@jmruthers/pace-core 0.5.109 → 0.5.111

package/docs/api/modules.md

@@ -1,6 +1,6 @@
-[@jmruthers/pace-core - v0.5.109](README.md) / Exports
+[@jmruthers/pace-core - v0.5.111](README.md) / Exports
 
-# @jmruthers/pace-core - v0.5.109
+# @jmruthers/pace-core - v0.5.111
 
 **`File`**
 
@@ -499,7 +499,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/config.ts:13](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L13)
+[packages/core/src/rbac/config.ts:14](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L14)
 
 ___
 
@@ -641,7 +641,7 @@ You can create additional instances if needed for different contexts.
 
 #### Defined in
 
-[packages/core/src/rbac/cache.ts:236](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/cache.ts#L236)
+[packages/core/src/rbac/cache.ts:256](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/cache.ts#L256)
 
 ___
 
@@ -663,7 +663,7 @@ Cache key patterns for invalidation
 
 #### Defined in
 
-[packages/core/src/rbac/cache.ts:241](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/cache.ts#L241)
+[packages/core/src/rbac/cache.ts:261](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/cache.ts#L261)
 
 ___
 
@@ -2436,7 +2436,7 @@ function AdminApp() {
 
 #### Defined in
 
-[packages/core/src/components/PaceAppLayout/PaceAppLayout.tsx:324](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/components/PaceAppLayout/PaceAppLayout.tsx#L324)
+[packages/core/src/components/PaceAppLayout/PaceAppLayout.tsx:327](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/components/PaceAppLayout/PaceAppLayout.tsx#L327)
 
 ___
 
@@ -2480,7 +2480,7 @@ JSX.Element - The rendered login page with enhanced functionality
 
 #### Defined in
 
-[packages/core/src/components/PaceLoginPage/PaceLoginPage.tsx:165](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/components/PaceLoginPage/PaceLoginPage.tsx#L165)
+[packages/core/src/components/PaceLoginPage/PaceLoginPage.tsx:166](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/components/PaceLoginPage/PaceLoginPage.tsx#L166)
 
 ___
 
@@ -4529,7 +4529,7 @@ Can auto-infer userId from context if not provided.
 <PermissionGuard
   userId="user-123"
   scope={{ organisationId: 'org-456' }}
-  permission="manage:events"
+  permission="update:events"
   pageId="page-789"
   fallback={<AccessDenied />}
 >
@@ -4538,7 +4538,7 @@ Can auto-infer userId from context if not provided.
 
 // With context inference (requires auth context)
 <PermissionGuard
-  permission="manage:events"
+  permission="update:events"
   scope={{ organisationId: 'org-456' }}
   fallback={<AccessDenied />}
 >
@@ -4654,7 +4654,7 @@ Wrapped handler function
 
 ```typescript
 const protectedHandler = withPermissionGuard(
-  { permission: 'manage:events', pageId: 'page-789' },
+  { permission: 'update:events', pageId: 'page-789' },
   async (req, res) => {
     // Handler logic here
     res.json({ success: true });
@@ -4841,7 +4841,7 @@ import { createRBACMiddleware } from '@jmruthers/pace-core/rbac';
 
 export default createRBACMiddleware({
   protectedRoutes: [
-    { path: '/admin', permission: 'manage:admin' },
+    { path: '/admin', permission: 'update:admin' },
     { path: '/events', permission: 'read:events' },
   ],
   fallbackUrl: '/access-denied',
@@ -4992,7 +4992,7 @@ Setup RBAC system
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:38](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L38)
+[packages/core/src/rbac/api.ts:39](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L39)
 
 ___
 
@@ -5027,7 +5027,7 @@ const accessLevel = await getAccessLevel({
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:88](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L88)
+[packages/core/src/rbac/api.ts:90](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L90)
 
 ___
 
@@ -5066,7 +5066,7 @@ const permissions = await getPermissionMap({
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:114](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L114)
+[packages/core/src/rbac/api.ts:116](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L116)
 
 ___
 
@@ -5088,7 +5088,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:122](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L122)
+[packages/core/src/rbac/api.ts:124](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L124)
 
 ___
 
@@ -5110,7 +5110,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:130](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L130)
+[packages/core/src/rbac/api.ts:132](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L132)
 
 ___
 
@@ -5138,14 +5138,14 @@ Promise resolving to permission result
 const canManage = await isPermitted({
   userId: 'user-123',
   scope: { organisationId: 'org-456' },
-  permission: 'manage:events',
+  permission: 'update:events',
   pageId: 'page-789'
 });
 ```
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:154](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L154)
+[packages/core/src/rbac/api.ts:156](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L156)
 
