@carbonbox/domain 0.3.3 → 0.3.5

package/build/carbonbox/shared/domain/authorization/contracts/IAuthorizationPolicy.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/shared/domain/authorization/contracts/IPermissionSpecification.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/shared/domain/authorization/enums/AuthorizationDecision.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationDecision = void 0;
+var AuthorizationDecision;
+(function (AuthorizationDecision) {
+    AuthorizationDecision["PERMIT"] = "PERMIT";
+    AuthorizationDecision["DENY"] = "DENY";
+    AuthorizationDecision["NOT_APPLICABLE"] = "NOT_APPLICABLE";
+})(AuthorizationDecision || (exports.AuthorizationDecision = AuthorizationDecision = {}));

package/build/carbonbox/shared/domain/authorization/enums/Permission.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Permission = void 0;
+var Permission;
+(function (Permission) {
+    // System Administration
+    Permission["CAN_ACCESS_ALL_MODULES"] = "CAN_ACCESS_ALL_MODULES";
+    Permission["CAN_MANAGE_SYSTEM_CONFIGURATION"] = "CAN_MANAGE_SYSTEM_CONFIGURATION";
+    // User Management
+    Permission["CAN_MANAGE_ALL_USERS"] = "CAN_MANAGE_ALL_USERS";
+    Permission["CAN_MANAGE_COMPANIES"] = "CAN_MANAGE_COMPANIES";
+    Permission["CAN_ASSIGN_HOST_MANAGERS"] = "CAN_ASSIGN_HOST_MANAGERS";
+    Permission["CAN_ASSIGN_COORDINATORS"] = "CAN_ASSIGN_COORDINATORS";
+    Permission["CAN_ASSIGN_COMPANIES_TO_HOST_MANAGERS"] = "CAN_ASSIGN_COMPANIES_TO_HOST_MANAGERS";
+    Permission["CAN_ASSIGN_COMPANIES_TO_COORDINATORS"] = "CAN_ASSIGN_COMPANIES_TO_COORDINATORS";
+    // Carbon Footprint Configuration
+    Permission["CAN_MANAGE_CORPORATE_CARBON_FOOTPRINT_CONFIGURATIONS"] = "CAN_MANAGE_CORPORATE_CARBON_FOOTPRINT_CONFIGURATIONS";
+    Permission["CAN_MANAGE_CORPORATE_SEGMENT_CONFIGURATIONS"] = "CAN_MANAGE_CORPORATE_SEGMENT_CONFIGURATIONS";
+    Permission["CAN_MANAGE_EVENT_CARBON_FOOTPRINT_CONFIGURATIONS"] = "CAN_MANAGE_EVENT_CARBON_FOOTPRINT_CONFIGURATIONS";
+    Permission["CAN_MANAGE_EVENT_LIFECYCLE_STAGE_CONFIGURATIONS"] = "CAN_MANAGE_EVENT_LIFECYCLE_STAGE_CONFIGURATIONS";
+    Permission["CAN_MANAGE_PRODUCT_CARBON_FOOTPRINT_CONFIGURATIONS"] = "CAN_MANAGE_PRODUCT_CARBON_FOOTPRINT_CONFIGURATIONS";
+    Permission["CAN_MANAGE_PRODUCT_SEGMENT_CONFIGURATIONS"] = "CAN_MANAGE_PRODUCT_SEGMENT_CONFIGURATIONS";
+    Permission["CAN_MANAGE_PRODUCT_SYSTEM_BOUNDARIES"] = "CAN_MANAGE_PRODUCT_SYSTEM_BOUNDARIES";
+    Permission["CAN_MANAGE_INTENSITY_INDICATORS"] = "CAN_MANAGE_INTENSITY_INDICATORS";
+    // Activity Data Collection
+    Permission["CAN_MANAGE_COLLECTION_FIELDS"] = "CAN_MANAGE_COLLECTION_FIELDS";
+    Permission["CAN_MANAGE_DYNAMIC_FORMS"] = "CAN_MANAGE_DYNAMIC_FORMS";
+    Permission["CAN_MANAGE_CONDITIONAL_LOGIC"] = "CAN_MANAGE_CONDITIONAL_LOGIC";
+    Permission["CAN_MANAGE_CONTEXTUAL_LABELS"] = "CAN_MANAGE_CONTEXTUAL_LABELS";
+    Permission["CAN_MANAGE_STAKEHOLDER_ADAPTATIONS"] = "CAN_MANAGE_STAKEHOLDER_ADAPTATIONS";
+    Permission["CAN_MANAGE_ACTIVITY_DATA_SUBMISSIONS"] = "CAN_MANAGE_ACTIVITY_DATA_SUBMISSIONS";
+    Permission["CAN_APPROVE_ACTIVITY_DATA_SUBMISSIONS"] = "CAN_APPROVE_ACTIVITY_DATA_SUBMISSIONS";
+    Permission["CAN_REJECT_ACTIVITY_DATA_SUBMISSIONS"] = "CAN_REJECT_ACTIVITY_DATA_SUBMISSIONS";
+    // Emission Calculation Formula
+    Permission["CAN_MANAGE_FORMULAS"] = "CAN_MANAGE_FORMULAS";
+    Permission["CAN_MANAGE_EMISSION_FACTORS"] = "CAN_MANAGE_EMISSION_FACTORS";
+    Permission["CAN_MANAGE_CALCULATION_VARIABLES"] = "CAN_MANAGE_CALCULATION_VARIABLES";
+    Permission["CAN_MANAGE_CONSTANTS"] = "CAN_MANAGE_CONSTANTS";
+    Permission["CAN_MANAGE_GLOBAL_WARMING_POTENTIALS"] = "CAN_MANAGE_GLOBAL_WARMING_POTENTIALS";
+    // Emission Calculation Process
+    Permission["CAN_MANAGE_CALCULATION_PROCESSES"] = "CAN_MANAGE_CALCULATION_PROCESSES";
+    Permission["CAN_MANAGE_CALCULATION_WORKFLOWS"] = "CAN_MANAGE_CALCULATION_WORKFLOWS";
+    Permission["CAN_MANAGE_CALCULATION_JOBS"] = "CAN_MANAGE_CALCULATION_JOBS";
+    Permission["CAN_EXECUTE_CALCULATION_JOBS"] = "CAN_EXECUTE_CALCULATION_JOBS";
+    Permission["CAN_MONITOR_CALCULATION_PROCESSES"] = "CAN_MONITOR_CALCULATION_PROCESSES";
+    Permission["CAN_CANCEL_CALCULATION_JOBS"] = "CAN_CANCEL_CALCULATION_JOBS";
+    Permission["CAN_RETRY_FAILED_CALCULATIONS"] = "CAN_RETRY_FAILED_CALCULATIONS";
