@jmruthers/pace-core 0.5.180 → 0.5.182

package/dist/rbac/index.js

@@ -12,13 +12,12 @@ import {
   PagePermissionProvider,
   PermissionEnforcer,
   PermissionGuard,
+  RBACErrorCode,
+  RPCFunction,
   RoleBasedRouter,
   SecureDataProvider,
-  SecureSupabaseClient,
   createRBACExpressMiddleware,
   createRBACMiddleware,
-  createSecureClient,
-  fromSupabaseClient,
   getPermissionsForRole,
   hasAnyPermissionCached,
   hasPermissionCached,
@@ -30,8 +29,11 @@ import {
   withAccessLevelGuard,
   withPermissionGuard,
   withRoleGuard
-} from "../chunk-6HLVGAZG.js";
+} from "../chunk-CSOFYHAG.js";
 import {
+  SecureSupabaseClient,
+  createSecureClient,
+  fromSupabaseClient,
   useAccessLevel,
   useCachedPermissions,
   useCan,
@@ -42,8 +44,9 @@ import {
   useRBAC,
   useResolvedScope,
   useResourcePermissions,
-  useRoleManagement
-} from "../chunk-ONI7Y733.js";
+  useRoleManagement,
+  useSecureSupabase
+} from "../chunk-RA3JUFMW.js";
 import {
   CACHE_PATTERNS,
   RBACCache,
@@ -65,23 +68,23 @@ import {
   rbacCache,
   resolveAppContext,
   setupRBAC
-} from "../chunk-BVYWGZVV.js";
+} from "../chunk-M7W4CP3M.js";
 import {
   RBACAuditManager,
   createAuditManager,
   emitAuditEvent,
   getGlobalAuditManager,
   setGlobalAuditManager
-} from "../chunk-SBVILCCA.js";
-import "../chunk-R53TUSFK.js";
-import "../chunk-PKW27QVS.js";
-import "../chunk-MSHEVJXS.js";
-import "../chunk-ERGKJX4D.js";
-import "../chunk-WM26XK7I.js";
-import "../chunk-Q5QRDWKI.js";
-import "../chunk-7QCC6MCP.js";
-import "../chunk-XDNLUEXI.js";
-import "../chunk-PLDDJCW6.js";
+} from "../chunk-FSFQFJCU.js";
+import "../chunk-W22JP75J.js";
+import "../chunk-QCDXODCA.js";
+import "../chunk-KQCRWDSA.js";
+import "../chunk-FUEYYMX5.js";
+import "../chunk-QXHPKYJV.js";
+import "../chunk-F2IMUDXZ.js";
+import "../chunk-VBXEHIUJ.js";
+import "../chunk-PWLANIRT.js";
+import "../chunk-7D4SUZUM.js";
 export {
   ALL_PERMISSIONS,
   AccessLevelGuard,
@@ -100,6 +103,8 @@ export {
   RBACAuditManager,
   RBACCache,
   RBACEngine,
+  RBACErrorCode,
+  RPCFunction,
   RoleBasedRouter,
   SecureDataProvider,
   SecureSupabaseClient,
@@ -147,6 +152,7 @@ export {
   useRoleBasedRouter,
   useRoleManagement,
   useSecureData,
+  useSecureSupabase,
   withAccessLevelGuard,
   withPermissionGuard,
   withRoleGuard

package/dist/styles/index.d.ts

@@ -1,5 +1,3 @@
-export { ColorPalette, ColorShade, PaletteData, applyPalette, clearPalette, generateSSRThemeCSS, getCurrentThemeData, isDynamicThemingActive, parseAndNormalizeEventColours } from '../theming/runtime.js';
-
 /**
  * @file Styles Index
  * @package @jmruthers/pace-core
@@ -17,7 +15,7 @@ export { ColorPalette, ColorShade, PaletteData, applyPalette, clearPalette, gene
  *
  * @example
  * ```tsx
- * // Import theming runtime
+ * // For dynamic theming, import from theming/runtime
  * import { applyPalette, clearPalette } from '@jmruthers/pace-core/theming/runtime';
  * ```
  */

