permissions-contractx 1.0.2 → 1.1.0

package/dist/services/contractx-authorization.service.d.ts

@@ -1,4 +1,4 @@
-import { ContractXValidationService, ValidationResult } from './contractx-validation.service';
+import { ContractXValidationService } from './contractx-validation.service';
 export interface AuthorizationContext {
     userRoles: string[];
     userPermissions: string[];
@@ -29,79 +29,250 @@ export declare class ContractXAuthorizationService {
     /**
      * Authorize a user for a specific action on a resource
      */
-    authorize(context: AuthorizationContext): AuthorizationResult;
+    authorize(context: any): {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            requiredPermission: string;
+            wildcardPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            wildcardPermission: string;
+            requiredPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata?: undefined;
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            roleValidation: {
+                roleInfos: any[];
+                tenantCount: number;
+            };
+            permissionValidation: {
+                moduleCount: number;
+                actionCount: number;
+                modules: any[];
+                actions: any[];
+            };
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            systemRole: boolean;
+            hasModuleAccess?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            hasModuleAccess: boolean;
+            systemRole?: undefined;
+        };
+    };
     /**
      * Check if user has system-level access
      */
-    private hasSystemLevelAccess;
+    hasSystemLevelAccess(userRoles: any): any;
     /**
      * Check role-based access for a resource and action
      */
-    private checkRoleBasedAccess;
+    checkRoleBasedAccess(userRoles: any, resource: any, action: any): {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            requiredPermission: string;
+            effectivePermissions: number;
+            wildcardPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            wildcardPermission: string;
+            requiredPermission?: undefined;
+            effectivePermissions?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata?: undefined;
+    };
     /**
      * Check permission-based access for a resource and action
      */
-    private checkPermissionBasedAccess;
+    checkPermissionBasedAccess(userPermissions: any, resource: any, action: any): {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            requiredPermission: string;
+            wildcardPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            wildcardPermission: string;
+            requiredPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata?: undefined;
+    };
     /**
      * Check if user has any access to a module
      */
-    private checkModuleAccess;
+    checkModuleAccess(userPermissions: any, module: any): any;
     /**
      * Generate an access matrix for the user
      */
-    generateAccessMatrix(context: AuthorizationContext): AccessMatrix;
+    generateAccessMatrix(context: any): {
+        hasSystemAccess: any;
+        hasClientAccess: any;
+        hasProviderAccess: any;
+        hasAdminAccess: any;
+        accessibleModules: unknown[];
+        highestRoleLevel: number;
+        effectivePermissions: any[];
+    };
     /**
      * Check if user can access a specific tenant
      */
-    canAccessTenant(userRoles: string[], tenantType: 'client' | 'provider'): boolean;
+    canAccessTenant(userRoles: any, tenantType: any): any;
     /**
      * Get user's accessible tenant types
      */
-    getAccessibleTenants(userRoles: string[]): ('client' | 'provider' | 'system')[];
+    getAccessibleTenants(userRoles: any): unknown[];
     /**
      * Filter resources based on user permissions
      */
-    filterAccessibleResources(userPermissions: string[], resources: string[], requiredAction?: string): string[];
+    filterAccessibleResources(userPermissions: any, resources: any, requiredAction?: string): any;
     /**
      * Get user's permissions for a specific module
      */
-    getModulePermissions(userPermissions: string[], module: string): string[];
+    getModulePermissions(userPermissions: any, module: any): any;
     /**
      * Check if user has administrative access to a resource
      */
-    hasAdministrativeAccess(userRoles: string[], _resource?: string): boolean;
+    hasAdministrativeAccess(userRoles: any, _resource: any): any;
     /**
      * Validate user context for multi-tenant environment
      */
-    validateMultiTenantAccess(context: AuthorizationContext): ValidationResult;
+    validateMultiTenantAccess(context: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+    };
     /**
      * Get permission summary for logging/audit purposes
      */
-    getPermissionSummary(context: AuthorizationContext): Record<string, any>;
+    getPermissionSummary(context: any): {
+        userId: any;
+        roles: any;
+        permissionCount: any;
+        effectivePermissionCount: number;
+        accessLevel: number;
+        tenants: unknown[];
+        modules: unknown[];
+        hasSystemAccess: any;
+        hasAdminAccess: any;
+    };
     /**
      * Check if authorization is required for a resource
      */
-    isAuthorizationRequired(resource: string, action: string): boolean;
+    isAuthorizationRequired(resource: any, action: any): boolean;
     /**
      * Get minimum required role for a resource/action combination
      */
-    getMinimumRequiredRole(resource: string, action: string): string[];
+    getMinimumRequiredRole(resource: any, action: any): any;
     /**
      * Check permission for a user (simpler interface for admin service)
      */
-    checkPermission(user: {
-        role: string[];
-        permissions: string[];
-    }, permission: string, context?: {
-        tenantId?: string;
-        resourceId?: string;
-    }): AuthorizationResult;
+    checkPermission(user: any, permission: any, context: any): {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            requiredPermission: string;
+            wildcardPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            wildcardPermission: string;
+            requiredPermission?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata?: undefined;
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            roleValidation: {
+                roleInfos: any[];
+                tenantCount: number;
+            };
+            permissionValidation: {
+                moduleCount: number;
+                actionCount: number;
+                modules: any[];
+                actions: any[];
+            };
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            systemRole: boolean;
+            hasModuleAccess?: undefined;
+        };
+    } | {
+        granted: boolean;
+        reason: string;
+        level: string;
+        metadata: {
+            hasModuleAccess: boolean;
+            systemRole?: undefined;
+        };
+    };
     /**
      * Generate access matrix for a user object (simpler interface)
      */
-    generateAccessMatrixForUser(user: {
-        role: string[];
-        permissions: string[];
-    }): AccessMatrix;
+    generateAccessMatrixForUser(user: any): {
+        hasSystemAccess: any;
+        hasClientAccess: any;
+        hasProviderAccess: any;
+        hasAdminAccess: any;
+        accessibleModules: unknown[];
+        highestRoleLevel: number;
+        effectivePermissions: any[];
+    };
 }
 //# sourceMappingURL=contractx-authorization.service.d.ts.map