+    // Emission Calculation Results
+    Permission["CAN_VIEW_EMISSION_CALCULATION_RESULTS"] = "CAN_VIEW_EMISSION_CALCULATION_RESULTS";
+    Permission["CAN_MANAGE_EMISSION_CALCULATION_RESULTS"] = "CAN_MANAGE_EMISSION_CALCULATION_RESULTS";
+    Permission["CAN_VIEW_EMISSION_AGGREGATIONS"] = "CAN_VIEW_EMISSION_AGGREGATIONS";
+    Permission["CAN_MANAGE_EMISSION_AGGREGATIONS"] = "CAN_MANAGE_EMISSION_AGGREGATIONS";
+    Permission["CAN_VIEW_GHG_EMISSION_RESULTS"] = "CAN_VIEW_GHG_EMISSION_RESULTS";
+    Permission["CAN_MANAGE_GHG_EMISSION_RESULTS"] = "CAN_MANAGE_GHG_EMISSION_RESULTS";
+    Permission["CAN_EXPORT_CALCULATION_RESULTS"] = "CAN_EXPORT_CALCULATION_RESULTS";
+    Permission["CAN_GENERATE_EMISSION_REPORTS"] = "CAN_GENERATE_EMISSION_REPORTS";
+    // Company Resources
+    Permission["CAN_MANAGE_EVENTS"] = "CAN_MANAGE_EVENTS";
+    Permission["CAN_MANAGE_EVENT_EDITIONS"] = "CAN_MANAGE_EVENT_EDITIONS";
+    Permission["CAN_MANAGE_FACILITIES"] = "CAN_MANAGE_FACILITIES";
+    Permission["CAN_MANAGE_PRODUCTS"] = "CAN_MANAGE_PRODUCTS";
+    Permission["CAN_VIEW_COMPANY_RESOURCES"] = "CAN_VIEW_COMPANY_RESOURCES";
+    // Purchase Management
+    Permission["CAN_VIEW_PURCHASES"] = "CAN_VIEW_PURCHASES";
+    Permission["CAN_CREATE_PURCHASE_ORDERS"] = "CAN_CREATE_PURCHASE_ORDERS";
+    Permission["CAN_UPDATE_PURCHASE_ORDERS"] = "CAN_UPDATE_PURCHASE_ORDERS";
+    Permission["CAN_DELETE_PURCHASE_ORDERS"] = "CAN_DELETE_PURCHASE_ORDERS";
+    Permission["CAN_MANAGE_PURCHASE_CONTRACTS"] = "CAN_MANAGE_PURCHASE_CONTRACTS";
+    Permission["CAN_CONFIGURE_SERVICE_PRICING"] = "CAN_CONFIGURE_SERVICE_PRICING";
+    // Stakeholder Management
+    Permission["CAN_MANAGE_CARBON_CLIENTS"] = "CAN_MANAGE_CARBON_CLIENTS";
+    Permission["CAN_MANAGE_CARBON_COORDINATORS"] = "CAN_MANAGE_CARBON_COORDINATORS";
+    Permission["CAN_MANAGE_CARBON_MANAGERS"] = "CAN_MANAGE_CARBON_MANAGERS";
+    Permission["CAN_MANAGE_CARBON_HOSTS"] = "CAN_MANAGE_CARBON_HOSTS";
+    Permission["CAN_VIEW_STAKEHOLDER_HIERARCHY"] = "CAN_VIEW_STAKEHOLDER_HIERARCHY";
+    Permission["CAN_ASSIGN_STAKEHOLDER_ROLES"] = "CAN_ASSIGN_STAKEHOLDER_ROLES";
+})(Permission || (exports.Permission = Permission = {}));

package/build/carbonbox/shared/domain/authorization/value-objects/PermissionSet.js

@@ -0,0 +1,127 @@
+"use strict";
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var _PermissionSet_instances, _PermissionSet_permissions, _PermissionSet_guardAgainstInvalidPermissionSet, _PermissionSet_guardAgainstInvalidPermissions;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionSet = void 0;
+const InvalidPropertyTypeError_1 = require("../../exceptions/InvalidPropertyTypeError");
+const Permission_1 = require("../enums/Permission");
+const ObjectValueObject_1 = require("../../value-objects/ObjectValueObject");
+class PermissionSet extends ObjectValueObject_1.ObjectValueObject {
+    constructor(value, skipDomainValidation) {
+        super({ permissions: value.permissions }, skipDomainValidation, PermissionSet.PROPERTY_NAME, 'The provided value must be of type PermissionSet from the domain layer', {
+            allowNull: false,
+            allowUndefined: false,
+        });
+        _PermissionSet_instances.add(this);
+        _PermissionSet_permissions.set(this, void 0);
+        if (skipDomainValidation === false) {
+            __classPrivateFieldGet(this, _PermissionSet_instances, "m", _PermissionSet_guardAgainstInvalidPermissionSet).call(this, value);
+        }
+        __classPrivateFieldSet(this, _PermissionSet_permissions, value.permissions, "f");
+    }
+    static create(value) {
+        return new PermissionSet(value, false);
+    }
+    static fromPrimitives(primitive) {
+        const value = {
+            permissions: primitive.permissions,
+        };
+        return new PermissionSet(value, true);
+    }
+    static createFromArray(permissions) {
+        return PermissionSet.create({ permissions });
+    }
+    static empty() {
+        return PermissionSet.create({ permissions: [] });
+    }
+    toPrimitives() {
+        return {
+            permissions: __classPrivateFieldGet(this, _PermissionSet_permissions, "f"),
+        };
+    }
+    get permissions() {
+        return __classPrivateFieldGet(this, _PermissionSet_permissions, "f");
+    }
