permissions-contractx 1.0.0

package/dist/constants/contractx-permissions.constants.js

@@ -0,0 +1,1061 @@
+"use strict";
+/**
+ * ContractX Permissions Constants
+ * Based on the ODS permissions matrix and auth-service-contract module structure
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseOdsPermissions = exports.getPermissionsForModule = exports.hasAnyModuleAccess = exports.hasModuleAccess = exports.getActionFromPermission = exports.getModuleFromPermission = exports.validatePermission = exports.VALID_CONTRACTX_PERMISSIONS = exports.ODS_ROLE_PERMISSIONS = exports.CONTRACTX_PERMISSION_GROUPS = exports.CONTRACTX_PERMISSIONS = exports.PERMISSION_ACTIONS = exports.CONTRACTX_MODULES = exports.ContractXPermissionCategory = exports.ContractXPermissionScope = exports.ContractXPermissionType = void 0;
+// Permission Types (CRUD + Show + Filter)
+var ContractXPermissionType;
+(function (ContractXPermissionType) {
+    ContractXPermissionType["CREATE"] = "create";
+    ContractXPermissionType["READ"] = "read";
+    ContractXPermissionType["UPDATE"] = "update";
+    ContractXPermissionType["DELETE"] = "delete";
+    ContractXPermissionType["EXECUTE"] = "execute";
+    ContractXPermissionType["APPROVE"] = "approve";
+    ContractXPermissionType["REJECT"] = "reject";
+    ContractXPermissionType["EXPORT"] = "export";
+    ContractXPermissionType["IMPORT"] = "import";
+    ContractXPermissionType["FILTER"] = "filter";
+    ContractXPermissionType["SHOW"] = "show";
+    ContractXPermissionType["ADMIN"] = "admin";
+})(ContractXPermissionType || (exports.ContractXPermissionType = ContractXPermissionType = {}));
+// Permission Scopes
+var ContractXPermissionScope;
+(function (ContractXPermissionScope) {
+    ContractXPermissionScope["GLOBAL"] = "global";
+    ContractXPermissionScope["ORGANIZATION"] = "organization";
+    ContractXPermissionScope["PROJECT"] = "project";
+    ContractXPermissionScope["DEPARTMENT"] = "department";
+    ContractXPermissionScope["TEAM"] = "team";
+    ContractXPermissionScope["PERSONAL"] = "personal";
+})(ContractXPermissionScope || (exports.ContractXPermissionScope = ContractXPermissionScope = {}));
+// Permission Categories
+var ContractXPermissionCategory;
+(function (ContractXPermissionCategory) {
+    ContractXPermissionCategory["USER_MANAGEMENT"] = "user_management";
+    ContractXPermissionCategory["CONTRACT_MANAGEMENT"] = "contract_management";
+    ContractXPermissionCategory["CLIENT_MANAGEMENT"] = "client_management";
+    ContractXPermissionCategory["PROVIDER_MANAGEMENT"] = "provider_management";
+    ContractXPermissionCategory["DOCUMENT_MANAGEMENT"] = "document_management";
+    ContractXPermissionCategory["FINANCIAL"] = "financial";
+    ContractXPermissionCategory["REPORTING"] = "reporting";
+    ContractXPermissionCategory["SYSTEM_ADMIN"] = "system_admin";
+    ContractXPermissionCategory["AUDIT"] = "audit";
+    ContractXPermissionCategory["INTEGRATION"] = "integration";
+})(ContractXPermissionCategory || (exports.ContractXPermissionCategory = ContractXPermissionCategory = {}));
+// ContractX Modules (from ODS matrix)
+exports.CONTRACTX_MODULES = {
+    // Core Tenant Management
+    CLIENTS: 'clients',
+    // Contract Management
+    CONTRACTS: 'contracts',
+    USERS: 'users',
+    PROVIDERS: 'providers',
+    DOCUMENTS: 'documents',
+    CLAUSES: 'clauses',
+    // Deliverables Management
+    DELIVERABLES: 'deliverables',
+    SUBDELIVERABLES: 'subdeliverables',
+    DELIVERABLE_HISTORY: 'deliverable_history',
+    // SLA Management
+    SLA_SERVICES: 'sla_services',
+    MEASUREMENT_WINDOWS: 'measurement_windows',
+    CREDIT_SERVICE_LEVELS: 'credit_service_levels',
+    // Meeting Management
+    MEETINGS: 'meetings',
+    MEETING_PARTICIPANTS: 'meeting_participants',
+    ACTION_ITEMS: 'action_items',
+    // Notification System
+    NOTIFICATION_ESCALATIONS: 'notification_escalations',
+    // Financial Management
+    INVOICE_SERVICES: 'invoice_services',
+    INVOICE_LINES: 'invoice_lines',
+    // System Administration
+    SECURITY_CONTROL: 'security_control',
+    CONFIGURATION: 'configuration', // Type Values
+    WORKFLOWS: 'workflows',
+};
+// CRUD Actions with abbreviations (from ODS: c,r,u,d,s,f)
+exports.PERMISSION_ACTIONS = {
+    c: ContractXPermissionType.CREATE,
+    r: ContractXPermissionType.READ,
+    u: ContractXPermissionType.UPDATE,
+    d: ContractXPermissionType.DELETE,
+    s: ContractXPermissionType.SHOW,
+    f: ContractXPermissionType.FILTER,
+};
+// Generate permissions for each module
+const createModulePermissions = (module) => ({
+    CREATE: `${module}:create`,
+    READ: `${module}:read`,
+    UPDATE: `${module}:update`,
+    DELETE: `${module}:delete`,
+    SHOW: `${module}:show`,
+    FILTER: `${module}:filter`,
+    ADMIN: `${module}:admin`,
+});
+// ContractX Permissions organized by module
+exports.CONTRACTX_PERMISSIONS = {
+    // Tenant Management
+    CLIENTS: createModulePermissions(exports.CONTRACTX_MODULES.CLIENTS),
+    // Contract Management
+    CONTRACTS: createModulePermissions(exports.CONTRACTX_MODULES.CONTRACTS),
+    USERS: createModulePermissions(exports.CONTRACTX_MODULES.USERS),
+    PROVIDERS: createModulePermissions(exports.CONTRACTX_MODULES.PROVIDERS),
+    DOCUMENTS: createModulePermissions(exports.CONTRACTX_MODULES.DOCUMENTS),
+    CLAUSES: createModulePermissions(exports.CONTRACTX_MODULES.CLAUSES),
+    // Deliverables Management
+    DELIVERABLES: createModulePermissions(exports.CONTRACTX_MODULES.DELIVERABLES),
+    SUBDELIVERABLES: createModulePermissions(exports.CONTRACTX_MODULES.SUBDELIVERABLES),
+    DELIVERABLE_HISTORY: createModulePermissions(exports.CONTRACTX_MODULES.DELIVERABLE_HISTORY),
+    // SLA Management
+    SLA_SERVICES: createModulePermissions(exports.CONTRACTX_MODULES.SLA_SERVICES),
+    MEASUREMENT_WINDOWS: createModulePermissions(exports.CONTRACTX_MODULES.MEASUREMENT_WINDOWS),
+    CREDIT_SERVICE_LEVELS: createModulePermissions(exports.CONTRACTX_MODULES.CREDIT_SERVICE_LEVELS),
+    // Meeting Management
+    MEETINGS: createModulePermissions(exports.CONTRACTX_MODULES.MEETINGS),
+    MEETING_PARTICIPANTS: createModulePermissions(exports.CONTRACTX_MODULES.MEETING_PARTICIPANTS),
+    ACTION_ITEMS: createModulePermissions(exports.CONTRACTX_MODULES.ACTION_ITEMS),
+    // Notification System
+    NOTIFICATION_ESCALATIONS: createModulePermissions(exports.CONTRACTX_MODULES.NOTIFICATION_ESCALATIONS),
+    // Financial Management
