@jmruthers/pace-core 0.5.184 → 0.5.186

package/dist/{chunk-RA3JUFMW.js → chunk-445GEP27.js}

@@ -7,14 +7,14 @@ import {
   isPermitted,
   isPermittedCached,
   resolveAppContext
-} from "./chunk-M7W4CP3M.js";
+} from "./chunk-U6WNSFX5.js";
 import {
   useEvents,
   useOrganisations
-} from "./chunk-QCDXODCA.js";
+} from "./chunk-XAUHJD3L.js";
 import {
   useUnifiedAuth
-} from "./chunk-FUEYYMX5.js";
+} from "./chunk-FXFJRTKI.js";
 import {
   getCurrentAppName
 } from "./chunk-F2IMUDXZ.js";
@@ -1185,10 +1185,160 @@ function useRoleManagement() {
       setIsLoading(false);
     }
   }, [user?.id, supabase]);
+  const grantGlobalRole = useCallback3(async (params) => {
+    setIsLoading(true);
+    setError(null);
+    try {
+      const { data, error: rpcError } = await supabase.rpc("rbac_role_grant", {
+        p_user_id: params.user_id,
+        p_role_type: "global",
+        p_role_name: params.role,
+        p_context_id: null,
+        // Global roles don't need context
+        p_granted_by: params.granted_by || user?.id || void 0
+      });
+      if (rpcError) {
+        throw new Error(rpcError.message || "Failed to grant role");
+      }
+      const result = Array.isArray(data) && data.length > 0 ? data[0] : null;
+      if (!result || !result.success) {
+        return {
+          success: false,
+          error: result?.message || result?.error_code || "Failed to grant role",
+          message: result?.message
+        };
+      }
+      return {
+        success: true,
+        message: result.message || "Role granted successfully",
+        roleId: result.role_id
+      };
+    } catch (err) {
+      const errorMessage = err instanceof Error ? err.message : "Unknown error occurred";
+      setError(err instanceof Error ? err : new Error(errorMessage));
+      return {
+        success: false,
+        error: errorMessage
+      };
+    } finally {
+      setIsLoading(false);
+    }
+  }, [user?.id, supabase]);
+  const revokeGlobalRole = useCallback3(async (params) => {
+    setIsLoading(true);
+    setError(null);
+    try {
+      const { data, error: rpcError } = await supabase.rpc("rbac_role_revoke", {
+        p_user_id: params.user_id,
+        p_role_type: "global",
+        p_role_name: params.role,
+        p_context_id: null,
+        // Global roles don't need context
+        p_revoked_by: params.revoked_by || user?.id || void 0
+      });
+      if (rpcError) {
+        throw new Error(rpcError.message || "Failed to revoke role");
+      }
+      const result = Array.isArray(data) && data.length > 0 ? data[0] : null;
+      return {
+        success: result?.success === true,
+        message: result?.message || void 0,
+        error: result?.success === false ? result?.message || result?.error_code || "Unknown error" : void 0
+      };
+    } catch (err) {
+      const errorMessage = err instanceof Error ? err.message : "Unknown error occurred";
+      setError(err instanceof Error ? err : new Error(errorMessage));
+      return {
+        success: false,
+        error: errorMessage
+      };
+    } finally {
+      setIsLoading(false);
+    }
+  }, [user?.id, supabase]);
+  const grantOrganisationRole = useCallback3(async (params) => {
+    setIsLoading(true);
+    setError(null);
+    try {
+      const { data, error: rpcError } = await supabase.rpc("rbac_role_grant", {
+        p_user_id: params.user_id,
+        p_role_type: "organisation",
+        p_role_name: params.role,
+        p_context_id: params.organisation_id,
+        // Organisation ID as context
+        p_granted_by: params.granted_by || user?.id || void 0
+      });
+      if (rpcError) {
+        throw new Error(rpcError.message || "Failed to grant role");
+      }
+      const result = Array.isArray(data) && data.length > 0 ? data[0] : null;
+      if (!result || !result.success) {
+        return {
+          success: false,
+          error: result?.message || result?.error_code || "Failed to grant role",
+          message: result?.message
+        };
+      }
+      return {
+        success: true,
+        message: result.message || "Role granted successfully",
+        roleId: result.role_id
+      };
+    } catch (err) {
+      const errorMessage = err instanceof Error ? err.message : "Unknown error occurred";
+      setError(err instanceof Error ? err : new Error(errorMessage));
+      return {
+        success: false,
+        error: errorMessage
+      };
+    } finally {
+      setIsLoading(false);
+    }
+  }, [user?.id, supabase]);
+  const revokeOrganisationRole = useCallback3(async (params) => {
+    setIsLoading(true);
+    setError(null);
+    try {
+      const { data, error: rpcError } = await supabase.rpc("rbac_role_revoke", {
+        p_user_id: params.user_id,
+        p_role_type: "organisation",
+        p_role_name: params.role,
+        p_context_id: params.organisation_id,
+        // Organisation ID as context
+        p_revoked_by: params.revoked_by || user?.id || void 0
+      });
+      if (rpcError) {
+        throw new Error(rpcError.message || "Failed to revoke role");
+      }
+      const result = Array.isArray(data) && data.length > 0 ? data[0] : null;
+      return {
+        success: result?.success === true,
+        message: result?.message || void 0,
+        error: result?.success === false ? result?.message || result?.error_code || "Unknown error" : void 0
+      };
+    } catch (err) {
+      const errorMessage = err instanceof Error ? err.message : "Unknown error occurred";
+      setError(err instanceof Error ? err : new Error(errorMessage));
+      return {
+        success: false,
+        error: errorMessage
+      };
+    } finally {
+      setIsLoading(false);
+    }
+  }, [user?.id, supabase]);
   return {
+    // Event app roles (existing)
     revokeEventAppRole,
     grantEventAppRole,
     revokeRoleById,
+    // Global roles (new)
+    grantGlobalRole,
+    revokeGlobalRole,
+    // Organisation roles (new)
+    grantOrganisationRole,
+    revokeOrganisationRole,
+    // Shared state
     isLoading,
     error
   };
@@ -1308,4 +1458,4 @@ export {
   useRoleManagement,
   useSecureSupabase
 };
-//# sourceMappingURL=chunk-RA3JUFMW.js.map
+//# sourceMappingURL=chunk-445GEP27.js.map