@jmruthers/pace-core 0.2.7 → 0.5.1

package/dist/chunk-COBPIXXQ.js

@@ -0,0 +1,379 @@
+import {
+  init_UnifiedAuthProvider,
+  useUnifiedAuth
+} from "./chunk-6CR3MRZN.js";
+import {
+  init_organisationContext,
+  setOrganisationContext
+} from "./chunk-OEGRKULD.js";
+import {
+  DebugLogger,
+  init_debugLogger
+} from "./chunk-OYRY44Q2.js";
+import {
+  __esm,
+  __export
+} from "./chunk-PLDDJCW6.js";
+
+// src/providers/OrganisationProvider.tsx
+var OrganisationProvider_exports = {};
+__export(OrganisationProvider_exports, {
+  OrganisationProvider: () => OrganisationProvider,
+  useOrganisations: () => useOrganisations
+});
+import { createContext, useContext, useState, useEffect, useCallback, useMemo } from "react";
+import { useNavigate } from "react-router-dom";
+import { jsx, jsxs } from "react/jsx-runtime";
+function OrganisationProvider({ children }) {
+  const [selectedOrganisation, setSelectedOrganisation] = useState(null);
+  const [organisations, setOrganisations] = useState([]);
+  const [userMemberships, setUserMemberships] = useState([]);
+  const [roleMapState, setRoleMapState] = useState(/* @__PURE__ */ new Map());
+  const [isLoading, setIsLoading] = useState(true);
+  const [error, setError] = useState(null);
+  const [isContextReady, setIsContextReady] = useState(false);
+  const { user, session, supabase, signOut } = useUnifiedAuth();
+  let navigate = null;
+  try {
+    navigate = useNavigate();
+  } catch (error2) {
+    navigate = null;
+  }
+  const setDatabaseOrganisationContext = useCallback(async (organisation) => {
+    if (!supabase || !session) {
+      console.warn("[OrganisationProvider] No Supabase client or session available for setting organisation context");
+      setIsContextReady(false);
+      return;
+    }
+    try {
+      await setOrganisationContext(supabase, organisation.id);
+      DebugLogger.log("OrganisationProvider", "Database organisation context set to:", organisation.display_name);
+      setIsContextReady(true);
+    } catch (error2) {
+      console.error("[OrganisationProvider] Failed to set database organisation context:", error2);
+      setIsContextReady(false);
+    }
+  }, [supabase, session]);
+  useEffect(() => {
+    if (selectedOrganisation && supabase && session) {
+      setIsContextReady(false);
+      (async () => {
+        await setDatabaseOrganisationContext(selectedOrganisation);
+      })();
+    } else {
+      setIsContextReady(false);
+    }
+  }, [selectedOrganisation, setDatabaseOrganisationContext, supabase, session]);
+  const loadUserOrganisations = useCallback(async () => {
+    if (!user || !session || !supabase) {
+      DebugLogger.log("OrganisationProvider", "Clearing organisation state - no user, session, or supabase client");
+      setSelectedOrganisation(null);
+      setOrganisations([]);
+      setUserMemberships([]);
+      setIsLoading(false);
+      setError(null);
+      return;
+    }
+    setIsLoading(true);
+    setError(null);
+    try {
+      DebugLogger.log("OrganisationProvider", "Loading organisations for user:", user.id);
+      let memberships, membershipError;
+      try {
+        const result = await supabase.from("rbac_organisation_roles").select(`
+              id,
+              user_id,
+              organisation_id,
+              role,
+              status,
+              granted_at,
+              granted_by,
+              revoked_at,
+              revoked_by,
+              notes,
+              created_at,
+              updated_at
+            `).eq("user_id", user.id).eq("status", "active").is("revoked_at", null).in("role", ["org_admin", "leader", "member"]);
+        memberships = result.data;
+        membershipError = result.error;
+      } catch (queryError) {
+        membershipError = queryError;
+      }
+      if (membershipError) {
+        console.error("[OrganisationProvider] Error loading memberships:", membershipError);
+        throw membershipError;
+      }
+      DebugLogger.log("OrganisationProvider", "Raw memberships data:", memberships);
+      if (!memberships || memberships.length === 0) {
+        throw new Error("User has no active organisation memberships");
+      }
+      const organisationIds = memberships.map((m) => m.organisation_id);
+      const { data: organisations2, error: orgError } = await supabase.from("organisations").select("id, name, display_name, subscription_tier, settings, is_active, parent_id, created_at, updated_at").in("id", organisationIds);
+      if (orgError) {
+        console.error("[OrganisationProvider] Error loading organisations:", orgError);
+        throw orgError;
+      }
+      const roleMap = /* @__PURE__ */ new Map();
+      memberships?.forEach((membership) => {
+        roleMap.set(membership.organisation_id, membership.role);
+      });
+      const orgs = organisations2;
+      const activeOrgs = orgs.filter((org) => org.is_active);
+      if (activeOrgs.length === 0) {
+        throw new Error("User has no access to active organisations");
+      }
+      DebugLogger.log("OrganisationProvider", "Active organisations:", activeOrgs);
+      setOrganisations(activeOrgs);
+      setUserMemberships(memberships);
+      setRoleMapState(roleMap);
+      let initialOrg = null;
+      try {
+        const persistedOrgString = localStorage.getItem(STORAGE_KEYS.SELECTED_ORGANISATION);
+        if (persistedOrgString) {
+          const persistedOrg = JSON.parse(persistedOrgString);
+          const validPersistedOrg = activeOrgs.find((org) => org.id === persistedOrg.id);
+          if (validPersistedOrg) {
+            initialOrg = validPersistedOrg;
+            DebugLogger.log("OrganisationProvider", "Restored persisted organisation:", initialOrg.display_name);