+    has(permission) {
+        return __classPrivateFieldGet(this, _PermissionSet_permissions, "f").includes(permission);
+    }
+    contains(permission) {
+        return this.has(permission);
+    }
+    hasAny(permissions) {
+        return permissions.some((permission) => this.has(permission));
+    }
+    hasAll(permissions) {
+        return permissions.every((permission) => this.has(permission));
+    }
+    add(permission) {
+        if (this.has(permission)) {
+            return this;
+        }
+        return PermissionSet.create({
+            permissions: [...__classPrivateFieldGet(this, _PermissionSet_permissions, "f"), permission],
+        });
+    }
+    addAll(permissions) {
+        const uniquePermissions = [...new Set([...__classPrivateFieldGet(this, _PermissionSet_permissions, "f"), ...permissions])];
+        return PermissionSet.create({ permissions: uniquePermissions });
+    }
+    remove(permission) {
+        return PermissionSet.create({
+            permissions: __classPrivateFieldGet(this, _PermissionSet_permissions, "f").filter((p) => p !== permission),
+        });
+    }
+    union(other) {
+        return this.addAll(other.permissions);
+    }
+    intersection(other) {
+        const intersectedPermissions = __classPrivateFieldGet(this, _PermissionSet_permissions, "f").filter((permission) => other.has(permission));
+        return PermissionSet.create({ permissions: intersectedPermissions });
+    }
+    difference(other) {
+        const diffPermissions = __classPrivateFieldGet(this, _PermissionSet_permissions, "f").filter((permission) => !other.has(permission));
+        return PermissionSet.create({ permissions: diffPermissions });
+    }
+    isEmpty() {
+        return __classPrivateFieldGet(this, _PermissionSet_permissions, "f").length === 0;
+    }
+    size() {
+        return __classPrivateFieldGet(this, _PermissionSet_permissions, "f").length;
+    }
+    toArray() {
+        return [...__classPrivateFieldGet(this, _PermissionSet_permissions, "f")];
+    }
+    equals(other) {
+        if (this.size() !== other.size()) {
+            return false;
+        }
+        return __classPrivateFieldGet(this, _PermissionSet_permissions, "f").every((permission) => other.has(permission));
+    }
+    toString() {
+        return `PermissionSet(${__classPrivateFieldGet(this, _PermissionSet_permissions, "f").join(', ')})`;
+    }
+}
+exports.PermissionSet = PermissionSet;
+_PermissionSet_permissions = new WeakMap(), _PermissionSet_instances = new WeakSet(), _PermissionSet_guardAgainstInvalidPermissionSet = function _PermissionSet_guardAgainstInvalidPermissionSet(value) {
+    __classPrivateFieldGet(this, _PermissionSet_instances, "m", _PermissionSet_guardAgainstInvalidPermissions).call(this, value.permissions);
+}, _PermissionSet_guardAgainstInvalidPermissions = function _PermissionSet_guardAgainstInvalidPermissions(permissions) {
+    if (!Array.isArray(permissions)) {
+        throw InvalidPropertyTypeError_1.InvalidPropertyTypeError.create('permissionSet.permissions', 'Permission[]', typeof permissions);
+    }
+    permissions.forEach((permission, index) => {
+        if (!Object.values(Permission_1.Permission).includes(permission)) {
+            throw InvalidPropertyTypeError_1.InvalidPropertyTypeError.create(`permissionSet.permissions[${index}]`, 'Permission', typeof permission);
+        }
+    });
+};
+PermissionSet.PROPERTY_NAME = 'permissionSet';

package/build/carbonbox/shared/domain/authorization/value-objects/SecurityContext.js

@@ -0,0 +1,105 @@
+"use strict";
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var _SecurityContext_instances, _SecurityContext_user, _SecurityContext_resource, _SecurityContext_environment, _SecurityContext_guardAgainstInvalidSecurityContext, _SecurityContext_guardAgainstInvalidUser, _SecurityContext_guardAgainstInvalidEnvironment;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityContext = void 0;
+const InvalidPropertyTypeError_1 = require("../../exceptions/InvalidPropertyTypeError");
+const SecurityContextReconstructionError_1 = require("../../exceptions/SecurityContextReconstructionError");
+const ObjectValueObject_1 = require("../../value-objects/ObjectValueObject");
+const DateTimeFormattingDomainService_1 = require("../../services/DateTimeFormattingDomainService");
