@jmruthers/pace-core 0.2.6 → 0.4.1

package/docs/usage.md

@@ -15,16 +15,63 @@ npm install @jmruthers/pace-core
 In your app's entry point (e.g., `main.tsx` or root layout):
 
 ```tsx
-// Import the core CSS file (includes default palettes)
-import '@jmruthers/pace-core/styles/core.css';
-
-// Optional: Override with your own palettes
-// import './app.css'; // Define your custom main/sec/acc palettes
+// Import the three core CSS files
+import '@jmruthers/pace-core/styles/base.css';
+import '@jmruthers/pace-core/styles/theme.css';
+import '@jmruthers/pace-core/styles/dark.css';
+import './app.css'; // Your app's palette definitions
 ```
 
-### 3. Use the Built-in Color Palette
-
-PACE Core comes with a beautiful default color palette (silver, violet, blood orange) that works out of the box. No additional configuration needed! You can optionally override these by defining your own palettes in `app.css`.
+### 3. Define Your App's Color Palette
+
+Create `app.css` with your brand colors:
+
+```css
+/* app.css - Your app's specific palette */
+@theme static {
+  /* MAIN palette - your primary brand color */
+  --color-main-raw: oklch(0.7 0.057 252.02);
+  --color-main-50:  oklch(0.98 0.001 252.02);
+  --color-main-100: oklch(0.96 0.005 252.02);
+  --color-main-200: oklch(0.927 0.012 252.02);
+  --color-main-300: oklch(0.881 0.021 252.02);
+  --color-main-400: oklch(0.822 0.032 252.02);
+  --color-main-500: oklch(0.75 0.047 252.02);
+  --color-main-600: oklch(0.7 0.057 252.02);
+  --color-main-700: oklch(0.567 0.044 252.02);
+  --color-main-800: oklch(0.456 0.034 252.02);
+  --color-main-900: oklch(0.332 0.024 252.02);
+  --color-main-950: oklch(0.195 0.014 252.02);
+
+  /* SEC palette - your secondary brand color */
+  --color-sec-raw:  oklch(0.58 0.23 280.75);
+  --color-sec-50:   oklch(0.98 0.003 280.75);
+  --color-sec-100:  oklch(0.96 0.014 280.75);
+  --color-sec-200:  oklch(0.927 0.033 280.75);
+  --color-sec-300:  oklch(0.881 0.059 280.75);
+  --color-sec-400:  oklch(0.822 0.093 280.75);
+  --color-sec-500:  oklch(0.75 0.133 280.75);
+  --color-sec-600:  oklch(0.665 0.182 280.75);
+  --color-sec-700:  oklch(0.58 0.23 280.75);
+  --color-sec-800:  oklch(0.456 0.158 280.75);
+  --color-sec-900:  oklch(0.332 0.099 280.75);
+  --color-sec-950:  oklch(0.195 0.047 280.75);
+
+  /* ACC palette - your accent brand color */
+  --color-acc-raw:  oklch(0.64 0.21 37.76);
+  --color-acc-50:   oklch(0.98 0.003 37.76);
+  --color-acc-100:  oklch(0.96 0.015 37.76);
+  --color-acc-200:  oklch(0.927 0.035 37.76);
+  --color-acc-300:  oklch(0.881 0.063 37.76);
+  --color-acc-400:  oklch(0.822 0.099 37.76);
+  --color-acc-500:  oklch(0.75 0.143 37.76);
+  --color-acc-600:  oklch(0.64 0.21 37.76);
+  --color-acc-700:  oklch(0.567 0.177 37.76);
+  --color-acc-800:  oklch(0.456 0.13 37.76);
+  --color-acc-900:  oklch(0.332 0.085 37.76);
+  --color-acc-950:  oklch(0.195 0.044 37.76);
+}
+```
 
 ### 4. Use Components
 
@@ -46,6 +93,33 @@ function MyComponent() {
 }
 ```
 
+## Dark Mode
+
+### Enable Dark Mode
+
+Add a dark mode toggle to your app:
+
+```tsx
+function DarkModeToggle() {
+  const toggleDarkMode = () => {
+    document.documentElement.toggleAttribute('data-mode', true);
+  };
+
+  return (
+    <button onClick={toggleDarkMode}>
+      Toggle Dark Mode
+    </button>
+  );
+}
+```
+
+### Dark Mode Behavior
+
+- Dark mode automatically reverses all color shades (50⇄950, 100⇄900, etc.)
+- No hue changes - only lightness reversal
+- All components automatically adapt to dark mode
+- Uses `[data-mode="dark"]` selector
+
 ## Dynamic Theming
 
 ### Organisation/Event Colors
@@ -93,19 +167,6 @@ const themeCSS = generateSSRThemeCSS(paletteData);
 
 Same patterns for `sec-*` and `acc-*` palettes.
 
-### Semantic Color Utilities
-
-PACE Core also provides semantic color utilities that automatically map to your palettes:
-
-- `bg-background`, `text-foreground` - Main background and text
-- `bg-primary`, `text-primary-foreground` - Primary actions
-- `bg-secondary`, `text-secondary-foreground` - Secondary elements
-- `bg-destructive`, `text-destructive-foreground` - Destructive actions
-- `bg-muted`, `text-muted-foreground` - Muted content
-- `bg-accent`, `text-accent-foreground` - Accent elements
-- `bg-card`, `text-card-foreground` - Card backgrounds
-- `bg-popover`, `text-popover-foreground` - Popover backgrounds
-
 ### Typography
 
 - `font-sans` - Open Sans
@@ -123,8 +184,8 @@ PACE Core also provides semantic color utilities that automatically map to your
 ### Before (Old System)
 ```tsx
 // Old app-* classes
-<div className="bg-main-500 text-main-50">
-  <Button className="bg-sec-600 hover:bg-sec-700">
+<div className="bg-app-main-500 text-app-main-50">
+  <Button className="bg-app-sec-600 hover:bg-app-sec-700">
     Click me
   </Button>
 </div>
@@ -145,17 +206,18 @@ PACE Core also provides semantic color utilities that automatically map to your
 - **No arbitrary values**: Use only standard utilities like `bg-main-600`, not `bg-[oklch(...)]`
 - **No CVA**: Components use native Tailwind utilities, not class-variance-authority
 - **No utility aliases**: Use standard Tailwind class names
-- **Default palettes included**: pace-core provides sensible defaults, but you can override with `app.css`
-- **Tailwind v4 only**: Uses CSS-first approach with `@theme` blocks, no `tailwind.config.js`
+- **App owns palettes**: Only define main/sec/acc in your `app.css`
 
