@jmruthers/pace-core 0.2.4

package/src/types/database.ts

@@ -0,0 +1,472 @@
+/**
+ * Database type definitions for Supabase
+ */
+
+export interface Database {
+  public: {
+    Tables: {
+      rbac_apps: {
+        Row: {
+          id: string;
+          name: string;
+          display_name: string;
+          description: string | null;
+          requires_event: boolean;
+          is_active: boolean;
+          created_at: string;
+          updated_at: string;
+          created_by: string | null;
+          updated_by: string | null;
+        };
+        Insert: {
+          id?: string;
+          name: string;
+          display_name: string;
+          description?: string | null;
+          requires_event?: boolean;
+          is_active?: boolean;
+          created_at?: string;
+          updated_at?: string;
+          created_by?: string | null;
+          updated_by?: string | null;
+        };
+        Update: {
+          id?: string;
+          name?: string;
+          display_name?: string;
+          description?: string | null;
+          requires_event?: boolean;
+          is_active?: boolean;
+          created_at?: string;
+          updated_at?: string;
+          created_by?: string | null;
+          updated_by?: string | null;
+        };
+      };
+      event: {
+        Row: {
+          event_id: string;
+          event_name: string;
+          event_date: string | null;
+          event_days: number | null;
+          event_venue: string | null;
+          event_typicalunit: number | null;
+          event_rounddown: number | null;
+          event_youthmultiplier: number | null;
+          event_code: string | null;
+          event_col_d1: string | null;
+          event_col_d2: string | null;
+          event_col_m1: string | null;
+          event_col_m2: string | null;
+          event_col_l1: string | null;
+          event_col_l2: string | null;
+          event_catering_email: string | null;
+          event_news: string | null;
+          event_billing: string | null;
+          created_by: string | null;
+          updated_by: string | null;
+          created_at: string;
+          updated_at: string;
+          event_logo: string | null;
+          event_footer: string | null;
+          event_participants: number | null;
+          event_colours: Record<string, Record<string, string>> | null;
+          event_email: string | null;
+          is_visible: boolean | null;
+          organisation_id: string | null;
+        };
+        Insert: {
+          event_id: string;
+          event_name: string;
+          event_date?: string | null;
+          event_days?: number | null;
+          event_venue?: string | null;
+          event_typicalunit?: number | null;
+          event_rounddown?: number | null;
+          event_youthmultiplier?: number | null;
+          event_code?: string | null;
+          event_col_d1?: string | null;
+          event_col_d2?: string | null;
+          event_col_m1?: string | null;
+          event_col_m2?: string | null;
+          event_col_l1?: string | null;
+          event_col_l2?: string | null;
+          event_catering_email?: string | null;
+          event_news?: string | null;
+          event_billing?: string | null;
+          created_by?: string | null;
+          updated_by?: string | null;
+          created_at?: string;
+          updated_at?: string;
+          event_logo?: string | null;
+          event_footer?: string | null;
+          event_participants?: number | null;
+          event_colours?: Record<string, Record<string, string>> | null;
+          event_email?: string | null;
+          is_visible?: boolean | null;
+          organisation_id?: string | null;
+        };
+        Update: {
+          event_id?: string;
+          event_name?: string;
+          event_date?: string | null;
+          event_days?: number | null;
+          event_venue?: string | null;
+          event_typicalunit?: number | null;
+          event_rounddown?: number | null;
+          event_youthmultiplier?: number | null;
+          event_code?: string | null;
+          event_col_d1?: string | null;
+          event_col_d2?: string | null;
+          event_col_m1?: string | null;
+          event_col_m2?: string | null;
+          event_col_l1?: string | null;
+          event_col_l2?: string | null;
+          event_catering_email?: string | null;
