@jmruthers/pace-core 0.5.181 → 0.5.182
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +1 -1
- package/README.md +16 -2
- package/dist/{AuthService-DYuQPJj6.d.ts → AuthService-B-cd2MA4.d.ts} +9 -11
- package/dist/{DataTable-CWAZZcXC.d.ts → DataTable-Bz8ffqyA.d.ts} +1 -1
- package/dist/{DataTable-UA6CL4JI.js → DataTable-QAB34V6K.js} +14 -15
- package/dist/UnifiedAuthProvider-7F6T4B6K.js +13 -0
- package/dist/{UnifiedAuthProvider-DJxGTftH.d.ts → UnifiedAuthProvider-F86d7dSi.d.ts} +5 -6
- package/dist/{api-45XYYO2A.js → api-ROMBCNKU.js} +5 -5
- package/dist/{audit-64X3VJXB.js → audit-WRS3KJKI.js} +4 -4
- package/dist/auth-BZOJqrdd.d.ts +49 -0
- package/dist/{chunk-CX5M4ZAG.js → chunk-5DRSZLL2.js} +1 -1
- package/dist/chunk-5DRSZLL2.js.map +1 -0
- package/dist/{chunk-BESYRHQM.js → chunk-6C4YBBJM.js} +10 -7
- package/dist/chunk-6C4YBBJM.js.map +1 -0
- package/dist/{chunk-PLDDJCW6.js → chunk-7D4SUZUM.js} +2 -13
- package/dist/{chunk-HRO5HWN2.js → chunk-CSOFYHAG.js} +55 -162
- package/dist/chunk-CSOFYHAG.js.map +1 -0
- package/dist/{chunk-ANBQRTPX.js → chunk-E66EQZE6.js} +3 -5
- package/dist/{chunk-ANBQRTPX.js.map → chunk-E66EQZE6.js.map} +1 -1
- package/dist/{chunk-Q5QRDWKI.js → chunk-F2IMUDXZ.js} +4 -6
- package/dist/chunk-F2IMUDXZ.js.map +1 -0
- package/dist/{chunk-SBVILCCA.js → chunk-FSFQFJCU.js} +28 -6
- package/dist/chunk-FSFQFJCU.js.map +1 -0
- package/dist/chunk-FUEYYMX5.js +2296 -0
- package/dist/chunk-FUEYYMX5.js.map +1 -0
- package/dist/{chunk-FFKNH6U5.js → chunk-HKIT6O7W.js} +3 -5
- package/dist/{chunk-FFKNH6U5.js.map → chunk-HKIT6O7W.js.map} +1 -1
- package/dist/chunk-KQCRWDSA.js +1 -0
- package/dist/{chunk-S5OFRT4M.js → chunk-KUEN3HFB.js} +6 -6
- package/dist/chunk-KUEN3HFB.js.map +1 -0
- package/dist/chunk-LMC26NLJ.js +84 -0
- package/dist/chunk-LMC26NLJ.js.map +1 -0
- package/dist/{chunk-BVYWGZVV.js → chunk-M7W4CP3M.js} +52 -19
- package/dist/chunk-M7W4CP3M.js.map +1 -0
- package/dist/{chunk-HZLDFOE4.js → chunk-MI7HBHN3.js} +164 -243
- package/dist/chunk-MI7HBHN3.js.map +1 -0
- package/dist/{chunk-PPMP5J6T.js → chunk-PWAHJW4G.js} +180 -29
- package/dist/chunk-PWAHJW4G.js.map +1 -0
- package/dist/chunk-PWLANIRT.js +127 -0
- package/dist/{chunk-XDNLUEXI.js.map → chunk-PWLANIRT.js.map} +1 -1
- package/dist/chunk-QCDXODCA.js +75 -0
- package/dist/chunk-QCDXODCA.js.map +1 -0
- package/dist/{chunk-D7LCGMVS.js → chunk-QETLRQI6.js} +526 -887
- package/dist/chunk-QETLRQI6.js.map +1 -0
- package/dist/{chunk-5MT24GKJ.js → chunk-QUVSNGIP.js} +264 -262
- package/dist/chunk-QUVSNGIP.js.map +1 -0
- package/dist/chunk-QXHPKYJV.js +113 -0
- package/dist/chunk-QXHPKYJV.js.map +1 -0
- package/dist/{chunk-OWAG3GSU.js → chunk-R77UEZ4E.js} +11 -1
- package/dist/chunk-R77UEZ4E.js.map +1 -0
- package/dist/{chunk-ZYTYSTO5.js → chunk-RA3JUFMW.js} +314 -161
- package/dist/chunk-RA3JUFMW.js.map +1 -0
- package/dist/{chunk-ERISIBYU.js → chunk-SQGMNID3.js} +3 -8
- package/dist/chunk-SQGMNID3.js.map +1 -0
- package/dist/{chunk-XJ2HZOBU.js → chunk-UHNYIBXL.js} +1 -1
- package/dist/chunk-UHNYIBXL.js.map +1 -0
- package/{src/utils/secureStorage.ts → dist/chunk-VBXEHIUJ.js} +113 -88
- package/dist/{chunk-7QCC6MCP.js.map → chunk-VBXEHIUJ.js.map} +1 -1
- package/dist/{chunk-VZ4VDGTB.js → chunk-W22JP75J.js} +5 -13
- package/dist/{chunk-VZ4VDGTB.js.map → chunk-W22JP75J.js.map} +1 -1
- package/dist/components.d.ts +12 -93
- package/dist/components.js +23 -106
- package/dist/components.js.map +1 -1
- package/dist/core-CUElvH_C.d.ts +164 -0
- package/dist/database.generated-CBmg2950.d.ts +8284 -0
- package/dist/event-CW5YB_2p.d.ts +239 -0
- package/dist/{file-reference-C6Gkn77H.d.ts → file-reference-D06mEEWW.d.ts} +7 -5
- package/dist/functions-D_kgHktt.d.ts +208 -0
- package/dist/hooks.d.ts +54 -7
- package/dist/hooks.js +204 -17
- package/dist/hooks.js.map +1 -1
- package/dist/{EventLogo-B3V3otev.d.ts → index-Bl--n7-T.d.ts} +387 -397
- package/dist/index.d.ts +94 -261
- package/dist/index.js +314 -126
- package/dist/index.js.map +1 -1
- package/dist/providers.d.ts +7 -8
- package/dist/providers.js +6 -13
- package/dist/rbac/index.d.ts +171 -101
- package/dist/rbac/index.js +23 -17
- package/dist/styles/index.d.ts +1 -3
- package/dist/styles/index.js +2 -17
- package/dist/theming/runtime.js +3 -3
- package/dist/types-UU913iLA.d.ts +102 -0
- package/dist/{types-Dfz9dmVH.d.ts → types-_x1f4QBF.d.ts} +6 -6
- package/dist/types.d.ts +88 -227
- package/dist/types.js +64 -112
- package/dist/types.js.map +1 -1
- package/dist/{usePublicRouteParams-B7PabvuH.d.ts → usePublicRouteParams-JJczomYq.d.ts} +203 -6
- package/dist/utils.d.ts +299 -13
- package/dist/utils.js +481 -55
- package/dist/utils.js.map +1 -1
- package/dist/validation-643vUDZW.d.ts +177 -0
- package/docs/DOCUMENTATION_REVIEW_TRACKER.md +511 -0
- package/docs/README.md +9 -8
- package/docs/api/README.md +16 -2
- package/docs/api/classes/ColumnFactory.md +1 -1
- package/docs/api/classes/ErrorBoundary.md +1 -1
- package/docs/api/classes/InvalidScopeError.md +4 -4
- package/docs/api/classes/MissingUserContextError.md +4 -4
- package/docs/api/classes/OrganisationContextRequiredError.md +4 -4
- package/docs/api/classes/PermissionDeniedError.md +4 -4
- package/docs/api/classes/RBACAuditManager.md +14 -14
- package/docs/api/classes/RBACCache.md +1 -1
- package/docs/api/classes/RBACEngine.md +2 -2
- package/docs/api/classes/RBACError.md +4 -4
- package/docs/api/classes/RBACNotInitializedError.md +4 -4
- package/docs/api/classes/SecureSupabaseClient.md +29 -9
- package/docs/api/classes/StorageUtils.md +1 -1
- package/docs/api/enums/FileCategory.md +17 -17
- package/docs/api/enums/RBACErrorCode.md +228 -0
- package/docs/api/enums/RPCFunction.md +118 -0
- package/docs/api/interfaces/AggregateConfig.md +1 -1
- package/docs/api/interfaces/BadgeProps.md +1 -1
- package/docs/api/interfaces/ButtonProps.md +2 -2
- package/docs/api/interfaces/CalendarProps.md +1 -1
- package/docs/api/interfaces/CardProps.md +29 -3
- package/docs/api/interfaces/ColorPalette.md +1 -1
- package/docs/api/interfaces/ColorShade.md +1 -1
- package/docs/api/interfaces/DataAccessRecord.md +1 -1
- package/docs/api/interfaces/DataRecord.md +1 -1
- package/docs/api/interfaces/DataTableAction.md +2 -2
- package/docs/api/interfaces/DataTableColumn.md +6 -6
- package/docs/api/interfaces/DataTableProps.md +1 -1
- package/docs/api/interfaces/DataTableToolbarButton.md +2 -2
- package/docs/api/interfaces/EmptyStateConfig.md +1 -1
- package/docs/api/interfaces/EnhancedNavigationMenuProps.md +1 -1
- package/docs/api/interfaces/EventAppRoleData.md +1 -1
- package/docs/api/interfaces/ExportColumn.md +5 -5
- package/docs/api/interfaces/ExportOptions.md +4 -4
- package/docs/api/interfaces/FileDisplayProps.md +1 -1
- package/docs/api/interfaces/FileMetadata.md +13 -13
- package/docs/api/interfaces/FileReference.md +12 -12
- package/docs/api/interfaces/FileSizeLimits.md +1 -1
- package/docs/api/interfaces/FileUploadOptions.md +10 -10
- package/docs/api/interfaces/FileUploadProps.md +19 -19
- package/docs/api/interfaces/FooterProps.md +1 -1
- package/docs/api/interfaces/FormFieldProps.md +166 -0
- package/docs/api/interfaces/FormProps.md +113 -0
- package/docs/api/interfaces/GrantEventAppRoleParams.md +1 -1
- package/docs/api/interfaces/InactivityWarningModalProps.md +8 -8
- package/docs/api/interfaces/InputProps.md +2 -2
- package/docs/api/interfaces/LabelProps.md +8 -8
- package/docs/api/interfaces/LoginFormProps.md +1 -1
- package/docs/api/interfaces/NavigationAccessRecord.md +1 -1
- package/docs/api/interfaces/NavigationContextType.md +1 -1
- package/docs/api/interfaces/NavigationGuardProps.md +1 -1
- package/docs/api/interfaces/NavigationItem.md +17 -73
- package/docs/api/interfaces/NavigationMenuProps.md +38 -53
- package/docs/api/interfaces/NavigationProviderProps.md +1 -1
- package/docs/api/interfaces/Organisation.md +13 -13
- package/docs/api/interfaces/OrganisationContextType.md +21 -21
- package/docs/api/interfaces/OrganisationMembership.md +15 -15
- package/docs/api/interfaces/OrganisationProviderProps.md +59 -2
- package/docs/api/interfaces/OrganisationSecurityError.md +5 -5
- package/docs/api/interfaces/PaceAppLayoutProps.md +26 -39
- package/docs/api/interfaces/PaceLoginPageProps.md +1 -1
- package/docs/api/interfaces/PageAccessRecord.md +1 -1
- package/docs/api/interfaces/PagePermissionContextType.md +1 -1
- package/docs/api/interfaces/PagePermissionGuardProps.md +1 -1
- package/docs/api/interfaces/PagePermissionProviderProps.md +1 -1
- package/docs/api/interfaces/PaletteData.md +1 -1
- package/docs/api/interfaces/PermissionEnforcerProps.md +1 -1
- package/docs/api/interfaces/ProgressProps.md +50 -0
- package/docs/api/interfaces/ProtectedRouteProps.md +1 -1
- package/docs/api/interfaces/PublicPageFooterProps.md +9 -9
- package/docs/api/interfaces/PublicPageHeaderProps.md +10 -10
- package/docs/api/interfaces/PublicPageLayoutProps.md +15 -15
- package/docs/api/interfaces/RBACAccessValidateParams.md +52 -0
- package/docs/api/interfaces/RBACAccessValidateResult.md +41 -0
- package/docs/api/interfaces/RBACAuditLogParams.md +85 -0
- package/docs/api/interfaces/RBACAuditLogResult.md +52 -0
- package/docs/api/interfaces/RBACConfig.md +2 -2
- package/docs/api/interfaces/RBACContext.md +52 -0
- package/docs/api/interfaces/RBACLogger.md +1 -1
- package/docs/api/interfaces/RBACPageAccessCheckParams.md +74 -0
