@jmruthers/pace-core 0.5.181 → 0.5.182

package/src/rbac/audit.ts

@@ -14,6 +14,7 @@ import {
   AuditEventSource, 
   RBACAuditEvent 
 } from './types';
+import type { AuditEventType } from './types/functions';
 import { logger } from '../utils/core/logger';
 
 /**
@@ -337,10 +338,32 @@ export class RBACAuditManager {
       .limit(limit);
 
     if (error) {
+      // Detect CORS errors (they typically have null status or specific error codes)
+      const isCorsError = 
+        error.message?.toLowerCase().includes('cors') ||
+        error.message?.toLowerCase().includes('cross-origin') ||
+        error.code === null ||
+        (error as any).status === null;
+      
+      if (isCorsError) {
+        const corsError = new Error(
+          `CORS error when querying audit events. This is a Supabase configuration issue. ` +
+          `Please configure CORS in your Supabase Dashboard: Settings → API → CORS. ` +
+          `Add your app's origin (e.g., http://localhost:8087) to the allowed origins list. ` +
+          `Original error: ${error.message || 'CORS request did not succeed'}`
+        );
+        (corsError as any).isCorsError = true;
+        (corsError as any).originalError = error;
+        throw corsError;
+      }
+      
       throw new Error(`Failed to get audit events: ${error.message}`);
     }
 
-    return data || [];
+    return (data || []).map(event => ({
+      ...event,
+      event_type: event.event_type as AuditEventType
+    })) as RBACAuditEvent[];
   }
 
   /**
@@ -359,10 +382,32 @@ export class RBACAuditManager {
       .limit(limit);
 
     if (error) {
+      // Detect CORS errors (they typically have null status or specific error codes)
+      const isCorsError = 
+        error.message?.toLowerCase().includes('cors') ||
+        error.message?.toLowerCase().includes('cross-origin') ||
+        error.code === null ||
+        (error as any).status === null;
+      
+      if (isCorsError) {
+        const corsError = new Error(
+          `CORS error when querying audit events. This is a Supabase configuration issue. ` +
+          `Please configure CORS in your Supabase Dashboard: Settings → API → CORS. ` +
+          `Add your app's origin (e.g., http://localhost:8087) to the allowed origins list. ` +
+          `Original error: ${error.message || 'CORS request did not succeed'}`
+        );
+        (corsError as any).isCorsError = true;
+        (corsError as any).originalError = error;
+        throw corsError;
+      }
+      
       throw new Error(`Failed to get audit events: ${error.message}`);
     }
 
-    return data || [];
+    return (data || []).map(event => ({
+      ...event,
+      event_type: event.event_type as AuditEventType
+    })) as RBACAuditEvent[];
   }
 }
 

package/src/rbac/components/NavigationGuard.tsx

@@ -66,7 +66,7 @@
 
 import React, { useMemo, useCallback, useEffect, useState } from 'react';
 import { useMultiplePermissions } from '../hooks/usePermissions';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Permission, Scope } from '../types';
 import { createScopeFromEvent } from '../utils/eventContext';
 import { NavigationItem } from './NavigationProvider';

package/src/rbac/components/NavigationProvider.test.tsx

@@ -11,12 +11,14 @@ import { render, screen, waitFor } from '@testing-library/react';
 import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
 import React, { ReactNode } from 'react';
 import { NavigationProvider, useNavigationPermissions, NavigationItem } from './NavigationProvider';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Scope, Permission } from '../types';
 
 // Mock the auth provider
-vi.mock('../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn()
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock the RBAC hooks
@@ -69,12 +71,11 @@ const TestComponent = ({ children }: { children: ReactNode }) => (
 );
 
 describe('NavigationProvider', () => {
-  const mockUseUnifiedAuth = vi.mocked(useUnifiedAuth);
   const mockUseCan = vi.mocked(useCan);
 
   beforeEach(() => {
     vi.clearAllMocks();
-    mockUseUnifiedAuth.mockReturnValue({
+    mockUseUnifiedAuthFn.mockReturnValue({
       user: mockUser,
       isAuthenticated: true,
       signOut: vi.fn(),
@@ -354,7 +355,7 @@ describe('NavigationProvider', () => {
     });
 
     it('handles missing user context gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: null,
         isAuthenticated: false,
         signOut: vi.fn(),