package/dist/services/contractx-authorization.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contractx-authorization.service.d.ts","sourceRoot":"","sources":["../../src/services/contractx-authorization.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AAgBxC,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,qBACa,6BAA6B;IAE5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAAjB,iBAAiB,EAAE,0BAA0B;IAE1E;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB;IA4E7D;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAQ5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAqC5B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAkClC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,YAAY;IAgCjE;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO;IAchF;;OAEG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC,EAAE;IAmB/E;;OAEG;IACH,yBAAyB,CACvB,eAAe,EAAE,MAAM,EAAE,EACzB,SAAS,EAAE,MAAM,EAAE,EACnB,cAAc,GAAE,MAAe,GAC9B,MAAM,EAAE;IAOX;;OAEG;IACH,oBAAoB,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAUzE;;OAEG;IACH,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAezE;;OAEG;IACH,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,gBAAgB;IA6B1E;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAiBxE;;OAEG;IACH,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAYlE;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAoBlE;;OAEG;IACH,eAAe,CACb,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,EAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,mBAAmB;IAetB;;OAEG;IACH,2BAA2B,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY;CAQ3F"}
+{"version":3,"file":"contractx-authorization.service.d.ts","sourceRoot":"","sources":["../../src/services/contractx-authorization.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAM5E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AACD,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,qBACa,6BAA6B;IAC1B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAAjB,iBAAiB,EAAE,0BAA0B;IAG1E;;OAEG;IACH,SAAS,CAAC,OAAO,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+DjB;;OAEG;IACH,oBAAoB,CAAC,SAAS,KAAA;IAK9B;;OAEG;IACH,oBAAoB,CAAC,SAAS,KAAA,EAAE,QAAQ,KAAA,EAAE,MAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IA6BhD;;OAEG;IACH,0BAA0B,CAAC,eAAe,KAAA,EAAE,QAAQ,KAAA,EAAE,MAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;IA0B5D;;OAEG;IACH,iBAAiB,CAAC,eAAe,KAAA,EAAE,MAAM,KAAA;IAGzC;;OAEG;IACH,oBAAoB,CAAC,OAAO,KAAA;;;;;;;;;IA0B5B;;OAEG;IACH,eAAe,CAAC,SAAS,KAAA,EAAE,UAAU,KAAA;IAarC;;OAEG;IACH,oBAAoB,CAAC,SAAS,KAAA;IAiB9B;;OAEG;IACH,yBAAyB,CAAC,eAAe,KAAA,EAAE,SAAS,KAAA,EAAE,cAAc,SAAS;IAI7E;;OAEG;IACH,oBAAoB,CAAC,eAAe,KAAA,EAAE,MAAM,KAAA;IAS5C;;OAEG;IACH,uBAAuB,CAAC,SAAS,KAAA,EAAE,SAAS,KAAA;IAY5C;;OAEG;IACH,yBAAyB,CAAC,OAAO,KAAA;;;;;IAwBjC;;OAEG;IACH,oBAAoB,CAAC,OAAO,KAAA;;;;;;;;;;;IAe5B;;OAEG;IACH,uBAAuB,CAAC,QAAQ,KAAA,EAAE,MAAM,KAAA;IASxC;;OAEG;IACH,sBAAsB,CAAC,QAAQ,KAAA,EAAE,MAAM,KAAA;IAkBvC;;OAEG;IACH,eAAe,CAAC,IAAI,KAAA,EAAE,UAAU,KAAA,EAAE,OAAO,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAYzC;;OAEG;IACH,2BAA2B,CAAC,IAAI,KAAA;;;;;;;;;CAOnC"}

