@jmruthers/pace-core 0.5.181 → 0.5.183

package/src/components/PaceAppLayout/{__tests__/PaceAppLayout.performance.test.tsx → PaceAppLayout.performance.test.tsx}

@@ -33,12 +33,19 @@ const mockUser = {
   }
 };
 
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: () => ({
-    user: mockUser,
-    signOut: mockSignOut,
-    updatePassword: mockUpdatePassword
-  })
+const mockUseUnifiedAuthFn = vi.fn(() => ({
+  user: mockUser,
+  signOut: mockSignOut,
+  updatePassword: mockUpdatePassword,
+  supabase: {},
+  selectedOrganisation: mockOrganisation,
+  selectedEvent: null,
+  isLoading: false,
+  error: null,
+}));
+vi.mock('../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
 
 // Mock OrganisationProvider
@@ -80,48 +87,164 @@ const mockOrganisationContext = {
   isOrganisationSecure: vi.fn().mockReturnValue(true)
 };
 
-vi.mock('../../../hooks/useOrganisations', () => ({
-  useOrganisations: () => mockOrganisationContext
+// Mock useOrganisationService FIRST (used internally by useOrganisations)
+vi.mock('../../hooks/services/useOrganisationService', () => ({
+  useOrganisationService: () => ({
+    getSelectedOrganisation: () => mockOrganisation,
+    getOrganisations: () => [mockOrganisation],
+    getUserMemberships: () => mockOrganisationContext.userMemberships,
+    isLoading: () => false,
+    getError: () => null,
+    hasValidOrganisationContext: () => true,
+    setSelectedOrganisation: vi.fn(),
+    switchOrganisation: vi.fn().mockResolvedValue(undefined),
+    getUserRole: vi.fn().mockReturnValue('member'),
+    validateOrganisationAccess: vi.fn().mockReturnValue(true),
+    ensureOrganisationContext: vi.fn().mockReturnValue(mockOrganisation),
+    refreshOrganisations: vi.fn().mockResolvedValue(undefined),
+    getPrimaryOrganisation: vi.fn().mockReturnValue(mockOrganisation),
+    isOrganisationSecure: vi.fn().mockReturnValue(true),
+  })
 }));
 
-// Mock useEvents hook (used by useEventTheme)
-vi.mock('../../../hooks/useEvents', () => ({
-  useEvents: vi.fn(() => ({
-    selectedEvent: { event_id: 'event-123' },
-    events: [],
-    isLoading: false,
-    error: null,
-  })),
+// Mock useOrganisations AFTER useOrganisationService
+// Use the same path pattern as PaceAppLayout.test.tsx
+vi.mock('../../hooks/useOrganisations', () => ({
+  useOrganisations: vi.fn(() => mockOrganisationContext)
+}));
+
+// Mock useEventService hook FIRST (it's imported by useEvents)
+// Must be hoisted to be available when useEvents tries to import it
+const mockUseEventService = vi.hoisted(() => vi.fn(() => ({
+  getEvent: vi.fn(),
+  getEvents: vi.fn(() => []),
+  createEvent: vi.fn(),
+  updateEvent: vi.fn(),
+  deleteEvent: vi.fn(),
+  getSelectedEvent: vi.fn(() => null),
+  setSelectedEvent: vi.fn(),
+  isLoading: vi.fn(() => false),
+  getError: vi.fn(() => null),
+  refreshEvents: vi.fn(),
+  clearEventSelection: vi.fn(),
+  subscribe: vi.fn(() => vi.fn()),
+})));
+
+// Mock useEventService hook - path is ../../hooks/services/useEventService from PaceAppLayout
+vi.mock('../../hooks/services/useEventService', () => ({
+  useEventService: mockUseEventService,
 }));
 
+// Don't mock useEvents - let it use the mocked useEventService
+// The real useEvents will work because useEventService is mocked
+
 // Mock useEventTheme to avoid EventServiceProvider requirement
-vi.mock('../../../hooks/useEventTheme', () => ({
+vi.mock('../../hooks/useEventTheme', () => ({
   useEventTheme: vi.fn(),
 }));
 