 ___
 
@@ -5169,7 +5169,7 @@ Promise resolving to permission result
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:175](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L175)
+[packages/core/src/rbac/api.ts:182](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L182)
 
 ___
 
@@ -5193,7 +5193,7 @@ Promise<boolean> - True if user has permission
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:208](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L208)
+[packages/core/src/rbac/api.ts:215](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L215)
 
 ___
 
@@ -5221,7 +5221,7 @@ Promise resolving to true if user has any permission
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:218](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L218)
+[packages/core/src/rbac/api.ts:225](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L225)
 
 ___
 
@@ -5249,7 +5249,7 @@ Promise resolving to true if user has all permissions
 
 #### Defined in
 
-[packages/core/src/rbac/api.ts:246](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L246)
+[packages/core/src/rbac/api.ts:253](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/api.ts#L253)
 
 ___
 
@@ -5273,7 +5273,7 @@ RBACAuditManager instance
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:321](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L321)
+[packages/core/src/rbac/audit.ts:330](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L330)
 
 ___
 
@@ -5295,7 +5295,7 @@ Set the global audit manager
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:337](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L337)
+[packages/core/src/rbac/audit.ts:346](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L346)
 
 ___
 
@@ -5313,7 +5313,7 @@ Global audit manager or null if not set
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:346](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L346)
+[packages/core/src/rbac/audit.ts:355](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L355)
 
 ___
 
@@ -5335,7 +5335,7 @@ Emit an audit event using the global audit manager
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:355](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L355)
+[packages/core/src/rbac/audit.ts:364](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L364)
 
 ___
 
@@ -5467,7 +5467,7 @@ React element with permission enforcement
 
 #### Defined in
 
-[packages/core/src/rbac/components/PagePermissionGuard.tsx:550](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/PagePermissionGuard.tsx#L550)
+[packages/core/src/rbac/components/PagePermissionGuard.tsx:534](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/PagePermissionGuard.tsx#L534)
 
 ___
 
@@ -5571,7 +5571,7 @@ React element with role-based routing
 
 #### Defined in
 
-[packages/core/src/rbac/components/RoleBasedRouter.tsx:178](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/RoleBasedRouter.tsx#L178)
+[packages/core/src/rbac/components/RoleBasedRouter.tsx:181](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/RoleBasedRouter.tsx#L181)
 
 ___
 
@@ -5593,7 +5593,7 @@ Error if used outside of RoleBasedRouter
 
 #### Defined in
 
-[packages/core/src/rbac/components/RoleBasedRouter.tsx:388](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/RoleBasedRouter.tsx#L388)
+[packages/core/src/rbac/components/RoleBasedRouter.tsx:395](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/RoleBasedRouter.tsx#L395)
 
 ___
 
@@ -5662,7 +5662,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/config.ts:110](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L110)
+[packages/core/src/rbac/config.ts:112](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L112)
 
 ___
 
@@ -5676,7 +5676,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/config.ts:115](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L115)
+[packages/core/src/rbac/config.ts:117](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L117)
 
 ___
 
@@ -5690,7 +5690,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/config.ts:119](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L119)
+[packages/core/src/rbac/config.ts:121](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L121)
 
 ___
 
@@ -5704,7 +5704,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/config.ts:123](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L123)
+[packages/core/src/rbac/config.ts:125](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L125)
 
 ___
 
@@ -5718,13 +5718,13 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/config.ts:127](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L127)
+[packages/core/src/rbac/config.ts:129](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/config.ts#L129)
 