package/dist/services/contractx-authorization.service.js

@@ -17,6 +17,7 @@ const contractx_permissions_constants_1 = require("../constants/contractx-permis
 let ContractXAuthorizationService = class ContractXAuthorizationService {
     constructor(validationService) {
         this.validationService = validationService;
+        this.validationService = validationService;
     }
     /**
      * Authorize a user for a specific action on a resource
@@ -367,3 +368,4 @@ exports.ContractXAuthorizationService = ContractXAuthorizationService = __decora
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [contractx_validation_service_1.ContractXValidationService])
 ], ContractXAuthorizationService);
+;

package/dist/services/contractx-validation.service.d.ts

@@ -36,41 +36,122 @@ export declare class ContractXValidationService {
     /**
      * Validate a single role
      */
-    validateSingleRole(role: string): RoleValidationResult;
-    validateRoles(roles: string[]): RoleValidationResult;
-    validateSinglePermission(permission: string): PermissionValidationResult;
-    validatePermissions(permissions: string[]): PermissionValidationResult;
+    validateSingleRole(role: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        roleInfo?: undefined;
+    } | {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        roleInfo: {
+            name: string;
+            description: string;
+            type: import("../constants/contractx-roles.constants").ContractXRoleType;
+            scope: import("../constants/contractx-roles.constants").ContractXRoleScope;
+            level: number;
+            tenant: string;
+            isSystem: boolean;
+        };
+    };
+    validateRoles(roles: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        metadata?: undefined;
+    } | {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        metadata: {
+            roleInfos: any[];
+            tenantCount: number;
+        };
+    };
+    validateSinglePermission(permission: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        permissionInfo: any[];
+    };
+    validatePermissions(permissions: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        permissionInfo: any[];
+        metadata?: undefined;
+    } | {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        permissionInfo: any[];
+        metadata: {
+            moduleCount: number;
+            actionCount: number;
+            modules: any[];
+            actions: any[];
+        };
+    };
     /**
      * Validate a complete user (roles + permissions)
      */
-    validateUser(roles: string[], permissions: string[]): UserValidationResult;
+    validateUser(roles: any, permissions: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+        userInfo: {
+            hasValidRoles: boolean;
+            hasValidPermissions: boolean;
+            roleCount: number;
+            permissionCount: number;
+            tenant: string;
+            accessLevel: number;
+        };
+        metadata: {
+            roleValidation: {
+                roleInfos: any[];
+                tenantCount: number;
+            };
+            permissionValidation: {
+                moduleCount: number;
+                actionCount: number;
+                modules: any[];
+                actions: any[];
+            };
+        };
+    };
     /**
      * Get expected permissions for a set of roles (based on ODS matrix)
      */
-    private getExpectedPermissionsForRoles;
+    getExpectedPermissionsForRoles(roles: any): unknown[];
     /**
      * Check if user has specific module access
      */
-    checkModuleAccess(permissions: string[], module: string, action: string): boolean;
+    checkModuleAccess(permissions: any, module: any, action: any): any;
     /**
      * Check if user has any access to a module
      */
-    checkAnyModuleAccess(permissions: string[], module: string): boolean;
+    checkAnyModuleAccess(permissions: any, module: any): any;
     /**
      * Get all modules the user has access to
      */
-    getUserModules(permissions: string[]): string[];
+    getUserModules(permissions: any): unknown[];
     /**
      * Get user's effective permissions (roles + explicit permissions)
      */
-    getEffectivePermissions(roles: string[], permissions: string[]): string[];
+    getEffectivePermissions(roles: any, permissions: any): any[];
     /**
      * Parse ODS permission string (e.g., "c,r,u,d,s,f") into permission array
      */
-    parseOdsString(odsString: string, module: string): string[];
+    parseOdsString(odsString: any, module: any): any;
     /**
      * Validate JWT payload structure
      */
-    validateJwtPayload(payload: any): ValidationResult;
+    validateJwtPayload(payload: any): {
+        isValid: boolean;
+        errors: any[];
+        warnings: any[];
+    };
 }
 //# sourceMappingURL=contractx-validation.service.d.ts.map

