@jmruthers/pace-core 0.2.7 → 0.4.1

package/dist/rbac/index.js

@@ -18,30 +18,23 @@ import {
   isPermittedCached,
   rbacCache,
   setupRBAC
-} from "../chunk-C5G2A4PO.js";
+} from "../chunk-XI7QFSSC.js";
 import {
   RBACAuditManager,
   createAuditManager,
   emitAuditEvent,
   getGlobalAuditManager,
   setGlobalAuditManager
-} from "../chunk-7BNPOCLL.js";
+} from "../chunk-YNU5QJ4S.js";
 import {
   useSecureDataAccess
-} from "../chunk-TIVL4UQ7.js";
+} from "../chunk-JUUNUW3O.js";
 import {
-  init_UnifiedAuthProvider,
   useUnifiedAuth
-} from "../chunk-BEZRLNK3.js";
-import "../chunk-ETEJVKYK.js";
-import "../chunk-YDJW5XTN.js";
-import {
-  getCurrentAppName,
-  init_appNameResolver
-} from "../chunk-MZBUOP4P.js";
-import "../chunk-2V3Y6YBC.js";
-import "../chunk-OHXGNT3K.js";
-import "../chunk-PLDDJCW6.js";
+} from "../chunk-ZJ3UKPIW.js";
+import "../chunk-XIJMMBDD.js";
+import "../chunk-KK6WIDK6.js";
+import "../chunk-DC5AMYBS.js";
 
 // src/rbac/secureClient.ts
 import { createClient } from "@supabase/supabase-js";
@@ -177,7 +170,7 @@ function usePermissions(userId, scope) {
   const [isLoading, setIsLoading] = useState(true);
   const [error, setError] = useState(null);
   const fetchPermissions = useCallback(async () => {
-    if (!userId) {
+    if (!userId || !scope.organisationId) {
       setPermissions({});
       setIsLoading(false);
       return;
@@ -208,65 +201,17 @@ function useCan(userId, scope, permission, pageId, useCache = true) {
   const [isLoading, setIsLoading] = useState(true);
   const [error, setError] = useState(null);
   const check = useCallback(async () => {
-    console.log("[useCan] check() called with:", { userId, scope, permission, pageId });
-    console.log("[useCan] Hook parameters:", { userId, scope, permission, pageId, useCache });
-    if (!userId) {
-      console.log("[useCan] No userId, denying access");
+    if (!userId || !scope.organisationId) {
       setCan(false);
       setIsLoading(false);
       return;
     }
-    try {
-      const { isSuperAdmin } = await import("../api-ETQ6YJ3C.js");
-      const isSuper = await isSuperAdmin(userId);
-      if (isSuper) {
-        console.log("[useCan] User is super admin, granting access");
-        setCan(true);
-        setIsLoading(false);
-        return;
-      }
-    } catch (error2) {
-      console.error("[useCan] Error checking super admin status:", error2);
-    }
-    if (!scope || !scope.organisationId || !scope.appId) {
-      console.log("[useCan] Incomplete scope, waiting for resolution:", scope);
-      setCan(false);
-      setIsLoading(true);
-      return;
-    }
-    console.log("[useCan] Scope is complete, checking permission...");
-    console.log("[useCan] Detailed scope info:", {
-      organisationId: scope.organisationId,
-      eventId: scope.eventId,
-      appId: scope.appId,
-      permission,
-      pageId
-    });
     try {
       setIsLoading(true);
       setError(null);
-      console.log("[useCan] About to call isPermitted/isPermittedCached...");
       const result = useCache ? await isPermittedCached({ userId, scope, permission, pageId }) : await isPermitted({ userId, scope, permission, pageId });
-      console.log("[useCan] Permission check result:", result);
-      console.log("[useCan] Permission check details:", {
-        userId,
-        scope,
-        permission,
-        pageId,
-        result,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      });
       setCan(result);
     } catch (err) {
-      console.error("[useCan] Permission check error:", err);
-      console.error("[useCan] Error details:", {
-        userId,
-        scope,
-        permission,
-        pageId,
-        error: err instanceof Error ? err.message : "Unknown error",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      });
       setError(err instanceof Error ? err : new Error("Failed to check permission"));
       setCan(false);
     } finally {
@@ -288,7 +233,7 @@ function useAccessLevel(userId, scope) {
   const [isLoading, setIsLoading] = useState(true);