 ___
 
 ### createRBACEngine
 
-▸ **createRBACEngine**(`supabase`): [`RBACEngine`](classes/RBACEngine.md)
+▸ **createRBACEngine**(`supabase`, `securityConfig?`): [`RBACEngine`](classes/RBACEngine.md)
 
 Create an RBAC engine instance
 
@@ -5733,6 +5733,7 @@ Create an RBAC engine instance
 | Name | Type | Description |
 | :------ | :------ | :------ |
 | `supabase` | `default`\<`Database`, ``"public"``, ``"public"``, `never`, {}\> | Supabase client |
+| `securityConfig?` | `Partial`\<`RBACSecurityConfig`\> | Optional security configuration |
 
 #### Returns
 
@@ -5742,7 +5743,7 @@ RBACEngine instance
 
 #### Defined in
 
-[packages/core/src/rbac/engine.ts:594](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/engine.ts#L594)
+[packages/core/src/rbac/engine.ts:611](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/engine.ts#L611)
 
 ___
 
@@ -5843,7 +5844,7 @@ function MyComponent() {
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/usePermissions.ts:185](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L185)
+[packages/core/src/rbac/hooks/usePermissions.ts:201](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L201)
 
 ___
 
@@ -5893,7 +5894,7 @@ function MyComponent() {
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/usePermissions.ts:335](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L335)
+[packages/core/src/rbac/hooks/usePermissions.ts:359](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L359)
 
 ___
 
@@ -5950,7 +5951,7 @@ function MyComponent() {
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/usePermissions.ts:410](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L410)
+[packages/core/src/rbac/hooks/usePermissions.ts:434](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L434)
 
 ___
 
@@ -6001,7 +6002,7 @@ function MyComponent() {
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/usePermissions.ts:493](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L493)
+[packages/core/src/rbac/hooks/usePermissions.ts:517](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L517)
 
 ___
 
@@ -6052,7 +6053,7 @@ function MyComponent() {
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/usePermissions.ts:579](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L579)
+[packages/core/src/rbac/hooks/usePermissions.ts:603](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L603)
 
 ___
 
@@ -6103,7 +6104,7 @@ function MyComponent() {
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/usePermissions.ts:664](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L664)
+[packages/core/src/rbac/hooks/usePermissions.ts:688](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/usePermissions.ts#L688)
 
 ___
 
@@ -6123,7 +6124,7 @@ ___
 
 #### Defined in
 
-[packages/core/src/rbac/hooks/useRBAC.ts:53](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRBAC.ts#L53)
+[packages/core/src/rbac/hooks/useRBAC.ts:51](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRBAC.ts#L51)
 
