
     },
@@ -768,8 +795,14 @@ export function agreementServiceBuilder(
       logger.info(`Suspending agreement ${agreementId}`);
 
       const agreement = await retrieveAgreement(agreementId, readModelService);
+      const activeDelegation = await retrieveActiveDelegationByEserviceId(
+        agreement.data.eserviceId,
+        readModelService
+      );
+
+      const delegateId = activeDelegation?.data.delegateId;
 
-      assertRequesterIsConsumerOrProducer(agreement.data, authData);
+      assertRequesterCanSuspend(agreement.data, delegateId, authData);
 
       assertExpectedState(
         agreementId,
@@ -797,14 +830,16 @@ export function agreementServiceBuilder(
         authData,
         descriptor,
         consumer,
+        delegateId,
       });
 
       await repository.createEvent(
         createAgreementSuspendedEvent(
           authData.organizationId,
           correlationId,
           updatedAgreement,
-          agreement
+          agreement,
+          delegateId
         )
       );
 
@@ -873,8 +908,17 @@ export function agreementServiceBuilder(
         agreementId,
         readModelService
       );
+      const activeDelegation = await retrieveActiveDelegationByEserviceId(
+        agreementToBeRejected.data.eserviceId,
+        readModelService
+      );
+      const delegateId = activeDelegation?.data.delegateId;
 
-      assertRequesterIsProducer(agreementToBeRejected.data, authData);
+      assertRequesterIsProducerOrDelegate(
+        agreementToBeRejected.data,
+        delegateId,
+        authData
+      );
 
       assertExpectedState(
         agreementId,
@@ -913,7 +957,7 @@ export function agreementServiceBuilder(
         suspendedByPlatform: undefined,
         stamps: {
           ...agreementToBeRejected.data.stamps,
-          rejection: createStamp(authData.userId),
+          rejection: createStamp(authData.userId, delegateId),
         },
       };
 
@@ -943,8 +987,15 @@ export function agreementServiceBuilder(
       );
 
       const agreement = await retrieveAgreement(agreementId, readModelService);
+      const activeDelegation = await retrieveActiveDelegationByEserviceId(
+        agreement.data.eserviceId,
+        readModelService
+      );
+
+      const delegateId = activeDelegation?.data.delegateId;
+
+      assertRequesterCanActivate(agreement.data, delegateId, authData);
 
-      assertRequesterIsConsumerOrProducer(agreement.data, authData);
       verifyConsumerDoesNotActivatePending(agreement.data, authData);
       assertActivableState(agreement.data);
 
@@ -1036,6 +1087,7 @@ export function agreementServiceBuilder(
           suspendedByConsumer,
           suspendedByProducer,
           suspendedByPlatform,
+          delegateId,
         });
 
       const updatedAgreementWithoutContract: Agreement = {
@@ -1063,7 +1115,8 @@ export function agreementServiceBuilder(
         suspendedByPlatformChanged,
         agreement.metadata.version,
         authData,
-        correlationId
+        correlationId,
+        delegateId
       );
 
       const archiveEvents = await archiveRelatedToAgreements(