   const [error, setError] = useState(null);
   const fetchAccessLevel = useCallback(async () => {
-    if (!userId) {
+    if (!userId || !scope.organisationId) {
       setAccessLevel(null);
       setIsLoading(false);
       return;
@@ -320,7 +265,7 @@ function useMultiplePermissions(userId, scope, permissions, pageId, useCache = t
   const [isLoading, setIsLoading] = useState(true);
   const [error, setError] = useState(null);
   const fetchPermissions = useCallback(async () => {
-    if (!userId || permissions.length === 0) {
+    if (!userId || !scope.organisationId || permissions.length === 0) {
       setPermissionResults({});
       setIsLoading(false);
       return;
@@ -394,7 +339,7 @@ function useCachedPermissions(userId, scope) {
   const [isLoading, setIsLoading] = useState(true);
   const [error, setError] = useState(null);
   const fetchCachedPermissions = useCallback(async () => {
-    if (!userId) {
+    if (!userId || !scope.organisationId) {
       setPermissions({});
       setIsLoading(false);
       return;
@@ -589,7 +534,7 @@ function withPermissionGuard(config, handler) {
     if (!userId || !organisationId) {
       throw new Error("User context required for permission check");
     }
-    const { isPermitted: isPermitted2 } = await import("../api-ETQ6YJ3C.js");
+    const { isPermitted: isPermitted2 } = await import("../api-AIJ3IJX3.js");
     const hasPermission2 = await isPermitted2({
       userId,
       scope: { organisationId, eventId, appId },
@@ -612,7 +557,7 @@ function withAccessLevelGuard(minLevel, handler) {
     if (!userId || !organisationId) {
       throw new Error("User context required for access level check");
     }
-    const { getAccessLevel: getAccessLevel2 } = await import("../api-ETQ6YJ3C.js");
+    const { getAccessLevel: getAccessLevel2 } = await import("../api-AIJ3IJX3.js");
     const accessLevel = await getAccessLevel2({
       userId,
       scope: { organisationId, eventId, appId }
@@ -637,63 +582,59 @@ function withRoleGuard(config, handler) {
       throw new Error("User context required for role check");
     }
     if (config.globalRoles && config.globalRoles.length > 0) {
-      const { isSuperAdmin } = await import("../api-ETQ6YJ3C.js");
+      const { isSuperAdmin } = await import("../api-AIJ3IJX3.js");
       const isSuper = await isSuperAdmin(userId);
       if (isSuper) {
-        if (organisationId) {
-          const { emitAuditEvent: emitAuditEvent2 } = await import("../audit-BUW3LMJB.js");
-          await emitAuditEvent2({
-            type: "permission_check",
-            userId,
-            organisationId,
-            eventId,
-            appId,
-            permission: "bypass:all",
-            decision: true,
-            source: "api",
-            bypass: true,
-            duration_ms: 0,
-            metadata: {
-              operation: "role_guard",
-              reason: "super_admin_bypass"
-            }
-          });
-        }
+        const { emitAuditEvent: emitAuditEvent3 } = await import("../audit-PD5L5ZSC.js");
+        await emitAuditEvent3({
+          type: "permission_check",
+          userId,
+          organisationId,
+          eventId,
+          appId,
+          permission: "bypass:all",
+          decision: true,
+          source: "api",
+          bypass: true,
+          duration_ms: 0,
+          metadata: {
+            operation: "role_guard",
+            reason: "super_admin_bypass"
+          }
+        });
         return handler(...args);
       }
     }
     if (config.organisationRoles && config.organisationRoles.length > 0) {
-      const { isOrganisationAdmin } = await import("../api-ETQ6YJ3C.js");
+      const { isOrganisationAdmin } = await import("../api-AIJ3IJX3.js");
       const isOrgAdmin = await isOrganisationAdmin(userId, organisationId);
       if (!isOrgAdmin && config.requireAll !== false) {
         throw new Error(`Organisation admin role required`);
       }
     }
     if (config.eventAppRoles && config.eventAppRoles.length > 0 && eventId && appId) {