 ## Troubleshooting
 
 ### Colors Not Appearing
-- Ensure you've imported `@jmruthers/pace-core/styles/core.css`
-- If using custom palettes, check that your `app.css` defines the complete palette
+- Ensure you've imported all three CSS files
+- Check that your `app.css` defines the complete palette
 - Verify Tailwind v4 is installed
-- Check that font files are available in your `/fonts` directory
 
+### Dark Mode Not Working
+- Check that `data-mode="dark"` is set on `<html>`
+- Ensure `dark.css` is imported after `theme.css`
 
 ### Dynamic Theming Issues
 - Verify palette data has correct structure (main/sec/acc with 50-950 shades)

package/docs/visual-testing.md

@@ -8,6 +8,7 @@ This document outlines the visual testing approach for pace-core components to e
 
 1. **Component Snapshots**: Each component should be tested with visual snapshots
 2. **Color Variations**: Test with different palette combinations
+3. **Dark Mode**: Verify dark mode shade remap works correctly
 4. **Responsive**: Test at different screen sizes
 
 ### Key Components to Test
@@ -45,6 +46,9 @@ npm run test:visual
    - Verify all components render correctly
    - Check color contrast ratios
 
+2. **Dark Mode Shade Remap**
+   - Toggle `data-mode="dark"` on `<html>`
+   - Verify shade reversal (50⇄950, 100⇄900, etc.)
    - Check no hue shifts occur
 
 3. **Dynamic Palette Replacement**
@@ -67,6 +71,7 @@ npm run test:visual
 - [ ] Hover effects unchanged
 - [ ] Spacing and layout identical
 - [ ] Color contrast maintained
+- [ ] Dark mode works correctly
 - [ ] Dynamic theming works
 
 ### Screenshot Comparison
@@ -92,6 +97,7 @@ npm run test:visual
 
 - [ ] All components render without errors
 - [ ] Colors display correctly in light mode
+- [ ] Dark mode toggle works
 - [ ] Dynamic palette switching works
 - [ ] No visual regressions detected
 - [ ] Performance is maintained or improved
@@ -111,4 +117,5 @@ If visual regressions are found:
 
 - Update visual tests when adding new components
 - Re-run tests after palette changes
+- Verify dark mode works with new colors
 - Test dynamic theming with new palettes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jmruthers/pace-core",
-  "version": "0.2.6",
+  "version": "0.4.01",
   "description": "Clean, modern React component library with Tailwind v4 styling and native utilities",
   "private": false,
   "publishConfig": {
@@ -57,61 +57,42 @@
       "import": "./dist/rbac/eslint-rules.js",
       "default": "./dist/rbac/eslint-rules.js"
     },
-    "./styles/core.css": "./dist/styles/core.css",
-    "./styles": {
-      "import": "./dist/styles/index.js",
-      "default": "./dist/styles/index.js"
+    "./styles/base.css": {
+      "import": "./dist/styles/base.css",
+      "default": "./dist/styles/base.css"
+    },
+    "./styles/theme.css": {
+      "import": "./dist/styles/theme.css",
+      "default": "./dist/styles/theme.css"
+    },
+    "./styles/dark.css": {
+      "import": "./dist/styles/dark.css",
+      "default": "./dist/styles/dark.css"
     },
     "./theming/runtime": {
       "types": "./dist/theming/runtime.d.ts",
       "import": "./dist/theming/runtime.js",
       "default": "./dist/theming/runtime.js"
     },
+    "./styles": {
+      "import": "./dist/styles/index.js",
+      "default": "./dist/styles/index.js"
+    },
     "./vite-plugin-tailwind-v4": {
       "import": "./vite-plugin-tailwind-v4.js",
       "default": "./vite-plugin-tailwind-v4.js"
     },
     "./docs": "./docs/README.md",
-    "./package.json": "./package.json",
-    "./source": {
-      "import": "./src/index.ts",
-      "default": "./src/index.ts"
-    },
-    "./source/components": {
-      "import": "./src/components/index.ts",
-      "default": "./src/components/index.ts"
-    },
-    "./source/providers": {
-      "import": "./src/providers/index.ts",
-      "default": "./src/providers/index.ts"
-    },
-    "./source/hooks": {
-      "import": "./src/hooks/index.ts",
-      "default": "./src/hooks/index.ts"
-    },
-    "./source/utils": {
-      "import": "./src/utils/index.ts",
-      "default": "./src/utils/index.ts"
-    },
-    "./source/types": {
-      "import": "./src/types/index.ts",
-      "default": "./src/types/index.ts"
-    },
-    "./source/validation": {
-      "import": "./src/validation/index.ts",
-      "default": "./src/validation/index.ts"
-    },
-    "./source/rbac": {
-      "import": "./src/rbac/index.ts",
-      "default": "./src/rbac/index.ts"
-    }
+    "./docs/architecture": "./docs/architecture.md",
+    "./docs/styling": "./docs/styling-architecture.md",
+    "./package.json": "./package.json"
   },
   "files": [
     "dist",
-    "src",
     "README.md",
     "CHANGELOG.md",
-    "docs"
+    "docs",
+    "src/fonts"
   ],
   "scripts": {
     "_comment_build": "Build package and documentation",
@@ -122,10 +103,9 @@
     "prepublishOnly": "npm run build:all",
     "clean": "rimraf dist",
     "_comment_test": "Test suite with various configurations",
-    "test": "NODE_OPTIONS='--max-old-space-size=8192 --max-semi-space-size=128' vitest run --config vitest.config.ts",
-    "test:memory-optimized": "node ../../scripts/run-tests-memory-optimized.js",
+    "test": "NODE_OPTIONS='--max-old-space-size=4096' vitest run --config ../../vitest.config.ts",
     "test:watch": "vitest --watch --config ../../vitest.config.ts",
-    "test:coverage": "NODE_OPTIONS='--max-old-space-size=8192 --max-semi-space-size=128' vitest run --coverage --config ../../vitest.config.ts",
+    "test:coverage": "NODE_OPTIONS='--max-old-space-size=4096' vitest run --coverage --config ../../vitest.config.ts",
     "test:ui": "vitest --ui --config ../../vitest.config.ts",
     "test:unit": "vitest src/**/*.test.{ts,tsx} --config ../../vitest.config.ts",
     "test:integration": "vitest tests/integration --config ../../vitest.config.ts",
@@ -165,6 +145,7 @@
     "@radix-ui/react-avatar": "^1.0.0",
     "@radix-ui/react-checkbox": "^1.0.0",
     "@radix-ui/react-dialog": "^1.0.0",
+    "@radix-ui/react-dropdown-menu": "^2.0.0",
     "@radix-ui/react-label": "^2.0.0",
     "@radix-ui/react-progress": "^1.0.0",
     "@radix-ui/react-slot": "^1.0.0",