-// Mock the new RBAC system for performance testing
-const mockIsPermitted = vi.fn().mockResolvedValue(true);
-const mockCheckPermission = vi.fn().mockResolvedValue(true);
-const mockIsSuperAdmin = vi.fn().mockResolvedValue(false);
+// Mock logger
+// Note: Must define mock inside factory to avoid hoisting issues
+vi.mock('../../utils/core/logger', () => {
+  const mockLogger = {
+    debug: vi.fn(),
+    info: vi.fn(),
+    warn: vi.fn(),
+    error: vi.fn(),
+    createScopedLogger: vi.fn(() => mockLogger),
+    configure: vi.fn(),
+  };
+  
+  return {
+    logger: mockLogger,
+    createLogger: () => mockLogger,
+    Logger: {
+      debug: vi.fn(),
+      info: vi.fn(),
+      warn: vi.fn(),
+      error: vi.fn(),
+      configure: vi.fn(),
+      createScopedLogger: vi.fn(() => mockLogger),
+    },
+    LogLevel: {
+      DEBUG: 0,
+      INFO: 1,
+      WARN: 2,
+      ERROR: 3,
+    },
+  };
+});
+
+// Mock EventServiceProvider - provide a context that works with the mocked useEventService
+vi.mock('../../providers/services/EventServiceProvider', () => {
+  const React = require('react');
+  
+  // Create a context that provides the mock service
+  const mockServiceInstance = mockUseEventService();
+  const mockContextValue = {
+    eventService: mockServiceInstance,
+  };
+  
+  // Create a context that will be used by useEventService
+  const MockEventServiceContext = React.createContext(mockContextValue);
+  
+  return {
+    EventServiceProvider: ({ children }: { children: React.ReactNode }) => {
+      return React.createElement(MockEventServiceContext.Provider, { value: mockContextValue }, children);
+    },
+    EventServiceContext: MockEventServiceContext,
+    useEventService: mockUseEventService,
+  };
+});
+
+// Define mocks using vi.hoisted() so they're available in hoisted vi.mock factories
+// Note: Cannot export hoisted variables directly, so we define them and access directly in tests
+const mockIsPermitted = vi.hoisted(() => vi.fn().mockResolvedValue(true));
+const mockCheckPermission = vi.hoisted(() => vi.fn().mockResolvedValue(true));
+const mockHasPermissionRBAC = vi.hoisted(() => vi.fn().mockResolvedValue(true));
+const mockIsSuperAdmin = vi.hoisted(() => vi.fn().mockResolvedValue(false));
+
+// Mock Supabase client for RBAC engine
+// Note: Must define mock inside factory to avoid hoisting issues
+vi.mock('@supabase/supabase-js', () => {
+  const createMockQueryBuilder = () => ({
+    select: vi.fn().mockReturnThis(),
+    eq: vi.fn().mockReturnThis(),
+    single: vi.fn().mockResolvedValue({ data: null, error: null }),
+  });
 
-vi.mock('../../../rbac/api', () => ({
-  isPermitted: vi.fn().mockResolvedValue(true),
+  const mockSupabaseClient = {
+    from: vi.fn(() => createMockQueryBuilder()),
+    rpc: vi.fn().mockResolvedValue({ data: null, error: null }),
+  };
+
+  return {
+    createClient: vi.fn(() => mockSupabaseClient),
+  };
+});
+
+// Mock the new RBAC system for performance testing
+// Reference hoisted mocks - they're available when factory runs
+vi.mock('../../rbac/api', () => ({
+  isPermitted: mockIsPermitted,
+  isPermittedCached: vi.fn().mockResolvedValue(true),
   getPermissionMap: vi.fn().mockResolvedValue({}),
   getAccessLevel: vi.fn().mockResolvedValue('viewer'),
-  isSuperAdmin: (...args: any[]) => mockIsSuperAdmin(...args),
+  isSuperAdmin: mockIsSuperAdmin,
   setupRBAC: vi.fn()
 }));
 
 // Mock RBAC hooks
-const mockHasPermissionRBAC = vi.fn().mockResolvedValue(true);
-const mockUseCan = vi.fn(() => ({
+// Reference hoisted mocks - they're available when factory runs
+// Mock useCan hook - create a mock function that can be controlled in tests
+const mockUseCanFn = vi.fn(() => ({
   can: true,
   isLoading: false,
   error: null,
   refetch: vi.fn().mockResolvedValue(undefined),
 }));
 