+class SecurityContext extends ObjectValueObject_1.ObjectValueObject {
+    constructor(value, skipDomainValidation) {
+        const primitives = {
+            user: value.user.toPrimitives,
+            resource: value.resource,
+            environment: value.environment,
+        };
+        super(primitives, skipDomainValidation, SecurityContext.PROPERTY_NAME, 'The provided value must be of type SecurityContext from the domain layer', {
+            allowNull: false,
+            allowUndefined: false,
+        });
+        _SecurityContext_instances.add(this);
+        _SecurityContext_user.set(this, void 0);
+        _SecurityContext_resource.set(this, void 0);
+        _SecurityContext_environment.set(this, void 0);
+        if (skipDomainValidation === false) {
+            __classPrivateFieldGet(this, _SecurityContext_instances, "m", _SecurityContext_guardAgainstInvalidSecurityContext).call(this, value);
+        }
+        __classPrivateFieldSet(this, _SecurityContext_user, value.user, "f");
+        __classPrivateFieldSet(this, _SecurityContext_resource, value.resource, "f");
+        __classPrivateFieldSet(this, _SecurityContext_environment, value.environment, "f");
+    }
+    static create(value) {
+        return new SecurityContext(value, false);
+    }
+    static fromPrimitives(primitive) {
+        throw SecurityContextReconstructionError_1.SecurityContextReconstructionError.create(primitive);
+    }
+    toPrimitives() {
+        return {
+            user: __classPrivateFieldGet(this, _SecurityContext_user, "f").toPrimitives,
+            resource: __classPrivateFieldGet(this, _SecurityContext_resource, "f"),
+            environment: __classPrivateFieldGet(this, _SecurityContext_environment, "f"),
+        };
+    }
+    get user() {
+        return __classPrivateFieldGet(this, _SecurityContext_user, "f");
+    }
+    get resource() {
+        return __classPrivateFieldGet(this, _SecurityContext_resource, "f");
+    }
+    get environment() {
+        return __classPrivateFieldGet(this, _SecurityContext_environment, "f");
+    }
+    static fromUser(user, resource = null) {
+        return SecurityContext.create({
+            user,
+            resource,
+            environment: {
+                timestamp: DateTimeFormattingDomainService_1.DateTimeFormattingDomainService.getCurrentDateTimeString(),
+                ipAddress: null,
+            },
+        });
+    }
+    withResource(resource) {
+        return SecurityContext.create({
+            user: __classPrivateFieldGet(this, _SecurityContext_user, "f"),
+            resource,
+            environment: __classPrivateFieldGet(this, _SecurityContext_environment, "f"),
+        });
+    }
+    equals(other) {
+        return (__classPrivateFieldGet(this, _SecurityContext_resource, "f") === __classPrivateFieldGet(other, _SecurityContext_resource, "f")
+            && __classPrivateFieldGet(this, _SecurityContext_environment, "f")?.timestamp === __classPrivateFieldGet(other, _SecurityContext_environment, "f")?.timestamp
+            && __classPrivateFieldGet(this, _SecurityContext_environment, "f")?.ipAddress === __classPrivateFieldGet(other, _SecurityContext_environment, "f")?.ipAddress);
+    }
+}
+exports.SecurityContext = SecurityContext;
+_SecurityContext_user = new WeakMap(), _SecurityContext_resource = new WeakMap(), _SecurityContext_environment = new WeakMap(), _SecurityContext_instances = new WeakSet(), _SecurityContext_guardAgainstInvalidSecurityContext = function _SecurityContext_guardAgainstInvalidSecurityContext(value) {
+    __classPrivateFieldGet(this, _SecurityContext_instances, "m", _SecurityContext_guardAgainstInvalidUser).call(this, value.user);
+    if (value.environment) {
+        __classPrivateFieldGet(this, _SecurityContext_instances, "m", _SecurityContext_guardAgainstInvalidEnvironment).call(this, value.environment);
+    }
+}, _SecurityContext_guardAgainstInvalidUser = function _SecurityContext_guardAgainstInvalidUser(user) {
+    if (user === null || user === undefined) {
+        throw InvalidPropertyTypeError_1.InvalidPropertyTypeError.create('securityContext.user', 'User', typeof user);
+    }
+}, _SecurityContext_guardAgainstInvalidEnvironment = function _SecurityContext_guardAgainstInvalidEnvironment(environment) {