package/dist/UnifiedAuthProvider-w66zSCUf.d.ts

@@ -1,160 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import React__default from 'react';
-import { User, Session, AuthError, SupabaseClient } from '@supabase/supabase-js';
-import { c as AccessLevel } from './unified-CM7T0aTK.js';
-
-interface AuthContextType {
-    user: User | null;
-    session: Session | null;
-    isAuthenticated: boolean;
-    authLoading: boolean;
-    authError: AuthError | null;
-    error: AuthError | null;
-    supabase: SupabaseClient | null;
-    signIn: (email: string, password?: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    signUp: (email: string, password: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    signOut: () => Promise<{
-        error: AuthError | null;
-    }>;
-    resetPassword: (email: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    updatePassword: (password: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    refreshSession: () => Promise<{
-        error: AuthError | null;
-    }>;
-}
-declare const useAuth: () => AuthContextType;
-interface AuthProviderProps {
-    children: React__default.ReactNode;
-    supabaseClient?: SupabaseClient;
-}
-declare function AuthProvider({ children, supabaseClient }: AuthProviderProps): react_jsx_runtime.JSX.Element;
-
-interface AppConfig {
-    supports_direct_access: boolean;
-    requires_event: boolean;
-}
-interface UserEventAccess {
-    event_id: string;
-    event_name: string;
-    event_description?: string | null;
-    start_date: string;
-    end_date: string;
-    event_status: string;
-    app_id: string;
-    access_level: string;
-    granted_at: string;
-    organisation_id: string;
-}
-interface RBACContextType {
-    permissions: Record<string, boolean>;
-    roles: string[];
-    accessLevel: AccessLevel;
-    rbacLoading: boolean;
-    rbacError: Error | null;
-    selectedEventId: string | null;
-    appConfig: AppConfig | null;
-    userEventAccess: UserEventAccess[];
-    eventAccessLoading: boolean;
-    selectedOrganisationId: string | null;
-    requireOrganisationContext: () => string;
-    hasPermission: (permission: string, orgId?: string) => boolean;
-    hasAnyPermission: (permissions: string[], orgId?: string) => boolean;
-    hasAllPermissions: (permissions: string[], orgId?: string) => boolean;
-    hasRole: (role: string) => boolean;
-    hasAccessLevel: (level: AccessLevel) => boolean;
-    canAccess: (resource: string, action: string, orgId?: string) => boolean;
-    validatePermission: (permission: string, orgId?: string) => Promise<boolean>;
-    validateAccess: (resource: string, action: string, orgId?: string) => Promise<boolean>;
-    refreshPermissions: (eventId?: string, orgId?: string) => Promise<void>;
-    setSelectedEventId: (eventId: string | null) => void;
-    loadUserEventAccess: (orgId?: string) => Promise<void>;
-    getUserEventAccess: (eventId: string) => UserEventAccess | undefined;
-    rbacEnabled: boolean;
-    rbacContext?: any;
-}
-declare const useRBAC: () => RBACContextType;
-interface RBACProviderProps {
-    children: React__default.ReactNode;
-    supabaseClient?: SupabaseClient;
-    user: User | null;
-    session: Session | null;
-    appName: string;
-    enableRBAC?: boolean;
-    persistState?: boolean;
-    enablePersistence?: boolean;
-    requireOrganisationContext?: boolean;
-}
-declare function RBACProvider({ children, supabaseClient, user, session, appName, enableRBAC, persistState, enablePersistence, requireOrganisationContext: _requireOrganisationContext, }: RBACProviderProps): react_jsx_runtime.JSX.Element;
-
-interface InactivityContextType {
-    showInactivityWarning: boolean;
-    inactivityTimeRemaining: number;
-    isIdle: boolean;
-    timeRemaining: number;
-    showWarning: boolean;
-    isTracking: boolean;
-    resetActivity: () => void;
-    startTracking: () => void;
-    stopTracking: () => void;
-    handleIdleLogout: () => Promise<void>;
-    handleStaySignedIn: () => void;
-    handleSignOutNow: () => Promise<void>;
-}
-declare const useInactivity: () => InactivityContextType;
-interface InactivityProviderProps {
-    children: React__default.ReactNode;
-    user: any;
-    session: any;
-    supabaseClient: any;
-    idleTimeoutMs?: number;
-    warnBeforeMs?: number;
-    onIdleLogout?: (reason: 'inactivity') => void;
-    renderInactivityWarning?: (args: {
-        timeRemaining: number;
-        onStaySignedIn: () => void;
-        onSignOutNow: () => void;
-    }) => React__default.ReactNode;
-    dangerouslyDisableInactivity?: boolean;
-}
-declare function InactivityProvider({ children, user, session, supabaseClient, idleTimeoutMs, // 30 minutes
-warnBeforeMs, // 60 seconds
-onIdleLogout, renderInactivityWarning, dangerouslyDisableInactivity }: InactivityProviderProps): react_jsx_runtime.JSX.Element;
-
-interface UnifiedAuthContextType extends AuthContextType, RBACContextType, InactivityContextType {
-    appName: string;
-    isLoading: boolean;
-    hasErrors: boolean;
-}
-declare const useUnifiedAuth: () => UnifiedAuthContextType;
-interface UnifiedAuthProviderProps {
-    children: React__default.ReactNode;
-    supabaseClient?: SupabaseClient;
-    appName: string;
-    persistState?: boolean;
-    enablePersistence?: boolean;
-    requireOrganisationContext?: boolean;
-    enableRBAC?: boolean;
-    idleTimeoutMs?: number;
-    warnBeforeMs?: number;
-    onIdleLogout?: (reason: 'inactivity') => void;
-    renderInactivityWarning?: (args: {
-        timeRemaining: number;
-        onStaySignedIn: () => void;
-        onSignOutNow: () => void;
-    }) => React__default.ReactNode;
-    dangerouslyDisableInactivity?: boolean;
-}
-
-declare function UnifiedAuthProvider({ children, supabaseClient, appName, persistState, enablePersistence, requireOrganisationContext, enableRBAC, idleTimeoutMs, // 30 minutes
-warnBeforeMs, // 60 seconds
-onIdleLogout, renderInactivityWarning, dangerouslyDisableInactivity }: UnifiedAuthProviderProps): react_jsx_runtime.JSX.Element;
-
-export { type AuthContextType as A, type InactivityContextType as I, type RBACContextType as R, UnifiedAuthProvider as U, type UnifiedAuthProviderProps as a, type UnifiedAuthContextType as b, type UserEventAccess as c, useAuth as d, type AuthProviderProps as e, AuthProvider as f, useRBAC as g, type RBACProviderProps as h, RBACProvider as i, useInactivity as j, type InactivityProviderProps as k, InactivityProvider as l, useUnifiedAuth as u };