+          }
+        }
+      } catch (storageError) {
+        console.warn("[OrganisationProvider] Failed to restore persisted organisation:", storageError);
+      }
+      if (!initialOrg) {
+        const adminMembership = memberships.find((m) => m.role === "org_admin");
+        if (adminMembership) {
+          const foundOrg = organisations2.find((org) => org.id === adminMembership.organisation_id);
+          if (foundOrg) {
+            initialOrg = foundOrg;
+            DebugLogger.log("OrganisationProvider", "Selected org_admin organisation:", initialOrg.display_name);
+          }
+        }
+      }
+      if (!initialOrg) {
+        initialOrg = activeOrgs[0];
+        DebugLogger.log("OrganisationProvider", "Selected first organisation:", initialOrg.display_name);
+      }
+      if (!initialOrg) {
+        throw new Error("No valid organisation found for user");
+      }
+      setSelectedOrganisation(initialOrg);
+      localStorage.setItem(STORAGE_KEYS.SELECTED_ORGANISATION, JSON.stringify(initialOrg));
+      DebugLogger.log("OrganisationProvider", "Organisation context established:", {
+        selectedOrganisation: initialOrg.display_name,
+        totalOrganisations: activeOrgs.length,
+        userRole: roleMap.get(initialOrg.id)
+      });
+    } catch (err) {
+      console.error("[OrganisationProvider] Failed to load organisations:", err);
+      setError(err);
+      setSelectedOrganisation(null);
+      setOrganisations([]);
+      setUserMemberships([]);
+      localStorage.removeItem(STORAGE_KEYS.SELECTED_ORGANISATION);
+    } finally {
+      setIsLoading(false);
+    }
+  }, [user, session, supabase]);
+  useEffect(() => {
+    loadUserOrganisations();
+  }, [loadUserOrganisations]);
+  const handleLogoutAndRedirect = useCallback(async () => {
+    try {
+      await signOut();
+      if (navigate) {
+        navigate("/login", { replace: true });
+      } else {
+        window.location.href = "/login";
+      }
+    } catch (error2) {
+      console.error("[OrganisationProvider] Error during logout:", error2);
+      if (navigate) {
+        navigate("/login", { replace: true });
+      } else {
+        window.location.href = "/login";
+      }
+    }
+  }, [signOut, navigate]);
+  const ensureOrganisationContext = useCallback(() => {
+    if (!selectedOrganisation) {
+      throw new Error("Organisation context is required but not available");
+    }
+    return selectedOrganisation;
+  }, [selectedOrganisation]);
+  const getUserRole = useCallback((orgId) => {
+    const targetOrgId = orgId || selectedOrganisation?.id;
+    if (!targetOrgId) return "no_access";
+    return roleMapState.get(targetOrgId) || "no_access";
+  }, [roleMapState, selectedOrganisation]);
+  const validateOrganisationAccess = useCallback((orgId) => {
+    return userMemberships.some(
+      (m) => m.organisation_id === orgId && m.status === "active" && m.revoked_at === null
+    );
+  }, [userMemberships]);
+  const switchOrganisation = useCallback(async (orgId) => {
+    DebugLogger.log("OrganisationProvider", "Switching to organisation:", orgId);
+    if (!validateOrganisationAccess(orgId)) {
+      throw new Error(`User does not have access to organisation ${orgId}`);
+    }
+    const targetOrg = organisations.find((org) => org.id === orgId);
+    if (!targetOrg) {
+      throw new Error(`Organisation ${orgId} not found in user's organisations`);
+    }
+    setSelectedOrganisation(targetOrg);
+    localStorage.setItem(STORAGE_KEYS.SELECTED_ORGANISATION, JSON.stringify(targetOrg));
+    await setDatabaseOrganisationContext(targetOrg);
+    DebugLogger.log("OrganisationProvider", "Switched to organisation:", targetOrg.display_name);
+  }, [organisations, validateOrganisationAccess, setDatabaseOrganisationContext]);
+  const refreshOrganisations = useCallback(async () => {
+    if (!user || !session || !supabase) return;
+    setIsLoading(true);
+  }, [user, session, supabase]);
+  const getPrimaryOrganisation = useCallback(() => {
+    const rolePriority = ["org_admin", "leader", "member"];
+    for (const role of rolePriority) {
+      const membership = userMemberships.find((m) => m.role === role);
+      if (membership) {
+        return organisations.find((org) => org.id === membership.organisation_id) || null;
+      }
+    }
+    return null;
+  }, [userMemberships, organisations]);
+  const isOrganisationSecure = useCallback(() => {
+    return !!(selectedOrganisation && user);
+  }, [selectedOrganisation, user]);
+  const buildOrganisationHierarchy = useCallback((orgs) => {
+    const orgMap = /* @__PURE__ */ new Map();
+    orgs.forEach((org) => orgMap.set(org.id, org));
+    const roots = [];
+    orgs.forEach((org) => {
+      if (!org.parent_id) {
+        roots.push({
+          organisation: org,
+          children: [],
+          depth: 0
+        });
+      }
+    });
+    return roots;
+  }, []);
+  const hasValidOrganisationContext = useMemo(() => {
+    return !!(selectedOrganisation && !isLoading && !error && isContextReady);
+  }, [selectedOrganisation, isLoading, error, isContextReady]);
+  const contextValue = useMemo(() => {
+    if (!selectedOrganisation) {
+      const placeholderOrg = {
+        id: "",
+        name: "",
+        display_name: "",
+        subscription_tier: "standard",
+        settings: {},
+        is_active: false,
+        created_at: "",
+        updated_at: ""
+      };
+      return {
+        selectedOrganisation: placeholderOrg,
+        organisations: [],
+        userMemberships: [],
+        isLoading,
+        error,
+        hasValidOrganisationContext: false,
+        setSelectedOrganisation: () => {
