@jmruthers/pace-core 0.2.4

package/dist/organisation-CO3Sh3_D.d.ts

@@ -0,0 +1,99 @@
+/**
+ * @file Organisation Types
+ * @package @jmruthers/pace-core
+ * @module Types/Organisation
+ * @since 0.4.0
+ */
+interface Organisation {
+    id: string;
+    name: string;
+    display_name: string;
+    description?: string;
+    parent_id?: string;
+    subscription_tier: string;
+    settings: Record<string, unknown>;
+    is_active: boolean;
+    created_at: string;
+    updated_at: string;
+    created_by?: string;
+    updated_by?: string;
+}
+interface OrganisationMembership {
+    id: string;
+    user_id: string;
+    organisation_id: string;
+    role: 'org_admin' | 'leader' | 'member' | 'supporter';
+    status: 'active' | 'inactive' | 'suspended';
+    granted_at: string;
+    granted_by?: string;
+    revoked_at?: string;
+    revoked_by?: string;
+    notes?: string;
+    created_at: string;
+    updated_at: string;
+}
+interface UserProfile {
+    id: string;
+    email: string;
+    full_name?: string;
+    created_at: string;
+    updated_at: string;
+}
+interface SuperAdminContext {
+    isSuperAdmin: boolean;
+    hasGlobalAccess: boolean;
+    canManageAllOrganisations: boolean;
+}
+interface OrganisationSecurityError extends Error {
+    name: 'OrganisationSecurityError';
+    code: string;
+    organisationId?: string;
+    userId?: string;
+}
+interface OrganisationContextType {
+    selectedOrganisation: Organisation;
+    organisations: Organisation[];
+    userMemberships: OrganisationMembership[];
+    isLoading: boolean;
+    error: Error | null;
+    hasValidOrganisationContext: boolean;
+    setSelectedOrganisation: (org: Organisation) => void;
+    switchOrganisation: (orgId: string) => Promise<void>;
+    getUserRole: (orgId?: string) => string;
+    validateOrganisationAccess: (orgId: string) => boolean;
+    ensureOrganisationContext: () => Organisation;
+    refreshOrganisations: () => Promise<void>;
+    getPrimaryOrganisation: () => Organisation | null;
+    isOrganisationSecure: () => boolean;
+    getOrganisationHierarchy?: (orgId: string) => Promise<OrganisationHierarchy[]>;
+    canAccessChildOrganisations?: (orgId: string) => boolean;
+    validateUserAccess?: (userId: string, orgId: string) => Promise<boolean>;
+    getUserPermissions?: (orgId?: string) => Promise<string[]>;
+    logOrganisationAccess?: (action: string, details?: unknown) => Promise<void>;
+}
+interface OrganisationProviderProps {
+    children: React.ReactNode;
+}
+interface OrganisationHierarchy {
+    organisation: Organisation;
+    children: OrganisationHierarchy[];
+    parent?: Organisation;
+    depth: number;
+}
+declare const ORGANISATION_ROLE_PERMISSIONS: {
+    readonly supporter: readonly ["view_basic"];
+    readonly member: readonly ["view_basic", "view_details"];
+    readonly leader: readonly ["view_basic", "view_details", "moderate_content", "manage_events"];
+    readonly org_admin: readonly ["view_basic", "view_details", "moderate_content", "manage_events", "manage_members", "manage_settings"];
+};
+type OrganisationRole = keyof typeof ORGANISATION_ROLE_PERMISSIONS;
+type OrganisationPermission = 'view_basic' | 'view_details' | 'moderate_content' | 'manage_events' | 'manage_members' | 'manage_settings' | '*';
+interface SecureQueryOptions {
+    table: string;
+    select: string;
+    filters?: Record<string, unknown>;
+    organisationId: string;
+    userId?: string;
+}
+
+export type { Organisation as O, SecureQueryOptions as S, UserProfile as U, OrganisationMembership as a, OrganisationContextType as b, OrganisationProviderProps as c, OrganisationSecurityError as d, OrganisationRole as e, OrganisationPermission as f, SuperAdminContext as g };

package/dist/providers.d.ts

@@ -0,0 +1,45 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import React__default from 'react';
+import { r as Event } from './unified-CM7T0aTK.js';
+import { c as OrganisationProviderProps, b as OrganisationContextType } from './organisation-CO3Sh3_D.js';
+export { O as Organisation, a as OrganisationMembership, d as OrganisationSecurityError } from './organisation-CO3Sh3_D.js';