package/dist/appNameResolver-7GHF5ED2.js

@@ -1,22 +0,0 @@
-import {
-  getAppNameFromBuildTime,
-  getAppNameFromEnvironment,
-  getAppNameFromGlobal,
-  getAppNameFromPackageJson,
-  getCurrentAppName,
-  getCurrentAppNameWithFallback,
-  init_appNameResolver,
-  setRBACAppName
-} from "./chunk-MZBUOP4P.js";
-import "./chunk-PLDDJCW6.js";
-init_appNameResolver();
-export {
-  getAppNameFromBuildTime,
-  getAppNameFromEnvironment,
-  getAppNameFromGlobal,
-  getAppNameFromPackageJson,
-  getCurrentAppName,
-  getCurrentAppNameWithFallback,
-  setRBACAppName
-};
-//# sourceMappingURL=appNameResolver-7GHF5ED2.js.map

package/dist/chunk-2V3Y6YBC.js

@@ -1,114 +0,0 @@
-import {
-  __esm
-} from "./chunk-PLDDJCW6.js";
-
-// src/utils/debugLogger.ts
-var DebugLogger;
-var init_debugLogger = __esm({
-  "src/utils/debugLogger.ts"() {
-    "use strict";
-    DebugLogger = class {
-      /**
-       * Log debug information only in development mode
-       */
-      static log(component, message, ...args) {
-        if (this.isDevelopment) {
-          console.log(`[${component}] ${message}`, ...args);
-        }
-      }
-      /**
-       * Log error information (always logged)
-       */
-      static error(component, message, ...args) {
-        console.error(`[${component}] ${message}`, ...args);
-      }
-      /**
-       * Log warning information (always logged)
-       */
-      static warn(component, message, ...args) {
-        console.warn(`[${component}] ${message}`, ...args);
-      }
-      /**
-       * Log info information only in development mode
-       */
-      static info(component, message, ...args) {
-        if (this.isDevelopment) {
-          console.info(`[${component}] ${message}`, ...args);
-        }
-      }
-    };
-    DebugLogger.isDevelopment = false;
-  }
-});
-
-// src/utils/organisationContext.ts
-async function setOrganisationContext(supabase, organisationId) {
-  if (!supabase || !organisationId) {
-    return;
-  }
-  try {
-    const { error } = await supabase.rpc("set_organisation_context", {
-      org_id: organisationId
-    });
-    if (error) {
-    } else {
-    }
-  } catch (error) {
-  }
-}
-async function clearOrganisationContext(supabase) {
-  if (!supabase) {
-    return;
-  }
-  try {
-    const { error } = await supabase.rpc("clear_organisation_context");
-    if (error) {
-    } else {
-    }
-  } catch (error) {
-  }
-}
-async function getOrganisationContext(supabase) {
-  if (!supabase) {
-    return null;
-  }
-  try {
-    const { data, error } = await supabase.rpc("get_organisation_context");
-    if (error) {
-      return null;
-    }
-    return data;
-  } catch (error) {
-    return null;
-  }
-}
-async function isOrganisationContextAvailable(supabase) {
-  if (!supabase) {
-    return false;
-  }
-  try {
-    const { error } = await supabase.rpc("get_organisation_context");
-    if (error) {
-      return false;
-    }
-    return true;
-  } catch (error) {
-    return false;
-  }
-}
-var init_organisationContext = __esm({
-  "src/utils/organisationContext.ts"() {
-    "use strict";
-  }
-});
-
-export {
-  DebugLogger,
-  init_debugLogger,
-  setOrganisationContext,
-  clearOrganisationContext,
-  getOrganisationContext,
-  isOrganisationContextAvailable,
-  init_organisationContext
-};
-//# sourceMappingURL=chunk-2V3Y6YBC.js.map