-      const { isEventAdmin } = await import("../api-ETQ6YJ3C.js");
+      const { isEventAdmin } = await import("../api-AIJ3IJX3.js");
       const isEventAdminUser = await isEventAdmin(userId, { organisationId, eventId, appId });
       if (!isEventAdminUser && config.requireAll !== false) {
         throw new Error(`Event admin role required`);
       }
     }
-    if (organisationId) {
-      const { emitAuditEvent: emitAuditEvent2 } = await import("../audit-BUW3LMJB.js");
-      await emitAuditEvent2({
-        type: "permission_check",
-        userId,
-        organisationId,
-        eventId,
-        appId,
-        permission: "role:check",
-        decision: true,
-        source: "api",
-        bypass: false,
-        duration_ms: 0,
-        metadata: {
-          operation: "role_guard"
-        }
-      });
-    }
+    const { emitAuditEvent: emitAuditEvent2 } = await import("../audit-PD5L5ZSC.js");
+    await emitAuditEvent2({
+      type: "permission_check",
+      userId,
+      organisationId,
+      eventId,
+      appId,
+      permission: "role:check",
+      decision: true,
+      source: "api",
+      bypass: false,
+      duration_ms: 0,
+      metadata: {
+        operation: "role_guard"
+      }
+    });
     return handler(...args);
   };
 }
@@ -710,7 +651,7 @@ function createRBACMiddleware(config) {
     );
     if (protectedRoute) {
       try {
-        const { isPermitted: isPermitted2 } = await import("../api-ETQ6YJ3C.js");
+        const { isPermitted: isPermitted2 } = await import("../api-AIJ3IJX3.js");
         const hasPermission2 = await isPermitted2({
           userId,
           scope: { organisationId },
@@ -737,7 +678,7 @@ function createRBACExpressMiddleware(config) {
       return res.status(401).json({ error: "User context required" });
     }
     try {
-      const { isPermitted: isPermitted2 } = await import("../api-ETQ6YJ3C.js");
+      const { isPermitted: isPermitted2 } = await import("../api-AIJ3IJX3.js");
       const hasPermission2 = await isPermitted2({
         userId,
         scope: { organisationId, eventId, appId },
@@ -769,7 +710,6 @@ function hasAnyPermissionCached(userId, scope, permissions, pageId) {
 }
 
 // src/rbac/components/PagePermissionProvider.tsx
-init_UnifiedAuthProvider();
 import { createContext, useContext as useContext2, useState as useState2, useCallback as useCallback2, useMemo as useMemo2, useEffect as useEffect2 } from "react";
 import { jsx as jsx2 } from "react/jsx-runtime";
 var PagePermissionContext = createContext(null);
@@ -798,7 +738,7 @@ function PagePermissionProvider({
     const effectiveScope = scope || currentScope;
     if (!effectiveScope) return false;
     const permission = `${operation}:page.${pageName}`;
-    return false;
+    return true;
   }, [isEnabled, user?.id, currentScope]);
   const getPagePermissions = useCallback2(() => {
     if (!isEnabled || !user?.id) return {};
@@ -866,7 +806,6 @@ function usePagePermissions() {
 
 // src/rbac/components/PagePermissionGuard.tsx
 import { useMemo as useMemo3, useEffect as useEffect3, useState as useState3 } from "react";
-init_UnifiedAuthProvider();
 
 // src/rbac/utils/eventContext.ts
 async function getOrganisationFromEvent(supabase, eventId) {
@@ -889,7 +828,6 @@ async function createScopeFromEvent(supabase, eventId, appId) {
 }
 
 // src/rbac/components/PagePermissionGuard.tsx
-init_appNameResolver();
 import { Fragment as Fragment2, jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
 function PagePermissionGuard({
   pageName,
@@ -913,90 +851,20 @@ function PagePermissionGuard({
         setResolvedScope(scope);
         return;
       }
-      let appId = void 0;
-      if (supabase) {
-        const appName = getCurrentAppName();
-        if (appName) {
-          try {
-            console.log("[PagePermissionGuard] Resolving app name to ID:", appName);
-            const { data: app, error: error2 } = await supabase.from("rbac_apps").select("id, name, is_active").eq("name", appName).eq("is_active", true).single();
