@jmruthers/pace-core 0.5.115 → 0.5.117

package/dist/validation.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/validation/sanitization.ts","../src/validation/csrf.ts","../src/validation/sqlInjectionProtection.ts","../src/validation/passwordSchema.ts"],"sourcesContent":["\n/**\n * @file Input sanitization and validation schemas\n * @description Enhanced validation schemas with security features\n */\n\nimport { z } from 'zod';\n\n/**\n * Enhanced email schema with security checks\n */\nexport const secureEmailSchema = z\n  .string()\n  .min(1, 'Email is required')\n  .email('Invalid email format')\n  .max(254, 'Email too long')\n  .refine(\n    (email) => {\n      if (!email || typeof email !== 'string') return false;\n      // Basic domain validation\n      const domain = email.split('@')[1];\n      return domain && domain.includes('.') && domain.length > 3;\n    },\n    'Invalid email domain'\n  )\n  .transform((email) => sanitizeEmail(email));\n\n/**\n * Basic email schema for common use\n */\nexport const emailSchema = z\n  .string()\n  .min(1, 'Email is required')\n  .email('Invalid email format');\n\n/**\n * Name validation schema\n */\nexport const nameSchema = z\n  .string()\n  .min(1, 'Name is required')\n  .max(100, 'Name too long')\n  .regex(/^[a-zA-Z\\s'-]+$/, 'Name contains invalid characters');\n\n/**\n * Phone validation schema\n */\nexport const phoneSchema = z\n  .string()\n  .regex(/^[\\+]?[1-9][\\d]{0,15}$/, 'Invalid phone number format');\n\n/**\n * URL validation schema\n */\nexport const urlSchema = z\n  .string()\n  .url('Invalid URL format');\n\n/**\n * Date validation schema\n */\nexport const dateSchema = z\n  .string()\n  .regex(/^\\d{4}-\\d{2}-\\d{2}$/, 'Invalid date format (YYYY-MM-DD)');\n\n/**\n * Secure login schema\n */\nexport const secureLoginSchema = z.object({\n  email: secureEmailSchema,\n  password: z.string().min(1, 'Password is required'),\n});\n\n/**\n * Sanitize email input\n */\nexport function sanitizeEmail(email: string): string {\n  if (!email || typeof email !== 'string') {\n    return '';\n  }\n  return email.toLowerCase().trim();\n}\n\n/**\n * Sanitize string input\n */\nexport function sanitizeString(input: string): string {\n  if (!input || typeof input !== 'string') {\n    return '';\n  }\n  return input\n    .replace(/[<>]/g, '') // Remove angle brackets\n    .replace(/javascript:/gi, '') // Remove javascript: protocol\n    .replace(/on\\w+=/gi, '') // Remove event handlers\n    .trim();\n}\n","/**\n * @file CSRF Protection Implementation\n * @description Session-based CSRF token management with security enhancements\n */\n\nimport { secureStorage } from '../utils/secureStorage';\n\nexport interface CSRFTokenData {\n  token: string;\n  sessionId: string;\n  timestamp: number;\n  used: boolean;\n}\n\nclass CSRFManager {\n  private tokenCache = new Map<string, CSRFTokenData>();\n  private readonly TOKEN_EXPIRY = 30 * 60 * 1000; // 30 minutes\n  private readonly MAX_TOKENS_PER_SESSION = 10;\n\n  /**\n   * Generate a new CSRF token for the current session\n   */\n  async generateToken(sessionId: string): Promise<string> {\n    try {\n      // Clean up expired tokens\n      await this.cleanupExpiredTokens();\n\n      // Limit tokens per session\n      const sessionTokens = Array.from(this.tokenCache.values())\n        .filter(data => data.sessionId === sessionId && !data.used);\n      \n      if (sessionTokens.length >= this.MAX_TOKENS_PER_SESSION) {\n        // Remove oldest token\n        const oldest = sessionTokens.sort((a, b) => a.timestamp - b.timestamp)[0];\n        this.tokenCache.delete(oldest.token);\n      }\n\n      // Generate cryptographically secure token\n      const tokenBytes = new Uint8Array(32);\n      crypto.getRandomValues(tokenBytes);\n      const token = Array.from(tokenBytes, byte => \n        byte.toString(16).padStart(2, '0')\n      ).join('');\n\n      const tokenData: CSRFTokenData = {\n        token,\n        sessionId,\n        timestamp: Date.now(),\n        used: false,\n      };\n\n      // Store in memory and secure storage\n      this.tokenCache.set(token, tokenData);\n      await this.persistTokens();\n\n      return token;\n    } catch (error) {\n      throw new Error('CSRF token generation failed');\n    }\n  }\n\n  /**\n   * Validate and consume a CSRF token\n   */\n  async validateToken(token: string, sessionId: string): Promise<boolean> {\n    try {\n      // Load tokens from storage if cache is empty\n      if (this.tokenCache.size === 0) {\n        await this.loadTokens();\n      }\n\n      const tokenData = this.tokenCache.get(token);\n      \n      if (!tokenData) {\n        return false;\n      }\n\n      // Check if token belongs to the session\n      if (tokenData.sessionId !== sessionId) {\n        return false;\n      }\n\n      // Check if token is already used\n      if (tokenData.used) {\n        return false;\n      }\n\n      // Check if token is expired\n      if (Date.now() - tokenData.timestamp > this.TOKEN_EXPIRY) {\n        this.tokenCache.delete(token);\n        await this.persistTokens();\n        return false;\n      }\n\n      // Mark token as used (one-time use)\n      tokenData.used = true;\n      this.tokenCache.set(token, tokenData);\n      await this.persistTokens();\n\n      return true;\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Get current valid token for session\n   */\n  async getCurrentToken(sessionId: string): Promise<string | null> {\n    // Load tokens from storage if needed\n    if (this.tokenCache.size === 0) {\n      await this.loadTokens();\n    }\n\n    // Find valid unused token for session\n    for (const [token, data] of this.tokenCache.entries()) {\n      if (\n        data.sessionId === sessionId &&\n        !data.used &&\n        (Date.now() - data.timestamp) < this.TOKEN_EXPIRY\n      ) {\n        return token;\n      }\n    }\n\n    // Generate new token if none found\n    return await this.generateToken(sessionId);\n  }\n\n  /**\n   * Clean up expired and used tokens\n   */\n  private async cleanupExpiredTokens(): Promise<void> {\n    const now = Date.now();\n    const expiredTokens: string[] = [];\n\n    for (const [token, data] of this.tokenCache.entries()) {\n      if (data.used || (now - data.timestamp) > this.TOKEN_EXPIRY) {\n        expiredTokens.push(token);\n      }\n    }\n\n    expiredTokens.forEach(token => this.tokenCache.delete(token));\n    \n    if (expiredTokens.length > 0) {\n      await this.persistTokens();\n    }\n  }\n\n  /**\n   * Persist tokens to secure storage\n   */\n  private async persistTokens(): Promise<void> {\n    try {\n      const tokensArray = Array.from(this.tokenCache.entries());\n      await secureStorage.setItem(\n        'csrf_tokens',\n        JSON.stringify(tokensArray),\n        { encrypt: true, expiry: this.TOKEN_EXPIRY }\n      );\n    } catch (error) {\n      // Silent fail - tokens will be regenerated if needed\n    }\n  }\n\n  /**\n   * Load tokens from secure storage\n   */\n  private async loadTokens(): Promise<void> {\n    try {\n      const tokensData = await secureStorage.getItem('csrf_tokens');\n      if (tokensData) {\n        const tokensArray = JSON.parse(tokensData);\n        this.tokenCache = new Map(tokensArray);\n        // Clean up on load\n        await this.cleanupExpiredTokens();\n      }\n    } catch (error) {\n      this.tokenCache.clear();\n    }\n  }\n\n  /**\n   * Clear all tokens for session\n   */\n  async clearSession(sessionId: string): Promise<void> {\n    const tokensToRemove: string[] = [];\n    \n    for (const [token, data] of this.tokenCache.entries()) {\n      if (data.sessionId === sessionId) {\n        tokensToRemove.push(token);\n      }\n    }\n    \n    tokensToRemove.forEach(token => this.tokenCache.delete(token));\n    await this.persistTokens();\n  }\n}\n\n// Export singleton instance\nexport const csrfManager = new CSRFManager();\n\n// Convenience functions\nexport async function generateCSRFToken(sessionId: string): Promise<string> {\n  return csrfManager.generateToken(sessionId);\n}\n\nexport async function validateCSRFToken(token: string, sessionId: string): Promise<boolean> {\n  return csrfManager.validateToken(token, sessionId);\n}\n\nexport async function getCSRFToken(sessionId: string): Promise<string | null> {\n  return csrfManager.getCurrentToken(sessionId);\n}\n","\n/**\n * @file SQL Injection Protection\n * @description Utilities to prevent SQL injection attacks in dynamic queries\n */\n\nimport { z } from 'zod';\n\n// Common SQL injection patterns\nconst SQL_INJECTION_PATTERNS = [\n  /(\\b(SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|EXEC|EXECUTE|UNION|SCRIPT|JAVASCRIPT)\\b)/i,\n  /(\\'|(\\\\\\')|(\\'\\')|(\\\"|(\\\\\\\")|(\\\\\")))|(\\\\x)|(\\\\u)/i,\n  /((%27)|(')|(%6F)|o|(%4F)|(%72)|r|(%52))/i, // '|%27|' OR\n  /((%27)|(')|(%55)|u|(%55)|(%4E)|n|(%4E)|(%49)|i|(%49)|(%4F)|o|(%4F)|(%4E)|n|(%4E))/i, // '|%27|' UNION\n  /((%3D)|(=))[^\\n]*((%27)|(')|((\\\\x27))|((\\\\x2D))|((\\\\x23)))/i,\n  /(w*((%27)|(')|(%6F)|o|(%4F)|(%72)|r|(%52)))/i,\n  /((%27)|(')|(''))+union/i,\n  /exec(\\+|\\s)+(s|x)p\\w+/i,\n  /\\b(and|or)\\b.