driver to user id

core/identity/application/use-cases/SignupSponsorUseCase.ts

@@ -0,0 +1,180 @@
+import { EmailAddress } from '../../domain/value-objects/EmailAddress';
+import { UserId } from '../../domain/value-objects/UserId';
+import { User } from '../../domain/entities/User';
+import { Company } from '../../domain/entities/Company';
+import { IAuthRepository } from '../../domain/repositories/IAuthRepository';
+import { ICompanyRepository } from '../../domain/repositories/ICompanyRepository';
+import { IPasswordHashingService } from '../../domain/services/PasswordHashingService';
+import { Result } from '@core/shared/application/Result';
+import type { ApplicationErrorCode } from '@core/shared/errors/ApplicationErrorCode';
+import type { UseCaseOutputPort, Logger, UseCase } from '@core/shared/application';
+
+export type SignupSponsorInput = {
+  email: string;
+  password: string;
+  displayName: string;
+  companyName: string;
+};
+
+export type SignupSponsorResult = {
+  user: User;
+  company: Company;
+};
+
+export type SignupSponsorErrorCode = 'USER_ALREADY_EXISTS' | 'WEAK_PASSWORD' | 'INVALID_DISPLAY_NAME' | 'REPOSITORY_ERROR';
+
+export type SignupSponsorApplicationError = ApplicationErrorCode<SignupSponsorErrorCode, { message: string }>;
+
+/**
+ * Application Use Case: SignupSponsorUseCase
+ *
+ * Handles sponsor registration by creating both a User and a Company atomically.
+ * If any step fails, the operation is rolled back.
+ */
+export class SignupSponsorUseCase implements UseCase<SignupSponsorInput, void, SignupSponsorErrorCode> {
+  constructor(
+    private readonly authRepo: IAuthRepository,
+    private readonly companyRepo: ICompanyRepository,
+    private readonly passwordService: IPasswordHashingService,
+    private readonly logger: Logger,
+    private readonly output: UseCaseOutputPort<SignupSponsorResult>,
+  ) {}
+
+  async execute(input: SignupSponsorInput): Promise<Result<void, SignupSponsorApplicationError>> {
+    let createdCompany: Company | null = null;
+
+    try {
+      // Validate password strength first (before any repository calls)
+      if (!this.isPasswordStrong(input.password)) {
+        return Result.err({
+          code: 'WEAK_PASSWORD',
+          details: { message: 'Password must be at least 8 characters and contain uppercase, lowercase, and number' },
+        });
+      }
+
+      // Validate display name format (before any repository calls)
+      // We do this by attempting to create a User and catching any validation errors
+      try {
+        // Temporarily create user to validate display name
+        User.create({
+          id: UserId.create(),
+          displayName: input.displayName,
+        });
+      } catch (error) {
+        if (error instanceof Error) {
+          if (error.message.includes('Name must be at least') ||
+              error.message.includes('Name can only contain') ||
+              error.message.includes('Please use your real name')) {
+            return Result.err({
+              code: 'INVALID_DISPLAY_NAME',
+              details: { message: error.message },
+            });
+          }
+        }
+        // Re-throw if it's a different error
+        throw error;
+      }
+
+      // Validate email format
+      const emailVO = EmailAddress.create(input.email);
+
+      // Check if user exists
+      const existingUser = await this.authRepo.findByEmail(emailVO);
+      if (existingUser) {
+        return Result.err({
+          code: 'USER_ALREADY_EXISTS',
+          details: { message: 'User already exists' },
+        });
+      }
+
+      // Hash password
+      const hashedPassword = await this.passwordService.hash(input.password);
+      const passwordHashModule = await import('../../domain/value-objects/PasswordHash');
+      const passwordHash = passwordHashModule.PasswordHash.fromHash(hashedPassword);
+
+      // Create user with all fields
+      const userId = UserId.create();
+      const user = User.create({
+        id: userId,
+        displayName: input.displayName,
+        email: emailVO.value,
+        passwordHash,
+      });
+
+      // Create company via repository
+      const company = this.companyRepo.create({
+        getName: () => input.companyName,
+        getOwnerUserId: () => userId,
+        getContactEmail: () => emailVO.value,
+      });
+
+      // Save company first
+      await this.companyRepo.save(company);
+      createdCompany = company;
+
+      // Link user to company
+      user.setCompanyId(company.getId());
+
+      // Save user
+      await this.authRepo.save(user);
+
+      this.output.present({ user, company });
+      return Result.ok(undefined);
+    } catch (error) {
+      // Rollback: delete company if it was created
+      if (createdCompany && typeof createdCompany.getId === 'function') {
+        try {
+          const companyId = createdCompany.getId();
+          await this.companyRepo.delete(companyId);
+          this.logger.info('[SignupSponsorUseCase] Rolled back company creation', {
+            companyId,
+          });
+        } catch (rollbackError) {
+          this.logger.error('[SignupSponsorUseCase] Failed to rollback company creation', rollbackError instanceof Error ? rollbackError : undefined, {
+            companyId: createdCompany.getId ? createdCompany.getId() : 'unknown',
+          });
+        }
+      }
+
+      // Handle specific validation errors from User entity
+      if (error instanceof Error) {
+        if (error.message.includes('Name must be at least') ||
+            error.message.includes('Name can only contain') ||
+            error.message.includes('Please use your real name')) {
+          return Result.err({
+            code: 'INVALID_DISPLAY_NAME',
+            details: { message: error.message },
+          });
+        }
+        if (error.message.includes('Company name')) {
+          return Result.err({
+            code: 'REPOSITORY_ERROR',
+            details: { message: error.message },
+          });
+        }
+      }
+
+      const message =
+        error instanceof Error && error.message
+          ? error.message
+          : 'Failed to execute SignupSponsorUseCase';
+
+      this.logger.error('SignupSponsorUseCase.execute failed', error instanceof Error ? error : undefined, {
+        input,
+      });
+
+      return Result.err({
+        code: 'REPOSITORY_ERROR',
+        details: { message },
+      });
+    }
+  }
+
+  private isPasswordStrong(password: string): boolean {
+    if (password.length < 8) return false;
+    if (!/[a-z]/.test(password)) return false;
+    if (!/[A-Z]/.test(password)) return false;
+    if (!/\d/.test(password)) return false;
+    return true;
+  }
+}