+          event_news?: string | null;
+          event_billing?: string | null;
+          created_by?: string | null;
+          updated_by?: string | null;
+          created_at?: string;
+          updated_at?: string;
+          event_logo?: string | null;
+          event_footer?: string | null;
+          event_participants?: number | null;
+          event_colours?: Record<string, Record<string, string>> | null;
+          event_email?: string | null;
+          is_visible?: boolean | null;
+          organisation_id?: string | null;
+        };
+      };
+      organisations: {
+        Row: {
+          id: string;
+          name: string;
+          display_name: string;
+          description: string | null;
+          parent_id: string | null;
+          subscription_tier: string;
+          settings: Record<string, unknown>;
+          is_active: boolean;
+          created_at: string;
+          updated_at: string;
+          created_by: string | null;
+          updated_by: string | null;
+        };
+        Insert: {
+          id?: string;
+          name: string;
+          display_name: string;
+          description?: string | null;
+          parent_id?: string | null;
+          subscription_tier?: string;
+          settings?: Record<string, unknown>;
+          is_active?: boolean;
+          created_at?: string;
+          updated_at?: string;
+          created_by?: string | null;
+          updated_by?: string | null;
+        };
+        Update: {
+          id?: string;
+          name?: string;
+          display_name?: string;
+          description?: string | null;
+          parent_id?: string | null;
+          subscription_tier?: string;
+          settings?: Record<string, unknown>;
+          is_active?: boolean;
+          created_at?: string;
+          updated_at?: string;
+          created_by?: string | null;
+          updated_by?: string | null;
+        };
+      };
+
+      // New RBAC tables
+      rbac_global_roles: {
+        Row: {
+          id: string;
+          user_id: string;
+          role: 'super_admin';
+          granted_at: string;
+          granted_by: string | null;
+        };
+        Insert: {
+          id?: string;
+          user_id: string;
+          role: 'super_admin';
+          granted_at?: string;
+          granted_by?: string | null;
+        };
+        Update: {
+          id?: string;
+          user_id?: string;
+          role?: 'super_admin';
+          granted_at?: string;
+          granted_by?: string | null;
+        };
+      };
+      rbac_organisation_roles: {
+        Row: {
+          id: string;
+          user_id: string;
+          organisation_id: string;
+          role: 'org_admin' | 'leader' | 'member' | 'supporter';
+          status: 'active' | 'inactive' | 'suspended';
+          granted_at: string;
+          granted_by: string | null;
+          revoked_at: string | null;
+          revoked_by: string | null;
+          notes: string | null;
+          created_at: string;
+          updated_at: string;
+        };
+        Insert: {
+          id?: string;
+          user_id: string;
+          organisation_id: string;
+          role: 'org_admin' | 'leader' | 'member' | 'supporter';
+          status?: 'active' | 'inactive' | 'suspended';
+          granted_at?: string;
+          granted_by?: string | null;
+          revoked_at?: string | null;
+          revoked_by?: string | null;
+          notes?: string | null;
+          created_at?: string;
+          updated_at?: string;
+        };
+        Update: {
+          id?: string;
+          user_id?: string;
+          organisation_id?: string;
+          role?: 'org_admin' | 'leader' | 'member' | 'supporter';
+          status?: 'active' | 'inactive' | 'suspended';
+          granted_at?: string;
+          granted_by?: string | null;
+          revoked_at?: string | null;
+          revoked_by?: string | null;
+          notes?: string | null;
+          created_at?: string;
+          updated_at?: string;
+        };
+      };
+      rbac_event_app_roles: {
+        Row: {
+          id: string;
+          user_id: string;
+          event_id: string;
+          app_id: string;
+          role: 'viewer' | 'participant' | 'planner' | 'event_admin';
+          granted_at: string;
+          granted_by: string | null;
+        };
+        Insert: {
+          id?: string;