+?(=|<|>|\\bin\\b|\\blike\\b)/i,\n  /\\bunion\\b.+?\\bselect\\b/i,\n  /\\bdrop\\b.+?\\btable\\b/i,\n  /\\binsert\\b.+?\\binto\\b/i,\n  /\\bdelete\\b.+?\\bfrom\\b/i,\n  /\\bupdate\\b.+?\\bset\\b/i,\n  /(;|(\\\\x3B)).+?(drop|create|alter|exec|execute|insert|update|delete)/i,\n  /(%3B|;).+?(%44|%64|d)(%52|%72|r)(%4F|%6F|o)(%50|%70|p)/i\n];\n\n// Characters that should be escaped or removed\nconst DANGEROUS_CHARS = /[';\\\"\\\\%]/g;\n\n/**\n * Schema for validating and sanitizing search queries\n */\nexport const searchQuerySchema = z\n  .string()\n  .max(500, 'Search query too long')\n  .refine(\n    (query) => {\n      return !SQL_INJECTION_PATTERNS.some(pattern => pattern.test(query));\n    },\n    'Invalid characters detected in search query'\n  )\n  .transform((query) => sanitizeSearchQuery(query));\n\n/**\n * Schema for validating table/column names\n */\nexport const sqlIdentifierSchema = z\n  .string()\n  .min(1, 'Identifier cannot be empty')\n  .max(63, 'Identifier too long') // PostgreSQL limit\n  .regex(/^[a-zA-Z_][a-zA-Z0-9_]*$/, 'Invalid identifier format')\n  .refine(\n    (identifier) => {\n      const reservedWords = [\n        'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'DROP', 'CREATE', 'ALTER',\n        'FROM', 'WHERE', 'JOIN', 'UNION', 'ORDER', 'GROUP', 'HAVING'\n      ];\n      return !reservedWords.includes(identifier.toUpperCase());\n    },\n    'Identifier cannot be a reserved SQL keyword'\n  );\n\n/**\n * Schema for validating order by clauses\n */\nexport const orderBySchema = z\n  .string()\n  .regex(/^[a-zA-Z_][a-zA-Z0-9_]*(\\s+(ASC|DESC|asc|desc))?$/, 'Invalid order by format');\n\n/**\n * Schema for validating limit/offset values\n */\nexport const limitOffsetSchema = z\n  .number()\n  .int('Must be an integer')\n  .min(0, 'Must be non-negative')\n  .max(1000, 'Limit too large'); // Reasonable maximum\n\n/**\n * Sanitize search query by removing dangerous characters\n */\nexport function sanitizeSearchQuery(query: string): string {\n  return query\n    .replace(DANGEROUS_CHARS, '') // Remove dangerous characters\n    .replace(/\\s+/g, ' ') // Normalize whitespace\n    .trim()\n    .slice(0, 500); // Enforce length limit\n}\n\n/**\n * Escape special characters for LIKE queries\n */\nexport function escapeLikeQuery(query: string): string {\n  return query\n    .replace(/\\\\/g, '\\\\\\\\') // Escape backslashes\n    .replace(/%/g, '\\\\%')   // Escape percent signs\n    .replace(/_/g, '\\\\_');  // Escape underscores\n}\n\n/**\n * Validate and sanitize a dynamic filter object\n */\nexport function sanitizeFilters(filters: Record<string, unknown>): Record<string, unknown> {\n  const sanitized: Record<string, unknown> = {};\n  \n  for (const [key, value] of Object.entries(filters)) {\n    // Validate the key (column name)\n    const keyValidation = sqlIdentifierSchema.safeParse(key);\n    if (!keyValidation.success) {\n      // Log warning for invalid filter keys\n      console.warn(`[SECURITY] Invalid filter key detected and removed: ${key}`);\n      continue;\n    }\n    \n    // Sanitize the value based on type\n    if (typeof value === 'string') {\n      const valueValidation = searchQuerySchema.safeParse(value);\n      if (valueValidation.success) {\n        sanitized[key] = valueValidation.data;\n      }\n    } else if (typeof value === 'number') {\n      if (Number.isFinite(value)) {\n        sanitized[key] = value;\n      }\n    } else if (typeof value === 'boolean') {\n      sanitized[key] = value;\n    } else if (Array.isArray(value)) {\n      // For IN queries, validate each item\n      const sanitizedArray = value\n        .filter(item => typeof item === 'string' || typeof item === 'number')\n        .map(item => typeof item === 'string' ? sanitizeSearchQuery(item) : item)\n        .slice(0, 100); // Limit array size\n      \n      if (sanitizedArray.length > 0) {\n        sanitized[key] = sanitizedArray;\n      }\n    }\n  }\n  \n  return sanitized;\n}\n\n/**\n * Build safe query parameters for Supabase\n */\nexport interface SafeQueryParams {\n  select?: string;\n  filters?: Record<string, unknown>;\n  orderBy?: string;\n  limit?: number;\n  offset?: number;\n  search?: string;\n}\n\nexport function buildSafeQueryParams(params: SafeQueryParams): SafeQueryParams {\n  const safe: SafeQueryParams = {};\n  \n  // Validate select clause\n  if (params.select) {\n    const selectFields = params.select.split(',').map(field => field.trim());\n    const validFields = selectFields.filter(field => {\n      return sqlIdentifierSchema.safeParse(field).success;\n    });\n    \n    if (validFields.length > 0) {\n      safe.select = validFields.join(', ');\n    }\n  }\n  \n  // Sanitize filters\n  if (params.filters) {\n    safe.filters = sanitizeFilters(params.filters);\n  }\n  \n  // Validate order by\n  if (params.orderBy) {\n    const orderByValidation = orderBySchema.safeParse(params.orderBy);\n    if (orderByValidation.success) {\n      safe.orderBy = orderByValidation.data;\n    }\n  }\n  \n  // Validate limit and offset\n  if (params.limit !== undefined) {\n    const limitValidation = limitOffsetSchema.safeParse(params.limit);\n    if (limitValidation.success) {\n      safe.limit = limitValidation.data;\n    }\n  }\n  \n  if (params.offset !== undefined) {\n    const offsetValidation = limitOffsetSchema.safeParse(params.offset);\n    if (offsetValidation.success) {\n      safe.offset = offsetValidation.data;\n    }\n  }\n  \n  // Sanitize search query\n  if (params.search) {\n    const searchValidation = searchQuerySchema.safeParse(params.search);\n    if (searchValidation.success) {\n      safe.search = searchValidation.data;\n    }\n  }\n  \n  return safe;\n}\n\n/**\n * Detect potential SQL injection attempts\n */\nexport function detectSQLInjection(input: string): {\n  isSuspicious: boolean;\n  patterns: string[];\n  riskLevel: 'low' | 'medium' | 'high' | 'critical';\n} {\n  const detectedPatterns: string[] = [];\n  let maxRisk: 'low' | 'medium' | 'high' | 'critical' = 'low';\n  \n  SQL_INJECTION_PATTERNS.forEach((pattern, index) => {\n    if (pattern.test(input)) {\n      detectedPatterns.push(`Pattern ${index + 1}`);\n      \n      // Assign risk levels based on pattern severity\n      if (index < 3) { // Most dangerous patterns first\n        maxRisk = 'critical';\n      } else if (index < 7 && maxRisk !== 'critical') {\n        maxRisk = 'high';\n      } else if (index < 12 && !['critical', 'high'].includes(maxRisk)) {\n        maxRisk = 'medium';\n      }\n    }\n  });\n  \n  return {\n    isSuspicious: detectedPatterns.length > 0,\n    patterns: detectedPatterns,\n    riskLevel: maxRisk\n  };\n}\n","\n/**\n * @file Enhanced Password Schema with Security Validations\n * @description Comprehensive password validation with security checks\n */\n\nimport { z } from 'zod';\n\n// Common weak passwords to check against\nconst COMMON_PASSWORDS = new Set([\n  'password', '123456', '123456789', 'qwerty', 'abc123', 'password123',\n  'admin', 'letmein', 'welcome', 'monkey', '1234567890', 'password1'\n]);\n\n// Common password patterns to avoid\nconst WEAK_PATTERNS = [\n  /^(.)\\1+$/, // All same character\n  /^(012|123|234|345|456|567|678|789|890|987|876|765|654|543|432|321|210)+/, // Sequential numbers\n  /^(abc|bcd|cde|def|efg|fgh|ghi|hij|ijk|jkl|klm|lmn|mno|nop|opq|pqr|qrs|rst|stu|tuv|uvw|vwx|wxy|xyz)+/i, // Sequential letters\n];\n\n/**\n * Enhanced password validation schema with security checks\n */\nexport const securePasswordSchema = z\n  .string()\n  .min(8, 'Password must be at least 8 characters long')\n  .max(128, 'Password must not exceed 128 characters')\n  .refine(\n    (password) => /[a-z]/.test(password),\n    'Password must contain at least one lowercase letter'\n  )\n  .refine(\n    (password) => /[A-Z]/.test(password),\n    'Password must contain at least one uppercase letter'\n  )\n  .refine(\n    (password) => /\\d/.test(password),\n    'Password must contain at least one number'\n  )\n  .refine(\n    (password) => /[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password),\n    'Password must contain at least one special character'\n  )\n  .refine(\n    (password) => !COMMON_PASSWORDS.has(password.toLowerCase()),\n    'Password is too common. Please choose a stronger password'\n  )\n  .refine(\n    (password) => !WEAK_PATTERNS.some(pattern => pattern.test(password)),\n    'Password contains weak patterns. Please choose a more complex password'\n  )\n  .refine(\n    (password) => {\n      // Check for keyboard patterns (qwerty, asdf, etc.)