-            if (error2) {
-              console.error("[PagePermissionGuard] Database error resolving app ID:", error2);
-              const { data: inactiveApp } = await supabase.from("rbac_apps").select("id, name, is_active").eq("name", appName).single();
-              if (inactiveApp) {
-                console.error(`[PagePermissionGuard] App "${appName}" exists but is inactive (is_active: ${inactiveApp.is_active})`);
-              } else {
-                console.error(`[PagePermissionGuard] App "${appName}" not found in rbac_apps table`);
-              }
-            } else if (app) {
-              appId = app.id;
-              console.log("[PagePermissionGuard] Successfully resolved app ID:", app.id);
-            } else {
-              console.error("[PagePermissionGuard] No app data returned for:", appName);
-            }
-          } catch (error2) {
-            console.error("[PagePermissionGuard] Unexpected error resolving app ID:", error2);
-          }
-        } else {
-          console.error("[PagePermissionGuard] No app name found. Make sure to call setRBACAppName() in your app setup.");
-        }
-      }
       if (selectedOrganisationId && selectedEventId) {
-        if (!appId) {
-          if (false) {
-            console.warn("[PagePermissionGuard] App ID not resolved in test environment, proceeding without it");
-          } else {
-            console.error("[PagePermissionGuard] CRITICAL: App ID not resolved. Check console for details.");
-            setCheckError(new Error("App ID not resolved. Check console for database errors."));
-            setResolvedScope(null);
-            return;
-          }
-        }
-        if (appId) {
-          const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-          if (!uuidRegex.test(appId)) {
-            console.error("[PagePermissionGuard] CRITICAL: App ID is not a valid UUID:", appId);
-            setCheckError(new Error(`Invalid app ID format: ${appId}. Expected UUID.`));
-            setResolvedScope(null);
-            return;
-          }
-        }
-        const resolvedScope2 = {
+        setResolvedScope({
           organisationId: selectedOrganisationId,
           eventId: selectedEventId,
-          appId
-        };
-        console.log("[PagePermissionGuard] Setting resolved scope:", resolvedScope2);
-        setResolvedScope(resolvedScope2);
+          appId: void 0
+        });
         return;
       }
       if (selectedOrganisationId) {
-        if (!appId) {
-          if (false) {
-            console.warn("[PagePermissionGuard] App ID not resolved in test environment, proceeding without it");
-          } else {
-            console.error("[PagePermissionGuard] CRITICAL: App ID not resolved. Check console for details.");
-            setCheckError(new Error("App ID not resolved. Check console for database errors."));
-            setResolvedScope(null);
-            return;
-          }
-        }
-        if (appId) {
-          const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-          if (!uuidRegex.test(appId)) {
-            console.error("[PagePermissionGuard] CRITICAL: App ID is not a valid UUID:", appId);
-            setCheckError(new Error(`Invalid app ID format: ${appId}. Expected UUID.`));
-            setResolvedScope(null);
-            return;
-          }
-        }
-        const resolvedScope2 = {
+        setResolvedScope({
           organisationId: selectedOrganisationId,
           eventId: selectedEventId || void 0,
-          appId
-        };
-        console.log("[PagePermissionGuard] Setting resolved scope (org only):", resolvedScope2);
-        setResolvedScope(resolvedScope2);
+          appId: void 0
+        });
         return;
       }
       if (selectedEventId && supabase) {
@@ -1004,21 +872,15 @@ function PagePermissionGuard({
           const eventScope = await createScopeFromEvent(supabase, selectedEventId);
           if (!eventScope) {
             setCheckError(new Error("Could not resolve organization from event context"));