package/src/rbac/components/NavigationProvider.tsx

@@ -55,7 +55,7 @@
  */
 
 import React, { createContext, useContext, useState, useCallback, useMemo, useEffect } from 'react';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { useCan } from '../hooks';
 import { UUID, Scope, Permission } from '../types';
 import { getRBACLogger } from '../config';

package/src/rbac/components/PagePermissionGuard.tsx

@@ -69,7 +69,7 @@
 
 import React, { useMemo, useCallback, useEffect, useState, useRef } from 'react';
 import { useCan } from '../hooks';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Permission, Scope } from '../types';
 import { createScopeFromEvent } from '../utils/eventContext';
 import { getCurrentAppName } from '../../utils/app/appNameResolver';

package/src/rbac/components/PagePermissionProvider.test.tsx

@@ -11,12 +11,14 @@ import { render, screen, waitFor } from '@testing-library/react';
 import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
 import React, { ReactNode } from 'react';
 import { PagePermissionProvider, usePagePermissions } from './PagePermissionProvider';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Scope, Permission } from '../types';
 
 // Mock the auth provider
-vi.mock('../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn()
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock the RBAC hooks
@@ -47,12 +49,11 @@ const TestComponent = ({ children }: { children: ReactNode }) => (
 );
 
 describe('PagePermissionProvider', () => {
-  const mockUseUnifiedAuth = vi.mocked(useUnifiedAuth);
   const mockUseCan = vi.mocked(useCan);
 
   beforeEach(() => {
     vi.clearAllMocks();
-    mockUseUnifiedAuth.mockReturnValue({
+    mockUseUnifiedAuthFn.mockReturnValue({
       user: mockUser,
       isAuthenticated: true,
       signOut: vi.fn(),
@@ -383,7 +384,7 @@ describe('PagePermissionProvider', () => {
     });
 
     it('handles missing user context gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: null,
         isAuthenticated: false,
         signOut: vi.fn(),

package/src/rbac/components/PagePermissionProvider.tsx

@@ -55,7 +55,7 @@
  */
 
 import React, { createContext, useContext, useState, useCallback, useMemo, useEffect } from 'react';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Scope, Permission } from '../types';
 import { createLogger } from '../../utils/core/logger';
 

package/src/rbac/components/PermissionEnforcer.tsx

@@ -68,7 +68,7 @@
 
 import React, { useMemo, useCallback, useEffect, useState } from 'react';
 import { useMultiplePermissions } from '../hooks/usePermissions';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Permission, Scope } from '../types';
 import { createScopeFromEvent } from '../utils/eventContext';
 import { getRBACLogger } from '../config';

package/src/rbac/components/RoleBasedRouter.tsx

@@ -66,7 +66,7 @@
 import React, { useMemo, useCallback, useEffect, useState, createContext, useContext } from 'react';
 import { useLocation, useNavigate, Outlet } from 'react-router-dom';
 import { useCan } from '../hooks';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { UUID, Permission, Scope, AccessLevel } from '../types';
 import { getRBACLogger } from '../config';
 

package/src/rbac/components/SecureDataProvider.test.tsx

@@ -11,13 +11,15 @@ import { render, screen, waitFor } from '@testing-library/react';
 import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
 import React, { ReactNode } from 'react';
 import { SecureDataProvider, useSecureData } from './SecureDataProvider';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { useSecureDataAccess } from '../../hooks/useSecureDataAccess';
 import { UUID, Scope, Permission } from '../types';
 
 // Mock the auth provider
-vi.mock('../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn()
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock the secure data access hook
@@ -53,13 +55,12 @@ const TestComponent = ({ children }: { children: ReactNode }) => (
 );
 
 describe('SecureDataProvider', () => {
-  const mockUseUnifiedAuth = vi.mocked(useUnifiedAuth);
   const mockUseSecureDataAccess = vi.mocked(useSecureDataAccess);
   const mockUseCan = vi.mocked(useCan);
 
   beforeEach(() => {
     vi.clearAllMocks();
-    mockUseUnifiedAuth.mockReturnValue({
+    mockUseUnifiedAuthFn.mockReturnValue({
       user: mockUser,
       isAuthenticated: true,
       signOut: vi.fn(),
@@ -369,7 +370,7 @@ describe('SecureDataProvider', () => {
     });
 
     it('handles missing user context gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: null,
         isAuthenticated: false,
         signOut: vi.fn(),