\n      const keyboardPatterns = ['qwerty', 'asdfgh', 'zxcvbn', '1234567890'];\n      return !keyboardPatterns.some(pattern => \n        password.toLowerCase().includes(pattern)\n      );\n    },\n    'Password contains keyboard patterns. Please choose a more secure password'\n  );\n\n/**\n * Basic password schema for less strict requirements\n */\nexport const passwordSchema = z\n  .string()\n  .min(6, 'Password must be at least 6 characters long')\n  .max(128, 'Password must not exceed 128 characters');\n\n/**\n * Password strength calculator\n */\nexport function calculatePasswordStrength(password: string): {\n  score: number;\n  feedback: string[];\n  level: 'very-weak' | 'weak' | 'fair' | 'good' | 'strong';\n} {\n  let score = 0;\n  const feedback: string[] = [];\n\n  // Length check\n  if (password.length >= 8) score += 20;\n  else if (password.length >= 6) score += 10;\n  else feedback.push('Use at least 8 characters');\n\n  // Character variety\n  if (/[a-z]/.test(password)) score += 15;\n  else feedback.push('Add lowercase letters');\n\n  if (/[A-Z]/.test(password)) score += 15;\n  else feedback.push('Add uppercase letters');\n\n  if (/\\d/.test(password)) score += 15;\n  else feedback.push('Add numbers');\n\n  if (/[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password)) score += 15;\n  else feedback.push('Add special characters');\n\n  // Additional complexity\n  if (password.length >= 12) score += 10;\n  if (/[^a-zA-Z0-9]/.test(password)) score += 10;\n\n  // Penalties\n  if (COMMON_PASSWORDS.has(password.toLowerCase())) {\n    score -= 30;\n    feedback.push('Avoid common passwords');\n  }\n\n  if (WEAK_PATTERNS.some(pattern => pattern.test(password))) {\n    score -= 20;\n    feedback.push('Avoid predictable patterns');\n  }\n\n  // Determine level\n  let level: 'very-weak' | 'weak' | 'fair' | 'good' | 'strong';\n  if (score < 30) level = 'very-weak';\n  else if (score < 50) level = 'weak';\n  else if (score < 70) level = 'fair';\n  else if (score < 90) level = 'good';\n  else level = 'strong';\n\n  return { score: Math.max(0, Math.min(100, score)), feedback, level };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAMA,SAAS,SAAS;AAKX,IAAM,oBAAoB,EAC9B,OAAO,EACP,IAAI,GAAG,mBAAmB,EAC1B,MAAM,sBAAsB,EAC5B,IAAI,KAAK,gBAAgB,EACzB;AAAA,EACC,CAAC,UAAU;AACT,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,UAAM,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AACjC,WAAO,UAAU,OAAO,SAAS,GAAG,KAAK,OAAO,SAAS;AAAA,EAC3D;AAAA,EACA;AACF,EACC,UAAU,CAAC,UAAU,cAAc,KAAK,CAAC;AAKrC,IAAMA,eAAc,EACxB,OAAO,EACP,IAAI,GAAG,mBAAmB,EAC1B,MAAM,sBAAsB;AAKxB,IAAMC,cAAa,EACvB,OAAO,EACP,IAAI,GAAG,kBAAkB,EACzB,IAAI,KAAK,eAAe,EACxB,MAAM,mBAAmB,kCAAkC;AAKvD,IAAMC,eAAc,EACxB,OAAO,EACP,MAAM,0BAA0B,6BAA6B;AAKzD,IAAMC,aAAY,EACtB,OAAO,EACP,IAAI,oBAAoB;AAKpB,IAAMC,cAAa,EACvB,OAAO,EACP,MAAM,uBAAuB,kCAAkC;AAK3D,IAAMC,qBAAoB,EAAE,OAAO;AAAA,EACxC,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AACpD,CAAC;AAKM,SAAS,cAAc,OAAuB;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,SAAO,MAAM,YAAY,EAAE,KAAK;AAClC;AAKO,SAAS,eAAe,OAAuB;AACpD,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,SAAO,MACJ,QAAQ,SAAS,EAAE,EACnB,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,YAAY,EAAE,EACtB,KAAK;AACV;;;ACjFA,IAAM,cAAN,MAAkB;AAAA,EAAlB;AACE,SAAQ,aAAa,oBAAI,IAA2B;AACpD,SAAiB,eAAe,KAAK,KAAK;AAC1C;AAAA,SAAiB,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1C,MAAM,cAAc,WAAoC;AACtD,QAAI;AAEF,YAAM,KAAK,qBAAqB;AAGhC,YAAM,gBAAgB,MAAM,KAAK,KAAK,WAAW,OAAO,CAAC,EACtD,OAAO,UAAQ,KAAK,cAAc,aAAa,CAAC,KAAK,IAAI;AAE5D,UAAI,cAAc,UAAU,KAAK,wBAAwB;AAEvD,cAAM,SAAS,cAAc,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACxE,aAAK,WAAW,OAAO,OAAO,KAAK;AAAA,MACrC;AAGA,YAAM,aAAa,IAAI,WAAW,EAAE;AACpC,aAAO,gBAAgB,UAAU;AACjC,YAAM,QAAQ,MAAM;AAAA,QAAK;AAAA,QAAY,UACnC,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,MACnC,EAAE,KAAK,EAAE;AAET,YAAM,YAA2B;AAAA,QAC/B;AAAA,QACA;AAAA,QACA,WAAW,KAAK,IAAI;AAAA,QACpB,MAAM;AAAA,MACR;AAGA,WAAK,WAAW,IAAI,OAAO,SAAS;AACpC,YAAM,KAAK,cAAc;AAEzB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,OAAe,WAAqC;AACtE,QAAI;AAEF,UAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,cAAM,KAAK,WAAW;AAAA,MACxB;AAEA,YAAM,YAAY,KAAK,WAAW,IAAI,KAAK;AAE3C,UAAI,CAAC,WAAW;AACd,eAAO;AAAA,MACT;AAGA,UAAI,UAAU,cAAc,WAAW;AACrC,eAAO;AAAA,MACT;AAGA,UAAI,UAAU,MAAM;AAClB,eAAO;AAAA,MACT;AAGA,UAAI,KAAK,IAAI,IAAI,UAAU,YAAY,KAAK,cAAc;AACxD,aAAK,WAAW,OAAO,KAAK;AAC5B,cAAM,KAAK,cAAc;AACzB,eAAO;AAAA,MACT;AAGA,gBAAU,OAAO;AACjB,WAAK,WAAW,IAAI,OAAO,SAAS;AACpC,YAAM,KAAK,cAAc;AAEzB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,WAA2C;AAE/D,QAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,YAAM,KAAK,WAAW;AAAA,IACxB;AAGA,eAAW,CAAC,OAAO,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AACrD,UACE,KAAK,cAAc,aACnB,CAAC,KAAK,QACL,KAAK,IAAI,IAAI,KAAK,YAAa,KAAK,cACrC;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAGA,WAAO,MAAM,KAAK,cAAc,SAAS;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,uBAAsC;AAClD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,gBAA0B,CAAC;AAEjC,eAAW,CAAC,OAAO,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AACrD,UAAI,KAAK,QAAS,MAAM,KAAK,YAAa,KAAK,cAAc;AAC3D,sBAAc,KAAK,KAAK;AAAA,MAC1B;AAAA,IACF;AAEA,kBAAc,QAAQ,WAAS,KAAK,WAAW,OAAO,KAAK,CAAC;AAE5D,QAAI,cAAc,SAAS,GAAG;AAC5B,YAAM,KAAK,cAAc;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBAA+B;AAC3C,QAAI;AACF,YAAM,cAAc,MAAM,KAAK,KAAK,WAAW,QAAQ,CAAC;AACxD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA,KAAK,UAAU,WAAW;AAAA,QAC1B,EAAE,SAAS,MAAM,QAAQ,KAAK,aAAa;AAAA,MAC7C;AAAA,IACF,SAAS,OAAO;AAAA,IAEhB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,aAA4B;AACxC,QAAI;AACF,YAAM,aAAa,MAAM,cAAc,QAAQ,aAAa;AAC5D,UAAI,YAAY;AACd,cAAM,cAAc,KAAK,MAAM,UAAU;AACzC,aAAK,aAAa,IAAI,IAAI,WAAW;AAErC,cAAM,KAAK,qBAAqB;AAAA,MAClC;AAAA,IACF,SAAS,OAAO;AACd,WAAK,WAAW,MAAM;AAAA,IACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,WAAkC;AACnD,UAAM,iBAA2B,CAAC;AAElC,eAAW,CAAC,OAAO,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AACrD,UAAI,KAAK,cAAc,WAAW;AAChC,uBAAe,KAAK,KAAK;AAAA,MAC3B;AAAA,IACF;AAEA,mBAAe,QAAQ,WAAS,KAAK,WAAW,OAAO,KAAK,CAAC;AAC7D,UAAM,KAAK,cAAc;AAAA,EAC3B;AACF;AAGO,IAAM,cAAc,IAAI,YAAY;AAG3C,eAAsB,kBAAkB,WAAoC;AAC1E,SAAO,YAAY,cAAc,SAAS;AAC5C;AAEA,eAAsB,kBAAkB,OAAe,WAAqC;AAC1F,SAAO,YAAY,cAAc,OAAO,SAAS;AACnD;AAEA,eAAsB,aAAa,WAA2C;AAC5E,SAAO,YAAY,gBAAgB,SAAS;AAC9C;;;AC/MA,SAAS,KAAAC,UAAS;AAGlB,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,kBAAkB;AAKjB,IAAM,oBAAoBA,GAC9B,OAAO,EACP,IAAI,KAAK,uBAAuB,EAChC;AAAA,EACC,CAAC,UAAU;AACT,WAAO,CAAC,uBAAuB,KAAK,aAAW,QAAQ,KAAK,KAAK,CAAC;AAAA,EACpE;AAAA,EACA;AACF,EACC,UAAU,CAAC,UAAU,oBAAoB,KAAK,CAAC;AAK3C,IAAM,sBAAsBA,GAChC,OAAO,EACP,IAAI,GAAG,4BAA4B,EACnC,IAAI,IAAI,qBAAqB,EAC7B,MAAM,4BAA4B,2BAA2B,EAC7D;AAAA,EACC,CAAC,eAAe;AACd,UAAM,gBAAgB;AAAA,MACpB;AAAA,MAAU;AAAA,MAAU;AAAA,MAAU;AAAA,MAAU;AAAA,MAAQ;AAAA,MAAU;AAAA,MAC1D;AAAA,MAAQ;AAAA,MAAS;AAAA,MAAQ;AAAA,MAAS;AAAA,MAAS;AAAA,MAAS;AAAA,IACtD;AACA,WAAO,CAAC,cAAc,SAAS,WAAW,YAAY,CAAC;AAAA,EACzD;AAAA,EACA;AACF;AAKK,IAAM,gBAAgBA,GAC1B,OAAO,EACP,MAAM,qDAAqD,yBAAyB;AAKhF,IAAM,oBAAoBA,GAC9B,OAAO,EACP,IAAI,oBAAoB,EACxB,IAAI,GAAG,sBAAsB,EAC7B,IAAI,KAAM,iBAAiB;AAKvB,SAAS,oBAAoB,OAAuB;AACzD,SAAO,MACJ,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,GAAG;AACjB;AAKO,SAAS,gBAAgB,OAAuB;AACrD,SAAO,MACJ,QAAQ,OAAO,MAAM,EACrB,QAAQ,MAAM,KAAK,EACnB,QAAQ,MAAM,KAAK;AACxB;AAKO,SAAS,gBAAgB,SAA2D;AACzF,QAAM,YAAqC,CAAC;AAE5C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAElD,UAAM,gBAAgB,oBAAoB,UAAU,GAAG;AACvD,QAAI,CAAC,cAAc,SAAS;AAE1B,cAAQ,KAAK,uDAAuD,GAAG,EAAE;AACzE;AAAA,IACF;AAGA,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,kBAAkB,kBAAkB,UAAU,KAAK;AACzD,UAAI,gBAAgB,SAAS;AAC3B,kBAAU,GAAG,IAAI,gBAAgB;AAAA,MACnC;AAAA,IACF,WAAW,OAAO,UAAU,UAAU;AACpC,UAAI,OAAO,SAAS,KAAK,GAAG;AAC1B,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF,WAAW,OAAO,UAAU,WAAW;AACrC,gBAAU,GAAG,IAAI;AAAA,IACnB,WAAW,MAAM,QAAQ,KAAK,GAAG;AAE/B,YAAM,iBAAiB,MACpB,OAAO,UAAQ,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,EACnE,IAAI,UAAQ,OAAO,SAAS,WAAW,oBAAoB,IAAI,IAAI,IAAI,EACvE,MAAM,GAAG,GAAG;AAEf,UAAI,eAAe,SAAS,GAAG;AAC7B,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAcO,SAAS,qBAAqB,QAA0C;AAC7E,QAAM,OAAwB,CAAC;AAG/B,MAAI,OAAO,QAAQ;AACjB,UAAM,eAAe,OAAO,OAAO,MAAM,GAAG,EAAE,IAAI,WAAS,MAAM,KAAK,CAAC;AACvE,UAAM,cAAc,aAAa,OAAO,WAAS;AAC/C,aAAO,oBAAoB,UAAU,KAAK,EAAE;AAAA,IAC9C,CAAC;AAED,QAAI,YAAY,SAAS,GAAG;AAC1B,WAAK,SAAS,YAAY,KAAK,IAAI;AAAA,IACrC;AAAA,EACF;AAGA,MAAI,OAAO,SAAS;AAClB,SAAK,UAAU,gBAAgB,OAAO,OAAO;AAAA,EAC/C;AAGA,MAAI,OAAO,SAAS;AAClB,UAAM,oBAAoB,cAAc,UAAU,OAAO,OAAO;AAChE,QAAI,kBAAkB,SAAS;AAC7B,WAAK,UAAU,kBAAkB;AAAA,IACnC;AAAA,EACF;AAGA,MAAI,OAAO,UAAU,QAAW;AAC9B,UAAM,kBAAkB,kBAAkB,UAAU,OAAO,KAAK;AAChE,QAAI,gBAAgB,SAAS;AAC3B,WAAK,QAAQ,gBAAgB;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,QAAW;AAC/B,UAAM,mBAAmB,kBAAkB,UAAU,OAAO,MAAM;AAClE,QAAI,iBAAiB,SAAS;AAC5B,WAAK,SAAS,iBAAiB;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,OAAO,QAAQ;AACjB,UAAM,mBAAmB,kBAAkB,UAAU,OAAO,MAAM;AAClE,QAAI,iBAAiB,SAAS;AAC5B,WAAK,SAAS,iBAAiB;AAAA,IACjC;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,mBAAmB,OAIjC;AACA,QAAM,mBAA6B,CAAC;AACpC,MAAI,UAAkD;AAEtD,yBAAuB,QAAQ,CAAC,SAAS,UAAU;AACjD,QAAI,QAAQ,KAAK,KAAK,GAAG;AACvB,uBAAiB,KAAK,WAAW,QAAQ,CAAC,EAAE;AAG5C,UAAI,QAAQ,GAAG;AACb,kBAAU;AAAA,MACZ,WAAW,QAAQ,KAAK,YAAY,YAAY;AAC9C,kBAAU;AAAA,MACZ,WAAW,QAAQ,MAAM,CAAC,CAAC,YAAY,MAAM,EAAE,SAAS,OAAO,GAAG;AAChE,kBAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,cAAc,iBAAiB,SAAS;AAAA,IACxC,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACF;;;AC3OA,SAAS,KAAAC,UAAS;AAGlB,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EAAY;AAAA,EAAU;AAAA,EAAa;AAAA,EAAU;AAAA,EAAU;AAAA,EACvD;AAAA,EAAS;AAAA,EAAW;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AACzD,CAAC;AAGD,IAAM,gBAAgB;AAAA,EACpB;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAKO,IAAMC,wBAAuBD,GACjC,OAAO,EACP,IAAI,GAAG,6CAA6C,EACpD,IAAI,KAAK,yCAAyC,EAClD;AAAA,EACC,CAAC,aAAa,QAAQ,KAAK,QAAQ;AAAA,EACnC;AACF,EACC;AAAA,EACC,CAAC,aAAa,QAAQ,KAAK,QAAQ;AAAA,EACnC;AACF,EACC;AAAA,EACC,CAAC,aAAa,KAAK,KAAK,QAAQ;AAAA,EAChC;AACF,EACC;AAAA,EACC,CAAC,aAAa,wCAAwC,KAAK,QAAQ;AAAA,EACnE;AACF,EACC;AAAA,EACC,CAAC,aAAa,CAAC,iBAAiB,IAAI,SAAS,YAAY,CAAC;AAAA,EAC1D;AACF,EACC;AAAA,EACC,CAAC,aAAa,CAAC,cAAc,KAAK,aAAW,QAAQ,KAAK,QAAQ,CAAC;AAAA,EACnE;AACF,EACC;AAAA,EACC,CAAC,aAAa;AAEZ,UAAM,mBAAmB,CAAC,UAAU,UAAU,UAAU,YAAY;AACpE,WAAO,CAAC,iBAAiB;AAAA,MAAK,aAC5B,SAAS,YAAY,EAAE,SAAS,OAAO;AAAA,IACzC;AAAA,EACF;AAAA,EACA;AACF;AAKK,IAAME,kBAAiBF,GAC3B,OAAO,EACP,IAAI,GAAG,6CAA6C,EACpD,IAAI,KAAK,yCAAyC;AAK9C,SAAS,0BAA0B,UAIxC;AACA,MAAI,QAAQ;AACZ,QAAM,WAAqB,CAAC;AAG5B,MAAI,SAAS,UAAU,EAAG,UAAS;AAAA,WAC1B,SAAS,UAAU,EAAG,UAAS;AAAA,MACnC,UAAS,KAAK,2BAA2B;AAG9C,MAAI,QAAQ,KAAK,QAAQ,EAAG,UAAS;AAAA,MAChC,UAAS,KAAK,uBAAuB;AAE1C,MAAI,QAAQ,KAAK,QAAQ,EAAG,UAAS;AAAA,MAChC,UAAS,KAAK,uBAAuB;AAE1C,MAAI,KAAK,KAAK,QAAQ,EAAG,UAAS;AAAA,MAC7B,UAAS,KAAK,aAAa;AAEhC,MAAI,wCAAwC,KAAK,QAAQ,EAAG,UAAS;AAAA,MAChE,UAAS,KAAK,wBAAwB;AAG3C,MAAI,SAAS,UAAU,GAAI,UAAS;AACpC,MAAI,eAAe,KAAK,QAAQ,EAAG,UAAS;AAG5C,MAAI,iBAAiB,IAAI,SAAS,YAAY,CAAC,GAAG;AAChD,aAAS;AACT,aAAS,KAAK,wBAAwB;AAAA,EACxC;AAEA,MAAI,cAAc,KAAK,aAAW,QAAQ,KAAK,QAAQ,CAAC,GAAG;AACzD,aAAS;AACT,aAAS,KAAK,4BAA4B;AAAA,EAC5C;AAGA,MAAI;AACJ,MAAI,QAAQ,GAAI,SAAQ;AAAA,WACf,QAAQ,GAAI,SAAQ;AAAA,WACpB,QAAQ,GAAI,SAAQ;AAAA,WACpB,QAAQ,GAAI,SAAQ;AAAA,MACxB,SAAQ;AAEb,SAAO,EAAE,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,GAAG,UAAU,MAAM;AACrE;","names":["emailSchema","nameSchema","phoneSchema","urlSchema","dateSchema","secureLoginSchema","z","z","securePasswordSchema","passwordSchema"]}
+{"version":3,"sources":["../src/validation/sanitization.ts","../src/validation/csrf.ts","../src/validation/sqlInjectionProtection.ts","../src/validation/passwordSchema.ts"],"sourcesContent":["\n/**\n * @file Input sanitization and validation schemas\n * @description Enhanced validation schemas with security features\n */\n\nimport { z } from 'zod';\n\n/**\n * Enhanced email schema with security checks\n */\nexport const secureEmailSchema = z\n  .string()\n  .min(1, 'Email is required')\n  .email('Invalid email format')\n  .max(254, 'Email too long')\n  .refine(\n    (email) => {\n      if (!email || typeof email !== 'string') return false;\n      // Basic domain validation\n      const domain = email.split('@')[1];\n      return domain && domain.includes('.') && domain.length > 3;\n    },\n    'Invalid email domain'\n  )\n  .transform((email) => sanitizeEmail(email));\n\n/**\n * Basic email schema for common use\n */\nexport const emailSchema = z\n  .string()\n  .min(1, 'Email is required')\n  .email('Invalid email format');\n\n/**\n * Name validation schema\n */\nexport const nameSchema = z\n  .string()\n  .min(1, 'Name is required')\n  .max(100, 'Name too long')\n  .regex(/^[a-zA-Z\\s'-]+$/, 'Name contains invalid characters');\n\n/**\n * Phone validation schema\n */\nexport const phoneSchema = z\n  .string()\n  .regex(/^[\\+]?[1-9][\\d]{0,15}$/, 'Invalid phone number format');\n\n/**\n * URL validation schema\n */\nexport const urlSchema = z\n  .string()\n  .url('Invalid URL format');\n\n/**\n * Date validation schema\n */\nexport const dateSchema = z\n  .string()\n  .regex(/^\\d{4}-\\d{2}-\\d{2}$/, 'Invalid date format (YYYY-MM-DD)');\n\n/**\n * Secure login schema\n */\nexport const secureLoginSchema = z.object({\n  email: secureEmailSchema,\n  password: z.string().min(1, 'Password is required'),\n});\n\n/**\n * Sanitize email input\n */\nexport function sanitizeEmail(email: string): string {\n  if (!email || typeof email !== 'string') {\n    return '';\n  }\n  return email.toLowerCase().trim();\n}\n\n/**\n * Sanitize string input\n */\nexport function sanitizeString(input: string): string {\n  if (!input || typeof input !== 'string') {\n    return '';\n  }\n  return input\n    .replace(/[<>]/g, '') // Remove angle brackets\n    .replace(/javascript:/gi, '') // Remove javascript: protocol\n    .replace(/on\\w+=/gi, '') // Remove event handlers\n    .trim();\n}\n","/**\n * @file CSRF Protection Implementation\n * @description Session-based CSRF token management with security enhancements\n */\n\nimport { secureStorage } from '../utils/secureStorage';\n\nexport interface CSRFTokenData {\n  token: string;\n  sessionId: string;\n  timestamp: number;\n  used: boolean;\n}\n\nclass CSRFManager {\n  private tokenCache = new Map<string, CSRFTokenData>();\n  private readonly TOKEN_EXPIRY = 30 * 60 * 1000; // 30 minutes\n  private readonly MAX_TOKENS_PER_SESSION = 10;\n\n  /**\n   * Generate a new CSRF token for the current session\n   */\n  async generateToken(sessionId: string): Promise<string> {\n    try {\n      // Clean up expired tokens\n      await this.cleanupExpiredTokens();\n\n      // Limit tokens per session\n      const sessionTokens = Array.from(this.tokenCache.values())\n        .filter(data => data.sessionId === sessionId && !data.used);\n      \n      if (sessionTokens.length >= this.MAX_TOKENS_PER_SESSION) {\n        // Remove oldest token\n        const oldest = sessionTokens.sort((a, b) => a.timestamp - b.timestamp)[0];\n        this.tokenCache.delete(oldest.token);\n      }\n\n      // Generate cryptographically secure token\n      const tokenBytes = new Uint8Array(32);\n      crypto.getRandomValues(tokenBytes);\n      const token = Array.from(tokenBytes, byte => \n        byte.toString(16).padStart(2, '0')\n      ).join('');\n\n      const tokenData: CSRFTokenData = {\n        token,\n        sessionId,\n        timestamp: Date.now(),\n        used: false,\n      };\n\n      // Store in memory and secure storage\n      this.tokenCache.set(token, tokenData);\n      await this.persistTokens();\n\n      return token;\n    } catch (error) {\n      throw new Error('CSRF token generation failed');\n    }\n  }\n\n  /**\n   * Validate and consume a CSRF token\n   */\n  async validateToken(token: string, sessionId: string): Promise<boolean> {\n    try {\n      // Load tokens from storage if cache is empty\n      if (this.tokenCache.size === 0) {\n        await this.loadTokens();\n      }\n\n      const tokenData = this.tokenCache.get(token);\n      \n      if (!tokenData) {\n        return false;\n      }\n\n      // Check if token belongs to the session\n      if (tokenData.sessionId !