permissions-contractx 1.0.0

package/dist/services/contractx-document-compliance.service.js

@@ -0,0 +1,536 @@
+"use strict";
+/**
+ * ContractX Document Compliance Service
+ * Validates permissions-contractx package compliance with PermisosRoles.odt document requirements
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ContractXDocumentComplianceService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContractXDocumentComplianceService = void 0;
+const common_1 = require("@nestjs/common");
+const contractx_permissions_constants_1 = require("../constants/contractx-permissions.constants");
+let ContractXDocumentComplianceService = ContractXDocumentComplianceService_1 = class ContractXDocumentComplianceService {
+    constructor() {
+        this.logger = new common_1.Logger(ContractXDocumentComplianceService_1.name);
+        /**
+         * Document-based role requirements extracted from PermisosRoles.odt
+         */
+        this.DOCUMENT_REQUIREMENTS = {
+            // System Roles
+            'superadmin': {
+                role: 'superadmin',
+                category: 'system',
+                permissions: {
+                    clients: ['c', 'r', 'u', 'd', 'f'],
+                    contracts: ['c', 'r', 'u', 'd', 'f'],
+                    users: ['c', 'r', 'u', 'd', 'f'],
+                    providers: ['c', 'r', 'u', 'd', 'f'],
+                    documents: ['c', 'r', 'u', 'd', 'f'],
+                    clauses: ['c', 'r', 'u', 'd', 'f'],
+                    deliverables: ['c', 'r', 'u', 'd', 'f'],
+                    subdeliverables: ['c', 'r', 'u', 'd', 'f'],
+                    deliverable_history: ['c', 'r', 'u', 'd', 'f'],
+                    sla_services: ['c', 'r', 'u', 'd', 'f'],
+                    measurement_windows: ['c', 'r', 'u', 'd', 'f'],
+                    credit_service_levels: ['c', 'r', 'u', 'd', 'f'],
+                    meetings: ['c', 'r', 'u', 'd', 'f'],
+                    meeting_participants: ['c', 'r', 'u', 'd', 'f'],
+                    action_items: ['c', 'r', 'u', 'd', 'f'],
+                    notification_escalations: ['c', 'r', 'u', 'd', 'f'],
+                    invoice_services: ['c', 'r', 'u', 'd', 'f'],
+                    invoice_lines: ['c', 'r', 'u', 'd', 'f'],
+                    security_control: ['c', 'r', 'u', 'd', 'f'],
+                    configuration: ['c', 'r', 'u', 'd', 'f'],
+                    workflows: ['c', 'r', 'u', 'd', 'f']
+                },
+                restrictions: []
+            },
+            'support': {
+                role: 'support',
+                category: 'system',
+                permissions: {
+                    // All modules except clients (same as superadmin but no client access)
+                    contracts: ['c', 'r', 'u', 'd', 'f'],
+                    users: ['c', 'r', 'u', 'd', 'f'],
+                    providers: ['c', 'r', 'u', 'd', 'f'],
+                    documents: ['c', 'r', 'u', 'd', 'f'],
+                    clauses: ['c', 'r', 'u', 'd', 'f'],
+                    deliverables: ['c', 'r', 'u', 'd', 'f'],
+                    subdeliverables: ['c', 'r', 'u', 'd', 'f'],
+                    deliverable_history: ['c', 'r', 'u', 'd', 'f'],
+                    sla_services: ['c', 'r', 'u', 'd', 'f'],
+                    measurement_windows: ['c', 'r', 'u', 'd', 'f'],
+                    credit_service_levels: ['c', 'r', 'u', 'd', 'f'],
+                    meetings: ['c', 'r', 'u', 'd', 'f'],
+                    meeting_participants: ['c', 'r', 'u', 'd', 'f'],
+                    action_items: ['c', 'r', 'u', 'd', 'f'],
+                    notification_escalations: ['c', 'r', 'u', 'd', 'f'],
+                    invoice_services: ['c', 'r', 'u', 'd', 'f'],
+                    invoice_lines: ['c', 'r', 'u', 'd', 'f'],
+                    security_control: ['c', 'r', 'u', 'd', 'f'],
+                    configuration: ['c', 'r', 'u', 'd', 'f'],
+                    workflows: ['c', 'r', 'u', 'd', 'f']
+                },
+                restrictions: ['clients']
+            },
+            // Client Roles
+            'client_contract_admin': {
+                role: 'client_contract_admin',
+                category: 'client',
+                permissions: {