package/dist/chunk-2V3Y6YBC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/debugLogger.ts","../src/utils/organisationContext.ts"],"sourcesContent":["/**\n * @file Debug Logger Utility\n * @package @jmruthers/pace-core\n * @module Utils/DebugLogger\n * @since 0.4.76\n */\n\n/**\n * Debug logger that respects environment settings\n * Only logs in development mode to prevent production console spam\n */\nexport class DebugLogger {\n  private static isDevelopment = process.env.NODE_ENV === 'development';\n\n  /**\n   * Log debug information only in development mode\n   */\n  static log(component: string, message: string, ...args: any[]): void {\n    if (this.isDevelopment) {\n      console.log(`[${component}] ${message}`, ...args);\n    }\n  }\n\n  /**\n   * Log error information (always logged)\n   */\n  static error(component: string, message: string, ...args: any[]): void {\n    console.error(`[${component}] ${message}`, ...args);\n  }\n\n  /**\n   * Log warning information (always logged)\n   */\n  static warn(component: string, message: string, ...args: any[]): void {\n    console.warn(`[${component}] ${message}`, ...args);\n  }\n\n  /**\n   * Log info information only in development mode\n   */\n  static info(component: string, message: string, ...args: any[]): void {\n    if (this.isDevelopment) {\n      console.info(`[${component}] ${message}`, ...args);\n    }\n  }\n}\n","/**\n * @file Organisation Context Utility\n * @package @jmruthers/pace-core\n * @module Utils/OrganisationContext\n * @since 0.4.0\n *\n * Utility functions for managing organisation context in database sessions.\n * Provides fallback mechanisms for when database functions are not available.\n */\n\nimport type { SupabaseClient } from '@supabase/supabase-js';\n\n/**\n * Set organisation context in the database session\n * \n * This function attempts to set the organisation context using a database function.\n * If the function is not available, it falls back gracefully without throwing errors.\n * \n * @param supabase - Supabase client instance\n * @param organisationId - The organisation ID to set as context\n * @returns Promise that resolves when context is set (or falls back gracefully)\n */\nexport async function setOrganisationContext(\n  supabase: SupabaseClient,\n  organisationId: string\n): Promise<void> {\n  if (!supabase || !organisationId) {\n    // TODO: Replace with proper logging service integration\n    return;\n  }\n\n  try {\n    // Try to call the database function to set organisation context\n    const { error } = await supabase.rpc('set_organisation_context', {\n      org_id: organisationId\n    });\n\n    if (error) {\n      // Function might not exist yet - this is expected during migration\n      // Silent fail - will fall back to client-side filtering\n      // TODO: Replace with proper logging service integration\n    } else {\n      // TODO: Replace with proper logging service integration\n    }\n  } catch (error) {\n    // Handle any other errors gracefully\n    // Silent fail - will fall back to client-side filtering\n    // TODO: Replace with proper logging service integration\n  }\n}\n\n/**\n * Clear organisation context from the database session\n * \n * @param supabase - Supabase client instance\n * @returns Promise that resolves when context is cleared\n */\nexport async function clearOrganisationContext(\n  supabase: SupabaseClient\n): Promise<void> {\n  if (!supabase) {\n    // TODO: Replace with proper logging service integration\n    return;\n  }\n\n  try {\n    const { error } = await supabase.rpc('clear_organisation_context');\n    \n    if (error) {\n      // Silent fail - function not available\n      // TODO: Replace with proper logging service integration\n    } else {\n      // TODO: Replace with proper logging service integration\n    }\n  } catch (error) {\n    // Silent fail - error occurred\n    // TODO: Replace with proper logging service integration\n  }\n}\n\n/**\n * Get current organisation context from the database session\n * \n * @param supabase - Supabase client instance\n * @returns Promise that resolves to the current organisation ID or null\n */\nexport async function getOrganisationContext(\n  supabase: SupabaseClient\n): Promise<string | null> {\n  if (!supabase) {\n    // TODO: Replace with proper logging service integration\n    return null;\n  }\n\n  try {\n    const { data, error } = await supabase.rpc('get_organisation_context');\n    \n    if (error) {\n      // TODO: Replace with proper logging service integration\n      return null;\n    }\n    \n    // TODO: Replace with proper logging service integration\n    return data;\n  } catch (error) {\n    // TODO: Replace with proper logging service integration\n    return null;\n  }\n}\n\n/**\n * Check if organisation context functions are available in the database\n * \n * @param supabase - Supabase client instance\n * @returns Promise that resolves to true if functions are available\n */\nexport async function isOrganisationContextAvailable(\n  supabase: SupabaseClient\n): Promise<boolean> {\n  if (!supabase) {\n    return false;\n  }\n\n  try {\n    const { error } = await supabase.rpc('get_organisation_context');\n    \n    if (error) {\n      return false;\n    }\n    \n    return true;\n  } catch (error) {\n    return false;\n  }\n} "],"mappings":";;;;;AAAA,IAWa;AAXb;AAAA;AAAA;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA,MAMvB,OAAO,IAAI,WAAmB,YAAoB,MAAmB;AACnE,YAAI,KAAK,eAAe;AACtB,kBAAQ,IAAI,IAAI,SAAS,KAAK,OAAO,IAAI,GAAG,IAAI;AAAA,QAClD;AAAA,MACF;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,MAAM,WAAmB,YAAoB,MAAmB;AACrE,gBAAQ,MAAM,IAAI,SAAS,KAAK,OAAO,IAAI,GAAG,IAAI;AAAA,MACpD;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,KAAK,WAAmB,YAAoB,MAAmB;AACpE,gBAAQ,KAAK,IAAI,SAAS,KAAK,OAAO,IAAI,GAAG,IAAI;AAAA,MACnD;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,KAAK,WAAmB,YAAoB,MAAmB;AACpE,YAAI,KAAK,eAAe;AACtB,kBAAQ,KAAK,IAAI,SAAS,KAAK,OAAO,IAAI,GAAG,IAAI;AAAA,QACnD;AAAA,MACF;AAAA,IACF;AAjCE,IADW,YACI,gBAAgB;AAAA;AAAA;;;ACUjC,eAAsB,uBACpB,UACA,gBACe;AACf,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAEhC;AAAA,EACF;AAEA,MAAI;AAEF,UAAM,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,4BAA4B;AAAA,MAC/D,QAAQ;AAAA,IACV,CAAC;AAED,QAAI,OAAO;AAAA,IAIX,OAAO;AAAA,IAEP;AAAA,EACF,SAAS,OAAO;AAAA,EAIhB;AACF;AAQA,eAAsB,yBACpB,UACe;AACf,MAAI,CAAC,UAAU;AAEb;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,4BAA4B;AAEjE,QAAI,OAAO;AAAA,IAGX,OAAO;AAAA,IAEP;AAAA,EACF,SAAS,OAAO;AAAA,EAGhB;AACF;AAQA,eAAsB,uBACpB,UACwB;AACxB,MAAI,CAAC,UAAU;AAEb,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,0BAA0B;AAErE,QAAI,OAAO;AAET,aAAO;AAAA,IACT;AAGA,WAAO;AAAA,EACT,SAAS,OAAO;AAEd,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,+BACpB,UACkB;AAClB,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,0BAA0B;AAE/D,QAAI,OAAO;AACT,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAtIA;AAAA;AAAA;AAAA;AAAA;","names":[]}

