@jmruthers/pace-core 0.5.181 → 0.5.183

package/dist/{chunk-HRO5HWN2.js → chunk-CSOFYHAG.js}

@@ -3,161 +3,65 @@ import {
   useAccessLevel,
   useCan,
   useMultiplePermissions
-} from "./chunk-ZYTYSTO5.js";
+} from "./chunk-RA3JUFMW.js";
 import {
-  OrganisationContextRequiredError,
   RBACCache,
   getRBACLogger,
   rbacCache
-} from "./chunk-BVYWGZVV.js";
+} from "./chunk-M7W4CP3M.js";
 import {
   useSecureDataAccess
-} from "./chunk-VZ4VDGTB.js";
-import {
-  init_UnifiedAuthProvider
-} from "./chunk-EGI6MUL6.js";
+} from "./chunk-W22JP75J.js";
 import {
   useUnifiedAuth
-} from "./chunk-3JI76CYK.js";
+} from "./chunk-FUEYYMX5.js";
 import {
   getCurrentAppName
-} from "./chunk-Q5QRDWKI.js";
+} from "./chunk-F2IMUDXZ.js";
 import {
   createLogger,
-  init_logger,
   logger
-} from "./chunk-XDNLUEXI.js";
+} from "./chunk-PWLANIRT.js";
 
