@jmruthers/pace-core 0.5.105 → 0.5.107

package/dist/{chunk-AZFPGDCJ.js → chunk-EWKCROSF.js}

@@ -25,7 +25,12 @@ import {
   SelectSeparator,
   SelectTrigger,
   SelectValue
-} from "./chunk-75G3NZWN.js";
+} from "./chunk-5JJCXTVE.js";
+import {
+  usePermissions,
+  useRBAC,
+  useResolvedScope
+} from "./chunk-QDDUU625.js";
 import {
   isPermitted,
   isSuperAdmin
@@ -44,10 +49,10 @@ import {
   useIsPublicPage,
   usePublicFileDisplay,
   usePublicPageContext
-} from "./chunk-HBGPLSA5.js";
+} from "./chunk-DMNMZKWS.js";
 import {
   useToast
-} from "./chunk-QPCAGLUS.js";
+} from "./chunk-4OX5PXHX.js";
 import {
   useEvents,
   useOrganisations
@@ -900,34 +905,100 @@ var NavigationMenu = React9.forwardRef(({
   } catch (error) {
     console.warn("[NavigationMenu] useUnifiedAuth not available, running in unauthenticated mode");
   }
+  let rbacContext = null;
+  try {
+    rbacContext = useRBAC();
+  } catch (error) {
+    console.warn("[NavigationMenu] useRBAC not available, permission filtering disabled");
+  }
+  const { supabase } = authContext || {};
+  const { selectedOrganisation } = authContext || {};
+  const selectedEvent = authContext?.selectedEvent || null;
+  const { resolvedScope, isLoading: scopeLoading } = useResolvedScope({
+    supabase: supabase || null,
+    selectedOrganisationId: selectedOrganisation?.id || null,
+    selectedEventId: selectedEvent?.event_id || null
+  });
+  const userId = authContext?.user?.id || "";
+  const scope = resolvedScope || { organisationId: "", eventId: void 0, appId: void 0 };
+  const { permissions: permissionMap, hasAnyPermission, isLoading: permissionsLoading } = usePermissions(
+    userId,
+    scope
+  );
   const filteredItems = React9.useMemo(() => {
-    if (!filterByPermissions || !authContext) return items || [];
+    if (!filterByPermissions || !authContext || !rbacContext || scopeLoading || permissionsLoading || !resolvedScope?.organisationId) {
+      return (items || []).filter((item) => !item.meta?.hidden);
+    }
     return (items || []).filter((item) => {
       if (item.meta?.hidden) return false;
       if (item.permissions && item.permissions.length > 0) {
-        const hasPermission = item.permissions.some((permission) => {
-          if (typeof permission !== "string") return true;
-          return false;
-        });
-        if (!hasPermission) return false;
+        const permissions = item.permissions.filter((p) => typeof p === "string").map((p) => p);
+        if (permissions.length > 0) {
+          const hasPermission = hasAnyPermission(permissions);
+          if (!hasPermission) return false;
+        }
       }
       if (item.roles && item.roles.length > 0) {
         const hasRole = item.roles.some((role) => {
           if (typeof role !== "string") return true;
-          return false;
+          switch (role.toLowerCase()) {
+            case "super_admin":
+            case "super admin":
+              return rbacContext.isSuperAdmin;
+            case "org_admin":
+            case "org admin":
+            case "admin":
+              return rbacContext.isOrgAdmin || rbacContext.isSuperAdmin;
+            case "event_admin":
+            case "event admin":
+              return rbacContext.isEventAdmin || rbacContext.isSuperAdmin;
+            default:
+              return rbacContext.organisationRole === role || rbacContext.eventAppRole === role || rbacContext.isSuperAdmin;
+          }
         });
         if (!hasRole) return false;
       }
       if (item.accessLevel) {
         if (typeof item.accessLevel === "string") {
-          const accessLevel = item.accessLevel;
-          const hasAccessLevel = false;
-          if (!hasAccessLevel) return false;
+          const accessLevel = item.accessLevel.toLowerCase();
+          const userEventRole = rbacContext.eventAppRole;
+          if (rbacContext.isSuperAdmin) {
+          } else {
+            const roleToAccessLevel = {
+              "viewer": "viewer",
+              "participant": "participant",
+              "planner": "planner",
+              "event_admin": "admin"
+            };
+            const userAccessLevel = userEventRole ? roleToAccessLevel[userEventRole] || "viewer" : null;
+            const levelHierarchy = {
+              viewer: 1,
+              participant: 2,
+              planner: 3,
+              admin: 4,
+              super: 5
+            };
+            const requiredLevel = levelHierarchy[accessLevel] || 0;
+            const userLevel = userAccessLevel ? levelHierarchy[userAccessLevel] || 0 : 0;
+            if (userLevel < requiredLevel) {
+              return false;
+            }
+          }
         }
       }
       return true;
     });
-  }, [items, filterByPermissions, authContext]);
+  }, [
+    items,
+    filterByPermissions,
+    authContext,
+    rbacContext,
+    permissionMap,
+    hasAnyPermission,
+    scopeLoading,
+    permissionsLoading,
+    resolvedScope
+  ]);
   React9.useEffect(() => {
     if (auditLog && authContext) {
       console.log("[NavigationMenu] Navigation access attempt:", {
@@ -991,17 +1062,30 @@ var NavigationMenu = React9.forwardRef(({
     }
     const isItemVisible = filteredItems.some((filtered) => filtered.id === item.id);
     let hasPermission = true;