+          user_id: string;
+          event_id: string;
+          app_id: string;
+          role: 'viewer' | 'participant' | 'planner' | 'event_admin';
+          granted_at?: string;
+          granted_by?: string | null;
+        };
+        Update: {
+          id?: string;
+          user_id?: string;
+          event_id?: string;
+          app_id?: string;
+          role?: 'viewer' | 'participant' | 'planner' | 'event_admin';
+          granted_at?: string;
+          granted_by?: string | null;
+        };
+      };
+      rbac_page_permissions: {
+        Row: {
+          id: string;
+          app_page_id: string;
+          operation: 'read' | 'create' | 'update' | 'delete';
+          role_name: string;
+          allowed: boolean;
+          created_at: string;
+          updated_at: string;
+        };
+        Insert: {
+          id?: string;
+          app_page_id: string;
+          operation: 'read' | 'create' | 'update' | 'delete';
+          role_name: string;
+          allowed?: boolean;
+          created_at?: string;
+          updated_at?: string;
+        };
+        Update: {
+          id?: string;
+          app_page_id?: string;
+          operation?: 'read' | 'create' | 'update' | 'delete';
+          role_name?: string;
+          allowed?: boolean;
+          created_at?: string;
+          updated_at?: string;
+        };
+      };
+      rbac_user_sessions: {
+        Row: {
+          id: string;
+          user_id: string;
+          session_type: 'login' | 'logout' | 'event_switch' | 'session_expired';
+          event_id: string | null;
+          app_id: string | null;
+          ip_address: string | null;
+          user_agent: string | null;
+          created_at: string;
+          expires_at: string | null;
+          is_valid: boolean;
+          metadata: Record<string, unknown>;
+        };
+        Insert: {
+          id?: string;
+          user_id: string;
+          session_type: 'login' | 'logout' | 'event_switch' | 'session_expired';
+          event_id?: string | null;
+          app_id?: string | null;
+          ip_address?: string | null;
+          user_agent?: string | null;
+          created_at?: string;
+          expires_at?: string | null;
+          is_valid?: boolean;
+          metadata?: Record<string, unknown>;
+        };
+        Update: {
+          id?: string;
+          user_id?: string;
+          session_type?: 'login' | 'logout' | 'event_switch' | 'session_expired';
+          event_id?: string | null;
+          app_id?: string | null;
+          ip_address?: string | null;
+          user_agent?: string | null;
+          created_at?: string;
+          expires_at?: string | null;
+          is_valid?: boolean;
+          metadata?: Record<string, unknown>;
+        };
+      };
+      // Renamed tables
+      rbac_user_profiles: {
+        Row: {
+          id: string;
+          full_name: string | null;
+          email: string;
+          created_at: string;
+          updated_at: string;
+        };
+        Insert: {
+          id: string;
+          full_name?: string | null;
+          email: string;
+          created_at?: string;
+          updated_at?: string;
+        };
+        Update: {
+          id?: string;
+          full_name?: string | null;
+          email?: string;
+          created_at?: string;
+          updated_at?: string;
+        };
+      };
+      rbac_user_login_history: {
+        Row: {
+          id: string;
+          user_id: string;
+          email: string | null;
+          app_id: string | null;
+          event_id: string | null;
+          created_at: string;
+        };
+        Insert: {
+          id?: string;
+          user_id: string;
+          email?: string | null;
+          app_id?: string | null;
+          event_id?: string | null;
+          created_at?: string;
+        };
+        Update: {
+          id?: string;
+          user_id?: string;
+          email?: string | null;
+          app_id?: string | null;
+          event_id?: string | null;
+          created_at?: string;
+        };
+      };
+      rbac_audit_events: {
+        Row: {
+          id: string;
+          event_type: 'permission_check' | 'permission_denied' | 'role_granted' | 'role_denied' | 'rls_denied';
+          user_id: string;
+          organisation_id: string;
+          event_id: string | null;