-            setResolvedScope(null);
             return;
           }
-          setResolvedScope({
-            ...eventScope,
-            appId: appId || eventScope.appId
-          });
+          setResolvedScope(eventScope);
         } catch (error2) {
           setCheckError(error2);
-          setResolvedScope(null);
         }
         return;
       }
       setCheckError(new Error("Either organisation context or event context is required for page permission checking"));
-      setResolvedScope(null);
     };
     resolveScope();
   }, [scope, selectedOrganisationId, selectedEventId, supabase]);
@@ -1028,34 +890,14 @@ function PagePermissionGuard({
   const permission = useMemo3(() => {
     return `${operation}:page.${pageName}`;
   }, [operation, pageName]);
-  console.log("[PagePermissionGuard] Calling useCan with scope:", resolvedScope);
-  console.log("[PagePermissionGuard] resolvedScope:", resolvedScope);
-  console.log("[PagePermissionGuard] selectedEventId:", selectedEventId);
-  console.log("[PagePermissionGuard] About to call useCan with:", {
-    userId: user?.id || "",
-    scope: resolvedScope || { organisationId: "", appId: "", eventId: selectedEventId || void 0 },
-    permission,
-    pageId: effectivePageId,
-    useCache: true
-  });
-  const { can, isLoading: canIsLoading, error: canError } = useCan(
+  const { can, isLoading, error } = useCan(
     user?.id || "",
-    resolvedScope || { organisationId: "", appId: "", eventId: selectedEventId || void 0 },
+    resolvedScope || { eventId: selectedEventId || void 0 },
     permission,
     effectivePageId,
     true
     // Use cache
   );
-  console.log("[PagePermissionGuard] useCan returned:", { can, canIsLoading, canError });
-  const isLoading = !resolvedScope || canIsLoading;
-  const error = checkError || canError;
-  console.log("[PagePermissionGuard] Combined state:", {
-    can,
-    isLoading,
-    canIsLoading,
-    resolvedScopeExists: !!resolvedScope,
-    error: error?.message
-  });
   useEffect3(() => {
     if (!isLoading && !error) {
       setHasChecked(true);
@@ -1105,14 +947,14 @@ function PagePermissionGuard({
 }
 function DefaultAccessDenied() {
   return /* @__PURE__ */ jsxs2("div", { className: "flex flex-col items-center justify-center min-h-[200px] p-8 text-center", children: [
-    /* @__PURE__ */ jsx3("div", { className: "mb-4", children: /* @__PURE__ */ jsx3("svg", { className: "w-16 h-16 text-acc-500 mx-auto", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx3("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
-    /* @__PURE__ */ jsx3("h2", { className: "text-xl font-semibold text-sec-900 mb-2", children: "Access Denied" }),
-    /* @__PURE__ */ jsx3("p", { className: "text-sec-600 mb-4", children: "You don't have permission to access this page." }),
+    /* @__PURE__ */ jsx3("div", { className: "mb-4", children: /* @__PURE__ */ jsx3("svg", { className: "w-16 h-16 text-red-500 mx-auto", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx3("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
+    /* @__PURE__ */ jsx3("h2", { className: "text-xl font-semibold text-gray-900 mb-2", children: "Access Denied" }),
+    /* @__PURE__ */ jsx3("p", { className: "text-gray-600 mb-4", children: "You don't have permission to access this page." }),
     /* @__PURE__ */ jsx3(
       "button",
       {
         onClick: () => window.history.back(),
-        className: "px-4 py-2 bg-main-600 text-main-50 rounded-md hover:bg-main-700 transition-colors",
+        className: "px-4 py-2 bg-blue-600 text-white rounded-md hover:bg-blue-700 transition-colors",
         children: "Go Back"
       }
     )
@@ -1120,13 +962,12 @@ function DefaultAccessDenied() {
 }
 function DefaultLoading() {
   return /* @__PURE__ */ jsx3("div", { className: "flex items-center justify-center min-h-[200px] p-8", children: /* @__PURE__ */ jsxs2("div", { className: "flex items-center space-x-2", children: [
-    /* @__PURE__ */ jsx3("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-main-600" }),