-vi.mock('../../../rbac/hooks', () => ({
+vi.mock('../../rbac/hooks', () => ({
   useRBAC: vi.fn(() => ({
     hasPermission: mockHasPermissionRBAC,
     isLoading: false,
@@ -134,7 +257,7 @@ vi.mock('../../../rbac/hooks', () => ({
     eventRoles: [],
     permissionMap: {},
   })),
-  useCan: (...args: any[]) => mockUseCan(...args),
+  useCan: (...args: any[]) => mockUseCanFn(...args),
   useResolvedScope: vi.fn(() => ({
     resolvedScope: { organisationId: 'org-123', eventId: 'event-123', appId: 'app-123' },
     isLoading: false,
@@ -143,7 +266,8 @@ vi.mock('../../../rbac/hooks', () => ({
 }));
 
 // Mock child components
-vi.mock('../../Header', () => ({
+// Mock Header component - PaceAppLayout imports from '../Header'
+vi.mock('../Header', () => ({
   Header: vi.fn(({ appName, user, onSignOut, onChangePassword, onNavigate, currentPath, logo, userMenu, actions, navItems }) => (
     <header data-testid="mock-header" role="banner">
       <div data-testid="app-name">{appName ?? 'Test App'}</div>
@@ -194,7 +318,7 @@ vi.mock('../../Header', () => ({
   ))
 }));
 
-vi.mock('../../Footer', () => ({
+vi.mock('../Footer', () => ({
   Footer: vi.fn(() => <footer data-testid="mock-footer" role="contentinfo">Mock Footer</footer>)
 }));
 
@@ -403,7 +527,7 @@ const TestWrapper = ({ children }: { children: React.ReactNode }) => (
     }, { timeout: 6000 });
 
       it('handles permission check errors efficiently', async () => {
-        mockUseCan.mockReturnValue({
+        mockUseCanFn.mockReturnValue({
           can: false,
           isLoading: false,
           error: new Error('Permission check failed'),
@@ -804,7 +928,6 @@ const TestWrapper = ({ children }: { children: React.ReactNode }) => (
               '/nav-1': 'page-1',
               '/nav-2': 'page-2'
             }}
-            filterNavigationByPermissions={true}
           />
         </TestWrapper>
       );

package/src/components/PaceAppLayout/{__tests__/PaceAppLayout.security.test.tsx → PaceAppLayout.security.test.tsx}

@@ -17,10 +17,50 @@ vi.mock('react-router-dom', async () => {
   };
 });
 
-// Mock UnifiedAuthProvider
-const mockSignOut = vi.fn().mockResolvedValue({ error: null });
-const mockUpdatePassword = vi.fn().mockResolvedValue({ error: null });
-const mockUser = {
+// Create shared mock Supabase client using hoisted function
+const createMockSupabaseClient = vi.hoisted(() => {
+  const createMockQueryBuilder = () => {
+    const queryBuilder = {
+      select: vi.fn().mockReturnThis(),
+      eq: vi.fn().mockReturnThis(),
+      is: vi.fn().mockReturnThis(),
+      lte: vi.fn().mockReturnThis(),
+      or: vi.fn().mockReturnThis(),
+      limit: vi.fn().mockResolvedValue({ data: [], error: null }), // Default to empty array (not super admin)
+      single: vi.fn().mockResolvedValue({ data: null, error: null }),
+      maybeSingle: vi.fn().mockResolvedValue({ data: null, error: null }),
+    };
+    return queryBuilder;
+  };
+
+  // Return a function that creates a new mock client instance each time
+  return () => ({
+    from: vi.fn(() => createMockQueryBuilder()),
+    rpc: vi.fn().mockResolvedValue({ data: false, error: null }),
+    auth: {
+      getUser: vi.fn().mockResolvedValue({ data: { user: null }, error: null }),
+      getSession: vi.fn().mockResolvedValue({ data: { session: null }, error: null }),
+    },
+  });
+});
+
+// Mock OrganisationProvider - hoist so it's available in mock factories
+const mockOrganisation = vi.hoisted(() => ({
+  id: 'test-org-id',
+  name: 'Test Organisation',
+  display_name: 'Test Organisation',
+  description: 'Test organisation for testing',
+  subscription_tier: 'basic',
+  settings: {},
+  is_active: true,
+  created_at: '2023-01-01T00:00:00Z',
+  updated_at: '2023-01-01T00:00:00Z'
+}));
+
+// Mock UnifiedAuthProvider - hoist these so they're available in mock factories
+const mockSignOut = vi.hoisted(() => vi.fn().mockResolvedValue({ error: null }));
+const mockUpdatePassword = vi.hoisted(() => vi.fn().mockResolvedValue({ error: null }));
+const mockUser = vi.hoisted(() => ({
   id: 'test-user-id',
   email: 'test@example.com',
   user_metadata: { 
@@ -29,41 +69,34 @@ const mockUser = {
     eventId: 'test-event-456',
     appId: 'test-app-789'
   }
-};
+}));
 