 ___
 

package/docs/api-reference/hooks.md

@@ -512,13 +512,17 @@ function Dropdown() {
 You can compose multiple hooks to create custom functionality:
 
 ```tsx
+import { useCan } from '@jmruthers/pace-core/rbac';
+
 function useUserDashboard() {
-  const { user, loading: authLoading } = useUnifiedAuth();
+  const { user, loading: authLoading, selectedOrganisationId } = useUnifiedAuth();
   const { events, selectedEvent } = useEvents();
-  const { hasPermission } = useRBAC();
+  const { can: canUpdateEvents } = useCan(
+    user?.id || '',
+    { organisationId: selectedOrganisationId || '', eventId: selectedEvent?.event_id, appId: undefined },
+    'update:events'
+  );
   const { showToast } = useToast();
-
-  const canManageEvents = hasPermission('manage:events');
   const userEvents = events.filter(event => 
     event.organiserId === user?.id
   );

package/docs/architecture/rpc-function-standards.md

@@ -607,7 +607,8 @@ SELECT * FROM data_user_events_get(NULL, 'user-id', 'org-123');
 3. **Add comments**: Document purpose, parameters, returns
 4. **Add grants**: `GRANT EXECUTE ON FUNCTION ... TO authenticated;`
 5. **Add tests**: Include test queries in migration
-6. **Update types**: Add function name to TypeScript types
+6. **Regenerate types**: Run `npm run generate-types` to automatically generate TypeScript types from the database schema
+7. **Verify types**: Check that `Database['public']['Functions']['function_name']` exists in `packages/core/src/types/database.generated.ts`
 
 ### Updating Existing Functions
 
@@ -615,6 +616,7 @@ SELECT * FROM data_user_events_get(NULL, 'user-id', 'org-123');
 2. **Preserve backward compatibility** - Add new parameters with defaults
 3. **Version changes** - Update function name if breaking changes (e.g., `_v2`)
 4. **Document changes** - Add comments explaining changes
+5. **Regenerate types**: Run `npm run generate-types` after function changes to update TypeScript types
 
 ### Deprecating Functions
 

package/docs/best-practices/common-patterns.md

@@ -169,13 +169,13 @@ function AdminDashboard() {
     organisationId 
   });
 
-  const canManage = permissions.includes('manage:users') || 
-                   permissions.includes('manage:settings');
+  const canUpdate = permissions.includes('update:users') || 
+                   permissions.includes('update:settings');
 
   return (
     <div>
       {isLoading && <div>Loading...</div>}
-      {canManage && <AdminPanel />}
+      {canUpdate && <AdminPanel />}
     </div>
   );
 }

package/docs/best-practices/deployment.md

@@ -186,18 +186,24 @@ const AdminDashboard = lazy(() => import('./AdminDashboard'));
 const UserDashboard = lazy(() => import('./UserDashboard'));
 const Analytics = lazy(() => import('./Analytics'));
 
+import { useCan } from '@jmruthers/pace-core/rbac';
+
 function App() {
-  const { user } = useUnifiedAuth();
-  const { hasPermission } = useRBAC();
+  const { user, selectedOrganisationId } = useUnifiedAuth();
+  const { can: canViewAdmin } = useCan(
+    user?.id || '',
+    { organisationId: selectedOrganisationId || '', eventId: undefined, appId: undefined },
+    'read:page.admin'
+  );
 
   return (
     <Suspense fallback={<LoadingSpinner />}>
-      {user?.role === 'admin' ? (
+      {canViewAdmin ? (
         <AdminDashboard />
       ) : (
         <UserDashboard />
       )}
-      {hasPermission('analytics:view') && (
+      {canViewAdmin && (
         <Suspense fallback={<div>Loading analytics...</div>}>
           <Analytics />
         </Suspense>

package/docs/best-practices/performance.md

@@ -345,16 +345,24 @@ function App() {
 ### 3. Component Lazy Loading
 
 ```typescript
+import { useCan } from '@jmruthers/pace-core/rbac';
+import { useUnifiedAuth } from '@jmruthers/pace-core/providers';
+
 // Lazy load components based on user permissions
 function ConditionalComponent({ permission, children }) {
-  const { hasPermission } = useRBAC();
+  const { user, selectedOrganisationId } = useUnifiedAuth();
+  const { can, isLoading } = useCan(
+    user?.id || '',
+    { organisationId: selectedOrganisationId || '', eventId: undefined, appId: undefined },
+    permission
+  );
   const [shouldLoad, setShouldLoad] = useState(false);
 
   useEffect(() => {
-    if (hasPermission(permission)) {
+    if (!isLoading && can) {
       setShouldLoad(true);
     }
-  }, [hasPermission, permission]);
+  }, [can, isLoading]);
 
   if (!shouldLoad) return null;
 

package/docs/core-concepts/organisations.md

@@ -404,23 +404,23 @@ const ORGANISATION_ROLES = {
 ```typescript
 const ROLE_PERMISSIONS = {
   owner: [
-    'manage:organisation',
+    'update:organisation',
     'delete:organisation',
-    'manage:members',
-    'manage:settings',
-    'manage:content',
+    'update:members',
+    'update:settings',
+    'update:content',
     'view:analytics',
   ],
   
   admin: [
-    'manage:members',
-    'manage:settings',
-    'manage:content',
+    'update:members',
+    'update:settings',
+    'update:content',
     'view:analytics',
   ],
   
   manager: [
-    'manage:content',
+    'update:content',
     'view:analytics',
   ],