- package/docs/api/interfaces/RBACPermissionCheckParams.md +74 -0
- package/docs/api/interfaces/RBACPermissionCheckResult.md +52 -0
- package/docs/api/interfaces/RBACPermissionsGetParams.md +63 -0
- package/docs/api/interfaces/RBACPermissionsGetResult.md +63 -0
- package/docs/api/interfaces/RBACResult.md +58 -0
- package/docs/api/interfaces/RBACRoleGrantParams.md +63 -0
- package/docs/api/interfaces/RBACRoleGrantResult.md +52 -0
- package/docs/api/interfaces/RBACRoleRevokeParams.md +63 -0
- package/docs/api/interfaces/RBACRoleRevokeResult.md +52 -0
- package/docs/api/interfaces/RBACRoleValidateParams.md +52 -0
- package/docs/api/interfaces/RBACRoleValidateResult.md +63 -0
- package/docs/api/interfaces/RBACRolesListParams.md +52 -0
- package/docs/api/interfaces/RBACRolesListResult.md +74 -0
- package/docs/api/interfaces/RBACSessionTrackParams.md +74 -0
- package/docs/api/interfaces/RBACSessionTrackResult.md +52 -0
- package/docs/api/interfaces/ResourcePermissions.md +1 -1
- package/docs/api/interfaces/RevokeEventAppRoleParams.md +1 -1
- package/docs/api/interfaces/RoleBasedRouterContextType.md +1 -1
- package/docs/api/interfaces/RoleBasedRouterProps.md +1 -1
- package/docs/api/interfaces/RoleManagementResult.md +1 -1
- package/docs/api/interfaces/RouteAccessRecord.md +1 -1
- package/docs/api/interfaces/RouteConfig.md +1 -1
- package/docs/api/interfaces/SecureDataContextType.md +1 -1
- package/docs/api/interfaces/SecureDataProviderProps.md +1 -1
- package/docs/api/interfaces/SessionRestorationLoaderProps.md +15 -2
- package/docs/api/interfaces/StorageConfig.md +1 -1
- package/docs/api/interfaces/StorageFileInfo.md +1 -1
- package/docs/api/interfaces/StorageFileMetadata.md +1 -1
- package/docs/api/interfaces/StorageListOptions.md +1 -1
- package/docs/api/interfaces/StorageListResult.md +1 -1
- package/docs/api/interfaces/StorageUploadOptions.md +1 -1
- package/docs/api/interfaces/StorageUploadResult.md +1 -1
- package/docs/api/interfaces/StorageUrlOptions.md +1 -1
- package/docs/api/interfaces/StyleImport.md +1 -1
- package/docs/api/interfaces/SwitchProps.md +1 -1
- package/docs/api/interfaces/TabsContentProps.md +1 -1
- package/docs/api/interfaces/TabsListProps.md +1 -1
- package/docs/api/interfaces/TabsProps.md +1 -1
- package/docs/api/interfaces/TabsTriggerProps.md +43 -2
- package/docs/api/interfaces/TextareaProps.md +2 -2
- package/docs/api/interfaces/ToastActionElement.md +1 -1
- package/docs/api/interfaces/ToastProps.md +1 -1
- package/docs/api/interfaces/UnifiedAuthContextType.md +61 -61
- package/docs/api/interfaces/UnifiedAuthProviderProps.md +13 -13
- package/docs/api/interfaces/UseInactivityTrackerOptions.md +1 -1
- package/docs/api/interfaces/UseInactivityTrackerReturn.md +1 -1
- package/docs/api/interfaces/UsePublicEventLogoOptions.md +87 -0
- package/docs/api/interfaces/UsePublicEventLogoReturn.md +81 -0
- package/docs/api/interfaces/UsePublicEventOptions.md +3 -3
- package/docs/api/interfaces/UsePublicEventReturn.md +5 -5
- package/docs/api/interfaces/UsePublicFileDisplayOptions.md +2 -2
- package/docs/api/interfaces/UsePublicFileDisplayReturn.md +1 -1
- package/docs/api/interfaces/UsePublicRouteParamsReturn.md +1 -1
- package/docs/api/interfaces/UseResolvedScopeOptions.md +2 -2
- package/docs/api/interfaces/UseResolvedScopeReturn.md +1 -1
- package/docs/api/interfaces/UseResourcePermissionsOptions.md +1 -1
- package/docs/api/interfaces/UserEventAccess.md +1 -1
- package/docs/api/interfaces/UserMenuProps.md +4 -4
- package/docs/api/interfaces/UserProfile.md +7 -7
- package/docs/api/modules.md +484 -462
- package/docs/api-reference/components.md +186 -15
- package/docs/api-reference/deprecated.md +376 -0
- package/docs/api-reference/hooks.md +149 -19
- package/docs/api-reference/providers.md +61 -6
- package/docs/api-reference/rpc-functions.md +397 -0
- package/docs/api-reference/types.md +135 -78
- package/docs/api-reference/utilities.md +51 -380
- package/docs/architecture/README.md +49 -3
- package/docs/architecture/database-schema-requirements.md +40 -3
- package/docs/architecture/rbac-security-architecture.md +41 -4
- package/docs/architecture/services.md +127 -42
- package/docs/best-practices/README.md +51 -5
- package/docs/best-practices/accessibility.md +32 -3
- package/docs/best-practices/common-patterns.md +50 -3
- package/docs/best-practices/deployment.md +50 -4
- package/docs/best-practices/performance.md +50 -3
- package/docs/best-practices/security.md +94 -41
- package/docs/best-practices/testing.md +33 -4
- package/docs/core-concepts/authentication.md +5 -5
- package/docs/core-concepts/events.md +3 -3
- package/docs/core-concepts/organisations.md +3 -3
- package/docs/core-concepts/permissions.md +3 -3
- package/docs/core-concepts/rbac-system.md +5 -5
- package/docs/documentation-index.md +30 -8
- package/docs/getting-started/documentation-index.md +1 -1
- package/docs/getting-started/examples/README.md +7 -5
- package/docs/getting-started/examples/basic-auth-app.md +3 -0
- package/docs/getting-started/examples/full-featured-app.md +5 -3
- package/docs/getting-started/faq.md +6 -6
- package/docs/getting-started/installation-guide.md +192 -13
- package/docs/getting-started/local-development.md +303 -0
- package/docs/getting-started/quick-reference.md +3 -3
- package/docs/getting-started/quick-start.md +517 -0
- package/docs/implementation-guides/app-layout.md +45 -3
- package/docs/implementation-guides/authentication.md +66 -7
- package/docs/implementation-guides/component-styling.md +53 -3
- package/docs/implementation-guides/data-tables.md +76 -7
- package/docs/implementation-guides/datatable-filtering.md +1 -2
- package/docs/implementation-guides/datatable-rbac-usage.md +0 -1
- package/docs/implementation-guides/dynamic-colors.md +155 -4
- package/docs/implementation-guides/file-reference-system.md +72 -3
- package/docs/implementation-guides/file-upload-storage.md +72 -3
- package/docs/implementation-guides/forms.md +53 -3
- package/docs/implementation-guides/inactivity-tracking.md +53 -3
- package/docs/implementation-guides/large-datasets.md +1 -1
- package/docs/implementation-guides/navigation.md +55 -5
- package/docs/implementation-guides/organisation-security.md +72 -3
- package/docs/implementation-guides/performance.md +57 -1
- package/docs/implementation-guides/permission-enforcement.md +81 -8
- package/docs/implementation-guides/public-pages.md +560 -14
- package/docs/migration/MIGRATION_GUIDE.md +409 -50
- package/docs/migration/README.md +37 -3
- package/docs/migration/organisation-context-timing-fix.md +39 -4
- package/docs/migration/quick-migration-guide.md +41 -5
- package/docs/migration/rbac-migration.md +59 -3
- package/docs/migration/service-architecture.md +77 -14
- package/docs/rbac/README.md +79 -3
- package/docs/rbac/advanced-patterns.md +47 -3
- package/docs/rbac/api-reference.md +77 -8
- package/docs/rbac/event-based-apps.md +50 -5
- package/docs/rbac/examples/rbac-rls-integration-example.md +3 -3
- package/docs/rbac/examples.md +39 -3
- package/docs/rbac/getting-started.md +63 -4
- package/docs/rbac/quick-start.md +57 -5
- package/docs/rbac/rbac-rls-integration.md +68 -6
- package/docs/rbac/super-admin-guide.md +47 -3
- package/docs/rbac/troubleshooting.md +3 -3
- package/docs/security/README.md +68 -3
- package/docs/security/checklist.md +50 -3
- package/docs/standards/01-architecture-standard.md +39 -0
- package/docs/standards/02-api-and-rpc-standard.md +39 -0
- package/docs/standards/03-component-standard.md +32 -0
- package/docs/standards/04-code-style-standard.md +32 -0
- package/docs/standards/05-security-standard.md +30 -0
- package/docs/standards/06-testing-and-docs-standard.md +29 -0
- package/docs/standards/README.md +35 -0
- package/docs/styles/README.md +89 -8
- package/docs/testing/README.md +175 -24
- package/docs/troubleshooting/README.md +50 -3
- package/docs/troubleshooting/common-issues.md +271 -5
- package/docs/troubleshooting/debugging.md +54 -1
- package/docs/troubleshooting/migration.md +54 -1
- package/docs/troubleshooting/organisation-context-setup.md +29 -3
- package/docs/troubleshooting/styling-issues.md +246 -4
- package/{src/components/DataTable/examples → examples/DataTable}/GroupingAggregationExample.tsx +1 -1
- package/examples/{components 2/DataTable/HierarchicalActionsExample.tsx → DataTable/HierarchicalActionsExample.tsx} +7 -6
- package/{src/components/DataTable/examples → examples/DataTable}/HierarchicalExample.tsx +8 -6
- package/examples/{components 2/DataTable/PerformanceExample.tsx → DataTable/PerformanceExample.tsx} +2 -2
- package/examples/{components 2/DataTable/index.ts → DataTable/index.ts} +1 -0
- package/{src/components/Dialog/examples → examples/Dialog}/HtmlDialogExample.tsx +3 -3
- package/examples/{components 2/Dialog/ScrollableDialogExample.tsx → Dialog/ScrollableDialogExample.tsx} +1 -1
- package/{src/components/Dialog/examples → examples/Dialog}/SmartDialogExample.tsx +1 -1
- package/examples/{components 2/Dialog/index.ts → Dialog/index.ts} +0 -3
- package/examples/{features/public-pages → PublicPages}/CorrectPublicPageImplementation.tsx +52 -17
- package/examples/{features/public-pages → PublicPages}/PublicEventPage.tsx +65 -35
- package/examples/{features/public-pages → PublicPages}/PublicPageApp.tsx +52 -18