+                    contracts: ['c', 's', 'u', 'd', 'f'],
+                    users: ['c', 's', 'u', 'd', 'f'],
+                    providers: ['c', 's', 'u', 'd', 'f'],
+                    documents: ['c', 's', 'u', 'd', 'f'],
+                    clauses: ['c', 's', 'u', 'd', 'f'],
+                    deliverables: ['c', 's', 'u', 'd', 'f'],
+                    subdeliverables: ['c', 's', 'u', 'd', 'f'],
+                    deliverable_history: ['c', 's', 'u', 'd', 'f'],
+                    sla_services: ['c', 's', 'u', 'd', 'f'],
+                    measurement_windows: ['c', 's', 'u', 'd', 'f'],
+                    credit_service_levels: ['c', 's', 'u', 'd', 'f'],
+                    meetings: ['c', 's', 'u', 'd', 'f'],
+                    meeting_participants: ['c', 's', 'u', 'd', 'f'],
+                    action_items: ['c', 's', 'u', 'd', 'f'],
+                    notification_escalations: ['c', 's', 'u', 'd', 'f'],
+                    invoice_services: ['c', 's', 'u', 'd', 'f'],
+                    invoice_lines: ['c', 's', 'u', 'd', 'f'],
+                    security_control: ['c', 's', 'u', 'd', 'f'],
+                    configuration: ['c', 's', 'u', 'd', 'f'],
+                    workflows: ['c', 's', 'u', 'd', 'f']
+                },
+                restrictions: ['clients']
+            },
+            'client_performance_manager': {
+                role: 'client_performance_manager',
+                category: 'client',
+                permissions: {
+                    contracts: ['s', 'f'],
+                    users: ['s', 'f'],
+                    providers: ['s', 'f'],
+                    documents: ['s', 'f'],
+                    clauses: ['s', 'f'],
+                    deliverables: ['s', 'f'],
+                    subdeliverables: ['s', 'f'],
+                    deliverable_history: ['s', 'f'],
+                    sla_services: ['c', 's', 'u', 'd', 'f'],
+                    measurement_windows: ['c', 's', 'u', 'd', 'f'],
+                    credit_service_levels: ['s', 'f'],
+                    meetings: ['s', 'f'],
+                    meeting_participants: ['s', 'f'],
+                    action_items: ['s', 'f'],
+                    notification_escalations: ['s', 'f'],
+                    invoice_services: ['s', 'u', 'f'],
+                    invoice_lines: ['s', 'u', 'f'],
+                    configuration: ['r']
+                },
+                restrictions: ['clients', 'workflows']
+            },
+            'client_finance_manager': {
+                role: 'client_finance_manager',
+                category: 'client',
+                permissions: {
+                    contracts: ['s', 'f'],
+                    users: ['s', 'f'],
+                    providers: ['s', 'f'],
+                    clauses: ['s', 'f'],
+                    deliverables: ['s', 'f'],
+                    subdeliverables: ['s', 'f'],
+                    deliverable_history: ['s', 'f'],
+                    sla_services: ['s', 'f'],
+                    credit_service_levels: ['s', 'f'],
+                    notification_escalations: ['s', 'f'],
+                    invoice_services: ['s', 'u', 'f'],
+                    invoice_lines: ['s', 'u', 'f'],
+                    configuration: ['r']
+                },
+                restrictions: ['clients', 'documents', 'measurement_windows', 'meetings', 'meeting_participants', 'action_items', 'security_control', 'workflows']
+            },
+            'client_reports_manager': {
+                role: 'client_reports_manager',
+                category: 'client',
+                permissions: {
+                    documents: ['s'],
+                    clauses: ['s', 'f'],
+                    subdeliverables: ['s'],
+                    deliverable_history: ['s'],
+                    measurement_windows: ['r', 's', 'f'],
+                    notification_escalations: ['s', 'f'],
+                    meetings: ['s'],
+                    configuration: ['s']
+                },
+                restrictions: ['clients', 'contracts', 'users', 'providers', 'deliverables', 'sla_services', 'credit_service_levels', 'meeting_participants', 'invoice_services', 'invoice_lines', 'security_control', 'workflows']
+            },
+            'client_relationship_manager': {
