@jmruthers/pace-core 0.5.109 → 0.5.110

package/CHANGELOG.md

@@ -7,6 +7,28 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.110] - 2025-01-27
+
+### Added
+- **Automatic Page Permission Checking in NavigationMenu**: Navigation items with `href` but no explicit permissions/roles/accessLevel now automatically check for `read:page.{pageId}` permission, making navigation filtering more intuitive
+- **RBAC Security Configuration Support**: `RBACEngine` and `createRBACEngine` now accept an optional `securityConfig` parameter, allowing customization of rate limits and security settings per instance
+
+### Changed
+- **RBAC Rate Limit Increase**: Increased default `maxPermissionChecksPerMinute` from 100 to 1000 to accommodate normal application usage patterns
+- **NavigationMenu Filtering Improvements**: Enhanced recursive filtering of navigation items with proper parent/child handling - parents without accessible children are now properly hidden
+- **RBAC Documentation Updates**: Improved RBAC documentation with better examples, troubleshooting guides, and API references
+- **PagePermissionGuard Scope Handling**: Replaced ref-based scope tracking with `useMemo` for better React compatibility and performance, with improved handling of undefined `appId` values
+
+### Fixed
+- **PagePermissionGuard Infinite Loop Prevention**: Fixed potential infinite loops by improving scope stability and ensuring `useCan` only runs with valid scopes
+- **PagePermissionGuard Error Logging**: Enhanced error logging with more context (permission strings, page IDs, scope validation status)
+- **NavigationMenu Test Mocks**: Updated test mocks to default to permissive permissions (super admin access) for better test isolation and clearer test intent
+- **RBAC API Test Assertions**: Fixed test assertions to correctly match `createRBACEngine` function signature with optional parameters
+
+### Removed
+- **pace-core-devtools Package**: Removed the entire `pace-core-devtools` package and all related devtools functionality (AuditInspector, PerformanceMonitor, PermissionDebugger, RoleSimulator, etc.)
+- **Outdated RBAC Documentation**: Removed deprecated `breaking-changes-v3.md` and `migration-guide.md` files that are no longer relevant
+
 ## [0.5.109] - 2025-11-03
 
 ### Added

package/dist/{DataTable-5HITILXS.js → DataTable-D3BK2FCN.js}

@@ -54,9 +54,9 @@ import {
   sortHierarchicalDataWithSorting,
   validateHierarchicalData,
   validatePaginationConfig
-} from "./chunk-UW2DE6JX.js";
-import "./chunk-WWNOVFDC.js";
-import "./chunk-F6TSYCKP.js";
+} from "./chunk-HGZSO43Y.js";
+import "./chunk-HADXAZT3.js";
+import "./chunk-XRSP3H52.js";
 import "./chunk-Q7APDV6H.js";
 import {
   CircuitBreaker,
@@ -157,4 +157,4 @@ export {
   validateHierarchicalData,
   validatePaginationConfig
 };
-//# sourceMappingURL=DataTable-5HITILXS.js.map
+//# sourceMappingURL=DataTable-D3BK2FCN.js.map

package/dist/{api-5I3E47G2.js → api-PIE4JRFS.js}

@@ -19,7 +19,7 @@ import {
   isSuperAdmin,
   resolveAppContext,
   setupRBAC
-} from "./chunk-F6TSYCKP.js";
+} from "./chunk-XRSP3H52.js";
 import "./chunk-Q7APDV6H.js";
 import "./chunk-PLDDJCW6.js";
 export {
@@ -44,4 +44,4 @@ export {
   resolveAppContext,
   setupRBAC
 };
-//# sourceMappingURL=api-5I3E47G2.js.map
+//# sourceMappingURL=api-PIE4JRFS.js.map

