@jmruthers/pace-core 0.5.173 → 0.5.175

package/dist/{DataTable-NHLYYPTC.js → DataTable-INOWMY42.js}

@@ -60,8 +60,8 @@ import {
   sum,
   validateHierarchicalData,
   validatePaginationConfig
-} from "./chunk-JLQBNZEG.js";
-import "./chunk-4X7FFPG5.js";
+} from "./chunk-URRWD5AR.js";
+import "./chunk-KY4K2RTG.js";
 import "./chunk-BVYWGZVV.js";
 import "./chunk-SBVILCCA.js";
 import {
@@ -170,4 +170,4 @@ export {
   validateHierarchicalData,
   validatePaginationConfig
 };
-//# sourceMappingURL=DataTable-NHLYYPTC.js.map
+//# sourceMappingURL=DataTable-INOWMY42.js.map

package/dist/{chunk-LS353YLY.js → chunk-FFKNH6U5.js}

@@ -113,6 +113,25 @@ function formatDate(date) {
     day: "numeric"
   });
 }
+function formatTime(date) {
+  const dateObj = typeof date === "string" || typeof date === "number" ? new Date(date) : date;
+  return dateObj.toLocaleTimeString("en-GB", {
+    hour: "2-digit",
+    minute: "2-digit",
+    hour12: false
+  });
+}
+function formatDateTime(date) {
+  const dateObj = typeof date === "string" || typeof date === "number" ? new Date(date) : date;
+  return dateObj.toLocaleString("en-GB", {
+    year: "numeric",
+    month: "short",
+    day: "numeric",
+    hour: "2-digit",
+    minute: "2-digit",
+    hour12: false
+  });
+}
 function formatCurrency(value, currencyCode = "USD", locale = "en-US") {
   return new Intl.NumberFormat(locale, {
     style: "currency",
@@ -170,10 +189,12 @@ export {
   getCurrentAppName,
   getCurrentAppId,
   formatDate,
+  formatTime,
+  formatDateTime,
   formatCurrency,
   formatNumber,
   formatPercent,
   formatCompactNumber,
   formatFileSize
 };
-//# sourceMappingURL=chunk-LS353YLY.js.map
+//# sourceMappingURL=chunk-FFKNH6U5.js.map

package/dist/{chunk-LS353YLY.js.map → chunk-FFKNH6U5.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/context/sessionTracking.ts","../src/utils/app/appConfig.ts","../src/utils/formatting/formatting.ts"],"sourcesContent":["import type { SupabaseClient } from '@supabase/supabase-js';\nimport { createLogger } from '../core/logger';\n\nconst log = createLogger('SessionTracking');\n\n// Define the tracking parameters locally since old RBAC types are removed\ninterface TrackUserSessionParams {\n  p_session_type: 'event_switch' | 'session_expired';\n  p_event_id?: string;\n  p_app_id?: string;\n  ip_address?: string;\n  user_agent?: string;\n}\n\n/**\n * Hook for manual session tracking (event switches and session expiration).\n * \n * Note: Login and logout tracking is automatically handled by UnifiedAuthProvider.\n * You should only use this hook for tracking event switches or session expirations.\n * \n * @param supabaseClient - Supabase client instance\n * @param appName - Optional application name for tracking\n * @returns Object containing tracking functions for event switches and session expiration\n */\nexport function useSessionTracking(supabaseClient: SupabaseClient, appName?: string) {\n  // Resolve app name to app_id\n  const resolveAppId = async (): Promise<string | undefined> => {\n    if (!appName) return undefined;\n    \n    try {\n      const { data, error } = await supabaseClient\n        .from('rbac_apps')\n        .select('id')\n        .eq('name', appName)\n        .eq('is_active', true)\n        .single();\n      \n      if (error || !data) {\n        log.warn('App not found or inactive:', appName);\n        return undefined;\n      }\n      \n      return data.id;\n    } catch (error) {\n      log.error('Failed to resolve app ID:', error);\n      return undefined;\n    }\n  };\n  /**\n   * Track an event switch\n   * @param eventId - ID of the event being switched to\n   */\n  const trackEventSwitch = async (eventId: string) => {\n    try {\n      const { data: { user } } = await supabaseClient.auth.getUser();\n      if (!user) {\n        log.warn('No authenticated user found for session tracking');\n        return;\n      }\n\n      const appId = await resolveAppId();\n\n      const params: TrackUserSessionParams = {\n        p_session_type: 'event_switch',\n        p_event_id: eventId,\n        p_app_id: appId\n      };\n\n      const { error } = await supabaseClient.rpc('rbac_session_track', {\n        p_user_id: user?.id,\n        p_session_type: params.p_session_type,\n        p_event_id: params.p_event_id,\n        p_app_id: params.p_app_id,\n        p_ip_address: params.ip_address,\n        p_user_agent: params.user_agent\n      });\n      \n      if (error) {\n        log.error('Failed to track event switch session:', error);\n      }\n    } catch (error) {\n      log.error('Failed to track event switch:', error);\n    }\n  };\n\n  /**\n   * Track a session expiration\n   */\n  const trackSessionExpired = async () => {\n    try {\n      const { data: { user } } = await supabaseClient.auth.getUser();\n      if (!user) {\n        log.warn('No authenticated user found for session tracking');\n        return;\n      }\n\n      const appId = await resolveAppId();\n\n      const params: TrackUserSessionParams = {\n        p_session_type: 'session_expired',\n        p_app_id: appId\n      };\n\n      const { error } = await supabaseClient.rpc('rbac_session_track', {\n        p_user_id: user?.id,\n        p_session_type: params.p_session_type,\n        p_event_id: params.p_event_id,\n        p_app_id: params.p_app_id,\n        p_ip_address: params.ip_address,\n        p_user_agent: params.user_agent\n      });\n      \n      if (error) {\n        log.error('Failed to track session expiration:', error);\n      }\n    } catch (error) {\n      log.error('Failed to track session expiration:', error);\n    }\n  };\n\n  return {\n    trackEventSwitch,\n    trackSessionExpired\n  };\n} ","\n/**\n * Application configuration utilities\n */\n\nexport interface AppConfig {\n  appName: string;\n  appId: string;\n}\n\nlet currentAppConfig: AppConfig | null = null;\n\n/**\n * Set the current application configuration\n */\nexport function setAppConfig(config: AppConfig) {\n  currentAppConfig = config;\n}\n\n/**\n * Get the current application configuration\n */\nexport function getAppConfig(): AppConfig {\n  if (!currentAppConfig) {\n    // Fallback to environment or default\n    const appName = import.meta.env.REACT_APP_NAME || 'PACE';\n    return {\n      appName,\n      appId: appName\n    };\n  }\n  return currentAppConfig;\n}\n\n/**\n * Get the current app name\n */\nexport function getCurrentAppName(): string {\n  return getAppConfig().appName;\n}\n\n/**\n * Get the current app ID\n */\nexport function getCurrentAppId(): string {\n  return getAppConfig().appId;\n}\n","/**\n * Utility functions for formatting data in the application\n */\n\n/**\n * Format a date as a readable string in \"dd mmm yyyy\" format (e.g., \"15 Jun 2024\")\n */\nexport function formatDate(date: Date | string | number): string {\n  const dateObj = typeof date === 'string' || typeof date === 'number' \n    ? new Date(date) \n    : date;\n  \n  // Use 'en-GB' locale to ensure \"dd mmm yyyy\" format (e.g., \"15 Jun 2024\")\n  return dateObj.toLocaleDateString('en-GB', {\n    year: 'numeric',\n    month: 'short',\n    day: 'numeric'\n  });\n}\n\n/**\n * Format a number as a currency\n */\nexport function formatCurrency(value: number, currencyCode = 'USD', locale = 'en-US'): string {\n  return new Intl.NumberFormat(locale, {\n    style: 'currency',\n    currency: currencyCode,\n  }).format(value);\n}\n\n/**\n * Format a number with custom options\n */\nexport function formatNumber(\n  value: number,\n  options: Intl.NumberFormatOptions = {},\n  locale = 'en-US'\n): string {\n  return new Intl.NumberFormat(locale, options).format(value);\n}\n\n/**\n * Format a number as a percentage.\n * \n * The third parameter can be either:\n * - A number for fixed decimal places (backward compatible): `formatPercent(0.81, 'en-US', 2)`\n * - An options object with:\n *   - `decimals`: Fixed number of decimal places (default: 1)\n *   - `preserveDecimals`: Auto-detect and preserve decimal places from the input value\n *   - `maxDecimals`: Maximum decimal places when preserving (default: 10)\n * \n * @param value - The percentage value as a decimal (e.g., 0.81 for 0.81%)\n * @param locale - The locale string (default: 'en-US')\n * @param decimalsOrOptions - Either a number for fixed decimals, or an options object with:\n *   - `decimals` - Fixed number of decimal places (default: 1)\n *   - `preserveDecimals` - Auto-detect and preserve decimal places from the input value\n *   - `maxDecimals` - Maximum decimal places when preserving (default: 10)\n * @returns Formatted percentage string (e.g., \"0.81%\", \"81%\")\n * \n * @example\n * ```ts\n * // Fixed decimals (default behavior)\n * formatPercent(0.5) // '0.5%'\n * formatPercent(0.81, 'en-US', 1) // '0.8%' (loses precision)\n * \n * // Preserve decimal places dynamically\n * formatPercent(0.81, 'en-US', { preserveDecimals: true }) // '0.81%'\n * formatPercent(0.8123, 'en-US', { preserveDecimals: true, maxDecimals: 2 }) // '0.81%'\n * ```\n */\nexport function formatPercent(\n  value: number,\n  locale: string = 'en-US',\n  decimalsOrOptions?: number | {\n    decimals?: number;\n    preserveDecimals?: boolean;\n    maxDecimals?: number;\n  }\n): string {\n  let decimals: number;\n\n  // Backward compatibility: if decimalsOrOptions is a number, use it directly\n  if (typeof decimalsOrOptions === 'number') {\n    decimals = decimalsOrOptions;\n  } else if (decimalsOrOptions && typeof decimalsOrOptions === 'object') {\n    // New options object: check if we should preserve decimals\n    if (decimalsOrOptions.preserveDecimals) {\n      const valueStr = value.toString();\n      const decimalIndex = valueStr.indexOf('.');\n      \n      if (decimalIndex !== -1) {\n        const detectedDecimals = valueStr.length - decimalIndex - 1;\n        const maxDecimals = decimalsOrOptions.maxDecimals ?? 10;\n        decimals = Math.min(detectedDecimals, maxDecimals);\n      } else {\n        decimals = 0;\n      }\n    } else {\n      decimals = decimalsOrOptions.decimals ?? 1;\n    }\n  } else {\n    decimals = 1;\n  }\n\n  return new Intl.NumberFormat(locale, {\n    style: 'percent',\n    minimumFractionDigits: decimals,\n    maximumFractionDigits: decimals,\n  }).format(value / 100);\n}\n\n/**\n * Format a large number with abbreviations (K, M, B)\n */\nexport function formatCompactNumber(value: number, locale = 'en-US'): string {\n  return new Intl.NumberFormat(locale, {\n    notation: 'compact',\n    compactDisplay: 'short'\n  }).format(value);\n}\n\n/**\n * Format a file size in bytes to a human-readable string\n */\nexport function formatFileSize(bytes: number): string {\n  if (bytes === 0) return '0 Bytes';\n  \n  const k = 1024;\n  const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB', 'PB'];\n  const i = Math.floor(Math.log(bytes) / Math.log(k));\n  \n  return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];\n}\n"],"mappings":";;;;;;AACA;AAEA,IAAM,MAAM,aAAa,iBAAiB;AAqBnC,SAAS,mBAAmB,gBAAgC,SAAkB;AAEnF,QAAM,eAAe,YAAyC;AAC5D,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI;AACF,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,eAC3B,KAAK,WAAW,EAChB,OAAO,IAAI,EACX,GAAG,QAAQ,OAAO,EAClB,GAAG,aAAa,IAAI,EACpB,OAAO;AAEV,UAAI,SAAS,CAAC,MAAM;AAClB,YAAI,KAAK,8BAA8B,OAAO;AAC9C,eAAO;AAAA,MACT;AAEA,aAAO,KAAK;AAAA,IACd,SAAS,OAAO;AACd,UAAI,MAAM,6BAA6B,KAAK;AAC5C,aAAO;AAAA,IACT;AAAA,EACF;AAKA,QAAM,mBAAmB,OAAO,YAAoB;AAClD,QAAI;AACF,YAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,eAAe,KAAK,QAAQ;AAC7D,UAAI,CAAC,MAAM;AACT,YAAI,KAAK,kDAAkD;AAC3D;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM,aAAa;AAEjC,YAAM,SAAiC;AAAA,QACrC,gBAAgB;AAAA,QAChB,YAAY;AAAA,QACZ,UAAU;AAAA,MACZ;AAEA,YAAM,EAAE,MAAM,IAAI,MAAM,eAAe,IAAI,sBAAsB;AAAA,QAC/D,WAAW,MAAM;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,cAAc,OAAO;AAAA,MACvB,CAAC;AAED,UAAI,OAAO;AACT,YAAI,MAAM,yCAAyC,KAAK;AAAA,MAC1D;AAAA,IACF,SAAS,OAAO;AACd,UAAI,MAAM,iCAAiC,KAAK;AAAA,IAClD;AAAA,EACF;AAKA,QAAM,sBAAsB,YAAY;AACtC,QAAI;AACF,YAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,eAAe,KAAK,QAAQ;AAC7D,UAAI,CAAC,MAAM;AACT,YAAI,KAAK,kDAAkD;AAC3D;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM,aAAa;AAEjC,YAAM,SAAiC;AAAA,QACrC,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACZ;AAEA,YAAM,EAAE,MAAM,IAAI,MAAM,eAAe,IAAI,sBAAsB;AAAA,QAC/D,WAAW,MAAM;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,cAAc,OAAO;AAAA,MACvB,CAAC;AAED,UAAI,OAAO;AACT,YAAI,MAAM,uCAAuC,KAAK;AAAA,MACxD;AAAA,IACF,SAAS,OAAO;AACd,UAAI,MAAM,uCAAuC,KAAK;AAAA,IACxD;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;;;AClHA,IAAI,mBAAqC;AAKlC,SAAS,aAAa,QAAmB;AAC9C,qBAAmB;AACrB;AAKO,SAAS,eAA0B;AACxC,MAAI,CAAC,kBAAkB;AAErB,UAAM,UAAU,YAAY,IAAI,kBAAkB;AAClD,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAKO,SAAS,oBAA4B;AAC1C,SAAO,aAAa,EAAE;AACxB;AAKO,SAAS,kBAA0B;AACxC,SAAO,aAAa,EAAE;AACxB;;;ACvCO,SAAS,WAAW,MAAsC;AAC/D,QAAM,UAAU,OAAO,SAAS,YAAY,OAAO,SAAS,WACxD,IAAI,KAAK,IAAI,IACb;AAGJ,SAAO,QAAQ,mBAAmB,SAAS;AAAA,IACzC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,EACP,CAAC;AACH;AAKO,SAAS,eAAe,OAAe,eAAe,OAAO,SAAS,SAAiB;AAC5F,SAAO,IAAI,KAAK,aAAa,QAAQ;AAAA,IACnC,OAAO;AAAA,IACP,UAAU;AAAA,EACZ,CAAC,EAAE,OAAO,KAAK;AACjB;AAKO,SAAS,aACd,OACA,UAAoC,CAAC,GACrC,SAAS,SACD;AACR,SAAO,IAAI,KAAK,aAAa,QAAQ,OAAO,EAAE,OAAO,KAAK;AAC5D;AA+BO,SAAS,cACd,OACA,SAAiB,SACjB,mBAKQ;AACR,MAAI;AAGJ,MAAI,OAAO,sBAAsB,UAAU;AACzC,eAAW;AAAA,EACb,WAAW,qBAAqB,OAAO,sBAAsB,UAAU;AAErE,QAAI,kBAAkB,kBAAkB;AACtC,YAAM,WAAW,MAAM,SAAS;AAChC,YAAM,eAAe,SAAS,QAAQ,GAAG;AAEzC,UAAI,iBAAiB,IAAI;AACvB,cAAM,mBAAmB,SAAS,SAAS,eAAe;AAC1D,cAAM,cAAc,kBAAkB,eAAe;AACrD,mBAAW,KAAK,IAAI,kBAAkB,WAAW;AAAA,MACnD,OAAO;AACL,mBAAW;AAAA,MACb;AAAA,IACF,OAAO;AACL,iBAAW,kBAAkB,YAAY;AAAA,IAC3C;AAAA,EACF,OAAO;AACL,eAAW;AAAA,EACb;AAEA,SAAO,IAAI,KAAK,aAAa,QAAQ;AAAA,IACnC,OAAO;AAAA,IACP,uBAAuB;AAAA,IACvB,uBAAuB;AAAA,EACzB,CAAC,EAAE,OAAO,QAAQ,GAAG;AACvB;AAKO,SAAS,oBAAoB,OAAe,SAAS,SAAiB;AAC3E,SAAO,IAAI,KAAK,aAAa,QAAQ;AAAA,IACnC,UAAU;AAAA,IACV,gBAAgB;AAAA,EAClB,CAAC,EAAE,OAAO,KAAK;AACjB;AAKO,SAAS,eAAe,OAAuB;AACpD,MAAI,UAAU,EAAG,QAAO;AAExB,QAAM,IAAI;AACV,QAAM,QAAQ,CAAC,SAAS,MAAM,MAAM,MAAM,MAAM,IAAI;AACpD,QAAM,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC;AAElD,SAAO,YAAY,QAAQ,KAAK,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,MAAM,MAAM,CAAC;AACxE;","names":[]}