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: () => ({
+const mockUseUnifiedAuthFn = vi.hoisted(() => vi.fn(() => {
+  // Create a new mock client instance each time to avoid shared state issues
+  const mockSupabase = createMockSupabaseClient();
+  return {
     user: mockUser,
     signOut: mockSignOut,
     updatePassword: mockUpdatePassword,
     isAuthenticated: true,
     authLoading: false,
     authError: null,
-    supabase: null,
+    supabase: mockSupabase, // Use the shared mock client
     appName: 'Test App',
     signIn: vi.fn().mockResolvedValue({ error: null }),
     signUp: vi.fn().mockResolvedValue({ error: null }),
     resetPassword: vi.fn().mockResolvedValue({ error: null }),
     refreshSession: vi.fn().mockResolvedValue({ error: null }),
-    // RBAC properties removed - use useRBAC() hook instead
-    selectedOrganisationId: 'test-org-id',
+    selectedOrganisation: mockOrganisation,
+    selectedEvent: null,
     isLoading: false,
     hasErrors: false
-  })
+  };
+}));
+vi.mock('../../providers/services/UnifiedAuthProvider', () => ({
+  useUnifiedAuth: () => mockUseUnifiedAuthFn(),
+  UnifiedAuthProvider: ({ children }: { children: React.ReactNode }) => <>{children}</>,
 }));
-
-// Mock OrganisationProvider
-const mockOrganisation = {
-  id: 'test-org-id',
-  name: 'Test Organisation',
-  display_name: 'Test Organisation',
-  description: 'Test organisation for testing',
-  subscription_tier: 'basic',
-  settings: {},
-  is_active: true,
-  created_at: '2023-01-01T00:00:00Z',
-  updated_at: '2023-01-01T00:00:00Z'
-};
 
 const mockOrganisationContext = {
   selectedOrganisation: mockOrganisation,
@@ -91,42 +124,77 @@ const mockOrganisationContext = {
   isOrganisationSecure: vi.fn().mockReturnValue(true)
 };
 
-vi.mock('../../../hooks/useOrganisations', () => ({
-  useOrganisations: () => mockOrganisationContext
+// Mock useOrganisationService FIRST (used internally by useOrganisations)
+vi.mock('../../hooks/services/useOrganisationService', () => ({
+  useOrganisationService: () => ({
+    getSelectedOrganisation: () => mockOrganisation,
+    getOrganisations: () => [mockOrganisation],
+    getUserMemberships: () => mockOrganisationContext.userMemberships,
+    isLoading: () => false,
+    getError: () => null,
+    hasValidOrganisationContext: () => true,
+    setSelectedOrganisation: vi.fn(),
+    switchOrganisation: vi.fn().mockResolvedValue(undefined),
+    getUserRole: vi.fn().mockReturnValue('member'),
+    validateOrganisationAccess: vi.fn().mockReturnValue(true),
+    ensureOrganisationContext: vi.fn().mockReturnValue(mockOrganisation),
+    refreshOrganisations: vi.fn().mockResolvedValue(undefined),
+    getPrimaryOrganisation: vi.fn().mockReturnValue(mockOrganisation),
+    isOrganisationSecure: vi.fn().mockReturnValue(true),
+  })
 }));
 
-// Mock useEvents hook (used by useEventTheme)
-vi.mock('../../../hooks/useEvents', () => ({
-  useEvents: vi.fn(() => ({
-    selectedEvent: { event_id: 'event-123' },
-    events: [],
-    isLoading: false,
-    error: null,
-  })),
+// Mock useOrganisations AFTER useOrganisationService
+// Use the same path pattern as PaceAppLayout.test.tsx
+vi.mock('../../hooks/useOrganisations', () => ({
+  useOrganisations: vi.fn(() => mockOrganisationContext)
 }));
 