-// src/rbac/secureClient.ts
-import { createClient } from "@supabase/supabase-js";
-var SecureSupabaseClient = class _SecureSupabaseClient {
-  constructor(supabaseUrl, supabaseKey, organisationId, eventId, appId) {
-    this.supabaseUrl = supabaseUrl;
-    this.supabaseKey = supabaseKey;
-    this.organisationId = organisationId;
-    this.eventId = eventId;
-    this.appId = appId;
-    this.supabase = createClient(supabaseUrl, supabaseKey, {
-      global: {
-        headers: {
-          "x-organisation-id": organisationId,
-          "x-event-id": eventId || "",
-          "x-app-id": appId || ""
-        }
-      }
-    });
-    this.setupContextInjection();
-  }
-  /**
-   * Setup context injection for all database operations
-   */
-  setupContextInjection() {
-    const originalFrom = this.supabase.from.bind(this.supabase);
-    this.supabase.from = (table) => {
-      this.validateContext();
-      const query = originalFrom(table);
-      return this.injectContext(query);
-    };
-    const originalRpc = this.supabase.rpc.bind(this.supabase);
-    this.supabase.rpc = (fn, args, options) => {
-      this.validateContext();
-      const contextArgs = {
-        ...args,
-        p_organisation_id: this.organisationId,
-        p_event_id: this.eventId,
-        p_app_id: this.appId
-      };
-      return originalRpc(fn, contextArgs, options);
-    };
-  }
-  /**
-   * Inject organisation context into a query
-   */
-  injectContext(query) {
-    const originalSelect = query.select.bind(query);
-    const originalInsert = query.insert.bind(query);
-    const originalUpdate = query.update.bind(query);
-    const originalDelete = query.delete.bind(query);
-    query.select = (columns) => {
-      const result = originalSelect(columns);
-      return this.addOrganisationFilter(result);
-    };
-    query.insert = (values) => {
-      const contextValues = Array.isArray(values) ? values.map((v) => ({ ...v, organisation_id: this.organisationId })) : { ...values, organisation_id: this.organisationId };
-      return originalInsert(contextValues);
-    };
-    query.update = (values) => {
-      const result = originalUpdate(values);
-      return this.addOrganisationFilter(result);
-    };
-    query.delete = () => {
-      const result = originalDelete();
-      return this.addOrganisationFilter(result);
-    };
-    return query;
-  }
-  /**
-   * Add organisation filter to a query
-   */
-  addOrganisationFilter(query) {
-    return query.eq("organisation_id", this.organisationId);
-  }
-  /**
-   * Validate that required context is present
-   */
-  validateContext() {
-    if (!this.organisationId) {
-      throw new OrganisationContextRequiredError();
-    }
-  }
-  /**
-   * Get the current organisation ID
-   */
-  getOrganisationId() {
-    return this.organisationId;
-  }
-  /**
-   * Get the current event ID
-   */
-  getEventId() {
-    return this.eventId;
-  }
-  /**
-   * Get the current app ID
-   */
-  getAppId() {
-    return this.appId;
-  }
-  /**
-   * Create a new client with updated context
-   */
-  withContext(updates) {
-    return new _SecureSupabaseClient(
-      this.supabaseUrl,
-      this.supabaseKey,
-      updates.organisationId || this.organisationId,
-      updates.eventId !== void 0 ? updates.eventId : this.eventId,
-      updates.appId !== void 0 ? updates.appId : this.appId
-    );
-  }
-  /**
-   * Get the underlying Supabase client (for internal use only)
-   * @internal
-   */
-  getClient() {
-    return this.supabase;
-  }
-};
-function createSecureClient(supabaseUrl, supabaseKey, organisationId, eventId, appId) {
-  return new SecureSupabaseClient(supabaseUrl, supabaseKey, organisationId, eventId, appId);
-}
-function fromSupabaseClient(client, organisationId, eventId, appId) {
-  throw new Error("fromSupabaseClient is not supported. Use createSecureClient instead.");
-}
+// src/rbac/types/functions.ts
+var RPCFunction = /* @__PURE__ */ ((RPCFunction2) => {
+  RPCFunction2["RBAC_PERMISSION_CHECK"] = "rbac_permission_check";
+  RPCFunction2["RBAC_PERMISSIONS_GET"] = "rbac_permissions_get";
+  RPCFunction2["RBAC_ACCESS_VALIDATE"] = "rbac_access_validate";
+  RPCFunction2["RBAC_PAGE_ACCESS_CHECK"] = "rbac_page_access_check";
+  RPCFunction2["RBAC_ROLE_GRANT"] = "rbac_role_grant";
+  RPCFunction2["RBAC_ROLE_REVOKE"] = "rbac_role_revoke";
+  RPCFunction2["RBAC_ROLES_LIST"] = "rbac_roles_list";
+  RPCFunction2["RBAC_ROLE_VALIDATE"] = "rbac_role_validate";
+  RPCFunction2["RBAC_SESSION_TRACK"] = "rbac_session_track";
+  RPCFunction2["RBAC_AUDIT_LOG"] = "rbac_audit_log";
+  return RPCFunction2;
+})(RPCFunction || {});
+var RBACErrorCode = /* @__PURE__ */ ((RBACErrorCode2) => {
+  RBACErrorCode2["USER_NOT_FOUND"] = "USER_NOT_FOUND";
+  RBACErrorCode2["INVALID_ROLE_TYPE"] = "INVALID_ROLE_TYPE";
+  RBACErrorCode2["INVALID_ROLE_NAME"] = "INVALID_ROLE_NAME";
+  RBACErrorCode2["MISSING_ORGANISATION_ID"] = "MISSING_ORGANISATION_ID";
+  RBACErrorCode2["MISSING_EVENT_APP_CONTEXT"] = "MISSING_EVENT_APP_CONTEXT";
+  RBACErrorCode2["ORGANISATION_NOT_FOUND"] = "ORGANISATION_NOT_FOUND";
+  RBACErrorCode2["EVENT_NOT_FOUND"] = "EVENT_NOT_FOUND";
+  RBACErrorCode2["APP_NOT_FOUND"] = "APP_NOT_FOUND";
+  RBACErrorCode2["INVALID_SESSION_TYPE"] = "INVALID_SESSION_TYPE";
+  RBACErrorCode2["INVALID_EVENT_TYPE"] = "INVALID_EVENT_TYPE";
+  RBACErrorCode2["DATABASE_ERROR"] = "DATABASE_ERROR";
+  RBACErrorCode2["ROLE_NOT_FOUND"] = "ROLE_NOT_FOUND";
+  RBACErrorCode2["USER_NOT_AUTHENTICATED"] = "USER_NOT_AUTHENTICATED";
+  RBACErrorCode2["INVALID_GLOBAL_ROLE"] = "INVALID_GLOBAL_ROLE";
+  RBACErrorCode2["INVALID_ORGANISATION_ROLE"] = "INVALID_ORGANISATION_ROLE";
+  RBACErrorCode2["INVALID_EVENT_APP_ROLE"] = "INVALID_EVENT_APP_ROLE";
+  RBACErrorCode2["INVALID_EVENT_APP_FORMAT"] = "INVALID_EVENT_APP_FORMAT";
+  RBACErrorCode2["MISSING_CONTEXT"] = "MISSING_CONTEXT";
+  RBACErrorCode2["INVALID_CONTEXT"] = "INVALID_CONTEXT";
+  RBACErrorCode2["GRANTED_BY_NOT_FOUND"] = "GRANTED_BY_NOT_FOUND";
+  return RBACErrorCode2;
+})(RBACErrorCode || {});
 