+{"version":3,"sources":["../src/utils/context/sessionTracking.ts","../src/utils/app/appConfig.ts","../src/utils/formatting/formatting.ts"],"sourcesContent":["import type { SupabaseClient } from '@supabase/supabase-js';\nimport { createLogger } from '../core/logger';\n\nconst log = createLogger('SessionTracking');\n\n// Define the tracking parameters locally since old RBAC types are removed\ninterface TrackUserSessionParams {\n  p_session_type: 'event_switch' | 'session_expired';\n  p_event_id?: string;\n  p_app_id?: string;\n  ip_address?: string;\n  user_agent?: string;\n}\n\n/**\n * Hook for manual session tracking (event switches and session expiration).\n * \n * Note: Login and logout tracking is automatically handled by UnifiedAuthProvider.\n * You should only use this hook for tracking event switches or session expirations.\n * \n * @param supabaseClient - Supabase client instance\n * @param appName - Optional application name for tracking\n * @returns Object containing tracking functions for event switches and session expiration\n */\nexport function useSessionTracking(supabaseClient: SupabaseClient, appName?: string) {\n  // Resolve app name to app_id\n  const resolveAppId = async (): Promise<string | undefined> => {\n    if (!appName) return undefined;\n    \n    try {\n      const { data, error } = await supabaseClient\n        .from('rbac_apps')\n        .select('id')\n        .eq('name', appName)\n        .eq('is_active', true)\n        .single();\n      \n      if (error || !data) {\n        log.warn('App not found or inactive:', appName);\n        return undefined;\n      }\n      \n      return data.id;\n    } catch (error) {\n      log.error('Failed to resolve app ID:', error);\n      return undefined;\n    }\n  };\n  /**\n   * Track an event switch\n   * @param eventId - ID of the event being switched to\n   */\n  const trackEventSwitch = async (eventId: string) => {\n    try {\n      const { data: { user } } = await supabaseClient.auth.getUser();\n      if (!user) {\n        log.warn('No authenticated user found for session tracking');\n        return;\n      }\n\n      const appId = await resolveAppId();\n\n      const params: TrackUserSessionParams = {\n        p_session_type: 'event_switch',\n        p_event_id: eventId,\n        p_app_id: appId\n      };\n\n      const { error } = await supabaseClient.rpc('rbac_session_track', {\n        p_user_id: user?.id,\n        p_session_type: params.p_session_type,\n        p_event_id: params.p_event_id,\n        p_app_id: params.p_app_id,\n        p_ip_address: params.ip_address,\n        p_user_agent: params.user_agent\n      });\n      \n      if (error) {\n        log.error('Failed to track event switch session:', error);\n      }\n    } catch (error) {\n      log.error('Failed to track event switch:', error);\n    }\n  };\n\n  /**\n   * Track a session expiration\n   */\n  const trackSessionExpired = async () => {\n    try {\n      const { data: { user } } = await supabaseClient.auth.getUser();\n      if (!user) {\n        log.warn('No authenticated user found for session tracking');\n        return;\n      }\n\n      const appId = await resolveAppId();\n\n      const params: TrackUserSessionParams = {\n        p_session_type: 'session_expired',\n        p_app_id: appId\n      };\n\n      const { error } = await supabaseClient.rpc('rbac_session_track', {\n        p_user_id: user?.id,\n        p_session_type: params.p_session_type,\n        p_event_id: params.p_event_id,\n        p_app_id: params.p_app_id,\n        p_ip_address: params.ip_address,\n        p_user_agent: params.user_agent\n      });\n      \n      if (error) {\n        log.error('Failed to track session expiration:', error);\n      }\n    } catch (error) {\n      log.error('Failed to track session expiration:', error);\n    }\n  };\n\n  return {\n    trackEventSwitch,\n    trackSessionExpired\n  };\n} ","\n/**\n * Application configuration utilities\n */\n\nexport interface AppConfig {\n  appName: string;\n  appId: string;\n}\n\nlet currentAppConfig: AppConfig | null = null;\n\n/**\n * Set the current application configuration\n */\nexport function setAppConfig(config: AppConfig) {\n  currentAppConfig = config;\n}\n\n/**\n * Get the current application configuration\n */\nexport function getAppConfig(): AppConfig {\n  if (!currentAppConfig) {\n    // Fallback to environment or default\n    const appName = import.meta.env.REACT_APP_NAME || 'PACE';\n    return {\n      appName,\n      appId: appName\n    };\n  }\n  return currentAppConfig;\n}\n\n/**\n * Get the current app name\n */\nexport function getCurrentAppName(): string {\n  return getAppConfig().appName;\n}\n\n/**\n * Get the current app ID\n */\nexport function getCurrentAppId(): string {\n  return getAppConfig().appId;\n}\n","/**\n * Utility functions for formatting data in the application\n */\n\n/**\n * Format a date as a readable string in \"dd mmm yyyy\" format (e.g., \"15 Jun 2024\")\n */\nexport function formatDate(date: Date | string | number): string {\n  const dateObj = typeof date === 'string' || typeof date === 'number' \n    ? new Date(date) \n    : date;\n  \n  // Use 'en-GB' locale to ensure \"dd mmm yyyy\" format (e.g., \"15 Jun 2024\")\n  return dateObj.toLocaleDateString('en-GB', {\n    year: 'numeric',\n    month: 'short',\n    day: 'numeric'\n  });\n}\n\n/**\n * Format a time as a readable string in \"HH:mm\" format (e.g., \"14:30\")\n * Uses 24-hour format for consistency across pace apps\n */\nexport function formatTime(date: Date | string | number): string {\n  const dateObj = typeof date === 'string' || typeof date === 'number' \n    ? new Date(date) \n    : date;\n  \n  // Use 'en-GB' locale to ensure \"HH:mm\" format (24-hour format)\n  return dateObj.toLocaleTimeString('en-GB', {\n    hour: '2-digit',\n    minute: '2-digit',\n    hour12: false\n  });\n}\n\n/**\n * Format a date and time as a readable string in \"dd mmm yyyy, HH:mm\" format (e.g., \"15 Jun 2024, 14:30\")\n * Uses 24-hour format for consistency across pace apps\n */\nexport function formatDateTime(date: Date | string | number): string {\n  const dateObj = typeof date === 'string' || typeof date === 'number' \n    ? new Date(date) \n    : date;\n  \n  // Use 'en-GB' locale to ensure consistent format (e.g., \"15 Jun 2024, 14:30\")\n  return dateObj.toLocaleString('en-GB', {\n    year: 'numeric',\n    month: 'short',\n    day: 'numeric',\n    hour: '2-digit',\n    minute: '2-digit',\n    hour12: false\n  });\n}\n\n/**\n * Format a number as a currency\n */\nexport function formatCurrency(value: number, currencyCode = 'USD', locale = 'en-US'): string {\n  return new Intl.NumberFormat(locale, {\n    style: 'currency',\n    currency: currencyCode,\n  }).format(value);\n}\n\n/**\n * Format a number with custom options\n */\nexport function formatNumber(\n  value: number,\n  options: Intl.NumberFormatOptions = {},\n  locale = 'en-US'\n): string {\n  return new Intl.NumberFormat(locale, options).format(value);\n}\n\n/**\n * Format a number as a percentage.\n * \n * The third parameter can be either:\n * - A number for fixed decimal places (backward compatible): `formatPercent(0.81, 'en-US', 2)`\n * - An options object with:\n *   - `decimals`: Fixed number of decimal places (default: 1)\n *   - `preserveDecimals`: Auto-detect and preserve decimal places from the input value\n *   - `maxDecimals`: Maximum decimal places when preserving (default: 10)\n * \n * @param value - The percentage value as a decimal (e.g., 0.81 for 0.81%)\n * @param locale - The locale string (default: 'en-US')\n * @param decimalsOrOptions - Either a number for fixed decimals, or an options object with:\n *   - `decimals` - Fixed number of decimal places (default: 1)\n *   - `preserveDecimals` - Auto-detect and preserve decimal places from the input value\n *   - `maxDecimals` - Maximum decimal places when preserving (default: 10)\n * @returns Formatted percentage string (e.g., \"0.81%\", \"81%\")\n * \n * @example\n * ```ts\n * // Fixed decimals (default behavior)\n * formatPercent(0.5) // '0.5%'\n * formatPercent(0.81, 'en-US', 1) // '0.8%' (loses precision)\n * \n * // Preserve decimal places dynamically\n * formatPercent(0.81, 'en-US', { preserveDecimals: true }) // '0.81%'\n * formatPercent(0.8123, 'en-US', { preserveDecimals: true, maxDecimals: 2 }) // '0.81%'\n * ```\n */\nexport function formatPercent(\n  value: number,\n  locale: string = 'en-US',\n  decimalsOrOptions?: number | {\n    decimals?: number;\n    preserveDecimals?: boolean;\n    maxDecimals?: number;\n  }\n): string {\n  let decimals: number;\n\n  // Backward compatibility: if decimalsOrOptions is a number, use it directly\n  if (typeof decimalsOrOptions === 'number') {\n    decimals = decimalsOrOptions;\n  } else if (decimalsOrOptions && typeof decimalsOrOptions === 'object') {\n    // New options object: check if we should preserve decimals\n    if (decimalsOrOptions.preserveDecimals) {\n      const valueStr = value.toString();\n      const decimalIndex = valueStr.indexOf('.');\n      \n      if (decimalIndex !== -1) {\n        const detectedDecimals = valueStr.length - decimalIndex - 1;\n        const maxDecimals = decimalsOrOptions.maxDecimals ?? 10;\n        decimals = Math.min(detectedDecimals, maxDecimals);\n      } else {\n        decimals = 0;\n      }\n    } else {\n      decimals = decimalsOrOptions.decimals ?? 1;\n    }\n  } else {\n    decimals = 1;\n  }\n\n  return new Intl.NumberFormat(locale, {\n    style: 'percent',\n    minimumFractionDigits: decimals,\n    maximumFractionDigits: decimals,\n  }).format(value / 100);\n}\n\n/**\n * Format a large number with abbreviations (K, M, B)\n */\nexport function formatCompactNumber(value: number, locale = 'en-US'): string {\n  return new Intl.NumberFormat(locale, {\n    notation: 'compact',\n    compactDisplay: 'short'\n  }).format(value);\n}\n\n/**\n * Format a file size in bytes to a human-readable string\n */\nexport function formatFileSize(bytes: number): string {\n  if (bytes === 0) return '0 Bytes';\n  \n  const k = 1024;\n  const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB', 'PB'];\n  const i = Math.floor(Math.log(bytes) / Math.log(k));\n  \n  return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];\n}\n"],"mappings":";;;;;;AACA;AAEA,IAAM,MAAM,aAAa,iBAAiB;AAqBnC,SAAS,mBAAmB,gBAAgC,SAAkB;AAEnF,QAAM,eAAe,YAAyC;AAC5D,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI;AACF,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,eAC3B,KAAK,WAAW,EAChB,OAAO,IAAI,EACX,GAAG,QAAQ,OAAO,EAClB,GAAG,aAAa,IAAI,EACpB,OAAO;AAEV,UAAI,SAAS,CAAC,MAAM;AAClB,YAAI,KAAK,8BAA8B,OAAO;AAC9C,eAAO;AAAA,MACT;AAEA,aAAO,KAAK;AAAA,IACd,SAAS,OAAO;AACd,UAAI,MAAM,6BAA6B,KAAK;AAC5C,aAAO;AAAA,IACT;AAAA,EACF;AAKA,QAAM,mBAAmB,OAAO,YAAoB;AAClD,QAAI;AACF,YAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,eAAe,KAAK,QAAQ;AAC7D,UAAI,CAAC,MAAM;AACT,YAAI,KAAK,kDAAkD;AAC3D;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM,aAAa;AAEjC,YAAM,SAAiC;AAAA,QACrC,gBAAgB;AAAA,QAChB,YAAY;AAAA,QACZ,UAAU;AAAA,MACZ;AAEA,YAAM,EAAE,MAAM,IAAI,MAAM,eAAe,IAAI,sBAAsB;AAAA,QAC/D,WAAW,MAAM;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,cAAc,OAAO;AAAA,MACvB,CAAC;AAED,UAAI,OAAO;AACT,YAAI,MAAM,yCAAyC,KAAK;AAAA,MAC1D;AAAA,IACF,SAAS,OAAO;AACd,UAAI,MAAM,iCAAiC,KAAK;AAAA,IAClD;AAAA,EACF;AAKA,QAAM,sBAAsB,YAAY;AACtC,QAAI;AACF,YAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,eAAe,KAAK,QAAQ;AAC7D,UAAI,CAAC,MAAM;AACT,YAAI,KAAK,kDAAkD;AAC3D;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM,aAAa;AAEjC,YAAM,SAAiC;AAAA,QACrC,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACZ;AAEA,YAAM,EAAE,MAAM,IAAI,MAAM,eAAe,IAAI,sBAAsB;AAAA,QAC/D,WAAW,MAAM;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,cAAc,OAAO;AAAA,QACrB,cAAc,OAAO;AAAA,MACvB,CAAC;AAED,UAAI,OAAO;AACT,YAAI,MAAM,uCAAuC,KAAK;AAAA,MACxD;AAAA,IACF,SAAS,OAAO;AACd,UAAI,MAAM,uCAAuC,KAAK;AAAA,IACxD;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;;;AClHA,IAAI,mBAAqC;AAKlC,SAAS,aAAa,QAAmB;AAC9C,qBAAmB;AACrB;AAKO,SAAS,eAA0B;AACxC,MAAI,CAAC,kBAAkB;AAErB,UAAM,UAAU,YAAY,IAAI,kBAAkB;AAClD,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAKO,SAAS,oBAA4B;AAC1C,SAAO,aAAa,EAAE;AACxB;AAKO,SAAS,kBAA0B;AACxC,SAAO,aAAa,EAAE;AACxB;;;ACvCO,SAAS,WAAW,MAAsC;AAC/D,QAAM,UAAU,OAAO,SAAS,YAAY,OAAO,SAAS,WACxD,IAAI,KAAK,IAAI,IACb;AAGJ,SAAO,QAAQ,mBAAmB,SAAS;AAAA,IACzC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,EACP,CAAC;AACH;AAMO,SAAS,WAAW,MAAsC;AAC/D,QAAM,UAAU,OAAO,SAAS,YAAY,OAAO,SAAS,WACxD,IAAI,KAAK,IAAI,IACb;AAGJ,SAAO,QAAQ,mBAAmB,SAAS;AAAA,IACzC,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV,CAAC;AACH;AAMO,SAAS,eAAe,MAAsC;AACnE,QAAM,UAAU,OAAO,SAAS,YAAY,OAAO,SAAS,WACxD,IAAI,KAAK,IAAI,IACb;AAGJ,SAAO,QAAQ,eAAe,SAAS;AAAA,IACrC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV,CAAC;AACH;AAKO,SAAS,eAAe,OAAe,eAAe,OAAO,SAAS,SAAiB;AAC5F,SAAO,IAAI,KAAK,aAAa,QAAQ;AAAA,IACnC,OAAO;AAAA,IACP,UAAU;AAAA,EACZ,CAAC,EAAE,OAAO,KAAK;AACjB;AAKO,SAAS,aACd,OACA,UAAoC,CAAC,GACrC,SAAS,SACD;AACR,SAAO,IAAI,KAAK,aAAa,QAAQ,OAAO,EAAE,OAAO,KAAK;AAC5D;AA+BO,SAAS,cACd,OACA,SAAiB,SACjB,mBAKQ;AACR,MAAI;AAGJ,MAAI,OAAO,sBAAsB,UAAU;AACzC,eAAW;AAAA,EACb,WAAW,qBAAqB,OAAO,sBAAsB,UAAU;AAErE,QAAI,kBAAkB,kBAAkB;AACtC,YAAM,WAAW,MAAM,SAAS;AAChC,YAAM,eAAe,SAAS,QAAQ,GAAG;AAEzC,UAAI,iBAAiB,IAAI;AACvB,cAAM,mBAAmB,SAAS,SAAS,eAAe;AAC1D,cAAM,cAAc,kBAAkB,eAAe;AACrD,mBAAW,KAAK,IAAI,kBAAkB,WAAW;AAAA,MACnD,OAAO;AACL,mBAAW;AAAA,MACb;AAAA,IACF,OAAO;AACL,iBAAW,kBAAkB,YAAY;AAAA,IAC3C;AAAA,EACF,OAAO;AACL,eAAW;AAAA,EACb;AAEA,SAAO,IAAI,KAAK,aAAa,QAAQ;AAAA,IACnC,OAAO;AAAA,IACP,uBAAuB;AAAA,IACvB,uBAAuB;AAAA,EACzB,CAAC,EAAE,OAAO,QAAQ,GAAG;AACvB;AAKO,SAAS,oBAAoB,OAAe,SAAS,SAAiB;AAC3E,SAAO,IAAI,KAAK,aAAa,QAAQ;AAAA,IACnC,UAAU;AAAA,IACV,gBAAgB;AAAA,EAClB,CAAC,EAAE,OAAO,KAAK;AACjB;AAKO,SAAS,eAAe,OAAuB;AACpD,MAAI,UAAU,EAAG,QAAO;AAExB,QAAM,IAAI;AACV,QAAM,QAAQ,CAAC,SAAS,MAAM,MAAM,MAAM,MAAM,IAAI;AACpD,QAAM,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC;AAElD,SAAO,YAAY,QAAQ,KAAK,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,MAAM,MAAM,CAAC;AACxE;","names":[]}

package/dist/{chunk-4X7FFPG5.js → chunk-KY4K2RTG.js}

@@ -493,15 +493,12 @@ function usePermissions(userId, organisationId, eventId, appId) {
         return;
       }
       if (!appId) {
-        logger.warn("[usePermissions] Waiting for appId before fetching permissions", {
+        logger.warn("[usePermissions] Fetching permissions without appId (may return limited permissions)", {
           userId,
           organisationId: orgId,
           eventId,
           hasAppId: false
         });
-        setIsLoading(true);
-        setError(null);
-        return;
       }
       logger.warn("[usePermissions] Fetching permissions", {
         userId,
@@ -1156,4 +1153,4 @@ export {
   useResourcePermissions,
   useRoleManagement
 };
-//# sourceMappingURL=chunk-4X7FFPG5.js.map
+//# sourceMappingURL=chunk-KY4K2RTG.js.map

package/dist/chunk-KY4K2RTG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/rbac/hooks/useRBAC.ts","../src/rbac/hooks/useResolvedScope.ts","../src/rbac/utils/eventContext.ts","../src/rbac/hooks/usePermissions.ts","../src/rbac/hooks/useResourcePermissions.ts","../src/rbac/hooks/useRoleManagement.ts"],"sourcesContent":["/**\n * @file RBAC Hook\n * @package @jmruthers/pace-core\n * @module RBAC/Hooks\n * @since 0.3.0\n *\n * A React hook that provides access to the RBAC (Role-Based Access Control) system\n * through the hardened RBAC engine API. The hook defers all permission and role\n * resolution to the shared engine to ensure consistent security behaviour across\n * applications.\n */\n\nimport { useState, useEffect, useCallback, useMemo } from 'react';\nimport { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';\nimport { useOrganisations } from '../../hooks/useOrganisations';\nimport { useEvents } from '../../hooks/useEvents';\nimport {\n  getPermissionMap,\n  getAccessLevel,\n  resolveAppContext,\n  getRoleContext,\n} from '../api';\nimport { getRBACLogger } from '../config';\nimport type {\n  UserRBACContext,\n  GlobalRole,\n  OrganisationRole,\n  EventAppRole,\n  Permission,\n  Scope,\n  PermissionMap,\n  UUID,\n} from '../types';\n\nfunction mapAccessLevelToEventRole(level: string | null): EventAppRole | null {\n  switch (level) {\n    case 'viewer':\n      return 'viewer';\n    case 'participant':\n      return 'participant';\n    case 'planner':\n      return 'planner';\n    case 'admin':\n    case 'super':\n      return 'event_admin';\n    default:\n      return null;\n  }\n}\n\nexport function useRBAC(pageId?: string): UserRBACContext {\n  const logger = getRBACLogger();\n  // Get all context from UnifiedAuth - it already provides selectedOrganisation, isContextReady, selectedEvent, and eventLoading\n  // This is more reliable than calling useOrganisations()/useEvents() separately which might throw or return stale values\n  const { \n    user, \n    session, \n    appName, \n    appConfig,\n    selectedOrganisation,\n    isContextReady: orgContextReady,\n    organisationLoading: orgLoading,\n    selectedEvent,\n    eventLoading\n  } = useUnifiedAuth();\n  \n  // Check if app requires event context\n  // IMPORTANT: If appConfig is null initially, default to true (safer for event-based apps)\n  // This prevents premature loading when appConfig hasn't loaded yet\n  const requiresEvent = appConfig?.requires_event ?? (appConfig === null ? true : false);\n  \n  // Only log hook initialization if user is authenticated to avoid noise during login\n  // Log hook initialization for debugging (use warn level so it's always visible)\n  // Also use direct console.log as fallback to ensure visibility\n  if (user && session) {\n    const hookInitLog = {\n      appName,\n      requiresEvent,\n      appConfig: appConfig ? JSON.stringify(appConfig) : 'null',\n      hasUser: !!user,\n      hasSession: !!session,\n      hasSelectedEvent: !!selectedEvent,\n      eventLoading,\n      selectedEventId: selectedEvent?.event_id,\n      hasSelectedOrganisation: !!selectedOrganisation,\n      