package/dist/services/contractx-validation.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contractx-validation.service.d.ts","sourceRoot":"","sources":["../../src/services/contractx-validation.service.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,cAAc,CAAC,EAAE;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,EAAE;QACT,aAAa,EAAE,OAAO,CAAC;QACvB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,qBACa,0BAA0B;IAErC;;OAEG;IACH,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;IAuCtD,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB;IA4CpD,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,0BAA0B;IA8CxE,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,0BAA0B;IA2CtE;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,oBAAoB;IAuE1E;;OAEG;IACH,OAAO,CAAC,8BAA8B;IAkBtC;;OAEG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIjF;;OAEG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIpE;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;IAa/C;;OAEG;IACH,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;IAMzE;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAK3D;;OAEG;IACH,kBAAkB,CAAC,OAAO,EAAE,GAAG,GAAG,gBAAgB;CAwCnD"}
+{"version":3,"file":"contractx-validation.service.d.ts","sourceRoot":"","sources":["../../src/services/contractx-validation.service.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AACD,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AACD,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,cAAc,CAAC,EAAE;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,EAAE,CAAC;CACL;AACD,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,EAAE;QACT,aAAa,EAAE,OAAO,CAAC;QACvB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,qBACa,0BAA0B;IACnC;;OAEG;IACH,kBAAkB,CAAC,IAAI,KAAA;;;;;;;;;;;;;;;;;;;IAiCvB,aAAa,CAAC,KAAK,KAAA;;;;;;;;;;;;;;IAoCnB,wBAAwB,CAAC,UAAU,KAAA;;;;;;IAqCnC,mBAAmB,CAAC,WAAW,KAAA;;;;;;;;;;;;;;;;;;IAoC/B;;OAEG;IACH,YAAY,CAAC,KAAK,KAAA,EAAE,WAAW,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;IA4D/B;;OAEG;IACH,8BAA8B,CAAC,KAAK,KAAA;IAcpC;;OAEG;IACH,iBAAiB,CAAC,WAAW,KAAA,EAAE,MAAM,KAAA,EAAE,MAAM,KAAA;IAG7C;;OAEG;IACH,oBAAoB,CAAC,WAAW,KAAA,EAAE,MAAM,KAAA;IAGxC;;OAEG;IACH,cAAc,CAAC,WAAW,KAAA;IAU1B;;OAEG;IACH,uBAAuB,CAAC,KAAK,KAAA,EAAE,WAAW,KAAA;IAK1C;;OAEG;IACH,cAAc,CAAC,SAAS,KAAA,EAAE,MAAM,KAAA;IAIhC;;OAEG;IACH,kBAAkB,CAAC,OAAO,KAAA;;;;;CAoC7B"}

package/dist/services/contractx-validation.service.js

@@ -320,3 +320,4 @@ exports.ContractXValidationService = ContractXValidationService;
 exports.ContractXValidationService = ContractXValidationService = __decorate([
     (0, common_1.Injectable)()
 ], ContractXValidationService);
+;