- package/examples/{features/public-pages → PublicPages}/PublicPageUsageExample.tsx +28 -15
- package/examples/README.md +81 -33
- package/examples/index.ts +14 -12
- package/examples/{RBAC → rbac}/CompleteRBACExample.tsx +1 -1
- package/examples/{features/rbac → rbac}/EventBasedApp.tsx +4 -4
- package/examples/{features/rbac → rbac}/PermissionExample.tsx +5 -3
- package/package.json +21 -27
- package/src/__tests__/helpers/test-utils.tsx +29 -3
- package/src/__tests__/rbac/PagePermissionGuard.test.tsx +7 -5
- package/src/components/Alert/Alert.test.tsx +2 -2
- package/src/components/Alert/Alert.tsx +4 -4
- package/src/components/Avatar/Avatar.test.tsx +17 -6
- package/src/components/Badge/Badge.test.tsx +1 -1
- package/src/components/Badge/Badge.tsx +2 -2
- package/src/components/Button/Button.test.tsx +2 -2
- package/src/components/Button/Button.tsx +11 -7
- package/src/components/Calendar/Calendar.test.tsx +41 -8
- package/src/components/Calendar/Calendar.tsx +39 -36
- package/src/components/Card/Card.tsx +51 -13
- package/src/components/Checkbox/Checkbox.test.tsx +36 -12
- package/src/components/DataTable/DataTable.test.tsx +1 -1
- package/src/components/DataTable/__tests__/DataTable.comprehensive.test.tsx +13 -7
- package/src/components/DataTable/__tests__/DataTable.default-state.test.tsx +14 -42
- package/src/components/DataTable/__tests__/DataTable.export.test.tsx +13 -10
- package/src/components/DataTable/__tests__/DataTable.grouping-aggregation.test.tsx +14 -11
- package/src/components/DataTable/__tests__/DataTable.hooks.test.tsx +4 -2
- package/src/components/DataTable/__tests__/DataTable.test.tsx +13 -7
- package/src/components/DataTable/__tests__/DataTableCore.test-setup.ts +13 -10
- package/src/components/DataTable/__tests__/DataTableCore.test.tsx +15 -11
- package/src/components/DataTable/__tests__/a11y.basic.test.tsx +12 -6
- package/src/components/DataTable/__tests__/keyboard.test.tsx +12 -6
- package/src/components/DataTable/__tests__/pagination.modes.test.tsx +10 -6
- package/src/components/DataTable/__tests__/test-utils/sharedTestUtils.tsx +1 -1
- package/src/components/DataTable/components/DataTableBody.tsx +10 -25
- package/src/components/DataTable/components/DataTableCore.tsx +1 -1
- package/src/components/DataTable/components/FilterRow.tsx +3 -1
- package/src/components/DataTable/components/ImportModal.tsx +1 -1
- package/src/components/DataTable/components/VirtualizedDataTable.tsx +9 -9
- package/src/components/DataTable/core/ColumnFactory.ts +6 -6
- package/src/components/DataTable/core/DataTableContext.tsx +14 -10
- package/src/components/DataTable/core/LocalDataAdapter.ts +2 -1
- package/src/components/DataTable/core/PluginRegistry.ts +3 -3
- package/src/components/DataTable/core/StateManager.ts +12 -11
- package/src/components/DataTable/core/__tests__/ActionManager.test.ts +104 -0
- package/src/components/DataTable/core/__tests__/DataManager.test.ts +101 -0
- package/src/components/DataTable/core/__tests__/LocalDataAdapter.test.ts +84 -0
- package/src/components/DataTable/core/__tests__/PluginRegistry.test.ts +102 -0
- package/src/components/DataTable/core/__tests__/StateManager.test.ts +104 -0
- package/src/components/DataTable/core/interfaces.ts +17 -17
- package/src/components/DataTable/hooks/__tests__/useDataTableConfiguration.test.ts +124 -0
- package/src/components/DataTable/hooks/__tests__/useDataTableDataPipeline.test.ts +117 -0
- package/src/components/DataTable/hooks/__tests__/useDataTablePermissions.test.ts +102 -0
- package/src/components/DataTable/hooks/__tests__/useEffectiveColumnOrder.test.ts +53 -0
- package/src/components/DataTable/hooks/useColumnOrderPersistence.ts +0 -2
- package/src/components/DataTable/hooks/useDataTablePermissions.ts +9 -8
- package/src/components/DataTable/types.ts +5 -5
- package/src/components/DataTable/utils/aggregationUtils.ts +4 -4
- package/src/components/DataTable/utils/columnUtils.ts +3 -2
- package/src/components/DataTable/utils/debugTools.ts +1 -1
- package/src/components/DataTable/utils/exportUtils.ts +6 -6
- package/src/components/DataTable/utils/hierarchicalSorting.ts +6 -6
- package/src/components/DataTable/utils/hierarchicalUtils.ts +0 -8
- package/src/components/DataTable/utils/index.ts +0 -1
- package/src/components/DataTable/utils/performanceUtils.ts +9 -4
- package/src/components/Dialog/Dialog.test.tsx +49 -27
- package/src/components/ErrorBoundary/ErrorBoundary.test.tsx +13 -8
- package/src/components/EventSelector/EventSelector.test.tsx +60 -12
- package/src/components/EventSelector/EventSelector.tsx +38 -15
- package/src/components/EventSelector/index.ts +2 -2
- package/src/components/FileDisplay/FileDisplay.test.tsx +143 -85
- package/src/components/FileDisplay/FileDisplay.tsx +1 -0
- package/src/components/FileUpload/FileUpload.test.tsx +532 -152
- package/src/components/FileUpload/FileUpload.tsx +43 -8
- package/src/components/Footer/Footer.test.tsx +19 -14
- package/src/components/Form/Form.test.tsx +96 -14
- package/src/components/Form/Form.tsx +210 -1
- package/src/components/Form/index.ts +3 -7
- package/src/components/Header/Header.test.tsx +24 -17
- package/src/components/Header/Header.tsx +3 -1
- package/src/components/InactivityWarningModal/InactivityWarningModal.tsx +2 -4
- package/src/components/Input/Input.test.tsx +61 -36
- package/src/components/Label/{__tests__/Label.test.tsx → Label.test.tsx} +2 -2
- package/src/components/Label/Label.tsx +2 -3
- package/src/components/LoadingSpinner/LoadingSpinner.test.tsx +6 -5
- package/src/components/LoadingSpinner/LoadingSpinner.tsx +6 -2
- package/src/components/LoginForm/LoginForm.test.tsx +14 -13
- package/src/components/LoginForm/LoginForm.tsx +1 -1
- package/src/components/LoginForm/index.ts +7 -0
- package/src/components/NavigationMenu/NavigationMenu.test.tsx +233 -20
- package/src/components/NavigationMenu/NavigationMenu.tsx +191 -55
- package/src/components/NavigationMenu/index.ts +1 -1
- package/src/components/OrganisationSelector/OrganisationSelector.test.tsx +20 -11
- package/src/components/OrganisationSelector/OrganisationSelector.tsx +1 -1
- package/src/components/PaceAppLayout/{__tests__/PaceAppLayout.integration.test.tsx → PaceAppLayout.integration.test.tsx} +272 -79
- package/src/components/PaceAppLayout/{__tests__/PaceAppLayout.performance.test.tsx → PaceAppLayout.performance.test.tsx} +155 -32
- package/src/components/PaceAppLayout/{__tests__/PaceAppLayout.security.test.tsx → PaceAppLayout.security.test.tsx} +211 -65
- package/src/components/PaceAppLayout/PaceAppLayout.test.tsx +498 -210
- package/src/components/PaceAppLayout/PaceAppLayout.tsx +63 -64
- package/src/components/PaceAppLayout/test-setup.tsx +192 -0
- package/src/components/PaceLoginPage/PaceLoginPage.test.tsx +193 -39
- package/src/components/{PasswordReset → PasswordChange}/PasswordChangeForm.test.tsx +2 -2
- package/src/components/{PasswordReset → PasswordChange}/PasswordChangeForm.tsx +10 -4
- package/src/components/PasswordChange/index.ts +2 -0
- package/src/components/Progress/Progress.test.tsx +11 -0
- package/src/components/Progress/Progress.tsx +1 -1
- package/src/components/Progress/index.ts +10 -0
- package/src/components/ProtectedRoute/ProtectedRoute.test.tsx +2 -1
- package/src/components/PublicLayout/PublicLayout.test.tsx +1210 -0
- package/src/components/PublicLayout/PublicPageLayout.tsx +190 -36
- package/src/components/PublicLayout/PublicPageProvider.tsx +8 -7
- package/src/components/PublicLayout/index.ts +10 -28
- package/src/components/Select/Select.test.tsx +7 -7
- package/src/components/Select/Select.tsx +277 -11
- package/src/components/Select/index.ts +1 -2
- package/src/components/SessionRestorationLoader/SessionRestorationLoader.test.tsx +232 -0
- package/src/components/SessionRestorationLoader/SessionRestorationLoader.tsx +40 -19
- package/src/components/Table/{__tests__/Table.test.tsx → Table.test.tsx} +94 -41
- package/src/components/Tabs/Tabs.test.tsx +10 -9
- package/src/components/Tabs/Tabs.tsx +61 -33
- package/src/components/Textarea/Textarea.test.tsx +31 -18
- package/src/components/Toast/Toast.tsx +2 -2
- package/src/components/Tooltip/Tooltip.test.tsx +1 -1
- package/src/components/UserMenu/UserMenu.test.tsx +7 -6
- package/src/components/UserMenu/UserMenu.tsx +2 -2
- package/src/components/index.ts +5 -4
- package/src/constants/performance.ts +19 -8
- package/src/hooks/__tests__/useAppConfig.unit.test.ts +21 -22
- package/src/hooks/__tests__/useEvents.unit.test.ts +5 -4
- package/src/hooks/__tests__/useOrganisationPermissions.unit.test.tsx +2 -2
- package/src/hooks/__tests__/usePermissionCache.simple.test.ts +17 -0
- package/src/hooks/__tests__/usePermissionCache.unit.test.ts +16 -11
- package/src/hooks/__tests__/usePublicEvent.simple.test.ts +1 -3
- package/src/hooks/__tests__/usePublicEvent.unit.test.ts +1 -3
- package/src/hooks/__tests__/useRBAC.unit.test.ts +24 -2
- package/src/hooks/index.ts +4 -0
- package/src/hooks/public/index.ts +2 -0
- package/src/hooks/public/usePublicEvent.ts +4 -6
- package/src/hooks/public/usePublicRouteParams.ts +1 -1
- package/src/hooks/services/useAuth.ts +2 -4
- package/src/hooks/services/useCurrentEvent.ts +1 -1
- package/src/hooks/useAppConfig.ts +1 -1
- package/src/hooks/useDataTablePerformance.ts +2 -2
- package/src/hooks/useEventTheme.ts +1 -1