 // src/rbac/components/PagePermissionProvider.tsx
-init_UnifiedAuthProvider();
-init_logger();
 import { createContext, useContext, useState, useCallback, useMemo, useEffect } from "react";
 import { jsx } from "react/jsx-runtime";
 var log = createLogger("PagePermissionProvider");
@@ -255,7 +159,6 @@ function usePagePermissions() {
 
 // src/rbac/components/PagePermissionGuard.tsx
 import { useMemo as useMemo2, useEffect as useEffect2, useState as useState2, useRef } from "react";
-init_UnifiedAuthProvider();
 import { Fragment, jsx as jsx2, jsxs } from "react/jsx-runtime";
 var PagePermissionGuardComponent = ({
   pageName,
@@ -576,7 +479,6 @@ function DefaultLoading() {
 var PagePermissionGuard = PagePermissionGuardComponent;
 
 // src/rbac/components/SecureDataProvider.tsx
-init_UnifiedAuthProvider();
 import { createContext as createContext2, useContext as useContext2, useState as useState3, useCallback as useCallback3, useMemo as useMemo3, useEffect as useEffect3 } from "react";
 import { jsx as jsx3 } from "react/jsx-runtime";
 var SecureDataContext = createContext2(null);
@@ -699,8 +601,6 @@ function useSecureData() {
 
 // src/rbac/components/PermissionEnforcer.tsx
 import { useMemo as useMemo4, useEffect as useEffect4, useState as useState4 } from "react";
-init_UnifiedAuthProvider();
-init_logger();
 import { Fragment as Fragment2, jsx as jsx4, jsxs as jsxs2 } from "react/jsx-runtime";
 var log2 = createLogger("PermissionEnforcer");
 function PermissionEnforcer({
@@ -852,7 +752,6 @@ function DefaultLoading2() {
 // src/rbac/components/RoleBasedRouter.tsx
 import { useMemo as useMemo5, useCallback as useCallback5, useEffect as useEffect5, useState as useState5, createContext as createContext3, useContext as useContext3 } from "react";
 import { useLocation, useNavigate, Outlet } from "react-router-dom";
-init_UnifiedAuthProvider();
 import { jsx as jsx5, jsxs as jsxs3 } from "react/jsx-runtime";
 var RoleBasedRouterContext = createContext3(null);
 function RoleBasedRouter({
@@ -1034,9 +933,7 @@ function DefaultUnauthorizedComponent({ route, reason }) {
 }
 
 // src/rbac/components/NavigationProvider.tsx
-init_UnifiedAuthProvider();
 import { createContext as createContext4, useContext as useContext4, useState as useState6, useCallback as useCallback6, useMemo as useMemo6, useEffect as useEffect6 } from "react";
-init_logger();
 import { jsx as jsx6 } from "react/jsx-runtime";
 var NavigationContext = createContext4(null);
 function NavigationProvider({
@@ -1156,7 +1053,6 @@ function useNavigationPermissions() {
 
 // src/rbac/components/NavigationGuard.tsx
 import { useMemo as useMemo7, useEffect as useEffect7, useState as useState7 } from "react";
-init_UnifiedAuthProvider();
 import { Fragment as Fragment3, jsx as jsx7, jsxs as jsxs4 } from "react/jsx-runtime";
 function NavigationGuard({
   navigationItem,
@@ -1440,7 +1336,6 @@ function EnhancedNavigationMenu({
 }
 
