feat: Phase 1 - Implementation of Data Security Infrastructure

Implemented comprehensive data security infrastructure for SFERA platform:

## Security Classes Created:
- `SupplyDataFilter`: Role-based data filtering for supply orders
- `ParticipantIsolation`: Data isolation between competing organizations
- `RecipeAccessControl`: Protection of production recipes and trade secrets
- `CommercialDataAudit`: Audit logging and suspicious activity detection
- `SecurityLogger`: Centralized security event logging system

## Infrastructure Components:
- Feature flags system for gradual security rollout
- Database migrations for audit logging (AuditLog, SecurityAlert models)
- Secure resolver wrapper for automatic GraphQL security
- TypeScript interfaces and type safety throughout

## Security Features:
- Role-based access control (SELLER, WHOLESALE, FULFILLMENT, LOGIST)
- Commercial data protection between competitors
- Production recipe confidentiality
- Audit trail for all data access
- Real-time security monitoring and alerts
- Rate limiting and suspicious activity detection

## Implementation Notes:
- All console logging replaced with centralized security logger
- Comprehensive TypeScript typing with no explicit 'any' types
- Modular architecture following SFERA coding standards
- Feature flag controlled rollout for safe deployment

This completes Phase 1 of the security implementation plan.
Next phases will integrate these classes into existing GraphQL resolvers.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

src/config/features.ts

@@ -0,0 +1,93 @@
+/**
+ * Feature flags для системы SFERA
+ *
+ * Централизованное управление функциональностью и экспериментами.
+ * Позволяет безопасно внедрять новые возможности с возможностью отката.
+ */
+
+export const FEATURE_FLAGS = {
+  /**
+   * Система безопасности данных в поставках
+   * Контролирует фильтрацию коммерческих данных между участниками
+   */
+  SUPPLY_DATA_SECURITY: {
+    enabled: process.env.ENABLE_SUPPLY_SECURITY === 'true',
+    auditEnabled: process.env.ENABLE_SECURITY_AUDIT === 'true',
+    strictMode: process.env.SECURITY_STRICT_MODE === 'true',
+    cacheEnabled: process.env.SECURITY_CACHE_ENABLED !== 'false', // По умолчанию включено
+    realTimeAlerts: process.env.SECURITY_REALTIME_ALERTS === 'true',
+  },
+
+  /**
+   * Система партнерства и реферальных программ
+   */
+  PARTNERSHIP_SYSTEM: {
+    enabled: process.env.ENABLE_PARTNERSHIPS !== 'false',
+    autoPartnership: process.env.AUTO_PARTNERSHIP === 'true',
+    referralBonuses: process.env.REFERRAL_BONUSES === 'true',
+  },
+
+  /**
+   * Экспериментальные возможности
+   */
+  EXPERIMENTS: {
+    newSupplyWorkflow: process.env.EXPERIMENT_NEW_SUPPLY_WORKFLOW === 'true',
+    advancedAnalytics: process.env.EXPERIMENT_ADVANCED_ANALYTICS === 'true',
+    aiRecommendations: process.env.EXPERIMENT_AI_RECOMMENDATIONS === 'true',
+  },
+} as const
+
+/**
+ * Проверка активности feature flag
+ */
+export function isFeatureEnabled(featurePath: string): boolean {
+  const pathParts = featurePath.split('.')
+  let current: unknown = FEATURE_FLAGS
+
+  for (const part of pathParts) {
+    if (typeof current !== 'object' || current === null || !(part in current)) {
+      return false
+    }
+    current = (current as Record<string, unknown>)[part]
+  }
+
+  return Boolean(current)
+}
+
+/**
+ * Получение всех активных feature flags
+ */
+export function getActiveFeatures(): Record<string, boolean> {
+  const active: Record<string, boolean> = {}
+
+  function traverse(obj: Record<string, unknown>, path = ''): void {
+    for (const [key, value] of Object.entries(obj)) {
+      const currentPath = path ? `${path}.${key}` : key
+
+      if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
+        traverse(value as Record<string, unknown>, currentPath)
+      } else if (typeof value === 'boolean' && value === true) {
+        active[currentPath] = true
+      }
+    }
+  }
+
+  traverse(FEATURE_FLAGS as Record<string, unknown>)
+  return active
+}
+
+/**
+ * Типы для TypeScript
+ */
+export type FeatureFlagPath =
+  | 'SUPPLY_DATA_SECURITY.enabled'
+  | 'SUPPLY_DATA_SECURITY.auditEnabled'
+  | 'SUPPLY_DATA_SECURITY.strictMode'
+  | 'SUPPLY_DATA_SECURITY.cacheEnabled'
+  | 'SUPPLY_DATA_SECURITY.realTimeAlerts'
+  | 'PARTNERSHIP_SYSTEM.enabled'
+  | 'PARTNERSHIP_SYSTEM.autoPartnership'
+  | 'PARTNERSHIP_SYSTEM.referralBonuses'
+  | 'EXPERIMENTS.newSupplyWorkflow'
+  | 'EXPERIMENTS.advancedAnalytics'
+  | 'EXPERIMENTS.aiRecommendations'