- package/src/hooks/useEvents.ts +51 -10
- package/src/hooks/useOrganisationPermissions.test.ts +3 -3
- package/src/hooks/useOrganisationPermissions.ts +1 -1
- package/src/hooks/useOrganisationSecurity.ts +2 -2
- package/src/hooks/usePermissionCache.test.ts +9 -9
- package/src/hooks/usePermissionCache.ts +2 -2
- package/src/index.ts +19 -12
- package/src/providers/OrganisationProvider.tsx +73 -9
- package/src/providers/UnifiedAuthProvider.smoke.test.tsx +113 -13
- package/src/providers/__tests__/AuthProvider.test.tsx +2 -1
- package/src/providers/__tests__/EventProvider.test.tsx +24 -15
- package/src/providers/__tests__/OrganisationProvider.test.tsx +87 -36
- package/src/providers/__tests__/UnifiedAuthProvider.test.tsx +80 -24
- package/src/providers/index.ts +0 -3
- package/src/providers/services/AuthServiceProvider.tsx +2 -17
- package/src/providers/services/EventServiceProvider.tsx +11 -16
- package/src/providers/services/InactivityServiceProvider.tsx +9 -12
- package/src/providers/services/OrganisationServiceProvider.tsx +9 -12
- package/src/providers/services/UnifiedAuthProvider.tsx +85 -18
- package/src/providers/services/__tests__/AuthServiceProvider.integration.test.tsx +11 -4
- package/src/rbac/__tests__/scenarios.user-role.test.tsx +105 -21
- package/src/rbac/adapters.tsx +1 -1
- package/src/rbac/api.ts +20 -4
- package/src/rbac/audit-enhanced.ts +47 -2
- package/src/rbac/audit.ts +47 -2
- package/src/rbac/components/NavigationGuard.tsx +1 -1
- package/src/rbac/components/NavigationProvider.test.tsx +7 -6
- package/src/rbac/components/NavigationProvider.tsx +1 -1
- package/src/rbac/components/PagePermissionGuard.tsx +1 -1
- package/src/rbac/components/PagePermissionProvider.test.tsx +7 -6
- package/src/rbac/components/PagePermissionProvider.tsx +1 -1
- package/src/rbac/components/PermissionEnforcer.tsx +1 -1
- package/src/rbac/components/RoleBasedRouter.tsx +1 -1
- package/src/rbac/components/SecureDataProvider.test.tsx +7 -6
- package/src/rbac/components/SecureDataProvider.tsx +1 -1
- package/src/rbac/components/__tests__/EnhancedNavigationMenu.test.tsx +6 -6
- package/src/rbac/components/__tests__/NavigationGuard.test.tsx +11 -10
- package/src/rbac/components/__tests__/NavigationProvider.test.tsx +10 -11
- package/src/rbac/components/__tests__/PagePermissionGuard.race-condition.test.tsx +19 -15
- package/src/rbac/components/__tests__/PagePermissionGuard.test.tsx +13 -12
- package/src/rbac/components/__tests__/PagePermissionGuard.verification.test.tsx +19 -15
- package/src/rbac/components/__tests__/PagePermissionProvider.test.tsx +18 -18
- package/src/rbac/components/__tests__/PermissionEnforcer.test.tsx +11 -10
- package/src/rbac/components/__tests__/RoleBasedRouter.test.tsx +8 -7
- package/src/rbac/components/__tests__/SecureDataProvider.fixed.test.tsx +10 -11
- package/src/rbac/components/__tests__/SecureDataProvider.test.tsx +48 -19
- package/src/rbac/hooks/__tests__/useSecureSupabase.test.ts +476 -0
- package/src/rbac/hooks/index.ts +3 -0
- package/src/rbac/hooks/usePermissions.ts +31 -85
- package/src/rbac/hooks/useRBAC.test.ts +13 -1
- package/src/rbac/hooks/useRBAC.ts +13 -67
- package/src/rbac/hooks/useResolvedScope.ts +11 -0
- package/src/rbac/hooks/useSecureSupabase.ts +308 -0
- package/src/rbac/index.ts +3 -0
- package/src/rbac/secureClient.ts +53 -6
- package/src/rbac/security.ts +37 -1
- package/src/{types/rbac-functions.ts → rbac/types/functions.ts} +30 -30
- package/src/rbac/types.ts +3 -2
- package/src/services/AuthService.ts +33 -25
- package/src/services/EventService.ts +56 -44
- package/src/services/InactivityService.ts +33 -53
- package/src/services/OrganisationService.ts +36 -40
- package/src/services/__tests__/AuthService.restoreSession.test.ts +6 -2
- package/src/services/__tests__/EventService.test.ts +67 -33
- package/src/services/interfaces/IEventService.ts +1 -1
- package/src/styles/core.css +2 -2
- package/src/styles/index.ts +1 -5
- package/src/types/__tests__/guards.test.ts +1 -1
- package/src/types/__tests__/type-validation.test.ts +0 -1
- package/src/types/auth.ts +42 -2
- package/src/types/core.ts +251 -0
- package/src/types/database.ts +11 -496
- package/src/types/event.ts +102 -0
- package/src/types/file-reference.ts +6 -4
- package/src/types/guards.ts +2 -1
- package/src/types/index.ts +48 -14
- package/src/types/lodash.debounce.d.ts +15 -0
- package/src/types/organisation.ts +14 -10
- package/src/types/supabase.ts +15 -17
- package/src/utils/__tests__/secureErrors.unit.test.ts +1 -1
- package/src/utils/__tests__/validationUtils.unit.test.ts +0 -29
- package/src/utils/app/appNameResolver.ts +1 -1
- package/src/utils/dynamic/dynamicUtils.ts +3 -2
- package/src/utils/file-reference/index.ts +25 -6
- package/src/utils/security/secureErrors.ts +1 -1
- package/src/utils/validation/index.ts +6 -12
- package/src/utils/validation/validationUtils.ts +0 -13
- package/dist/UnifiedAuthProvider-B37ATQHE.js +0 -16
- package/dist/auth-DReDSLq9.d.ts +0 -16
- package/dist/chunk-3JI76CYK.js +0 -2444
- package/dist/chunk-3JI76CYK.js.map +0 -1
- package/dist/chunk-56XJ3TU6.js +0 -11
- package/dist/chunk-56XJ3TU6.js.map +0 -1
- package/dist/chunk-5MT24GKJ.js.map +0 -1
- package/dist/chunk-7QCC6MCP.js +0 -288
- package/dist/chunk-BESYRHQM.js.map +0 -1
- package/dist/chunk-BJPBT3CU.js +0 -21
- package/dist/chunk-BJPBT3CU.js.map +0 -1
- package/dist/chunk-BVYWGZVV.js.map +0 -1
- package/dist/chunk-CX5M4ZAG.js.map +0 -1
- package/dist/chunk-D7LCGMVS.js.map +0 -1
- package/dist/chunk-EGI6MUL6.js +0 -27
- package/dist/chunk-EGI6MUL6.js.map +0 -1
- package/dist/chunk-ERISIBYU.js.map +0 -1
- package/dist/chunk-HRO5HWN2.js.map +0 -1
- package/dist/chunk-HZLDFOE4.js.map +0 -1
- package/dist/chunk-JISYG63F.js +0 -70
- package/dist/chunk-JISYG63F.js.map +0 -1
- package/dist/chunk-LIMSTKYD.js +0 -61
- package/dist/chunk-LIMSTKYD.js.map +0 -1
- package/dist/chunk-OWAG3GSU.js.map +0 -1
- package/dist/chunk-PPMP5J6T.js.map +0 -1
- package/dist/chunk-Q5QRDWKI.js.map +0 -1
- package/dist/chunk-S5OFRT4M.js.map +0 -1
- package/dist/chunk-SBVILCCA.js.map +0 -1
- package/dist/chunk-TUMEWN34.js +0 -15
- package/dist/chunk-TUMEWN34.js.map +0 -1
- package/dist/chunk-XDNLUEXI.js +0 -138
- package/dist/chunk-XJ2HZOBU.js.map +0 -1
- package/dist/chunk-ZYTYSTO5.js.map +0 -1
- package/dist/chunk-ZZ2SS7NI.js +0 -237
- package/dist/chunk-ZZ2SS7NI.js.map +0 -1
- package/dist/database-C6jy7EOu.d.ts +0 -500
- package/dist/organisation-D6qRDtbF.d.ts +0 -93
- package/dist/schema-DTDZQe2u.d.ts +0 -28
- package/dist/unified-DQ4VcT7H.d.ts +0 -198
- package/dist/useInactivityTracker-TO6ZOF35.js +0 -11
- package/dist/validation.d.ts +0 -47
- package/dist/validation.js +0 -24
- package/dist/validation.js.map +0 -1
- package/docs/DOCUMENTATION_AUDIT.md +0 -172
- package/docs/DOCUMENTATION_STANDARD.md +0 -137
- package/docs/api/classes/PublicErrorBoundary.md +0 -132
- package/docs/api/interfaces/EventLogoProps.md +0 -152
- package/docs/api/interfaces/PublicErrorBoundaryProps.md +0 -94
- package/docs/api/interfaces/PublicErrorBoundaryState.md +0 -68
- package/docs/api/interfaces/PublicLoadingSpinnerProps.md +0 -86
- package/docs/architecture/rpc-function-standards.md +0 -1106
- package/docs/getting-started/consuming-app-vite-config.md +0 -239
- package/docs/implementation-guides/event-theming-summary.md +0 -226
- package/docs/implementation-guides/public-pages-advanced.md +0 -1038
- package/docs/migration/v0.4.15-tailwind-scanning.md +0 -278
- package/docs/migration/v0.4.16-css-first-approach.md +0 -312
- package/docs/migration/v0.4.17-source-path-fix.md +0 -235
- package/docs/rbac/RBAC_EVENT_CONTEXT_LOADING.md +0 -222
- package/docs/rbac/RBAC_LOGIN_SAFETY_FIX.md +0 -95
- package/docs/rbac/RBAC_V0.5.147_FIX.md +0 -117
- package/docs/rbac/README-rbac-rls-integration.md +0 -374
- package/docs/styles/usage.md +0 -227
- package/docs/testing/visual-testing.md +0 -120
- package/docs/troubleshooting/DEBUG_NETWORK_ERROR.md +0 -152
- package/docs/troubleshooting/FIX_SUPABASE_CORS.md +0 -184
- package/docs/troubleshooting/cake-page-permission-guard-issue-summary.md +0 -193
- package/docs/troubleshooting/database-view-compatibility.md +0 -125
- package/docs/troubleshooting/react-hooks-issue-analysis.md +0 -172
- package/docs/troubleshooting/tailwind-content-scanning.md +0 -219
- package/examples/RBAC/EventBasedApp.tsx +0 -239
- package/examples/RBAC/PermissionExample.tsx +0 -151
- package/examples/STRUCTURE.md +0 -125
- package/examples/components 2/DataTable/HierarchicalExample.tsx +0 -475
- package/examples/components 2/Dialog/BasicHtmlTest.tsx +0 -55
- package/examples/components 2/Dialog/DebugHtmlExample.tsx +0 -68
- package/examples/components 2/Dialog/HtmlDialogExample.tsx +0 -202
- package/examples/components 2/Dialog/SimpleHtmlTest.tsx +0 -61
- package/examples/components 2/Dialog/SmartDialogExample.tsx +0 -322
- package/examples/components 2/index.ts +0 -11
- package/examples/features/index.ts +0 -12
- package/examples/features/rbac/CompleteRBACExample.tsx +0 -324
- package/examples/features/rbac/index.ts +0 -13
- package/examples/public-pages/CorrectPublicPageImplementation.tsx +0 -301
- package/examples/public-pages/PublicEventPage.tsx +0 -274
- package/examples/public-pages/PublicPageApp.tsx +0 -308
- package/examples/public-pages/PublicPageUsageExample.tsx +0 -216