+                role: 'client_relationship_manager',
+                category: 'client',
+                permissions: {
+                    users: ['s', 'f'],
+                    clauses: ['s', 'f'],
+                    meetings: ['s', 'u'],
+                    meeting_participants: ['s', 'u'],
+                    action_items: ['s', 'u']
+                },
+                restrictions: ['clients', 'contracts', 'providers', 'documents', 'deliverables', 'subdeliverables', 'deliverable_history', 'sla_services', 'measurement_windows', 'credit_service_levels', 'notification_escalations', 'invoice_services', 'invoice_lines', 'security_control', 'configuration', 'workflows']
+            },
+            'client_risk_manager': {
+                role: 'client_risk_manager',
+                category: 'client',
+                permissions: {
+                    contracts: ['s'],
+                    documents: ['s', 'u'],
+                    meetings: ['s', 'u'],
+                    notification_escalations: ['s', 'u'],
+                    security_control: ['s', 'u']
+                },
+                restrictions: ['clients', 'providers', 'clauses', 'deliverables', 'subdeliverables', 'deliverable_history', 'sla_services', 'measurement_windows', 'credit_service_levels', 'meeting_participants', 'action_items', 'invoice_services', 'invoice_lines', 'configuration', 'workflows']
+            },
+            // Provider Roles
+            'provider_contract_admin': {
+                role: 'provider_contract_admin',
+                category: 'provider',
+                permissions: {
+                    contracts: ['c', 'u', 's'],
+                    users: ['c', 'u', 's', 'd'],
+                    providers: ['c', 'u', 's'],
+                    documents: ['c', 'u', 's', 'd'],
+                    deliverables: ['c', 'u', 's', 'd'],
+                    subdeliverables: ['c', 'u', 's', 'd'],
+                    deliverable_history: ['c', 'u', 's', 'd'],
+                    sla_services: ['c', 'u', 's', 'd'],
+                    measurement_windows: ['c', 'r', 'u', 'd', 'f'],
+                    credit_service_levels: ['c', 's', 'u', 'd', 'f'],
+                    meetings: ['c', 'u', 's', 'd'],
+                    meeting_participants: ['c', 'u', 's', 'd'],
+                    action_items: ['c', 'u', 's', 'd'],
+                    notification_escalations: ['c', 'u', 's', 'd'],
+                    invoice_services: ['c', 'u', 's', 'd'],
+                    invoice_lines: ['c', 'u', 's', 'd'],
+                    configuration: ['c', 'r', 'u', 'd'],
+                    workflows: ['c', 'r', 'u', 'd', 'f']
+                },
+                restrictions: ['clients']
+            },
+            'provider_performance_manager': {
+                role: 'provider_performance_manager',
+                category: 'provider',
+                permissions: {
+                    contracts: ['s', 'f'],
+                    users: ['s', 'f'],
+                    providers: ['s', 'f'],
+                    documents: ['s', 'f'],
+                    deliverables: ['s', 'f'],
+                    subdeliverables: ['s', 'f'],
+                    deliverable_history: ['s', 'f'],
+                    sla_services: ['c', 'u', 's', 'd', 'f'],
+                    measurement_windows: ['c', 'u', 's', 'd', 'f'],
+                    credit_service_levels: ['s', 'f'],
+                    meetings: ['s', 'f'],
+                    meeting_participants: ['s', 'f'],
+                    action_items: ['s', 'f'],
+                    notification_escalations: ['s', 'f'],
+                    invoice_services: ['s', 'u', 'f'],
+                    invoice_lines: ['s', 'u', 'f'],
+                    configuration: ['r']
+                },
+                restrictions: ['clients', 'security_control', 'clauses', 'workflows']
+            },
+            'provider_finance_manager': {
+                role: 'provider_finance_manager',
+                category: 'provider',
+                permissions: {
+                    contracts: ['s'],
+                    invoice_services: ['s', 'u'],
+                    invoice_lines: ['s', 'u'],
+                    configuration: ['r']
+                },
