@jmlq/auth 0.0.1-alpha.1 → 0.0.1-alpha.2

package/dist/application/dtos/response/login.response.d.ts

@@ -0,0 +1,4 @@
+export interface LoginResponse {
+    accessToken: string;
+    refreshToken: string;
+}

package/dist/{src/application/dtos/logout.dto.d.ts → application/dtos/response/logout.response.d.ts}

@@ -1,6 +1,3 @@
-export interface LogoutRequest {
-    refreshToken: string;
-}
 export interface LogoutResponse {
     success: boolean;
     message: string;

package/dist/{src/application/dtos/refresh-token.dto.d.ts → application/dtos/response/refresh-token.response.d.ts}

@@ -1,6 +1,3 @@
-export interface RefreshTokenRequest {
-    refreshToken: string;
-}
 export interface RefreshTokenResponse {
     accessToken: string;
     refreshToken: string;

package/dist/application/dtos/response/register-user.response.d.ts

@@ -0,0 +1,7 @@
+export interface RegisterUserResponse {
+    id: string;
+    roles: {
+        role: string;
+    }[];
+    isActive: boolean;
+}

package/dist/application/dtos/type/index.d.ts

@@ -0,0 +1 @@
+export * from "./user-role.type";

package/dist/{src/shared/constants → application/dtos/type}/index.js

@@ -14,4 +14,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./jwt-algorithms"), exports);
+__exportStar(require("./user-role.type"), exports);

package/dist/application/dtos/type/user-role.type.d.ts

@@ -0,0 +1,4 @@
+export interface UserRole {
+    role: string;
+    permissions?: string[];
+}

package/dist/application/factories/auth-service.factory.d.ts

@@ -0,0 +1,11 @@
+import { ICredentialRepositoryPort, ITokenServicePort, IUserRepositoryPort } from "../../domain";
+import { IAuthServiceContainer } from "../../infrastructure/types";
+import { AuthServiceFactoryOptions } from "../types";
+/**
+ * Factory principal:
+ * - construye servicios e inyecta dependencias
+ * - encapsula configuración para que NO se repita en cada API externa
+ */
+export declare class AuthServiceFactory {
+    static create(userRepository: IUserRepositoryPort, credentialRepository: ICredentialRepositoryPort, tokenService: ITokenServicePort, options?: AuthServiceFactoryOptions): IAuthServiceContainer;
+}

package/dist/application/factories/auth-service.factory.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthServiceFactory = void 0;
+// src/application/factories/auth-service.factory.ts
+const services_1 = require("../../domain/services");
+const use_cases_1 = require("../use-cases");
+const security_1 = require("../../infrastructure/security");
+const services_2 = require("../../infrastructure/services");
+/**
+ * Factory principal:
+ * - construye servicios e inyecta dependencias
+ * - encapsula configuración para que NO se repita en cada API externa
+ */
+class AuthServiceFactory {
+    static create(userRepository, credentialRepository, tokenService, options) {
+        // 1) Policy + hasher
+        const passwordPolicy = new services_1.DefaultPasswordPolicy();
+        const passwordHasher = new security_1.BcryptPasswordHasher(options?.bcryptSaltRounds);
+        // 2) Session service (rotación/revocación)
+        const tokenSession = new services_2.TokenSessionService(tokenService, userRepository, credentialRepository, options?.accessTokenTtl ?? "15m", options?.refreshTokenTtl ?? "7d");
+        // 3) Use cases
+        const registerUserUseCase = new use_cases_1.RegisterUserUseCase(userRepository, passwordHasher, passwordPolicy);
+        const loginWithPasswordUseCase = new use_cases_1.LoginWithPasswordUseCase(userRepository, passwordHasher, tokenSession);
+        const refreshTokenUseCase = new use_cases_1.RefreshTokenUseCase(tokenSession);
+        const logoutUseCase = new use_cases_1.LogoutUseCase(tokenSession);
+        return {
+            userRepository,
+            credentialRepository,
+            passwordHasher,
+            tokenService,
+            passwordPolicy,
+            tokenSession,
+            registerUserUseCase,
+            loginWithPasswordUseCase,
+            refreshTokenUseCase,
+            logoutUseCase,
+        };
+    }
+}
+exports.AuthServiceFactory = AuthServiceFactory;