-    /* @__PURE__ */ jsx3("span", { className: "text-sec-600", children: "Checking permissions..." })
+    /* @__PURE__ */ jsx3("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-blue-600" }),
+    /* @__PURE__ */ jsx3("span", { className: "text-gray-600", children: "Checking permissions..." })
   ] }) });
 }
 
 // src/rbac/components/SecureDataProvider.tsx
-init_UnifiedAuthProvider();
 import { createContext as createContext2, useContext as useContext3, useState as useState4, useCallback as useCallback4, useMemo as useMemo4, useEffect as useEffect4 } from "react";
 import { jsx as jsx4 } from "react/jsx-runtime";
 var SecureDataContext = createContext2(null);
@@ -1246,7 +1087,6 @@ function useSecureData() {
 
 // src/rbac/components/PermissionEnforcer.tsx
 import { useMemo as useMemo5, useEffect as useEffect5, useState as useState5 } from "react";
-init_UnifiedAuthProvider();
 import { Fragment as Fragment3, jsx as jsx5, jsxs as jsxs3 } from "react/jsx-runtime";
 function PermissionEnforcer({
   permissions,
@@ -1368,14 +1208,14 @@ function PermissionEnforcer({
 }
 function DefaultAccessDenied2() {
   return /* @__PURE__ */ jsxs3("div", { className: "flex flex-col items-center justify-center min-h-[200px] p-8 text-center", children: [
-    /* @__PURE__ */ jsx5("div", { className: "mb-4", children: /* @__PURE__ */ jsx5("svg", { className: "w-16 h-16 text-acc-500 mx-auto", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx5("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
-    /* @__PURE__ */ jsx5("h2", { className: "text-xl font-semibold text-sec-900 mb-2", children: "Access Denied" }),
-    /* @__PURE__ */ jsx5("p", { className: "text-sec-600 mb-4", children: "You don't have permission to perform this operation." }),
+    /* @__PURE__ */ jsx5("div", { className: "mb-4", children: /* @__PURE__ */ jsx5("svg", { className: "w-16 h-16 text-red-500 mx-auto", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx5("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
+    /* @__PURE__ */ jsx5("h2", { className: "text-xl font-semibold text-gray-900 mb-2", children: "Access Denied" }),
+    /* @__PURE__ */ jsx5("p", { className: "text-gray-600 mb-4", children: "You don't have permission to perform this operation." }),
     /* @__PURE__ */ jsx5(
       "button",
       {
         onClick: () => window.history.back(),
-        className: "px-4 py-2 bg-main-600 text-main-50 rounded-md hover:bg-main-700 transition-colors",
+        className: "px-4 py-2 bg-blue-600 text-white rounded-md hover:bg-blue-700 transition-colors",
         children: "Go Back"
       }
     )
@@ -1383,15 +1223,14 @@ function DefaultAccessDenied2() {
 }
 function DefaultLoading2() {
   return /* @__PURE__ */ jsx5("div", { className: "flex items-center justify-center min-h-[200px] p-8", children: /* @__PURE__ */ jsxs3("div", { className: "flex items-center space-x-2", children: [
-    /* @__PURE__ */ jsx5("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-main-600" }),
-    /* @__PURE__ */ jsx5("span", { className: "text-sec-600", children: "Checking permissions..." })
+    /* @__PURE__ */ jsx5("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-blue-600" }),
+    /* @__PURE__ */ jsx5("span", { className: "text-gray-600", children: "Checking permissions..." })
   ] }) });
 }
 
 // src/rbac/components/RoleBasedRouter.tsx
 import { useMemo as useMemo6, useCallback as useCallback6, useEffect as useEffect6, useState as useState6, createContext as createContext3, useContext as useContext4 } from "react";
 import { useLocation, useNavigate, Outlet } from "react-router-dom";
-init_UnifiedAuthProvider();
 import { jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
 var RoleBasedRouterContext = createContext3(null);
 function RoleBasedRouter({
@@ -1435,7 +1274,7 @@ function RoleBasedRouter({
     currentRouteConfig?.pageId
   );
   const hasPermissions = currentRouteConfig?.permissions && currentRouteConfig.permissions.length > 0;
-  const finalCanAccess = hasPermissions ? canAccessCurrentRoute : false;
+  const finalCanAccess = hasPermissions ? canAccessCurrentRoute : true;
   const finalLoading = hasPermissions ? permissionLoading : false;
   const getAccessibleRoutes = useCallback6(() => {
     if (!user?.id || !currentScope) return [];
@@ -1522,8 +1361,8 @@ function RoleBasedRouter({
   ]);
   if (finalLoading) {
     return /* @__PURE__ */ jsx6("div", { className: "flex items-center justify-center min-h-screen", children: /* @__PURE__ */ jsxs4("div", { className: "text-center", children: [
-      /* @__PURE__ */ jsx6("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-main-600 mx-auto mb-4" }),
-      /* @__PURE__ */ jsx6("p", { className: "text-sec-600", children: "Checking permissions..." })
+      /* @__PURE__ */ jsx6("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-blue-600 mx-auto mb-4" }),
+      /* @__PURE__ */ jsx6("p", { className: "text-gray-600", children: "Checking permissions..." })
     ] }) });
   }
   if (currentRouteConfig && !finalCanAccess) {
@@ -1549,13 +1388,13 @@ function useRoleBasedRouter() {
 }
 function DefaultUnauthorizedComponent({ route, reason }) {
   return /* @__PURE__ */ jsxs4("div", { className: "flex flex-col items-center justify-center min-h-screen p-8 text-center", children: [
-    /* @__PURE__ */ jsx6("div", { className: "mb-4", children: /* @__PURE__ */ jsx6("svg", { className: "w-16 h-16 text-acc-500 mx-auto", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx6("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
-    /* @__PURE__ */ jsx6("h2", { className: "text-xl font-semibold text-sec-900 mb-2", children: "Access Denied" }),
-    /* @__PURE__ */ jsxs4("p", { className: "text-sec-600 mb-4", children: [
+    /* @__PURE__ */ jsx6("div", { className: "mb-4", children: /* @__PURE__ */ jsx6("svg", { className: "w-16 h-16 text-red-500 mx-auto", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx6("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
+    /* @__PURE__ */ jsx6("h2", { className: "text-xl font-semibold text-gray-900 mb-2", children: "Access Denied" }),
+    /* @__PURE__ */ jsxs4("p", { className: "text-gray-600 mb-4", children: [
       "You don't have permission to access ",
-      /* @__PURE__ */ jsx6("code", { className: "bg-sec-100 px-2 py-1 rounded", children: route })
+      /* @__PURE__ */ jsx6("code", { className: "bg-gray-100 px-2 py-1 rounded", children: route })
     ] }),
-    /* @__PURE__ */ jsxs4("p", { className: "text-sm text-sec-500 mb-4", children: [
+    /* @__PURE__ */ jsxs4("p", { className: "text-sm text-gray-500 mb-4", children: [
       "Reason: ",
       reason
     ] }),
@@ -1563,7 +1402,7 @@ function DefaultUnauthorizedComponent({ route, reason }) {
       "button",
       {
         onClick: () => window.history.back(),
-        className: "px-4 py-2 bg-main-600 text-main-50 rounded-md hover:bg-main-700 transition-colors",
+        className: "px-4 py-2 bg-blue-600 text-white rounded-md hover:bg-blue-700 transition-colors",
         children: "Go Back"
       }
     )
@@ -1571,7 +1410,6 @@ function DefaultUnauthorizedComponent({ route, reason }) {
 }
 
 // src/rbac/components/NavigationProvider.tsx
-init_UnifiedAuthProvider();
 import { createContext as createContext4, useContext as useContext5, useState as useState7, useCallback as useCallback7, useMemo as useMemo7, useEffect as useEffect7 } from "react";
 import { jsx as jsx7 } from "react/jsx-runtime";
 var NavigationContext = createContext4(null);
@@ -1674,7 +1512,6 @@ function useNavigationPermissions() {
 
 // src/rbac/components/NavigationGuard.tsx
 import { useMemo as useMemo8, useEffect as useEffect8, useState as useState8 } from "react";
-init_UnifiedAuthProvider();
 import { Fragment as Fragment4, jsx as jsx8, jsxs as jsxs5 } from "react/jsx-runtime";
 function NavigationGuard({
   navigationItem,
@@ -1794,14 +1631,14 @@ function NavigationGuard({
 }
 function DefaultAccessDenied3() {
   return /* @__PURE__ */ jsx8("div", { className: "flex items-center justify-center p-2 text-center", children: /* @__PURE__ */ jsxs5("div", { className: "flex items-center space-x-2", children: [