package/dist/styles/index.js

@@ -2,26 +2,11 @@ import {
   getAllStylePaths,
   getStylePath,
   styleConfig
-} from "../chunk-CX5M4ZAG.js";
-import {
-  applyPalette,
-  clearPalette,
-  generateSSRThemeCSS,
-  getCurrentThemeData,
-  isDynamicThemingActive,
-  parseAndNormalizeEventColours
-} from "../chunk-ERISIBYU.js";
-import "../chunk-XDNLUEXI.js";
-import "../chunk-PLDDJCW6.js";
+} from "../chunk-5DRSZLL2.js";
+import "../chunk-7D4SUZUM.js";
 export {
-  applyPalette,
-  clearPalette,
-  generateSSRThemeCSS,
   getAllStylePaths,
-  getCurrentThemeData,
   getStylePath,
-  isDynamicThemingActive,
-  parseAndNormalizeEventColours,
   styleConfig
 };
 //# sourceMappingURL=index.js.map

package/dist/theming/runtime.js

@@ -5,9 +5,9 @@ import {
   getCurrentThemeData,
   isDynamicThemingActive,
   parseAndNormalizeEventColours
-} from "../chunk-ERISIBYU.js";
-import "../chunk-XDNLUEXI.js";
-import "../chunk-PLDDJCW6.js";
+} from "../chunk-SQGMNID3.js";
+import "../chunk-PWLANIRT.js";
+import "../chunk-7D4SUZUM.js";
 export {
   applyPalette,
   clearPalette,

package/dist/types-UU913iLA.d.ts

@@ -0,0 +1,102 @@
+import { A as AppId, P as PageId } from './core-CUElvH_C.js';
+
+/**
+ * RBAC (Role-Based Access Control) Types - Build Contract Compliant
+ * @package @jmruthers/pace-core
+ * @module RBAC/Types
+ * @since 1.0.0
+ *
+ * This module defines the core types for the RBAC system that match the build contract exactly.
+ * All types are designed to be framework-agnostic and provide strong typing for permission operations.
+ */
+
+type UUID = string;
+type Operation = 'read' | 'create' | 'update' | 'delete';
+type Permission = `${Operation}:${string}`;
+type AccessLevel = 'viewer' | 'participant' | 'planner' | 'admin' | 'super';
+type Scope = {
+    organisationId?: UUID;
+    eventId?: string;
+    appId?: AppId | UUID;
+};
+type PermissionCheck = {
+    userId: UUID;
+    scope: Scope;
+    permission: Permission;
+    pageId?: PageId | UUID;
+};
+type PermissionMap = Record<Permission, boolean> & Partial<Record<'*', boolean>>;
+type GlobalRole = 'super_admin';
+type OrganisationRole = 'supporter' | 'member' | 'leader' | 'org_admin';
+type EventAppRole = 'viewer' | 'participant' | 'planner' | 'event_admin';
+type AuditEventType = 'permission_check' | 'permission_denied' | 'role_granted' | 'role_denied' | 'rls_denied';
+type AuditEventSource = 'api' | 'ui' | 'middleware' | 'rls';
+interface RBACAuditEvent {
+    id: UUID;
+    event_type: AuditEventType;
+    user_id: UUID;
+    organisation_id: UUID | null;
+    event_id?: string;
+    app_id?: UUID;
+    page_id?: UUID;
+    permission?: string;
+    decision?: boolean;
+    source?: AuditEventSource;
+    bypass?: boolean;
+    duration_ms?: number;
+    metadata: Record<string, any>;
+    created_at: string;
+}
+interface RBACAppContext {
+    appId: UUID;
+    hasAccess: boolean;
+}
+interface RBACRoleContext {
+    globalRole: GlobalRole | null;
+    organisationRole: OrganisationRole | null;
+    eventAppRole: EventAppRole | null;
+}
+interface PermissionCacheKey {
+    userId: UUID;
+    organisationId?: UUID;
+    eventId?: string;
+    appId?: UUID;
+    permission?: Permission;
+    pageId?: UUID | string;
+}
+interface UserRBACContext {
+    user: any;
+    globalRole: GlobalRole | null;
+    organisationRole: OrganisationRole | null;
+    eventAppRole: EventAppRole | null;
+    hasGlobalPermission: (permission: Permission) => boolean;
+    isSuperAdmin: boolean;
+    isOrgAdmin: boolean;
+    isEventAdmin: boolean;
+    canManageOrganisation: boolean;
+    canManageEvent: boolean;
+    isLoading: boolean;
+    error: Error | null;
+}
+declare class RBACError extends Error {
+    code: string;
+    context?: Record<string, any> | undefined;
+    constructor(message: string, code: string, context?: Record<string, any> | undefined);
+}
+declare class PermissionDeniedError extends RBACError {
+    constructor(permission: Permission, context?: Record<string, any>);
+}
+declare class OrganisationContextRequiredError extends RBACError {
+    constructor();
+}
+declare class RBACNotInitializedError extends RBACError {
+    constructor();
+}
+declare class InvalidScopeError extends RBACError {
+    constructor(scope: Scope, reason: string);
+}
+declare class MissingUserContextError extends RBACError {
+    constructor();
+}
+
+export { type AccessLevel as A, type EventAppRole as E, type GlobalRole as G, InvalidScopeError as I, MissingUserContextError as M, type Operation as O, type Permission as P, RBACError as R, type Scope as S, type UUID as U, type PermissionCheck as a, type PermissionMap as b, type OrganisationRole as c, PermissionDeniedError as d, OrganisationContextRequiredError as e, RBACNotInitializedError as f, type PermissionCacheKey as g, type AuditEventSource as h, type RBACAuditEvent as i, type RBACAppContext as j, type RBACRoleContext as k, type UserRBACContext as l };