package/dist/{src/application → application}/index.d.ts

@@ -1,3 +1,4 @@
 export * from "./dtos";
 export * from "./factories";
 export * from "./use-cases";
+export * from "./types";

package/dist/{src/application → application}/index.js

@@ -17,3 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./dtos"), exports);
 __exportStar(require("./factories"), exports);
 __exportStar(require("./use-cases"), exports);
+__exportStar(require("./types"), exports);

package/dist/application/types/auth-service-factory-options.type.d.ts

@@ -0,0 +1,5 @@
+export interface AuthServiceFactoryOptions {
+    bcryptSaltRounds?: number;
+    accessTokenTtl?: string;
+    refreshTokenTtl?: string;
+}

package/dist/application/types/index.d.ts

@@ -0,0 +1 @@
+export * from "./auth-service-factory-options.type";

package/dist/{src/infrastructure/jwt/factory → application/types}/index.js

@@ -14,4 +14,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./signature-strategy.factory"), exports);
+__exportStar(require("./auth-service-factory-options.type"), exports);

package/dist/{src/application → application}/use-cases/login-with-password.use-case.d.ts

@@ -1,9 +1,9 @@
-import { IPasswordHasher, ITokenSession, IUserRepository } from "../../domain";
+import { IPasswordHasherPort, ITokenSessionPort, IUserRepositoryPort } from "../../domain/ports";
 import { LoginRequest, LoginResponse } from "../dtos";
 export declare class LoginWithPasswordUseCase {
     private readonly userRepository;
     private readonly passwordHasher;
     private readonly tokenSessionService;
-    constructor(userRepository: IUserRepository, passwordHasher: IPasswordHasher, tokenSessionService: ITokenSession);
+    constructor(userRepository: IUserRepositoryPort, passwordHasher: IPasswordHasherPort, tokenSessionService: ITokenSessionPort);
     execute(request: LoginRequest): Promise<LoginResponse>;
 }

package/dist/{src/application → application}/use-cases/login-with-password.use-case.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginWithPasswordUseCase = void 0;
-const domain_1 = require("../../domain");
+const object_values_1 = require("../../domain/object-values");
+const errors_1 = require("../../domain/errors");
 class LoginWithPasswordUseCase {
     constructor(userRepository, passwordHasher, tokenSessionService) {
         this.userRepository = userRepository;
@@ -10,19 +11,19 @@ class LoginWithPasswordUseCase {
     }
     async execute(request) {
         // Buscar usuario por email
-        const email = new domain_1.Email(request.email);
+        const email = new object_values_1.Email(request.email);
         const user = await this.userRepository.findByEmail(email);
         if (!user) {
-            throw new domain_1.UserNotFoundError("Invalid credentials");
+            throw new errors_1.UserNotFoundError("Invalid credentials");
         }
         // Verificar que el usuario esté activo
         if (!user.canLogin()) {
-            throw new domain_1.UserDisabledError("User account is not active");
+            throw new errors_1.UserDisabledError("User account is not active");
         }
         // Verificar contraseña
         const isPasswordValid = await this.passwordHasher.compare(request.password, user.password.serialize());
         if (!isPasswordValid) {
-            throw new domain_1.PasswordMismatchError("Invalid credentials");
+            throw new errors_1.PasswordMismatchError("Invalid credentials");
         }
         // Crear sesión con tokens
         const credential = await this.tokenSessionService.createSession(user);

package/dist/{src/application → application}/use-cases/logout.use-case.d.ts

@@ -1,7 +1,7 @@
-import { ITokenSession } from "../../domain";
+import { ITokenSessionPort } from "../../domain/ports";
 import { LogoutRequest, LogoutResponse } from "../dtos";
 export declare class LogoutUseCase {
     private readonly tokenSession;
-    constructor(tokenSession: ITokenSession);
+    constructor(tokenSession: ITokenSessionPort);
     execute(request: LogoutRequest): Promise<LogoutResponse>;
 }

package/dist/{src/application → application}/use-cases/logout.use-case.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogoutUseCase = void 0;
-const domain_1 = require("../../domain");
+const errors_1 = require("../../domain/errors");
 class LogoutUseCase {
     constructor(tokenSession) {
         this.tokenSession = tokenSession;
@@ -15,7 +15,7 @@ class LogoutUseCase {
             };
         }
         catch (error) {
-            throw new domain_1.LogoutError("Failed to logout: invalid refresh token");
+            throw new errors_1.LogoutError("Failed to logout: invalid refresh token");
         }
     }
 }

package/dist/{src/application → application}/use-cases/refresh-token.use-case.d.ts