package/src/rbac/components/SecureDataProvider.tsx

@@ -57,7 +57,7 @@
  */
 
 import React, { createContext, useContext, useState, useCallback, useMemo, useEffect } from 'react';
-import { useUnifiedAuth } from '../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../providers/services/UnifiedAuthProvider';
 import { useSecureDataAccess } from '../../hooks/useSecureDataAccess';
 import { UUID, Scope, Permission } from '../types';
 import { getRBACLogger } from '../config';

package/src/rbac/components/__tests__/EnhancedNavigationMenu.test.tsx

@@ -41,11 +41,13 @@ vi.mock('../../config', () => ({
 
 import { EnhancedNavigationMenu, EnhancedNavigationMenuProps } from '../EnhancedNavigationMenu';
 import { NavigationProvider, NavigationItem, useNavigationPermissions } from '../NavigationProvider';
-import { useUnifiedAuth } from '../../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../../providers/services/UnifiedAuthProvider';
 
 // Mock the UnifiedAuthProvider
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn()
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock only the useNavigationPermissions hook, not the provider itself
@@ -76,8 +78,6 @@ vi.mock('../NavigationGuard', () => ({
     return children;
   }
 }));
-
-const mockUseUnifiedAuth = useUnifiedAuth as any;
 const mockUseNavigationPermissions = useNavigationPermissions as any;
 
 // Test data
@@ -147,7 +147,7 @@ describe('EnhancedNavigationMenu', () => {
   beforeEach(() => {
     vi.clearAllMocks();
     
-    mockUseUnifiedAuth.mockReturnValue(mockUser);
+    mockUseUnifiedAuthFn.mockReturnValue(mockUser);
     mockUseNavigationPermissions.mockReturnValue(defaultNavigationPermissions);
     
     // Reset mocks

package/src/rbac/components/__tests__/NavigationGuard.test.tsx

@@ -12,7 +12,7 @@ import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
 import { ReactNode } from 'react';
 import { NavigationGuard } from '../NavigationGuard';
 import { useMultiplePermissions } from '../../hooks/usePermissions';
-import { useUnifiedAuth } from '../../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../../providers/services/UnifiedAuthProvider';
 import { getRBACLogger } from '../../config';
 
 // Mock the RBAC logger - create shared mock
@@ -44,8 +44,10 @@ vi.mock('../../hooks/usePermissions', () => ({
 }));
 
 // Mock the auth provider
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn()
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock the event context utility
@@ -93,14 +95,13 @@ const TestLoading = () => (
 
 describe('NavigationGuard Component', () => {
   const mockUseMultiplePermissions = vi.mocked(useMultiplePermissions);
-  const mockUseUnifiedAuth = vi.mocked(useUnifiedAuth);
   const mockCreateScopeFromEvent = vi.mocked(createScopeFromEvent);
 
   beforeEach(() => {
     vi.clearAllMocks();
     
     // Default mock implementations
-    mockUseUnifiedAuth.mockReturnValue({
+    mockUseUnifiedAuthFn.mockReturnValue({
       user: mockUser,
       selectedOrganisation: { id: 'org-123' },
       selectedEvent: { event_id: 'event-123' },
@@ -396,7 +397,7 @@ describe('NavigationGuard Component', () => {
     });
 
     it('resolves scope from organisation only', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: { id: 'org-123' },
         selectedEvent: null,
@@ -432,7 +433,7 @@ describe('NavigationGuard Component', () => {
     });
 
     it('resolves scope from event context when organisation not available', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: null,
         selectedEvent: { event_id: 'event-123' },
@@ -475,7 +476,7 @@ describe('NavigationGuard Component', () => {
     });
 
     it('handles scope resolution errors', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisationId: null,
         selectedEventId: 'event-123',
@@ -500,7 +501,7 @@ describe('NavigationGuard Component', () => {
     });
 
     it('handles missing context gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisationId: null,
         selectedEventId: null,
@@ -775,7 +776,7 @@ describe('NavigationGuard Component', () => {
 
   describe('Error Handling', () => {
     it('handles missing user gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: null,
         selectedOrganisation: { id: 'org-123' },
         selectedEvent: { event_id: 'event-123' },

package/src/rbac/components/__tests__/NavigationProvider.test.tsx

@@ -45,16 +45,15 @@ import {
   NavigationItem,
   NavigationAccessRecord 
 } from '../NavigationProvider';
-import { useUnifiedAuth } from '../../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../../providers/services/UnifiedAuthProvider';
 
