fase(9): auth module with casl rbac and session management

dist/modules/auth/domain/value-objects/Email.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Email = void 0;
+const ValueObject_1 = require("../../../../shared/domain/ValueObject");
+class Email extends ValueObject_1.ValueObject {
+    static create(value) {
+        const normalized = value.trim().toLowerCase();
+        if (!Email.EMAIL_REGEX.test(normalized)) {
+            throw new Error(`Invalid email address: ${value}`);
+        }
+        return new Email({ value: normalized });
+    }
+    get value() {
+        return this.props.value;
+    }
+}
+exports.Email = Email;
+Email.EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;

dist/modules/auth/domain/value-objects/Permission.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Permission = void 0;
+const ValueObject_1 = require("../../../../shared/domain/ValueObject");
+class Permission extends ValueObject_1.ValueObject {
+    static create(action, subject) {
+        return new Permission({ action, subject });
+    }
+    get action() { return this.props.action; }
+    get subject() { return this.props.subject; }
+}
+exports.Permission = Permission;

dist/modules/auth/domain/value-objects/Role.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Role = void 0;
+const ValueObject_1 = require("../../../../shared/domain/ValueObject");
+class Role extends ValueObject_1.ValueObject {
+    static create(value) {
+        if (!Role.VALID_ROLES.includes(value)) {
+            throw new Error(`Invalid role: ${value}. Must be one of: ${Role.VALID_ROLES.join(', ')}`);
+        }
+        return new Role({ value: value });
+    }
+    static owner() { return new Role({ value: 'owner' }); }
+    static admin() { return new Role({ value: 'admin' }); }
+    static member() { return new Role({ value: 'member' }); }
+    static viewer() { return new Role({ value: 'viewer' }); }
+    get value() {
+        return this.props.value;
+    }
+    isOwner() { return this.props.value === 'owner'; }
+    isAdmin() { return this.props.value === 'admin'; }
+    isMember() { return this.props.value === 'member'; }
+    isViewer() { return this.props.value === 'viewer'; }
+}
+exports.Role = Role;
+Role.OWNER = 'owner';
+Role.ADMIN = 'admin';
+Role.MEMBER = 'member';
+Role.VIEWER = 'viewer';
+Role.VALID_ROLES = ['owner', 'admin', 'member', 'viewer'];