+    INVOICE_SERVICES: createModulePermissions(exports.CONTRACTX_MODULES.INVOICE_SERVICES),
+    INVOICE_LINES: createModulePermissions(exports.CONTRACTX_MODULES.INVOICE_LINES),
+    // System Administration
+    SECURITY_CONTROL: createModulePermissions(exports.CONTRACTX_MODULES.SECURITY_CONTROL),
+    CONFIGURATION: createModulePermissions(exports.CONTRACTX_MODULES.CONFIGURATION),
+    WORKFLOWS: createModulePermissions(exports.CONTRACTX_MODULES.WORKFLOWS),
+};
+// Flatten all permissions for validation (will be properly exported later)
+const VALID_CONTRACTX_PERMISSIONS_TEMP = Object.values(exports.CONTRACTX_PERMISSIONS)
+    .flatMap(module => Object.values(module));
+// Permission groups for role assignments (based on ODS matrix analysis)
+exports.CONTRACTX_PERMISSION_GROUPS = {
+    // Superadmin - Full access (c,r,u,d,f for all modules)
+    SUPERADMIN_PERMISSIONS: VALID_CONTRACTX_PERMISSIONS_TEMP,
+    // Core Management Permissions
+    CORE_MANAGEMENT: [
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.CONTRACTS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.USERS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.PROVIDERS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.CLIENTS),
+    ],
+    // Performance Management Permissions
+    PERFORMANCE_MANAGEMENT: [
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.SLA_SERVICES),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.DELIVERABLES),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY),
+    ],
+    // Financial Management Permissions
+    FINANCIAL_MANAGEMENT: [
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.INVOICE_LINES),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS),
+    ],
+    // Collaboration Permissions
+    COLLABORATION: [
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.MEETINGS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS),
+    ],
+    // Reporting Permissions (mostly read/show/filter)
+    REPORTING: [
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.READ,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.READ,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+    ],
+    // Risk Management Permissions
+    RISK_MANAGEMENT: [
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.UPDATE,
+    ],
+    // System Administration Permissions
+    SYSTEM_ADMIN: [
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.CONFIGURATION),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.WORKFLOWS),
+        ...Object.values(exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS),
+    ],
+    // Read-only permissions for viewers
+    READ_ONLY: VALID_CONTRACTX_PERMISSIONS_TEMP.filter(permission => permission.endsWith(':read') ||
+        permission.endsWith(':show') ||
+        permission.endsWith(':filter')),
+};
+// Complete ODS Matrix-based Role Permissions (from PermisosRoles.odt document)
+exports.ODS_ROLE_PERMISSIONS = {
+    // 1. Superadmin - Full access to all modules (C,R,U,D,F on all) - Document compliant
+    superadmin: [
+        // clients: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CLIENTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CLIENTS.READ,
+        exports.CONTRACTX_PERMISSIONS.CLIENTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CLIENTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CLIENTS.FILTER,
+        // contracts: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.READ,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // users: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.USERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.READ,
+        exports.CONTRACTX_PERMISSIONS.USERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // providers: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.READ,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.FILTER,
+        // documents: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.READ,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.FILTER,
+        // clauses: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.READ,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // deliverables: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.READ,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // subdeliverables: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.READ,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+        // deliverable_history: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.READ,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_services: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.READ,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // measurement_windows: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // credit_service_levels: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.READ,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.FILTER,
+        // meeting_participants: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.FILTER,
+        // action_items: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.READ,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.FILTER,
+        // notification_escalations: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.READ,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // invoice_services: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.READ,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // invoice_lines: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.READ,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.FILTER,
+        // security_control: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.READ,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.FILTER,
+        // configuration: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.FILTER,
+        // workflows: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.FILTER,
+    ],
+    // 2. Client Contract Admin - Full contract management for assigned client (N/A for clients)
+    client_contract_admin: [
+        // contracts: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // users: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.USERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.USERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // providers: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.FILTER,
+        // documents: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.FILTER,