- package/examples/public-pages/index.ts +0 -14
- package/src/__tests__/TEST_STANDARD.md +0 -1008
- package/src/components/Checkbox/__mocks__/Checkbox.tsx +0 -2
- package/src/components/DataTable/examples/HierarchicalActionsExample.tsx +0 -421
- package/src/components/DataTable/examples/InitialPageSizeExample.tsx +0 -177
- package/src/components/DataTable/examples/PerformanceExample.tsx +0 -506
- package/src/components/DataTable/examples/__tests__/HierarchicalActionsExample.test.tsx +0 -316
- package/src/components/DataTable/examples/__tests__/HierarchicalExample.test.tsx +0 -45
- package/src/components/DataTable/examples/__tests__/InitialPageSizeExample.test.tsx +0 -211
- package/src/components/DataTable/examples/__tests__/PerformanceExample.test.tsx +0 -126
- package/src/components/Dialog/README.md +0 -804
- package/src/components/Dialog/examples/BasicHtmlTest.tsx +0 -55
- package/src/components/Dialog/examples/DebugHtmlExample.tsx +0 -68
- package/src/components/Dialog/examples/ScrollableDialogExample.tsx +0 -290
- package/src/components/Dialog/examples/SimpleHtmlTest.tsx +0 -61
- package/src/components/Dialog/examples/__tests__/HtmlDialogExample.test.tsx +0 -71
- package/src/components/Dialog/examples/__tests__/SimpleHtmlTest.test.tsx +0 -122
- package/src/components/Dialog/examples/__tests__/SmartDialogExample.unit.test.tsx +0 -147
- package/src/components/Dialog/utils/__tests__/safeHtml.unit.test.ts +0 -611
- package/src/components/Dialog/utils/safeHtml.ts +0 -185
- package/src/components/EventSelector/types.ts +0 -79
- package/src/components/Form/FormErrorSummary.tsx +0 -113
- package/src/components/Form/FormField.tsx +0 -249
- package/src/components/Form/FormFieldset.tsx +0 -127
- package/src/components/Form/FormLiveRegion.tsx +0 -198
- package/src/components/Input/__mocks__/Input.tsx +0 -2
- package/src/components/NavigationMenu/types.ts +0 -85
- package/src/components/PaceAppLayout/__tests__/PaceAppLayout.accessibility.test.tsx +0 -326
- package/src/components/PaceAppLayout/__tests__/PaceAppLayout.unit.test.tsx +0 -1078
- package/src/components/PasswordReset/PasswordResetForm.test.tsx +0 -597
- package/src/components/PasswordReset/PasswordResetForm.tsx +0 -201
- package/src/components/PasswordReset/index.ts +0 -2
- package/src/components/ProtectedRoute/README.md +0 -164
- package/src/components/PublicLayout/EventLogo.tsx +0 -175
- package/src/components/PublicLayout/PublicErrorBoundary.tsx +0 -282
- package/src/components/PublicLayout/PublicLoadingSpinner.tsx +0 -216
- package/src/components/PublicLayout/PublicPageContextChecker.tsx +0 -131
- package/src/components/PublicLayout/PublicPageDebugger.tsx +0 -104
- package/src/components/PublicLayout/PublicPageDiagnostic.tsx +0 -162
- package/src/components/PublicLayout/PublicPageFooter.tsx +0 -124
- package/src/components/PublicLayout/PublicPageHeader.tsx +0 -209
- package/src/components/PublicLayout/__tests__/PublicErrorBoundary.test.tsx +0 -449
- package/src/components/PublicLayout/__tests__/PublicLoadingSpinner.test.tsx +0 -393
- package/src/components/PublicLayout/__tests__/PublicPageContextChecker.test.tsx +0 -192
- package/src/components/PublicLayout/__tests__/PublicPageFooter.test.tsx +0 -351
- package/src/components/PublicLayout/__tests__/PublicPageHeader.test.tsx +0 -402
- package/src/components/PublicLayout/__tests__/PublicPageLayout.test.tsx +0 -460
- package/src/components/PublicLayout/__tests__/PublicPageProvider.test.tsx +0 -313
- package/src/components/Select/hooks.ts +0 -289
- package/src/hooks/useCounter.test.ts +0 -131
- package/src/hooks/useDebounce.test.ts +0 -375
- package/src/providers/AuthProvider.tsx +0 -15
- package/src/providers/EventProvider.tsx +0 -16
- package/src/providers/InactivityProvider.tsx +0 -15
- package/src/providers/OrganisationProvider.context.test.tsx +0 -169
- package/src/providers/UnifiedAuthProvider.tsx +0 -15
- package/src/types/theme.ts +0 -6
- package/src/types/unified.ts +0 -265
- package/src/utils/appConfig.ts +0 -47
- package/src/utils/appIdResolver.test.ts +0 -499
- package/src/utils/appIdResolver.ts +0 -130
- package/src/utils/appNameResolver.simple.test.ts +0 -212
- package/src/utils/appNameResolver.test.ts +0 -121
- package/src/utils/appNameResolver.ts +0 -191
- package/src/utils/audit.ts +0 -127
- package/src/utils/auth-utils.ts +0 -96
- package/src/utils/bundleAnalysis.ts +0 -129
- package/src/utils/debugLogger.ts +0 -67
- package/src/utils/deviceFingerprint.ts +0 -215
- package/src/utils/dynamicUtils.ts +0 -105
- package/src/utils/file-reference.test.ts +0 -788
- package/src/utils/file-reference.ts +0 -519
- package/src/utils/formatDate.test.ts +0 -237
- package/src/utils/formatting.ts +0 -170
- package/src/utils/lazyLoad.tsx +0 -44
- package/src/utils/logger.ts +0 -179
- package/src/utils/organisationContext.test.ts +0 -322
- package/src/utils/organisationContext.ts +0 -153
- package/src/utils/performanceBenchmark.ts +0 -64
- package/src/utils/performanceBudgets.ts +0 -110
- package/src/utils/permissionTypes.ts +0 -37
- package/src/utils/permissionUtils.test.ts +0 -393
- package/src/utils/permissionUtils.ts +0 -34
- package/src/utils/sanitization.ts +0 -264
- package/src/utils/schemaUtils.ts +0 -37
- package/src/utils/secureDataAccess.test.ts +0 -711
- package/src/utils/secureDataAccess.ts +0 -377
- package/src/utils/secureErrors.ts +0 -79
- package/src/utils/security.ts +0 -156
- package/src/utils/securityMonitor.ts +0 -45
- package/src/utils/sessionTracking.ts +0 -126
- package/src/utils/validation.ts +0 -111
- package/src/utils/validationUtils.ts +0 -120
- package/src/validation/index.ts +0 -12
- /package/dist/{DataTable-UA6CL4JI.js.map → DataTable-QAB34V6K.js.map} +0 -0
- /package/dist/{UnifiedAuthProvider-B37ATQHE.js.map → UnifiedAuthProvider-7F6T4B6K.js.map} +0 -0
- /package/dist/{api-45XYYO2A.js.map → api-ROMBCNKU.js.map} +0 -0
- /package/dist/{audit-64X3VJXB.js.map → audit-WRS3KJKI.js.map} +0 -0
- /package/dist/{chunk-PLDDJCW6.js.map → chunk-7D4SUZUM.js.map} +0 -0
- /package/dist/{useInactivityTracker-TO6ZOF35.js.map → chunk-KQCRWDSA.js.map} +0 -0
- /package/examples/{components 2/DataTable → DataTable}/InitialPageSizeExample.tsx +0 -0
- /package/examples/{features/public-pages → PublicPages}/index.ts +0 -0
- /package/examples/{RBAC → rbac}/index.ts +0 -0
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import {
|
|
2
|
+
OrganisationContextRequiredError,
|
|
2
3
|
getAccessLevel,
|
|
3
4
|
getPermissionMap,
|
|
4
5
|
getRBACLogger,
|
|
@@ -6,26 +7,179 @@ import {
|
|
|
6
7
|
isPermitted,
|
|
7
8
|
isPermittedCached,
|
|
8
9
|
resolveAppContext
|
|
9
|
-
} from "./chunk-
|
|
10
|
+
} from "./chunk-M7W4CP3M.js";
|
|
10
11
|
import {
|
|
11
|
-
init_useOrganisations,
|
|
12
12
|
useEvents,
|
|
13
13
|
useOrganisations
|
|
14
|
-
} from "./chunk-
|
|
14
|
+
} from "./chunk-QCDXODCA.js";
|
|
15
15
|
import {
|
|
16
|
-
init_UnifiedAuthProvider,
|
|
17
16
|
useUnifiedAuth
|
|
18
|
-
} from "./chunk-
|
|
17
|
+
} from "./chunk-FUEYYMX5.js";
|
|
19
18
|
import {
|
|
20
19
|
getCurrentAppName
|
|
21
|
-
} from "./chunk-
|
|
20
|
+
} from "./chunk-F2IMUDXZ.js";
|
|
22
21
|
import {
|
|
23
22
|
createLogger,
|
|
24
|
-
|
|
25
|
-
} from "./chunk-
|
|
23
|
+
logger
|
|
24
|
+
} from "./chunk-PWLANIRT.js";
|
|
25
|
+
|
|
26
|
+
// src/rbac/secureClient.ts
|
|
27
|
+
import { createClient } from "@supabase/supabase-js";
|
|
28
|
+
var SecureSupabaseClient = class _SecureSupabaseClient {
|
|
29
|
+
constructor(supabaseUrl, supabaseKey, organisationId, eventId, appId) {
|
|
30
|
+
this.edgeFunctionClient = null;
|
|
31
|
+
this.supabaseUrl = supabaseUrl;
|
|
32
|
+
this.supabaseKey = supabaseKey;
|
|
33
|
+
this.organisationId = organisationId;
|
|
34
|
+
this.eventId = eventId;
|
|
35
|
+
this.appId = appId;
|
|
36
|
+
this.supabase = createClient(supabaseUrl, supabaseKey, {
|
|
37
|
+
global: {
|
|
38
|
+
headers: {
|
|
39
|
+
"x-organisation-id": organisationId,
|
|
40
|
+
"x-event-id": eventId || "",
|
|
41
|
+
"x-app-id": appId || ""
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
});
|
|
45
|
+
this.setupContextInjection();
|
|
46
|
+
this.setupEdgeFunctionHandling();
|
|
47
|
+
}
|
|
48
|
+
/**
|
|
49
|
+
* Setup context injection for all database operations
|
|
50
|
+
*/
|
|
51
|
+
setupContextInjection() {
|
|
52
|
+
const originalFrom = this.supabase.from.bind(this.supabase);
|
|
53
|
+
this.supabase.from = (table) => {
|
|
54
|
+
this.validateContext();
|
|
55
|
+
const query = originalFrom(table);
|
|
56
|
+
return this.injectContext(query);
|
|
57
|
+
};
|
|
58
|
+
const originalRpc = this.supabase.rpc.bind(this.supabase);
|
|
59
|
+
this.supabase.rpc = (fn, args, options) => {
|
|
60
|
+
this.validateContext();
|
|
61
|
+
const contextArgs = {
|
|
62
|
+
...args,
|
|
63
|
+
p_organisation_id: this.organisationId,
|
|
64
|
+
p_event_id: this.eventId,
|
|
65
|
+
p_app_id: this.appId
|
|
66
|
+
};
|
|
67
|
+
return originalRpc(fn, contextArgs, options);
|
|
68
|
+
};
|
|
69
|
+
}
|
|
70
|
+
/**
|
|
71
|
+
* Setup Edge Function handling to bypass custom headers
|
|
72
|
+
* Edge Functions may not have CORS configured to accept custom headers,
|
|
73
|
+
* so we create a separate client without custom headers for Edge Function calls
|
|
74
|
+
*
|
|
75
|
+
* NOTE: We store the edge function client but don't override functions here.