== sessionId) {\n        return false;\n      }\n\n      // Check if token is already used\n      if (tokenData.used) {\n        return false;\n      }\n\n      // Check if token is expired\n      if (Date.now() - tokenData.timestamp > this.TOKEN_EXPIRY) {\n        this.tokenCache.delete(token);\n        await this.persistTokens();\n        return false;\n      }\n\n      // Mark token as used (one-time use)\n      tokenData.used = true;\n      this.tokenCache.set(token, tokenData);\n      await this.persistTokens();\n\n      return true;\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Get current valid token for session\n   */\n  async getCurrentToken(sessionId: string): Promise<string | null> {\n    // Load tokens from storage if needed\n    if (this.tokenCache.size === 0) {\n      await this.loadTokens();\n    }\n\n    // Find valid unused token for session\n    for (const [token, data] of this.tokenCache.entries()) {\n      if (\n        data.sessionId === sessionId &&\n        !data.used &&\n        (Date.now() - data.timestamp) < this.TOKEN_EXPIRY\n      ) {\n        return token;\n      }\n    }\n\n    // Generate new token if none found\n    return await this.generateToken(sessionId);\n  }\n\n  /**\n   * Clean up expired and used tokens\n   */\n  private async cleanupExpiredTokens(): Promise<void> {\n    const now = Date.now();\n    const expiredTokens: string[] = [];\n\n    for (const [token, data] of this.tokenCache.entries()) {\n      if (data.used || (now - data.timestamp) > this.TOKEN_EXPIRY) {\n        expiredTokens.push(token);\n      }\n    }\n\n    expiredTokens.forEach(token => this.tokenCache.delete(token));\n    \n    if (expiredTokens.length > 0) {\n      await this.persistTokens();\n    }\n  }\n\n  /**\n   * Persist tokens to secure storage\n   */\n  private async persistTokens(): Promise<void> {\n    try {\n      const tokensArray = Array.from(this.tokenCache.entries());\n      await secureStorage.setItem(\n        'csrf_tokens',\n        JSON.stringify(tokensArray),\n        { encrypt: true, expiry: this.TOKEN_EXPIRY }\n      );\n    } catch (error) {\n      // Silent fail - tokens will be regenerated if needed\n    }\n  }\n\n  /**\n   * Load tokens from secure storage\n   */\n  private async loadTokens(): Promise<void> {\n    try {\n      const tokensData = await secureStorage.getItem('csrf_tokens');\n      if (tokensData) {\n        const tokensArray = JSON.parse(tokensData);\n        this.tokenCache = new Map(tokensArray);\n        // Clean up on load\n        await this.cleanupExpiredTokens();\n      }\n    } catch (error) {\n      this.tokenCache.clear();\n    }\n  }\n\n  /**\n   * Clear all tokens for session\n   */\n  async clearSession(sessionId: string): Promise<void> {\n    const tokensToRemove: string[] = [];\n    \n    for (const [token, data] of this.tokenCache.entries()) {\n      if (data.sessionId === sessionId) {\n        tokensToRemove.push(token);\n      }\n    }\n    \n    tokensToRemove.forEach(token => this.tokenCache.delete(token));\n    await this.persistTokens();\n  }\n}\n\n// Export singleton instance\nexport const csrfManager = new CSRFManager();\n\n// Convenience functions\nexport async function generateCSRFToken(sessionId: string): Promise<string> {\n  return csrfManager.generateToken(sessionId);\n}\n\nexport async function validateCSRFToken(token: string, sessionId: string): Promise<boolean> {\n  return csrfManager.validateToken(token, sessionId);\n}\n\nexport async function getCSRFToken(sessionId: string): Promise<string | null> {\n  return csrfManager.getCurrentToken(sessionId);\n}\n","\n/**\n * @file SQL Injection Protection\n * @description Utilities to prevent SQL injection attacks in dynamic queries\n */\n\nimport { z } from 'zod';\n\n// Common SQL injection patterns\nconst SQL_INJECTION_PATTERNS = [\n  /(\\b(SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|EXEC|EXECUTE|UNION|SCRIPT|JAVASCRIPT)\\b)/i,\n  /(\\'|(\\\\\\')|(\\'\\')|(\\\"|(\\\\\\\")|(\\\\\")))|(\\\\x)|(\\\\u)/i,\n  /((%27)|(')|(%6F)|o|(%4F)|(%72)|r|(%52))/i, // '|%27|' OR\n  /((%27)|(')|(%55)|u|(%55)|(%4E)|n|(%4E)|(%49)|i|(%49)|(%4F)|o|(%4F)|(%4E)|n|(%4E))/i, // '|%27|' UNION\n  /((%3D)|(=))[^\\n]*((%27)|(')|((\\\\x27))|((\\\\x2D))|((\\\\x23)))/i,\n  /(w*((%27)|(')|(%6F)|o|(%4F)|(%72)|r|(%52)))/i,\n  /((%27)|(')|(''))+union/i,\n  /exec(\\+|\\s)+(s|x)p\\w+/i,\n  /\\b(and|or)\\b.+?(=|<|>|\\bin\\b|\\blike\\b)/i,\n  /\\bunion\\b.+?\\bselect\\b/i,\n  /\\bdrop\\b.+?\\btable\\b/i,\n  /\\binsert\\b.+?\\binto\\b/i,\n  /\\bdelete\\b.+?\\bfrom\\b/i,\n  /\\bupdate\\b.+?\\bset\\b/i,\n  /(;|(\\\\x3B)).+?(drop|create|alter|exec|execute|insert|update|delete)/i,\n  /(%3B|;).+?(%44|%64|d)(%52|%72|r)(%4F|%6F|o)(%50|%70|p)/i\n];\n\n// Characters that should be escaped or removed\nconst DANGEROUS_CHARS = /[';\\\"\\\\%]/g;\n\n/**\n * Schema for validating and sanitizing search queries\n */\nexport const searchQuerySchema = z\n  .string()\n  .max(500, 'Search query too long')\n  .refine(\n    (query) => {\n      return !SQL_INJECTION_PATTERNS.some(pattern => pattern.test(query));\n    },\n    'Invalid characters detected in search query'\n  )\n  .transform((query) => sanitizeSearchQuery(query));\n\n/**\n * Schema for validating table/column names\n */\nexport const sqlIdentifierSchema = z\n  .string()\n  .min(1, 'Identifier cannot be empty')\n  .max(63, 'Identifier too long') // PostgreSQL limit\n  .regex(/^[a-zA-Z_][a-zA-Z0-9_]*$/, 'Invalid identifier format')\n  .refine(\n    (identifier) => {\n      const reservedWords = [\n        'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'DROP', 'CREATE', 'ALTER',\n        'FROM', 'WHERE', 'JOIN', 'UNION', 'ORDER', 'GROUP', 'HAVING'\n      ];\n      return !reservedWords.includes(identifier.toUpperCase());\n    },\n    'Identifier cannot be a reserved SQL keyword'\n  );\n\n/**\n * Schema for validating order by clauses\n */\nexport const orderBySchema = z\n  .string()\n  .regex(/^[a-zA-Z_][a-zA-Z0-9_]*(\\s+(ASC|DESC|asc|desc))?$/, 'Invalid order by format');\n\n/**\n * Schema for validating limit/offset values\n */\nexport const limitOffsetSchema = z\n  .number()\n  .int('Must be an integer')\n  .min(0, 'Must be non-negative')\n  .max(1000, 'Limit too large'); // Reasonable maximum\n\n/**\n * Sanitize search query by removing dangerous characters\n */\nexport function sanitizeSearchQuery(query: string): string {\n  return query\n    .replace(DANGEROUS_CHARS, '') // Remove dangerous characters\n    .replace(/\\s+/g, ' ') // Normalize whitespace\n    .trim()\n    .slice(0, 500); // Enforce length limit\n}\n\n/**\n * Escape special characters for LIKE queries\n */\nexport function escapeLikeQuery(query: string): string {\n  return query\n    .replace(/\\\\/g, '\\\\\\\\') // Escape backslashes\n    .replace(/%/g, '\\\\%')   // Escape percent signs\n    .replace(/_/g, '\\\\_');  // Escape underscores\n}\n\n/**\n * Validate and sanitize a dynamic filter object\n */\nexport function sanitizeFilters(filters: Record<string, unknown>): Record<string, unknown> {\n  const sanitized: Record<string, unknown> = {};\n  \n  for (const [key, value] of Object.entries(filters)) {\n    // Validate the key (column name)\n    const keyValidation = sqlIdentifierSchema.safeParse(key);\n    if (!keyValidation.success) {\n      // Log warning for invalid filter keys\n      console.warn(`[SECURITY] Invalid filter key detected and removed: ${key}`);\n      continue;\n    }\n    \n    // Sanitize the value based on type\n    if (typeof value === 'string') {\n      const valueValidation = searchQuerySchema.safeParse(value);\n      if (valueValidation.success) {\n        sanitized[key] = valueValidation.data;\n      }\n    } else if (typeof value === 'number') {\n      if (Number.isFinite(value)) {\n        sanitized[key] = value;\n      }\n    } else if (typeof value === 'boolean') {\n      sanitized[key] = value;\n    } else if (Array.isArray(value)) {\n      // For IN queries, validate each item\n      const sanitizedArray = value\n        .filter(item => typeof item === 'string' || typeof item === 'number')\n        .map(item => typeof item === 'string' ? sanitizeSearchQuery(item) : item)\n        .slice(0, 100); // Limit array size\n      \n      if (sanitizedArray.length > 0) {\n        sanitized[key] = sanitizedArray;\n      }\n    }\n  }\n  \n  return sanitized;\n}\n\n/**\n * Build safe query parameters for Supabase\n */\nexport interface SafeQueryParams {\n  select?: string;\n  filters?: Record<string, unknown>;\n  orderBy?: string;\n  limit?: number;\n  offset?: number;\n  search?: string;\n}\n\nexport function buildSafeQueryParams(params: SafeQueryParams): SafeQueryParams {\n  const safe: SafeQueryParams = {};\n  \n  // Validate select clause\n  if (params.select) {\n    const selectFields = params.select.split(',').map(field => field.trim());\n    const validFields = selectFields.filter(field => {\n      return sqlIdentifierSchema.safeParse(field).success;\n    });\n    \n    if (validFields.length > 0) {\n      safe.select = validFields.join(', ');\n    }\n  }\n  \n  // Sanitize filters\n  if (params.filters) {\n    safe.filters = sanitizeFilters(params.filters);\n  }\n  \n  // Validate order by\n  if (params.orderBy) {\n    const orderByValidation = orderBySchema.safeParse(params.orderBy);\n    if (orderByValidation.success) {\n      safe.orderBy = orderByValidation.data;\n    }\n  }\n  \n  // Validate limit and offset\n  if (params.limit !