package/dist/{types-Dfz9dmVH.d.ts → types-_x1f4QBF.d.ts}

@@ -252,12 +252,12 @@ interface DataTableColumn<TData extends DataRecord = DataRecord> extends Omit<Co
      * Receives all rows in the group and returns the aggregated value.
      * If not provided, grouped rows will show empty/undefined for this column.
      */
-    aggregateFn?: (rows: TData[], column: DataTableColumn<TData>) => any;
+    aggregateFn?: (rows: TData[], column: DataTableColumn<TData>) => unknown;
     /**
      * Optional: Custom cell renderer for aggregated values in grouped rows.
      * If not provided, uses the column's regular cell renderer.
      */
-    aggregateCell?: (value: any, rows: TData[], column: DataTableColumn<TData>) => React__default.ReactNode;
+    aggregateCell?: (value: unknown, rows: TData[], column: DataTableColumn<TData>) => React__default.ReactNode;
 }
 /**
  * Action definition for row-level operations
@@ -440,7 +440,7 @@ interface ExportOptions<TData extends DataRecord> {
     /** Filtered table rows with getValue() method for proper accessorFn evaluation */
     tableRows: Array<{
         original: TData;
-        getValue: (columnId: string) => any;
+        getValue: (columnId: string) => unknown;
         id: string;
     }>;
     /** All column definitions passed to the DataTable */
@@ -448,13 +448,13 @@ interface ExportOptions<TData extends DataRecord> {
     /** Currently visible columns in the table */
     visibleColumns: DataTableColumn<TData>[];
     /** Mapping of column IDs to TanStack table column instances (for getValue() calls) */
-    columnIdToTableColumn: Map<string, any>;
+    columnIdToTableColumn: Map<string, unknown>;
     /** Raw data array (unfiltered) */
     data: TData[];
     /** Default filename generated from table title */
     filename: string;
     /** TanStack table instance for advanced operations */
-    table: any;
+    table: unknown;
 }
 