|
|
76
|
+
* Instead, we provide a method to get the edge function client for direct use.
|
|
77
|
+
* This avoids interfering with the main client's operations.
|
|
78
|
+
*/
|
|
79
|
+
setupEdgeFunctionHandling() {
|
|
80
|
+
this.edgeFunctionClient = createClient(this.supabaseUrl, this.supabaseKey);
|
|
81
|
+
}
|
|
82
|
+
/**
|
|
83
|
+
* Get a client for Edge Function calls without custom headers
|
|
84
|
+
* Edge Functions may not have CORS configured to accept custom headers
|
|
85
|
+
* @returns Supabase client without custom headers for Edge Function calls
|
|
86
|
+
*/
|
|
87
|
+
getEdgeFunctionClient() {
|
|
88
|
+
return this.edgeFunctionClient || this.supabase;
|
|
89
|
+
}
|
|
90
|
+
/**
|
|
91
|
+
* Inject organisation context into a query
|
|
92
|
+
*/
|
|
93
|
+
injectContext(query) {
|
|
94
|
+
const originalSelect = query.select.bind(query);
|
|
95
|
+
const originalInsert = query.insert.bind(query);
|
|
96
|
+
const originalUpdate = query.update.bind(query);
|
|
97
|
+
const originalDelete = query.delete.bind(query);
|
|
98
|
+
query.select = (columns) => {
|
|
99
|
+
const result = originalSelect(columns);
|
|
100
|
+
return this.addOrganisationFilter(result);
|
|
101
|
+
};
|
|
102
|
+
query.insert = (values) => {
|
|
103
|
+
const contextValues = Array.isArray(values) ? values.map((v) => ({ ...v, organisation_id: this.organisationId })) : { ...values, organisation_id: this.organisationId };
|
|
104
|
+
return originalInsert(contextValues);
|
|
105
|
+
};
|
|
106
|
+
query.update = (values) => {
|
|
107
|
+
const result = originalUpdate(values);
|
|
108
|
+
return this.addOrganisationFilter(result);
|
|
109
|
+
};
|
|
110
|
+
query.delete = () => {
|
|
111
|
+
const result = originalDelete();
|
|
112
|
+
return this.addOrganisationFilter(result);
|
|
113
|
+
};
|
|
114
|
+
return query;
|
|
115
|
+
}
|
|
116
|
+
/**
|
|
117
|
+
* Add organisation filter to a query
|
|
118
|
+
*/
|
|
119
|
+
addOrganisationFilter(query) {
|
|
120
|
+
return query.eq("organisation_id", this.organisationId);
|
|
121
|
+
}
|
|
122
|
+
/**
|
|
123
|
+
* Validate that required context is present
|
|
124
|
+
*/
|
|
125
|
+
validateContext() {
|
|
126
|
+
if (!this.organisationId) {
|
|
127
|
+
throw new OrganisationContextRequiredError();
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
/**
|
|
131
|
+
* Get the current organisation ID
|
|
132
|
+
*/
|
|
133
|
+
getOrganisationId() {
|
|
134
|
+
return this.organisationId;
|
|
135
|
+
}
|
|
136
|
+
/**
|
|
137
|
+
* Get the current event ID
|
|
138
|
+
*/
|
|
139
|
+
getEventId() {
|
|
140
|
+
return this.eventId;
|
|
141
|
+
}
|
|
142
|
+
/**
|
|
143
|
+
* Get the current app ID
|
|
144
|
+
*/
|
|
145
|
+
getAppId() {
|
|
146
|
+
return this.appId;
|
|
147
|
+
}
|
|
148
|
+
/**
|
|
149
|
+
* Create a new client with updated context
|
|
150
|
+
*/
|
|
151
|
+
withContext(updates) {
|
|
152
|
+
return new _SecureSupabaseClient(
|
|
153
|
+
this.supabaseUrl,
|
|
154
|
+
this.supabaseKey,
|
|
155
|
+
updates.organisationId || this.organisationId,
|
|
156
|
+
updates.eventId !== void 0 ? updates.eventId : this.eventId,
|
|
157
|
+
updates.appId !== void 0 ? updates.appId : this.appId
|
|
158
|
+
);
|
|
159
|
+
}
|
|
160
|
+
/**
|
|
161
|
+
* Get the underlying Supabase client (for internal use only)
|
|
162
|
+
* @internal
|
|
163
|
+
*/
|
|
164
|
+
getClient() {
|
|
165
|
+
return new Proxy(this.supabase, {
|
|
166
|
+
get: (target, prop) => {
|
|
167
|
+
if (prop === "functions" && this.edgeFunctionClient) {
|
|
168
|
+
return this.edgeFunctionClient.functions;
|
|
169
|
+
}
|
|
170
|
+
return target[prop];
|
|
171
|
+
}
|
|
172
|
+
});
|
|
173
|
+
}
|
|
174
|
+
};
|
|
175
|
+
function createSecureClient(supabaseUrl, supabaseKey, organisationId, eventId, appId) {
|
|
176
|
+
return new SecureSupabaseClient(supabaseUrl, supabaseKey, organisationId, eventId, appId);
|
|
177
|
+
}
|
|
178
|
+
function fromSupabaseClient(client, organisationId, eventId, appId) {
|
|
179
|
+
throw new Error("fromSupabaseClient is not supported. Use createSecureClient instead.");
|
|
180
|
+
}
|
|
26
181
|
|
|
27
182
|
// src/rbac/hooks/useRBAC.ts
|
|
28
|
-
init_UnifiedAuthProvider();
|
|
29
183
|
import { useState, useEffect, useCallback, useMemo } from "react";
|
|
30
184
|
function mapAccessLevelToEventRole(level) {
|
|
31
185
|
switch (level) {
|
|
@@ -43,7 +197,7 @@ function mapAccessLevelToEventRole(level) {
|
|
|
43
197
|
}
|
|
44
198
|
}
|
|
45
199
|
function useRBAC(pageId) {
|
|
46
|
-
const
|
|
200
|
+
const logger2 = getRBACLogger();
|
|
47
201
|
const {
|
|
48
202
|
user,
|
|
49
203
|
session,
|
|
@@ -56,24 +210,6 @@ function useRBAC(pageId) {
|
|
|
56
210
|
eventLoading
|
|
57
211
|
} = useUnifiedAuth();
|
|
58
212
|
const requiresEvent = appConfig?.requires_event ?? (appConfig === null ? true : false);
|
|
59
|
-
if (user && session) {
|
|
60
|
-
const hookInitLog = {
|
|
61
|
-
appName,
|
|
62
|
-
requiresEvent,
|
|
63
|
-
appConfig: appConfig ? JSON.stringify(appConfig) : "null",
|
|
64
|
-
hasUser: !!user,
|
|
65
|
-
hasSession: !!session,
|
|
66
|
-
hasSelectedEvent: !!selectedEvent,
|
|
67
|
-
eventLoading,
|
|
68
|
-
selectedEventId: selectedEvent?.event_id,
|
|
69
|
-
hasSelectedOrganisation: !!selectedOrganisation,
|
|
70
|
-
organisationId: selectedOrganisation?.id,
|
|
71
|
-
orgContextReady,
|
|
72
|
-
orgLoading
|
|
73
|
-
};
|
|
74
|
-
logger.warn("[useRBAC] Hook initialized", hookInitLog);
|
|
75
|
-
console.warn("[useRBAC] Hook initialized (direct log)", hookInitLog);
|
|
76
|
-
}
|
|
77
213
|
const [globalRole, setGlobalRole] = useState(null);
|
|
78
214
|
const [organisationRole, setOrganisationRole] = useState(null);
|
|
79
215
|
const [eventAppRole, setEventAppRole] = useState(null);
|
|
@@ -96,31 +232,17 @@ function useRBAC(pageId) {
|
|
|
96
232
|
}
|
|
97
233
|
if (orgLoading || !orgContextReady || !selectedOrganisation?.id) {
|
|
98
234
|
setIsLoading(true);
|
|
99
|
-
logger.warn("[useRBAC] Waiting for organisation context before loading RBAC context", {
|
|
100
|
-
orgLoading,
|
|
101
|
-
orgContextReady,
|
|
102
|
-
hasSelectedOrganisation: !!selectedOrganisation,
|
|
103
|
-
organisationId: selectedOrganisation?.id,
|
|
104
|
-
appName
|
|
105
|
-
});
|
|
106
235
|
return;
|
|
107
236
|
}
|
|
108
237
|
if (requiresEvent) {
|
|
109
238
|
if (eventLoading || !selectedEvent) {
|
|
110
239
|
setIsLoading(true);
|
|
111
|
-
logger.warn("[useRBAC] Waiting for event context before loading RBAC context", {
|
|
112
|
-
eventLoading,
|
|
113
|
-
hasSelectedEvent: !!selectedEvent,
|
|
114
|
-
appName,
|
|
115
|
-
selectedEventId: selectedEvent?.event_id,
|
|
116
|
-
organisationId: selectedOrganisation?.id
|
|
117
|
-
});
|
|
118
240
|
return;
|
|
119
241
|
}
|
|
120
242
|
}
|
|
121
243
|
setIsLoading(true);
|
|
122
244
|
setError(null);
|
|
123
|
-
|
|
245
|
+
logger2.debug("[useRBAC] Loading RBAC context", {
|
|
124
246
|
appName,
|
|
125
247
|
requiresEvent,
|
|
126
248
|
hasSelectedEvent: !!selectedEvent,
|
|
@@ -138,7 +260,7 @@ function useRBAC(pageId) {
|
|
|
138
260
|
appId = resolved.appId;
|
|
139
261
|
} catch (rpcError) {
|
|
140
262
|
if (rpcError?.message?.includes("NetworkError") || rpcError?.message?.includes("fetch")) {
|
|
141
|
-
|
|
263
|
+
logger2.warn("[useRBAC] NetworkError resolving app context - may be timing issue, will retry when context is ready", {
|
|
142
264
|
appName,
|
|
143
265
|
error: rpcError.message,
|
|
144
266
|
requiresEvent,
|
|
@@ -156,13 +278,6 @@ function useRBAC(pageId) {
|
|
|
156
278
|
eventId: selectedEvent?.event_id || void 0,
|
|
157
279
|
appId
|
|
158
280
|
};
|
|
159
|
-
logger.warn("[useRBAC] Building scope for RBAC context", {
|
|
160
|
-
organisationId: scope.organisationId,
|
|
161
|
-
eventId: scope.eventId,
|
|
162
|
-
appId: scope.appId,
|
|
163
|
-
hasOrganisationId: !!scope.organisationId,
|
|
164
|
-
hasEventId: !!scope.eventId
|
|
165
|
-
});
|
|
166
281
|
setCurrentScope(scope);
|
|
167
282
|
const [map, roleContext, accessLevel] = await Promise.all([
|
|
168
283
|
getPermissionMap({ userId: user.id, scope }),
|
|