+export { A as AuthContextType, f as AuthProvider, e as AuthProviderProps, I as InactivityContextType, l as InactivityProvider, k as InactivityProviderProps, R as RBACContextType, i as RBACProvider, h as RBACProviderProps, b as UnifiedAuthContextType, U as UnifiedAuthProvider, a as UnifiedAuthProviderProps, c as UserEventAccess, d as useAuth, j as useInactivity, g as useRBAC, u as useUnifiedAuth } from './UnifiedAuthProvider-w66zSCUf.js';
+import '@supabase/supabase-js';
+
+interface EventContextType {
+    events: Event[];
+    selectedEvent: Event | null;
+    isLoading: boolean;
+    error: Error | null;
+    setSelectedEvent: (event: Event | null) => void;
+    refreshEvents: () => Promise<void>;
+}
+declare const useEvents: () => EventContextType;
+interface EventProviderProps {
+    children: React__default.ReactNode;
+}
+declare function EventProvider({ children }: EventProviderProps): react_jsx_runtime.JSX.Element;
+
+/**
+ * Organisation Provider component that enforces mandatory organisation context
+ *
+ * This provider:
+ * - Loads user's organisation memberships on authentication
+ * - Validates user has at least one active organisation
+ * - Auto-selects primary organisation or first available
+ * - Provides security helpers for organisation validation
+ * - Handles organisation switching with validation
+ * - Persists organisation selection across sessions
+ *
+ * SECURITY: No children are rendered without valid organisation context
+ */
+declare function OrganisationProvider({ children }: OrganisationProviderProps): react_jsx_runtime.JSX.Element;
+/**
+ * Hook to access organisation context
+ *
+ * @returns Organisation context with guaranteed non-null selectedOrganisation
+ * @throws {Error} If used outside OrganisationProvider
+ */
+declare const useOrganisations: () => OrganisationContextType;
+
+export { type EventContextType, EventProvider, type EventProviderProps, OrganisationContextType, OrganisationProvider, useEvents, useOrganisations };

package/dist/providers.js

@@ -0,0 +1,36 @@
+import {
+  EventProvider,
+  useEvents
+} from "./chunk-TMRLB2LA.js";
+import {
+  AuthProvider,
+  InactivityProvider,
+  OrganisationProvider,
+  RBACProvider,
+  UnifiedAuthProvider,
+  useAuth,
+  useInactivity,
+  useOrganisations,
+  useRBAC,
+  useUnifiedAuth
+} from "./chunk-DY5E3AT7.js";
+import "./chunk-ETEJVKYK.js";
+import "./chunk-YDJW5XTN.js";
+import "./chunk-2V3Y6YBC.js";
+import "./chunk-OHXGNT3K.js";
+import "./chunk-PLDDJCW6.js";
+export {
+  AuthProvider,
+  EventProvider,
+  InactivityProvider,
+  OrganisationProvider,
+  RBACProvider,
+  UnifiedAuthProvider,
+  useAuth,
+  useEvents,
+  useInactivity,
+  useOrganisations,
+  useRBAC,
+  useUnifiedAuth
+};
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/rbac/eslint-rules.d.ts

@@ -0,0 +1,52 @@
+declare let rules: {
+    /**
+     * Ban direct @supabase/supabase-js imports outside secureClient
+     */
+    'no-direct-supabase-import': {
+        create(context: any): {
+            ImportDeclaration(node: any): void;
+        };
+    };
+    /**
+     * Require withPermissionGuard for server handlers
+     */
+    'require-permission-guard': {
+        create(context: any): {
+            CallExpression(node: any): void;
+        };
+    };
+    /**
+     * Forbid inline permission strings (must import from permissions.ts)
+     */
+    'forbid-inline-permissions': {
+        create(context: any): {
+            Literal(node: any): void;
+        };
+    };
+    /**
+     * Require organisation context in RBAC operations
+     */
+    'require-organisation-context': {
+        create(context: any): {
+            CallExpression(node: any): void;
+        };
+    };
+    /**
+     * Require error handling for RBAC operations
+     */
+    'require-rbac-error-handling': {
+        create(context: any): {
+            CallExpression(node: any): void;
+        };
+    };
+    /**
+     * Require loading states for RBAC operations
+     */
+    'require-rbac-loading-states': {
+        create(context: any): {
+            CallExpression(node: any): void;
+        };
+    };
+};
+
+export { rules };

package/dist/rbac/eslint-rules.js

@@ -0,0 +1,252 @@
+// src/rbac/eslint-rules.js