organisationId: selectedOrganisation?.id,\n      orgContextReady,\n      orgLoading\n    };\n    logger.warn('[useRBAC] Hook initialized', hookInitLog);\n    // Direct console.log as fallback to ensure we can see if hook is called\n    console.warn('[useRBAC] Hook initialized (direct log)', hookInitLog);\n  }\n\n  const [globalRole, setGlobalRole] = useState<GlobalRole | null>(null);\n  const [organisationRole, setOrganisationRole] = useState<OrganisationRole | null>(null);\n  const [eventAppRole, setEventAppRole] = useState<EventAppRole | null>(null);\n  const [permissionMap, setPermissionMap] = useState<PermissionMap>({} as PermissionMap);\n  const [currentScope, setCurrentScope] = useState<Scope | null>(null);\n  const [isLoading, setIsLoading] = useState(false);\n  const [error, setError] = useState<Error | null>(null);\n\n  const resetState = useCallback(() => {\n    setGlobalRole(null);\n    setOrganisationRole(null);\n    setEventAppRole(null);\n    setPermissionMap({} as PermissionMap);\n    setCurrentScope(null);\n  }, []);\n\n  const loadRBACContext = useCallback(async () => {\n    // Early return if user is not authenticated - don't do anything\n    if (!user || !session) {\n      resetState();\n      setIsLoading(false);\n      return;\n    }\n\n    // Wait for organisation context to be ready before loading RBAC\n    // This is critical - without organisation ID, RPC calls can't resolve permissions\n    if (orgLoading || !orgContextReady || !selectedOrganisation?.id) {\n      setIsLoading(true);\n      logger.warn('[useRBAC] Waiting for organisation context before loading RBAC context', {\n        orgLoading,\n        orgContextReady,\n        hasSelectedOrganisation: !!selectedOrganisation,\n        organisationId: selectedOrganisation?.id,\n        appName\n      });\n      return;\n    }\n\n    // For event-based apps, wait for event context to be ready before loading RBAC\n    // This prevents NetworkError when RPC calls are made before event context is available\n    if (requiresEvent) {\n      if (eventLoading || !selectedEvent) {\n        // Event context not ready yet - don't load RBAC yet\n        // This prevents premature RPC calls that can cause NetworkError\n        // Set loading state so React knows we're waiting\n        setIsLoading(true);\n        logger.warn('[useRBAC] Waiting for event context before loading RBAC context', {\n          eventLoading,\n          hasSelectedEvent: !!selectedEvent,\n          appName,\n          selectedEventId: selectedEvent?.event_id,\n          organisationId: selectedOrganisation?.id\n        });\n        return;\n      }\n    }\n\n    setIsLoading(true);\n    setError(null);\n\n    logger.warn('[useRBAC] Loading RBAC context', {\n      appName,\n      requiresEvent,\n      hasSelectedEvent: !!selectedEvent,\n      selectedEventId: selectedEvent?.event_id,\n      organisationId: selectedOrganisation?.id\n    });\n\n    try {\n      let appId: UUID | undefined;\n      if (appName) {\n        // Wrap RPC call in try-catch to handle NetworkError gracefully\n        try {\n          const resolved = await resolveAppContext({ userId: user.id as UUID, appName });\n          if (!resolved || !resolved.hasAccess) {\n            throw new Error(`User does not have access to app \"${appName}\"`);\n          }\n          appId = resolved.appId;\n        } catch (rpcError: any) {\n          // Handle NetworkError - might be due to timing issue\n          if (rpcError?.message?.includes('NetworkError') || rpcError?.message?.includes('fetch')) {\n            logger.warn('[useRBAC] NetworkError resolving app context - may be timing issue, will retry when context is ready', {\n              appName,\n              error: rpcError.message,\n              requiresEvent,\n              eventLoading,\n              hasSelectedEvent: !!selectedEvent\n            });\n            // Don't throw - let it retry when dependencies change\n            setIsLoading(false);\n            return;\n          }\n          // Re-throw other errors\n          throw rpcError;\n        }\n      }\n\n      const scope: Scope = {\n        organisationId: selectedOrganisation?.id,\n        eventId: selectedEvent?.event_id || undefined,\n        appId,\n      };\n      \n      // Log scope to verify it's built correctly\n      logger.warn('[useRBAC] Building scope for RBAC context', {\n        organisationId: scope.organisationId,\n        eventId: scope.eventId,\n        appId: scope.appId,\n        hasOrganisationId: !!scope.organisationId,\n        hasEventId: !!scope.eventId\n      });\n      \n      setCurrentScope(scope);\n\n      const [map, roleContext, accessLevel] = await Promise.all([\n        getPermissionMap({ userId: user.id as UUID, scope }),\n        getRoleContext({ userId: user.id as UUID, scope }),\n        getAccessLevel({ userId: user.id as UUID, scope }),\n      ]);\n\n      setPermissionMap(map);\n      setGlobalRole(roleContext.globalRole);\n      setOrganisationRole(roleContext.organisationRole);\n      setEventAppRole(roleContext.eventAppRole || mapAccessLevelToEventRole(accessLevel));\n      \n      logger.warn('[useRBAC] RBAC context loaded successfully', {\n        appName,\n        permissionCount: Object.keys(map).length,\n        globalRole: roleContext.globalRole,\n        organisationRole: roleContext.organisationRole,\n        eventAppRole: roleContext.eventAppRole || mapAccessLevelToEventRole(accessLevel)\n      });\n    } catch (err) {\n      const handledError = err instanceof Error ? err : new Error('Failed to load RBAC context');\n      logger.error('[useRBAC] Error loading RBAC context:', handledError);\n      setError(handledError);\n      resetState();\n    } finally {\n      setIsLoading(false);\n    }\n  }, [appName, logger, resetState, selectedEvent, selectedEvent?.event_id, selectedOrganisation, selectedOrganisation?.id, session, user, requiresEvent, eventLoading, appConfig, orgContextReady, orgLoading]);\n\n  const hasGlobalPermission = useCallback(\n    (permission: string): boolean => {\n      if (globalRole === 'super_admin' || permissionMap['*']) {\n        return true;\n      }\n\n      if (permission === 'super_admin') {\n        return globalRole === 'super_admin';\n      }\n\n      if (permission === 'org_admin') {\n        return organisationRole === 'org_admin';\n      }\n\n      return permissionMap[permission as Permission] === true;\n    },\n    [globalRole, organisationRole, permissionMap],\n  );\n\n  const isSuperAdmin = useMemo(() => globalRole === 'super_admin' || permissionMap['*'] === true, [globalRole, permissionMap]);\n  const isOrgAdmin = useMemo(() => organisationRole === 'org_admin' || isSuperAdmin, [organisationRole, isSuperAdmin]);\n  const isEventAdmin = useMemo(() => eventAppRole === 'event_admin' || isSuperAdmin, [eventAppRole, isSuperAdmin]);\n  const canManageOrganisation = useMemo(() => isSuperAdmin || organisationRole === 'org_admin', [isSuperAdmin, organisationRole]);\n  const canManageEvent = useMemo(() => isSuperAdmin || eventAppRole === 'event_admin', [isSuperAdmin, eventAppRole]);\n\n  useEffect(() => {\n    // Log when effect runs to help debug\n    logger.warn('[useRBAC] useEffect triggered - calling loadRBACContext', {\n      appName,\n      requiresEvent,\n      eventLoading,\n      hasSelectedEvent: !!selectedEvent,\n      hasUser: !!user,\n      hasSession: !!session,\n      hasSelectedOrganisation: !!selectedOrganisation,\n      organisationId: selectedOrganisation?.id,\n      orgContextReady,\n      orgLoading\n    });\n    loadRBACContext();\n  }, [loadRBACContext, appName, requiresEvent, eventLoading, selectedEvent, user, session, selectedOrganisation, orgContextReady, orgLoading]);\n\n  return {\n    user,\n    globalRole,\n    organisationRole,\n    eventAppRole,\n    hasGlobalPermission,\n    isSuperAdmin,\n    isOrgAdmin,\n    isEventAdmin,\n    canManageOrganisation,\n    canManageEvent,\n    isLoading,\n    error,\n  };\n}\n","/**\n * @file useResolvedScope Hook\n * @package @jmruthers/pace-core\n * @module RBAC/Hooks\n * @since 1.0.0\n * \n * Shared hook for resolving RBAC scope from various contexts.\n * This hook is used by both DataTable and PagePermissionGuard to ensure\n * consistent scope resolution logic.\n */\n\nimport { useEffect, useState, useRef } from 'react';\nimport { SupabaseClient } from '@supabase/supabase-js';\nimport type { Database } from '../../types/database';\nimport type { Scope } from '../types';\nimport { createScopeFromEvent } from '../utils/eventContext';\nimport { getCurrentAppName } from '../../utils/app/appNameResolver';\nimport { createLogger } from '../../utils/core/logger';\n\nconst log = createLogger('useResolvedScope');\n\nexport interface UseResolvedScopeOptions {\n  /** Supabase client instance */\n  supabase: SupabaseClient<Database> | null;\n  /** Selected organisation ID */\n  selectedOrganisationId: string | null;\n  /** Selected event ID */\n  selectedEventId: string | null;\n}\n\nexport interface UseResolvedScopeReturn {\n  /** Resolved scope, or null if not yet resolved */\n  resolvedScope: Scope | null;\n  /** Whether the scope resolution is in progress */\n  isLoading: boolean;\n  /** Error if scope resolution failed */\n  error: Error | null;\n}\n\n/**\n * Resolves RBAC scope from organisation and event context\n * \n * This hook handles the complex logic of determining the correct RBAC scope\n * based on available context (organisation, event, app). It ensures consistent\n * scope resolution across the application.\n * \n * @param options - Hook options\n * @returns Resolved scope and loading state\n * \n * @example\n * ```tsx\n * const { resolvedScope, isLoading } = useResolvedScope({\n *   supabase,\n *   selectedOrganisationId,\n *   selectedEventId\n * });\n * \n * if (isLoading) return <Loading />;\n * if (!resolvedScope) return <Error />;\n * \n * const permission = useCan(userId, resolvedScope, permission);\n * ```\n */\nexport function useResolvedScope({\n  supabase,\n  selectedOrganisationId,\n  selectedEventId\n}: UseResolvedScopeOptions): UseResolvedScopeReturn {\n  const [resolvedScope, setResolvedScope] = useState<Scope | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n  \n  // Use a ref to track the stable scope and only update it when it actually changes\n  const stableScopeRef = useRef<{ organisationId: string; appId: string; eventId: string | undefined }>({ \n    organisationId: '', \n    appId: '', \n    eventId: undefined \n  });\n  \n  // Update stable scope ref in useEffect to avoid updates during render\n  useEffect(() => {\n    if (resolvedScope && resolvedScope.organisationId) {\n      const newScope = {\n        organisationId: resolvedScope.organisationId,\n        appId: resolvedScope.appId,\n        eventId: resolvedScope.eventId\n      };\n      \n      // Only update if the scope has actually changed\n      if (stableScopeRef.current.organisationId !== newScope.organisationId ||\n          stableScopeRef.current.eventId !== newScope.eventId ||\n          stableScopeRef.current.appId !== newScope.appId) {\n        stableScopeRef.current = {\n          organisationId: newScope.organisationId,\n          appId: newScope.appId || '',\n          eventId: newScope.eventId\n        };\n      }\n    } else if (!resolvedScope) {\n      // Reset to empty scope when no resolved scope\n      stableScopeRef.current = { organisationId: '', appId: '', eventId: undefined };\n    }\n  }, [resolvedScope]);\n  \n  const stableScope = stableScopeRef.current;\n  \n  useEffect(() => {\n    let cancelled = false;\n    \n    const resolveScope = async () => {\n      setIsLoading(true);\n      setError(null);\n      \n      try {\n        // Get app ID from package.json or environment\n        let appId: string | undefined = undefined;\n        \n        // Try to resolve from database\n        if (supabase) {\n          const appName = getCurrentAppName();\n          if (appName) {\n            try {\n              const { data: app, error } = await supabase\n                .from('rbac_apps')\n                .select('id, name, is_active')\n                .eq('name', appName)\n                .eq('is_active', true)\n                .single() as { data: { id: string; name: string; is_active: boolean } | null; error: any };\n              \n              if (error) {\n                // Check if app exists but is inactive\n                const { data: inactiveApp } = await supabase\n                  .from('rbac_apps')\n                  .select('id, name, is_active')\n                  .eq('name', appName)\n                  .single() as { data: { id: string; name: string; is_active: boolean } | null };\n                \n                if (inactiveApp) {\n                  log.error(`App \"${appName}\" exists but is inactive (is_active: ${inactiveApp.is_active})`);\n                } else {\n                  log.error(`App \"${appName}\" not found in rbac_apps table`);\n                }\n              } else if (app) {\n                appId = app.id;\n              }\n            } catch (error) {\n              log.error('Unexpected error resolving app ID:', error);\n            }\n          }\n        }\n\n        // Resolve scope based on available context\n\n        // If we have both organisation and event, use them directly\n        if (selectedOrganisationId && selectedEventId) {\n          if (!cancelled) {\n            setResolvedScope({\n              organisationId: selectedOrganisationId,\n              eventId: selectedEventId,\n              appId: appId\n            });\n            setIsLoading(false);\n          }\n          return;\n        }\n\n        // If we only have organisation, use it\n        if (selectedOrganisationId) {\n          if (!cancelled) {\n            setResolvedScope({\n              organisationId: selectedOrganisationId,\n              eventId: selectedEventId || undefined,\n              appId: appId\n            });\n            setIsLoading(false);\n          }\n          return;\n        }\n\n        // If we only have event, resolve organisation from event\n        if (selectedEventId && supabase) {\n          try {\n            const eventScope = await createScopeFromEvent(supabase, selectedEventId, appId);\n            if (!eventScope) {\n              log.error('Could not resolve organization from event context');\n              if (!cancelled) {\n                setResolvedScope(null);\n                setError(new Error('Could not resolve organisation from event context'));\n                setIsLoading(false);\n              }\n              return;\n            }\n            // Preserve the resolved app ID\n            if (!cancelled) {\n              setResolvedScope({\n                ...eventScope,\n                appId: appId || eventScope.appId\n              });\n              setIsLoading(false);\n            }\n          } catch (err) {\n            log.error('Error resolving scope from event:', err);\n            if (!cancelled) {\n              setResolvedScope(null);\n              setError(err as Error);\n              setIsLoading(false);\n            }\n          }\n          return;\n        }\n\n        // No context available\n        log.error('No organisation or event context available');\n        if (!cancelled) {\n          setResolvedScope(null);\n          setError(new Error('No organisation or event context available'));\n          setIsLoading(false);\n        }\n      } catch (err) {\n        if (!cancelled) {\n          setError(err as Error);\n          setIsLoading(false);\n        }\n      }\n    };\n\n    resolveScope();\n    \n    return () => {\n      cancelled = true;\n    };\n  }, [selectedOrganisationId, selectedEventId, supabase]);\n  \n  return {\n    resolvedScope: stableScope.organisationId ? stableScope as Scope : null,\n    isLoading,\n    error\n  };\n}\n","/**\n * Event Context Utilities for RBAC\n * @package @jmruthers/pace-core\n * @module RBAC/EventContext\n * @since 1.0.0\n * \n * This module provides utilities for event-based RBAC operations where\n * the organization context is derived from the event context.