+          app_id: string | null;
+          page_id: string | null;
+          permission: string | null;
+          decision: boolean | null;
+          source: 'api' | 'ui' | 'middleware' | 'rls' | null;
+          bypass: boolean | null;
+          duration_ms: number | null;
+          metadata: Record<string, unknown>;
+          created_at: string;
+        };
+        Insert: {
+          id?: string;
+          event_type: 'permission_check' | 'permission_denied' | 'role_granted' | 'role_denied' | 'rls_denied';
+          user_id: string;
+          organisation_id: string;
+          event_id?: string | null;
+          app_id?: string | null;
+          page_id?: string | null;
+          permission?: string | null;
+          decision?: boolean | null;
+          source?: 'api' | 'ui' | 'middleware' | 'rls' | null;
+          bypass?: boolean | null;
+          duration_ms?: number | null;
+          metadata?: Record<string, unknown>;
+          created_at?: string;
+        };
+        Update: {
+          id?: string;
+          event_type?: 'permission_check' | 'permission_denied' | 'role_granted' | 'role_revoked' | 'rls_denied';
+          user_id?: string;
+          organisation_id?: string;
+          event_id?: string | null;
+          app_id?: string | null;
+          page_id?: string | null;
+          permission?: string | null;
+          decision?: boolean | null;
+          source?: 'api' | 'ui' | 'middleware' | 'rls' | null;
+          bypass?: boolean | null;
+          duration_ms?: number | null;
+          metadata?: Record<string, unknown>;
+          created_at?: string;
+        };
+      };
+    };
+          Functions: {
+            get_pace_user_events: {
+              Args: {
+                user_uuid: string;
+                app_id: string;
+                p_organisation_id: string;
+              };
+              Returns: {
+                id: string;
+                event_id: string;
+                event_name: string;
+                event_date: string;
+                event_logo: string;
+                organisation_id: string;
+              }[];
+            };
+          };
+  };
+}

package/src/types/guards.ts

@@ -0,0 +1,30 @@
+
+/**
+ * @file Type Guards
+ */
+
+import { AuthErrorCode, User, Session } from './unified';
+
+export function isAuthErrorCode(code: string): code is AuthErrorCode {
+  return Object.values(AuthErrorCode).includes(code as AuthErrorCode);
+}
+
+export function isUser(obj: unknown): obj is User {
+  const candidate = obj as Partial<User> | null | undefined;
+  return (
+    candidate != null &&
+    typeof candidate === 'object' &&
+    typeof candidate.id === 'string' &&
+    typeof candidate.created_at === 'string'
+  );
+}
+
+export function isSession(obj: unknown): obj is Session {
+  const candidate = obj as Partial<Session> | null | undefined;
+  return (
+    candidate != null &&
+    typeof candidate === 'object' &&
+    typeof candidate.access_token === 'string' &&
+    typeof candidate.user === 'object'
+  );
+}

package/src/types/index.ts

@@ -0,0 +1,25 @@
+/**
+ * @file Types Module Exports
+ * @package @jmruthers/pace-core
+ * @module Types
+ * @since 0.1.0
+ * 
+ * Complete collection of type definitions for the PACE Core library.
+ * Use this import path when you need access to types not included in the main export.
+ * 
+ * @example
+ * // Specialized type imports
+ * import { User, Event, AccessLevel } from '@jmruthers/pace-core/types';
+ * 
+ * // For common types, prefer the main export:
+ * import { ButtonProps, CardProps } from '@jmruthers/pace-core';
+ */
+
+// Core type exports
+export * from './unified';
+export * from './supabase';
+export * from './database';
+export * from './guards';
+export * from './validation';
+export * from './theme';
+export * from './security';

package/src/types/organisation.ts

@@ -0,0 +1,184 @@
+/**
+ * @file Organisation Types
+ * @package @jmruthers/pace-core
+ * @module Types/Organisation
+ * @since 0.4.0
+ */
+
+export interface Organisation {
+  id: string;
+  name: string;
+  display_name: string;
+  description?: string;
+  parent_id?: string;
+  subscription_tier: string;
+  settings: Record<string, unknown>;
+  is_active: boolean;
+  created_at: string;
+  updated_at: string;
+  created_by?: string;
+  updated_by?: string;
+}
+
+export interface OrganisationMembership {
+  id: string;
+  user_id: string;