== undefined) {\n    const limitValidation = limitOffsetSchema.safeParse(params.limit);\n    if (limitValidation.success) {\n      safe.limit = limitValidation.data;\n    }\n  }\n  \n  if (params.offset !== undefined) {\n    const offsetValidation = limitOffsetSchema.safeParse(params.offset);\n    if (offsetValidation.success) {\n      safe.offset = offsetValidation.data;\n    }\n  }\n  \n  // Sanitize search query\n  if (params.search) {\n    const searchValidation = searchQuerySchema.safeParse(params.search);\n    if (searchValidation.success) {\n      safe.search = searchValidation.data;\n    }\n  }\n  \n  return safe;\n}\n\n/**\n * Detect potential SQL injection attempts\n */\nexport function detectSQLInjection(input: string): {\n  isSuspicious: boolean;\n  patterns: string[];\n  riskLevel: 'low' | 'medium' | 'high' | 'critical';\n} {\n  const detectedPatterns: string[] = [];\n  let maxRisk: 'low' | 'medium' | 'high' | 'critical' = 'low';\n  \n  SQL_INJECTION_PATTERNS.forEach((pattern, index) => {\n    if (pattern.test(input)) {\n      detectedPatterns.push(`Pattern ${index + 1}`);\n      \n      // Assign risk levels based on pattern severity\n      if (index < 3) { // Most dangerous patterns first\n        maxRisk = 'critical';\n      } else if (index < 7 && maxRisk !== 'critical') {\n        maxRisk = 'high';\n      } else if (index < 12 && !['critical', 'high'].includes(maxRisk)) {\n        maxRisk = 'medium';\n      }\n    }\n  });\n  \n  return {\n    isSuspicious: detectedPatterns.length > 0,\n    patterns: detectedPatterns,\n    riskLevel: maxRisk\n  };\n}\n","\n/**\n * @file Enhanced Password Schema with Security Validations\n * @description Comprehensive password validation with security checks\n */\n\nimport { z } from 'zod';\n\n// Common weak passwords to check against\nconst COMMON_PASSWORDS = new Set([\n  'password', '123456', '123456789', 'qwerty', 'abc123', 'password123',\n  'admin', 'letmein', 'welcome', 'monkey', '1234567890', 'password1'\n]);\n\n// Common password patterns to avoid\nconst WEAK_PATTERNS = [\n  /^(.)\\1+$/, // All same character\n  /^(012|123|234|345|456|567|678|789|890|987|876|765|654|543|432|321|210)+/, // Sequential numbers\n  /^(abc|bcd|cde|def|efg|fgh|ghi|hij|ijk|jkl|klm|lmn|mno|nop|opq|pqr|qrs|rst|stu|tuv|uvw|vwx|wxy|xyz)+/i, // Sequential letters\n];\n\n/**\n * Enhanced password validation schema with security checks\n */\nexport const securePasswordSchema = z\n  .string()\n  .min(8, 'Password must be at least 8 characters long')\n  .max(128, 'Password must not exceed 128 characters')\n  .refine(\n    (password) => /[a-z]/.test(password),\n    'Password must contain at least one lowercase letter'\n  )\n  .refine(\n    (password) => /[A-Z]/.test(password),\n    'Password must contain at least one uppercase letter'\n  )\n  .refine(\n    (password) => /\\d/.test(password),\n    'Password must contain at least one number'\n  )\n  .refine(\n    (password) => /[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password),\n    'Password must contain at least one special character'\n  )\n  .refine(\n    (password) => !COMMON_PASSWORDS.has(password.toLowerCase()),\n    'Password is too common. Please choose a stronger password'\n  )\n  .refine(\n    (password) => !WEAK_PATTERNS.some(pattern => pattern.test(password)),\n    'Password contains weak patterns. Please choose a more complex password'\n  )\n  .refine(\n    (password) => {\n      // Check for keyboard patterns (qwerty, asdf, etc.)\n      const keyboardPatterns = ['qwerty', 'asdfgh', 'zxcvbn', '1234567890'];\n      return !keyboardPatterns.some(pattern => \n        password.toLowerCase().includes(pattern)\n      );\n    },\n    'Password contains keyboard patterns. Please choose a more secure password'\n  );\n\n/**\n * Basic password schema for less strict requirements\n */\nexport const passwordSchema = z\n  .string()\n  .min(6, 'Password must be at least 6 characters long')\n  .max(128, 'Password must not exceed 128 characters');\n\n/**\n * Password strength calculator\n */\nexport function calculatePasswordStrength(password: string): {\n  score: number;\n  feedback: string[];\n  level: 'very-weak' | 'weak' | 'fair' | 'good' | 'strong';\n} {\n  let score = 0;\n  const feedback: string[] = [];\n\n  // Length check\n  if (password.length >= 8) score += 20;\n  else if (password.length >= 6) score += 10;\n  else feedback.push('Use at least 8 characters');\n\n  // Character variety\n  if (/[a-z]/.test(password)) score += 15;\n  else feedback.push('Add lowercase letters');\n\n  if (/[A-Z]/.test(password)) score += 15;\n  else feedback.push('Add uppercase letters');\n\n  if (/\\d/.test(password)) score += 15;\n  else feedback.push('Add numbers');\n\n  if (/[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password)) score += 15;\n  else feedback.push('Add special characters');\n\n  // Additional complexity\n  if (password.length >= 12) score += 10;\n  if (/[^a-zA-Z0-9]/.test(password)) score += 10;\n\n  // Penalties\n  if (COMMON_PASSWORDS.has(password.toLowerCase())) {\n    score -= 30;\n    feedback.push('Avoid common passwords');\n  }\n\n  if (WEAK_PATTERNS.some(pattern => pattern.test(password))) {\n    score -= 20;\n    feedback.push('Avoid predictable patterns');\n  }\n\n  // Determine level\n  let level: 'very-weak' | 'weak' | 'fair' | 'good' | 'strong';\n  if (score < 30) level = 'very-weak';\n  else if (score < 50) level = 'weak';\n  else if (score < 70) level = 'fair';\n  else if (score < 90) level = 'good';\n  else level = 'strong';\n\n  return { score: Math.max(0, Math.min(100, score)), feedback, level };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAMA,SAAS,SAAS;AAKX,IAAM,oBAAoB,EAC9B,OAAO,EACP,IAAI,GAAG,mBAAmB,EAC1B,MAAM,sBAAsB,EAC5B,IAAI,KAAK,gBAAgB,EACzB;AAAA,EACC,CAAC,UAAU;AACT,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,UAAM,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC;AACjC,WAAO,UAAU,OAAO,SAAS,GAAG,KAAK,OAAO,SAAS;AAAA,EAC3D;AAAA,EACA;AACF,EACC,UAAU,CAAC,UAAU,cAAc,KAAK,CAAC;AAKrC,IAAMA,eAAc,EACxB,OAAO,EACP,IAAI,GAAG,mBAAmB,EAC1B,MAAM,sBAAsB;AAKxB,IAAMC,cAAa,EACvB,OAAO,EACP,IAAI,GAAG,kBAAkB,EACzB,IAAI,KAAK,eAAe,EACxB,MAAM,mBAAmB,kCAAkC;AAKvD,IAAMC,eAAc,EACxB,OAAO,EACP,MAAM,0BAA0B,6BAA6B;AAKzD,IAAMC,aAAY,EACtB,OAAO,EACP,IAAI,oBAAoB;AAKpB,IAAMC,cAAa,EACvB,OAAO,EACP,MAAM,uBAAuB,kCAAkC;AAK3D,IAAMC,qBAAoB,EAAE,OAAO;AAAA,EACxC,OAAO;AAAA,EACP,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AACpD,CAAC;AAKM,SAAS,cAAc,OAAuB;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,SAAO,MAAM,YAAY,EAAE,KAAK;AAClC;AAKO,SAAS,eAAe,OAAuB;AACpD,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AACA,SAAO,MACJ,QAAQ,SAAS,EAAE,EACnB,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,YAAY,EAAE,EACtB,KAAK;AACV;;;AC1FA;AASA,IAAM,cAAN,MAAkB;AAAA,EAAlB;AACE,SAAQ,aAAa,oBAAI,IAA2B;AACpD,SAAiB,eAAe,KAAK,KAAK;AAC1C;AAAA,SAAiB,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1C,MAAM,cAAc,WAAoC;AACtD,QAAI;AAEF,YAAM,KAAK,qBAAqB;AAGhC,YAAM,gBAAgB,MAAM,KAAK,KAAK,WAAW,OAAO,CAAC,EACtD,OAAO,UAAQ,KAAK,cAAc,aAAa,CAAC,KAAK,IAAI;AAE5D,UAAI,cAAc,UAAU,KAAK,wBAAwB;AAEvD,cAAM,SAAS,cAAc,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACxE,aAAK,WAAW,OAAO,OAAO,KAAK;AAAA,MACrC;AAGA,YAAM,aAAa,IAAI,WAAW,EAAE;AACpC,aAAO,gBAAgB,UAAU;AACjC,YAAM,QAAQ,MAAM;AAAA,QAAK;AAAA,QAAY,UACnC,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,MACnC,EAAE,KAAK,EAAE;AAET,YAAM,YAA2B;AAAA,QAC/B;AAAA,QACA;AAAA,QACA,WAAW,KAAK,IAAI;AAAA,QACpB,MAAM;AAAA,MACR;AAGA,WAAK,WAAW,IAAI,OAAO,SAAS;AACpC,YAAM,KAAK,cAAc;AAEzB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,OAAe,WAAqC;AACtE,QAAI;AAEF,UAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,cAAM,KAAK,WAAW;AAAA,MACxB;AAEA,YAAM,YAAY,KAAK,WAAW,IAAI,KAAK;AAE3C,UAAI,CAAC,WAAW;AACd,eAAO;AAAA,MACT;AAGA,UAAI,UAAU,cAAc,WAAW;AACrC,eAAO;AAAA,MACT;AAGA,UAAI,UAAU,MAAM;AAClB,eAAO;AAAA,MACT;AAGA,UAAI,KAAK,IAAI,IAAI,UAAU,YAAY,KAAK,cAAc;AACxD,aAAK,WAAW,OAAO,KAAK;AAC5B,cAAM,KAAK,cAAc;AACzB,eAAO;AAAA,MACT;AAGA,gBAAU,OAAO;AACjB,WAAK,WAAW,IAAI,OAAO,SAAS;AACpC,YAAM,KAAK,cAAc;AAEzB,aAAO;AAAA,IACT,SAAS,OAAO;AACd,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,WAA2C;AAE/D,QAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,YAAM,KAAK,WAAW;AAAA,IACxB;AAGA,eAAW,CAAC,OAAO,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AACrD,UACE,KAAK,cAAc,aACnB,CAAC,KAAK,QACL,KAAK,IAAI,IAAI,KAAK,YAAa,KAAK,cACrC;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAGA,WAAO,MAAM,KAAK,cAAc,SAAS;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,uBAAsC;AAClD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,gBAA0B,CAAC;AAEjC,eAAW,CAAC,OAAO,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