 // Mock the UnifiedAuthProvider
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn(),
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
   UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <div data-testid="unified-auth-provider">{children}</div>
 }));
 
-const mockUseUnifiedAuth = useUnifiedAuth as any;
-
 // Test data
 const mockUser = {
   id: 'user-123',
@@ -144,7 +143,7 @@ describe('NavigationProvider', () => {
     vi.clearAllMocks();
     
     // Set up default mock with organisation context
-    mockUseUnifiedAuth.mockReturnValue({
+    mockUseUnifiedAuthFn.mockReturnValue({
       ...mockUser,
       selectedOrganisationId: 'org-456',
       selectedEventId: 'event-789'
@@ -274,7 +273,7 @@ describe('NavigationProvider', () => {
     });
 
     it('should deny navigation permission when user is not authenticated', () => {
-      mockUseUnifiedAuth.mockReturnValue({ ...mockUser, id: null });
+      mockUseUnifiedAuthFn.mockReturnValue({ ...mockUser, id: null });
 
       renderWithProviders(
         <TestWrapper>
@@ -286,7 +285,7 @@ describe('NavigationProvider', () => {
     });
 
     it('should deny navigation permission when organisation context is missing', () => {
-      mockUseUnifiedAuth.mockReturnValue({ 
+      mockUseUnifiedAuthFn.mockReturnValue({ 
         ...mockUser, 
         selectedOrganisationId: null 
       });
@@ -458,7 +457,7 @@ describe('NavigationProvider', () => {
 
   describe('Error Handling', () => {
     it('should handle missing user gracefully', () => {
-      mockUseUnifiedAuth.mockReturnValue({});
+      mockUseUnifiedAuthFn.mockReturnValue({});
 
       expect(() => {
         renderWithProviders(
@@ -470,7 +469,7 @@ describe('NavigationProvider', () => {
     });
 
     it('should handle missing organisation context gracefully', () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         ...mockUser,
         selectedOrganisationId: null,
         selectedEventId: null
@@ -550,7 +549,7 @@ describe('NavigationProvider', () => {
     });
 
     it('should handle missing event ID in scope', () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         ...mockUser,
         selectedEventId: null
       });

package/src/rbac/components/__tests__/PagePermissionGuard.race-condition.test.tsx

@@ -14,23 +14,27 @@ import { PagePermissionGuard } from '../PagePermissionGuard';
 import { useCan } from '../../hooks';
 
 // Mock the hooks with simple implementations
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: () => ({
-    user: { id: 'user-123', email: 'test@example.com' },
-    isAuthenticated: true,
-    isLoading: false,
-    selectedOrganisationId: 'org-123',
-    selectedEventId: undefined,
-    supabase: {
-      from: vi.fn(() => ({
-        select: vi.fn(() => ({
-          eq: vi.fn(() => ({
-            single: vi.fn(() => Promise.resolve({ data: { id: 'app-123', name: 'test-app', is_active: true }, error: null }))
-          }))
+const mockUseUnifiedAuthFn = vi.fn(() => ({
+  user: { id: 'user-123', email: 'test@example.com' },
+  isAuthenticated: true,
+  isLoading: false,
+  selectedOrganisation: { id: 'org-123' },
+  selectedEvent: null,
+  selectedOrganisationId: 'org-123',
+  selectedEventId: undefined,
+  supabase: {
+    from: vi.fn(() => ({
+      select: vi.fn(() => ({
+        eq: vi.fn(() => ({
+          single: vi.fn(() => Promise.resolve({ data: { id: 'app-123', name: 'test-app', is_active: true }, error: null }))
         }))
       }))
-    }
-  })
+    }))
+  }
+}));
+vi.mock('../../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 vi.mock('../../hooks', () => ({

package/src/rbac/components/__tests__/PagePermissionGuard.test.tsx

@@ -12,7 +12,7 @@ import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
 import { ReactNode } from 'react';
 import { PagePermissionGuard } from '../PagePermissionGuard';
 import { useCan } from '../../hooks';
-import { useUnifiedAuth } from '../../../providers/UnifiedAuthProvider';
+import { useUnifiedAuth } from '../../../providers/services/UnifiedAuthProvider';
 