-// Mock useEventTheme to avoid EventServiceProvider requirement
-vi.mock('../../../hooks/useEventTheme', () => ({
-  useEventTheme: vi.fn(),
-}));
+// Mock useEventService hook FIRST (it's imported by useEvents)
+// Must be hoisted to be available when useEvents tries to import it
+const mockUseEventService = vi.hoisted(() => vi.fn(() => ({
+  getEvent: vi.fn(),
+  getEvents: vi.fn(() => []),
+  createEvent: vi.fn(),
+  updateEvent: vi.fn(),
+  deleteEvent: vi.fn(),
+  getSelectedEvent: vi.fn(() => null),
+  setSelectedEvent: vi.fn(),
+  isLoading: vi.fn(() => false),
+  getError: vi.fn(() => null),
+  refreshEvents: vi.fn(),
+  clearEventSelection: vi.fn(),
+  subscribe: vi.fn(() => vi.fn()),
+})));
 
-// Mock the new RBAC system for security testing
-const mockIsPermitted = vi.fn().mockResolvedValue(true);
-const mockCheckPermission = vi.fn().mockResolvedValue(true);
+// Mock useEventService hook - path is ../../hooks/services/useEventService from PaceAppLayout
+vi.mock('../../hooks/services/useEventService', () => ({
+  useEventService: mockUseEventService,
+}));
 
-const mockIsSuperAdmin = vi.fn().mockResolvedValue(false);
+// Don't mock useEvents - let it use the mocked useEventService
+// The real useEvents will work because useEventService is mocked
 
-vi.mock('../../../rbac/api', () => ({
-  isPermitted: vi.fn().mockResolvedValue(true),
-  getPermissionMap: vi.fn().mockResolvedValue({}),
-  getAccessLevel: vi.fn().mockResolvedValue('viewer'),
-  isSuperAdmin: (...args: any[]) => mockIsSuperAdmin(...args),
-  setupRBAC: vi.fn()
+// Mock useEventTheme to avoid EventServiceProvider requirement
+vi.mock('../../hooks/useEventTheme', () => ({
+  useEventTheme: vi.fn(),
 }));
 
-// Mock RBAC hooks
-const mockHasPermissionRBAC = vi.fn().mockResolvedValue(true);
-const mockUseRBAC = vi.fn(() => ({
+// Define mocks using vi.hoisted() so they're available in hoisted vi.mock factories
+// Note: Cannot export hoisted variables directly, so we define them and access directly in tests
+const mockIsPermitted = vi.hoisted(() => vi.fn().mockResolvedValue(true));
+const mockCheckPermission = vi.hoisted(() => vi.fn().mockResolvedValue(true));
+const mockIsSuperAdmin = vi.hoisted(() => vi.fn().mockResolvedValue(false));
+
+// Define RBAC hook mocks using vi.hoisted() so they're available in hoisted vi.mock factories
+const mockHasPermissionRBAC = vi.hoisted(() => vi.fn().mockResolvedValue(true));
+const mockUseCan = vi.hoisted(() => vi.fn(() => ({
+  can: true,
+  isLoading: false,
+  error: null,
+  refetch: vi.fn().mockResolvedValue(undefined),
+})));
+const mockUseRBAC = vi.hoisted(() => vi.fn(() => ({
   hasPermission: mockHasPermissionRBAC,
   isLoading: false,
   error: null,
@@ -137,18 +205,87 @@ const mockUseRBAC = vi.fn(() => ({
   organisationRoles: [],
   eventRoles: [],
   permissionMap: {},
-}));
+})));
 
-const mockUseCan = vi.fn(() => ({
-  can: true,
-  isLoading: false,
-  error: null,
-  refetch: vi.fn().mockResolvedValue(undefined),
+// Mock logger - must be hoisted to be available in vi.mock factory
+const mockLogger = vi.hoisted(() => ({
+  debug: vi.fn(),
+  info: vi.fn(),
+  warn: vi.fn(),
+  error: vi.fn(),
+  configure: vi.fn(),
 }));
 