package/dist/chunk-7BNPOCLL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/rbac/audit.ts"],"sourcesContent":["/**\n * RBAC Audit Events System\n * @package @jmruthers/pace-core\n * @module RBAC/Audit\n * @since 1.0.0\n * \n * This module provides structured audit event emission for all RBAC operations.\n */\n\nimport { SupabaseClient } from '@supabase/supabase-js';\nimport { Database } from '../types/database';\nimport { \n  UUID, \n  AuditEventSource, \n  RBACAuditEvent \n} from './types';\n\n/**\n * Audit event payload for permission checks\n */\nexport interface PermissionCheckAuditEvent {\n  type: 'permission_check';\n  userId: UUID;\n  organisationId: UUID;\n  eventId?: string;\n  appId?: UUID;\n  pageId?: UUID;\n  permission: string;\n  decision: boolean;\n  source: AuditEventSource;\n  bypass?: boolean;\n  duration_ms: number;\n  metadata?: Record<string, any>;\n}\n\n/**\n * Audit event payload for permission denied\n */\nexport interface PermissionDeniedAuditEvent {\n  type: 'permission_denied';\n  userId: UUID;\n  organisationId: UUID;\n  eventId?: string;\n  appId?: UUID;\n  pageId?: UUID;\n  permission: string;\n  source: AuditEventSource;\n  metadata?: Record<string, any>;\n}\n\n/**\n * Audit event payload for role granted\n */\nexport interface RoleGrantedAuditEvent {\n  type: 'role_granted';\n  userId: UUID;\n  organisationId: UUID;\n  eventId?: string;\n  appId?: UUID;\n  role: string;\n  grantedBy: UUID;\n  metadata?: Record<string, any>;\n}\n\n/**\n * Audit event payload for role revoked\n */\nexport interface RoleRevokedAuditEvent {\n  type: 'role_denied';\n  userId: UUID;\n  organisationId: UUID;\n  eventId?: string;\n  appId?: UUID;\n  role: string;\n  revokedBy: UUID;\n  metadata?: Record<string, any>;\n}\n\n/**\n * Audit event payload for RLS denied\n */\nexport interface RLSDeniedAuditEvent {\n  type: 'rls_denied';\n  userId: UUID;\n  organisationId: UUID;\n  table: string;\n  operation: string;\n  metadata?: Record<string, any>;\n}\n\n/**\n * Union type for all audit events\n */\nexport type AuditEventPayload = \n  | PermissionCheckAuditEvent\n  | PermissionDeniedAuditEvent\n  | RoleGrantedAuditEvent\n  | RoleRevokedAuditEvent\n  | RLSDeniedAuditEvent;\n\n/**\n * RBAC Audit Manager\n * \n * Handles emission of structured audit events for all RBAC operations.\n */\nexport class RBACAuditManager {\n  private supabase: SupabaseClient<Database>;\n  private enabled: boolean = true;\n\n  constructor(supabase: SupabaseClient<Database>) {\n    this.supabase = supabase;\n  }\n\n  /**\n   * Enable or disable audit logging\n   * \n   * @param enabled - Whether to enable audit logging\n   */\n  setEnabled(enabled: boolean): void {\n    this.enabled = enabled;\n  }\n\n  /**\n   * Check if audit logging is enabled\n   * \n   * @returns True if audit logging is enabled\n   */\n  isEnabled(): boolean {\n    return this.enabled;\n  }\n\n  /**\n   * Emit an audit event\n   * \n   * @param event - Audit event payload\n   * @returns Promise that resolves when event is logged\n   */\n  async emitEvent(event: AuditEventPayload): Promise<void> {\n    if (!this.enabled) {\n      return;\n    }\n\n    // Validate required fields before attempting to insert\n    if (!event.userId || !event.organisationId) {\n      console.warn('[RBAC Audit] Skipping audit event - missing required fields:', {\n        userId: event.userId,\n        organisationId: event.organisationId,\n        eventType: event.type\n      });\n      return;\n    }\n\n    try {\n      const auditEvent: Omit<RBACAuditEvent, 'id' | 'created_at'> = {\n        event_type: event.type,\n        user_id: event.userId,\n        organisation_id: event.organisationId,\n        event_id: 'eventId' in event ? event.eventId : undefined,\n        app_id: 'appId' in event ? event.appId : undefined,\n        page_id: 'pageId' in event ? event.pageId : undefined,\n        permission: 'permission' in event ? event.permission : undefined,\n        decision: 'decision' in event ? event.decision : undefined,\n        source: 'source' in event ? event.source : 'api', // Default to 'api' if not provided\n        bypass: 'bypass' in event ? event.bypass : undefined,\n        duration_ms: 'duration_ms' in event ? event.duration_ms : undefined,\n        metadata: event.metadata || {},\n      };\n\n      const { error } = await (this.supabase as any)\n        .from('rbac_audit_events')\n        .insert([auditEvent]);\n\n      if (error) {\n        // Log the error for debugging but don't throw\n        console.warn('[RBAC Audit] Failed to insert audit event:', {\n          error: error.message,\n          code: error.code,\n          details: error.details,\n          hint: error.hint,\n          event: auditEvent\n        });\n      }\n    } catch (error) {\n      // Log unexpected errors but don't throw\n      console.error('[RBAC Audit] Unexpected error during audit logging:', error);\n    }\n  }\n\n  /**\n   * Emit a permission check audit event\n   * \n   * @param event - Permission check event data\n   */\n  async emitPermissionCheck(event: Omit<PermissionCheckAuditEvent, 'type'>): Promise<void> {\n    await this.emitEvent({\n      type: 'permission_check',\n      ...event,\n    });\n  }\n\n  /**\n   * Emit a permission denied audit event\n   * \n   * @param event - Permission denied event data\n   */\n  async emitPermissionDenied(event: Omit<PermissionDeniedAuditEvent, 'type'>): Promise<void> {\n    await this.emitEvent({\n      type: 'permission_denied',\n      ...event,\n    });\n  }\n\n  /**\n   * Emit a role granted audit event\n   * \n   * @param event - Role granted event data\n   */\n  async emitRoleGranted(event: Omit<RoleGrantedAuditEvent, 'type'>): Promise<void> {\n    await this.emitEvent({\n      type: 'role_granted',\n      ...event,\n    });\n  }\n\n  /**\n   * Emit a role revoked audit event\n   * \n   * @param event - Role revoked event data\n   */\n  async emitRoleRevoked(event: Omit<RoleRevokedAuditEvent, 'type'>): Promise<void> {\n    await this.emitEvent({\n      type: 'role_denied',\n      ...event,\n    });\n  }\n\n  /**\n   * Emit an RLS denied audit event\n   * \n   * @param event - RLS denied event data\n   */\n  async emitRLSDenied(event: Omit<RLSDeniedAuditEvent, 'type'>): Promise<void> {\n    await this.emitEvent({\n      type: 'rls_denied',\n      ...event,\n    });\n  }\n\n  /**\n   * Get audit events for a user\n   * \n   * @param userId - User ID\n   * @param limit - Maximum number of events to return\n   * @returns Promise resolving to audit events\n   */\n  async getUserAuditEvents(userId: UUID, limit: number = 100): Promise<RBACAuditEvent[]> {\n    const { data, error } = await this.supabase\n      .from('rbac_audit_events')\n      .select('*')\n      .eq('user_id', userId)\n      .order('created_at', { ascending: false })\n      .limit(limit);\n\n    if (error) {\n      throw new Error(`Failed to get audit events: ${error.message}`);\n    }\n\n    return data || [];\n  }\n\n  /**\n   * Get audit events for an organisation\n   * \n   * @param organisationId - Organisation ID\n   * @param limit - Maximum number of events to return\n   * @returns Promise resolving to audit events\n   */\n  async getOrganisationAuditEvents(organisationId: UUID, limit: number = 100): Promise<RBACAuditEvent[]> {\n    const { data, error } = await this.supabase\n      .from('rbac_audit_events')\n      .select('*')\n      .eq('organisation_id', organisationId)\n      .order('created_at', { ascending: false })\n      .limit(limit);\n\n    if (error) {\n      throw new Error(`Failed to get audit events: ${error.message}`);\n    }\n\n    return data || [];\n  }\n}\n\n/**\n * Create an audit manager instance\n * \n * @param supabase - Supabase client\n * @returns RBACAuditManager instance\n */\nexport function createAuditManager(supabase: SupabaseClient<Database>): RBACAuditManager {\n  return new RBACAuditManager(supabase);\n}\n\n/**\n * Global audit manager instance\n * \n * This is set by the RBAC engine when it initializes.