+module.exports = {
+  rules: {
+    /**
+     * Ban direct @supabase/supabase-js imports outside secureClient
+     */
+    "no-direct-supabase-import": {
+      create(context) {
+        return {
+          ImportDeclaration(node) {
+            if (node.source.value === "@supabase/supabase-js") {
+              context.report({
+                node,
+                message: "Use @jmruthers/pace-core/secureClient instead of direct Supabase imports. This ensures organisation context is properly enforced.",
+                suggest: [{
+                  desc: "Replace with secure client import",
+                  fix: function(fixer) {
+                    return fixer.replaceText(
+                      node,
+                      "import { createSecureClient } from '@jmruthers/pace-core/secureClient';"
+                    );
+                  }
+                }]
+              });
+            }
+          }
+        };
+      }
+    },
+    /**
+     * Require withPermissionGuard for server handlers
+     */
+    "require-permission-guard": {
+      create(context) {
+        const serverHandlerPatterns = [
+          "app.get",
+          "app.post",
+          "app.put",
+          "app.delete",
+          "app.patch",
+          "router.get",
+          "router.post",
+          "router.put",
+          "router.delete",
+          "router.patch",
+          "handler",
+          "middleware"
+        ];
+        return {
+          CallExpression(node) {
+            if (node.callee.type === "MemberExpression") {
+              const methodName = `${node.callee.object.name}.${node.callee.property.name}`;
+              if (serverHandlerPatterns.includes(methodName)) {
+                const hasPermissionGuard = context.getAncestors().some(
+                  (ancestor) => ancestor.type === "CallExpression" && ancestor.callee.name === "withPermissionGuard"
+                );
+                if (!hasPermissionGuard) {
+                  context.report({
+                    node,
+                    message: `Server handler '${methodName}' should be wrapped with withPermissionGuard to ensure proper permission checking.`,
+                    suggest: [{
+                      desc: "Wrap with permission guard",
+                      fix: function(fixer) {
+                        const sourceCode = context.getSourceCode();
+                        const handlerText = sourceCode.getText(node);
+                        return fixer.replaceText(
+                          node,
+                          `withPermissionGuard({ permission: 'read:api' }, ${handlerText})`
+                        );
+                      }
+                    }]
+                  });
+                }
+              }
+            }
+          }
+        };
+      }
+    },
+    /**
+     * Forbid inline permission strings (must import from permissions.ts)
+     */
+    "forbid-inline-permissions": {
+      create(context) {
+        const permissionPattern = /^(read|create|update|delete|manage):[a-zA-Z0-9._-]+$/;
+        return {
+          Literal(node) {
+            if (typeof node.value === "string" && permissionPattern.test(node.value)) {
+              const isPermissionString = context.getAncestors().some(
+                (ancestor) => ancestor.type === "Property" && (ancestor.key.name === "permission" || ancestor.key.value === "permission")
+              ) || context.getAncestors().some(
+                (ancestor) => ancestor.type === "CallExpression" && ancestor.callee.name === "isPermitted"
+              );
+              if (isPermissionString) {
+                context.report({
+                  node,
+                  message: `Permission string '${node.value}' should be imported from a permissions constants file instead of using inline strings.`,
+                  suggest: [{
+                    desc: "Import from permissions file",
+                    fix: function(fixer) {
+                      return fixer.replaceText(
+                        node,
+                        `PERMISSIONS.${node.value.replace(/[:.-]/g, "_").toUpperCase()}`
+                      );