+        },
+        switchOrganisation: async () => {
+        },
+        getUserRole: () => "no_access",
+        validateOrganisationAccess: () => false,
+        refreshOrganisations: async () => {
+        },
+        ensureOrganisationContext: () => {
+          throw new Error("No organisation context");
+        },
+        isOrganisationSecure: () => false,
+        getPrimaryOrganisation: () => null
+      };
+    }
+    return {
+      selectedOrganisation,
+      organisations,
+      userMemberships,
+      isLoading,
+      error,
+      hasValidOrganisationContext,
+      setSelectedOrganisation,
+      switchOrganisation,
+      getUserRole,
+      validateOrganisationAccess,
+      refreshOrganisations,
+      ensureOrganisationContext,
+      isOrganisationSecure,
+      getPrimaryOrganisation
+    };
+  }, [
+    selectedOrganisation,
+    organisations,
+    userMemberships,
+    isLoading,
+    error,
+    hasValidOrganisationContext,
+    switchOrganisation,
+    getUserRole,
+    validateOrganisationAccess,
+    refreshOrganisations,
+    ensureOrganisationContext,
+    isOrganisationSecure,
+    getPrimaryOrganisation
+  ]);
+  if (isLoading || selectedOrganisation && !isContextReady) {
+    return /* @__PURE__ */ jsx("div", { className: "organisation-loading", role: "status", "aria-label": "Loading organisation context", children: /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center min-h-screen", children: /* @__PURE__ */ jsxs("div", { className: "text-center", children: [
+      /* @__PURE__ */ jsx("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-primary mx-auto mb-4" }),
+      /* @__PURE__ */ jsx("p", { className: "text-muted-foreground", children: isLoading ? "Loading organisation context..." : "Setting up organisation context..." })
+    ] }) }) });
+  }
+  if (error || user && !selectedOrganisation) {
+    return /* @__PURE__ */ jsx("div", { className: "organisation-error", role: "alert", children: /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center min-h-screen", children: /* @__PURE__ */ jsxs("div", { className: "text-center max-w-md mx-auto p-6", children: [
+      /* @__PURE__ */ jsx("div", { className: "text-destructive mb-4", children: /* @__PURE__ */ jsx("svg", { className: "h-12 w-12 mx-auto", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", children: /* @__PURE__ */ jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", strokeWidth: 2, d: "M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.732-.833-2.464 0L4.35 16.5c-.77.833.192 2.5 1.732 2.5z" }) }) }),
+      /* @__PURE__ */ jsx("h2", { className: "text-xl font-semibold text-foreground mb-2", children: "Organisation Access Required" }),
+      /* @__PURE__ */ jsx("p", { className: "text-muted-foreground mb-4", children: error?.message || "No valid organisation context available. Please contact your administrator to be added to an organisation." }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          onClick: handleLogoutAndRedirect,
+          className: "px-4 py-2 bg-primary text-primary-foreground rounded-md hover:bg-primary/90",
+          children: "Sign Out"
+        }
+      )
+    ] }) }) });
+  }
+  return /* @__PURE__ */ jsx(OrganisationContext.Provider, { value: contextValue, children });
+}
+var OrganisationContext, STORAGE_KEYS, useOrganisations;
+var init_OrganisationProvider = __esm({
+  "src/providers/OrganisationProvider.tsx"() {
+    "use strict";
+    init_UnifiedAuthProvider();
+    init_organisationContext();
+    init_debugLogger();
+    OrganisationContext = createContext(void 0);
+    STORAGE_KEYS = {
+      SELECTED_ORGANISATION: "pace-core-selected-organisation",
+      ORGANISATION_CONTEXT: "pace-core-organisation-context"
+    };
+    useOrganisations = () => {
+      const context = useContext(OrganisationContext);
+      if (!context) {
+        throw new Error("useOrganisations must be used within an OrganisationProvider");
+      }
+      return context;
+    };
+  }
+});
+
+export {
+  OrganisationProvider,
+  useOrganisations,
+  OrganisationProvider_exports,
+  init_OrganisationProvider
+};
+//# sourceMappingURL=chunk-COBPIXXQ.js.map

package/dist/chunk-COBPIXXQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/providers/OrganisationProvider.tsx"],"sourcesContent":["/**\n * @file Organisation Provider\n * @package @jmruthers/pace-core\n * @module Providers/Organisation\n * @since 0.4.0\n *\n * Security-first organisation provider that enforces mandatory organisation context.\n * No data operations can proceed without valid organisation context.\n * \n * Features:\n * - Mandatory organisation selection for all operations\n * - User organisation membership validation\n * - Role-based access within organisations\n * - Secure organisation switching\n * - Hierarchy support for parent/child organisations\n * - Error handling for security violations\n * - Persistent organisation selection\n *\n * @example\n * ```tsx\n * // Basic setup - organisation context is mandatory\n * import { UnifiedAuthProvider, OrganisationProvider } from '@jmruthers/pace-core';\n * \n * function App() {\n *   return (\n *     <UnifiedAuthProvider supabaseClient={supabase} appName=\"MY_APP\">\n *       <OrganisationProvider>\n *         <YourAppContent />\n *       </OrganisationProvider>\n *     </UnifiedAuthProvider>\n *   );\n * }\n * \n * // Using in components\n * function MyComponent() {\n *   const { \n *     selectedOrganisation, \n *     getUserRole, \n *     switchOrganisation \n *   } = useOrganisations();\n *   \n *   // selectedOrganisation is guaranteed to be non-null when this renders\n *   return (\n *     <div>\n *       <h1>{selectedOrganisation.display_name}</h1>\n *       <p>Your role: {getUserRole()}</p>\n *     </div>\n *   );\n * }\n * ```\n *\n * @security\n * - All data access requires valid organisation context\n * - User membership validation on organisation load\n * - Role-based access control within organisations\n * - Secure organisation switching with validation\n * - Error states for security violations\n * - No fallback to default organisation - explicit selection required\n *\n * @dependencies\n * - React 18+ - Context, hooks, and effects\n * - UnifiedAuthProvider - Authentication context\n * - Supabase - Database operations\n * - Organisation types - Type definitions\n */\n\nimport React, { createContext, useContext, useState, useEffect, useCallback, useMemo } from 'react';\nimport { useNavigate } from 'react-router-dom';\nimport { useUnifiedAuth } from './UnifiedAuthProvider';\nimport { setOrganisationContext } from '../utils/organisationContext';\nimport { DebugLogger } from '../utils/debugLogger';\nimport type {\n  Organisation,\n  OrganisationMembership,\n  OrganisationContextType,\n  OrganisationProviderProps,\n  OrganisationSecurityError,\n  OrganisationHierarchy\n} from '../types/organisation';\n\n// Create the context\nconst OrganisationContext = createContext<OrganisationContextType | undefined>(undefined);\n\n// Storage keys for persistence\nconst STORAGE_KEYS = {\n  SELECTED_ORGANISATION: 'pace-core-selected-organisation',\n  ORGANISATION_CONTEXT: 'pace-core-organisation-context',\n} as const;\n\n/**\n * Organisation Provider component that enforces mandatory organisation context\n * \n * This provider:\n * - Loads user's organisation memberships on authentication\n * - Validates user has at least one active organisation\n * - Auto-selects primary organisation or first available\n * - Provides security helpers for organisation validation\n * - Handles organisation switching with validation\n * - Persists organisation selection across sessions\n * \n * SECURITY: No children are rendered without valid organisation context\n */\nexport function OrganisationProvider({ children }: OrganisationProviderProps) {\n  const [selectedOrganisation, setSelectedOrganisation] = useState<Organisation | null>(null);\n  const [organisations, setOrganisations] = useState<Organisation[]>([]);\n  const [userMemberships, setUserMemberships] = useState<OrganisationMembership[]>([]);\n  const [roleMapState, setRoleMapState] = useState<Map<string, string>>(new Map());\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n  const [isContextReady, setIsContextReady] = useState(false);\n  \n  const { user, session, supabase, signOut } = useUnifiedAuth();\n  \n  // Use navigate hook conditionally to avoid test failures\n  let navigate: any = null;\n  try {\n    navigate = useNavigate();\n  } catch (error) {\n    // In test environment or when no router context, navigate will be null\n    navigate = null;\n  }\n\n  // Set organisation context in database session\n  const setDatabaseOrganisationContext = useCallback(async (organisation: Organisation): Promise<void> => {\n    if (!supabase || !session) {\n      console.warn('[OrganisationProvider] No Supabase client or session available for setting organisation context');\n      setIsContextReady(false);\n      return;\n    }\n\n    try {\n      await setOrganisationContext(supabase, organisation.id);\n      DebugLogger.log('OrganisationProvider', 'Database organisation context set to:', organisation.display_name);\n      setIsContextReady(true);\n    } catch (error) {\n      console.error('[OrganisationProvider] Failed to set database organisation context:', error);\n      setIsContextReady(false);\n      // Don't throw - this is a non-critical operation\n    }\n  }, [supabase, session]);\n\n  // CRITICAL: Set database organisation context when organisation changes\n  useEffect(() => {\n    if (selectedOrganisation && supabase && session) {\n      // Reset context ready state when organisation changes\n      setIsContextReady(false);\n      \n      // Use an async IIFE to properly handle the async operation\n      (async () => {\n        await setDatabaseOrganisationContext(selectedOrganisation);\n      })();\n    } else {\n      setIsContextReady(false);\n    }\n  }, [selectedOrganisation, setDatabaseOrganisationContext, supabase, session]);\n\n  // CRITICAL: Load user organisations and validate access\n  const loadUserOrganisations = useCallback(async () => {\n    if (!user || !session || !supabase) {\n      // Clear state when no user, session, or supabase client\n      DebugLogger.log('OrganisationProvider', 'Clearing organisation state - no user, session, or supabase client');\n      setSelectedOrganisation(null);\n      setOrganisations([]);\n      setUserMemberships([]);\n      setIsLoading(false);\n      setError(null);\n      return;\n    }\n      setIsLoading(true);\n      setError(null);\n      \n      try {\n        DebugLogger.log(\"OrganisationProvider\", \"Loading organisations for user:\", user.id);\n        \n        // Get user's organisation memberships from consolidated rbac_organisation_roles table\n        // Only get actual members (org_admin, leader, member) - exclude supporters\n        let memberships, membershipError;\n        try {\n          const result = await supabase\n            .from('rbac_organisation_roles')\n            .select(`\n              id,\n              user_id,\n              organisation_id,\n              role,\n              status,\n              granted_at,\n              granted_by,\n              revoked_at,\n              revoked_by,\n              notes,\n              created_at,\n              updated_at\n            `)\n            .eq('user_id', user.id)\n            .eq('status', 'active')\n            .is('revoked_at', null)\n            .in('role', ['org_admin', 'leader', 'member']); // Only actual members, not supporters\n          \n          memberships = result.data;\n          membershipError = result.error;\n        } catch (queryError: any) {\n          membershipError = queryError;\n        }\n\n        if (membershipError) {\n          console.error(\"[OrganisationProvider] Error loading memberships:\", membershipError);\n          throw membershipError;\n        }\n        \n        DebugLogger.log(\"OrganisationProvider\", \"Raw memberships data:\", memberships);\n        \n        if (!memberships || memberships.length === 0) {\n          throw new Error('User has no active organisation memberships') as OrganisationSecurityError;\n        }\n\n        // Get organisation details for the memberships\n        const organisationIds = memberships.map((m: any) => m.organisation_id);\n        const { data: organisations, error: orgError } = await supabase\n          .from('organisations')\n          .select('id, name, display_name, subscription_tier, settings, is_active, parent_id, created_at, updated_at')\n          .in('id', organisationIds);\n\n        if (orgError) {\n          console.error(\"[OrganisationProvider] Error loading organisations:\", orgError);\n          throw orgError;\n        }\n\n        // Create a map of organisation_id to role from the memberships data\n        // Since we're now getting roles directly from the consolidated table\n        const roleMap = new Map<string, string>();\n        memberships?.forEach((membership: any) => {\n          roleMap.set(membership.organisation_id, membership.role);\n        });\n\n        // Extract organisations and memberships\n        const orgs = organisations as Organisation[];\n        const activeOrgs = orgs.filter(org => org.is_active);\n        \n        if (activeOrgs.length === 0) {\n          throw new Error('User has no access to active organisations') as OrganisationSecurityError;\n        }\n\n        DebugLogger.log(\"OrganisationProvider\", \"Active organisations:\", activeOrgs);\n        \n        setOrganisations(activeOrgs);\n        setUserMemberships(memberships as OrganisationMembership[]);\n        \n        // Store role map in component state for later use\n        setRoleMapState(roleMap);\n        \n        // Auto-select organisation: try persisted, then primary, then first\n        let initialOrg: Organisation | null = null;\n        \n        // 1. Try to restore from localStorage\n        try {\n          const persistedOrgString = localStorage.getItem(STORAGE_KEYS.SELECTED_ORGANISATION);\n          if (persistedOrgString) {\n            const persistedOrg = JSON.parse(persistedOrgString) as Organisation;\n            const validPersistedOrg = activeOrgs.find(org => org.id === persistedOrg.id);\n            if (validPersistedOrg) {\n              initialOrg = validPersistedOrg;\n              DebugLogger.log(\"OrganisationProvider\", \"Restored persisted organisation:\", initialOrg.display_name);\n            }\n          }\n        } catch (storageError) {\n          console.warn(\"[OrganisationProvider] Failed to restore persisted organisation:\", storageError);\n        }\n        \n        // 2. Fall back to org_admin role organisation (highest privilege)\n        if (!initialOrg) {\n          const adminMembership = memberships.find((m: any) => m.role === 'org_admin');\n          if (adminMembership) {\n            const foundOrg = organisations.find((org: any) => org.id === adminMembership.organisation_id);\n            if (foundOrg) {\n              initialOrg = foundOrg;\n              DebugLogger.log(\"OrganisationProvider\", \"Selected org_admin organisation:\", initialOrg.display_name);\n            }\n          }\n        }\n        \n        // 3. Fall back to first organisation\n        if (!initialOrg) {\n          initialOrg = activeOrgs[0];\n          DebugLogger.log(\"OrganisationProvider\", \"Selected first organisation:\", initialOrg.display_name);\n        }\n        \n        if (!initialOrg) {\n          throw new Error('No valid organisation found for user') as OrganisationSecurityError;\n        }\n\n        setSelectedOrganisation(initialOrg);\n        \n        // Persist selection\n        localStorage.setItem(STORAGE_KEYS.SELECTED_ORGANISATION, JSON.stringify(initialOrg));\n        \n        DebugLogger.log(\"OrganisationProvider\", \"Organisation context established:\", {\n          selectedOrganisation: initialOrg.display_name,\n          totalOrganisations: activeOrgs.length,\n          userRole: roleMap.get(initialOrg.id)\n        });\n        \n      } catch (err) {\n        console.error(\"[OrganisationProvider] Failed to load organisations:\", err);\n        setError(err as Error);\n        // SECURITY: Clear all state on error\n        setSelectedOrganisation(null);\n        setOrganisations([]);\n        setUserMemberships([]);\n        localStorage.removeItem(STORAGE_KEYS.SELECTED_ORGANISATION);\n      } finally {\n        setIsLoading(false);\n      }\n  }, [user, session, supabase]);\n\n  // Load organisations when dependencies change\n  useEffect(() => {\n    loadUserOrganisations();\n  }, [loadUserOrganisations]);\n\n  // Handle logout and redirect to login\n  const handleLogoutAndRedirect = useCallback(async () => {\n    try {\n      await signOut();\n      if (navigate) {\n        navigate('/login', { replace: true });\n      } else {\n        // Fallback to window.location if navigate is not available\n        window.location.href = '/login';\n      }\n    } catch (error) {\n      