+        // clauses: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // deliverables: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // subdeliverables: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+        // deliverable_history: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_service: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // measurement_windows: ['create', 'read', 'update', 'delete', 'show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // credit_service_levels: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.FILTER,
+        // meeting_participants: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.FILTER,
+        // action_items: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.FILTER,
+        // notification_escalation: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // invoices: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // invoice_lines: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.FILTER,
+        // security_control: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.FILTER,
+        // type_values: ['create', 'read', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.FILTER,
+        // workflows: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.FILTER,
+    ],
+    // 3. Client Performance Manager - Focus on SLA management and measurement
+    client_performance_manager: [
+        // contracts: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // users: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // providers: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.FILTER,
+        // documents: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.FILTER,
+        // clauses: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // deliverables: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // subdeliverables: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+        // deliverable_history: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_service: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // measurement_windows: ['create', 'update', 'delete', 'show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // credit_service_levels: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.FILTER,
+        // meeting_participants: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.FILTER,
+        // action_items: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.FILTER,
+        // notification_escalation: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // invoices: ['show', 'update', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // invoice_lines: ['show', 'update', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.FILTER,
+        // type_values: ['read'],
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+    ],
+    // 4. Client Finance Manager - Financial responsibility role
+    client_finance_manager: [
+        // contracts: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // users: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // providers: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.FILTER,
+        // clauses: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // deliverables: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // subdeliverables: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+        // deliverable_history: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_service: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // credit_service_levels: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // notification_escalation: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // invoices: ['show', 'update', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // invoice_lines: ['show', 'update', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.FILTER,
+        // type_values: ['read'],
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+    ],
+    // 5. Client Reports Manager - Reporting responsibility role (corrected)
+    client_reports_manager: [
+        // documents: ['show']
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        // clauses: ['show', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // subdeliverables: ['show']
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        // deliverable_history: ['show']
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        // measurement_windows: ['read', 'show', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // notification_escalation: ['show', 'filter']
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // meetings: ['show']
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        // type_values: ['show']
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.SHOW,
+    ],
+    // 6. Client Relationship Manager - Relationship management role - Document compliant
+    client_relationship_manager: [
+        // users: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // clauses: ['show', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // meetings: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        // meeting_participants: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.UPDATE,
+        // action_items: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+    ],
+    // 7. Client Risk Manager - Risk management role - Document compliant
+    client_risk_manager: [
+        // contracts: ['show'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        // documents: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        // meetings: ['show', 'update'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        // notification_escalation: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        // security_control: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.UPDATE,
+    ],
+    // 8. Provider Contract Admin - Provider contract administrator - Document compliant
+    provider_contract_admin: [
+        // contracts: ['create', 'show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.UPDATE,
+        // users: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.USERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.USERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.DELETE,
+        // providers: ['create', 'show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.UPDATE,
+        // documents: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.DELETE,
+        // deliverables: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.DELETE,
+        // subdeliverables: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.DELETE,