+                    }
+                  }]
+                });
+              }
+            }
+          }
+        };
+      }
+    },
+    /**
+     * Require organisation context in RBAC operations
+     */
+    "require-organisation-context": {
+      create(context) {
+        const rbacFunctions = [
+          "isPermitted",
+          "getAccessLevel",
+          "getPermissionMap",
+          "useCan",
+          "usePermissions",
+          "useAccessLevel"
+        ];
+        return {
+          CallExpression(node) {
+            if (node.callee.name && rbacFunctions.includes(node.callee.name)) {
+              const scopeArg = node.arguments.find(
+                (arg) => arg.type === "ObjectExpression" && arg.properties.some(
+                  (prop) => prop.key.name === "scope" || prop.key.value === "scope"
+                )
+              );
+              if (scopeArg) {
+                const scopeObject = scopeArg.properties.find(
+                  (prop) => prop.key.name === "scope" || prop.key.value === "scope"
+                );
+                if (scopeObject && scopeObject.value.type === "ObjectExpression") {
+                  const hasOrganisationId = scopeObject.value.properties.some(
+                    (prop) => prop.key.name === "organisationId" || prop.key.value === "organisationId"
+                  );
+                  if (!hasOrganisationId) {
+                    context.report({
+                      node,
+                      message: `RBAC function '${node.callee.name}' requires organisationId in scope parameter for proper data isolation.`,
+                      suggest: [{
+                        desc: "Add organisationId to scope",
+                        fix: function(fixer) {
+                          const sourceCode = context.getSourceCode();
+                          const scopeText = sourceCode.getText(scopeObject.value);
+                          return fixer.replaceText(
+                            scopeObject.value,
+                            `${scopeText.slice(0, -1)}, organisationId: 'your-org-id'${scopeText.slice(-1)}`
+                          );
+                        }
+                      }]
+                    });
+                  }
+                }
+              }
+            }
+          }
+        };
+      }
+    },
+    /**
+     * Require error handling for RBAC operations
+     */
+    "require-rbac-error-handling": {
+      create(context) {
+        const rbacHooks = ["useCan", "usePermissions", "useAccessLevel"];
+        return {
+          CallExpression(node) {
+            if (node.callee.name && rbacHooks.includes(node.callee.name)) {
+              const component = context.getAncestors().find(
+                (ancestor) => ancestor.type === "FunctionDeclaration" || ancestor.type === "FunctionExpression" || ancestor.type === "ArrowFunctionExpression"
+              );
+              if (component) {
+                const componentBody = component.body;
+                const hasErrorHandling = context.getSourceCode().getText(componentBody).includes("error");
+                if (!hasErrorHandling) {
+                  context.report({
+                    node,
+                    message: `RBAC hook '${node.callee.name}' should be used with proper error handling to provide good user experience.`,
+                    suggest: [{
+                      desc: "Add error handling",
+                      fix: function(fixer) {
+                        const sourceCode = context.getSourceCode();
+                        const hookText = sourceCode.getText(node);
+                        return fixer.insertTextAfter(
+                          node,
+                          `
+  if (error) {
+    console.error('RBAC error:', error);
+    return <div>Error loading permissions</div>;
+  }`
+                        );
+                      }
+                    }]
+                  });
+                }
+              }
+            }
+          }
+        };
+      }
+    },
+    /**
+     * Require loading states for RBAC operations
+     */
+    "require-rbac-loading-states": {
+      create(context) {