console.error('[OrganisationProvider] Error during logout:', error);\n      // Even if logout fails, redirect to login\n      if (navigate) {\n        navigate('/login', { replace: true });\n      } else {\n        // Fallback to window.location if navigate is not available\n        window.location.href = '/login';\n      }\n    }\n  }, [signOut, navigate]);\n\n  // Security validation helper\n  const ensureOrganisationContext = useCallback((): Organisation => {\n    if (!selectedOrganisation) {\n      throw new Error('Organisation context is required but not available') as OrganisationSecurityError;\n    }\n    return selectedOrganisation;\n  }, [selectedOrganisation]);\n\n  // Get user's role in specified organisation (defaults to current)\n  const getUserRole = useCallback((orgId?: string): string => {\n    const targetOrgId = orgId || selectedOrganisation?.id;\n    if (!targetOrgId) return 'no_access';\n    \n    // Use roleMapState to get the role for this organisation\n    return roleMapState.get(targetOrgId) || 'no_access';\n  }, [roleMapState, selectedOrganisation]);\n\n  // Validate user has access to organisation\n  const validateOrganisationAccess = useCallback((orgId: string): boolean => {\n    return userMemberships.some((m: any) => \n      m.organisation_id === orgId && \n      m.status === 'active' &&\n      m.revoked_at === null\n    );\n  }, [userMemberships]);\n\n  // Secure organisation switching\n  const switchOrganisation = useCallback(async (orgId: string): Promise<void> => {\n    DebugLogger.log(\"OrganisationProvider\", \"Switching to organisation:\", orgId);\n    \n    // Validate access\n    if (!validateOrganisationAccess(orgId)) {\n      throw new Error(`User does not have access to organisation ${orgId}`) as OrganisationSecurityError;\n    }\n    \n    const targetOrg = organisations.find(org => org.id === orgId);\n    if (!targetOrg) {\n      throw new Error(`Organisation ${orgId} not found in user's organisations`) as OrganisationSecurityError;\n    }\n    \n    setSelectedOrganisation(targetOrg);\n    \n    // Persist selection\n    localStorage.setItem(STORAGE_KEYS.SELECTED_ORGANISATION, JSON.stringify(targetOrg));\n    \n    // Set database organisation context\n    await setDatabaseOrganisationContext(targetOrg);\n    \n    DebugLogger.log(\"OrganisationProvider\", \"Switched to organisation:\", targetOrg.display_name);\n  }, [organisations, validateOrganisationAccess, setDatabaseOrganisationContext]);\n\n  // Refresh organisations data\n  const refreshOrganisations = useCallback(async (): Promise<void> => {\n    if (!user || !session || !supabase) return;\n    \n    // Force reload by triggering the effect\n    setIsLoading(true);\n    // The useEffect will handle the actual reload\n  }, [user, session, supabase]);\n\n  // Get primary organisation (highest privilege role)\n  const getPrimaryOrganisation = useCallback((): Organisation | null => {\n    // Look for org_admin role first, then leader, then member\n    const rolePriority = ['org_admin', 'leader', 'member'];\n    \n    for (const role of rolePriority) {\n      const membership = userMemberships.find((m: any) => m.role === role);\n      if (membership) {\n        return organisations.find((org: any) => org.id === membership.organisation_id) || null;\n      }\n    }\n    \n    return null;\n  }, [userMemberships, organisations]);\n\n  // Security status\n  const isOrganisationSecure = useCallback((): boolean => {\n    return !!(selectedOrganisation && user);\n  }, [selectedOrganisation, user]);\n\n  // Build organisation hierarchy (for future use)\n  const buildOrganisationHierarchy = useCallback((orgs: Organisation[]): OrganisationHierarchy[] => {\n    const orgMap = new Map<string, Organisation>();\n    orgs.forEach(org => orgMap.set(org.id, org));\n    \n    const roots: OrganisationHierarchy[] = [];\n    \n    orgs.forEach(org => {\n      if (!org.parent_id) {\n        // Root organisation\n        roots.push({\n          organisation: org,\n          children: [],\n          depth: 0\n        });\n      }\n    });\n    \n    // For now, return flat structure - hierarchy building can be added later\n    return roots;\n  }, []);\n\n  // Computed values\n  const hasValidOrganisationContext = useMemo(() => {\n    return !!(selectedOrganisation && !isLoading && !error && isContextReady);\n  }, [selectedOrganisation, isLoading, error, isContextReady]);\n\n  // Memoized context value\n  const contextValue = useMemo<OrganisationContextType>(() => {\n    // SECURITY: Only provide full context if we have valid organisation\n    if (!selectedOrganisation) {\n      // This will never be accessed due to the render guards above,\n      // but TypeScript requires the interface to be satisfied\n      const placeholderOrg: Organisation = {\n        id: '',\n        name: '',\n        display_name: '',\n        subscription_tier: 'standard',\n        settings: {},\n        is_active: false,\n        created_at: '',\n        updated_at: ''\n      };\n      \n      return {\n        selectedOrganisation: placeholderOrg,\n        organisations: [],\n        userMemberships: [],\n        isLoading,\n        error,\n        hasValidOrganisationContext: false,\n        setSelectedOrganisation: () => {},\n        switchOrganisation: async () => {},\n        getUserRole: () => 'no_access',\n        validateOrganisationAccess: () => false,\n        refreshOrganisations: async () => {},\n        ensureOrganisationContext: () => { throw new Error('No organisation context') as OrganisationSecurityError; },\n        isOrganisationSecure: () => false,\n        getPrimaryOrganisation: () => null\n      };\n    }\n\n    return {\n      selectedOrganisation,\n      