package/dist/{chunk-P72NKAT5.js → chunk-3J5N2T2N.js}

@@ -25,16 +25,16 @@ import {
   SelectSeparator,
   SelectTrigger,
   SelectValue
-} from "./chunk-UW2DE6JX.js";
+} from "./chunk-HGZSO43Y.js";
 import {
   usePermissions,
   useRBAC,
   useResolvedScope
-} from "./chunk-WWNOVFDC.js";
+} from "./chunk-HADXAZT3.js";
 import {
   isPermitted,
   isSuperAdmin
-} from "./chunk-F6TSYCKP.js";
+} from "./chunk-XRSP3H52.js";
 import {
   OrganisationProvider_exports,
   PublicErrorBoundary,
@@ -929,8 +929,12 @@ var NavigationMenu = React9.forwardRef(({
     if (!filterByPermissions || !authContext || !rbacContext || scopeLoading || permissionsLoading || !resolvedScope?.organisationId) {
       return (items || []).filter((item) => !item.meta?.hidden);
     }
-    return (items || []).filter((item) => {
-      if (item.meta?.hidden) return false;
+    const getPageIdFromHref = (href) => {
+      if (!href) return null;
+      const path = href.split("?")[0].split("#")[0].replace(/^\//, "");
+      return path || "home";
+    };
+    const hasItemPermission = (item) => {
       if (item.permissions && item.permissions.length > 0) {
         const permissions = item.permissions.filter((p) => typeof p === "string").map((p) => p);
         if (permissions.length > 0) {
@@ -986,8 +990,43 @@ var NavigationMenu = React9.forwardRef(({
           }
         }
       }
+      if (item.href && !item.permissions && !item.roles && !item.accessLevel) {
+        const pageId = item.pageId || getPageIdFromHref(item.href);
+        if (pageId) {
+          const pagePermission = `read:page.${pageId}`;
+          const hasPagePermission = permissionMap["*"] === true || permissionMap[pagePermission] === true;
+          if (!hasPagePermission) {
+            if (auditLog) {
+              console.log(`[NavigationMenu] Filtering out navigation item "${item.label}" - no page permission:`, {
+                itemId: item.id,
+                href: item.href,
+                pageId,
+                permission: pagePermission,
+                hasPermission: hasPagePermission
+              });
+            }
+            return false;
+          }
+        }
+      }
       return true;
-    });
+    };
+    const filterItem = (item) => {
+      if (item.meta?.hidden) return null;
+      if (!hasItemPermission(item)) return null;
+      let filteredChildren;
+      if (item.children && item.children.length > 0) {
+        filteredChildren = item.children.map((child) => filterItem(child)).filter((child) => child !== null);
+        if (filteredChildren.length === 0 && !item.href) {
+          return null;
+        }
+      }
+      return {
+        ...item,
+        children: filteredChildren
+      };
+    };
+    return (items || []).map((item) => filterItem(item)).filter((item) => item !== null);
   }, [
     items,
     filterByPermissions,
@@ -997,7 +1036,8 @@ var NavigationMenu = React9.forwardRef(({
     hasAnyPermission,
     scopeLoading,
     permissionsLoading,
-    resolvedScope
+    resolvedScope,
+    auditLog
   ]);
   React9.useEffect(() => {
     if (auditLog && authContext) {
@@ -1379,7 +1419,7 @@ function PaceAppLayout({
         appId: user.user_metadata?.appId || user.app_metadata?.appId
       };
       try {
-        const { isSuperAdmin: isSuperAdmin2 } = await import("./api-5I3E47G2.js");
+        const { isSuperAdmin: isSuperAdmin2 } = await import("./api-PIE4JRFS.js");
         const isSuper = await isSuperAdmin2(user.id);
         if (isSuper) {
           return true;
@@ -1499,7 +1539,7 @@ function PaceAppLayout({
         appId: user.user_metadata?.appId || user.app_metadata?.appId
       };
       try {
-        const { isSuperAdmin: isSuperAdmin2 } = await import("./api-5I3E47G2.js");
+        const { isSuperAdmin: isSuperAdmin2 } = await import("./api-PIE4JRFS.js");
         const isSuper = await isSuperAdmin2(user.id);
         if (isSuper) {
           if (isMounted) {
@@ -1520,7 +1560,7 @@ function PaceAppLayout({
         return;
       }
       try {
-        const { getPermissionMap } = await import("./api-5I3E47G2.js");
+        const { getPermissionMap } = await import("./api-PIE4JRFS.js");
         const permissionMap = await getPermissionMap({
           userId: user.id,
           scope
@@ -4413,4 +4453,4 @@ export {
   PublicPageDiagnostic,
   PublicPageContextChecker
 };
-//# sourceMappingURL=chunk-P72NKAT5.js.map
+//# sourceMappingURL=chunk-3J5N2T2N.js.map