-export type { AggregateConfig as A, ChunkingConfig as C, DataTableColumn as D, EmptyStateConfig as E, GetRowId as G, HierarchicalConfig as H, PerformanceConfig as P, ServerSideConfig as S, DataTableAction as a, DataTableToolbarButton as b, DataRecord as c, DataTableRBACConfig as d, DataTableFeatureConfig as e, PaginationMode as f, SearchIndexConfig as g, ExportOptions as h, ServerSideParams as i, ServerSideResponse as j };
+export type { AggregateConfig as A, ChunkingConfig as C, DataRecord as D, ExportOptions as E, GetRowId as G, HierarchicalConfig as H, PerformanceConfig as P, ServerSideConfig as S, DataTableColumn as a, DataTableRBACConfig as b, DataTableFeatureConfig as c, PaginationMode as d, SearchIndexConfig as e, EmptyStateConfig as f, DataTableAction as g, ServerSideParams as h, ServerSideResponse as i, DataTableToolbarButton as j };

package/dist/types.d.ts

@@ -1,18 +1,97 @@
-import { U as User, S as Session, A as AuthError, a as UserPermissions, P as PermissionError, b as PermissionString, c as AccessLevel, d as AuthErrorCode } from './unified-DQ4VcT7H.js';
-export { D as DataRecord, t as DataTableAction, u as DataTableColumn, E as Event, s as EventContextType, r as EventTheme, q as PermissionContext, e as PermissionErrorCode, p as PermissionMap, R as RequestId, g as SessionToken, T as ThemeColors, f as UserId, j as createPermissionString, k as createRequestId, i as createSessionToken, h as createUserId, n as isPermissionString, o as isRequestId, m as isSessionToken, l as isUserId } from './unified-DQ4VcT7H.js';
+import { a as AuthError, b as PermissionError, c as PermissionString, d as AuthErrorCode } from './core-CUElvH_C.js';
+export { A as AppId, D as DataRecord, E as EventId, O as OrganisationId, P as PageId, C as PermissionContext, z as PermissionErrorCode, B as PermissionMap, R as RequestId, S as SessionToken, U as UserId, x as assertAppId, w as assertEventId, v as assertOrganisationId, y as assertPageId, u as assertUserId, k as createAppId, j as createEventId, i as createOrganisationId, l as createPageId, g as createPermissionString, h as createRequestId, f as createSessionToken, e as createUserId, s as isAppId, r as isEventId, q as isOrganisationId, t as isPageId, o as isPermissionString, p as isRequestId, n as isSessionToken, m as isUserId } from './core-CUElvH_C.js';
+import { U as User, a as Session } from './auth-BZOJqrdd.js';
+export { S as SessionRestorationState } from './auth-BZOJqrdd.js';
+export { E as Event, c as EventContextType, b as EventTheme, k as ORGANISATION_ROLE_PERMISSIONS, O as Organisation, n as OrganisationAccessLog, h as OrganisationContextType, j as OrganisationHierarchy, e as OrganisationInvitation, a as OrganisationMembership, m as OrganisationPermission, i as OrganisationProviderProps, l as OrganisationRole, f as OrganisationRoleDefinition, g as OrganisationSecurityError, d as OrganisationSettings, o as SecureQueryOptions, S as SuperAdminContext, T as ThemeColors, U as UserProfile } from './event-CW5YB_2p.js';
+export { g as BucketInfo, B as BulkUploadResult, b as FileCategory, a as FileMetadata, F as FileReference, d as FileReferenceService, f as FileReferenceWithUrl, c as FileUploadOptions, e as FileUploadResult, h as FileUrlInfo, S as StorageUploadOptions, U as UploadProgress } from './file-reference-D06mEEWW.js';
+export { C as ChangePasswordFormValues, o as ContactFormData, F as FormData, k as LoginFormData, L as LoginFormValues, P as ProfileFormData, m as RegistrationFormData, R as RegistrationFormValues, S as SecureLoginFormValues, j as SecureRegistrationFormValues, U as UserProfileFormValues, V as ValidationError, a as ValidationResult, g as changePasswordSchema, t as combineSchemas, i as contactFormSchema, d as dateSchema, e as emailSchema, l as loginSchema, n as nameSchema, f as passwordResetSchema, b as passwordSchema, p as phoneSchema, q as pickSchema, r as registrationSchema, c as secureLoginSchema, s as securePasswordSchema, u as urlSchema, h as userProfileSchema } from './validation-643vUDZW.js';