@@ -173,22 +288,23 @@ function useRBAC(pageId) {
|
|
|
173
288
|
setGlobalRole(roleContext.globalRole);
|
|
174
289
|
setOrganisationRole(roleContext.organisationRole);
|
|
175
290
|
setEventAppRole(roleContext.eventAppRole || mapAccessLevelToEventRole(accessLevel));
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
291
|
+
const permissionCount = Object.keys(map).length;
|
|
292
|
+
if (permissionCount === 0) {
|
|
293
|
+
logger2.warn("[useRBAC] RBAC context loaded but returned 0 permissions", {
|
|
294
|
+
appName,
|
|
295
|
+
organisationId: selectedOrganisation.id,
|
|
296
|
+
eventId: selectedEvent?.event_id
|
|
297
|
+
});
|
|
298
|
+
}
|
|
183
299
|
} catch (err) {
|
|
184
300
|
const handledError = err instanceof Error ? err : new Error("Failed to load RBAC context");
|
|
185
|
-
|
|
301
|
+
logger2.error("[useRBAC] Error loading RBAC context:", handledError);
|
|
186
302
|
setError(handledError);
|
|
187
303
|
resetState();
|
|
188
304
|
} finally {
|
|
189
305
|
setIsLoading(false);
|
|
190
306
|
}
|
|
191
|
-
}, [appName,
|
|
307
|
+
}, [appName, logger2, resetState, selectedEvent?.event_id, selectedOrganisation?.id, session, user, requiresEvent, eventLoading, appConfig, orgContextReady, orgLoading]);
|
|
192
308
|
const hasGlobalPermission = useCallback(
|
|
193
309
|
(permission) => {
|
|
194
310
|
if (globalRole === "super_admin" || permissionMap["*"]) {
|
|
@@ -210,19 +326,6 @@ function useRBAC(pageId) {
|
|
|
210
326
|
const canManageOrganisation = useMemo(() => isSuperAdmin || organisationRole === "org_admin", [isSuperAdmin, organisationRole]);
|
|
211
327
|
const canManageEvent = useMemo(() => isSuperAdmin || eventAppRole === "event_admin", [isSuperAdmin, eventAppRole]);
|
|
212
328
|
useEffect(() => {
|
|
213
|
-
logger.warn("[useRBAC] useEffect triggered - calling loadRBACContext", {
|
|
214
|
-
appName,
|
|
215
|
-
requiresEvent,
|
|
216
|
-
eventLoading,
|
|
217
|
-
hasSelectedEvent: !!selectedEvent,
|
|
218
|
-
selectedEventId: selectedEvent?.event_id,
|
|
219
|
-
hasUser: !!user,
|
|
220
|
-
hasSession: !!session,
|
|
221
|
-
hasSelectedOrganisation: !!selectedOrganisation,
|
|
222
|
-
organisationId: selectedOrganisation?.id,
|
|
223
|
-
orgContextReady,
|
|
224
|
-
orgLoading
|
|
225
|
-
});
|
|
226
329
|
loadRBACContext();
|
|
227
330
|
}, [loadRBACContext, appName, requiresEvent, eventLoading, selectedEvent?.event_id, user, session, selectedOrganisation?.id, orgContextReady, orgLoading]);
|
|
228
331
|
return {
|
|
@@ -265,7 +368,6 @@ async function createScopeFromEvent(supabase, eventId, appId) {
|
|
|
265
368
|
}
|
|
266
369
|
|
|
267
370
|
// src/rbac/hooks/useResolvedScope.ts
|
|
268
|
-
init_logger();
|
|
269
371
|
var log = createLogger("useResolvedScope");
|
|
270
372
|
function useResolvedScope({
|
|
271
373
|
supabase,
|
|
@@ -302,6 +404,14 @@ function useResolvedScope({
|
|
|
302
404
|
useEffect2(() => {
|
|
303
405
|
let cancelled = false;
|
|
304
406
|
const resolveScope = async () => {
|
|
407
|
+
if (!supabase && !selectedOrganisationId && !selectedEventId) {
|
|
408
|
+
if (!cancelled) {
|
|
409
|
+
setResolvedScope(null);
|
|
410
|
+
setIsLoading(false);
|
|
411
|
+
setError(null);
|
|
412
|
+
}
|
|
413
|
+
return;
|
|
414
|
+
}
|
|
305
415
|
setIsLoading(true);
|
|
306
416
|
setError(null);
|
|
307
417
|
try {
|
|
@@ -403,35 +513,20 @@ function useResolvedScope({
|
|
|
403
513
|
}
|
|
404
514
|
|
|
405
515
|
// src/rbac/hooks/usePermissions.ts
|
|
406
|
-
import
|
|
516
|
+
import { useState as useState3, useEffect as useEffect3, useCallback as useCallback2, useMemo as useMemo2, useRef as useRef2 } from "react";
|
|
407
517
|
function usePermissions(userId, organisationId, eventId, appId) {
|
|
408
518
|
const [permissions, setPermissions] = useState3({});
|
|
409
519
|
const [isLoading, setIsLoading] = useState3(true);
|
|
410
520
|
const [error, setError] = useState3(null);
|
|
411
521
|
const [fetchTrigger, setFetchTrigger] = useState3(0);
|
|
412
522
|
const isFetchingRef = useRef2(false);
|
|
413
|
-
const
|
|
523
|
+
const logger2 = getRBACLogger();
|
|
414
524
|
const prevValuesRef = useRef2({ userId, organisationId, eventId, appId });
|
|
415
525
|
const orgId = organisationId || "";
|
|
416
|
-
logger.warn("[usePermissions] Hook called with scope", {
|
|
417
|
-
userId,
|
|
418
|
-
organisationId: orgId,
|
|
419
|
-
eventId,
|
|
420
|
-
appId,
|
|
421
|
-
hasAppId: !!appId,
|
|
422
|
-
hasOrganisationId: !!orgId
|
|
423
|
-
});
|
|
424
|
-
React.useEffect(() => {
|
|
425
|
-
logger.warn("[usePermissions] Scope changed (useEffect)", {
|
|
426
|
-
userId,
|
|
427
|
-
organisationId,
|
|
428
|
-
eventId,
|
|
429
|
-
appId,
|
|
430
|
-
hasAppId: !!appId,
|
|
431
|
-
hasOrganisationId: !!organisationId
|
|
432
|
-
});
|
|
433
|
-
}, [userId, organisationId, eventId, appId]);
|
|
434
526
|
useEffect3(() => {
|
|
527
|
+
if (!userId) {
|
|
528
|
+
return;
|
|
529
|
+
}
|
|
435
530
|
if (!orgId || orgId === null || typeof orgId === "string" && orgId.trim() === "") {
|
|
436
531
|
const timeoutId = setTimeout(() => {
|
|
437
532
|
setError(new Error("Organisation context is required for permission checks"));
|
|
@@ -442,74 +537,38 @@ function usePermissions(userId, organisationId, eventId, appId) {
|
|
|
442
537
|
if (error?.message === "Organisation context is required for permission checks") {
|
|
443
538
|
setError(null);
|
|
444
539
|
}
|
|
445
|
-
}, [organisationId, error]);
|
|
540
|
+
}, [userId, organisationId, error]);
|
|
446
541
|
const paramsChanged = prevValuesRef.current.userId !== userId || prevValuesRef.current.organisationId !== organisationId || prevValuesRef.current.eventId !== eventId || prevValuesRef.current.appId !== appId;
|
|
447
542
|
if (paramsChanged) {
|
|
448
|
-
|
|
449
|
-
|
|
450
|
-
|
|
451
|
-
|
|
452
|
-
|
|
453
|
-
|
|
454
|
-
prevAppId: prevValuesRef.current.appId,
|
|
455
|
-
appIdChanged: prevValuesRef.current.appId !== appId
|
|
456
|
-
});
|
|
543
|
+
if (prevValuesRef.current.appId !== appId) {
|
|
544
|
+
logger2.debug("[usePermissions] AppId changed - triggering fetch", {
|
|
545
|
+
prevAppId: prevValuesRef.current.appId,
|
|
546
|
+
newAppId: appId
|
|
547
|
+
});
|
|
548
|
+
}
|
|
457
549
|
prevValuesRef.current = { userId, organisationId, eventId, appId };
|
|
458
550
|
setFetchTrigger((prev) => prev + 1);
|
|
459
551
|
}
|
|
460
552
|
useEffect3(() => {
|
|
461
553
|
const fetchPermissions = async () => {
|
|
462
|
-
logger.warn("[usePermissions] Fetch useEffect triggered", {
|
|
463
|
-
userId,
|
|
464
|
-
orgId,
|
|
465
|
-
eventId,
|
|
466
|
-
appId,
|
|
467
|
-
hasAppId: !!appId,
|
|
468
|
-
isFetching: isFetchingRef.current
|
|
469
|
-
});
|
|
470
554
|
if (isFetchingRef.current) {
|
|
471
|
-
logger.warn("[usePermissions] Skipping fetch - already fetching", {
|
|
472
|
-
userId,
|
|
473
|
-
scope: {
|
|
474
|
-
organisationId: orgId,
|
|
475
|
-
eventId,
|
|
476
|
-
appId
|
|
477
|
-
}
|
|
478
|
-
});
|
|
479
555
|
return;
|
|
480
556
|
}
|
|
481
557
|
if (!userId) {
|
|
482
|
-
|
|
558
|
+
setPermissions({});
|
|
559
|
+
setIsLoading(false);
|
|
560
|
+
return;
|
|
561
|
+
}
|
|
562
|
+
if (!userId) {
|
|
483
563
|
setPermissions({});
|
|
484
564
|
setIsLoading(false);
|
|
485
565
|
return;
|
|
486
566
|
}
|
|
487
567
|
if (!orgId || orgId === null || typeof orgId === "string" && orgId.trim() === "") {
|
|
488
|
-
logger.warn("[usePermissions] Skipping fetch - no orgId", {
|
|
489
|
-
orgId,
|
|
490
|
-
hasOrgId: !!orgId
|
|
491
|
-
});
|
|
492
568
|
setIsLoading(true);
|
|
493
569
|
setError(null);
|
|
494
570
|
return;
|
|
495
571
|
}
|
|
496
|
-
if (!appId) {
|
|
497
|
-
logger.warn("[usePermissions] Fetching permissions without appId (may return limited permissions)", {
|
|
498
|
-
userId,
|
|
499
|
-
organisationId: orgId,
|
|
500
|
-
eventId,
|
|
501
|
-
hasAppId: false
|
|
502
|
-
});
|
|
503
|
-
}
|
|
504
|
-
logger.warn("[usePermissions] Fetching permissions", {
|
|
505
|
-
userId,
|
|
506
|
-
scope: {
|
|
507
|
-
organisationId: orgId,
|
|
508
|
-
eventId,
|
|
509
|
-
appId
|
|
510
|
-
},
|
|
511
|
-
hasAppId: !!appId
|
|
512
|
-
});
|
|
513
572
|
try {
|
|