@@ -1,7 +1,7 @@
-import { ITokenSession } from "../../domain";
+import { ITokenSessionPort } from "../../domain/ports";
 import { RefreshTokenRequest, RefreshTokenResponse } from "../dtos";
 export declare class RefreshTokenUseCase {
     private readonly tokenSessionService;
-    constructor(tokenSessionService: ITokenSession);
+    constructor(tokenSessionService: ITokenSessionPort);
     execute(request: RefreshTokenRequest): Promise<RefreshTokenResponse>;
 }

package/dist/{src/application → application}/use-cases/refresh-token.use-case.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RefreshTokenUseCase = void 0;
-const domain_1 = require("../../domain");
+const errors_1 = require("../../domain/errors");
 class RefreshTokenUseCase {
     constructor(tokenSessionService) {
         this.tokenSessionService = tokenSessionService;
@@ -16,7 +16,7 @@ class RefreshTokenUseCase {
             };
         }
         catch (error) {
-            throw new domain_1.InvalidOrExpiredRefreshTokenError();
+            throw new errors_1.InvalidOrExpiredRefreshTokenError();
         }
     }
 }

package/dist/application/use-cases/register-user.use-case.d.ts

@@ -0,0 +1,12 @@
+import { IPasswordHasherPort, IPasswordPolicyPort } from "../../domain";
+import { IUserRepositoryPort } from "../../domain/ports/repository";
+import { RegisterUserRequest, RegisterUserResponse } from "../dtos";
+export declare class RegisterUserUseCase {
+    private readonly userRepository;
+    private readonly passwordHasher;
+    private readonly passwordPolicy;
+    private static readonly DEFAULT_ROLE;
+    constructor(userRepository: IUserRepositoryPort, passwordHasher: IPasswordHasherPort, passwordPolicy: IPasswordPolicyPort);
+    private static normalizeRoles;
+    execute(request: RegisterUserRequest): Promise<RegisterUserResponse>;
+}

package/dist/{src/application → application}/use-cases/register-user.use-case.js

@@ -8,6 +8,29 @@ class RegisterUserUseCase {
         this.passwordHasher = passwordHasher;
         this.passwordPolicy = passwordPolicy;
     }
+    // ---------------------------------------------------------------------------
+    // Helpers
+    // ---------------------------------------------------------------------------
+    static normalizeRoles(input) {
+        const rolesInput = input && input.length > 0
+            ? input
+            : [{ role: RegisterUserUseCase.DEFAULT_ROLE }];
+        return rolesInput.map((r) => {
+            const roleName = String(r.role ?? "").trim();
+            if (!roleName) {
+                throw new Error("Role is required"); // si tienes un error de dominio, cámbialo aquí
+            }
+            const permissions = (r.permissions ?? [])
+                .map((p) => String(p ?? "").trim())
+                .filter(Boolean);
+            // sin duplicados
+            const uniquePermissions = Array.from(new Set(permissions));
+            return new domain_1.Role(roleName, uniquePermissions.map((p) => new domain_1.Permission(p)));
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Use case
+    // ---------------------------------------------------------------------------
     async execute(request) {
         // Validar política de contraseñas
         const passwordValidation = this.passwordPolicy.validateStrength(request.password);
@@ -22,8 +45,10 @@ class RegisterUserUseCase {
         }
         // Hash de la contraseña
         const hashedPassword = await this.passwordHasher.hash(request.password);
+        // Roles (default USER si no viene nada)
+        const roles = RegisterUserUseCase.normalizeRoles(request.roles);
         // Crear el usuario
-        const user = domain_1.User.create(request.email, request.roles?.map((r) => new domain_1.Role(r.role, r.permissions?.map((permission) => new domain_1.Permission(permission)))) || [], hashedPassword);
+        const user = domain_1.User.create(request.email, roles, hashedPassword);
         // Guardar en repositorio
         await this.userRepository.save(user);
         // Retornar respuesta
@@ -35,3 +60,4 @@ class RegisterUserUseCase {
     }
 }
 exports.RegisterUserUseCase = RegisterUserUseCase;
+RegisterUserUseCase.DEFAULT_ROLE = "USER";