 import { SupabaseClient } from '@supabase/supabase-js';
-export { D as Database } from './database-C6jy7EOu.js';
-import { z } from 'zod';
-export { S as SessionRestorationState } from './auth-DReDSLq9.js';
-export { g as BucketInfo, B as BulkUploadResult, F as FileCategory, b as FileMetadata, a as FileReference, d as FileReferenceService, f as FileReferenceWithUrl, c as FileUploadOptions, e as FileUploadResult, h as FileUrlInfo, S as StorageUploadOptions, U as UploadProgress } from './file-reference-C6Gkn77H.js';
-export { c as combineSchemas, p as pickSchema } from './schema-DTDZQe2u.js';
+export { D as Database, J as Json } from './database.generated-CBmg2950.js';
+export { A as AccessLevelContext, s as AuditEventType, P as PermissionSource, d as RBACAccessValidateParams, e as RBACAccessValidateResult, q as RBACAuditLogParams, r as RBACAuditLogResult, t as RBACContext, w as RBACErrorCode, v as RBACFunctionResponse, f as RBACPageAccessCheckParams, R as RBACPermissionCheckParams, a as RBACPermissionCheckResult, b as RBACPermissionsGetParams, c as RBACPermissionsGetResult, u as RBACResult, g as RBACRoleGrantParams, h as RBACRoleGrantResult, i as RBACRoleRevokeParams, j as RBACRoleRevokeResult, m as RBACRoleValidateParams, n as RBACRoleValidateResult, k as RBACRolesListParams, l as RBACRolesListResult, o as RBACSessionTrackParams, p as RBACSessionTrackResult, S as SessionType } from './functions-D_kgHktt.js';
+import 'zod';
+import './types-UU913iLA.js';
+
+/**
+ * @file Security-related Types
+ * @description Type definitions for security features
+ */
+interface SecurityConfig {
+    /** Enable device fingerprinting */
+    deviceFingerprinting: boolean;
+    /** Enable CSRF protection */
+    csrfProtection: boolean;
+    /** Password validation level */
+    passwordValidation: 'basic' | 'strict';
+    /** Session timeout in milliseconds */
+    sessionTimeout: number;
+    /** Maximum login attempts before lockout */
+    maxLoginAttempts: number;
+    /** Rate limit window in milliseconds */
+    rateLimitWindow: number;
+}
+interface SecurityMetrics {
+    /** Number of failed authentication attempts */
+    failedAttempts: number;
+    /** Last login timestamp */
+    lastLogin: number;
+    /** Device trust score (0-100) */
+    deviceTrustScore: number;
+    /** Session risk level */
+    riskLevel: 'low' | 'medium' | 'high' | 'critical';
+}
+interface SecurityEvent {
+    /** Event type */
+    type: 'login_attempt' | 'login_success' | 'login_failure' | 'permission_denied' | 'suspicious_activity';
+    /** User ID (if known) */
+    userId?: string;
+    /** Session ID */
+    sessionId?: string;
+    /** Event timestamp */
+    timestamp: number;
+    /** Event details */
+    details: Record<string, unknown>;
+    /** Risk level */
+    riskLevel: SecurityMetrics['riskLevel'];
+    /** IP address (hashed for privacy) */
+    ipHash?: string;
+    /** User agent hash */
+    userAgentHash?: string;
+}
+interface RateLimitConfig {
+    /** Maximum attempts allowed */
+    maxAttempts: number;
+    /** Time window in milliseconds */
+    windowMs: number;
+    /** Penalty multiplier for repeated violations */
+    penaltyMultiplier: number;
+}
+interface SecurityAuditLog {
+    /** Unique audit entry ID */
+    id: string;
+    /** Event that was audited */
+    event: SecurityEvent;
+    /** Action taken (if any) */
+    action?: 'blocked' | 'warned' | 'logged' | 'escalated';
+    /** Additional context */
+    context?: Record<string, unknown>;
+}
 
 /**
  * @file Supabase Integration Types
+ * @package @jmruthers/pace-core
+ * @module Types/Supabase
+ * @since 1.0.0
  *
- * TypeScript interfaces for Supabase client operations with standard types.
+ * TypeScript interfaces for Supabase client operations and RPC function types.
  */
 