+        // deliverable_history: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.DELETE,
+        // sla_service: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.DELETE,
+        // measurement_windows: ['create', 'read', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // credit_service_levels: ['create', 'show', 'update', 'delete', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.DELETE,
+        // meeting_participants: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.DELETE,
+        // action_items: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.DELETE,
+        // notification_escalation: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.DELETE,
+        // invoices: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.DELETE,
+        // invoice_lines: ['create', 'show', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.DELETE,
+        // type_values: ['create', 'read', 'update', 'delete'],
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.DELETE,
+        // workflows: ['create', 'read', 'update', 'delete', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.FILTER,
+    ],
+    // 9. Provider Performance Manager - Provider performance focused - Document compliant
+    provider_performance_manager: [
+        // contracts: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // users: ['show', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // providers: ['show', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.FILTER,
+        // documents: ['show', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.FILTER,
+        // deliverables: ['show', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // subdeliverables: ['show', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+        // deliverable_history: ['show', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_service: ['create', 'show', 'update', 'delete', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // measurement_windows: ['create', 'show', 'update', 'delete', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // credit_service_levels: ['show', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['show', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.FILTER,
+        // meeting_participants: ['show', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.FILTER,
+        // action_items: ['show', 'filter'] - FIXED from document
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.FILTER,
+        // notification_escalation: ['show', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // invoices: ['show', 'update', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // invoice_lines: ['show', 'update', 'filter'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.FILTER,
+        // type_values: ['read'] - ADDED from document
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+    ],
+    // 10. Provider Finance Manager - Provider financial operations (corrected)
+    provider_finance_manager: [
+        // contracts: ['show']
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        // invoices: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        // invoice_lines: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        // type_values: ['read']
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+    ],
+    // 11. Provider Relationship Manager - Provider relationship management (corrected)
+    provider_relationship_manager: [
+        // users: ['show']
+        exports.CONTRACTX_PERMISSIONS.USERS.SHOW,
+        // meetings: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        // meeting_participants: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.UPDATE,
+        // action_items: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+    ],
+    // 12. Provider Risk Manager - Provider risk management (corrected)
+    provider_risk_manager: [
+        // contracts: ['show']
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        // documents: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        // notification_escalation: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        // security_control: ['show', 'update']
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.UPDATE,
+        // subdeliverables: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.READ,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+    ],
+    // 13. Provider Operator - Provider operational support
+    provider_operator: [
+        // deliverables: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.UPDATE,
+        // subdeliverables: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.UPDATE,
+        // deliverable_history: ['create', 'show'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        // meetings: ['show'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        // action_items: ['show', 'update'],
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+    ],
+    // 14. Auditor - Audit and compliance role
+    auditor: [
+        // contracts: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // documents: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.FILTER,
+        // deliverables: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // deliverable_history: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_service: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // credit_service_levels: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.FILTER,
+        // action_items: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.FILTER,
+        // invoices: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.SHOW,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // security_control: ['show', 'filter'],
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.SHOW,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.FILTER,
+    ],
+    // 15. Guest - Limited read-only access
+    guest: [
+        // contracts: ['show'],
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.SHOW,
+        // documents: ['show'],
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        // deliverables: ['show'],
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.SHOW,
+        // meetings: ['show'],
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+    ],
+    // 16. Provider Reports Manager - Provider reports management - Document compliant
+    provider_reports_manager: [
+        // documents: ['show']
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.SHOW,