package/dist/{src/domain → domain}/errors/auth.errors.d.ts

@@ -1,4 +1,4 @@
-export type AuthErrorCode = "JWT_ERROR" | "TOKEN_EXPIRED" | "TOKEN_NOT_YET_VALID" | "TOKEN_INVALID" | "TOKEN_MALFORMED" | "SIGNATURE_INVALID" | "ALGORITHM_UNSUPPORTED" | "KEY_NOT_FOUND" | "KEY_MISMATCH" | "TOKEN_REVOKED" | "CLOCK_SKEW" | "AUTHENTICATION_FAILED" | "CLAIMS_VALIDATION_ERROR";
+export type AuthErrorCode = "TOKEN_EXPIRED" | "TOKEN_MALFORMED" | "SIGNATURE_INVALID" | "AUTHENTICATION_FAILED";
 export interface ClaimsIssue {
     path: string;
     message: string;
@@ -30,12 +30,6 @@ export declare class InvalidTokenFormatError extends AuthDomainError {
 export declare class InvalidSignatureError extends AuthDomainError {
     constructor(message?: string, details?: unknown);
 }
-/** Algoritmo no soportado por la librería/política */
-export declare class UnsupportedAlgorithmError extends AuthDomainError {
-    constructor(message?: string, details?: {
-        alg: string;
-    });
-}
 /** Falla general de autenticación (catch-all) */
 export declare class AuthenticationError extends AuthDomainError {
     constructor(message?: string, details?: unknown);
@@ -47,10 +41,3 @@ export declare class InvalidOrExpiredRefreshTokenError extends AuthDomainError {
         now?: number;
     });
 }
-/** Alias histórico si lo usabas antes */
-export declare class JwtSecretError extends AuthDomainError {
-    constructor(message?: string, details?: {
-        exp?: number;
-        now?: number;
-    });
-}

package/dist/{src/domain → domain}/errors/auth.errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.JwtSecretError = exports.InvalidOrExpiredRefreshTokenError = exports.AuthenticationError = exports.UnsupportedAlgorithmError = exports.InvalidSignatureError = exports.InvalidTokenFormatError = exports.TokenExpiredError = exports.AuthDomainError = void 0;
+exports.InvalidOrExpiredRefreshTokenError = exports.AuthenticationError = exports.InvalidSignatureError = exports.InvalidTokenFormatError = exports.TokenExpiredError = exports.AuthDomainError = void 0;
 class AuthDomainError extends Error {
     constructor(message, code, details) {
         super(message);
@@ -46,13 +46,6 @@ class InvalidSignatureError extends AuthDomainError {
     }
 }
 exports.InvalidSignatureError = InvalidSignatureError;
-/** Algoritmo no soportado por la librería/política */
-class UnsupportedAlgorithmError extends AuthDomainError {
-    constructor(message = "Unsupported algorithm", details) {
-        super(message, "ALGORITHM_UNSUPPORTED", details);
-    }
-}
-exports.UnsupportedAlgorithmError = UnsupportedAlgorithmError;
 /** Falla general de autenticación (catch-all) */
 class AuthenticationError extends AuthDomainError {
     constructor(message = "Authentication failed", details) {
@@ -67,10 +60,3 @@ class InvalidOrExpiredRefreshTokenError extends AuthDomainError {
     }
 }
 exports.InvalidOrExpiredRefreshTokenError = InvalidOrExpiredRefreshTokenError;
-/** Alias histórico si lo usabas antes */
-class JwtSecretError extends AuthDomainError {
-    constructor(message, details) {
-        super(message ? message : "Missing JWT secrets", "JWT_ERROR", details);
-    }
-}
-exports.JwtSecretError = JwtSecretError;

package/dist/{src/domain → domain}/index.d.ts

@@ -3,4 +3,3 @@ export * from "./errors";
 export * from "./object-values";
 export * from "./ports";
 export * from "./props";
-export * from "./services";

package/dist/{src/domain → domain}/index.js

@@ -19,4 +19,3 @@ __exportStar(require("./errors"), exports);
 __exportStar(require("./object-values"), exports);
 __exportStar(require("./ports"), exports);
 __exportStar(require("./props"), exports);
-__exportStar(require("./services"), exports);

package/dist/domain/ports/auth/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./password-hasher.port";
+export * from "./password-policy.port";

package/dist/domain/ports/auth/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./password-hasher.port"), exports);
+__exportStar(require("./password-policy.port"), exports);

package/dist/{src/domain/ports/auth/password-hasher.d.ts → domain/ports/auth/password-hasher.port.d.ts}