+        const rbacHooks = ["useCan", "usePermissions", "useAccessLevel"];
+        return {
+          CallExpression(node) {
+            if (node.callee.name && rbacHooks.includes(node.callee.name)) {
+              const component = context.getAncestors().find(
+                (ancestor) => ancestor.type === "FunctionDeclaration" || ancestor.type === "FunctionExpression" || ancestor.type === "ArrowFunctionExpression"
+              );
+              if (component) {
+                const componentBody = component.body;
+                const hasLoadingHandling = context.getSourceCode().getText(componentBody).includes("isLoading");
+                if (!hasLoadingHandling) {
+                  context.report({
+                    node,
+                    message: `RBAC hook '${node.callee.name}' should be used with proper loading state handling for better user experience.`,
+                    suggest: [{
+                      desc: "Add loading state handling",
+                      fix: function(fixer) {
+                        const sourceCode = context.getSourceCode();
+                        const hookText = sourceCode.getText(node);
+                        return fixer.insertTextAfter(
+                          node,
+                          `
+  if (isLoading) {
+    return <div>Loading permissions...</div>;
+  }`
+                        );
+                      }
+                    }]
+                  });
+                }
+              }
+            }
+          }
+        };
+      }
+    }
+  }
+};
+//# sourceMappingURL=eslint-rules.js.map

package/dist/rbac/eslint-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/rbac/eslint-rules.js"],"sourcesContent":["/**\n * ESLint Rules for RBAC Enforcement\n * @package @jmruthers/pace-core\n * @module RBAC/ESLintRules\n * @since 1.0.0\n * \n * This module provides ESLint rules to enforce RBAC usage patterns.\n */\n\nmodule.exports = {\n  rules: {\n    /**\n     * Ban direct @supabase/supabase-js imports outside secureClient\n     */\n    'no-direct-supabase-import': {\n      create(context) {\n        return {\n          ImportDeclaration(node) {\n            if (node.source.value === '@supabase/supabase-js') {\n              context.report({\n                node,\n                message: 'Use @jmruthers/pace-core/secureClient instead of direct Supabase imports. This ensures organisation context is properly enforced.',\n                suggest: [{\n                  desc: 'Replace with secure client import',\n                  fix: function(fixer) {\n                    return fixer.replaceText(\n                      node,\n                      \"import { createSecureClient } from '@jmruthers/pace-core/secureClient';\"\n                    );\n                  }\n                }]\n              });\n            }\n          }\n        };\n      }\n    },\n\n    /**\n     * Require withPermissionGuard for server handlers\n     */\n    'require-permission-guard': {\n      create(context) {\n        const serverHandlerPatterns = [\n          'app.get',\n          'app.post',\n          'app.put',\n          'app.delete',\n          'app.patch',\n          'router.get',\n          'router.post',\n          'router.put',\n          'router.delete',\n          'router.patch',\n          'handler',\n          'middleware'\n        ];\n\n        return {\n          CallExpression(node) {\n            if (node.callee.type === 'MemberExpression') {\n              const methodName = `${node.callee.object.name}.${node.callee.property.name}`;\n              \n              if (serverHandlerPatterns.includes(methodName)) {\n                // Check if the handler is wrapped with permission guard\n                const hasPermissionGuard = context.getAncestors().some(ancestor => \n          ancestor.type === 'CallExpression' &&\n          ancestor.callee.name === 'withPermissionGuard'\n        );\n\n                if (!hasPermissionGuard) {\n                  context.report({\n                    node,\n                    message: `Server handler '${methodName}' should be wrapped with withPermissionGuard to ensure proper permission checking.