AACrD,UAAI,KAAK,QAAS,MAAM,KAAK,YAAa,KAAK,cAAc;AAC3D,sBAAc,KAAK,KAAK;AAAA,MAC1B;AAAA,IACF;AAEA,kBAAc,QAAQ,WAAS,KAAK,WAAW,OAAO,KAAK,CAAC;AAE5D,QAAI,cAAc,SAAS,GAAG;AAC5B,YAAM,KAAK,cAAc;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBAA+B;AAC3C,QAAI;AACF,YAAM,cAAc,MAAM,KAAK,KAAK,WAAW,QAAQ,CAAC;AACxD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA,KAAK,UAAU,WAAW;AAAA,QAC1B,EAAE,SAAS,MAAM,QAAQ,KAAK,aAAa;AAAA,MAC7C;AAAA,IACF,SAAS,OAAO;AAAA,IAEhB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,aAA4B;AACxC,QAAI;AACF,YAAM,aAAa,MAAM,cAAc,QAAQ,aAAa;AAC5D,UAAI,YAAY;AACd,cAAM,cAAc,KAAK,MAAM,UAAU;AACzC,aAAK,aAAa,IAAI,IAAI,WAAW;AAErC,cAAM,KAAK,qBAAqB;AAAA,MAClC;AAAA,IACF,SAAS,OAAO;AACd,WAAK,WAAW,MAAM;AAAA,IACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,WAAkC;AACnD,UAAM,iBAA2B,CAAC;AAElC,eAAW,CAAC,OAAO,IAAI,KAAK,KAAK,WAAW,QAAQ,GAAG;AACrD,UAAI,KAAK,cAAc,WAAW;AAChC,uBAAe,KAAK,KAAK;AAAA,MAC3B;AAAA,IACF;AAEA,mBAAe,QAAQ,WAAS,KAAK,WAAW,OAAO,KAAK,CAAC;AAC7D,UAAM,KAAK,cAAc;AAAA,EAC3B;AACF;AAGO,IAAM,cAAc,IAAI,YAAY;AAG3C,eAAsB,kBAAkB,WAAoC;AAC1E,SAAO,YAAY,cAAc,SAAS;AAC5C;AAEA,eAAsB,kBAAkB,OAAe,WAAqC;AAC1F,SAAO,YAAY,cAAc,OAAO,SAAS;AACnD;AAEA,eAAsB,aAAa,WAA2C;AAC5E,SAAO,YAAY,gBAAgB,SAAS;AAC9C;;;AC/MA,SAAS,KAAAC,UAAS;AAGlB,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,kBAAkB;AAKjB,IAAM,oBAAoBA,GAC9B,OAAO,EACP,IAAI,KAAK,uBAAuB,EAChC;AAAA,EACC,CAAC,UAAU;AACT,WAAO,CAAC,uBAAuB,KAAK,aAAW,QAAQ,KAAK,KAAK,CAAC;AAAA,EACpE;AAAA,EACA;AACF,EACC,UAAU,CAAC,UAAU,oBAAoB,KAAK,CAAC;AAK3C,IAAM,sBAAsBA,GAChC,OAAO,EACP,IAAI,GAAG,4BAA4B,EACnC,IAAI,IAAI,qBAAqB,EAC7B,MAAM,4BAA4B,2BAA2B,EAC7D;AAAA,EACC,CAAC,eAAe;AACd,UAAM,gBAAgB;AAAA,MACpB;AAAA,MAAU;AAAA,MAAU;AAAA,MAAU;AAAA,MAAU;AAAA,MAAQ;AAAA,MAAU;AAAA,MAC1D;AAAA,MAAQ;AAAA,MAAS;AAAA,MAAQ;AAAA,MAAS;AAAA,MAAS;AAAA,MAAS;AAAA,IACtD;AACA,WAAO,CAAC,cAAc,SAAS,WAAW,YAAY,CAAC;AAAA,EACzD;AAAA,EACA;AACF;AAKK,IAAM,gBAAgBA,GAC1B,OAAO,EACP,MAAM,qDAAqD,yBAAyB;AAKhF,IAAM,oBAAoBA,GAC9B,OAAO,EACP,IAAI,oBAAoB,EACxB,IAAI,GAAG,sBAAsB,EAC7B,IAAI,KAAM,iBAAiB;AAKvB,SAAS,oBAAoB,OAAuB;AACzD,SAAO,MACJ,QAAQ,iBAAiB,EAAE,EAC3B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,GAAG;AACjB;AAKO,SAAS,gBAAgB,OAAuB;AACrD,SAAO,MACJ,QAAQ,OAAO,MAAM,EACrB,QAAQ,MAAM,KAAK,EACnB,QAAQ,MAAM,KAAK;AACxB;AAKO,SAAS,gBAAgB,SAA2D;AACzF,QAAM,YAAqC,CAAC;AAE5C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAElD,UAAM,gBAAgB,oBAAoB,UAAU,GAAG;AACvD,QAAI,CAAC,cAAc,SAAS;AAE1B,cAAQ,KAAK,uDAAuD,GAAG,EAAE;AACzE;AAAA,IACF;AAGA,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,kBAAkB,kBAAkB,UAAU,KAAK;AACzD,UAAI,gBAAgB,SAAS;AAC3B,kBAAU,GAAG,IAAI,gBAAgB;AAAA,MACnC;AAAA,IACF,WAAW,OAAO,UAAU,UAAU;AACpC,UAAI,OAAO,SAAS,KAAK,GAAG;AAC1B,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF,WAAW,OAAO,UAAU,WAAW;AACrC,gBAAU,GAAG,IAAI;AAAA,IACnB,WAAW,MAAM,QAAQ,KAAK,GAAG;AAE/B,YAAM,iBAAiB,MACpB,OAAO,UAAQ,OAAO,SAAS,YAAY,OAAO,SAAS,QAAQ,EACnE,IAAI,UAAQ,OAAO,SAAS,WAAW,oBAAoB,IAAI,IAAI,IAAI,EACvE,MAAM,GAAG,GAAG;AAEf,UAAI,eAAe,SAAS,GAAG;AAC7B,kBAAU,GAAG,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAcO,SAAS,qBAAqB,QAA0C;AAC7E,QAAM,OAAwB,CAAC;AAG/B,MAAI,OAAO,QAAQ;AACjB,UAAM,eAAe,OAAO,OAAO,MAAM,GAAG,EAAE,IAAI,WAAS,MAAM,KAAK,CAAC;AACvE,UAAM,cAAc,aAAa,OAAO,WAAS;AAC/C,aAAO,oBAAoB,UAAU,KAAK,EAAE;AAAA,IAC9C,CAAC;AAED,QAAI,YAAY,SAAS,GAAG;AAC1B,WAAK,SAAS,YAAY,KAAK,IAAI;AAAA,IACrC;AAAA,EACF;AAGA,MAAI,OAAO,SAAS;AAClB,SAAK,UAAU,gBAAgB,OAAO,OAAO;AAAA,EAC/C;AAGA,MAAI,OAAO,SAAS;AAClB,UAAM,oBAAoB,cAAc,UAAU,OAAO,OAAO;AAChE,QAAI,kBAAkB,SAAS;AAC7B,WAAK,UAAU,kBAAkB;AAAA,IACnC;AAAA,EACF;AAGA,MAAI,OAAO,UAAU,QAAW;AAC9B,UAAM,kBAAkB,kBAAkB,UAAU,OAAO,KAAK;AAChE,QAAI,gBAAgB,SAAS;AAC3B,WAAK,QAAQ,gBAAgB;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,QAAW;AAC/B,UAAM,mBAAmB,kBAAkB,UAAU,OAAO,MAAM;AAClE,QAAI,iBAAiB,SAAS;AAC5B,WAAK,SAAS,iBAAiB;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,OAAO,QAAQ;AACjB,UAAM,mBAAmB,kBAAkB,UAAU,OAAO,MAAM;AAClE,QAAI,iBAAiB,SAAS;AAC5B,WAAK,SAAS,iBAAiB;AAAA,IACjC;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,mBAAmB,OAIjC;AACA,QAAM,mBAA6B,CAAC;AACpC,MAAI,UAAkD;AAEtD,yBAAuB,QAAQ,CAAC,SAAS,UAAU;AACjD,QAAI,QAAQ,KAAK,KAAK,GAAG;AACvB,uBAAiB,KAAK,WAAW,QAAQ,CAAC,EAAE;AAG5C,UAAI,QAAQ,GAAG;AACb,kBAAU;AAAA,MACZ,WAAW,QAAQ,KAAK,YAAY,YAAY;AAC9C,kBAAU;AAAA,MACZ,WAAW,QAAQ,MAAM,CAAC,CAAC,YAAY,MAAM,EAAE,SAAS,OAAO,GAAG;AAChE,kBAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,cAAc,iBAAiB,SAAS;AAAA,IACxC,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACF;;;AC3OA,SAAS,KAAAC,UAAS;AAGlB,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EAAY;AAAA,EAAU;AAAA,EAAa;AAAA,EAAU;AAAA,EAAU;AAAA,EACvD;AAAA,EAAS;AAAA,EAAW;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AACzD,CAAC;AAGD,IAAM,gBAAgB;AAAA,EACpB;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAKO,IAAMC,wBAAuBD,GACjC,OAAO,EACP,IAAI,GAAG,6CAA6C,EACpD,IAAI,KAAK,yCAAyC,EAClD;AAAA,EACC,CAAC,aAAa,QAAQ,KAAK,QAAQ;AAAA,EACnC;AACF,EACC;AAAA,EACC,CAAC,aAAa,QAAQ,KAAK,QAAQ;AAAA,EACnC;AACF,EACC;AAAA,EACC,CAAC,aAAa,KAAK,KAAK,QAAQ;AAAA,EAChC;AACF,EACC;AAAA,EACC,CAAC,aAAa,wCAAwC,KAAK,QAAQ;AAAA,EACnE;AACF,EACC;AAAA,EACC,CAAC,aAAa,CAAC,iBAAiB,IAAI,SAAS,YAAY,CAAC;AAAA,EAC1D;AACF,EACC;AAAA,EACC,CAAC,aAAa,CAAC,cAAc,KAAK,aAAW,QAAQ,KAAK,QAAQ,CAAC;AAAA,EACnE;AACF,EACC;AAAA,EACC,CAAC,aAAa;AAEZ,UAAM,mBAAmB,CAAC,UAAU,UAAU,UAAU,YAAY;AACpE,WAAO,CAAC,iBAAiB;AAAA,MAAK,aAC5B,SAAS,YAAY,EAAE,SAAS,OAAO;AAAA,IACzC;AAAA,EACF;AAAA,EACA;AACF;AAKK,IAAME,kBAAiBF,GAC3B,OAAO,EACP,IAAI,GAAG,6CAA6C,EACpD,IAAI,KAAK,yCAAyC;AAK9C,SAAS,0BAA0B,UAIxC;AACA,MAAI,QAAQ;AACZ,QAAM,WAAqB,CAAC;AAG5B,MAAI,SAAS,UAAU,EAAG,UAAS;AAAA,WAC1B,SAAS,UAAU,EAAG,UAAS;AAAA,MACnC,UAAS,KAAK,2BAA2B;AAG9C,MAAI,QAAQ,KAAK,QAAQ,EAAG,UAAS;AAAA,MAChC,UAAS,KAAK,uBAAuB;AAE1C,MAAI,QAAQ,KAAK,QAAQ,EAAG,UAAS;AAAA,MAChC,UAAS,KAAK,uBAAuB;AAE1C,MAAI,KAAK,KAAK,QAAQ,EAAG,UAAS;AAAA,MAC7B,UAAS,KAAK,aAAa;AAEhC,MAAI,wCAAwC,KAAK,QAAQ,EAAG,UAAS;AAAA,MAChE,UAAS,KAAK,wBAAwB;AAG3C,MAAI,SAAS,UAAU,GAAI,UAAS;AACpC,MAAI,eAAe,KAAK,QAAQ,EAAG,UAAS;AAG5C,MAAI,iBAAiB,IAAI,SAAS,YAAY,CAAC,GAAG;AAChD,aAAS;AACT,aAAS,KAAK,wBAAwB;AAAA,EACxC;AAEA,MAAI,cAAc,KAAK,aAAW,QAAQ,KAAK,QAAQ,CAAC,GAAG;AACzD,aAAS;AACT,aAAS,KAAK,4BAA4B;AAAA,EAC5C;AAGA,MAAI;AACJ,MAAI,QAAQ,GAAI,SAAQ;AAAA,WACf,QAAQ,GAAI,SAAQ;AAAA,WACpB,QAAQ,GAAI,SAAQ;AAAA,WACpB,QAAQ,GAAI,SAAQ;AAAA,MACxB,SAAQ;AAEb,SAAO,EAAE,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,GAAG,UAAU,MAAM;AACrE;","names":["emailSchema","nameSchema","phoneSchema","urlSchema","dateSchema","secureLoginSchema","z","z","securePasswordSchema","passwordSchema"]}

package/docs/README.md

@@ -119,6 +119,10 @@ const columns = [
   data={[{ id: 'evt-1', name: 'Conference', status: 'published' }]}
   columns={columns}
   features={{ search: true, pagination: true, sorting: true }}
+  rbac={{
+    resource: 'events',
+    actions: []
+  }}
 />;
 ```
 

package/docs/api/classes/ColumnFactory.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / ColumnFactory
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / ColumnFactory
 
 # Class: ColumnFactory\<TData\>
 

package/docs/api/classes/ErrorBoundary.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / ErrorBoundary
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / ErrorBoundary
 
 # Class: ErrorBoundary
 

package/docs/api/classes/InvalidScopeError.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / InvalidScopeError
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / InvalidScopeError
 
 # Class: InvalidScopeError
 

package/docs/api/classes/MissingUserContextError.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / MissingUserContextError
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / MissingUserContextError
 
 # Class: MissingUserContextError
 

package/docs/api/classes/OrganisationContextRequiredError.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / OrganisationContextRequiredError
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / OrganisationContextRequiredError
 
 # Class: OrganisationContextRequiredError
 

package/docs/api/classes/PermissionDeniedError.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / PermissionDeniedError
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / PermissionDeniedError
 
 # Class: PermissionDeniedError
 

package/docs/api/classes/PublicErrorBoundary.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / PublicErrorBoundary
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / PublicErrorBoundary
 
 # Class: PublicErrorBoundary
 

package/docs/api/classes/RBACAuditManager.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / RBACAuditManager
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / RBACAuditManager
 
 # Class: RBACAuditManager
 
@@ -16,6 +16,7 @@ Handles emission of structured audit events for all RBAC operations.