+/**
+ * User permissions interface
+ */
+interface UserPermissions {
+    permissions: string[];
+    roles: string[];
+}
 /**
  * Standard Supabase client - no custom wrapper needed
  */
@@ -92,10 +171,6 @@ interface PermissionOperations {
         data: null;
         error: PermissionError | null;
     }>;
-    setUserAccessLevel(userId: string, accessLevel: AccessLevel, eventId: string, appName: string): Promise<{
-        data: null;
-        error: PermissionError | null;
-    }>;
 }
 /**
  * Supabase table names for type safety
@@ -136,218 +211,4 @@ declare function isAuthErrorCode(code: string): code is AuthErrorCode;
 declare function isUser(obj: unknown): obj is User;
 declare function isSession(obj: unknown): obj is Session;
 
-/**
- * @file Validation Types
- * @package @jmruthers/pace-core
- * @module Types/Validation
- * @since 0.1.0
- *
- * Consolidated validation types and interfaces for the PACE Core library.
- * This file contains all validation-related type definitions.
- */
-
-interface ValidationError {
-    field: string;
-    message: string;
-    code: string;
-}
-interface ValidationResult<T = unknown> {
-    success: boolean;
-    data?: T;
-    errors?: ValidationError[];
-}
-declare const emailSchema: z.ZodString;
-declare const nameSchema: z.ZodString;
-declare const phoneSchema: z.ZodString;
-declare const urlSchema: z.ZodString;
-declare const dateSchema: z.ZodEffects<z.ZodString, string, string>;
-declare const passwordSchema: z.ZodString;
-declare const securePasswordSchema: z.ZodString;
-declare const loginSchema: z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    password: string;
-}, {
-    email: string;
-    password: string;
-}>;
-declare const registrationSchema: z.ZodEffects<z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-    confirmPassword: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    password: string;
-    confirmPassword: string;
-}, {
-    email: string;
-    password: string;
-    confirmPassword: string;
-}>, {
-    email: string;
-    password: string;
-    confirmPassword: string;
-}, {
-    email: string;
-    password: string;
-    confirmPassword: string;
-}>;
-declare const secureLoginSchema: z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    password: string;
-}, {
-    email: string;
-    password: string;
-}>;
-declare const passwordResetSchema: z.ZodObject<{
-    email: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-}, {
-    email: string;
-}>;
-declare const changePasswordSchema: z.ZodEffects<z.ZodObject<{
-    currentPassword: z.ZodString;
-    newPassword: z.ZodString;
-    confirmPassword: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    confirmPassword: string;
-    currentPassword: string;
-    newPassword: string;
-}, {
-    confirmPassword: string;
-    currentPassword: string;
-    newPassword: string;
-}>, {
-    confirmPassword: string;
-    currentPassword: string;
-    newPassword: string;
-}, {
-    confirmPassword: string;
-    currentPassword: string;
-    newPassword: string;
-}>;
-declare const userProfileSchema: z.ZodObject<{
-    name: z.ZodString;
-    email: z.ZodString;
-    phone: z.ZodOptional<z.ZodString>;
-    website: z.ZodOptional<z.ZodString>;
-    bio: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    name: string;
-    phone?: string | undefined;
-    website?: string | undefined;
-    bio?: string | undefined;
-}, {
-    email: string;
-    name: string;
-    phone?: string | undefined;
-    website?: string | undefined;
-    bio?: string | undefined;
-}>;
-declare const contactFormSchema: z.ZodObject<{
-    name: z.ZodString;
-    email: z.ZodString;
-    message: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    email: string;
-    name: string;
-    message: string;
-}, {
-    email: string;
-    name: string;
-    message: string;
-}>;
-type LoginFormValues = z.infer<typeof loginSchema>;
-type RegistrationFormValues = z.infer<typeof registrationSchema>;
-type ChangePasswordFormValues = z.infer<typeof changePasswordSchema>;