+                restrictions: ['clients', 'users', 'providers', 'documents', 'clauses', 'deliverables', 'subdeliverables', 'deliverable_history', 'sla_services', 'measurement_windows', 'credit_service_levels', 'meetings', 'meeting_participants', 'action_items', 'notification_escalations', 'security_control', 'workflows']
+            },
+            'provider_reports_manager': {
+                role: 'provider_reports_manager',
+                category: 'provider',
+                permissions: {
+                    documents: ['s'],
+                    subdeliverables: ['s'],
+                    deliverable_history: ['s'],
+                    measurement_windows: ['r', 's', 'f'],
+                    meetings: ['s'],
+                    action_items: ['s']
+                },
+                restrictions: ['clients', 'contracts', 'users', 'providers', 'clauses', 'deliverables', 'sla_services', 'credit_service_levels', 'meeting_participants', 'notification_escalations', 'invoice_services', 'invoice_lines', 'security_control', 'configuration', 'workflows']
+            },
+            'provider_relationship_manager': {
+                role: 'provider_relationship_manager',
+                category: 'provider',
+                permissions: {
+                    users: ['s'],
+                    meetings: ['s', 'u'],
+                    meeting_participants: ['s', 'u'],
+                    action_items: ['s', 'u']
+                },
+                restrictions: ['clients', 'contracts', 'providers', 'documents', 'clauses', 'deliverables', 'subdeliverables', 'deliverable_history', 'sla_services', 'measurement_windows', 'credit_service_levels', 'notification_escalations', 'invoice_services', 'invoice_lines', 'configuration', 'workflows']
+            },
+            'provider_risk_manager': {
+                role: 'provider_risk_manager',
+                category: 'provider',
+                permissions: {
+                    contracts: ['s'],
+                    documents: ['s', 'u'],
+                    notification_escalations: ['s', 'u'],
+                    security_control: ['s', 'u'],
+                    subdeliverables: ['c', 'r', 'u', 'd', 'f']
+                },
+                restrictions: ['clients', 'users', 'providers', 'clauses', 'deliverables', 'deliverable_history', 'sla_services', 'measurement_windows', 'credit_service_levels', 'meetings', 'meeting_participants', 'action_items', 'invoice_services', 'invoice_lines', 'configuration', 'workflows']
+            }
+        };
+        /**
+         * Permission action mappings from document notation to system notation
+         */
+        this.ACTION_MAPPINGS = {
+            'c': 'create',
+            'r': 'read',
+            'u': 'update',
+            'd': 'delete',
+            's': 'show',
+            'f': 'filter'
+        };
+    }
+    /**
+     * Validates complete package compliance with PermisosRoles.odt document
+     */
+    async validateDocumentCompliance() {
+        const result = {
+            isCompliant: true,
+            summary: {
+                totalRoles: 0,
+                validatedRoles: 0,
+                totalPermissions: contractx_permissions_constants_1.VALID_CONTRACTX_PERMISSIONS.length,
+                validatedPermissions: 0,
+                compliantRoles: [],
+                nonCompliantRoles: []
+            },
+            roleAnalysis: [],
+            modulesCoverage: [],
+            warnings: [],
+            errors: []
+        };
+        try {
+            // Analyze each documented role
+            for (const [roleName, requirements] of Object.entries(this.DOCUMENT_REQUIREMENTS)) {
+                result.summary.totalRoles++;
+                const roleAnalysis = await this.validateRoleCompliance(roleName, requirements);
+                result.roleAnalysis.push(roleAnalysis);
+                if (roleAnalysis.isCompliant) {
+                    result.summary.compliantRoles.push(roleName);
+                }
+                else {
+                    result.summary.nonCompliantRoles.push(roleName);
+                    result.isCompliant = false;
+                }
+            }
+            // Validate modules coverage
+            result.modulesCoverage = this.validateModulesCoverage();
+            // Generate summary