-vi.mock('../../../rbac/hooks', () => ({
-  useRBAC: () => mockUseRBAC(),
-  useCan: (...args: any[]) => mockUseCan(...args),
+vi.mock('../../utils/core/logger', () => {
+  const logger = mockLogger;
+  return {
+    logger: logger,
+    createLogger: () => logger,
+    Logger: {
+      debug: vi.fn(),
+      info: vi.fn(),
+      warn: vi.fn(),
+      error: vi.fn(),
+      configure: vi.fn(),
+      createScopedLogger: vi.fn(() => logger),
+    },
+    LogLevel: {
+      DEBUG: 0,
+      INFO: 1,
+      WARN: 2,
+      ERROR: 3,
+    },
+  };
+});
+
+// Mock EventServiceProvider - provide a context that works with the mocked useEventService
+vi.mock('../../providers/services/EventServiceProvider', () => {
+  const React = require('react');
+  
+  // Create a context that provides the mock service
+  const mockServiceInstance = mockUseEventService();
+  const mockContextValue = {
+    eventService: mockServiceInstance,
+  };
+  
+  // Create a context that will be used by useEventService
+  const MockEventServiceContext = React.createContext(mockContextValue);
+  
+  return {
+    EventServiceProvider: ({ children }: { children: React.ReactNode }) => {
+      return React.createElement(MockEventServiceContext.Provider, { value: mockContextValue }, children);
+    },
+    EventServiceContext: MockEventServiceContext,
+    useEventService: mockUseEventService,
+  };
+});
+
+// Mock Supabase client for RBAC engine
+// Use the hoisted mock client function to ensure consistency
+vi.mock('@supabase/supabase-js', () => {
+  return {
+    createClient: vi.fn(() => createMockSupabaseClient()()), // Call the function to get the mock client
+    SupabaseClient: vi.fn(),
+  };
+});
+
+// Mock the new RBAC system for security testing
+// Reference hoisted mocks - they're available when factory runs
+vi.mock('../../rbac/api', () => {
+  return {
+    isPermitted: mockIsPermitted,
+    isPermittedCached: vi.fn().mockResolvedValue(true),
+    getPermissionMap: vi.fn().mockResolvedValue({}),
+    getAccessLevel: vi.fn().mockResolvedValue('viewer'),
+    isSuperAdmin: mockIsSuperAdmin,
+    setupRBAC: vi.fn(),
+  };
+});
+
+// Mock RBAC hooks - use hoisted mocks
+vi.mock('../../rbac/hooks', () => ({
+  useRBAC: mockUseRBAC,
+  useCan: mockUseCan,
   useResolvedScope: vi.fn(() => ({
     resolvedScope: { organisationId: 'org-123', eventId: 'event-123', appId: 'app-123' },
     isLoading: false,
@@ -156,8 +293,18 @@ vi.mock('../../../rbac/hooks', () => ({
   })),
 }));
 
+// Mock EventSelector to avoid useEventService requirement
+vi.mock('../EventSelector', () => ({
+  EventSelector: vi.fn(({ placeholder, className, 'data-testid': testId }: any) => (
+    <div data-testid={testId || 'event-selector'} className={className}>
+      {placeholder || 'Select event'}
+    </div>
+  ))
+}));
+
 // Mock child components
-vi.mock('../../Header', () => ({
+// Mock Header component - PaceAppLayout imports from '../Header'
+vi.mock('../Header', () => ({
   Header: vi.fn(({ appName, user, onSignOut, onChangePassword, onNavigate, currentPath, logo, userMenu, actions }) => (
     <header data-testid="mock-header" role="banner">
       <div data-testid="app-name">{appName ?? 'Test App'}</div>
@@ -202,7 +349,7 @@ vi.mock('../../Header', () => ({
   ))
 }));
 
-vi.mock('../../Footer', () => ({
+vi.mock('../Footer', () => ({
   Footer: vi.fn(() => <footer data-testid="mock-footer" role="contentinfo">Mock Footer</footer>)
 }));
 
@@ -261,7 +408,7 @@ describe('PaceAppLayout Security', () => {
     });
     
     // Reset the mocked function
-    const { isPermitted } = await import('../../../rbac/api');
+    const { isPermitted } = await import('../../rbac/api');
     vi.mocked(isPermitted).mockClear();
     vi.mocked(isPermitted).mockResolvedValue(true);
     
@@ -420,7 +567,6 @@ describe('PaceAppLayout Security', () => {
           <PaceAppLayout 
             appName="Test App" 
             enforcePermissions={true}
-            filterNavigationByPermissions={true}
             routePermissions={{
               '/admin': 'delete',
               '/dashboard': 'read'
@@ -817,7 +963,7 @@ describe('PaceAppLayout Security', () => {
       };
       
       // Ensure the mock is properly set to allow access
-      const { isPermitted } = await import('../../../rbac/api');
+      const { isPermitted } = await import('../../rbac/api');
       vi.mocked(isPermitted).mockClear();
       vi.mocked(isPermitted).mockResolvedValue(true);