`,\n                    suggest: [{\n                      desc: 'Wrap with permission guard',\n                      fix: function(fixer) {\n                        const sourceCode = context.getSourceCode();\n                        const handlerText = sourceCode.getText(node);\n                        return fixer.replaceText(\n                          node,\n                          `withPermissionGuard({ permission: 'read:api' }, ${handlerText})`\n                        );\n                      }\n                    }]\n                  });\n                }\n              }\n            }\n          }\n        };\n      }\n    },\n\n    /**\n     * Forbid inline permission strings (must import from permissions.ts)\n     */\n    'forbid-inline-permissions': {\n      create(context) {\n        const permissionPattern = /^(read|create|update|delete|manage):[a-zA-Z0-9._-]+$/;\n\n        return {\n          Literal(node) {\n            if (typeof node.value === 'string' && permissionPattern.test(node.value)) {\n              // Check if this is a permission string\n              const isPermissionString = context.getAncestors().some(ancestor => \n                ancestor.type === 'Property' && \n                (ancestor.key.name === 'permission' || ancestor.key.value === 'permission')\n              ) || context.getAncestors().some(ancestor => \n                ancestor.type === 'CallExpression' && \n                ancestor.callee.name === 'isPermitted'\n              );\n\n              if (isPermissionString) {\n                context.report({\n                  node,\n                  message: `Permission string '${node.value}' should be imported from a permissions constants file instead of using inline strings.`,\n                  suggest: [{\n                    desc: 'Import from permissions file',\n                    fix: function(fixer) {\n                      return fixer.replaceText(\n                        node,\n                        `PERMISSIONS.${node.value.replace(/[:.-]/g, '_').toUpperCase()}`\n                      );\n                    }\n                  }]\n                });\n              }\n            }\n          }\n        };\n      }\n    },\n\n    /**\n     * Require organisation context in RBAC operations\n     */\n    'require-organisation-context': {\n      create(context) {\n        const rbacFunctions = [\n          'isPermitted',\n          'getAccessLevel',\n          'getPermissionMap',\n          'useCan',\n          'usePermissions',\n          'useAccessLevel'\n        ];\n\n        return {\n          CallExpression(node) {\n            if (node.callee.name && rbacFunctions.includes(node.callee.name)) {\n              // Check if scope parameter has organisationId\n              const scopeArg = node.arguments.find(arg => \n                arg.type === 'ObjectExpression' && \n                arg.properties.some(prop => \n                  prop.key.name === 'scope' || prop.key.value === 'scope'\n                )\n              );\n\n              if (scopeArg) {\n                const scopeObject = scopeArg.properties.find(prop => \n                  prop.key.name === 'scope' || prop.key.value === 'scope'\n                );\n\n                if (scopeObject && scopeObject.value.type === 'ObjectExpression') {\n                  const hasOrganisationId = scopeObject.value.properties.some(prop => \n                    prop.key.name === 'organisationId' || prop.key.value === 'organisationId'\n                  );\n\n                  if (!hasOrganisationId) {\n                    context.report({\n                      node,\n                      message: `RBAC function '${node.callee.name}' requires organisationId in scope parameter for proper data isolation.