+            result.summary.validatedRoles = result.summary.compliantRoles.length;
+            result.summary.validatedPermissions = this.countValidatedPermissions();
+            // Add warnings for missing roles from package
+            this.addMissingRoleWarnings(result);
+            this.logger.log(`Document compliance validation completed. Compliant: ${result.isCompliant}`);
+            return result;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.logger.error('Error during document compliance validation', error instanceof Error ? error.stack : error);
+            result.errors.push(`Validation error: ${errorMessage}`);
+            result.isCompliant = false;
+            return result;
+        }
+    }
+    /**
+     * Validates a specific role against document requirements
+     */
+    async validateRoleCompliance(roleName, requirements) {
+        // Convert document requirements to expected permissions
+        const expectedPermissions = this.convertRequirementsToPermissions(requirements);
+        // Get actual permissions from ODS_ROLE_PERMISSIONS
+        const actualPermissions = contractx_permissions_constants_1.ODS_ROLE_PERMISSIONS[roleName] || [];
+        // Calculate differences
+        const actualSet = new Set(actualPermissions);
+        const expectedSet = new Set(expectedPermissions);
+        const missingPermissions = expectedPermissions.filter(p => !actualSet.has(p));
+        const extraPermissions = actualPermissions.filter(p => !expectedSet.has(p));
+        const isCompliant = missingPermissions.length === 0 && extraPermissions.length === 0;
+        return {
+            role: roleName,
+            isCompliant,
+            expectedPermissions,
+            actualPermissions: [...actualPermissions],
+            missingPermissions,
+            extraPermissions,
+            documentReference: `PermisosRoles.odt - Section ${this.getRoleSection(roleName)}`
+        };
+    }
+    /**
+     * Converts document requirements to permission strings
+     */
+    convertRequirementsToPermissions(requirements) {
+        const permissions = [];
+        for (const [module, actions] of Object.entries(requirements.permissions)) {
+            for (const action of actions) {
+                const systemAction = this.ACTION_MAPPINGS[action];
+                if (systemAction) {
+                    permissions.push(`${module}:${systemAction}`);
+                }
+            }
+        }
+        return permissions;
+    }
+    /**
+     * Validates module coverage across all roles
+     */
+    validateModulesCoverage() {
+        const coverage = [];
+        for (const [, moduleName] of Object.entries(contractx_permissions_constants_1.CONTRACTX_MODULES)) {
+            const usedByRoles = this.findRolesUsingModule(moduleName);
+            coverage.push({
+                module: moduleName,
+                covered: usedByRoles.length > 0,
+                usedByRoles
+            });
+        }
+        return coverage;
+    }
+    /**
+     * Finds roles that use a specific module
+     */
+    findRolesUsingModule(moduleName) {
+        const rolesUsingModule = [];
+        for (const [roleName, requirements] of Object.entries(this.DOCUMENT_REQUIREMENTS)) {
+            if (requirements.permissions[moduleName]) {
+                rolesUsingModule.push(roleName);
+            }
+        }
+        return rolesUsingModule;
+    }
+    /**
+     * Counts total validated permissions across all roles
+     */
+    countValidatedPermissions() {
+        const allValidatedPermissions = new Set();
+        for (const requirements of Object.values(this.DOCUMENT_REQUIREMENTS)) {
+            const permissions = this.convertRequirementsToPermissions(requirements);
+            permissions.forEach(p => allValidatedPermissions.add(p));
+        }
+        return allValidatedPermissions.size;
+    }
+    /**
+     * Adds warnings for roles present in package but not in document
+     */
+    addMissingRoleWarnings(result) {
+        const packageRoles = Object.keys(contractx_permissions_constants_1.ODS_ROLE_PERMISSIONS);
+        const documentRoles = Object.keys(this.DOCUMENT_REQUIREMENTS);
+        const missingFromDocument = packageRoles.filter(role => !documentRoles.includes(role));