 // src/rbac/adapters.tsx
-init_UnifiedAuthProvider();
 import { Fragment as Fragment4, jsx as jsx9 } from "react/jsx-runtime";
 function PermissionGuard({
   userId,
@@ -1575,7 +1470,7 @@ function withPermissionGuard(config, handler) {
     if (!userId || !organisationId) {
       throw new Error("User context required for permission check");
     }
-    const { isPermitted: isPermitted2 } = await import("./api-45XYYO2A.js");
+    const { isPermitted: isPermitted2 } = await import("./api-ROMBCNKU.js");
     const hasPermission2 = await isPermitted2({
       userId,
       scope: { organisationId, eventId, appId },
@@ -1598,7 +1493,7 @@ function withAccessLevelGuard(minLevel, handler) {
     if (!userId || !organisationId) {
       throw new Error("User context required for access level check");
     }
-    const { getAccessLevel: getAccessLevel2 } = await import("./api-45XYYO2A.js");
+    const { getAccessLevel: getAccessLevel2 } = await import("./api-ROMBCNKU.js");
     const accessLevel = await getAccessLevel2({
       userId,
       scope: { organisationId, eventId, appId }
@@ -1623,11 +1518,11 @@ function withRoleGuard(config, handler) {
       throw new Error("User context required for role check");
     }
     if (config.globalRoles && config.globalRoles.length > 0) {
-      const { isSuperAdmin } = await import("./api-45XYYO2A.js");
+      const { isSuperAdmin } = await import("./api-ROMBCNKU.js");
       const isSuper = await isSuperAdmin(userId);
       if (isSuper) {
         if (organisationId) {
-          const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-64X3VJXB.js");
+          const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-WRS3KJKI.js");
           await emitAuditEvent2({
             type: "permission_check",
             userId,
@@ -1649,21 +1544,21 @@ function withRoleGuard(config, handler) {
       }
     }
     if (config.organisationRoles && config.organisationRoles.length > 0) {
-      const { isOrganisationAdmin } = await import("./api-45XYYO2A.js");
+      const { isOrganisationAdmin } = await import("./api-ROMBCNKU.js");
       const isOrgAdmin = await isOrganisationAdmin(userId, organisationId);
       if (!isOrgAdmin && config.requireAll !== false) {
         throw new Error(`Organisation admin role required`);
       }
     }
     if (config.eventAppRoles && config.eventAppRoles.length > 0 && eventId && appId) {
-      const { isEventAdmin } = await import("./api-45XYYO2A.js");
+      const { isEventAdmin } = await import("./api-ROMBCNKU.js");
       const isEventAdminUser = await isEventAdmin(userId, { organisationId, eventId, appId });
       if (!isEventAdminUser && config.requireAll !== false) {
         throw new Error(`Event admin role required`);
       }
     }
     if (organisationId) {
-      const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-64X3VJXB.js");
+      const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-WRS3KJKI.js");
       await emitAuditEvent2({
         type: "permission_check",
         userId,
@@ -1696,7 +1591,7 @@ function createRBACMiddleware(config) {
     );
     if (protectedRoute) {
       try {
-        const { isPermitted: isPermitted2 } = await import("./api-45XYYO2A.js");
+        const { isPermitted: isPermitted2 } = await import("./api-ROMBCNKU.js");
         const hasPermission2 = await isPermitted2({
           userId,
           scope: { organisationId },
@@ -1723,7 +1618,7 @@ function createRBACExpressMiddleware(config) {
       return res.status(401).json({ error: "User context required" });
     }
     try {
-      const { isPermitted: isPermitted2 } = await import("./api-45XYYO2A.js");
+      const { isPermitted: isPermitted2 } = await import("./api-ROMBCNKU.js");
       const hasPermission2 = await isPermitted2({
         userId,
         scope: { organisationId, eventId, appId },
@@ -1755,7 +1650,6 @@ function hasAnyPermissionCached(userId, scope, permissions, pageId) {
 }
 
 // src/rbac/permissions.ts
-init_logger();
 var log3 = createLogger("RBACPermissions");
 var GLOBAL_PERMISSIONS = {
   READ_ALL: "read:*",
@@ -1866,9 +1760,8 @@ var ALL_PERMISSIONS = {
 };
 
 export {
-  SecureSupabaseClient,
-  createSecureClient,
-  fromSupabaseClient,
+  RPCFunction,
+  RBACErrorCode,
   PagePermissionProvider,
   usePagePermissions,
   PagePermissionGuard,
@@ -1898,4 +1791,4 @@ export {
   getPermissionsForRole,
   ALL_PERMISSIONS
 };
-//# sourceMappingURL=chunk-HRO5HWN2.js.map
+//# sourceMappingURL=chunk-CSOFYHAG.js.map