514
573
|
isFetchingRef.current = true;
|
|
515
574
|
setIsLoading(true);
|
|
@@ -520,18 +579,15 @@ function usePermissions(userId, organisationId, eventId, appId) {
|
|
|
520
579
|
appId
|
|
521
580
|
};
|
|
522
581
|
const permissionMap = await getPermissionMap({ userId, scope });
|
|
523
|
-
|
|
524
|
-
|
|
525
|
-
|
|
526
|
-
|
|
527
|
-
|
|
528
|
-
|
|
529
|
-
appId
|
|
530
|
-
}
|
|
531
|
-
});
|
|
582
|
+
const permissionCount = Object.keys(permissionMap).length;
|
|
583
|
+
if (permissionCount === 0 && Object.keys(permissions).length > 0) {
|
|
584
|
+
logger2.warn("[usePermissions] Permissions fetched but returned empty map", {
|
|
585
|
+
scope: { organisationId: orgId, eventId, appId }
|
|
586
|
+
});
|
|
587
|
+
}
|
|
532
588
|
setPermissions(permissionMap);
|
|
533
589
|
} catch (err) {
|
|
534
|
-
|
|
590
|
+
logger2.error("[usePermissions] Failed to fetch permissions:", err);
|
|
535
591
|
setError(err instanceof Error ? err : new Error("Failed to fetch permissions"));
|
|
536
592
|
} finally {
|
|
537
593
|
setIsLoading(false);
|
|
@@ -584,8 +640,8 @@ function usePermissions(userId, organisationId, eventId, appId) {
|
|
|
584
640
|
const permissionMap = await getPermissionMap({ userId, scope });
|
|
585
641
|
setPermissions(permissionMap);
|
|
586
642
|
} catch (err) {
|
|
587
|
-
const
|
|
588
|
-
|
|
643
|
+
const logger3 = getRBACLogger();
|
|
644
|
+
logger3.error("Failed to refetch permissions:", err);
|
|
589
645
|
setError(err instanceof Error ? err : new Error("Failed to fetch permissions"));
|
|
590
646
|
} finally {
|
|
591
647
|
setIsLoading(false);
|
|
@@ -665,8 +721,8 @@ function useCan(userId, scope, permission, pageId, useCache = true) {
|
|
|
665
721
|
const result = useCache ? await isPermittedCached({ userId, scope: validScope, permission, pageId }) : await isPermitted({ userId, scope: validScope, permission, pageId });
|
|
666
722
|
setCan(result);
|
|
667
723
|
} catch (err) {
|
|
668
|
-
const
|
|
669
|
-
|
|
724
|
+
const logger2 = getRBACLogger();
|
|
725
|
+
logger2.error("Permission check error:", { permission, error: err });
|
|
670
726
|
setError(err instanceof Error ? err : new Error("Failed to check permission"));
|
|
671
727
|
setCan(false);
|
|
672
728
|
} finally {
|
|
@@ -901,8 +957,6 @@ function useCachedPermissions(userId, scope) {
|
|
|
901
957
|
}
|
|
902
958
|
|
|
903
959
|
// src/rbac/hooks/useResourcePermissions.ts
|
|
904
|
-
init_UnifiedAuthProvider();
|
|
905
|
-
init_useOrganisations();
|
|
906
960
|
import { useMemo as useMemo3 } from "react";
|
|
907
961
|
function useResourcePermissions(resource, options = {}) {
|
|
908
962
|
const { enableRead = false, requireScope = true } = options;
|
|
@@ -1017,7 +1071,6 @@ function useResourcePermissions(resource, options = {}) {
|
|
|
1017
1071
|
}
|
|
1018
1072
|
|
|
1019
1073
|
// src/rbac/hooks/useRoleManagement.ts
|
|
1020
|
-
init_UnifiedAuthProvider();
|
|
1021
1074
|
import { useState as useState4, useCallback as useCallback3 } from "react";
|
|
1022
1075
|
function useRoleManagement() {
|
|
1023
1076
|
const { user, supabase } = useUnifiedAuth();
|
|
@@ -1141,7 +1194,106 @@ function useRoleManagement() {
|
|
|
1141
1194
|
};
|
|
1142
1195
|
}
|
|
1143
1196
|
|
|
1197
|
+
// src/rbac/hooks/useSecureSupabase.ts
|
|
1198
|
+
import { useMemo as useMemo4, useRef as useRef3 } from "react";
|
|
1199
|
+
var secureClientCache = /* @__PURE__ */ new Map();
|
|
1200
|
+
var MAX_CACHE_SIZE = 5;
|
|
1201
|
+
function getCacheKey(organisationId, eventId, appId) {
|
|
1202
|
+
return `${organisationId}-${eventId || "no-event"}-${appId || "no-app"}`;
|
|
1203
|
+
}
|
|
1204
|
+
function getSupabaseConfig() {
|
|
1205
|
+
const getEnvVar = (key) => {
|
|
1206
|
+
if (typeof import.meta !== "undefined" && import.meta.env) {
|
|
1207
|
+
return import.meta.env[key];
|
|
1208
|
+
}
|
|
1209
|
+
if (typeof process !== "undefined" && process.env) {
|
|
1210
|
+
return process.env[key];
|
|
1211
|
+
}
|
|
1212
|
+
return void 0;
|
|
1213
|
+
};
|
|
1214
|
+
const supabaseUrl = getEnvVar("VITE_SUPABASE_URL") || getEnvVar("NEXT_PUBLIC_SUPABASE_URL") || null;
|
|
1215
|
+
const supabaseKey = getEnvVar("VITE_SUPABASE_ANON_KEY") || getEnvVar("NEXT_PUBLIC_SUPABASE_ANON_KEY") || null;
|
|
1216
|
+
if (!supabaseUrl || !supabaseKey) {
|
|
1217
|
+
return null;
|
|
1218
|
+
}
|
|
1219
|
+
return { url: supabaseUrl, key: supabaseKey };
|
|
1220
|
+
}
|
|
1221
|
+
function useSecureSupabase(baseClient) {
|
|
1222
|
+
const { user, supabase: authSupabase } = useUnifiedAuth();
|
|
1223
|
+
const { selectedOrganisation } = useOrganisations();
|
|
1224
|
+
const eventsContext = useEvents();
|
|
1225
|
+
const { selectedEvent } = eventsContext;
|
|
1226
|
+
const eventLoading = "eventLoading" in eventsContext ? eventsContext.eventLoading : false;
|
|
1227
|
+
const { resolvedScope } = useResolvedScope({
|
|
1228
|
+
supabase: authSupabase || null,
|
|
1229
|
+
selectedOrganisationId: selectedOrganisation?.id || null,
|
|
1230
|
+
selectedEventId: selectedEvent?.event_id || null
|
|
1231
|
+
});
|
|
1232
|
+
const prevContextRef = useRef3({
|
|
1233
|
+
organisationId: void 0,
|
|
1234
|
+
eventId: void 0,
|
|
1235
|
+
appId: void 0
|
|
1236
|
+
});
|
|
1237
|
+
return useMemo4(() => {
|
|
1238
|
+
if (eventLoading) {
|
|
1239
|
+
return baseClient || authSupabase || null;
|
|
1240
|
+
}
|
|
1241
|
+
if (selectedOrganisation?.id && user?.id) {
|
|
1242
|
+
const organisationId = selectedOrganisation.id;
|
|
1243
|
+
const eventId = selectedEvent?.event_id;
|
|
1244
|
+
const appId = resolvedScope?.appId;
|
|
1245
|
+
prevContextRef.current = { organisationId, eventId, appId };
|
|
1246
|
+
const cacheKey = getCacheKey(organisationId, eventId, appId);
|
|
1247
|
+
const cachedClient = secureClientCache.get(cacheKey);
|
|
1248
|
+
if (cachedClient) {
|
|
1249
|
+
return cachedClient.getClient();
|
|
1250
|
+
}
|
|
1251
|
+
const config = getSupabaseConfig();
|
|
1252
|
+
if (!config || !config.url || !config.key) {
|
|
1253
|
+
logger.warn("useSecureSupabase", "Missing Supabase environment variables. Falling back to base client.", {
|
|
1254
|
+
note: "Ensure VITE_SUPABASE_URL and VITE_SUPABASE_ANON_KEY are set in your environment."
|
|
1255
|
+
});
|
|
1256
|
+
return baseClient || authSupabase || null;
|
|
1257
|
+
}
|
|
1258
|
+
try {
|
|
1259
|
+
const secureClient = createSecureClient(
|
|
1260
|
+
config.url,
|
|
1261
|
+
config.key,
|
|
1262
|
+
organisationId,
|
|
1263
|
+
// organisationId is string, UUID is string alias
|
|
1264
|
+
eventId,
|
|
1265
|
+
appId
|
|
1266
|
+
// appId is string | undefined, UUID is string alias
|
|
1267
|
+
);
|
|
1268
|
+
secureClientCache.set(cacheKey, secureClient);
|
|
1269
|
+
if (secureClientCache.size > MAX_CACHE_SIZE) {
|
|
1270
|
+
const firstKey = secureClientCache.keys().next().value;
|
|
1271
|
+
if (firstKey) {
|
|
1272
|
+
secureClientCache.delete(firstKey);
|
|
1273
|
+
}
|
|
1274
|
+
}
|
|
1275
|
+
return secureClient.getClient();
|
|
1276
|
+
} catch (error) {
|
|
1277
|
+
logger.error("useSecureSupabase", "Failed to create secure client", error);
|
|
1278
|
+
return baseClient || authSupabase || null;
|
|
1279
|
+
}
|
|
1280
|
+
}
|
|
1281
|
+
return baseClient || authSupabase || null;
|
|
1282
|
+
}, [
|
|
1283
|
+
selectedOrganisation?.id,
|
|
1284
|
+
selectedEvent?.event_id,
|
|
1285
|
+
user?.id,
|
|
1286
|
+
eventLoading,
|
|
1287
|
+
resolvedScope?.appId,
|
|
1288
|
+
baseClient,
|
|
1289
|
+
authSupabase
|
|
1290
|
+
]);
|
|
1291
|
+
}
|
|
1292
|
+
|
|
1144
1293
|
export {
|
|
1294
|
+
SecureSupabaseClient,
|
|
1295
|
+
createSecureClient,
|
|
1296
|
+
fromSupabaseClient,
|
|
1145
1297
|
useRBAC,
|
|
1146
1298
|
createScopeFromEvent,
|
|
1147
1299
|
useResolvedScope,
|
|
@@ -1153,6 +1305,7 @@ export {
|
|
|
1153
1305
|
useHasAllPermissions,
|
|
1154
1306
|
useCachedPermissions,
|
|
1155
1307
|
useResourcePermissions,
|
|
1156
|
-
useRoleManagement
|
|
1308
|
+
useRoleManagement,
|
|
1309
|
+
useSecureSupabase
|
|
1157
1310
|
};
|
|
1158
|
-
//# sourceMappingURL=chunk-
|
|
1311
|
+
//# sourceMappingURL=chunk-RA3JUFMW.js.map
|