-type UserProfileFormValues = z.infer<typeof userProfileSchema>;
-type SecureLoginFormValues = {
-    email: string;
-    password: string;
-    csrfToken?: string;
-};
-type SecureRegistrationFormValues = {
-    email: string;
-    password: string;
-    confirmPassword: string;
-    csrfToken?: string;
-};
-type FormData = LoginFormData | RegistrationFormData | ProfileFormData | ContactFormData;
-type LoginFormData = z.infer<typeof loginSchema>;
-type RegistrationFormData = z.infer<typeof registrationSchema>;
-type ProfileFormData = z.infer<typeof userProfileSchema>;
-type ContactFormData = z.infer<typeof contactFormSchema>;
-
-/**
- * @file Security-related Types
- * @description Type definitions for security features
- */
-interface SecurityConfig {
-    /** Enable device fingerprinting */
-    deviceFingerprinting: boolean;
-    /** Enable CSRF protection */
-    csrfProtection: boolean;
-    /** Password validation level */
-    passwordValidation: 'basic' | 'strict';
-    /** Session timeout in milliseconds */
-    sessionTimeout: number;
-    /** Maximum login attempts before lockout */
-    maxLoginAttempts: number;
-    /** Rate limit window in milliseconds */
-    rateLimitWindow: number;
-}
-interface SecurityMetrics {
-    /** Number of failed authentication attempts */
-    failedAttempts: number;
-    /** Last login timestamp */
-    lastLogin: number;
-    /** Device trust score (0-100) */
-    deviceTrustScore: number;
-    /** Session risk level */
-    riskLevel: 'low' | 'medium' | 'high' | 'critical';
-}
-interface SecurityEvent {
-    /** Event type */
-    type: 'login_attempt' | 'login_success' | 'login_failure' | 'permission_denied' | 'suspicious_activity';
-    /** User ID (if known) */
-    userId?: string;
-    /** Session ID */
-    sessionId?: string;
-    /** Event timestamp */
-    timestamp: number;
-    /** Event details */
-    details: Record<string, unknown>;
-    /** Risk level */
-    riskLevel: SecurityMetrics['riskLevel'];
-    /** IP address (hashed for privacy) */
-    ipHash?: string;
-    /** User agent hash */
-    userAgentHash?: string;
-}
-interface RateLimitConfig {
-    /** Maximum attempts allowed */
-    maxAttempts: number;
-    /** Time window in milliseconds */
-    windowMs: number;
-    /** Penalty multiplier for repeated violations */
-    penaltyMultiplier: number;
-}
-interface SecurityAuditLog {
-    /** Unique audit entry ID */
-    id: string;
-    /** Event that was audited */
-    event: SecurityEvent;
-    /** Action taken (if any) */
-    action?: 'blocked' | 'warned' | 'logged' | 'escalated';
-    /** Additional context */
-    context?: Record<string, unknown>;
-}
-
-export { AccessLevel, AuthError, AuthErrorCode, type AuthOperations, type ChangePasswordFormValues, type ContactFormData, type FormData, type LoginFormData, type LoginFormValues, PermissionError, type PermissionOperations, PermissionString, type ProfileFormData, type QueryResult, type RPCFunction, type RateLimitConfig, type RegistrationFormData, type RegistrationFormValues, type SecureLoginFormValues, type SecureRegistrationFormValues, type SecurityAuditLog, type SecurityConfig, type SecurityEvent, type SecurityMetrics, Session, type SupabaseFilter, type SupabaseOrder, type TableName, type TypedSupabaseClient, User, UserPermissions, type UserProfileFormValues, type ValidationError, type ValidationResult, changePasswordSchema, contactFormSchema, dateSchema, emailSchema, isAuthErrorCode, isSession, isUser, loginSchema, nameSchema, passwordResetSchema, passwordSchema, phoneSchema, registrationSchema, secureLoginSchema, securePasswordSchema, urlSchema, userProfileSchema };
+export { AuthError, AuthErrorCode, type AuthOperations, PermissionError, type PermissionOperations, PermissionString, type QueryResult, type RPCFunction, type RateLimitConfig, type SecurityAuditLog, type SecurityConfig, type SecurityEvent, type SecurityMetrics, Session, type SupabaseFilter, type SupabaseOrder, type TableName, type TypedSupabaseClient, User, type UserPermissions, isAuthErrorCode, isSession, isUser };