package/dist/services/index.d.ts

@@ -1,6 +1,4 @@
 export * from './user-context.service';
 export * from './contractx-validation.service';
 export * from './contractx-authorization.service';
-export { ValidationResult, RoleValidationResult, PermissionValidationResult, UserValidationResult, } from './contractx-validation.service';
-export { AuthorizationContext, AuthorizationResult, AccessMatrix, } from './contractx-authorization.service';
 //# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AACA,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAGlD,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,GACb,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AACA,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC"}

package/dist/services/index.js

@@ -18,3 +18,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./user-context.service"), exports);
 __exportStar(require("./contractx-validation.service"), exports);
 __exportStar(require("./contractx-authorization.service"), exports);
+// NOTA[reconstrucción]: contractx-document-compliance.service NO se exporta (huérfano en el
+// tarball original — compilado pero ausente de services/index y del index raíz). Ver clasificación "ajeno".

package/dist/services/user-context.service.d.ts

@@ -1,12 +1,7 @@
-import { JwtPayload } from '../interfaces';
-/**
- * Request-scoped service to manage current user context
- * Provides convenient methods to access user information and check permissions
- */
-interface RequestWithUser {
-    user?: any;
+import { AuthenticatedRequest, JwtPayload } from '../interfaces';
+type RequestWithUser = AuthenticatedRequest & {
     tenant?: any;
-}
+};
 export declare class UserContextService {
     private readonly request;
     private user;
@@ -16,40 +11,40 @@ export declare class UserContextService {
      * Set the current user context
      * This is typically called by the authentication guard
      */
-    setUser(user: JwtPayload): void;
+    setUser(user: any): void;
     /**
      * Auto-initialize user from request if not manually set
      */
-    private tryAutoInitialize;
+    tryAutoInitialize(): void;
     /**
      * Get the current authenticated user
      */
-    getUser(): JwtPayload | null;
+    getUser(): JwtPayload;
     /**
      * Get the current user's ID
      */
-    getUserId(): string | null;
+    getUserId(): string;
     /**
      * Get the current user's full name
      */
-    getUserFullName(): string | null;
+    getUserFullName(): string;
     /**
      * Get the current user's email
      */
-    getUserEmail(): string | null;
+    getUserEmail(): string;
     /**
      * Get the current user's client ID
      */
-    getClientId(): string | null;
+    getClientId(): string;
     /**
      * Get the tenant key (key_client) for multi-tenant operations
      * Tries multiple sources: user.key_client, user.clientId, tenant.key_client
      */
-    getTenantKey(): string | null;
+    getTenantKey(): any;
     /**
      * Get the current user's session ID
      */
-    getSessionId(): string | null;
+    getSessionId(): string;
     /**
      * Get all user roles
      */
@@ -61,27 +56,27 @@ export declare class UserContextService {
     /**
      * Check if user has a specific role
      */
-    hasRole(role: string): boolean;
+    hasRole(role: any): boolean;
     /**
      * Check if user has any of the specified roles
      */
-    hasAnyRole(roles: readonly string[] | string[]): boolean;
+    hasAnyRole(roles: any): any;
     /**
      * Check if user has all of the specified roles
      */
-    hasAllRoles(roles: readonly string[] | string[]): boolean;
+    hasAllRoles(roles: any): any;
     /**
      * Check if user has a specific permission
      */
-    hasPermission(permission: string): boolean;
+    hasPermission(permission: any): boolean;
     /**
      * Check if user has any of the specified permissions
      */
-    hasAnyPermission(permissions: string[]): boolean;
+    hasAnyPermission(permissions: any): any;
     /**
      * Check if user has all of the specified permissions
      */
-    hasAllPermissions(permissions: string[]): boolean;
+    hasAllPermissions(permissions: any): any;
     /**
      * Check if user is authenticated
      */
@@ -93,38 +88,38 @@ export declare class UserContextService {
     /**
      * Check if user has admin privileges (superadmin or contract admin)
      */
-    isAdmin(): boolean;
+    isAdmin(): any;
     /**
      * Check if user has client-side role
      */
-    isClientUser(): boolean;
+    isClientUser(): any;
     /**
      * Check if user has provider-side role
      */
-    isProviderUser(): boolean;
+    isProviderUser(): any;
     /**
      * Check if user can access a specific module based on permissions
      */
-    canAccessModule(module: string): boolean;
+    canAccessModule(module: any): boolean;
     /**
      * Get user's permissions for a specific module
      */
-    getModulePermissions(module: string): string[];
+    getModulePermissions(module: any): string[];
     /**
      * Check if user can perform a specific action on a module
      */
-    canPerformAction(module: string, action: string): boolean;
+    canPerformAction(module: any, action: any): boolean;
     /**
      * Get user summary for logging/debugging
      */
     getUserSummary(): {
-        id: string | null;
-        name: string | null;
-        email: string | null;
+        id: string;
+        name: string;
+        email: string;
         roles: string[];
         permissionCount: number;
-        isAdmin: boolean;
-        clientId: string | null;
+        isAdmin: any;
+        clientId: string;
     };
 }
 export {};

package/dist/services/user-context.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-context.service.d.ts","sourceRoot":"","sources":["../../src/services/user-context.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C;;;GAGG;AACH,UAAU,eAAe;IACvB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,MAAM,CAAC,EAAE,GAAG,CAAC;CACd;AAED,qBACa,kBAAkB;IAKV,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ3C,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,eAAe,CAAS;gBAGI,OAAO,EAAE,eAAe;IAG5D;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAI/B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA4EzB;;OAEG;IACH,OAAO,IAAI,UAAU,GAAG,IAAI;IAK5B;;OAEG;IACH,SAAS,IAAI,MAAM,GAAG,IAAI;IAM1B;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,IAAI;IAMhC;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAM7B;;OAEG;IACH,WAAW,IAAI,MAAM,GAAG,IAAI;IAM5B;;;OAGG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAsC7B;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAM7B;;OAEG;IACH,YAAY,IAAI,MAAM,EAAE;IAKxB;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAK9B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI9B;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO;IAKxD;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO;IAKzD;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1C;;OAEG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO;IAKhD;;OAEG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO;IAKjD;;OAEG;IACH,eAAe,IAAI,OAAO;IAK1B;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,OAAO,IAAI,OAAO;IAIlB;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,cAAc,IAAI,OAAO;IAIzB;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOxC;;OAEG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAM9C;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIzD;;OAEG;IACH,cAAc,IAAI;QAChB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB;CAWF"}
+{"version":3,"file":"user-context.service.d.ts","sourceRoot":"","sources":["../../src/services/user-context.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAKjE,KAAK,eAAe,GAAG,oBAAoB,GAAG;IAAE,MAAM,CAAC,EAAE,GAAG,CAAA;CAAE,CAAC;AA4D/D,qBACa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,eAAe,CAAS;gBAEH,OAAO,EAAE,eAAe;IAKrD;;;OAGG;IACH,OAAO,CAAC,IAAI,KAAA;IAGZ;;OAEG;IACH,iBAAiB;IA0BjB;;OAEG;IACH,OAAO;IAIP;;OAEG;IACH,SAAS;IAMT;;OAEG;IACH,eAAe;IAMf;;OAEG;IACH,YAAY;IAMZ;;OAEG;IACH,WAAW;IAMX;;;OAGG;IACH,YAAY;IA+BZ;;OAEG;IACH,YAAY;IAMZ;;OAEG;IACH,YAAY;IAIZ;;OAEG;IACH,kBAAkB;IAIlB;;OAEG;IACH,OAAO,CAAC,IAAI,KAAA;IAGZ;;OAEG;IACH,UAAU,CAAC,KAAK,KAAA;IAIhB;;OAEG;IACH,WAAW,CAAC,KAAK,KAAA;IAIjB;;OAEG;IACH,aAAa,CAAC,UAAU,KAAA;IAGxB;;OAEG;IACH,gBAAgB,CAAC,WAAW,KAAA;IAI5B;;OAEG;IACH,iBAAiB,CAAC,WAAW,KAAA;IAI7B;;OAEG;IACH,eAAe;IAIf;;OAEG;IACH,YAAY;IAGZ;;OAEG;IACH,OAAO;IAGP;;OAEG;IACH,YAAY;IAGZ;;OAEG;IACH,cAAc;IAGd;;OAEG;IACH,eAAe,CAAC,MAAM,KAAA;IAItB;;OAEG;IACH,oBAAoB,CAAC,MAAM,KAAA;IAG3B;;OAEG;IACH,gBAAgB,CAAC,MAAM,KAAA,EAAE,MAAM,KAAA;IAG/B;;OAEG;IACH,cAAc;;;;;;;;;CAWjB"}