+        const missingFromPackage = documentRoles.filter(role => !packageRoles.includes(role));
+        if (missingFromDocument.length > 0) {
+            result.warnings.push(`Roles in package but not documented: ${missingFromDocument.join(', ')}`);
+        }
+        if (missingFromPackage.length > 0) {
+            result.warnings.push(`Roles documented but not in package: ${missingFromPackage.join(', ')}`);
+        }
+    }
+    /**
+     * Gets the document section for a role
+     */
+    getRoleSection(roleName) {
+        if (roleName === 'superadmin')
+            return '2. SuperAdmin Role';
+        if (roleName === 'support')
+            return '4.7 Support Role';
+        if (roleName.startsWith('client_')) {
+            const roleMap = {
+                'client_contract_admin': '3.1 Contract Administrator (Client)',
+                'client_performance_manager': '3.2 Performance Manager (Client)',
+                'client_finance_manager': '3.3 Finance Manager (Client)',
+                'client_reports_manager': '3.4 Reporting Manager (Client)',
+                'client_relationship_manager': '3.5 Relationship Manager (Client)',
+                'client_risk_manager': '3.6 Risk Manager (Client)'
+            };
+            return roleMap[roleName] || '3. Client User Roles';
+        }
+        if (roleName.startsWith('provider_')) {
+            const roleMap = {
+                'provider_contract_admin': '4.1 Contract Administrator (Provider)',
+                'provider_performance_manager': '4.2 Performance Manager (Provider)',
+                'provider_finance_manager': '4.3 Finance Manager (Provider)',
+                'provider_reports_manager': '4.4 Reporting Manager (Provider)',
+                'provider_relationship_manager': '4.5 Relationship Manager (Provider)',
+                'provider_risk_manager': '4.6 Risk Manager (Provider)'
+            };
+            return roleMap[roleName] || '4. Provider User Roles';
+        }
+        return 'Unknown Section';
+    }
+    /**
+     * Generates a compliance report summary
+     */
+    generateComplianceReport(validation) {
+        let report = '# ContractX Package Document Compliance Report\n\n';
+        report += `## Overall Status: ${validation.isCompliant ? '✅ COMPLIANT' : '❌ NON-COMPLIANT'}\n\n`;
+        report += '## Summary\n';
+        report += `- **Total Roles**: ${validation.summary.totalRoles}\n`;
+        report += `- **Compliant Roles**: ${validation.summary.compliantRoles.length}\n`;
+        report += `- **Non-Compliant Roles**: ${validation.summary.nonCompliantRoles.length}\n`;
+        report += `- **Total Permissions Validated**: ${validation.summary.validatedPermissions}\n\n`;
+        if (validation.summary.compliantRoles.length > 0) {
+            report += '## ✅ Compliant Roles\n';
+            validation.summary.compliantRoles.forEach(role => {
+                report += `- ${role}\n`;
+            });
+            report += '\n';
+        }
+        if (validation.summary.nonCompliantRoles.length > 0) {
+            report += '## ❌ Non-Compliant Roles\n';
+            validation.roleAnalysis
+                .filter(analysis => !analysis.isCompliant)
+                .forEach(analysis => {
+                report += `### ${analysis.role}\n`;
+                if (analysis.missingPermissions.length > 0) {
+                    report += `**Missing Permissions**: ${analysis.missingPermissions.join(', ')}\n`;
+                }
+                if (analysis.extraPermissions.length > 0) {
+                    report += `**Extra Permissions**: ${analysis.extraPermissions.join(', ')}\n`;
+                }
+                report += `**Document Reference**: ${analysis.documentReference}\n\n`;
+            });
+        }
+        if (validation.warnings.length > 0) {
+            report += '## ⚠️ Warnings\n';
+            validation.warnings.forEach(warning => {
+                report += `- ${warning}\n`;
+            });
+            report += '\n';
+        }
+        if (validation.errors.length > 0) {
+            report += '## 🚨 Errors\n';
+            validation.errors.forEach(error => {
+                report += `- ${error}\n`;
+            });
+            report += '\n';
+        }
+        report += '## Module Coverage\n';