\n */\n\nimport { SupabaseClient } from '@supabase/supabase-js';\nimport { Database } from '../../types/database';\nimport { UUID, Scope } from '../types';\n\n/**\n * Get organization ID from event ID\n * \n * @param supabase - Supabase client\n * @param eventId - Event ID\n * @returns Promise resolving to organization ID or null\n */\nexport async function getOrganisationFromEvent(\n  supabase: SupabaseClient<Database>,\n  eventId: string\n): Promise<UUID | null> {\n  const { data, error } = await supabase\n    .from('event')\n    .select('organisation_id')\n    .eq('event_id', eventId)\n    .single() as { data: { organisation_id: string } | null; error: any };\n\n  if (error || !data) {\n    return null;\n  }\n\n  return data.organisation_id;\n}\n\n/**\n * Create a complete scope from event context\n * \n * @param supabase - Supabase client\n * @param eventId - Event ID\n * @param appId - Optional app ID\n * @returns Promise resolving to complete scope\n */\nexport async function createScopeFromEvent(\n  supabase: SupabaseClient<Database>,\n  eventId: string,\n  appId?: UUID\n): Promise<Scope | null> {\n  const organisationId = await getOrganisationFromEvent(supabase, eventId);\n  \n  if (!organisationId) {\n    return null;\n  }\n\n  return {\n    organisationId,\n    eventId,\n    appId\n  };\n}\n\n/**\n * Check if a scope is event-based (has eventId but no explicit organisationId)\n * \n * @param scope - Permission scope\n * @returns True if scope is event-based\n */\nexport function isEventBasedScope(scope: Scope): boolean {\n  return !scope.organisationId && !!scope.eventId;\n}\n\n/**\n * Validate that an event-based scope has the required context\n * \n * @param scope - Permission scope\n * @returns True if scope is valid for event-based operations\n */\nexport function isValidEventBasedScope(scope: Scope): boolean {\n  return isEventBasedScope(scope) && !!scope.eventId;\n}\n","/**\n * @file RBAC Permission Hooks\n * @package @jmruthers/pace-core\n * @module RBAC/Hooks\n * @since 1.0.0\n * \n * This module provides React hooks for RBAC functionality.\n */\n\nimport React, { useState, useEffect, useCallback, useMemo, useRef } from 'react';\nimport { \n  UUID, \n  Scope, \n  Permission, \n  PermissionMap\n} from '../types';\nimport { AccessLevel as AccessLevelType } from '../types';\nimport { \n  getAccessLevel, \n  getPermissionMap, \n  isPermitted,\n  isPermittedCached \n} from '../api';\nimport { getRBACLogger } from '../config';\n\n/**\n * Hook to get user's permissions in a scope\n * \n * @param userId - User ID\n * @param organisationId - Organisation ID\n * @param eventId - Event ID (optional)\n * @param appId - Application ID (optional)\n * @returns Permission state and methods\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { permissions, isLoading, error } = usePermissions(\n *     userId, \n *     organisationId, \n *     eventId, \n *     appId\n *   );\n *   \n *   if (isLoading) return <div>Loading...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return (\n *     <div>\n *       {permissions['read:users'] && <UserList />}\n *       {permissions['create:users'] && <CreateUserButton />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function usePermissions(\n  userId: UUID, \n  organisationId: string | undefined, \n  eventId: string | undefined, \n  appId: string | undefined\n) {\n  const [permissions, setPermissions] = useState<PermissionMap>({} as PermissionMap);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n  const [fetchTrigger, setFetchTrigger] = useState(0);\n  const isFetchingRef = useRef(false);\n  const logger = getRBACLogger();\n  \n  // Track previous values to detect changes imperatively\n  const prevValuesRef = useRef({ userId, organisationId, eventId, appId });\n  \n  // Normalize organisationId to empty string if undefined\n  const orgId = organisationId || '';\n  \n  // Log when hook is called with new scope (every render)\n  // This helps us see if React is calling the hook with updated scope\n  logger.warn('[usePermissions] Hook called with scope', {\n    userId,\n    organisationId: orgId,\n    eventId,\n    appId,\n    hasAppId: !!appId,\n    hasOrganisationId: !!orgId\n  });\n  \n  // Log when scope changes to verify React detects the change\n  React.useEffect(() => {\n    logger.warn('[usePermissions] Scope changed (useEffect)', {\n      userId,\n      organisationId,\n      eventId,\n      appId,\n      hasAppId: !!appId,\n      hasOrganisationId: !!organisationId\n    });\n  }, [userId, organisationId, eventId, appId]);\n\n  // Add timeout for missing organisation context (3 seconds)\n  useEffect(() => {\n    if (!orgId || orgId === null || (typeof orgId === 'string' && orgId.trim() === '')) {\n      const timeoutId = setTimeout(() => {\n        setError(new Error('Organisation context is required for permission checks'));\n        setIsLoading(false);\n      }, 3000); // 3 seconds - typical permission check is < 1 second\n      \n      return () => clearTimeout(timeoutId);\n    }\n    // Clear error if organisation context becomes available\n    if (error?.message === 'Organisation context is required for permission checks') {\n      setError(null);\n    }\n  }, [organisationId, error]);\n\n  // CRITICAL: Detect parameter changes imperatively and trigger fetch\n  // This bypasses React's useEffect dependency tracking which is failing to detect appId changes\n  const paramsChanged = \n    prevValuesRef.current.userId !== userId ||\n    prevValuesRef.current.organisationId !== organisationId ||\n    prevValuesRef.current.eventId !== eventId ||\n    prevValuesRef.current.appId !== appId;\n  \n  if (paramsChanged) {\n    logger.warn('[usePermissions] Parameters changed - triggering fetch', {\n      userId,\n      organisationId: orgId,\n      eventId,\n      appId,\n      hasAppId: !!appId,\n      prevAppId: prevValuesRef.current.appId,\n      appIdChanged: prevValuesRef.current.appId !== appId\n    });\n    prevValuesRef.current = { userId, organisationId, eventId, appId };\n    // Increment counter to force useEffect to run\n    setFetchTrigger(prev => prev + 1);\n  }\n\n  useEffect(() => {\n    const fetchPermissions = async () => {\n      logger.warn('[usePermissions] Fetch useEffect triggered', {\n        userId,\n        orgId,\n        eventId,\n        appId,\n        hasAppId: !!appId,\n        isFetching: isFetchingRef.current\n      });\n\n      // Prevent multiple simultaneous fetches\n      if (isFetchingRef.current) {\n        logger.warn('[usePermissions] Skipping fetch - already fetching', {\n          userId,\n          scope: {\n            organisationId: orgId,\n            eventId: eventId,\n            appId: appId\n          }\n        });\n        return;\n      }\n\n      if (!userId) {\n        logger.warn('[usePermissions] Skipping fetch - no userId');\n        setPermissions({} as PermissionMap);\n        setIsLoading(false);\n        return;\n      }\n\n      // Don't fetch permissions if scope is invalid (e.g., organisationId is null/empty)\n      // Wait for organisation context to resolve\n      // IMPORTANT: Don't clear existing permissions here - keep them until we have new ones\n      if (!orgId || orgId === null || (typeof orgId === 'string' && orgId.trim() === '')) {\n        logger.warn('[usePermissions] Skipping fetch - no orgId', {\n          orgId,\n          hasOrgId: !!orgId\n        });\n        // Keep existing permissions, just mark as loading\n        setIsLoading(true);\n        setError(null);\n        return;\n      }\n\n      // Note: getPermissionMap can work without appId, but will return limited permissions\n      // In test environments, appId might be undefined, so we still attempt the fetch\n      // If appId is missing in production, it will return an empty map which is acceptable\n      if (!appId) {\n        logger.warn('[usePermissions] Fetching permissions without appId (may return limited permissions)', {\n          userId,\n          organisationId: orgId,\n          eventId: eventId,\n          hasAppId: false\n        });\n        // Continue with fetch - don't block on appId\n      }\n      logger.warn('[usePermissions] Fetching permissions', {\n        userId,\n        scope: {\n          organisationId: orgId,\n          eventId: eventId,\n          appId: appId\n        },\n        hasAppId: !!appId\n      });\n\n      try {\n        isFetchingRef.current = true;\n        setIsLoading(true);\n        setError(null);\n        \n        // Build scope object for API call\n        const scope: Scope = {\n          organisationId: orgId,\n          eventId: eventId,\n          appId: appId\n        };\n        \n        // Fetch new permissions - don't clear old ones until we have new ones\n        const permissionMap = await getPermissionMap({ userId, scope });\n        \n        logger.warn('[usePermissions] Permissions fetched successfully', {\n          permissionCount: Object.keys(permissionMap).length,\n          hasWildcard: !!permissionMap['*'],\n          scope: {\n            organisationId: orgId,\n            eventId: eventId,\n            appId: appId\n          }\n        });\n        \n        // Only update permissions if fetch was successful\n        setPermissions(permissionMap);\n      } catch (err) {\n        // On error, keep existing permissions but set error state\n        // This prevents the UI from losing all items when there's a transient error\n        logger.error('[usePermissions] Failed to fetch permissions:', err);\n        setError(err instanceof Error ? err : new Error('Failed to fetch permissions'));\n        // Don't clear permissions on error - keep what we had\n      } finally {\n        setIsLoading(false);\n        isFetchingRef.current = false;\n      }\n    };\n\n    fetchPermissions();\n  }, [fetchTrigger, userId, organisationId, eventId, appId]);\n\n  const hasPermission = useCallback((permission: Permission): boolean => {\n    if (permissions['*']) {\n      return true;\n    }\n    return permissions[permission] === true;\n  }, [permissions]);\n\n  const hasAnyPermission = useCallback((permissionList: Permission[]): boolean => {\n    if (permissions['*']) {\n      return true;\n    }\n    return permissionList.some(p => permissions[p] === true);\n  }, [permissions]);\n\n  const hasAllPermissions = useCallback((permissionList: Permission[]): boolean => {\n    if (permissions['*']) {\n      return true;\n    }\n    return permissionList.every(p => permissions[p] === true);\n  }, [permissions]);\n\n  const refetch = useCallback(async () => {\n    // Prevent multiple simultaneous fetches\n    if (isFetchingRef.current) {\n      return;\n    }\n\n    if (!userId) {\n      setPermissions({} as PermissionMap);\n      setIsLoading(false);\n      return;\n    }\n\n    // Don't fetch permissions if scope is invalid (e.g., organisationId is null/empty)\n    // IMPORTANT: Don't clear existing permissions - keep them until we have new ones\n    if (!orgId || orgId === null || (typeof orgId === 'string' && orgId.trim() === '')) {\n      // Keep existing permissions, just mark as loading\n      setIsLoading(true);\n      setError(null);\n      return;\n    }\n\n    try {\n      isFetchingRef.current = true;\n      setIsLoading(true);\n      setError(null);\n      \n      // Build scope object for API call\n      const scope: Scope = {\n        organisationId: orgId,\n        eventId: eventId,\n        appId: appId\n      };\n      \n      // Fetch new permissions - don't clear old ones until we have new ones\n      const permissionMap = await getPermissionMap({ userId, scope });\n      \n      // Only update permissions if fetch was successful\n      setPermissions(permissionMap);\n    } catch (err) {\n      // On error, keep existing permissions but set error state\n      // This prevents the UI from losing all items when there's a transient error\n      const logger = getRBACLogger();\n      logger.error('Failed to refetch permissions:', err);\n      setError(err instanceof Error ? err : new Error('Failed to fetch permissions'));\n      // Don't clear permissions on error - keep what we had\n    } finally {\n      setIsLoading(false);\n      isFetchingRef.current = false;\n    }\n  }, [userId, organisationId, eventId, appId]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    permissions,\n    isLoading,\n    error,\n    hasPermission,\n    hasAnyPermission,\n    hasAllPermissions,\n    refetch\n  }), [permissions, isLoading, error, hasPermission, hasAnyPermission, hasAllPermissions, refetch]);\n}\n\n/**\n * Hook to check if user can perform an action\n * \n * @param userId - User ID\n * @param scope - Scope for permission checking\n * @param permission - Permission to check\n * @param pageId - Optional page ID\n * @param useCache - Whether to use cached results\n * @returns Permission check state and methods\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { can, isLoading, error } = useCan(userId, scope, 'read:users');\n *   \n *   if (isLoading) return <div>Checking permission...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return can ? <UserList /> : <div>Access denied</div>;\n * }\n * ```\n */\nexport function useCan(\n  userId: UUID, \n  scope: Scope, \n  permission: Permission, \n  pageId?: UUID,\n  useCache: boolean = true\n) {\n  const [can, setCan] = useState<boolean>(false);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  // Validate scope parameter - handle undefined/null scope gracefully\n  const isValidScope = scope && typeof scope === 'object';\n  const organisationId = isValidScope ? scope.organisationId : undefined;\n  const eventId = isValidScope ? scope.eventId : undefined;\n  const appId = isValidScope ? scope.appId : undefined;\n\n  // Add timeout for missing organisation context (3 seconds)\n  useEffect(() => {\n    if (!isValidScope || !organisationId || organisationId === null || (typeof organisationId === 'string' && organisationId.trim() === '')) {\n      const timeoutId = setTimeout(() => {\n        setError(new Error('Organisation context is required for permission checks'));\n        setIsLoading(false);\n        setCan(false);\n      }, 3000); // 3 seconds - typical permission check is < 1 second\n      \n      return () => clearTimeout(timeoutId);\n    }\n    // Clear error if organisation context becomes available\n    if (error?.message === 'Organisation context is required for permission checks') {\n      setError(null);\n    }\n  }, [isValidScope, organisationId, error]);\n\n  // Use refs to track the last values to prevent unnecessary re-runs\n  const lastUserIdRef = useRef<UUID | null>(null);\n  const lastScopeRef = useRef<string | null>(null);\n  const lastPermissionRef = useRef<Permission | null>(null);\n  const lastPageIdRef = useRef<UUID | undefined | null>(null);\n  const lastUseCacheRef = useRef<boolean | null>(null);\n\n  useEffect(() => {\n    // Create a scope key to track changes - use safe property access\n    const scopeKey = isValidScope ? `${organisationId}-${eventId}-${appId}` : 'invalid-scope';\n    \n    // Only run if something has actually changed\n    if (\n      lastUserIdRef.current !== userId ||\n      lastScopeRef.current !== scopeKey ||\n      lastPermissionRef.current !== permission ||\n      lastPageIdRef.current !== pageId ||\n      lastUseCacheRef.current !== useCache\n    ) {\n      lastUserIdRef.current = userId;\n      lastScopeRef.current = scopeKey;\n      lastPermissionRef.current = permission;\n      lastPageIdRef.current = pageId;\n      lastUseCacheRef.current = useCache;\n      \n      // Inline the permission check logic to avoid useCallback dependency issues\n      const checkPermission = async () => {\n        if (!userId) {\n          setCan(false);\n          setIsLoading(false);\n          return;\n        }\n\n        // Validate scope before accessing properties\n        if (!isValidScope) {\n          setIsLoading(true);\n          setCan(false);\n          setError(null);\n          // Timeout is handled in separate useEffect\n          return;\n        }\n\n        // Don't check permissions if scope is invalid (e.g., organisationId is null/empty)\n        // Wait for organisation context to resolve\n        if (!organisationId || organisationId === null || (typeof organisationId === 'string' && organisationId.trim() === '')) {\n          setIsLoading(true);\n          setCan(false);\n          setError(null);\n          // Timeout is handled in separate useEffect (Phase 1.4)\n          return;\n        }\n\n        try {\n          setIsLoading(true);\n          setError(null);\n          \n          // Create a valid scope object for the API call\n          const validScope: Scope = {\n            organisationId,\n            ...