 // Mock the RBAC hooks
 vi.mock('../../hooks', () => ({
@@ -20,8 +20,10 @@ vi.mock('../../hooks', () => ({
 }));
 
 // Mock the auth provider
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn()
+const mockUseUnifiedAuthFn = vi.fn();
+vi.mock('../../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock the event context utility
@@ -67,7 +69,6 @@ const TestLoading = () => (
 
 describe('PagePermissionGuard Component', () => {
   const mockUseCan = vi.mocked(useCan);
-  const mockUseUnifiedAuth = vi.mocked(useUnifiedAuth);
   const mockCreateScopeFromEvent = vi.mocked(createScopeFromEvent);
   const mockGetCurrentAppName = vi.mocked(getCurrentAppName);
 
@@ -75,7 +76,7 @@ describe('PagePermissionGuard Component', () => {
     vi.clearAllMocks();
     
     // Default mock implementations
-    mockUseUnifiedAuth.mockReturnValue({
+    mockUseUnifiedAuthFn.mockReturnValue({
       user: mockUser,
       selectedOrganisation: { id: 'org-123' },
       selectedEvent: { event_id: 'event-123' },
@@ -431,7 +432,7 @@ describe('PagePermissionGuard Component', () => {
       mockGetCurrentAppName.mockReturnValue('test-app');
       
       // Mock database returning invalid app ID
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: { id: 'org-123' },
         selectedEvent: { event_id: 'event-123' },
@@ -545,7 +546,7 @@ describe('PagePermissionGuard Component', () => {
     });
 
     it('resolves scope from organisation only', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: { id: 'org-123' },
         selectedEvent: null,
@@ -598,7 +599,7 @@ describe('PagePermissionGuard Component', () => {
     });
 
     it('resolves scope from event context when organisation not available', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: null,
         selectedEvent: { event_id: 'event-123' },
@@ -661,7 +662,7 @@ describe('PagePermissionGuard Component', () => {
     });
 
     it('handles scope resolution errors', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: null,
         selectedEvent: { event_id: 'event-123' },
@@ -687,7 +688,7 @@ describe('PagePermissionGuard Component', () => {
     });
 
     it('handles missing context gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: null,
         selectedEvent: null,
@@ -907,7 +908,7 @@ describe('PagePermissionGuard Component', () => {
 
   describe('Error Handling', () => {
     it('handles missing user gracefully', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: null,
         selectedOrganisationId: 'org-123',
         selectedEventId: 'event-123',
@@ -961,7 +962,7 @@ describe('PagePermissionGuard Component', () => {
     });
 
     it('handles database errors during app resolution', async () => {
-      mockUseUnifiedAuth.mockReturnValue({
+      mockUseUnifiedAuthFn.mockReturnValue({
         user: mockUser,
         selectedOrganisation: { id: 'org-123' },
         selectedEvent: { event_id: 'event-123' },

package/src/rbac/components/__tests__/PagePermissionGuard.verification.test.tsx

@@ -14,23 +14,27 @@ import { PagePermissionGuard } from '../PagePermissionGuard';
 import { useCan } from '../../hooks';
 
 // Mock the hooks with simple implementations
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: () => ({
-    user: { id: 'user-123', email: 'test@example.com' },
-    isAuthenticated: true,
-    isLoading: false,
-    selectedOrganisationId: 'org-123',
-    selectedEventId: undefined,
-    supabase: {
-      from: vi.fn(() => ({
-        select: vi.fn(() => ({
-          eq: vi.fn(() => ({
-            single: vi.fn(() => Promise.resolve({ data: { id: 'app-123', name: 'test-app', is_active: true }, error: null }))
-          }))
+const mockUseUnifiedAuthFn = vi.fn(() => ({
+  user: { id: 'user-123', email: 'test@example.com' },
+  isAuthenticated: true,
+  isLoading: false,
+  selectedOrganisation: { id: 'org-123' },
+  selectedEvent: null,
+  selectedOrganisationId: 'org-123',
+  selectedEventId: undefined,
+  supabase: {
+    from: vi.fn(() => ({
+      select: vi.fn(() => ({
+        eq: vi.fn(() => ({
+          single: vi.fn(() => Promise.resolve({ data: { id: 'app-123', name: 'test-app', is_active: true }, error: null }))
         }))
       }))
-    }
-  })
+    }))
+  }
+}));
+vi.mock('../../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 vi.mock('../../hooks', () => ({