organisations,\n      userMemberships,\n      isLoading,\n      error,\n      hasValidOrganisationContext,\n      setSelectedOrganisation,\n      switchOrganisation,\n      getUserRole,\n      validateOrganisationAccess,\n      refreshOrganisations,\n      ensureOrganisationContext,\n      isOrganisationSecure,\n      getPrimaryOrganisation\n    };\n  }, [\n    selectedOrganisation,\n    organisations,\n    userMemberships,\n    isLoading,\n    error,\n    hasValidOrganisationContext,\n    switchOrganisation,\n    getUserRole,\n    validateOrganisationAccess,\n    refreshOrganisations,\n    ensureOrganisationContext,\n    isOrganisationSecure,\n    getPrimaryOrganisation\n  ]);\n\n  // SECURITY: Only render children when we have valid organisation context\n  if (isLoading || (selectedOrganisation && !isContextReady)) {\n    return (\n      <div className=\"organisation-loading\" role=\"status\" aria-label=\"Loading organisation context\">\n        <div className=\"flex items-center justify-center min-h-screen\">\n          <div className=\"text-center\">\n            <div className=\"animate-spin rounded-full h-8 w-8 border-b-2 border-primary mx-auto mb-4\"></div>\n            <p className=\"text-muted-foreground\">\n              {isLoading ? 'Loading organisation context...' : 'Setting up organisation context...'}\n            </p>\n          </div>\n        </div>\n      </div>\n    );\n  }\n\n  if (error || (user && !selectedOrganisation)) {\n    return (\n      <div className=\"organisation-error\" role=\"alert\">\n        <div className=\"flex items-center justify-center min-h-screen\">\n          <div className=\"text-center max-w-md mx-auto p-6\">\n            <div className=\"text-destructive mb-4\">\n              <svg className=\"h-12 w-12 mx-auto\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\">\n                <path strokeLinecap=\"round\" strokeLinejoin=\"round\" strokeWidth={2} d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.732-.833-2.464 0L4.35 16.5c-.77.833.192 2.5 1.732 2.5z\" />\n              </svg>\n            </div>\n            <h2 className=\"text-xl font-semibold text-foreground mb-2\">\n              Organisation Access Required\n            </h2>\n            <p className=\"text-muted-foreground mb-4\">\n              {error?.message || 'No valid organisation context available. Please contact your administrator to be added to an organisation.'}\n            </p>\n            <button \n              onClick={handleLogoutAndRedirect}\n              className=\"px-4 py-2 bg-primary text-primary-foreground rounded-md hover:bg-primary/90\"\n            >\n              Sign Out\n            </button>\n          </div>\n        </div>\n      </div>\n    );\n  }\n\n  return (\n    <OrganisationContext.Provider value={contextValue}>\n      {children}\n    </OrganisationContext.Provider>\n  );\n}\n\n/**\n * Hook to access organisation context\n * \n * @returns Organisation context with guaranteed non-null selectedOrganisation\n * @throws {Error} If used outside OrganisationProvider\n */\nexport const useOrganisations = (): OrganisationContextType => {\n  const context = useContext(OrganisationContext);\n  if (!context) {\n    throw new Error('useOrganisations must be used within an OrganisationProvider');\n  }\n  return context;\n};\n\n// Re-export types for convenience\nexport type { \n  Organisation, \n  OrganisationMembership, \n  OrganisationContextType,\n  OrganisationSecurityError\n}; "],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAkEA,SAAgB,eAAe,YAAY,UAAU,WAAW,aAAa,eAAe;AAC5F,SAAS,mBAAmB;AAsclB,SACE,KADF;AAnaH,SAAS,qBAAqB,EAAE,SAAS,GAA8B;AAC5E,QAAM,CAAC,sBAAsB,uBAAuB,IAAI,SAA8B,IAAI;AAC1F,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAyB,CAAC,CAAC;AACrE,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,SAAmC,CAAC,CAAC;AACnF,QAAM,CAAC,cAAc,eAAe,IAAI,SAA8B,oBAAI,IAAI,CAAC;AAC/E,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AACrD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,SAAS,KAAK;AAE1D,QAAM,EAAE,MAAM,SAAS,UAAU,QAAQ,IAAI,eAAe;AAG5D,MAAI,WAAgB;AACpB,MAAI;AACF,eAAW,YAAY;AAAA,EACzB,SAASA,QAAO;AAEd,eAAW;AAAA,EACb;AAGA,QAAM,iCAAiC,YAAY,OAAO,iBAA8C;AACtG,QAAI,CAAC,YAAY,CAAC,SAAS;AACzB,cAAQ,KAAK,iGAAiG;AAC9G,wBAAkB,KAAK;AACvB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,uBAAuB,UAAU,aAAa,EAAE;AACtD,kBAAY,IAAI,wBAAwB,yCAAyC,aAAa,YAAY;AAC1G,wBAAkB,IAAI;AAAA,IACxB,SAASA,QAAO;AACd,cAAQ,MAAM,uEAAuEA,MAAK;AAC1F,wBAAkB,KAAK;AAAA,IAEzB;AAAA,EACF,GAAG,CAAC,UAAU,OAAO,CAAC;AAGtB,YAAU,MAAM;AACd,QAAI,wBAAwB,YAAY,SAAS;AAE/C,wBAAkB,KAAK;AAGvB,OAAC,YAAY;AACX,cAAM,+BAA+B,oBAAoB;AAAA,MAC3D,GAAG;AAAA,IACL,OAAO;AACL,wBAAkB,KAAK;AAAA,IACzB;AAAA,EACF,GAAG,CAAC,sBAAsB,gCAAgC,UAAU,OAAO,CAAC;AAG5E,QAAM,wBAAwB,YAAY,YAAY;AACpD,QAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU;AAElC,kBAAY,IAAI,wBAAwB,oEAAoE;AAC5G,8BAAwB,IAAI;AAC5B,uBAAiB,CAAC,CAAC;AACnB,yBAAmB,CAAC,CAAC;AACrB,mBAAa,KAAK;AAClB,eAAS,IAAI;AACb;AAAA,IACF;AACE,iBAAa,IAAI;AACjB,aAAS,IAAI;AAEb,QAAI;AACF,kBAAY,IAAI,wBAAwB,mCAAmC,KAAK,EAAE;AAIlF,UAAI,aAAa;AACjB,UAAI;AACF,cAAM,SAAS,MAAM,SAClB,KAAK,yBAAyB,EAC9B,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAaP,EACA,GAAG,WAAW,KAAK,EAAE,EACrB,GAAG,UAAU,QAAQ,EACrB,GAAG,cAAc,IAAI,EACrB,GAAG,QAAQ,CAAC,aAAa,UAAU,QAAQ,CAAC;AAE/C,sBAAc,OAAO;AACrB,0BAAkB,OAAO;AAAA,MAC3B,SAAS,YAAiB;AACxB,0BAAkB;AAAA,MACpB;AAEA,UAAI,iBAAiB;AACnB,gBAAQ,MAAM,qDAAqD,eAAe;AAClF,cAAM;AAAA,MACR;AAEA,kBAAY,IAAI,wBAAwB,yBAAyB,WAAW;AAE5E,UAAI,CAAC,eAAe,YAAY,WAAW,GAAG;AAC5C,cAAM,IAAI,MAAM,6CAA6C;AAAA,MAC/D;AAGA,YAAM,kBAAkB,YAAY,IAAI,CAAC,MAAW,EAAE,eAAe;AACrE,YAAM,EAAE,MAAMC,gBAAe,OAAO,SAAS,IAAI,MAAM,SACpD,KAAK,eAAe,EACpB,OAAO,mGAAmG,EAC1G,GAAG,MAAM,eAAe;AAE3B,UAAI,UAAU;AACZ,gBAAQ,MAAM,uDAAuD,QAAQ;AAC7E,cAAM;AAAA,MACR;AAIA,YAAM,UAAU,oBAAI,IAAoB;AACxC,mBAAa,QAAQ,CAAC,eAAoB;AACxC,gBAAQ,IAAI,WAAW,iBAAiB,WAAW,IAAI;AAAA,MACzD,CAAC;AAGD,YAAM,OAAOA;AACb,YAAM,aAAa,KAAK,OAAO,SAAO,IAAI,SAAS;AAEnD,UAAI,WAAW,WAAW,GAAG;AAC3B,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AAEA,kBAAY,IAAI,wBAAwB,yBAAyB,UAAU;AAE3E,uBAAiB,UAAU;AAC3B,yBAAmB,WAAuC;AAG1D,sBAAgB,OAAO;AAGvB,UAAI,aAAkC;AAGtC,UAAI;AACF,cAAM,qBAAqB,aAAa,QAAQ,aAAa,qBAAqB;AAClF,YAAI,oBAAoB;AACtB,gBAAM,eAAe,KAAK,MAAM,kBAAkB;AAClD,gBAAM,oBAAoB,WAAW,KAAK,SAAO,IAAI,OAAO,aAAa,EAAE;AAC3E,cAAI,mBAAmB;AACrB,yBAAa;AACb,wBAAY,IAAI,wBAAwB,oCAAoC,WAAW,YAAY;AAAA,UACrG;AAAA,QACF;AAAA,MACF,SAAS,cAAc;AACrB,gBAAQ,KAAK,oEAAoE,YAAY;AAAA,MAC/F;AAGA,UAAI,CAAC,YAAY;AACf,cAAM,kBAAkB,YAAY,KAAK,CAAC,MAAW,EAAE,SAAS,WAAW;AAC3E,YAAI,iBAAiB;AACnB,gBAAM,WAAWA,eAAc,KAAK,CAAC,QAAa,IAAI,OAAO,gBAAgB,eAAe;AAC5F,cAAI,UAAU;AACZ,yBAAa;AACb,wBAAY,IAAI,wBAAwB,oCAAoC,WAAW,YAAY;AAAA,UACrG;AAAA,QACF;AAAA,MACF;AAGA,UAAI,CAAC,YAAY;AACf,qBAAa,WAAW,CAAC;AACzB,oBAAY,IAAI,wBAAwB,gCAAgC,WAAW,YAAY;AAAA,MACjG;AAEA,UAAI,CAAC,YAAY;AACf,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AAEA,8BAAwB,UAAU;AAGlC,mBAAa,QAAQ,aAAa,uBAAuB,KAAK,UAAU,UAAU,CAAC;AAEnF,kBAAY,IAAI,wBAAwB,qCAAqC;AAAA,QAC3E,sBAAsB,WAAW;AAAA,QACjC,oBAAoB,WAAW;AAAA,QAC/B,UAAU,QAAQ,IAAI,WAAW,EAAE;AAAA,MACrC,CAAC;AAAA,IAEH,SAAS,KAAK;AACZ,cAAQ,MAAM,wDAAwD,GAAG;AACzE,eAAS,GAAY;AAErB,8BAAwB,IAAI;AAC5B,uBAAiB,CAAC,CAAC;AACnB,yBAAmB,CAAC,CAAC;AACrB,mBAAa,WAAW,aAAa,qBAAqB;AAAA,IAC5D,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACJ,GAAG,CAAC,MAAM,SAAS,QAAQ,CAAC;AAG5B,YAAU,MAAM;AACd,0BAAsB;AAAA,EACxB,GAAG,CAAC,qBAAqB,CAAC;AAG1B,QAAM,0BAA0B,YAAY,YAAY;AACtD,QAAI;AACF,YAAM,QAAQ;AACd,UAAI,UAAU;AACZ,iBAAS,UAAU,EAAE,SAAS,KAAK,CAAC;AAAA,MACtC,OAAO;AAEL,eAAO,SAAS,OAAO;AAAA,MACzB;AAAA,IACF,SAASD,QAAO;AACd,cAAQ,MAAM,+CAA+CA,MAAK;AAElE,UAAI,UAAU;AACZ,iBAAS,UAAU,EAAE,SAAS,KAAK,CAAC;AAAA,MACtC,OAAO;AAEL,eAAO,SAAS,OAAO;AAAA,MACzB;AAAA,IACF;AAAA,EACF,GAAG,CAAC,SAAS,QAAQ,CAAC;AAGtB,QAAM,4BAA4B,YAAY,MAAoB;AAChE,QAAI,CAAC,sBAAsB;AACzB,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACtE;AACA,WAAO;AAAA,EACT,GAAG,CAAC,oBAAoB,CAAC;AAGzB,QAAM,cAAc,YAAY,CAAC,UAA2B;AAC1D,UAAM,cAAc,SAAS,sBAAsB;AACnD,QAAI,CAAC,YAAa,QAAO;AAGzB,WAAO,aAAa,IAAI,WAAW,KAAK;AAAA,EAC1C,GAAG,CAAC,cAAc,oBAAoB,CAAC;AAGvC,QAAM,6BAA6B,YAAY,CAAC,UAA2B;AACzE,WAAO,gBAAgB;AAAA,MAAK,CAAC,MAC3B,EAAE,oBAAoB,SACtB,EAAE,WAAW,YACb,EAAE,eAAe;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,eAAe,CAAC;AAGpB,QAAM,qBAAqB,YAAY,OAAO,UAAiC;AAC7E,gBAAY,IAAI,wBAAwB,8BAA8B,KAAK;AAG3E,QAAI,CAAC,2BAA2B,KAAK,GAAG;AACtC,YAAM,IAAI,MAAM,6CAA6C,KAAK,EAAE;AAAA,IACtE;AAEA,UAAM,YAAY,cAAc,KAAK,SAAO,IAAI,OAAO,KAAK;AAC5D,QAAI,CAAC,WAAW;AACd,YAAM,IAAI,MAAM,gBAAgB,KAAK,oCAAoC;AAAA,IAC3E;AAEA,4BAAwB,SAAS;AAGjC,iBAAa,QAAQ,aAAa,uBAAuB,KAAK,UAAU,SAAS,CAAC;AAGlF,UAAM,+BAA+B,SAAS;AAE9C,gBAAY,IAAI,wBAAwB,6BAA6B,UAAU,YAAY;AAAA,EAC7F,GAAG,CAAC,eAAe,4BAA4B,8BAA8B,CAAC;AAG9E,QAAM,uBAAuB,YAAY,YAA2B;AAClE,QAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAU;AAGpC,iBAAa,IAAI;AAAA,EAEnB,GAAG,CAAC,MAAM,SAAS,QAAQ,CAAC;AAG5B,QAAM,yBAAyB,YAAY,MAA2B;AAEpE,UAAM,eAAe,CAAC,aAAa,UAAU,QAAQ;AAErD,eAAW,QAAQ,cAAc;AAC/B,YAAM,aAAa,gBAAgB,KAAK,CAAC,MAAW,EAAE,SAAS,IAAI;AACnE,UAAI,YAAY;AACd,eAAO,cAAc,KAAK,CAAC,QAAa,IAAI,OAAO,WAAW,eAAe,KAAK;AAAA,MACpF;AAAA,IACF;AAEA,WAAO;AAAA,EACT,GAAG,CAAC,iBAAiB,aAAa,CAAC;AAGnC,QAAM,uBAAuB,YAAY,MAAe;AACtD,WAAO,CAAC,EAAE,wBAAwB;AAAA,EACpC,GAAG,CAAC,sBAAsB,IAAI,CAAC;AAG/B,QAAM,6BAA6B,YAAY,CAAC,SAAkD;AAChG,UAAM,SAAS,oBAAI,IAA0B;AAC7C,SAAK,QAAQ,SAAO,OAAO,IAAI,IAAI,IAAI,GAAG,CAAC;AAE3C,UAAM,QAAiC,CAAC;AAExC,SAAK,QAAQ,SAAO;AAClB,UAAI,CAAC,IAAI,WAAW;AAElB,cAAM,KAAK;AAAA,UACT,cAAc;AAAA,UACd,UAAU,CAAC;AAAA,UACX,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,WAAO;AAAA,EACT,GAAG,CAAC,CAAC;AAGL,QAAM,8BAA8B,QAAQ,MAAM;AAChD,WAAO,CAAC,EAAE,wBAAwB,CAAC,aAAa,CAAC,SAAS;AAAA,EAC5D,GAAG,CAAC,sBAAsB,WAAW,OAAO,cAAc,CAAC;AAG3D,QAAM,eAAe,QAAiC,MAAM;AAE1D,QAAI,CAAC,sBAAsB;AAGzB,YAAM,iBAA+B;AAAA,QACnC,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,UAAU,CAAC;AAAA,QACX,WAAW;AAAA,QACX,YAAY;AAAA,QACZ,YAAY;AAAA,MACd;AAEA,aAAO;AAAA,QACL,sBAAsB;AAAA,QACtB,eAAe,CAAC;AAAA,QAChB,iBAAiB,CAAC;AAAA,QAClB;AAAA,QACA;AAAA,QACA,6BAA6B;AAAA,QAC7B,yBAAyB,MAAM;AAAA,QAAC;AAAA,QAChC,oBAAoB,YAAY;AAAA,QAAC;AAAA,QACjC,aAAa,MAAM;AAAA,QACnB,4BAA4B,MAAM;AAAA,QAClC,sBAAsB,YAAY;AAAA,QAAC;AAAA,QACnC,2BAA2B,MAAM;AAAE,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAAgC;AAAA,QAC5G,sBAAsB,MAAM;AAAA,QAC5B,wBAAwB,MAAM;AAAA,MAChC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,GAAG;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAGD,MAAI,aAAc,wBAAwB,CAAC,gBAAiB;AAC1D,WACE,oBAAC,SAAI,WAAU,wBAAuB,MAAK,UAAS,cAAW,gCAC7D,8BAAC,SAAI,WAAU,iDACb,+BAAC,SAAI,WAAU,eACb;AAAA,0BAAC,SAAI,WAAU,4EAA2E;AAAA,MAC1F,oBAAC,OAAE,WAAU,yBACV,sBAAY,oCAAoC,sCACnD;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAU,QAAQ,CAAC,sBAAuB;AAC5C,WACE,oBAAC,SAAI,WAAU,sBAAqB,MAAK,SACvC,8BAAC,SAAI,WAAU,iDACb,+BAAC,SAAI,WAAU,oCACb;AAAA,0BAAC,SAAI,WAAU,yBACb,8BAAC,SAAI,WAAU,qBAAoB,MAAK,QAAO,SAAQ,aAAY,QAAO,gBACxE,8BAAC,UAAK,eAAc,SAAQ,gBAAe,SAAQ,aAAa,GAAG,GAAE,4IAA2I,GAClN,GACF;AAAA,MACA,oBAAC,QAAG,WAAU,8CAA6C,0CAE3D;AAAA,MACA,oBAAC,OAAE,WAAU,8BACV,iBAAO,WAAW,8GACrB;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,WAAU;AAAA,UACX;AAAA;AAAA,MAED;AAAA,OACF,GACF,GACF;AAAA,EAEJ;AAEA,SACE,oBAAC,oBAAoB,UAApB,EAA6B,OAAO,cAClC,UACH;AAEJ;AArjBA,IAiFM,qBAGA,cAyeO;AA7jBb;AAAA;AAAA;AAoEA;AACA;AACA;AAWA,IAAM,sBAAsB,cAAmD,MAAS;AAGxF,IAAM,eAAe;AAAA,MACnB,uBAAuB;AAAA,MACvB,sBAAsB;AAAA,IACxB;AAseO,IAAM,mBAAmB,MAA+B;AAC7D,YAAM,UAAU,WAAW,mBAAmB;AAC9C,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,8DAA8D;AAAA,MAChF;AACA,aAAO;AAAA,IACT;AAAA;AAAA;","names":["error","organisations"]}