-    if (item.permissions && item.permissions.length > 0) {
-      hasPermission = item.permissions.some((permission) => {
-        if (typeof permission !== "string") return true;
-        return false;
-      });
+    if (item.permissions && item.permissions.length > 0 && rbacContext && hasAnyPermission) {
+      const permissions = item.permissions.filter((p) => typeof p === "string").map((p) => p);
+      if (permissions.length > 0) {
+        hasPermission = hasAnyPermission(permissions);
+      }
     }
-    if (!hasPermission) {
+    if (!hasPermission && rbacContext) {
       if (item.roles && item.roles.length > 0) {
         hasPermission = item.roles.some((role) => {
           if (typeof role !== "string") return true;
-          return false;
+          switch (role.toLowerCase()) {
+            case "super_admin":
+            case "super admin":
+              return rbacContext.isSuperAdmin;
+            case "org_admin":
+            case "org admin":
+            case "admin":
+              return rbacContext.isOrgAdmin || rbacContext.isSuperAdmin;
+            case "event_admin":
+            case "event admin":
+              return rbacContext.isEventAdmin || rbacContext.isSuperAdmin;
+            default:
+              return rbacContext.organisationRole === role || rbacContext.eventAppRole === role || rbacContext.isSuperAdmin;
+          }
         });
       }
     }
@@ -3138,17 +3222,16 @@ function FileDisplayContent({
     const baseClasses = "flex items-center justify-center bg-sec-100 text-sec-600 font-semibold rounded";
     return `${baseClasses} ${sizeClass} ${className}`.trim();
   }, [fallbackSize, className]);
-  useEffect8(() => {
-    setInternalFileUrls(new Map(fileUrls));
-  }, [fileUrls]);
   useEffect8(() => {
     const currentIds = fileReferences.map((f) => f.id).join(",");
     const prevIds = fileReferencesRef.current.map((f) => f.id).join(",");
     if (currentIds !== prevIds) {
       fileReferencesRef.current = fileReferences;
-      setInternalFileUrls(/* @__PURE__ */ new Map());
+      setInternalFileUrls(new Map(fileUrls));
+    } else {
+      setInternalFileUrls(new Map(fileUrls));
     }
-  }, [fileReferences]);
+  }, [fileReferences, fileUrls]);
   const handleDeleteClick = () => {
     setDeleteDialogOpen(true);
   };
@@ -3191,6 +3274,28 @@ function FileDisplayContent({
     const i = Math.floor(Math.log(bytes) / Math.log(k));
     return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + " " + sizes[i];
   };
+  if (error) {
+    if (ErrorComponent) {
+      return /* @__PURE__ */ jsx22(ErrorComponent, { error, retry: clearError });
+    }
+    if (showFallback) {
+      return /* @__PURE__ */ jsx22("div", { className: fallbackClasses, title: "File unavailable", children: computedFallbackText });
+    }
+    return /* @__PURE__ */ jsxs18("div", { className: `p-4 bg-acc-50 border border-acc-200 rounded-lg ${className}`, children: [
+      /* @__PURE__ */ jsxs18("div", { className: "text-acc-600", children: [
+        "Error loading file: ",
+        error instanceof Error ? error.message : String(error)
+      ] }),
+      clearError && /* @__PURE__ */ jsx22(
+        "button",
+        {
+          onClick: clearError,
+          className: "mt-2 text-sm text-acc-700 hover:text-acc-800 underline",
+          children: "Try again"
+        }
+      )
+    ] });
+  }
   if (fileCount === 0 && !isLoading) {
     if (showFallback) {
       return /* @__PURE__ */ jsxs18("div", { className: fallbackClasses, title: "No file", children: [
@@ -3215,28 +3320,6 @@ function FileDisplayContent({
     }
     return /* @__PURE__ */ jsx22("div", { className: `flex items-center justify-center p-4 ${className}`, children: /* @__PURE__ */ jsx22("div", { className: "animate-spin rounded-full h-8 w-8 border-b-2 border-main-500" }) });
   }
-  if (error) {
-    if (ErrorComponent) {
-      return /* @__PURE__ */ jsx22(ErrorComponent, { error, retry: clearError });
-    }
-    if (showFallback) {
-      return /* @__PURE__ */ jsx22("div", { className: fallbackClasses, title: "File unavailable", children: computedFallbackText });
-    }
-    return /* @__PURE__ */ jsxs18("div", { className: `p-4 bg-acc-50 border border-acc-200 rounded-lg ${className}`, children: [
-      /* @__PURE__ */ jsxs18("div", { className: "text-acc-600", children: [
-        "Error loading file: ",
-        error instanceof Error ? error.message : String(error)
-      ] }),
-      clearError && /* @__PURE__ */ jsx22(
-        "button",
-        {
-          onClick: clearError,
-          className: "mt-2 text-sm text-acc-700 hover:text-acc-800 underline",
-          children: "Try again"
-        }
-      )
-    ] });
-  }
   if ((category || displayOnly) && fileReference) {
     const isImage = fileReference.file_metadata.fileType?.startsWith("image/");
     if (displayOnly && isImage && !showDelete) {
@@ -3547,6 +3630,7 @@ function FileDisplayAuthenticated({
       className,
       children,
       onDelete: showDelete ? handleDelete : void 0,
+      clearError: refetch,
       organisation_id,
       loadingComponent,
       errorComponent,
@@ -4273,4 +4357,4 @@ export {
   PublicPageDiagnostic,
   PublicPageContextChecker
 };
-//# sourceMappingURL=chunk-AZFPGDCJ.js.map
+//# sourceMappingURL=chunk-EWKCROSF.js.map