+    if (typeof environment.timestamp !== 'string') {
+        throw InvalidPropertyTypeError_1.InvalidPropertyTypeError.create('securityContext.environment.timestamp', 'string', typeof environment.timestamp);
+    }
+    if (!DateTimeFormattingDomainService_1.DateTimeFormattingDomainService.isValidDateTime(environment.timestamp)) {
+        throw InvalidPropertyTypeError_1.InvalidPropertyTypeError.create('securityContext.environment.timestamp', 'valid datetime format (DD/MM/YYYY HH:mm:ss)', environment.timestamp);
+    }
+};
+SecurityContext.PROPERTY_NAME = 'securityContext';

package/build/carbonbox/shared/domain/entities/User.js

@@ -10,7 +10,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _User_displayName, _User_avatar, _User_email, _User_password, _User_businessStatus, _User_userType, _User_lastAccessAt;
+var _User_instances, _User_displayName, _User_avatar, _User_email, _User_password, _User_businessStatus, _User_userType, _User_lastAccessAt, _User_permissions, _User_mapPermissionToBoolean;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.User = void 0;
 const UserAvatar_1 = require("../value-objects/UserAvatar");
@@ -22,12 +22,15 @@ const UserLastAccessAt_1 = require("../value-objects/UserLastAccessAt");
 const UserPassword_1 = require("../value-objects/UserPassword");
 const UserType_1 = require("../value-objects/UserType");
 const AggregateRoot_1 = require("./AggregateRoot");
+const Permission_1 = require("../authorization/enums/Permission");
+const UserPermissions_1 = require("../value-objects/UserPermissions");
 class User extends AggregateRoot_1.AggregateRoot {
     constructor(props, skipDomainValidation) {
         const id = skipDomainValidation
             ? UserId_1.UserId.fromPrimitives(props.id).toPrimitives()
             : UserId_1.UserId.create(props.id).toPrimitives();
         super({ id }, skipDomainValidation);
+        _User_instances.add(this);
         _User_displayName.set(this, void 0);
         _User_avatar.set(this, void 0);
         _User_email.set(this, void 0);
@@ -35,6 +38,7 @@ class User extends AggregateRoot_1.AggregateRoot {
         _User_businessStatus.set(this, void 0);
         _User_userType.set(this, void 0);
         _User_lastAccessAt.set(this, void 0);
+        _User_permissions.set(this, void 0);
         if (skipDomainValidation === false) {
             // Initialize with domain validation
             __classPrivateFieldSet(this, _User_displayName, UserDisplayName_1.UserDisplayName.create(props.displayName), "f");
@@ -44,6 +48,7 @@ class User extends AggregateRoot_1.AggregateRoot {
             __classPrivateFieldSet(this, _User_businessStatus, UserBusinessStatus_1.UserBusinessStatus.create(props.businessStatus), "f");
             __classPrivateFieldSet(this, _User_userType, UserType_1.UserType.create(props.userType), "f");
             __classPrivateFieldSet(this, _User_lastAccessAt, UserLastAccessAt_1.UserLastAccessAt.create(props.lastAccessAt), "f");
+            __classPrivateFieldSet(this, _User_permissions, UserPermissions_1.UserPermissions.create(props.permissions), "f");
         }
         else {
             // Initialize from primitives (no domain validation)
@@ -54,6 +59,7 @@ class User extends AggregateRoot_1.AggregateRoot {
             __classPrivateFieldSet(this, _User_businessStatus, UserBusinessStatus_1.UserBusinessStatus.fromPrimitives(props.businessStatus), "f");
             __classPrivateFieldSet(this, _User_userType, UserType_1.UserType.fromPrimitives(props.userType), "f");
             __classPrivateFieldSet(this, _User_lastAccessAt, UserLastAccessAt_1.UserLastAccessAt.fromPrimitives(props.lastAccessAt), "f");
+            __classPrivateFieldSet(this, _User_permissions, UserPermissions_1.UserPermissions.fromPrimitives(props.permissions), "f");
         }
     }
     get displayName() {
@@ -77,6 +83,156 @@ class User extends AggregateRoot_1.AggregateRoot {
     get lastAccessAt() {
         return __classPrivateFieldGet(this, _User_lastAccessAt, "f");
     }
+    get permissions() {
+        return __classPrivateFieldGet(this, _User_permissions, "f");
+    }
+    /**
+     * Verifica si el usuario tiene un permiso específico.
+     * Mapea los enum Permission a las propiedades boolean del sistema existente.
+     * @param permission - El permiso a verificar