(eventId ? { eventId } : {}),\n            ...(appId ? { appId } : {})\n          };\n          \n          const result = useCache \n            ? await isPermittedCached({ userId, scope: validScope, permission, pageId })\n            : await isPermitted({ userId, scope: validScope, permission, pageId });\n          \n          setCan(result);\n        } catch (err) {\n          const logger = getRBACLogger();\n          logger.error('Permission check error:', { permission, error: err });\n          setError(err instanceof Error ? err : new Error('Failed to check permission'));\n          setCan(false);\n        } finally {\n          setIsLoading(false);\n        }\n      };\n      \n      checkPermission();\n    }\n  }, [userId, isValidScope, organisationId, eventId, appId, permission, pageId, useCache]);\n\n  const refetch = useCallback(async () => {\n    if (!userId) {\n      setCan(false);\n      setIsLoading(false);\n      return;\n    }\n\n    // Validate scope before accessing properties\n    if (!isValidScope) {\n      setCan(false);\n      setIsLoading(true);\n      setError(null);\n      return;\n    }\n\n    // Don't check permissions if scope is invalid (e.g., organisationId is null/empty)\n    if (!organisationId || organisationId === null || (typeof organisationId === 'string' && organisationId.trim() === '')) {\n      setCan(false);\n      setIsLoading(true);\n      setError(null);\n      return;\n    }\n\n    try {\n      setIsLoading(true);\n      setError(null);\n      \n      // Create a valid scope object for the API call\n      const validScope: Scope = {\n        organisationId,\n        ...(eventId ? { eventId } : {}),\n        ...(appId ? { appId } : {})\n      };\n      \n      const result = useCache \n        ? await isPermittedCached({ userId, scope: validScope, permission, pageId })\n        : await isPermitted({ userId, scope: validScope, permission, pageId });\n      \n      setCan(result);\n    } catch (err) {\n      setError(err instanceof Error ? err : new Error('Failed to check permission'));\n      setCan(false);\n    } finally {\n      setIsLoading(false);\n    }\n  }, [userId, isValidScope, organisationId, eventId, appId, permission, pageId, useCache]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    can,\n    isLoading,\n    error,\n    refetch\n  }), [can, isLoading, error, refetch]);\n}\n\n/**\n * Hook to get user's access level in a scope\n * \n * @param userId - User ID\n * @param scope - Scope for access level checking\n * @returns Access level state and methods\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { accessLevel, isLoading, error } = useAccessLevel(userId, scope);\n *   \n *   if (isLoading) return <div>Loading access level...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return (\n *     <div>\n *       Access Level: {accessLevel}\n *       {accessLevel >= AccessLevel.ADMIN && <AdminPanel />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useAccessLevel(userId: UUID, scope: Scope): {\n  accessLevel: AccessLevelType;\n  isLoading: boolean;\n  error: Error | null;\n  refetch: () => Promise<void>;\n} {\n  const [accessLevel, setAccessLevel] = useState<AccessLevelType>('viewer');\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const fetchAccessLevel = useCallback(async () => {\n    if (!userId) {\n      setAccessLevel('viewer');\n      setIsLoading(false);\n      return;\n    }\n\n    try {\n      setIsLoading(true);\n      setError(null);\n      \n      const level = await getAccessLevel({ userId, scope });\n      setAccessLevel(level);\n    } catch (err) {\n      setError(err instanceof Error ? err : new Error('Failed to fetch access level'));\n      setAccessLevel('viewer');\n    } finally {\n      setIsLoading(false);\n    }\n  }, [userId, scope.organisationId, scope.eventId, scope.appId]);\n\n  useEffect(() => {\n    fetchAccessLevel();\n  }, [fetchAccessLevel]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    accessLevel,\n    isLoading,\n    error,\n    refetch: fetchAccessLevel\n  }), [accessLevel, isLoading, error, fetchAccessLevel]);\n}\n\n/**\n * Hook to check multiple permissions at once\n * \n * @param userId - User ID\n * @param scope - Scope for permission checking\n * @param permissions - Array of permissions to check\n * @param useCache - Whether to use cached results\n * @returns Multiple permission check results\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { results, isLoading, error } = useMultiplePermissions(\n *     userId, \n *     scope, \n *     ['read:users', 'create:users', 'update:users']\n *   );\n *   \n *   if (isLoading) return <div>Checking permissions...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return (\n *     <div>\n *       {results['read:users'] && <UserList />}\n *       {results['create:users'] && <CreateUserButton />}\n *       {results['update:users'] && <EditUserButton />}\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useMultiplePermissions(\n  userId: UUID, \n  scope: Scope, \n  permissions: Permission[],\n  useCache: boolean = true\n): {\n  results: Record<Permission, boolean>;\n  isLoading: boolean;\n  error: Error | null;\n  refetch: () => Promise<void>;\n} {\n  const [results, setResults] = useState<Record<Permission, boolean>>({} as Record<Permission, boolean>);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const checkPermissions = useCallback(async () => {\n    if (!userId || permissions.length === 0) {\n      setResults({} as Record<Permission, boolean>);\n      setIsLoading(false);\n      return;\n    }\n\n    try {\n      setIsLoading(true);\n      setError(null);\n      \n      const permissionResults: Record<Permission, boolean> = {} as Record<Permission, boolean>;\n      \n      // Check each permission\n      for (const permission of permissions) {\n        const result = useCache \n          ? await isPermittedCached({ userId, scope, permission })\n          : await isPermitted({ userId, scope, permission });\n        permissionResults[permission] = result;\n      }\n      \n      setResults(permissionResults);\n    } catch (err) {\n      setError(err instanceof Error ? err : new Error('Failed to check permissions'));\n      setResults({} as Record<Permission, boolean>);\n    } finally {\n      setIsLoading(false);\n    }\n  }, [userId, scope.organisationId, scope.eventId, scope.appId, permissions, useCache]);\n\n  useEffect(() => {\n    checkPermissions();\n  }, [checkPermissions]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    results,\n    isLoading,\n    error,\n    refetch: checkPermissions\n  }), [results, isLoading, error, checkPermissions]);\n}\n\n/**\n * Hook to check if user has any of the specified permissions\n * \n * @param userId - User ID\n * @param scope - Scope for permission checking\n * @param permissions - Array of permissions to check\n * @param useCache - Whether to use cached results\n * @returns Whether user has any of the permissions\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { hasAny, isLoading, error } = useHasAnyPermission(\n *     userId, \n *     scope, \n *     ['read:users', 'create:users']\n *   );\n *   \n *   if (isLoading) return <div>Checking permissions...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return hasAny ? <UserManagementPanel /> : <div>No user permissions</div>;\n * }\n * ```\n */\nexport function useHasAnyPermission(\n  userId: UUID, \n  scope: Scope, \n  permissions: Permission[],\n  useCache: boolean = true\n): {\n  hasAny: boolean;\n  isLoading: boolean;\n  error: Error | null;\n  refetch: () => Promise<void>;\n} {\n  const [hasAny, setHasAny] = useState<boolean>(false);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const checkAnyPermission = useCallback(async () => {\n    if (!userId || permissions.length === 0) {\n      setHasAny(false);\n      setIsLoading(false);\n      return;\n    }\n\n    try {\n      setIsLoading(true);\n      setError(null);\n      \n      let hasAnyPermission = false;\n      \n      for (const permission of permissions) {\n        const result = useCache \n          ? await isPermittedCached({ userId, scope, permission })\n          : await isPermitted({ userId, scope, permission });\n        \n        if (result) {\n          hasAnyPermission = true;\n          break;\n        }\n      }\n      \n      setHasAny(hasAnyPermission);\n    } catch (err) {\n      setError(err instanceof Error ? err : new Error('Failed to check permissions'));\n      setHasAny(false);\n    } finally {\n      setIsLoading(false);\n    }\n  }, [userId, scope.organisationId, scope.eventId, scope.appId, permissions, useCache]);\n\n  useEffect(() => {\n    checkAnyPermission();\n  }, [checkAnyPermission]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    hasAny,\n    isLoading,\n    error,\n    refetch: checkAnyPermission\n  }), [hasAny, isLoading, error, checkAnyPermission]);\n}\n\n/**\n * Hook to check if user has all of the specified permissions\n * \n * @param userId - User ID\n * @param scope - Scope for permission checking\n * @param permissions - Array of permissions to check\n * @param useCache - Whether to use cached results\n * @returns Whether user has all of the permissions\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { hasAll, isLoading, error } = useHasAllPermissions(\n *     userId, \n *     scope, \n *     ['read:users', 'create:users', 'update:users']\n *   );\n *   \n *   if (isLoading) return <div>Checking permissions...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return hasAll ? <FullUserManagementPanel /> : <div>Insufficient permissions</div>;\n * }\n * ```\n */\nexport function useHasAllPermissions(\n  userId: UUID, \n  scope: Scope, \n  permissions: Permission[],\n  useCache: boolean = true\n): {\n  hasAll: boolean;\n  isLoading: boolean;\n  error: Error | null;\n  refetch: () => Promise<void>;\n} {\n  const [hasAll, setHasAll] = useState<boolean>(false);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const checkAllPermissions = useCallback(async () => {\n    if (!userId || permissions.length === 0) {\n      setHasAll(false);\n      setIsLoading(false);\n      return;\n    }\n\n    try {\n      setIsLoading(true);\n      setError(null);\n      \n      let hasAllPermissions = true;\n      \n      for (const permission of permissions) {\n        const result = useCache \n          ? await isPermittedCached({ userId, scope, permission })\n          : await isPermitted({ userId, scope, permission });\n        \n        if (!result) {\n          hasAllPermissions = false;\n          break;\n        }\n      }\n      \n      setHasAll(hasAllPermissions);\n    } catch (err) {\n      setError(err instanceof Error ? err : new Error('Failed to check permissions'));\n      setHasAll(false);\n    } finally {\n      setIsLoading(false);\n    }\n  }, [userId, scope.organisationId, scope.eventId, scope.appId, permissions, useCache]);\n\n  useEffect(() => {\n    checkAllPermissions();\n  }, [checkAllPermissions]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    hasAll,\n    isLoading,\n    error,\n    refetch: checkAllPermissions\n  }), [hasAll, isLoading, error, checkAllPermissions]);\n}\n\n/**\n * Hook to get cached permissions with TTL management\n * \n * @param userId - User ID\n * @param scope - Scope for permission checking\n * @returns Cached permission state and methods\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { permissions, isLoading, error, invalidateCache } = useCachedPermissions(userId, scope);\n *   \n *   if (isLoading) return <div>Loading cached permissions...</div>;\n *   if (error) return <div>Error: {error.message}</div>;\n *   \n *   return (\n *     <div>\n *       {permissions['read:users'] && <UserList />}\n *       <button onClick={invalidateCache}>Refresh Permissions</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useCachedPermissions(userId: UUID, scope: Scope): {\n  permissions: PermissionMap;\n  isLoading: boolean;\n  error: Error | null;\n  invalidateCache: () => void;\n  refetch: () => Promise<void>;\n} {\n  const [permissions, setPermissions] = useState<PermissionMap>({} as PermissionMap);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const fetchCachedPermissions = useCallback(async () => {\n    if (!userId) {\n      setPermissions({} as PermissionMap);\n      setIsLoading(false);\n      return;\n    }\n\n    try {\n      setIsLoading(true);\n      setError(null);\n      \n      const permissionMap = await getPermissionMap({ userId, scope });\n      setPermissions(permissionMap);\n    } catch (err) {\n      setError(err instanceof Error ? err : new Error('Failed to fetch cached permissions'));\n    } finally {\n      setIsLoading(false);\n    }\n  }, [userId, scope.organisationId, scope.eventId, scope.appId]);\n\n  const invalidateCache = useCallback(() => {\n    // This would typically invalidate the cache in the actual implementation\n    // For now, we'll just refetch\n    fetchCachedPermissions();\n  }, [fetchCachedPermissions]);\n\n  useEffect(() => {\n    fetchCachedPermissions();\n  }, [fetchCachedPermissions]);\n\n  // Memoize the return object to prevent unnecessary re-renders\n  return useMemo(() => ({\n    permissions,\n    isLoading,\n    error,\n    invalidateCache,\n    refetch: fetchCachedPermissions\n  }), [permissions, isLoading, error, invalidateCache, fetchCachedPermissions]);\n}\n","/**\n * @file useResourcePermissions Hook\n * @package @jmruthers/pace-core\n * @module RBAC/Hooks\n * @since 1.0.0\n * \n * Hook to check permissions for a specific resource type.\n * This hook centralizes the common pattern of checking create/update/delete/read\n * permissions, eliminating ~30 lines of boilerplate code per hook usage.\n * \n * @example\n * ```tsx\n * import { useResourcePermissions } from '@jmruthers/pace-core/rbac';\n * \n * function ContactsHook() {\n *   const { canCreate, canUpdate, canDelete } = useResourcePermissions('contacts');\n *   \n *   const addContact = async (data: ContactData) => {\n *     if (!canCreate('contacts')) {\n *       throw new Error(\"Permission denied: You do not have permission to create contacts.\");\n *     }\n *     // ... perform mutation\n *   };\n * }\n * ```\n * \n * @example\n * ```tsx\n * // With read permissions enabled\n * const { canRead } = useResourcePermissions('contacts', { enableRead: true });\n * \n * if (!canRead('contacts')) {\n *   return <PermissionDenied />;\n * }\n * ```\n * \n * @security\n * - Requires organisation context (handled by useResolvedScope)\n * - All permission checks are scoped to the current organisation/event/app context\n * - Missing user context results in all permissions being denied\n */\n\nimport { useMemo } from 'react';\nimport { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';\nimport { useOrganisations } from '../../hooks/useOrganisations';\nimport { useEvents } from '../../hooks/useEvents';\nimport { useResolvedScope } from './useResolvedScope';\nimport { useCan } from './usePermissions';\nimport type { Scope } from '../types';\n\nexport interface UseResourcePermissionsOptions {\n  /** Whether to check read permissions (default: false) */\n  enableRead?: boolean;\n  /** Whether scope resolution is required (default: true) */\n  requireScope?: boolean;\n}\n\nexport interface ResourcePermissions {\n  /** Check if user can create resources of this type */\n  canCreate: (resource: string) => boolean;\n  /** Check if user can update resources of this type */\n  canUpdate: (resource: string) => boolean;\n  /** Check if user can delete resources of this type */\n  canDelete: (resource: string) => boolean;\n  /** Check if user can read resources of this type */\n  canRead: (resource: string) => boolean;\n  /** The resolved scope object (for advanced use cases) */\n  scope: Scope;\n  /** Whether any permission check is currently loading */\n  isLoading: boolean;\n  /** Error from any permission check or scope resolution */\n  error: Error | null;\n}\n\n/**\n * Hook to check permissions for a specific resource\n * \n * This hook encapsulates the common pattern of checking create/update/delete/read\n * permissions for a resource type. It handles scope resolution, user context,\n * and provides a simple API for permission checking.