@@ -1,7 +1,7 @@
 /**
  * Interface for password hashing and comparison.
  */
-export interface IPasswordHasher {
+export interface IPasswordHasherPort {
     hash(plainPassword: string): Promise<string>;
     compare(plainPassword: string, hashedPassword: string): Promise<boolean>;
 }

package/dist/{src/domain → domain}/ports/auth/password-policy.port.d.ts

@@ -1,7 +1,7 @@
 /**
  * Interface for password policy validation.
  */
-export interface IPasswordPolicy {
+export interface IPasswordPolicyPort {
     validateStrength(password: string): {
         isValid: boolean;
         errors: string[];

package/dist/domain/ports/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./auth";
+export * from "./jwt";
+export * from "./repository";
+export * from "./token";

package/dist/{src/infrastructure/jwt → domain/ports}/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./factory"), exports);
-__exportStar(require("./strategies"), exports);
+__exportStar(require("./auth"), exports);
+__exportStar(require("./jwt"), exports);
+__exportStar(require("./repository"), exports);
 __exportStar(require("./token"), exports);

package/dist/domain/ports/jwt/index.d.ts

@@ -0,0 +1 @@
+export * from "./payload";

package/dist/{src/shared/types → domain/ports/jwt}/index.js

@@ -14,4 +14,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./jwt.types"), exports);
+__exportStar(require("./payload"), exports);

package/dist/domain/ports/jwt/payload/index.d.ts

@@ -0,0 +1 @@
+export * from "./jwt-payload.port";

package/dist/domain/ports/jwt/payload/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./jwt-payload.port"), exports);

package/dist/{src/domain → domain}/ports/repository/credential.repository.d.ts

@@ -1,6 +1,6 @@
 import { Credential } from "../../entities";
 import { Id } from "../../object-values";
-export interface ICredentialRepository {
+export interface ICredentialRepositoryPort {
     save(credential: Credential): Promise<void>;
     findByUserId(userId: Id): Promise<Credential | null>;
     findByRefreshToken(refreshToken: string): Promise<Credential | null>;

package/dist/{src/domain → domain}/ports/repository/index.d.ts

@@ -1,2 +1,2 @@
 export * from "./credential.repository";
-export * from "./user.repository";
+export * from "./user-repository.port";

package/dist/{src/domain → domain}/ports/repository/index.js

@@ -15,4 +15,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./credential.repository"), exports);
-__exportStar(require("./user.repository"), exports);
+__exportStar(require("./user-repository.port"), exports);

package/dist/{src/domain/ports/repository/user.repository.d.ts → domain/ports/repository/user-repository.port.d.ts}

@@ -3,7 +3,7 @@ import { Email, Id } from "../../object-values";
 /**
  * UserRepository defines the contract for user data persistence operations.
  */
-export interface IUserRepository {
+export interface IUserRepositoryPort {
     save(user: User): Promise<void>;
     findById(id: Id): Promise<User | null>;
     findByEmail(email: Email): Promise<User | null>;

package/dist/domain/ports/token/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./token-session.port";
+export * from "./token.service.port";

package/dist/domain/ports/token/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./token-session.port"), exports);
+__exportStar(require("./token.service.port"), exports);

package/dist/{src/domain → domain}/ports/token/token-session.port.d.ts

@@ -1,5 +1,5 @@
-import { Credential, User } from "src/domain/entities";
-export interface ITokenSession {
+import { Credential, User } from "../../entities";
+export interface ITokenSessionPort {
     createSession(user: User): Promise<Credential>;
     refreshSession(refreshToken: string): Promise<Credential>;
     validateSession(accessToken: string): Promise<User | null>;