\n */\nlet globalAuditManager: RBACAuditManager | null = null;\n\n/**\n * Set the global audit manager\n * \n * @param manager - Audit manager instance\n */\nexport function setGlobalAuditManager(manager: RBACAuditManager): void {\n  globalAuditManager = manager;\n}\n\n/**\n * Get the global audit manager\n * \n * @returns Global audit manager or null if not set\n */\nexport function getGlobalAuditManager(): RBACAuditManager | null {\n  return globalAuditManager;\n}\n\n/**\n * Emit an audit event using the global audit manager\n * \n * @param event - Audit event payload\n */\nexport async function emitAuditEvent(event: AuditEventPayload): Promise<void> {\n  if (globalAuditManager) {\n    await globalAuditManager.emitEvent(event);\n  }\n}\n"],"mappings":";AAyGO,IAAM,mBAAN,MAAuB;AAAA,EAI5B,YAAY,UAAoC;AAFhD,SAAQ,UAAmB;AAGzB,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,SAAwB;AACjC,SAAK,UAAU;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAU,OAAyC;AACvD,QAAI,CAAC,KAAK,SAAS;AACjB;AAAA,IACF;AAGA,QAAI,CAAC,MAAM,UAAU,CAAC,MAAM,gBAAgB;AAC1C,cAAQ,KAAK,gEAAgE;AAAA,QAC3E,QAAQ,MAAM;AAAA,QACd,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,MACnB,CAAC;AACD;AAAA,IACF;AAEA,QAAI;AACF,YAAM,aAAwD;AAAA,QAC5D,YAAY,MAAM;AAAA,QAClB,SAAS,MAAM;AAAA,QACf,iBAAiB,MAAM;AAAA,QACvB,UAAU,aAAa,QAAQ,MAAM,UAAU;AAAA,QAC/C,QAAQ,WAAW,QAAQ,MAAM,QAAQ;AAAA,QACzC,SAAS,YAAY,QAAQ,MAAM,SAAS;AAAA,QAC5C,YAAY,gBAAgB,QAAQ,MAAM,aAAa;AAAA,QACvD,UAAU,cAAc,QAAQ,MAAM,WAAW;AAAA,QACjD,QAAQ,YAAY,QAAQ,MAAM,SAAS;AAAA;AAAA,QAC3C,QAAQ,YAAY,QAAQ,MAAM,SAAS;AAAA,QAC3C,aAAa,iBAAiB,QAAQ,MAAM,cAAc;AAAA,QAC1D,UAAU,MAAM,YAAY,CAAC;AAAA,MAC/B;AAEA,YAAM,EAAE,MAAM,IAAI,MAAO,KAAK,SAC3B,KAAK,mBAAmB,EACxB,OAAO,CAAC,UAAU,CAAC;AAEtB,UAAI,OAAO;AAET,gBAAQ,KAAK,8CAA8C;AAAA,UACzD,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,UACZ,SAAS,MAAM;AAAA,UACf,MAAM,MAAM;AAAA,UACZ,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF,SAAS,OAAO;AAEd,cAAQ,MAAM,uDAAuD,KAAK;AAAA,IAC5E;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,oBAAoB,OAA+D;AACvF,UAAM,KAAK,UAAU;AAAA,MACnB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,qBAAqB,OAAgE;AACzF,UAAM,KAAK,UAAU;AAAA,MACnB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAgB,OAA2D;AAC/E,UAAM,KAAK,UAAU;AAAA,MACnB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAgB,OAA2D;AAC/E,UAAM,KAAK,UAAU;AAAA,MACnB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,cAAc,OAAyD;AAC3E,UAAM,KAAK,UAAU;AAAA,MACnB,MAAM;AAAA,MACN,GAAG;AAAA,IACL,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,mBAAmB,QAAc,QAAgB,KAAgC;AACrF,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK,SAChC,KAAK,mBAAmB,EACxB,OAAO,GAAG,EACV,GAAG,WAAW,MAAM,EACpB,MAAM,cAAc,EAAE,WAAW,MAAM,CAAC,EACxC,MAAM,KAAK;AAEd,QAAI,OAAO;AACT,YAAM,IAAI,MAAM,+BAA+B,MAAM,OAAO,EAAE;AAAA,IAChE;AAEA,WAAO,QAAQ,CAAC;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,2BAA2B,gBAAsB,QAAgB,KAAgC;AACrG,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK,SAChC,KAAK,mBAAmB,EACxB,OAAO,GAAG,EACV,GAAG,mBAAmB,cAAc,EACpC,MAAM,cAAc,EAAE,WAAW,MAAM,CAAC,EACxC,MAAM,KAAK;AAEd,QAAI,OAAO;AACT,YAAM,IAAI,MAAM,+BAA+B,MAAM,OAAO,EAAE;AAAA,IAChE;AAEA,WAAO,QAAQ,CAAC;AAAA,EAClB;AACF;AAQO,SAAS,mBAAmB,UAAsD;AACvF,SAAO,IAAI,iBAAiB,QAAQ;AACtC;AAOA,IAAI,qBAA8C;AAO3C,SAAS,sBAAsB,SAAiC;AACrE,uBAAqB;AACvB;AAOO,SAAS,wBAAiD;AAC/D,SAAO;AACT;AAOA,eAAsB,eAAe,OAAyC;AAC5E,MAAI,oBAAoB;AACtB,UAAM,mBAAmB,UAAU,KAAK;AAAA,EAC1C;AACF;","names":[]}