+     * @returns true si el usuario tiene el permiso, false en caso contrario
+     */
+    hasPermission(permission) {
+        return __classPrivateFieldGet(this, _User_instances, "m", _User_mapPermissionToBoolean).call(this, permission);
+    }
 }
 exports.User = User;
-_User_displayName = new WeakMap(), _User_avatar = new WeakMap(), _User_email = new WeakMap(), _User_password = new WeakMap(), _User_businessStatus = new WeakMap(), _User_userType = new WeakMap(), _User_lastAccessAt = new WeakMap();
+_User_displayName = new WeakMap(), _User_avatar = new WeakMap(), _User_email = new WeakMap(), _User_password = new WeakMap(), _User_businessStatus = new WeakMap(), _User_userType = new WeakMap(), _User_lastAccessAt = new WeakMap(), _User_permissions = new WeakMap(), _User_instances = new WeakSet(), _User_mapPermissionToBoolean = function _User_mapPermissionToBoolean(permission) {
+    const permissions = __classPrivateFieldGet(this, _User_permissions, "f");
+    switch (permission) {
+        // System Administration
+        case Permission_1.Permission.CAN_ACCESS_ALL_MODULES:
+            return permissions.canAccessAllModules ?? false;
+        case Permission_1.Permission.CAN_MANAGE_SYSTEM_CONFIGURATION:
+            return permissions.canManageSystemConfiguration ?? false;
+        // User Management
+        case Permission_1.Permission.CAN_MANAGE_ALL_USERS:
+            return permissions.canManageAllUsers ?? false;
+        case Permission_1.Permission.CAN_MANAGE_COMPANIES:
+            return permissions.canManageCompanies ?? false;
+        case Permission_1.Permission.CAN_ASSIGN_HOST_MANAGERS:
+            return permissions.canAssignHostManagers ?? false;
+        case Permission_1.Permission.CAN_ASSIGN_COORDINATORS:
+            return permissions.canAssignCoordinators ?? false;
+        case Permission_1.Permission.CAN_ASSIGN_COMPANIES_TO_HOST_MANAGERS:
+            return permissions.canAssignCompaniesToHostManagers ?? false;
+        case Permission_1.Permission.CAN_ASSIGN_COMPANIES_TO_COORDINATORS:
+            return permissions.canAssignCompaniesToCoordinators ?? false;
+        // Carbon Footprint Configuration
+        case Permission_1.Permission.CAN_MANAGE_CORPORATE_CARBON_FOOTPRINT_CONFIGURATIONS:
+            return permissions.canManageCorporateCarbonFootprintConfigurations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CORPORATE_SEGMENT_CONFIGURATIONS:
+            return permissions.canManageCorporateSegmentConfigurations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_EVENT_CARBON_FOOTPRINT_CONFIGURATIONS:
+            return permissions.canManageEventCarbonFootprintConfigurations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_EVENT_LIFECYCLE_STAGE_CONFIGURATIONS:
+            return permissions.canManageEventLifecycleStageConfigurations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_PRODUCT_CARBON_FOOTPRINT_CONFIGURATIONS:
+            return permissions.canManageProductCarbonFootprintConfigurations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_PRODUCT_SEGMENT_CONFIGURATIONS:
+            return permissions.canManageProductSegmentConfigurations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_PRODUCT_SYSTEM_BOUNDARIES:
+            return permissions.canManageProductSystemBoundaries ?? false;
+        case Permission_1.Permission.CAN_MANAGE_INTENSITY_INDICATORS:
+            return permissions.canManageIntensityIndicators ?? false;
+        // Activity Data Collection
+        case Permission_1.Permission.CAN_MANAGE_COLLECTION_FIELDS:
+            return permissions.canManageCollectionFields ?? false;
+        case Permission_1.Permission.CAN_MANAGE_DYNAMIC_FORMS:
+            return permissions.canManageDynamicForms ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CONDITIONAL_LOGIC:
+            return permissions.canManageConditionalLogic ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CONTEXTUAL_LABELS:
+            return permissions.canManageContextualLabels ?? false;
+        case Permission_1.Permission.CAN_MANAGE_STAKEHOLDER_ADAPTATIONS:
+            return permissions.canManageStakeholderAdaptations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_ACTIVITY_DATA_SUBMISSIONS:
+            return permissions.canManageActivityDataSubmissions ?? false;
+        case Permission_1.Permission.CAN_APPROVE_ACTIVITY_DATA_SUBMISSIONS:
+            return permissions.canApproveActivityDataSubmissions ?? false;
+        case Permission_1.Permission.CAN_REJECT_ACTIVITY_DATA_SUBMISSIONS:
+            return permissions.canRejectActivityDataSubmissions ?? false;
+        // Emission Calculation Formula
+        case Permission_1.Permission.CAN_MANAGE_FORMULAS:
+            return permissions.canManageFormulas ?? false;
+        case Permission_1.Permission.CAN_MANAGE_EMISSION_FACTORS:
+            return permissions.canManageEmissionFactors ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CALCULATION_VARIABLES:
+            return permissions.canManageCalculationVariables ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CONSTANTS:
+            return permissions.canManageConstants ?? false;
+        case Permission_1.Permission.CAN_MANAGE_GLOBAL_WARMING_POTENTIALS:
+            return permissions.canManageGlobalWarmingPotentials ?? false;
+        // Emission Calculation Process
+        case Permission_1.Permission.CAN_MANAGE_CALCULATION_PROCESSES:
+            return permissions.canManageCalculationProcesses ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CALCULATION_WORKFLOWS:
+            return permissions.canManageCalculationWorkflows ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CALCULATION_JOBS:
+            return permissions.canManageCalculationJobs ?? false;
+        case Permission_1.Permission.CAN_EXECUTE_CALCULATION_JOBS:
+            return permissions.canExecuteCalculationJobs ?? false;
+        case Permission_1.Permission.CAN_MONITOR_CALCULATION_PROCESSES:
+            return permissions.canMonitorCalculationProcesses ?? false;
+        case Permission_1.Permission.CAN_CANCEL_CALCULATION_JOBS:
+            return permissions.canCancelCalculationJobs ?? false;
+        case Permission_1.Permission.CAN_RETRY_FAILED_CALCULATIONS:
+            return permissions.canRetryFailedCalculations ?? false;
+        // Emission Calculation Results
+        case Permission_1.Permission.CAN_VIEW_EMISSION_CALCULATION_RESULTS:
+            return permissions.canViewEmissionCalculationResults ?? false;
+        case Permission_1.Permission.CAN_MANAGE_EMISSION_CALCULATION_RESULTS:
+            return permissions.canManageEmissionCalculationResults ?? false;
+        case Permission_1.Permission.CAN_VIEW_EMISSION_AGGREGATIONS:
+            return permissions.canViewEmissionAggregations ?? false;
+        case Permission_1.Permission.CAN_MANAGE_EMISSION_AGGREGATIONS:
+            return permissions.canManageEmissionAggregations ?? false;
+        case Permission_1.Permission.CAN_VIEW_GHG_EMISSION_RESULTS:
+            return permissions.canViewGHGEmissionResults ?? false;
+        case Permission_1.Permission.CAN_MANAGE_GHG_EMISSION_RESULTS:
+            return permissions.canManageGHGEmissionResults ?? false;
+        case Permission_1.Permission.CAN_EXPORT_CALCULATION_RESULTS:
+            return permissions.canExportCalculationResults ?? false;
+        case Permission_1.Permission.CAN_GENERATE_EMISSION_REPORTS:
+            return permissions.canGenerateEmissionReports ?? false;
+        // Company Resources
+        case Permission_1.Permission.CAN_MANAGE_EVENTS:
+            return permissions.canManageEvents ?? false;
+        case Permission_1.Permission.CAN_MANAGE_EVENT_EDITIONS:
+            return permissions.canManageEventEditions ?? false;
+        case Permission_1.Permission.CAN_MANAGE_FACILITIES:
+            return permissions.canManageFacilities ?? false;
+        case Permission_1.Permission.CAN_MANAGE_PRODUCTS:
+            return permissions.canManageProducts ?? false;
+        case Permission_1.Permission.CAN_VIEW_COMPANY_RESOURCES:
+            return permissions.canViewCompanyResources ?? false;
+        // Purchase Management
+        case Permission_1.Permission.CAN_VIEW_PURCHASES:
+            return permissions.canViewPurchases ?? false;
+        case Permission_1.Permission.CAN_CREATE_PURCHASE_ORDERS:
+            return permissions.canCreatePurchaseOrders ?? false;
+        case Permission_1.Permission.CAN_UPDATE_PURCHASE_ORDERS:
+            return permissions.canUpdatePurchaseOrders ?? false;
+        case Permission_1.Permission.CAN_DELETE_PURCHASE_ORDERS:
+            return permissions.canDeletePurchaseOrders ?? false;