package/dist/{src/domain → domain}/ports/token/token.service.port.d.ts

@@ -1,6 +1,6 @@
-import { IJWTPayload } from "..";
 import { IGenerateAccessTokenProps, IGenerateRefreshTokenProps } from "../../props";
-export interface ITokenService {
+import { IJWTPayload } from "../jwt/payload";
+export interface ITokenServicePort {
     generateAccessToken(props: IGenerateAccessTokenProps): Promise<string>;
     generateRefreshToken(props: IGenerateRefreshTokenProps): Promise<string>;
     verifyAccessToken(token: string): Promise<IJWTPayload>;

package/dist/{src/domain → domain}/props/jwt/generate-access-token.props.d.ts

@@ -1,8 +1,6 @@
 import { JwtUser } from ".";
-import { JwtTokenServiceConfig } from "../../../shared";
 export interface IGenerateAccessTokenProps {
     user: JwtUser;
-    config: JwtTokenServiceConfig;
     expiresIn?: string;
     customClaims?: Record<string, any>;
 }

package/dist/{src/domain → domain}/props/jwt/generate-refresh-token.props.d.ts

@@ -1,8 +1,6 @@
 import { JwtUser } from ".";
-import { JwtTokenServiceConfig } from "../../../shared";
 export interface IGenerateRefreshTokenProps {
     user: JwtUser;
-    config: JwtTokenServiceConfig;
     expiresIn?: string;
     customClaims?: Record<string, any>;
 }

package/dist/{src/domain/props/services → domain/props/jwt}/index.d.ts

@@ -1,2 +1,3 @@
 export * from "./generate-access-token.props";
 export * from "./generate-refresh-token.props";
+export * from "./jwt-user";

package/dist/{src/domain/props/services → domain/props/jwt}/index.js

@@ -16,3 +16,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./generate-access-token.props"), exports);
 __exportStar(require("./generate-refresh-token.props"), exports);
+__exportStar(require("./jwt-user"), exports);

package/dist/{src/domain → domain}/services/password-policy.service.d.ts

@@ -1,5 +1,5 @@
-import { IPasswordPolicy } from "../ports";
-export declare class DefaultPasswordPolicy implements IPasswordPolicy {
+import { IPasswordPolicyPort } from "../ports";
+export declare class DefaultPasswordPolicy implements IPasswordPolicyPort {
     validateStrength(password: string): {
         isValid: boolean;
         errors: string[];

package/dist/{src/infrastructure/repositories/test → in-memory}/in-memory-credential.repository.d.ts

@@ -1,5 +1,5 @@
-import { Credential, ICredentialRepository, Id } from "../../../domain";
-export declare class InMemoryCredentialRepository implements ICredentialRepository {
+import { Credential, ICredentialRepositoryPort, Id } from "../domain";
+export declare class InMemoryCredentialRepository implements ICredentialRepositoryPort {
     private credentials;
     private refreshTokenIndex;
     save(credential: Credential): Promise<void>;

package/dist/{src/infrastructure/repositories/test → in-memory}/in-memory-credential.repository.js

@@ -13,6 +13,11 @@ class InMemoryCredentialRepository {
     // Guarda una nueva credencial y actualiza el índice de refresh tokens
     async save(credential) {
         const key = credential.userId.getValue();
+        // ✅ Si ya existía una credencial para ese usuario, limpiar índice viejo
+        const old = this.credentials.get(key);
+        if (old) {
+            this.refreshTokenIndex.delete(old.refreshToken);
+        }
         this.credentials.set(key, credential);
         this.refreshTokenIndex.set(credential.refreshToken, key);
     }
@@ -54,9 +59,14 @@ class InMemoryCredentialRepository {
     // Elimina una credencial por su refresh token
     async deleteByRefreshToken(refreshToken) {
         const userId = this.refreshTokenIndex.get(refreshToken);
-        if (userId) {
+        if (!userId)
+            return;
+        // Siempre elimina el índice del refresh solicitado
+        this.refreshTokenIndex.delete(refreshToken);
+        // Solo elimina la credencial si realmente coincide con ese refresh
+        const current = this.credentials.get(userId);
+        if (current && current.refreshToken === refreshToken) {
             this.credentials.delete(userId);
-            this.refreshTokenIndex.delete(refreshToken);
         }
     }
     // Método auxiliar para limpiar todos los datos (útil en tests)