+        // subdeliverables: ['show']
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.SHOW,
+        // deliverable_history: ['show']
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.SHOW,
+        // measurement_windows: ['read', 'show', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.SHOW,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // meetings: ['show']
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.SHOW,
+        // action_items: ['show']
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.SHOW,
+    ],
+    // 17. Support - Support role with broad access (excluding clients) - Document compliant
+    support: [
+        // All modules except clients (same as superadmin but no client access)
+        // contracts: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.READ,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CONTRACTS.FILTER,
+        // users: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.USERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.READ,
+        exports.CONTRACTX_PERMISSIONS.USERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.USERS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.USERS.FILTER,
+        // providers: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.READ,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.PROVIDERS.FILTER,
+        // documents: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.READ,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DOCUMENTS.FILTER,
+        // clauses: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.READ,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CLAUSES.FILTER,
+        // deliverables: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.READ,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLES.FILTER,
+        // subdeliverables: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.READ,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SUBDELIVERABLES.FILTER,
+        // deliverable_history: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.CREATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.READ,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.DELETE,
+        exports.CONTRACTX_PERMISSIONS.DELIVERABLE_HISTORY.FILTER,
+        // sla_services: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.READ,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SLA_SERVICES.FILTER,
+        // measurement_windows: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEASUREMENT_WINDOWS.FILTER,
+        // credit_service_levels: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.READ,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CREDIT_SERVICE_LEVELS.FILTER,
+        // meetings: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEETINGS.FILTER,
+        // meeting_participants: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.READ,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.MEETING_PARTICIPANTS.FILTER,
+        // action_items: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.READ,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.ACTION_ITEMS.FILTER,
+        // notification_escalations: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.READ,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.NOTIFICATION_ESCALATIONS.FILTER,
+        // invoice_services: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.READ,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_SERVICES.FILTER,
+        // invoice_lines: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.CREATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.READ,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.DELETE,
+        exports.CONTRACTX_PERMISSIONS.INVOICE_LINES.FILTER,
+        // security_control: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.CREATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.READ,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.DELETE,
+        exports.CONTRACTX_PERMISSIONS.SECURITY_CONTROL.FILTER,
+        // configuration: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.CREATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.READ,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.DELETE,
+        exports.CONTRACTX_PERMISSIONS.CONFIGURATION.FILTER,
+        // workflows: ['create', 'read', 'update', 'delete', 'filter']
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.CREATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.READ,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.UPDATE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.DELETE,
+        exports.CONTRACTX_PERMISSIONS.WORKFLOWS.FILTER,
+    ],
+};
+// Export the validation arrays - ODS_ROLE_PERMISSIONS is already exported above
+exports.VALID_CONTRACTX_PERMISSIONS = Object.values(exports.CONTRACTX_PERMISSIONS)
+    .flatMap(module => Object.values(module));
+// Helper functions for permission validation
+const validatePermission = (permission) => {
+    return exports.VALID_CONTRACTX_PERMISSIONS.includes(permission);
+};
+exports.validatePermission = validatePermission;
+const getModuleFromPermission = (permission) => {
+    const [module] = permission.split(':');
+    return Object.values(exports.CONTRACTX_MODULES).includes(module) ? module : null;
+};
+exports.getModuleFromPermission = getModuleFromPermission;
+const getActionFromPermission = (permission) => {
+    const [, action] = permission.split(':');
+    return Object.values(ContractXPermissionType).includes(action) ? action : null;
+};
+exports.getActionFromPermission = getActionFromPermission;
+const hasModuleAccess = (permissions, module, action) => {
+    const permissionToCheck = `${module}:${action}`;
+    return permissions.includes(permissionToCheck);
+};
+exports.hasModuleAccess = hasModuleAccess;
+const hasAnyModuleAccess = (permissions, module) => {
+    return permissions.some(permission => permission.startsWith(`${module}:`));
+};
+exports.hasAnyModuleAccess = hasAnyModuleAccess;
+const getPermissionsForModule = (module) => {
+    return exports.CONTRACTX_PERMISSIONS[module.toUpperCase()];
+};
+exports.getPermissionsForModule = getPermissionsForModule;
+const parseOdsPermissions = (odsString) => {
+    if (!odsString || odsString === 'N/A')
+        return [];
+    const actions = odsString.split(',').map(s => s.trim());
+    return actions.map(action => exports.PERMISSION_ACTIONS[action]).filter(Boolean);
+};
+exports.parseOdsPermissions = parseOdsPermissions;