`,\n                      suggest: [{\n                        desc: 'Add organisationId to scope',\n                        fix: function(fixer) {\n                          const sourceCode = context.getSourceCode();\n                          const scopeText = sourceCode.getText(scopeObject.value);\n                          return fixer.replaceText(\n                            scopeObject.value,\n                            `${scopeText.slice(0, -1)}, organisationId: 'your-org-id'${scopeText.slice(-1)}`\n                          );\n                        }\n                      }]\n                    });\n                  }\n                }\n              }\n            }\n          }\n        };\n      }\n    },\n\n    /**\n     * Require error handling for RBAC operations\n     */\n    'require-rbac-error-handling': {\n      create(context) {\n        const rbacHooks = ['useCan', 'usePermissions', 'useAccessLevel'];\n\n        return {\n          CallExpression(node) {\n            if (node.callee.name && rbacHooks.includes(node.callee.name)) {\n              // Check if the hook is used in a component that handles errors\n              const component = context.getAncestors().find(ancestor => \n                ancestor.type === 'FunctionDeclaration' || \n                ancestor.type === 'FunctionExpression' ||\n                ancestor.type === 'ArrowFunctionExpression'\n              );\n\n              if (component) {\n                const componentBody = component.body;\n                const hasErrorHandling = context.getSourceCode().getText(componentBody).includes('error');\n\n                if (!hasErrorHandling) {\n                  context.report({\n                    node,\n                    message: `RBAC hook '${node.callee.name}' should be used with proper error handling to provide good user experience.`,\n                    suggest: [{\n                      desc: 'Add error handling',\n                      fix: function(fixer) {\n                        const sourceCode = context.getSourceCode();\n                        const hookText = sourceCode.getText(node);\n                        return fixer.insertTextAfter(\n                          node,\n                          `\\n  if (error) {\\n    console.error('RBAC error:', error);\\n    return <div>Error loading permissions</div>;\\n  }`\n                        );\n                      }\n                    }]\n                  });\n                }\n              }\n            }\n          }\n        };\n      }\n    },\n\n    /**\n     * Require loading states for RBAC operations\n     */\n    'require-rbac-loading-states': {\n      create(context) {\n        const rbacHooks = ['useCan', 'usePermissions', 'useAccessLevel'];\n\n        return {\n          CallExpression(node) {\n            if (node.callee.name && rbacHooks.includes(node.callee.name)) {\n              // Check if the hook is used in a component that handles loading\n              const component = context.getAncestors().find(ancestor => \n                ancestor.type === 'FunctionDeclaration' || \n                ancestor.type === 'FunctionExpression' ||\n                ancestor.type === 'ArrowFunctionExpression'\n              );\n\n              if (component) {\n                const componentBody = component.body;\n                const hasLoadingHandling = context.getSourceCode().getText(componentBody).includes('isLoading');\n\n                if (!hasLoadingHandling) {\n                  context.report({\n                    node,\n                    message: `RBAC hook '${node.callee.name}' should be used with proper loading state handling for better user experience.`,\n                    suggest: [{\n                      desc: 'Add loading state handling',\n                      fix: function(fixer) {\n                        const sourceCode = context.getSourceCode();\n                        const hookText = sourceCode.getText(node);\n                        return fixer.insertTextAfter(\n                          node,\n                          `\\n  if (isLoading) {\\n    return <div>Loading permissions...