-    /* @__PURE__ */ jsx8("svg", { className: "w-4 h-4 text-acc-500", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx8("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }),
-    /* @__PURE__ */ jsx8("span", { className: "text-sm text-sec-600", children: "Access Denied" })
+    /* @__PURE__ */ jsx8("svg", { className: "w-4 h-4 text-red-500", fill: "none", stroke: "currentColor", viewBox: "0 0 24 24", children: /* @__PURE__ */ jsx8("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L3.732 16.5c-.77.833.192 2.5 1.732 2.5z" }) }),
+    /* @__PURE__ */ jsx8("span", { className: "text-sm text-gray-600", children: "Access Denied" })
   ] }) });
 }
 function DefaultLoading3() {
   return /* @__PURE__ */ jsx8("div", { className: "flex items-center justify-center p-2", children: /* @__PURE__ */ jsxs5("div", { className: "flex items-center space-x-2", children: [
-    /* @__PURE__ */ jsx8("div", { className: "animate-spin rounded-full h-4 w-4 border-b-2 border-main-600" }),
-    /* @__PURE__ */ jsx8("span", { className: "text-sm text-sec-600", children: "Checking..." })
+    /* @__PURE__ */ jsx8("div", { className: "animate-spin rounded-full h-4 w-4 border-b-2 border-blue-600" }),
+    /* @__PURE__ */ jsx8("span", { className: "text-sm text-gray-600", children: "Checking..." })
   ] }) });
 }
 var NavigationGuard_default = NavigationGuard;
@@ -1817,8 +1654,8 @@ function EnhancedNavigationMenu({
   onStrictModeViolation,
   className = "flex flex-col space-y-1",
   itemClassName = "px-3 py-2 rounded-md text-sm font-medium transition-colors",
-  activeItemClassName = "bg-main-100 text-main-700",
-  disabledItemClassName = "text-sec-400 cursor-not-allowed",
+  activeItemClassName = "bg-blue-100 text-blue-700",
+  disabledItemClassName = "text-gray-400 cursor-not-allowed",
   hideUnauthorizedItems = false,
   renderItem,
   activePath,
@@ -1892,18 +1729,18 @@ function EnhancedNavigationMenu({
         fallback: hideUnauthorizedItems ? null : /* @__PURE__ */ jsx9("div", { className: `${itemClassName} ${disabledItemClassName}`, children: /* @__PURE__ */ jsxs6("div", { className: "flex items-center space-x-2", children: [
           item.meta?.icon && /* @__PURE__ */ jsx9("span", { className: "text-sm", children: item.meta.icon }),
           /* @__PURE__ */ jsx9("span", { children: item.label }),
-          /* @__PURE__ */ jsx9("span", { className: "text-xs text-sec-400", children: "(Access Denied)" })
+          /* @__PURE__ */ jsx9("span", { className: "text-xs text-gray-400", children: "(Access Denied)" })
         ] }) }),
         children: /* @__PURE__ */ jsx9(
           "button",
           {
             onClick: () => handleItemClick(item),
-            className: `${itemClassName} ${isActive ? activeItemClassName : ""} ${isDisabled ? disabledItemClassName : "hover:bg-sec-100"}`,
+            className: `${itemClassName} ${isActive ? activeItemClassName : ""} ${isDisabled ? disabledItemClassName : "hover:bg-gray-100"}`,
             disabled: isDisabled,
             children: /* @__PURE__ */ jsxs6("div", { className: "flex items-center space-x-2", children: [
               item.meta?.icon && /* @__PURE__ */ jsx9("span", { className: "text-sm", children: item.meta.icon }),
               /* @__PURE__ */ jsx9("span", { children: item.label }),
-              item.meta?.description && /* @__PURE__ */ jsx9("span", { className: "text-xs text-sec-500 ml-auto", children: item.meta.description })
+              item.meta?.description && /* @__PURE__ */ jsx9("span", { className: "text-xs text-gray-500 ml-auto", children: item.meta.description })
             ] })
           }
         )
@@ -2130,7 +1967,7 @@ var PERMISSION_GROUPS = {
   ]
 };
 function isValidPermission(permission) {
-  const pattern = /^(read|create|update|delete|manage):[a-z0-9._-]+$|^(read|create|update|delete|manage):\*$/;
+  const pattern = /^(read|create|update|delete|manage):[a-zA-Z0-9._-]+$/;
   return pattern.test(permission);
 }
 function getPermissionsForRole(role) {