From 2984c6436160d555973a9daf94649247953ec792 Mon Sep 17 00:00:00 2001
From: forge-bot <bot@forge.local>
Date: Tue, 14 Jul 2026 10:32:04 +0000
Subject: [PATCH] =?UTF-8?q?Reviewer=20=EC=97=AD=ED=95=A0=20=EA=B2=80?=
 =?UTF-8?q?=EC=A6=9D=20=EB=B3=B4=EA=B3=A0=EC=84=9C=20smoke=20(runtime-role?=
 =?UTF-8?q?-matrix-live-20260714101723-v7-reviewer-001)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../runtime/role/RoleMatrixRuntime.java       | 128 ++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 src/main/java/com/klaroworks/runtime/role/RoleMatrixRuntime.java

diff --git a/src/main/java/com/klaroworks/runtime/role/RoleMatrixRuntime.java b/src/main/java/com/klaroworks/runtime/role/RoleMatrixRuntime.java
new file mode 100644
index 0000000..c1d2c16
--- /dev/null
+++ b/src/main/java/com/klaroworks/runtime/role/RoleMatrixRuntime.java
@@ -0,0 +1,128 @@
+package com.klaroworks.runtime.role;
+
+import java.util.Map;
+import java.util.HashMap;
+import java.util.List;
+import java.util.ArrayList;
+import java.util.Optional;
+
+/**
+ * Runtime role matrix management and evaluation.
+ * Core runtime class for role-based access control.
+ */
+public class RoleMatrixRuntime {
+    
+    private final Map<String, RoleDefinition> roleDefinitions;
+    private final Map<String, List<String>> roleHierarchy;
+    private RoleContext currentContext;
+    
+    public RoleMatrixRuntime() {
+        this.roleDefinitions = new HashMap<>();
+        this.roleHierarchy = new HashMap<>();
+        initializeDefaultRoles();
+    }
+    
+    private void initializeDefaultRoles() {
+        registerRole("ADMIN", 100, List.of("*"));
+        registerRole("MANAGER", 50, List.of("read", "write", "approve"));
+        registerRole("USER", 10, List.of("read", "write"));
+        registerRole("GUEST", 1, List.of("read"));
+        
+        roleHierarchy.put("ADMIN", List.of("MANAGER", "USER", "GUEST"));
+        roleHierarchy.put("MANAGER", List.of("USER", "GUEST"));
+        roleHierarchy.put("USER", List.of("GUEST"));
+    }
+    
+    public void registerRole(String roleName, int level, List<String> permissions) {
+        roleDefinitions.put(roleName, new RoleDefinition(roleName, level, permissions));
+    }
+    
+    public boolean evaluateRole(String roleName, String requiredPermission) {
+        RoleDefinition definition = roleDefinitions.get(roleName);
+        if (definition == null) {
+            return false;
+        }
+        return definition.hasPermission(requiredPermission);
+    }
+    
+    public boolean hasPermission(String permission) {
+        if (currentContext == null) {
+            return false;
+        }
+        return currentContext.hasPermission(permission);
+    }
+    
+    public void setContext(RoleContext context) {
+        this.currentContext = context;
+    }
+    
+    public RoleContext getContext() {
+        return currentContext;
+    }
+    
+    public void clearContext() {
+        this.currentContext = null;
+    }
+    
+    public boolean isInRole(String roleName) {
+        if (currentContext == null) {
+            return false;
+        }
+        return currentContext.getRole().equals(roleName);
+    }
+    
+    public boolean isInRoleHierarchy(String roleName) {
+        if (currentContext == null) {
+            return false;
+        }
+        String currentRole = currentContext.getRole();
+        return hasRoleInHierarchy(currentRole, roleName);
+    }
+    
+    private boolean hasRoleInHierarchy(String currentRole, String targetRole) {
+        if (currentRole.equals(targetRole)) {
+            return true;
+        }
+        List<String> parents = roleHierarchy.get(currentRole);
+        if (parents == null) {
+            return false;
+        }
+        for (String parent : parents) {
+            if (hasRoleInHierarchy(parent, targetRole)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    
+    public Optional<RoleDefinition> getRoleDefinition(String roleName) {
+        return Optional.ofNullable(roleDefinitions.get(roleName));
+    }
+    
+    public Map<String, RoleDefinition> getAllRoleDefinitions() {
+        return Map.copyOf(roleDefinitions);
+    }
+    
+    /**
+     * Role definition record.
+     */
+    public record RoleDefinition(String name, int level, List<String> permissions) {
+        public boolean hasPermission(String permission) {
+            if (permissions.contains("*")) {
+                return true;
+            }
+            return permissions.contains(permission);
+        }
+        
+        public boolean isHigherThan(RoleDefinition other) {
+            return this.level > other.level;
+        }
+    }
+    
+    /**
+     * Create a nested role for testing.
+     */
+    public static Nested.InnerRole createNestedRole(String name, int priority) {
+        return Nested.createRole(name, priority);
+    }
+}