+        validation.modulesCoverage.forEach(coverage => {
+            const status = coverage.covered ? '✅' : '❌';
+            report += `- ${status} **${coverage.module}**: ${coverage.usedByRoles.length} roles\n`;
+        });
+        return report;
+    }
+};
+exports.ContractXDocumentComplianceService = ContractXDocumentComplianceService;
+exports.ContractXDocumentComplianceService = ContractXDocumentComplianceService = ContractXDocumentComplianceService_1 = __decorate([
+    (0, common_1.Injectable)()
+], ContractXDocumentComplianceService);

package/dist/services/contractx-validation.service.d.ts

@@ -0,0 +1,76 @@
+export interface ValidationResult {
+    isValid: boolean;
+    errors: string[];
+    warnings: string[];
+    metadata?: Record<string, any>;
+}
+export interface RoleValidationResult extends ValidationResult {
+    roleInfo?: {
+        name: string;
+        description: string;
+        type: string;
+        scope: string;
+        level: number;
+        tenant: string;
+        isSystem: boolean;
+    };
+}
+export interface PermissionValidationResult extends ValidationResult {
+    permissionInfo?: {
+        module: string;
+        action: string;
+        isValid: boolean;
+    }[];
+}
+export interface UserValidationResult extends ValidationResult {
+    userInfo?: {
+        hasValidRoles: boolean;
+        hasValidPermissions: boolean;
+        roleCount: number;
+        permissionCount: number;
+        tenant: 'system' | 'client' | 'provider' | 'mixed';
+        accessLevel: number;
+    };
+}
+export declare class ContractXValidationService {
+    /**
+     * Validate a single role
+     */
+    validateSingleRole(role: string): RoleValidationResult;
+    validateRoles(roles: string[]): RoleValidationResult;
+    validateSinglePermission(permission: string): PermissionValidationResult;
+    validatePermissions(permissions: string[]): PermissionValidationResult;
+    /**
+     * Validate a complete user (roles + permissions)
+     */
+    validateUser(roles: string[], permissions: string[]): UserValidationResult;
+    /**
+     * Get expected permissions for a set of roles (based on ODS matrix)
+     */
+    private getExpectedPermissionsForRoles;
+    /**
+     * Check if user has specific module access
+     */
+    checkModuleAccess(permissions: string[], module: string, action: string): boolean;
+    /**
+     * Check if user has any access to a module
+     */
+    checkAnyModuleAccess(permissions: string[], module: string): boolean;
+    /**
+     * Get all modules the user has access to
+     */
+    getUserModules(permissions: string[]): string[];
+    /**
+     * Get user's effective permissions (roles + explicit permissions)
+     */
+    getEffectivePermissions(roles: string[], permissions: string[]): string[];
+    /**
+     * Parse ODS permission string (e.g., "c,r,u,d,s,f") into permission array
+     */
+    parseOdsString(odsString: string, module: string): string[];
+    /**
+     * Validate JWT payload structure
+     */
+    validateJwtPayload(payload: any): ValidationResult;
+}
+//# sourceMappingURL=contractx-validation.service.d.ts.map

package/dist/services/contractx-validation.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractx-validation.service.d.ts","sourceRoot":"","sources":["../../src/services/contractx-validation.service.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,cAAc,CAAC,EAAE;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,EAAE;QACT,aAAa,EAAE,OAAO,CAAC;QACvB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,qBACa,0BAA0B;IAErC;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;IAuCtD,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB;IA4CpD,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,0BAA0B;IA8CxE,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,0BAA0B;IA2CtE;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,oBAAoB;IA4D1E;;OAEG;IACH,OAAO,CAAC,8BAA8B;IAatC;;OAEG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIjF;;OAEG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIpE;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;IAa/C;;OAEG;IACH,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;IAMzE;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAK3D;;OAEG;IACH,kBAAkB,CAAC,OAAO,EAAE,GAAG,GAAG,gBAAgB;CAmCnD"}