 
 - [setEnabled](RBACAuditManager.md#setenabled)
 - [isEnabled](RBACAuditManager.md#isenabled)
+- [setFallbackEnabled](RBACAuditManager.md#setfallbackenabled)
 - [emitEvent](RBACAuditManager.md#emitevent)
 - [emitPermissionCheck](RBACAuditManager.md#emitpermissioncheck)
 - [emitPermissionDenied](RBACAuditManager.md#emitpermissiondenied)
@@ -43,7 +44,7 @@ Handles emission of structured audit events for all RBAC operations.
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:112](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L112)
+[packages/core/src/rbac/audit.ts:113](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L113)
 
 ## Methods
 
@@ -65,7 +66,7 @@ Enable or disable audit logging
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:121](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L121)
+[packages/core/src/rbac/audit.ts:122](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L122)
 
 ___
 
@@ -83,7 +84,29 @@ True if audit logging is enabled
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:130](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L130)
+[packages/core/src/rbac/audit.ts:131](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L131)
+
+___
+
+### setFallbackEnabled
+
+▸ **setFallbackEnabled**(`enabled`): `void`
+
+Enable or disable fallback logging (console logging when database fails)
+
+#### Parameters
+
+| Name | Type | Description |
+| :------ | :------ | :------ |
+| `enabled` | `boolean` | Whether to enable fallback logging |
+
+#### Returns
+
+`void`
+
+#### Defined in
+
+[packages/core/src/rbac/audit.ts:140](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L140)
 
 ___
 
@@ -107,7 +130,7 @@ Promise that resolves when event is logged
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:140](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L140)
+[packages/core/src/rbac/audit.ts:150](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L150)
 
 ___
 
@@ -129,7 +152,7 @@ Emit a permission check audit event
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:234](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L234)
+[packages/core/src/rbac/audit.ts:269](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L269)
 
 ___
 
@@ -151,7 +174,7 @@ Emit a permission denied audit event
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:246](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L246)
+[packages/core/src/rbac/audit.ts:281](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L281)
 
 ___
 
@@ -173,7 +196,7 @@ Emit a role granted audit event
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:258](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L258)
+[packages/core/src/rbac/audit.ts:293](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L293)
 
 ___
 
@@ -195,7 +218,7 @@ Emit a role revoked audit event
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:270](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L270)
+[packages/core/src/rbac/audit.ts:305](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L305)
 
 ___
 
@@ -217,7 +240,7 @@ Emit an RLS denied audit event
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:282](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L282)
+[packages/core/src/rbac/audit.ts:317](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L317)
 
 ___
 
@@ -242,7 +265,7 @@ Promise resolving to audit events
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:296](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L296)
+[packages/core/src/rbac/audit.ts:331](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L331)
 
 ___
 
@@ -267,4 +290,4 @@ Promise resolving to audit events
 
 #### Defined in
 
-[packages/core/src/rbac/audit.ts:318](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L318)
+[packages/core/src/rbac/audit.ts:353](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/audit.ts#L353)

package/docs/api/classes/RBACCache.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / RBACCache
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / RBACCache
 
 # Class: RBACCache
 

package/docs/api/classes/RBACEngine.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / RBACEngine
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / RBACEngine
 
 # Class: RBACEngine
 

package/docs/api/classes/RBACError.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / RBACError
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / RBACError
 
 # Class: RBACError
 

package/docs/api/classes/RBACNotInitializedError.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / RBACNotInitializedError
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / RBACNotInitializedError
 
 # Class: RBACNotInitializedError
 

package/docs/api/classes/SecureSupabaseClient.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / SecureSupabaseClient
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / SecureSupabaseClient
 
 # Class: SecureSupabaseClient
 

package/docs/api/classes/StorageUtils.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / StorageUtils
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / StorageUtils
 
 # Class: StorageUtils
 

package/docs/api/enums/FileCategory.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileCategory
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileCategory
 
 # Enumeration: FileCategory
 

package/docs/api/interfaces/AggregateConfig.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / AggregateConfig
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / AggregateConfig
 
 # Interface: AggregateConfig
 

package/docs/api/interfaces/ButtonProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / ButtonProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / ButtonProps
 
 # Interface: ButtonProps
 

package/docs/api/interfaces/CardProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / CardProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / CardProps
 
 # Interface: CardProps
 

package/docs/api/interfaces/ColorPalette.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / ColorPalette
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / ColorPalette
 
 # Interface: ColorPalette
 

package/docs/api/interfaces/ColorShade.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / ColorShade
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / ColorShade
 
 # Interface: ColorShade
 

package/docs/api/interfaces/DataAccessRecord.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / DataAccessRecord
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / DataAccessRecord
 
 # Interface: DataAccessRecord
 

package/docs/api/interfaces/DataRecord.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / DataRecord
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / DataRecord
 
 # Interface: DataRecord
 

package/docs/api/interfaces/DataTableAction.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / DataTableAction
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / DataTableAction
 
 # Interface: DataTableAction\<TData\>
 

package/docs/api/interfaces/DataTableColumn.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / DataTableColumn
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / DataTableColumn
 
 # Interface: DataTableColumn\<TData\>
 

package/docs/api/interfaces/DataTableProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / DataTableProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / DataTableProps
 
 # Interface: DataTableProps\<TData\>
 

package/docs/api/interfaces/DataTableToolbarButton.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / DataTableToolbarButton
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / DataTableToolbarButton
 
 # Interface: DataTableToolbarButton
 

package/docs/api/interfaces/EmptyStateConfig.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / EmptyStateConfig
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / EmptyStateConfig
 
 # Interface: EmptyStateConfig
 

package/docs/api/interfaces/EnhancedNavigationMenuProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / EnhancedNavigationMenuProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / EnhancedNavigationMenuProps
 
 # Interface: EnhancedNavigationMenuProps
 

package/docs/api/interfaces/EventAppRoleData.md

@@ -0,0 +1,71 @@
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / EventAppRoleData
+
+# Interface: EventAppRoleData
+
+## Hierarchy
+
+- **`EventAppRoleData`**
+
+  ↳ [`RevokeEventAppRoleParams`](RevokeEventAppRoleParams.md)
+
+  ↳ [`GrantEventAppRoleParams`](GrantEventAppRoleParams.md)
+
+## Table of contents
+
+### Properties
+
+- [user\_id](EventAppRoleData.md#user_id)
+- [organisation\_id](EventAppRoleData.md#organisation_id)
+- [event\_id](EventAppRoleData.md#event_id)
+- [app\_id](EventAppRoleData.md#app_id)
+- [role](EventAppRoleData.md#role)
+
+## Properties
+
+### user\_id
+
+• **user\_id**: `string`
+
+#### Defined in
+
+[packages/core/src/rbac/hooks/useRoleManagement.ts:44](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRoleManagement.ts#L44)
+
+___
+
+### organisation\_id
+
+• **organisation\_id**: `string`
+
+#### Defined in
+
+[packages/core/src/rbac/hooks/useRoleManagement.ts:45](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRoleManagement.ts#L45)
+
+___
+
+### event\_id
+
+• **event\_id**: `string`
+
+#### Defined in
+
+[packages/core/src/rbac/hooks/useRoleManagement.ts:46](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRoleManagement.ts#L46)
+
+___
+
+### app\_id
+
+• **app\_id**: `string`
+
+#### Defined in
+
+[packages/core/src/rbac/hooks/useRoleManagement.ts:47](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRoleManagement.ts#L47)
+
+___
+
+### role
+
+• **role**: ``"viewer"`` \| ``"participant"`` \| ``"planner"`` \| ``"event_admin"``
+
+#### Defined in
+
+[packages/core/src/rbac/hooks/useRoleManagement.ts:48](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/hooks/useRoleManagement.ts#L48)

package/docs/api/interfaces/FileDisplayProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileDisplayProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileDisplayProps
 
 # Interface: FileDisplayProps
 

package/docs/api/interfaces/FileMetadata.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileMetadata
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileMetadata
 
 # Interface: FileMetadata
 

package/docs/api/interfaces/FileReference.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileReference
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileReference
 
 # Interface: FileReference
 

package/docs/api/interfaces/FileSizeLimits.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileSizeLimits
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileSizeLimits
 
 # Interface: FileSizeLimits
 

package/docs/api/interfaces/FileUploadOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileUploadOptions
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileUploadOptions
 
 # Interface: FileUploadOptions
 

package/docs/api/interfaces/FileUploadProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FileUploadProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FileUploadProps
 
 # Interface: FileUploadProps
 

package/docs/api/interfaces/FooterProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.115](../README.md) / [Exports](../modules.md) / FooterProps
+[@jmruthers/pace-core - v0.5.117](../README.md) / [Exports](../modules.md) / FooterProps
 
 # Interface: FooterProps