\n * \n * @param resource - The resource name (e.g., 'contacts', 'risks', 'journal')\n * @param options - Optional configuration\n * @param options.enableRead - Whether to check read permissions (default: false)\n * @param options.requireScope - Whether scope resolution is required (default: true)\n * @returns Object with permission check functions and scope\n * \n * @example\n * ```tsx\n * function useContacts() {\n *   const { canCreate, canUpdate, canDelete } = useResourcePermissions('contacts');\n *   \n *   const addContact = async (data: ContactData) => {\n *     if (!canCreate('contacts')) {\n *       throw new Error(\"Permission denied\");\n *     }\n *     // ... perform mutation\n *   };\n * }\n * ```\n */\nexport function useResourcePermissions(\n  resource: string,\n  options: UseResourcePermissionsOptions = {}\n): ResourcePermissions {\n  const { enableRead = false, requireScope = true } = options;\n\n  // Get user and supabase client from UnifiedAuth\n  const { user, supabase } = useUnifiedAuth();\n  \n  // Get selected organisation\n  const { selectedOrganisation } = useOrganisations();\n  \n  // Get selected event (optional - wrap in try/catch)\n  let selectedEvent: { event_id: string } | null = null;\n  try {\n    const eventsContext = useEvents();\n    selectedEvent = eventsContext.selectedEvent;\n  } catch (error) {\n    // Event provider not available - continue without event context\n    // This is expected in some apps that don't use events\n  }\n\n  // Resolve scope for permission checks\n  const { resolvedScope, isLoading: scopeLoading, error: scopeError } = useResolvedScope({\n    supabase,\n    selectedOrganisationId: selectedOrganisation?.id || null,\n    selectedEventId: selectedEvent?.event_id || null\n  });\n\n  // Create fallback scope if resolvedScope is not available\n  const scope: Scope = resolvedScope || {\n    organisationId: selectedOrganisation?.id || '',\n    eventId: selectedEvent?.event_id || undefined,\n    appId: undefined\n  };\n\n  // Permission checks for create, update, delete\n  const { can: canCreateResult, isLoading: createLoading, error: createError } = useCan(\n    user?.id || '',\n    scope,\n    `create:${resource}` as const,\n    undefined, // pageId\n    true // useCache\n  );\n\n  const { can: canUpdateResult, isLoading: updateLoading, error: updateError } = useCan(\n    user?.id || '',\n    scope,\n    `update:${resource}` as const,\n    undefined, // pageId\n    true // useCache\n  );\n\n  const { can: canDeleteResult, isLoading: deleteLoading, error: deleteError } = useCan(\n    user?.id || '',\n    scope,\n    `delete:${resource}` as const,\n    undefined, // pageId\n    true // useCache\n  );\n\n  // Optional read permission check\n  const { can: canReadResult, isLoading: readLoading, error: readError } = useCan(\n    user?.id || '',\n    scope,\n    `read:${resource}` as const,\n    undefined, // pageId\n    true // useCache\n  );\n\n  // Aggregate loading states - any permission check or scope resolution loading\n  const isLoading = useMemo(() => {\n    return scopeLoading || createLoading || updateLoading || deleteLoading || (enableRead && readLoading);\n  }, [scopeLoading, createLoading, updateLoading, deleteLoading, readLoading, enableRead]);\n\n  // Aggregate errors - prefer scope error, then any permission error\n  const error = useMemo(() => {\n    if (scopeError) return scopeError;\n    if (createError) return createError;\n    if (updateError) return updateError;\n    if (deleteError) return deleteError;\n    if (enableRead && readError) return readError;\n    return null;\n  }, [scopeError, createError, updateError, deleteError, readError, enableRead]);\n\n  // Return wrapper functions that take resource name and return permission result\n  // Note: The resource parameter in the function is for consistency with the API,\n  // but we're checking permissions for the resource passed to the hook\n  return useMemo(() => ({\n    canCreate: (res: string) => {\n      // For now, we only check the resource passed to the hook\n      // Future enhancement could support checking different resources\n      if (res !== resource) {\n        return false;\n      }\n      return canCreateResult;\n    },\n    canUpdate: (res: string) => {\n      if (res !== resource) {\n        return false;\n      }\n      return canUpdateResult;\n    },\n    canDelete: (res: string) => {\n      if (res !== resource) {\n        return false;\n      }\n      return canDeleteResult;\n    },\n    canRead: (res: string) => {\n      if (!enableRead) {\n        return true; // If read checking is disabled, allow read\n      }\n      if (res !== resource) {\n        return false;\n      }\n      return canReadResult;\n    },\n    scope,\n    isLoading,\n    error\n  }), [\n    resource,\n    canCreateResult,\n    canUpdateResult,\n    canDeleteResult,\n    canReadResult,\n    enableRead,\n    scope,\n    isLoading,\n    error\n  ]);\n}\n\n","/**\n * @file RBAC Role Management Hook\n * @package @jmruthers/pace-core\n * @module RBAC/Hooks\n * @since 2.1.0\n *\n * React hook for managing RBAC roles safely using RPC functions.\n * This hook provides a secure, type-safe interface for granting and revoking roles\n * that ensures proper audit trails and security checks.\n *\n * @example\n * ```tsx\n * import { useRoleManagement } from '@jmruthers/pace-core/rbac';\n *\n * function UserRolesComponent() {\n *   const { revokeEventAppRole, grantEventAppRole, isLoading, error } = useRoleManagement();\n *\n *   const handleRevokeRole = async (roleId: string, roleData: EventAppRoleData) => {\n *     const result = await revokeEventAppRole({\n *       userId: roleData.user_id,\n *       organisationId: roleData.organisation_id,\n *       eventId: roleData.event_id,\n *       appId: roleData.app_id,\n *       role: roleData.role\n *     });\n *\n *     if (result.success) {\n *       toast({ title: 'Role revoked successfully' });\n *     } else {\n *       toast({ title: 'Failed to revoke role', variant: 'destructive' });\n *     }\n *   };\n *\n *   return <button onClick={() => handleRevokeRole(roleId, roleData)}>Revoke Role</button>;\n * }\n * ```\n */\n\nimport { useState, useCallback } from 'react';\nimport { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';\nimport type { UUID } from '../types';\n\nexport interface EventAppRoleData {\n  user_id: UUID;\n  organisation_id: UUID;\n  event_id: string;\n  app_id: UUID;\n  role: 'viewer' | 'participant' | 'planner' | 'event_admin';\n}\n\nexport interface RevokeEventAppRoleParams extends EventAppRoleData {\n  revoked_by?: UUID;\n}\n\nexport interface GrantEventAppRoleParams extends EventAppRoleData {\n  granted_by?: UUID;\n  valid_from?: string;\n  valid_to?: string | null;\n}\n\nexport interface RoleManagementResult {\n  success: boolean;\n  message?: string;\n  error?: string;\n  roleId?: UUID;\n}\n\nexport function useRoleManagement() {\n  const { user, supabase } = useUnifiedAuth();\n  const [isLoading, setIsLoading] = useState(false);\n  const [error, setError] = useState<Error | null>(null);\n\n  if (!supabase) {\n    throw new Error('useRoleManagement requires a Supabase client. Ensure UnifiedAuthProvider is configured.');\n  }\n\n  /**\n   * Revoke an event app role using the secure RPC function\n   * \n   * This function uses the `revoke_event_app_role` RPC which:\n   * - Runs with SECURITY DEFINER privileges\n   * - Includes proper permission checks\n   * - Automatically populates audit fields (revoked_by, timestamps)\n   * - Complies with Row-Level Security policies\n   * \n   * @param params - Role revocation parameters\n   * @returns Promise resolving to operation result\n   */\n  const revokeEventAppRole = useCallback(async (\n    params: RevokeEventAppRoleParams\n  ): Promise<RoleManagementResult> => {\n    setIsLoading(true);\n    setError(null);\n\n    try {\n      const { data, error: rpcError } = await supabase.rpc('revoke_event_app_role', {\n        p_user_id: params.user_id,\n        p_organisation_id: params.organisation_id,\n        p_event_id: params.event_id,\n        p_app_id: params.app_id,\n        p_role: params.role,\n        p_revoked_by: params.revoked_by || user?.id || undefined\n      });\n\n      if (rpcError) {\n        throw new Error(rpcError.message || 'Failed to revoke role');\n      }\n\n      return {\n        success: data === true,\n        message: data === true ? 'Role revoked successfully' : 'No role found to revoke',\n        error: data === false ? 'No matching role found' : undefined\n      };\n    } catch (err) {\n      const errorMessage = err instanceof Error ? err.message : 'Unknown error occurred';\n      setError(err instanceof Error ? err : new Error(errorMessage));\n      return {\n        success: false,\n        error: errorMessage\n      };\n    } finally {\n      setIsLoading(false);\n    }\n  }, [user?.id]);\n\n  /**\n   * Grant an event app role using the secure RPC function\n   * \n   * This function uses the `grant_event_app_role` RPC which:\n   * - Runs with SECURITY DEFINER privileges\n   * - Includes proper permission checks\n   * - Automatically populates audit fields (granted_by, timestamps)\n   * - Complies with Row-Level Security policies\n   * \n   * @param params - Role grant parameters\n   * @returns Promise resolving to operation result with role ID\n   */\n  const grantEventAppRole = useCallback(async (\n    params: GrantEventAppRoleParams\n  ): Promise<RoleManagementResult> => {\n    setIsLoading(true);\n    setError(null);\n\n    try {\n      const { data, error: rpcError } = await supabase.rpc('grant_event_app_role', {\n        p_user_id: params.user_id,\n        p_organisation_id: params.organisation_id,\n        p_event_id: params.event_id,\n        p_app_id: params.app_id,\n        p_role: params.role,\n        p_granted_by: params.granted_by || user?.id || undefined,\n        p_valid_from: params.valid_from,\n        p_valid_to: params.valid_to\n      });\n\n      if (rpcError) {\n        throw new Error(rpcError.message || 'Failed to grant role');\n      }\n\n      if (!data) {\n        return {\n          success: false,\n          error: 'Failed to grant role - no role ID returned'\n        };\n      }\n\n      return {\n        success: true,\n        message: 'Role granted successfully',\n        roleId: data as UUID\n      };\n    } catch (err) {\n      const errorMessage = err instanceof Error ? err.message : 'Unknown error occurred';\n      setError(err instanceof Error ? err : new Error(errorMessage));\n      return {\n        success: false,\n        error: errorMessage\n      };\n    } finally {\n      setIsLoading(false);\n    }\n  }, [user?.id]);\n\n  /**\n   * Revoke an event app role by role ID (alternative method)\n   * \n   * This fetches the role by ID first to get the required context (role name, event_id, app_id),\n   * then uses the unified `rbac_role_revoke` function to revoke it.\n   * \n   * @param roleId - The role ID to revoke\n   * @returns Promise resolving to operation result\n   */\n  const revokeRoleById = useCallback(async (\n    roleId: UUID\n  ): Promise<RoleManagementResult> => {\n    setIsLoading(true);\n    setError(null);\n\n    try {\n      // First, fetch the role by ID to get the required context\n      const { data: roleData, error: fetchError } = await supabase\n        .from('rbac_event_app_roles')\n        .select('user_id, role, event_id, app_id')\n        .eq('id', roleId)\n        .single();\n\n      if (fetchError || !roleData) {\n        throw new Error(fetchError?.message || 'Role not found');\n      }\n\n      // Construct context_id in the format required by rbac_role_revoke: \"event_id:app_id\"\n      const contextId = `${roleData.event_id}:${roleData.app_id}`;\n\n      // Now call rbac_role_revoke with the required parameters\n      const { data, error: rpcError } = await supabase.rpc('rbac_role_revoke', {\n        p_user_id: roleData.user_id,\n        p_role_type: 'event_app',\n        p_role_name: roleData.role,\n        p_context_id: contextId,\n        p_revoked_by: user?.id || undefined\n      });\n\n      if (rpcError) {\n        throw new Error(rpcError.message || 'Failed to revoke role');\n      }\n\n      // rbac_role_revoke returns a table with success, message, revoked_count, error_code\n      const result = Array.isArray(data) && data.length > 0 ? data[0] : null;\n\n      return {\n        success: result?.success === true,\n        message: result?.message || undefined,\n        error: result?.success === false ? (result?.message || result?.error_code || 'Unknown error') : undefined\n      };\n    } catch (err) {\n      const errorMessage = err instanceof Error ? err.message : 'Unknown error occurred';\n      setError(err instanceof Error ? err : new Error(errorMessage));\n      return {\n        success: false,\n        error: errorMessage\n      };\n    } finally {\n      setIsLoading(false);\n    }\n  }, [user?.id, supabase]);\n\n  return {\n    revokeEventAppRole,\n    grantEventAppRole,\n    revokeRoleById,\n    isLoading,\n    error\n  };\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA;AADA,SAAS,UAAU,WAAW,aAAa,eAAe;AAsB1D,SAAS,0BAA0B,OAA2C;AAC5E,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,QAAQ,QAAkC;AACxD,QAAM,SAAS,cAAc;AAG7B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB,qBAAqB;AAAA,IACrB;AAAA,IACA;AAAA,EACF,IAAI,eAAe;AAKnB,QAAM,gBAAgB,WAAW,mBAAmB,cAAc,OAAO,OAAO;AAKhF,MAAI,QAAQ,SAAS;AACnB,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,WAAW,YAAY,KAAK,UAAU,SAAS,IAAI;AAAA,MACnD,SAAS,CAAC,CAAC;AAAA,MACX,YAAY,CAAC,CAAC;AAAA,MACd,kBAAkB,CAAC,CAAC;AAAA,MACpB;AAAA,MACA,iBAAiB,eAAe;AAAA,MAChC,yBAAyB,CAAC,CAAC;AAAA,MAC3B,gBAAgB,sBAAsB;AAAA,MACtC;AAAA,MACA;AAAA,IACF;AACA,WAAO,KAAK,8BAA8B,WAAW;AAErD,YAAQ,KAAK,2CAA2C,WAAW;AAAA,EACrE;AAEA,QAAM,CAAC,YAAY,aAAa,IAAI,SAA4B,IAAI;AACpE,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,SAAkC,IAAI;AACtF,QAAM,CAAC,cAAc,eAAe,IAAI,SAA8B,IAAI;AAC1E,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAwB,CAAC,CAAkB;AACrF,QAAM,CAAC,cAAc,eAAe,IAAI,SAAuB,IAAI;AACnE,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AAErD,QAAM,aAAa,YAAY,MAAM;AACnC,kBAAc,IAAI;AAClB,wBAAoB,IAAI;AACxB,oBAAgB,IAAI;AACpB,qBAAiB,CAAC,CAAkB;AACpC,oBAAgB,IAAI;AAAA,EACtB,GAAG,CAAC,CAAC;AAEL,QAAM,kBAAkB,YAAY,YAAY;AAE9C,QAAI,CAAC,QAAQ,CAAC,SAAS;AACrB,iBAAW;AACX,mBAAa,KAAK;AAClB;AAAA,IACF;AAIA,QAAI,cAAc,CAAC,mBAAmB,CAAC,sBAAsB,IAAI;AAC/D,mBAAa,IAAI;AACjB,aAAO,KAAK,0EAA0E;AAAA,QACpF;AAAA,QACA;AAAA,QACA,yBAAyB,CAAC,CAAC;AAAA,QAC3B,gBAAgB,sBAAsB;AAAA,QACtC;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAIA,QAAI,eAAe;AACjB,UAAI,gBAAgB,CAAC,eAAe;AAIlC,qBAAa,IAAI;AACjB,eAAO,KAAK,mEAAmE;AAAA,UAC7E;AAAA,UACA,kBAAkB,CAAC,CAAC;AAAA,UACpB;AAAA,UACA,iBAAiB,eAAe;AAAA,UAChC,gBAAgB,sBAAsB;AAAA,QACxC,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,iBAAa,IAAI;AACjB,aAAS,IAAI;AAEb,WAAO,KAAK,kCAAkC;AAAA,MAC5C;AAAA,MACA;AAAA,MACA,kBAAkB,CAAC,CAAC;AAAA,MACpB,iBAAiB,eAAe;AAAA,MAChC,gBAAgB,sBAAsB;AAAA,IACxC,CAAC;AAED,QAAI;AACF,UAAI;AACJ,UAAI,SAAS;AAEX,YAAI;AACF,gBAAM,WAAW,MAAM,kBAAkB,EAAE,QAAQ,KAAK,IAAY,QAAQ,CAAC;AAC7E,cAAI,CAAC,YAAY,CAAC,SAAS,WAAW;AACpC,kBAAM,IAAI,MAAM,qCAAqC,OAAO,GAAG;AAAA,UACjE;AACA,kBAAQ,SAAS;AAAA,QACnB,SAAS,UAAe;AAEtB,cAAI,UAAU,SAAS,SAAS,cAAc,KAAK,UAAU,SAAS,SAAS,OAAO,GAAG;AACvF,mBAAO,KAAK,wGAAwG;AAAA,cAClH;AAAA,cACA,OAAO,SAAS;AAAA,cAChB;AAAA,cACA;AAAA,cACA,kBAAkB,CAAC,CAAC;AAAA,YACtB,CAAC;AAED,yBAAa,KAAK;AAClB;AAAA,UACF;AAEA,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,YAAM,QAAe;AAAA,QACnB,gBAAgB,sBAAsB;AAAA,QACtC,SAAS,eAAe,YAAY;AAAA,QACpC;AAAA,MACF;AAGA,aAAO,KAAK,6CAA6C;AAAA,QACvD,gBAAgB,MAAM;AAAA,QACtB,SAAS,MAAM;AAAA,QACf,OAAO,MAAM;AAAA,QACb,mBAAmB,CAAC,CAAC,MAAM;AAAA,QAC3B,YAAY,CAAC,CAAC,MAAM;AAAA,MACtB,CAAC;AAED,sBAAgB,KAAK;AAErB,YAAM,CAAC,KAAK,aAAa,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACxD,iBAAiB,EAAE,QAAQ,KAAK,IAAY,MAAM,CAAC;AAAA,QACnD,eAAe,EAAE,QAAQ,KAAK,IAAY,MAAM,CAAC;AAAA,QACjD,eAAe,EAAE,QAAQ,KAAK,IAAY,MAAM,CAAC;AAAA,MACnD,CAAC;AAED,uBAAiB,GAAG;AACpB,oBAAc,YAAY,UAAU;AACpC,0BAAoB,YAAY,gBAAgB;AAChD,sBAAgB,YAAY,gBAAgB,0BAA0B,WAAW,CAAC;AAElF,aAAO,KAAK,8CAA8C;AAAA,QACxD;AAAA,QACA,iBAAiB,OAAO,KAAK,GAAG,EAAE;AAAA,QAClC,YAAY,YAAY;AAAA,QACxB,kBAAkB,YAAY;AAAA,QAC9B,cAAc,YAAY,gBAAgB,0BAA0B,WAAW;AAAA,MACjF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,eAAe,eAAe,QAAQ,MAAM,IAAI,MAAM,6BAA6B;AACzF,aAAO,MAAM,yCAAyC,YAAY;AAClE,eAAS,YAAY;AACrB,iBAAW;AAAA,IACb,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,SAAS,QAAQ,YAAY,eAAe,eAAe,UAAU,sBAAsB,sBAAsB,IAAI,SAAS,MAAM,eAAe,cAAc,WAAW,iBAAiB,UAAU,CAAC;AAE5M,QAAM,sBAAsB;AAAA,IAC1B,CAAC,eAAgC;AAC/B,UAAI,eAAe,iBAAiB,cAAc,GAAG,GAAG;AACtD,eAAO;AAAA,MACT;AAEA,UAAI,eAAe,eAAe;AAChC,eAAO,eAAe;AAAA,MACxB;AAEA,UAAI,eAAe,aAAa;AAC9B,eAAO,qBAAqB;AAAA,MAC9B;AAEA,aAAO,cAAc,UAAwB,MAAM;AAAA,IACrD;AAAA,IACA,CAAC,YAAY,kBAAkB,aAAa;AAAA,EAC9C;AAEA,QAAM,eAAe,QAAQ,MAAM,eAAe,iBAAiB,cAAc,GAAG,MAAM,MAAM,CAAC,YAAY,aAAa,CAAC;AAC3H,QAAM,aAAa,QAAQ,MAAM,qBAAqB,eAAe,cAAc,CAAC,kBAAkB,YAAY,CAAC;AACnH,QAAM,eAAe,QAAQ,MAAM,iBAAiB,iBAAiB,cAAc,CAAC,cAAc,YAAY,CAAC;AAC/G,QAAM,wBAAwB,QAAQ,MAAM,gBAAgB,qBAAqB,aAAa,CAAC,cAAc,gBAAgB,CAAC;AAC9H,QAAM,iBAAiB,QAAQ,MAAM,gBAAgB,iBAAiB,eAAe,CAAC,cAAc,YAAY,CAAC;AAEjH,YAAU,MAAM;AAEd,WAAO,KAAK,2DAA2D;AAAA,MACrE;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,CAAC,CAAC;AAAA,MACpB,SAAS,CAAC,CAAC;AAAA,MACX,YAAY,CAAC,CAAC;AAAA,MACd,yBAAyB,CAAC,CAAC;AAAA,MAC3B,gBAAgB,sBAAsB;AAAA,MACtC;AAAA,MACA;AAAA,IACF,CAAC;AACD,oBAAgB;AAAA,EAClB,GAAG,CAAC,iBAAiB,SAAS,eAAe,cAAc,eAAe,MAAM,SAAS,sBAAsB,iBAAiB,UAAU,CAAC;AAE3I,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;ACzRA,SAAS,aAAAA,YAAW,YAAAC,WAAU,cAAc;;;ACU5C,eAAsB,yBACpB,UACA,SACsB;AACtB,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,SAC3B,KAAK,OAAO,EACZ,OAAO,iBAAiB,EACxB,GAAG,YAAY,OAAO,EACtB,OAAO;AAEV,MAAI,SAAS,CAAC,MAAM;AAClB,WAAO;AAAA,EACT;AAEA,SAAO,KAAK;AACd;AAUA,eAAsB,qBACpB,UACA,SACA,OACuB;AACvB,QAAM,iBAAiB,MAAM,yBAAyB,UAAU,OAAO;AAEvE,MAAI,CAAC,gBAAgB;AACnB,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;AD7CA;AAEA,IAAM,MAAM,aAAa,kBAAkB;AA4CpC,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF,GAAoD;AAClD,QAAM,CAAC,eAAe,gBAAgB,IAAIC,UAAuB,IAAI;AACrE,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAGrD,QAAM,iBAAiB,OAA+E;AAAA,IACpG,gBAAgB;AAAA,IAChB,OAAO;AAAA,IACP,SAAS;AAAA,EACX,CAAC;AAGD,EAAAC,WAAU,MAAM;AACd,QAAI,iBAAiB,cAAc,gBAAgB;AACjD,YAAM,WAAW;AAAA,QACf,gBAAgB,cAAc;AAAA,QAC9B,OAAO,cAAc;AAAA,QACrB,SAAS,cAAc;AAAA,MACzB;AAGA,UAAI,eAAe,QAAQ,mBAAmB,SAAS,kBACnD,eAAe,QAAQ,YAAY,SAAS,WAC5C,eAAe,QAAQ,UAAU,SAAS,OAAO;AACnD,uBAAe,UAAU;AAAA,UACvB,gBAAgB,SAAS;AAAA,UACzB,OAAO,SAAS,SAAS;AAAA,UACzB,SAAS,SAAS;AAAA,QACpB;AAAA,MACF;AAAA,IACF,WAAW,CAAC,eAAe;AAEzB,qBAAe,UAAU,EAAE,gBAAgB,IAAI,OAAO,IAAI,SAAS,OAAU;AAAA,IAC/E;AAAA,EACF,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,cAAc,eAAe;AAEnC,EAAAA,WAAU,MAAM;AACd,QAAI,YAAY;AAEhB,UAAM,eAAe,YAAY;AAC/B,mBAAa,IAAI;AACjB,eAAS,IAAI;AAEb,UAAI;AAEF,YAAI,QAA4B;AAGhC,YAAI,UAAU;AACZ,gBAAM,UAAU,kBAAkB;AAClC,cAAI,SAAS;AACX,gBAAI;AACF,oBAAM,EAAE,MAAM,KAAK,OAAAC,OAAM,IAAI,MAAM,SAChC,KAAK,WAAW,EAChB,OAAO,qBAAqB,EAC5B,GAAG,QAAQ,OAAO,EAClB,GAAG,aAAa,IAAI,EACpB,OAAO;AAEV,kBAAIA,QAAO;AAET,sBAAM,EAAE,MAAM,YAAY,IAAI,MAAM,SACjC,KAAK,WAAW,EAChB,OAAO,qBAAqB,EAC5B,GAAG,QAAQ,OAAO,EAClB,OAAO;AAEV,oBAAI,aAAa;AACf,sBAAI,MAAM,QAAQ,OAAO,wCAAwC,YAAY,SAAS,GAAG;AAAA,gBAC3F,OAAO;AACL,sBAAI,MAAM,QAAQ,OAAO,gCAAgC;AAAA,gBAC3D;AAAA,cACF,WAAW,KAAK;AACd,wBAAQ,IAAI;AAAA,cACd;AAAA,YACF,SAASA,QAAO;AACd,kBAAI,MAAM,sCAAsCA,MAAK;AAAA,YACvD;AAAA,UACF;AAAA,QACF;AAKA,YAAI,0BAA0B,iBAAiB;AAC7C,cAAI,CAAC,WAAW;AACd,6BAAiB;AAAA,cACf,gBAAgB;AAAA,cAChB,SAAS;AAAA,cACT;AAAA,YACF,CAAC;AACD,yBAAa,KAAK;AAAA,UACpB;AACA;AAAA,QACF;AAGA,YAAI,wBAAwB;AAC1B,cAAI,CAAC,WAAW;AACd,6BAAiB;AAAA,cACf,gBAAgB;AAAA,cAChB,SAAS,mBAAmB;AAAA,cAC5B;AAAA,YACF,CAAC;AACD,yBAAa,KAAK;AAAA,UACpB;AACA;AAAA,QACF;AAGA,YAAI,mBAAmB,UAAU;AAC/B,cAAI;AACF,kBAAM,aAAa,MAAM,qBAAqB,UAAU,iBAAiB,KAAK;AAC9E,gBAAI,CAAC,YAAY;AACf,kBAAI,MAAM,mDAAmD;AAC7D,kBAAI,CAAC,WAAW;AACd,iCAAiB,IAAI;AACrB,yBAAS,IAAI,MAAM,mDAAmD,CAAC;AACvE,6BAAa,KAAK;AAAA,cACpB;AACA;AAAA,YACF;AAEA,gBAAI,CAAC,WAAW;AACd,+BAAiB;AAAA,gBACf,GAAG;AAAA,gBACH,OAAO,SAAS,WAAW;AAAA,cAC7B,CAAC;AACD,2BAAa,KAAK;AAAA,YACpB;AAAA,UACF,SAAS,KAAK;AACZ,gBAAI,MAAM,qCAAqC,GAAG;AAClD,gBAAI,CAAC,WAAW;AACd,+BAAiB,IAAI;AACrB,uBAAS,GAAY;AACrB,2BAAa,KAAK;AAAA,YACpB;AAAA,UACF;AACA;AAAA,QACF;AAGA,YAAI,MAAM,4CAA4C;AACtD,YAAI,CAAC,WAAW;AACd,2BAAiB,IAAI;AACrB,mBAAS,IAAI,MAAM,4CAA4C,CAAC;AAChE,uBAAa,KAAK;AAAA,QACpB;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,CAAC,WAAW;AACd,mBAAS,GAAY;AACrB,uBAAa,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAEA,iBAAa;AAEb,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,wBAAwB,iBAAiB,QAAQ,CAAC;AAEtD,SAAO;AAAA,IACL,eAAe,YAAY,iBAAiB,cAAuB;AAAA,IACnE;AAAA,IACA;AAAA,EACF;AACF;;;AErOA,OAAO,SAAS,YAAAC,WAAU,aAAAC,YAAW,eAAAC,cAAa,WAAAC,UAAS,UAAAC,eAAc;AA+ClE,SAAS,eACd,QACA,gBACA,SACA,OACA;AACA,QAAM,CAAC,aAAa,cAAc,IAAIC,UAAwB,CAAC,CAAkB;AACjF,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AACrD,QAAM,CAAC,cAAc,eAAe,IAAIA,UAAS,CAAC;AAClD,QAAM,gBAAgBC,QAAO,KAAK;AAClC,QAAM,SAAS,cAAc;AAG7B,QAAM,gBAAgBA,QAAO,EAAE,QAAQ,gBAAgB,SAAS,MAAM,CAAC;AAGvE,QAAM,QAAQ,kBAAkB;AAIhC,SAAO,KAAK,2CAA2C;AAAA,IACrD;AAAA,IACA,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IACA,UAAU,CAAC,CAAC;AAAA,IACZ,mBAAmB,CAAC,CAAC;AAAA,EACvB,CAAC;AAGD,QAAM,UAAU,MAAM;AACpB,WAAO,KAAK,8CAA8C;AAAA,MACxD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,CAAC,CAAC;AAAA,MACZ,mBAAmB,CAAC,CAAC;AAAA,IACvB,CAAC;AAAA,EACH,GAAG,CAAC,QAAQ,gBAAgB,SAAS,KAAK,CAAC;AAG3C,EAAAC,WAAU,MAAM;AACd,QAAI,CAAC,SAAS,UAAU,QAAS,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAK;AAClF,YAAM,YAAY,WAAW,MAAM;AACjC,iBAAS,IAAI,MAAM,wDAAwD,CAAC;AAC5E,qBAAa,KAAK;AAAA,MACpB,GAAG,GAAI;AAEP,aAAO,MAAM,aAAa,SAAS;AAAA,IACrC;AAEA,QAAI,OAAO,YAAY,0DAA0D;AAC/E,eAAS,IAAI;AAAA,IACf;AAAA,EACF,GAAG,CAAC,gBAAgB,KAAK,CAAC;AAI1B,QAAM,gBACJ,cAAc,QAAQ,WAAW,UACjC,cAAc,QAAQ,mBAAmB,kBACzC,cAAc,QAAQ,YAAY,WAClC,cAAc,QAAQ,UAAU;AAElC,MAAI,eAAe;AACjB,WAAO,KAAK,0DAA0D;AAAA,MACpE;AAAA,MACA,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,MACA,UAAU,CAAC,CAAC;AAAA,MACZ,WAAW,cAAc,QAAQ;AAAA,MACjC,cAAc,cAAc,QAAQ,UAAU;AAAA,IAChD,CAAC;AACD,kBAAc,UAAU,EAAE,QAAQ,gBAAgB,SAAS,MAAM;AAEjE,oBAAgB,UAAQ,OAAO,CAAC;AAAA,EAClC;AAEA,EAAAA,WAAU,MAAM;AACd,UAAM,mBAAmB,YAAY;AACnC,aAAO,KAAK,8CAA8C;AAAA,QACxD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,CAAC,CAAC;AAAA,QACZ,YAAY,cAAc;AAAA,MAC5B,CAAC;AAGD,UAAI,cAAc,SAAS;AACzB,eAAO,KAAK,sDAAsD;AAAA,UAChE;AAAA,UACA,OAAO;AAAA,YACL,gBAAgB;AAAA,YAChB;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAEA,UAAI,CAAC,QAAQ;AACX,eAAO,KAAK,6CAA6C;AACzD,uBAAe,CAAC,CAAkB;AAClC,qBAAa,KAAK;AAClB;AAAA,MACF;AAKA,UAAI,CAAC,SAAS,UAAU,QAAS,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAK;AAClF,eAAO,KAAK,8CAA8C;AAAA,UACxD;AAAA,UACA,UAAU,CAAC,CAAC;AAAA,QACd,CAAC;AAED,qBAAa,IAAI;AACjB,iBAAS,IAAI;AACb;AAAA,MACF;AAKA,UAAI,CAAC,OAAO;AACV,eAAO,KAAK,wFAAwF;AAAA,UAClG;AAAA,UACA,gBAAgB;AAAA,UAChB;AAAA,UACA,UAAU;AAAA,QACZ,CAAC;AAAA,MAEH;AACA,aAAO,KAAK,yCAAyC;AAAA,QACnD;AAAA,QACA,OAAO;AAAA,UACL,gBAAgB;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAAA,QACA,UAAU,CAAC,CAAC;AAAA,MACd,CAAC;AAED,UAAI;AACF,sBAAc,UAAU;AACxB,qBAAa,IAAI;AACjB,iBAAS,IAAI;AAGb,cAAM,QAAe;AAAA,UACnB,gBAAgB;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAGA,cAAM,gBAAgB,MAAM,iBAAiB,EAAE,QAAQ,MAAM,CAAC;AAE9D,eAAO,KAAK,qDAAqD;AAAA,UAC/D,iBAAiB,OAAO,KAAK,aAAa,EAAE;AAAA,UAC5C,aAAa,CAAC,CAAC,cAAc,GAAG;AAAA,UAChC,OAAO;AAAA,YACL,gBAAgB;AAAA,YAChB;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AAGD,uBAAe,aAAa;AAAA,MAC9B,SAAS,KAAK;AAGZ,eAAO,MAAM,iDAAiD,GAAG;AACjE,iBAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,6BAA6B,CAAC;AAAA,MAEhF,UAAE;AACA,qBAAa,KAAK;AAClB,sBAAc,UAAU;AAAA,MAC1B;AAAA,IACF;AAEA,qBAAiB;AAAA,EACnB,GAAG,CAAC,cAAc,QAAQ,gBAAgB,SAAS,KAAK,CAAC;AAEzD,QAAM,gBAAgBC,aAAY,CAAC,eAAoC;AACrE,QAAI,YAAY,GAAG,GAAG;AACpB,aAAO;AAAA,IACT;AACA,WAAO,YAAY,UAAU,MAAM;AAAA,EACrC,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,mBAAmBA,aAAY,CAAC,mBAA0C;AAC9E,QAAI,YAAY,GAAG,GAAG;AACpB,aAAO;AAAA,IACT;AACA,WAAO,eAAe,KAAK,OAAK,YAAY,CAAC,MAAM,IAAI;AAAA,EACzD,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,oBAAoBA,aAAY,CAAC,mBAA0C;AAC/E,QAAI,YAAY,GAAG,GAAG;AACpB,aAAO;AAAA,IACT;AACA,WAAO,eAAe,MAAM,OAAK,YAAY,CAAC,MAAM,IAAI;AAAA,EAC1D,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,UAAUA,aAAY,YAAY;AAEtC,QAAI,cAAc,SAAS;AACzB;AAAA,IACF;AAEA,QAAI,CAAC,QAAQ;AACX,qBAAe,CAAC,CAAkB;AAClC,mBAAa,KAAK;AAClB;AAAA,IACF;AAIA,QAAI,CAAC,SAAS,UAAU,QAAS,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAK;AAElF,mBAAa,IAAI;AACjB,eAAS,IAAI;AACb;AAAA,IACF;AAEA,QAAI;AACF,oBAAc,UAAU;AACxB,mBAAa,IAAI;AACjB,eAAS,IAAI;AAGb,YAAM,QAAe;AAAA,QACnB,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAGA,YAAM,gBAAgB,MAAM,iBAAiB,EAAE,QAAQ,MAAM,CAAC;AAG9D,qBAAe,aAAa;AAAA,IAC9B,SAAS,KAAK;AAGZ,YAAMC,UAAS,cAAc;AAC7B,MAAAA,QAAO,MAAM,kCAAkC,GAAG;AAClD,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,6BAA6B,CAAC;AAAA,IAEhF,UAAE;AACA,mBAAa,KAAK;AAClB,oBAAc,UAAU;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,QAAQ,gBAAgB,SAAS,KAAK,CAAC;AAG3C,SAAOC,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,CAAC,aAAa,WAAW,OAAO,eAAe,kBAAkB,mBAAmB,OAAO,CAAC;AAClG;AAwBO,SAAS,OACd,QACA,OACA,YACA,QACA,WAAoB,MACpB;AACA,QAAM,CAAC,KAAK,MAAM,IAAIL,UAAkB,KAAK;AAC7C,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAGrD,QAAM,eAAe,SAAS,OAAO,UAAU;AAC/C,QAAM,iBAAiB,eAAe,MAAM,iBAAiB;AAC7D,QAAM,UAAU,eAAe,MAAM,UAAU;AAC/C,QAAM,QAAQ,eAAe,MAAM,QAAQ;AAG3C,EAAAE,WAAU,MAAM;AACd,QAAI,CAAC,gBAAgB,CAAC,kBAAkB,mBAAmB,QAAS,OAAO,mBAAmB,YAAY,eAAe,KAAK,MAAM,IAAK;AACvI,YAAM,YAAY,WAAW,MAAM;AACjC,iBAAS,IAAI,MAAM,wDAAwD,CAAC;AAC5E,qBAAa,KAAK;AAClB,eAAO,KAAK;AAAA,MACd,GAAG,GAAI;AAEP,aAAO,MAAM,aAAa,SAAS;AAAA,IACrC;AAEA,QAAI,OAAO,YAAY,0DAA0D;AAC/E,eAAS,IAAI;AAAA,IACf;AAAA,EACF,GAAG,CAAC,cAAc,gBAAgB,KAAK,CAAC;AAGxC,QAAM,gBAAgBD,QAAoB,IAAI;AAC9C,QAAM,eAAeA,QAAsB,IAAI;AAC/C,QAAM,oBAAoBA,QAA0B,IAAI;AACxD,QAAM,gBAAgBA,QAAgC,IAAI;AAC1D,QAAM,kBAAkBA,QAAuB,IAAI;AAEnD,EAAAC,WAAU,MAAM;AAEd,UAAM,WAAW,eAAe,GAAG,cAAc,IAAI,OAAO,IAAI,KAAK,KAAK;AAG1E,QACE,cAAc,YAAY,UAC1B,aAAa,YAAY,YACzB,kBAAkB,YAAY,cAC9B,cAAc,YAAY,UAC1B,gBAAgB,YAAY,UAC5B;AACA,oBAAc,UAAU;AACxB,mBAAa,UAAU;AACvB,wBAAkB,UAAU;AAC5B,oBAAc,UAAU;AACxB,sBAAgB,UAAU;AAG1B,YAAM,kBAAkB,YAAY;AAClC,YAAI,CAAC,QAAQ;AACX,iBAAO,KAAK;AACZ,uBAAa,KAAK;AAClB;AAAA,QACF;AAGA,YAAI,CAAC,cAAc;AACjB,uBAAa,IAAI;AACjB,iBAAO,KAAK;AACZ,mBAAS,IAAI;AAEb;AAAA,QACF;AAIA,YAAI,CAAC,kBAAkB,mBAAmB,QAAS,OAAO,mBAAmB,YAAY,eAAe,KAAK,MAAM,IAAK;AACtH,uBAAa,IAAI;AACjB,iBAAO,KAAK;AACZ,mBAAS,IAAI;AAEb;AAAA,QACF;AAEA,YAAI;AACF,uBAAa,IAAI;AACjB,mBAAS,IAAI;AAGb,gBAAM,aAAoB;AAAA,YACxB;AAAA,YACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,YAC7B,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,UAC3B;AAEA,gBAAM,SAAS,WACX,MAAM,kBAAkB,EAAE,QAAQ,OAAO,YAAY,YAAY,OAAO,CAAC,IACzE,MAAM,YAAY,EAAE,QAAQ,OAAO,YAAY,YAAY,OAAO,CAAC;AAEvE,iBAAO,MAAM;AAAA,QACf,SAAS,KAAK;AACZ,gBAAM,SAAS,cAAc;AAC7B,iBAAO,MAAM,2BAA2B,EAAE,YAAY,OAAO,IAAI,CAAC;AAClE,mBAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,4BAA4B,CAAC;AAC7E,iBAAO,KAAK;AAAA,QACd,UAAE;AACA,uBAAa,KAAK;AAAA,QACpB;AAAA,MACF;AAEA,sBAAgB;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,QAAQ,cAAc,gBAAgB,SAAS,OAAO,YAAY,QAAQ,QAAQ,CAAC;AAEvF,QAAM,UAAUC,aAAY,YAAY;AACtC,QAAI,CAAC,QAAQ;AACX,aAAO,KAAK;AACZ,mBAAa,KAAK;AAClB;AAAA,IACF;AAGA,QAAI,CAAC,cAAc;AACjB,aAAO,KAAK;AACZ,mBAAa,IAAI;AACjB,eAAS,IAAI;AACb;AAAA,IACF;AAGA,QAAI,CAAC,kBAAkB,mBAAmB,QAAS,OAAO,mBAAmB,YAAY,eAAe,KAAK,MAAM,IAAK;AACtH,aAAO,KAAK;AACZ,mBAAa,IAAI;AACjB,eAAS,IAAI;AACb;AAAA,IACF;AAEA,QAAI;AACF,mBAAa,IAAI;AACjB,eAAS,IAAI;AAGb,YAAM,aAAoB;AAAA,QACxB;AAAA,QACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC7B,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MAC3B;AAEA,YAAM,SAAS,WACX,MAAM,kBAAkB,EAAE,QAAQ,OAAO,YAAY,YAAY,OAAO,CAAC,IACzE,MAAM,YAAY,EAAE,QAAQ,OAAO,YAAY,YAAY,OAAO,CAAC;AAEvE,aAAO,MAAM;AAAA,IACf,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,4BAA4B,CAAC;AAC7E,aAAO,KAAK;AAAA,IACd,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,cAAc,gBAAgB,SAAS,OAAO,YAAY,QAAQ,QAAQ,CAAC;AAGvF,SAAOE,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,CAAC,KAAK,WAAW,OAAO,OAAO,CAAC;AACtC;AA0BO,SAAS,eAAe,QAAc,OAK3C;AACA,QAAM,CAAC,aAAa,cAAc,IAAIL,UAA0B,QAAQ;AACxE,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAErD,QAAM,mBAAmBG,aAAY,YAAY;AAC/C,QAAI,CAAC,QAAQ;AACX,qBAAe,QAAQ;AACvB,mBAAa,KAAK;AAClB;AAAA,IACF;AAEA,QAAI;AACF,mBAAa,IAAI;AACjB,eAAS,IAAI;AAEb,YAAM,QAAQ,MAAM,eAAe,EAAE,QAAQ,MAAM,CAAC;AACpD,qBAAe,KAAK;AAAA,IACtB,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,8BAA8B,CAAC;AAC/E,qBAAe,QAAQ;AAAA,IACzB,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,gBAAgB,MAAM,SAAS,MAAM,KAAK,CAAC;AAE7D,EAAAD,WAAU,MAAM;AACd,qBAAiB;AAAA,EACnB,GAAG,CAAC,gBAAgB,CAAC;AAGrB,SAAOG,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI,CAAC,aAAa,WAAW,OAAO,gBAAgB,CAAC;AACvD;AAiCO,SAAS,uBACd,QACA,OACA,aACA,WAAoB,MAMpB;AACA,QAAM,CAAC,SAAS,UAAU,IAAIL,UAAsC,CAAC,CAAgC;AACrG,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAErD,QAAM,mBAAmBG,aAAY,YAAY;AAC/C,QAAI,CAAC,UAAU,YAAY,WAAW,GAAG;AACvC,iBAAW,CAAC,CAAgC;AAC5C,mBAAa,KAAK;AAClB;AAAA,IACF;AAEA,QAAI;AACF,mBAAa,IAAI;AACjB,eAAS,IAAI;AAEb,YAAM,oBAAiD,CAAC;AAGxD,iBAAW,cAAc,aAAa;AACpC,cAAM,SAAS,WACX,MAAM,kBAAkB,EAAE,QAAQ,OAAO,WAAW,CAAC,IACrD,MAAM,YAAY,EAAE,QAAQ,OAAO,WAAW,CAAC;AACnD,0BAAkB,UAAU,IAAI;AAAA,MAClC;AAEA,iBAAW,iBAAiB;AAAA,IAC9B,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,6BAA6B,CAAC;AAC9E,iBAAW,CAAC,CAAgC;AAAA,IAC9C,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,gBAAgB,MAAM,SAAS,MAAM,OAAO,aAAa,QAAQ,CAAC;AAEpF,EAAAD,WAAU,MAAM;AACd,qBAAiB;AAAA,EACnB,GAAG,CAAC,gBAAgB,CAAC;AAGrB,SAAOG,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI,CAAC,SAAS,WAAW,OAAO,gBAAgB,CAAC;AACnD;AA2BO,SAAS,oBACd,QACA,OACA,aACA,WAAoB,MAMpB;AACA,QAAM,CAAC,QAAQ,SAAS,IAAIL,UAAkB,KAAK;AACnD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAErD,QAAM,qBAAqBG,aAAY,YAAY;AACjD,QAAI,CAAC,UAAU,YAAY,WAAW,GAAG;AACvC,gBAAU,KAAK;AACf,mBAAa,KAAK;AAClB;AAAA,IACF;AAEA,QAAI;AACF,mBAAa,IAAI;AACjB,eAAS,IAAI;AAEb,UAAI,mBAAmB;AAEvB,iBAAW,cAAc,aAAa;AACpC,cAAM,SAAS,WACX,MAAM,kBAAkB,EAAE,QAAQ,OAAO,WAAW,CAAC,IACrD,MAAM,YAAY,EAAE,QAAQ,OAAO,WAAW,CAAC;AAEnD,YAAI,QAAQ;AACV,6BAAmB;AACnB;AAAA,QACF;AAAA,MACF;AAEA,gBAAU,gBAAgB;AAAA,IAC5B,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,6BAA6B,CAAC;AAC9E,gBAAU,KAAK;AAAA,IACjB,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,gBAAgB,MAAM,SAAS,MAAM,OAAO,aAAa,QAAQ,CAAC;AAEpF,EAAAD,WAAU,MAAM;AACd,uBAAmB;AAAA,EACrB,GAAG,CAAC,kBAAkB,CAAC;AAGvB,SAAOG,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI,CAAC,QAAQ,WAAW,OAAO,kBAAkB,CAAC;AACpD;AA2BO,SAAS,qBACd,QACA,OACA,aACA,WAAoB,MAMpB;AACA,QAAM,CAAC,QAAQ,SAAS,IAAIL,UAAkB,KAAK;AACnD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAErD,QAAM,sBAAsBG,aAAY,YAAY;AAClD,QAAI,CAAC,UAAU,YAAY,WAAW,GAAG;AACvC,gBAAU,KAAK;AACf,mBAAa,KAAK;AAClB;AAAA,IACF;AAEA,QAAI;AACF,mBAAa,IAAI;AACjB,eAAS,IAAI;AAEb,UAAI,oBAAoB;AAExB,iBAAW,cAAc,aAAa;AACpC,cAAM,SAAS,WACX,MAAM,kBAAkB,EAAE,QAAQ,OAAO,WAAW,CAAC,IACrD,MAAM,YAAY,EAAE,QAAQ,OAAO,WAAW,CAAC;AAEnD,YAAI,CAAC,QAAQ;AACX,8BAAoB;AACpB;AAAA,QACF;AAAA,MACF;AAEA,gBAAU,iBAAiB;AAAA,IAC7B,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,6BAA6B,CAAC;AAC9E,gBAAU,KAAK;AAAA,IACjB,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,gBAAgB,MAAM,SAAS,MAAM,OAAO,aAAa,QAAQ,CAAC;AAEpF,EAAAD,WAAU,MAAM;AACd,wBAAoB;AAAA,EACtB,GAAG,CAAC,mBAAmB,CAAC;AAGxB,SAAOG,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI,CAAC,QAAQ,WAAW,OAAO,mBAAmB,CAAC;AACrD;AA0BO,SAAS,qBAAqB,QAAc,OAMjD;AACA,QAAM,CAAC,aAAa,cAAc,IAAIL,UAAwB,CAAC,CAAkB;AACjF,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAErD,QAAM,yBAAyBG,aAAY,YAAY;AACrD,QAAI,CAAC,QAAQ;AACX,qBAAe,CAAC,CAAkB;AAClC,mBAAa,KAAK;AAClB;AAAA,IACF;AAEA,QAAI;AACF,mBAAa,IAAI;AACjB,eAAS,IAAI;AAEb,YAAM,gBAAgB,MAAM,iBAAiB,EAAE,QAAQ,MAAM,CAAC;AAC9D,qBAAe,aAAa;AAAA,IAC9B,SAAS,KAAK;AACZ,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,oCAAoC,CAAC;AAAA,IACvF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,gBAAgB,MAAM,SAAS,MAAM,KAAK,CAAC;AAE7D,QAAM,kBAAkBA,aAAY,MAAM;AAGxC,2BAAuB;AAAA,EACzB,GAAG,CAAC,sBAAsB,CAAC;AAE3B,EAAAD,WAAU,MAAM;AACd,2BAAuB;AAAA,EACzB,GAAG,CAAC,sBAAsB,CAAC;AAG3B,SAAOG,SAAQ,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI,CAAC,aAAa,WAAW,OAAO,iBAAiB,sBAAsB,CAAC;AAC9E;;;ACn3BA;AACA;AAFA,SAAS,WAAAC,gBAAe;AA2DjB,SAAS,uBACd,UACA,UAAyC,CAAC,GACrB;AACrB,QAAM,EAAE,aAAa,OAAO,eAAe,KAAK,IAAI;AAGpD,QAAM,EAAE,MAAM,SAAS,IAAI,eAAe;AAG1C,QAAM,EAAE,qBAAqB,IAAI,iBAAiB;AAGlD,MAAI,gBAA6C;AACjD,MAAI;AACF,UAAM,gBAAgB,UAAU;AAChC,oBAAgB,cAAc;AAAA,EAChC,SAASC,QAAO;AAAA,EAGhB;AAGA,QAAM,EAAE,eAAe,WAAW,cAAc,OAAO,WAAW,IAAI,iBAAiB;AAAA,IACrF;AAAA,IACA,wBAAwB,sBAAsB,MAAM;AAAA,IACpD,iBAAiB,eAAe,YAAY;AAAA,EAC9C,CAAC;AAGD,QAAM,QAAe,iBAAiB;AAAA,IACpC,gBAAgB,sBAAsB,MAAM;AAAA,IAC5C,SAAS,eAAe,YAAY;AAAA,IACpC,OAAO;AAAA,EACT;AAGA,QAAM,EAAE,KAAK,iBAAiB,WAAW,eAAe,OAAO,YAAY,IAAI;AAAA,IAC7E,MAAM,MAAM;AAAA,IACZ;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,QAAM,EAAE,KAAK,iBAAiB,WAAW,eAAe,OAAO,YAAY,IAAI;AAAA,IAC7E,MAAM,MAAM;AAAA,IACZ;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAEA,QAAM,EAAE,KAAK,iBAAiB,WAAW,eAAe,OAAO,YAAY,IAAI;AAAA,IAC7E,MAAM,MAAM;AAAA,IACZ;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAGA,QAAM,EAAE,KAAK,eAAe,WAAW,aAAa,OAAO,UAAU,IAAI;AAAA,IACvE,MAAM,MAAM;AAAA,IACZ;AAAA,IACA,QAAQ,QAAQ;AAAA,IAChB;AAAA;AAAA,IACA;AAAA;AAAA,EACF;AAGA,QAAM,YAAYC,SAAQ,MAAM;AAC9B,WAAO,gBAAgB,iBAAiB,iBAAiB,iBAAkB,cAAc;AAAA,EAC3F,GAAG,CAAC,cAAc,eAAe,eAAe,eAAe,aAAa,UAAU,CAAC;AAGvF,QAAM,QAAQA,SAAQ,MAAM;AAC1B,QAAI,WAAY,QAAO;AACvB,QAAI,YAAa,QAAO;AACxB,QAAI,YAAa,QAAO;AACxB,QAAI,YAAa,QAAO;AACxB,QAAI,cAAc,UAAW,QAAO;AACpC,WAAO;AAAA,EACT,GAAG,CAAC,YAAY,aAAa,aAAa,aAAa,WAAW,UAAU,CAAC;AAK7E,SAAOA,SAAQ,OAAO;AAAA,IACpB,WAAW,CAAC,QAAgB;AAG1B,UAAI,QAAQ,UAAU;AACpB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,CAAC,QAAgB;AAC1B,UAAI,QAAQ,UAAU;AACpB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,CAAC,QAAgB;AAC1B,UAAI,QAAQ,UAAU;AACpB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,QAAgB;AACxB,UAAI,CAAC,YAAY;AACf,eAAO;AAAA,MACT;AACA,UAAI,QAAQ,UAAU;AACpB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;AClMA;AADA,SAAS,YAAAC,WAAU,eAAAC,oBAAmB;AA6B/B,SAAS,oBAAoB;AAClC,QAAM,EAAE,MAAM,SAAS,IAAI,eAAe;AAC1C,QAAM,CAAC,WAAW,YAAY,IAAID,UAAS,KAAK;AAChD,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAuB,IAAI;AAErD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,yFAAyF;AAAA,EAC3G;AAcA,QAAM,qBAAqBC,aAAY,OACrC,WACkC;AAClC,iBAAa,IAAI;AACjB,aAAS,IAAI;AAEb,QAAI;AACF,YAAM,EAAE,MAAM,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,yBAAyB;AAAA,QAC5E,WAAW,OAAO;AAAA,QAClB,mBAAmB,OAAO;AAAA,QAC1B,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO,cAAc,MAAM,MAAM;AAAA,MACjD,CAAC;AAED,UAAI,UAAU;AACZ,cAAM,IAAI,MAAM,SAAS,WAAW,uBAAuB;AAAA,MAC7D;AAEA,aAAO;AAAA,QACL,SAAS,SAAS;AAAA,QAClB,SAAS,SAAS,OAAO,8BAA8B;AAAA,QACvD,OAAO,SAAS,QAAQ,2BAA2B;AAAA,MACrD;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU;AAC1D,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,YAAY,CAAC;AAC7D,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,MACT;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,MAAM,EAAE,CAAC;AAcb,QAAM,oBAAoBA,aAAY,OACpC,WACkC;AAClC,iBAAa,IAAI;AACjB,aAAS,IAAI;AAEb,QAAI;AACF,YAAM,EAAE,MAAM,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,wBAAwB;AAAA,QAC3E,WAAW,OAAO;AAAA,QAClB,mBAAmB,OAAO;AAAA,QAC1B,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO,cAAc,MAAM,MAAM;AAAA,QAC/C,cAAc,OAAO;AAAA,QACrB,YAAY,OAAO;AAAA,MACrB,CAAC;AAED,UAAI,UAAU;AACZ,cAAM,IAAI,MAAM,SAAS,WAAW,sBAAsB;AAAA,MAC5D;AAEA,UAAI,CAAC,MAAM;AACT,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO;AAAA,QACT;AAAA,MACF;AAEA,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,QAAQ;AAAA,MACV;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU;AAC1D,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,YAAY,CAAC;AAC7D,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,MACT;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,MAAM,EAAE,CAAC;AAWb,QAAM,iBAAiBA,aAAY,OACjC,WACkC;AAClC,iBAAa,IAAI;AACjB,aAAS,IAAI;AAEb,QAAI;AAEF,YAAM,EAAE,MAAM,UAAU,OAAO,WAAW,IAAI,MAAM,SACjD,KAAK,sBAAsB,EAC3B,OAAO,iCAAiC,EACxC,GAAG,MAAM,MAAM,EACf,OAAO;AAEV,UAAI,cAAc,CAAC,UAAU;AAC3B,cAAM,IAAI,MAAM,YAAY,WAAW,gBAAgB;AAAA,MACzD;AAGA,YAAM,YAAY,GAAG,SAAS,QAAQ,IAAI,SAAS,MAAM;AAGzD,YAAM,EAAE,MAAM,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,oBAAoB;AAAA,QACvE,WAAW,SAAS;AAAA,QACpB,aAAa;AAAA,QACb,aAAa,SAAS;AAAA,QACtB,cAAc;AAAA,QACd,cAAc,MAAM,MAAM;AAAA,MAC5B,CAAC;AAED,UAAI,UAAU;AACZ,cAAM,IAAI,MAAM,SAAS,WAAW,uBAAuB;AAAA,MAC7D;AAGA,YAAM,SAAS,MAAM,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI;AAElE,aAAO;AAAA,QACL,SAAS,QAAQ,YAAY;AAAA,QAC7B,SAAS,QAAQ,WAAW;AAAA,QAC5B,OAAO,QAAQ,YAAY,QAAS,QAAQ,WAAW,QAAQ,cAAc,kBAAmB;AAAA,MAClG;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU;AAC1D,eAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,YAAY,CAAC;AAC7D,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,MACT;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC;AAEvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["useEffect","useState","useState","useEffect","error","useState","useEffect","useCallback","useMemo","useRef","useState","useRef","useEffect","useCallback","logger","useMemo","useMemo","error","useMemo","useState","useCallback"]}

package/dist/{chunk-CNUXIWLO.js → chunk-S263HQKM.js}

@@ -25,13 +25,13 @@ import {
   SelectSeparator,
   SelectTrigger,
   SelectValue
-} from "./chunk-JLQBNZEG.js";
+} from "./chunk-URRWD5AR.js";
 import {
   useCan,
   usePermissions,
   useRBAC,
   useResolvedScope
-} from "./chunk-4X7FFPG5.js";
+} from "./chunk-KY4K2RTG.js";
 import {
   isSuperAdmin
 } from "./chunk-BVYWGZVV.js";
@@ -1187,11 +1187,6 @@ var NavigationMenu = React12.forwardRef(({
   }, [scopeLoading, resolvedScope?.appId, selectedOrganisation?.id, authContext?.appName, authContext?.user?.id, resolvedAppId]);
   const effectiveScope = React12.useMemo(() => {
     if (!scopeLoading && resolvedScope?.organisationId) {
-      logger.warn("NavigationMenu", "Using resolvedScope", {
-        organisationId: resolvedScope.organisationId,
-        eventId: resolvedScope.eventId,
-        appId: resolvedScope.appId
-      });
       return resolvedScope;
     } else if (!scopeLoading && selectedOrganisation?.id) {
       const fallbackScope = {
@@ -1199,46 +1194,19 @@ var NavigationMenu = React12.forwardRef(({
         eventId: selectedEvent?.event_id || void 0,
         appId: resolvedAppId
       };
-      logger.warn("NavigationMenu", "Using fallback scope", {
-        organisationId: fallbackScope.organisationId,
-        eventId: fallbackScope.eventId,
-        appId: fallbackScope.appId,
-        resolvedAppId,
-        hasResolvedScope: !!resolvedScope,
-        scopeLoading
-      });
       return fallbackScope;
     }
-    logger.warn("NavigationMenu", "effectiveScope is null", {
-      scopeLoading,
-      hasResolvedScope: !!resolvedScope,
-      hasSelectedOrganisation: !!selectedOrganisation?.id
-    });
     return null;
   }, [scopeLoading, resolvedScope, selectedOrganisation?.id, selectedEvent?.event_id, resolvedAppId]);
   const scopeKey = effectiveScope ? `${effectiveScope.organisationId || ""}-${effectiveScope.eventId || ""}-${effectiveScope.appId || ""}` : "empty";
   const stableScope = React12.useMemo(() => {
     if (effectiveScope?.organisationId) {
-      const scope = {
+      return {
         organisationId: effectiveScope.organisationId,
         eventId: effectiveScope.eventId,
         appId: effectiveScope.appId
       };
-      logger.warn("NavigationMenu", "stableScope created from effectiveScope", {
-        effectiveScopeAppId: effectiveScope.appId,
-        stableScopeAppId: scope.appId,
-        hasAppId: !!scope.appId,
-        organisationId: scope.organisationId,
-        eventId: scope.eventId,
-        scopeKey
-      });
-      return scope;
     }
-    logger.warn("NavigationMenu", "stableScope is empty (no effectiveScope)", {
-      hasEffectiveScope: !!effectiveScope,
-      effectiveScopeOrgId: effectiveScope?.organisationId,
-      scopeKey
-    });
     return {
       organisationId: "",
       eventId: void 0,
@@ -1246,51 +1214,14 @@ var NavigationMenu = React12.forwardRef(({
     };
   }, [scopeKey, effectiveScope]);
   const userId = authContext?.user?.id || "";
-  React12.useEffect(() => {
-    if (filterByPermissions && stableScope.organisationId) {
-      logger.warn("NavigationMenu", "usePermissions scope", {
-        userId,
-        scope: stableScope,
-        hasOrganisationId: !!stableScope.organisationId,
-        hasEventId: !!stableScope.eventId,
-        hasAppId: !!stableScope.appId,
-        organisationId: stableScope.organisationId,
-        eventId: stableScope.eventId,
-        appId: stableScope.appId
-      });
-    }
-  }, [filterByPermissions, stableScope.organisationId, stableScope.eventId, stableScope.appId, userId]);
-  const permissionsKey = React12.useMemo(() => {
-    return `${userId}-${stableScope.organisationId || ""}-${stableScope.eventId || ""}-${stableScope.appId || ""}`;
-  }, [userId, stableScope.organisationId, stableScope.eventId, stableScope.appId]);
   const { permissions: permissionMap, hasAnyPermission, isLoading: permissionsLoading, error: permissionsError } = usePermissions(
     userId,
     stableScope.organisationId,
     stableScope.eventId,
     stableScope.appId
   );
-  React12.useEffect(() => {
-    if (filterByPermissions) {
-      logger.warn("NavigationMenu", "usePermissions result", {
-        permissionMapSize: permissionMap ? Object.keys(permissionMap).length : 0,
-        isLoading: permissionsLoading,
-        error: permissionsError?.message,
-        hasError: !!permissionsError,
-        scope: stableScope
-      });
-    }
-  }, [filterByPermissions, permissionMap, permissionsLoading, permissionsError, stableScope]);
   const previousFilteredItemsRef = React12.useRef([]);
   const filteredItems = React12.useMemo(() => {
-    logger.warn("NavigationMenu", "filteredItems useMemo running", {
-      filterByPermissions,
-      hasAuthContext: !!authContext,
-      hasRbacContext: !!rbacContext,
-      permissionsLoading,
-      permissionMapSize: permissionMap ? Object.keys(permissionMap).length : 0,
-      permissionsError: permissionsError?.message,
-      itemsCount: items?.length || 0
-    });
     if (filterByPermissions) {
       const isOrgContextReady = orgContextReady && selectedOrganisation?.id;
       const isEventContextReady = eventLoadingRaw === void 0 ? true : !eventLoading;
@@ -1322,37 +1253,11 @@ var NavigationMenu = React12.forwardRef(({
       return path || "home";
     };
     const hasItemPermission = (item) => {
-      if (item.permissions && item.permissions.length > 0) {
+      if (item.permissions && item.permissions.length > 0 && !item.href) {
         const permissions = item.permissions.filter((p) => typeof p === "string").map((p) => p);
         if (permissions.length > 0) {
           const hasPermission = hasAnyPermission(permissions);
           if (!hasPermission) {
-            const permissionChecks = permissions.map((perm) => ({
-              permission: perm,
-              inMap: perm in permissionMap,
-              mapValue: permissionMap[perm],
-              isTrue: permissionMap[perm] === true
-            }));
-            const permissionStrings = permissions.map((p) => String(p));
-            const mapKeys = Object.keys(permissionMap);
-            const matchingKeys = permissionStrings.filter((p) => mapKeys.includes(p));
-            logger.warn("NavigationMenu", `Filtering out navigation item "${item.label}" - no explicit permission:`, {
-              itemId: item.id,
-              href: item.href,
-              requiredPermissions: permissionStrings,
-              // Show actual strings
-              hasPermission,
-              permissionChecks,
-              permissionMapSize: mapKeys.length,
-              permissionMapKeys: mapKeys.slice(0, 30),
-              // Show first 30 keys for debugging
-              allPermissionMapKeys: mapKeys,
-              // Show ALL keys for debugging
-              matchingKeys,
-              // Show which required permissions exist in map
-              missingKeys: permissionStrings.filter((p) => !mapKeys.includes(p))
-              // Show which are missing
-            });
             return false;
           }
         }
@@ -1376,15 +1281,6 @@ var NavigationMenu = React12.forwardRef(({
           }
         });
         if (!hasRole) {
-          logger.warn("NavigationMenu", `Filtering out navigation item "${item.label}" - no required role:`, {
-            itemId: item.id,
-            href: item.href,
-            requiredRoles: item.roles,
-            hasRole,
-            organisationRole: rbacContext.organisationRole,
-            eventAppRole: rbacContext.eventAppRole,
-            isSuperAdmin: rbacContext.isSuperAdmin
-          });
           return false;
         }
       }
@@ -1411,13 +1307,6 @@ var NavigationMenu = React12.forwardRef(({
             const requiredLevel = levelHierarchy[accessLevel] || 0;
             const userLevel = userAccessLevel ? levelHierarchy[userAccessLevel] || 0 : 0;
             if (userLevel < requiredLevel) {
-              logger.warn("NavigationMenu", `Filtering out navigation item "${item.label}" - insufficient access level:`, {
-                itemId: item.id,
-                href: item.href,
-                requiredAccessLevel: item.accessLevel,
-                userAccessLevel,
-                userEventRole: rbacContext.eventAppRole
-              });
               return false;
             }
           }
@@ -1431,29 +1320,10 @@ var NavigationMenu = React12.forwardRef(({
           const hasPagePermission = permissionMap[pagePermission] === true;
           const finalHasPermission = isSuperAdmin2 || hasPagePermission;
           if (!finalHasPermission) {
-            logger.warn("NavigationMenu", `Filtering out navigation item "${item.label}" - no page permission:`, {
-              itemId: item.id,
-              href: item.href,
-              pageId,
-              permission: pagePermission,
-              hasPermission: finalHasPermission,
-              isSuperAdmin: isSuperAdmin2,
-              permissionMapValue: permissionMap[pagePermission],
-              permissionMapKeys: Object.keys(permissionMap).slice(0, 20)
-              // Show first 20 keys for debugging
-            });
             return false;
           }
         }
       }
-      logger.debug("NavigationMenu", `Navigation item "${item.label}" passed all permission checks`, {
-        itemId: item.id,
-        href: item.href,
-        hasPermissions: !!(item.permissions && item.permissions.length > 0),
-        hasRoles: !!(item.roles && item.roles.length > 0),
-        hasAccessLevel: !!item.accessLevel,
-        hasHref: !!item.href
-      });
       return true;
     };
     const filterItem = (item) => {
@@ -1472,11 +1342,6 @@ var NavigationMenu = React12.forwardRef(({
       };
     };
     const filtered = (items || []).map((item) => filterItem(item)).filter((item) => item !== null);
-    logger.warn("NavigationMenu", "filteredItems result", {
-      originalItemsCount: items?.length || 0,
-      filteredItemsCount: filtered.length,
-      permissionMapSize: permissionMap ? Object.keys(permissionMap).length : 0
-    });
     previousFilteredItemsRef.current = filtered;
     return filtered;
   }, [
@@ -4721,4 +4586,4 @@ export {
   EventLogoCompact,
   EventLogoLarge
 };
-//# sourceMappingURL=chunk-CNUXIWLO.js.map
+//# sourceMappingURL=chunk-S263HQKM.js.map