+  organisation_id: string;
+  role: 'org_admin' | 'leader' | 'member' | 'supporter';
+  status: 'active' | 'inactive' | 'suspended';
+  granted_at: string;
+  granted_by?: string;
+  revoked_at?: string;
+  revoked_by?: string;
+  notes?: string;
+  created_at: string;
+  updated_at: string;
+}
+
+export interface UserProfile {
+  id: string;
+  email: string;
+  full_name?: string;
+  created_at: string;
+  updated_at: string;
+}
+
+export interface OrganisationSettings {
+  organisation_id: string;
+  logo_url?: string;
+  primary_color?: string;
+  secondary_color?: string;
+  website_url?: string;
+  contact_email?: string;
+  phone?: string;
+  address?: Record<string, unknown>;
+  timezone?: string;
+  date_format?: string;
+  currency?: string;
+  language?: string;
+  custom_css?: string;
+  email_templates?: Record<string, unknown>;
+  notification_settings?: Record<string, unknown>;
+  created_at: string;
+  updated_at: string;
+  created_by?: string;
+  updated_by?: string;
+}
+
+export interface OrganisationInvitation {
+  id: string;
+  organisation_id: string;
+  email: string;
+  role: 'supporter' | 'member' | 'leader' | 'org_admin';
+  invited_by?: string;
+  expires_at: string;
+  accepted_at?: string;
+  created_at: string;
+  updated_at: string;
+}
+
+export interface OrganisationRoleDefinition {
+  id: string;
+  name: string;
+  display_name: string;
+  description?: string;
+  permissions: Record<string, unknown>;
+  is_active: boolean;
+  created_at: string;
+  updated_at: string;
+}
+
+export interface SuperAdminContext {
+  isSuperAdmin: boolean;
+  hasGlobalAccess: boolean;
+  canManageAllOrganisations: boolean;
+}
+
+export interface OrganisationSecurityError extends Error {
+  name: 'OrganisationSecurityError';
+  code: string;
+  organisationId?: string;
+  userId?: string;
+}
+
+export interface OrganisationContextType {
+  // Current organisation context
+  selectedOrganisation: Organisation;
+  organisations: Organisation[];
+  userMemberships: OrganisationMembership[];
+  
+  // Loading and error states
+  isLoading: boolean;
+  error: Error | null;
+  hasValidOrganisationContext: boolean;
+  
+  // Organisation management
+  setSelectedOrganisation: (org: Organisation) => void;
+  switchOrganisation: (orgId: string) => Promise<void>;
+  
+  // Security helpers
+  getUserRole: (orgId?: string) => string;
+  validateOrganisationAccess: (orgId: string) => boolean;
+  ensureOrganisationContext: () => Organisation;
+  
+  // Data management
+  refreshOrganisations: () => Promise<void>;
+  getPrimaryOrganisation: () => Organisation | null;
+  isOrganisationSecure: () => boolean;
+  
+  // Enhanced security features
+  getOrganisationHierarchy?: (orgId: string) => Promise<OrganisationHierarchy[]>;
+  canAccessChildOrganisations?: (orgId: string) => boolean;
+  validateUserAccess?: (userId: string, orgId: string) => Promise<boolean>;
+  getUserPermissions?: (orgId?: string) => Promise<string[]>;
+  logOrganisationAccess?: (action: string, details?: unknown) => Promise<void>;
+}
+
+export interface OrganisationProviderProps {
+  children: React.ReactNode;
+}
+
+export interface OrganisationHierarchy {
+  organisation: Organisation;
+  children: OrganisationHierarchy[];
+  parent?: Organisation;
+  depth: number;
+}
+
+// Role permissions mapping - Updated for new consolidated role system
+export const ORGANISATION_ROLE_PERMISSIONS = {
+  supporter: ['view_basic'],
+  member: ['view_basic', 'view_details'],
+  leader: ['view_basic', 'view_details', 'moderate_content', 'manage_events'],
+  org_admin: ['view_basic', 'view_details', 'moderate_content', 'manage_events', 'manage_members', 'manage_settings'],
+} as const;
+
+export type OrganisationRole = keyof typeof ORGANISATION_ROLE_PERMISSIONS;
+
+// Define permission types based on the permissions used in the system
+export type OrganisationPermission = 
+  | 'view_basic'
+  | 'view_details'
+  | 'moderate_content'
+  | 'manage_events'
+  | 'manage_members'
+  | 'manage_settings'
+  | '*';
+
+// Enhanced security types
+export interface OrganisationAccessLog {
+  id: string;
+  user_id: string;
+  organisation_id: string;
+  action: string;
+  details: Record<string, unknown>;
+  created_at: string;
+}
+
+export interface SecureQueryOptions {
+  table: string;
+  select: string;
+  filters?: Record<string, unknown>;
+  organisationId: string;
+  userId?: string;
+}