</div>;\\n  }`\n                        );\n                      }\n                    }]\n                  });\n                }\n              }\n            }\n          }\n        };\n      }\n    }\n  }\n};\n"],"mappings":";AASA,OAAO,UAAU;AAAA,EACf,OAAO;AAAA;AAAA;AAAA;AAAA,IAIL,6BAA6B;AAAA,MAC3B,OAAO,SAAS;AACd,eAAO;AAAA,UACL,kBAAkB,MAAM;AACtB,gBAAI,KAAK,OAAO,UAAU,yBAAyB;AACjD,sBAAQ,OAAO;AAAA,gBACb;AAAA,gBACA,SAAS;AAAA,gBACT,SAAS,CAAC;AAAA,kBACR,MAAM;AAAA,kBACN,KAAK,SAAS,OAAO;AACnB,2BAAO,MAAM;AAAA,sBACX;AAAA,sBACA;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF,CAAC;AAAA,cACH,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,4BAA4B;AAAA,MAC1B,OAAO,SAAS;AACd,cAAM,wBAAwB;AAAA,UAC5B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAEA,eAAO;AAAA,UACL,eAAe,MAAM;AACnB,gBAAI,KAAK,OAAO,SAAS,oBAAoB;AAC3C,oBAAM,aAAa,GAAG,KAAK,OAAO,OAAO,IAAI,IAAI,KAAK,OAAO,SAAS,IAAI;AAE1E,kBAAI,sBAAsB,SAAS,UAAU,GAAG;AAE9C,sBAAM,qBAAqB,QAAQ,aAAa,EAAE;AAAA,kBAAK,cAC7D,SAAS,SAAS,oBAClB,SAAS,OAAO,SAAS;AAAA,gBAC3B;AAEQ,oBAAI,CAAC,oBAAoB;AACvB,0BAAQ,OAAO;AAAA,oBACb;AAAA,oBACA,SAAS,mBAAmB,UAAU;AAAA,oBACtC,SAAS,CAAC;AAAA,sBACR,MAAM;AAAA,sBACN,KAAK,SAAS,OAAO;AACnB,8BAAM,aAAa,QAAQ,cAAc;AACzC,8BAAM,cAAc,WAAW,QAAQ,IAAI;AAC3C,+BAAO,MAAM;AAAA,0BACX;AAAA,0BACA,mDAAmD,WAAW;AAAA,wBAChE;AAAA,sBACF;AAAA,oBACF,CAAC;AAAA,kBACH,CAAC;AAAA,gBACH;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,6BAA6B;AAAA,MAC3B,OAAO,SAAS;AACd,cAAM,oBAAoB;AAE1B,eAAO;AAAA,UACL,QAAQ,MAAM;AACZ,gBAAI,OAAO,KAAK,UAAU,YAAY,kBAAkB,KAAK,KAAK,KAAK,GAAG;AAExE,oBAAM,qBAAqB,QAAQ,aAAa,EAAE;AAAA,gBAAK,cACrD,SAAS,SAAS,eACjB,SAAS,IAAI,SAAS,gBAAgB,SAAS,IAAI,UAAU;AAAA,cAChE,KAAK,QAAQ,aAAa,EAAE;AAAA,gBAAK,cAC/B,SAAS,SAAS,oBAClB,SAAS,OAAO,SAAS;AAAA,cAC3B;AAEA,kBAAI,oBAAoB;AACtB,wBAAQ,OAAO;AAAA,kBACb;AAAA,kBACA,SAAS,sBAAsB,KAAK,KAAK;AAAA,kBACzC,SAAS,CAAC;AAAA,oBACR,MAAM;AAAA,oBACN,KAAK,SAAS,OAAO;AACnB,6BAAO,MAAM;AAAA,wBACX;AAAA,wBACA,eAAe,KAAK,MAAM,QAAQ,UAAU,GAAG,EAAE,YAAY,CAAC;AAAA,sBAChE;AAAA,oBACF;AAAA,kBACF,CAAC;AAAA,gBACH,CAAC;AAAA,cACH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,gCAAgC;AAAA,MAC9B,OAAO,SAAS;AACd,cAAM,gBAAgB;AAAA,UACpB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAEA,eAAO;AAAA,UACL,eAAe,MAAM;AACnB,gBAAI,KAAK,OAAO,QAAQ,cAAc,SAAS,KAAK,OAAO,IAAI,GAAG;AAEhE,oBAAM,WAAW,KAAK,UAAU;AAAA,gBAAK,SACnC,IAAI,SAAS,sBACb,IAAI,WAAW;AAAA,kBAAK,UAClB,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,UAAU;AAAA,gBAClD;AAAA,cACF;AAEA,kBAAI,UAAU;AACZ,sBAAM,cAAc,SAAS,WAAW;AAAA,kBAAK,UAC3C,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,UAAU;AAAA,gBAClD;AAEA,oBAAI,eAAe,YAAY,MAAM,SAAS,oBAAoB;AAChE,wBAAM,oBAAoB,YAAY,MAAM,WAAW;AAAA,oBAAK,UAC1D,KAAK,IAAI,SAAS,oBAAoB,KAAK,IAAI,UAAU;AAAA,kBAC3D;AAEA,sBAAI,CAAC,mBAAmB;AACtB,4BAAQ,OAAO;AAAA,sBACb;AAAA,sBACA,SAAS,kBAAkB,KAAK,OAAO,IAAI;AAAA,sBAC3C,SAAS,CAAC;AAAA,wBACR,MAAM;AAAA,wBACN,KAAK,SAAS,OAAO;AACnB,gCAAM,aAAa,QAAQ,cAAc;AACzC,gCAAM,YAAY,WAAW,QAAQ,YAAY,KAAK;AACtD,iCAAO,MAAM;AAAA,4BACX,YAAY;AAAA,4BACZ,GAAG,UAAU,MAAM,GAAG,EAAE,CAAC,kCAAkC,UAAU,MAAM,EAAE,CAAC;AAAA,0BAChF;AAAA,wBACF;AAAA,sBACF,CAAC;AAAA,oBACH,CAAC;AAAA,kBACH;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,+BAA+B;AAAA,MAC7B,OAAO,SAAS;AACd,cAAM,YAAY,CAAC,UAAU,kBAAkB,gBAAgB;AAE/D,eAAO;AAAA,UACL,eAAe,MAAM;AACnB,gBAAI,KAAK,OAAO,QAAQ,UAAU,SAAS,KAAK,OAAO,IAAI,GAAG;AAE5D,oBAAM,YAAY,QAAQ,aAAa,EAAE;AAAA,gBAAK,cAC5C,SAAS,SAAS,yBAClB,SAAS,SAAS,wBAClB,SAAS,SAAS;AAAA,cACpB;AAEA,kBAAI,WAAW;AACb,sBAAM,gBAAgB,UAAU;AAChC,sBAAM,mBAAmB,QAAQ,cAAc,EAAE,QAAQ,aAAa,EAAE,SAAS,OAAO;AAExF,oBAAI,CAAC,kBAAkB;AACrB,0BAAQ,OAAO;AAAA,oBACb;AAAA,oBACA,SAAS,cAAc,KAAK,OAAO,IAAI;AAAA,oBACvC,SAAS,CAAC;AAAA,sBACR,MAAM;AAAA,sBACN,KAAK,SAAS,OAAO;AACnB,8BAAM,aAAa,QAAQ,cAAc;AACzC,8BAAM,WAAW,WAAW,QAAQ,IAAI;AACxC,+BAAO,MAAM;AAAA,0BACX;AAAA,0BACA;AAAA;AAAA;AAAA;AAAA;AAAA,wBACF;AAAA,sBACF;AAAA,oBACF,CAAC;AAAA,kBACH,CAAC;AAAA,gBACH;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,+BAA+B;AAAA,MAC7B,OAAO,SAAS;AACd,cAAM,YAAY,CAAC,UAAU,kBAAkB,gBAAgB;AAE/D,eAAO;AAAA,UACL,eAAe,MAAM;AACnB,gBAAI,KAAK,OAAO,QAAQ,UAAU,SAAS,KAAK,OAAO,IAAI,GAAG;AAE5D,oBAAM,YAAY,QAAQ,aAAa,EAAE;AAAA,gBAAK,cAC5C,SAAS,SAAS,yBAClB,SAAS,SAAS,wBAClB,SAAS,SAAS;AAAA,cACpB;AAEA,kBAAI,WAAW;AACb,sBAAM,gBAAgB,UAAU;AAChC,sBAAM,qBAAqB,QAAQ,cAAc,EAAE,QAAQ,aAAa,EAAE,SAAS,WAAW;AAE9F,oBAAI,CAAC,oBAAoB;AACvB,0BAAQ,OAAO;AAAA,oBACb;AAAA,oBACA,SAAS,cAAc,KAAK,OAAO,IAAI;AAAA,oBACvC,SAAS,CAAC;AAAA,sBACR,MAAM;AAAA,sBACN,KAAK,SAAS,OAAO;AACnB,8BAAM,aAAa,QAAQ,cAAc;AACzC,8BAAM,WAAW,WAAW,QAAQ,IAAI;AACxC,+BAAO,MAAM;AAAA,0BACX;AAAA,0BACA;AAAA;AAAA;AAAA;AAAA,wBACF;AAAA,sBACF;AAAA,oBACF,CAAC;AAAA,kBACH,CAAC;AAAA,gBACH;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}