+        case Permission_1.Permission.CAN_MANAGE_PURCHASE_CONTRACTS:
+            return permissions.canManagePurchaseContracts ?? false;
+        case Permission_1.Permission.CAN_CONFIGURE_SERVICE_PRICING:
+            return permissions.canConfigureServicePricing ?? false;
+        // Stakeholder Management
+        case Permission_1.Permission.CAN_MANAGE_CARBON_CLIENTS:
+            return permissions.canManageCarbonClients ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CARBON_COORDINATORS:
+            return permissions.canManageCarbonCoordinators ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CARBON_MANAGERS:
+            return permissions.canManageCarbonManagers ?? false;
+        case Permission_1.Permission.CAN_MANAGE_CARBON_HOSTS:
+            return permissions.canManageCarbonHosts ?? false;
+        case Permission_1.Permission.CAN_VIEW_STAKEHOLDER_HIERARCHY:
+            return permissions.canViewStakeholderHierarchy ?? false;
+        case Permission_1.Permission.CAN_ASSIGN_STAKEHOLDER_ROLES:
+            return permissions.canAssignStakeholderRoles ?? false;
+        default:
+            return false;
+    }
+};

package/build/carbonbox/shared/domain/exceptions/SecurityContextReconstructionError.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityContextReconstructionError = void 0;
+const RootError_1 = require("./RootError");
+class SecurityContextReconstructionError extends RootError_1.RootError {
+    constructor(primitives) {
+        const message = 'SecurityContext.fromPrimitives() is not supported. '
+            + 'User is an abstract class and cannot be reconstructed without knowing the specific User type '
+            + '(CarbonHost, CarbonManager, CarbonCoordinator, CarbonClient). '
+            + 'Use SecurityContext.create() or SecurityContext.fromUser() instead. '
+            + 'User entities must be constructed with their specific factory methods.';
+        super(message);
+        this.name = 'SecurityContextReconstructionError';
+        this.primitives = primitives;
+    }
+    static create(primitives) {
+        return new SecurityContextReconstructionError(primitives);
+    }
+    logError() {
+        const debugInfo = {
+            userType: this.primitives.user?.userType || 'unknown',
+            userId: this.primitives.user?.id || 'unknown',
+            userEmail: this.primitives.user?.email?.value || 'unknown',
+            hasResource: this.primitives.resource !== null && this.primitives.resource !== undefined,
+            hasEnvironment: this.primitives.environment !== null && this.primitives.environment !== undefined,
+            environmentTimestamp: this.primitives.environment?.timestamp || 'unknown',
+            environmentIpAddress: this.primitives.environment?.ipAddress || 'unknown',
+        };
+        return `${this.name}: ${this.message}\n`
+            + `Debug Info: ${JSON.stringify(debugInfo, null, 2)}\n`
+            + `Full primitives: ${JSON.stringify(this.primitives, null, 2)}`;
+    }
+    getReceivedPrimitives() {
+        return this.primitives;
+    }
+    getDebugInfo() {
+        return {
+            userType: this.primitives.user?.userType || 'unknown',
+            userId: this.primitives.user?.id || 'unknown',
+            userEmail: this.primitives.user?.email?.value || 'unknown',
+            hasResource: this.primitives.resource !== null && this.primitives.resource !== undefined,
+            hasEnvironment: this.primitives.environment !== null && this.primitives.environment !== undefined,
+            environmentTimestamp: this.primitives.environment?.timestamp || 'unknown',
+            environmentIpAddress: this.primitives.environment?.ipAddress || 'unknown',
+        };
+    }
+}
+exports.SecurityContextReconstructionError = SecurityContextReconstructionError;

package/build/carbonbox/shared/domain/types/PermissionSet.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/shared/domain/types/PermissionSetPrimitives.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/shared/domain/types/SecurityContext.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/shared/domain/types/SecurityContextPrimitives.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/carbonbox/shared/domain/types/UserPermissionsValue.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });