@jmruthers/pace-core 0.5.193 → 0.6.2

package/dist/{UnifiedAuthProvider-RGJTDE2C.js → UnifiedAuthProvider-CH6Z342H.js}

@@ -2,8 +2,8 @@ import {
   UnifiedAuthContext,
   UnifiedAuthProvider,
   useUnifiedAuth
-} from "./chunk-7FLMSG37.js";
-import "./chunk-KNC55RTG.js";
+} from "./chunk-EHMR7VYL.js";
+import "./chunk-24UVZUZG.js";
 import "./chunk-63FOKYGO.js";
 import "./chunk-QXHPKYJV.js";
 import "./chunk-VBXEHIUJ.js";
@@ -14,4 +14,4 @@ export {
   UnifiedAuthProvider,
   useUnifiedAuth
 };
-//# sourceMappingURL=UnifiedAuthProvider-RGJTDE2C.js.map
+//# sourceMappingURL=UnifiedAuthProvider-CH6Z342H.js.map

package/dist/{UnifiedAuthProvider-185Ih4dj.d.ts → UnifiedAuthProvider-CVcTjx-d.d.ts}

@@ -4,6 +4,10 @@ import { SupabaseClient, User, Session, AuthError } from '@supabase/supabase-js'
 import { O as Organisation, a as OrganisationMembership, E as Event } from './event-CW5YB_2p.js';
 import { S as SessionRestorationState } from './auth-BZOJqrdd.js';
 
+/**
+ * User event access interface.
+ * Represents a user's access to a specific event.
+ */
 interface UserEventAccess {
     event_id: string;
     event_name: string;
@@ -16,6 +20,10 @@ interface UserEventAccess {
     granted_at: string;
     organisation_id: string;
 }
+/**
+ * Unified auth context type.
+ * Provides combined authentication, organisation, event, and inactivity state and methods.
+ */
 interface UnifiedAuthContextType {
     user: User | null;
     session: Session | null;
@@ -86,8 +94,22 @@ interface UnifiedAuthContextType {
     sessionRestorationTimedOut: boolean;
     sessionRestorationTimeoutMs: number;
 }
+/**
+ * Context for unified authentication.
+ * Provides combined authentication, organisation, event, and inactivity functionality.
+ */
 declare const UnifiedAuthContext: React__default.Context<UnifiedAuthContextType | undefined>;
+/**
+ * Hook to access unified authentication context.
+ * Must be used within a UnifiedAuthProvider.
+ *
+ * @returns Unified authentication context
+ * @throws Error if used outside UnifiedAuthProvider
+ */
 declare const useUnifiedAuth: () => UnifiedAuthContextType;
+/**
+ * Props for the UnifiedAuthProvider component.
+ */
 interface UnifiedAuthProviderProps {
     children: React__default.ReactNode;
     supabaseClient: SupabaseClient;
@@ -108,6 +130,13 @@ interface UnifiedAuthProviderProps {
     }) => React__default.ReactNode;
     dangerouslyDisableInactivity?: boolean;
 }
+/**
+ * Unified authentication provider.
+ * Provides authentication, organisation, event, and inactivity tracking services.
+ *
+ * @param props - Unified auth provider configuration
+ * @returns The unified auth provider
+ */
 declare function UnifiedAuthProvider({ children, supabaseClient, appName, appConfig, // Default to requiring events
 persistState, enablePersistence, requireOrganisationContext, idleTimeoutMs, // REQUIRED: No default - must be explicitly provided
 warnBeforeMs, // REQUIRED: No default - must be explicitly provided

package/dist/{api-N774RPUA.js → api-MVVQZLJI.js}

@@ -21,7 +21,7 @@ import {
   isSuperAdmin,
   resolveAppContext,
   setupRBAC
-} from "./chunk-KNC55RTG.js";
+} from "./chunk-24UVZUZG.js";
 import "./chunk-63FOKYGO.js";
 import "./chunk-PWLANIRT.js";
 import "./chunk-7D4SUZUM.js";
@@ -49,4 +49,4 @@ export {
   resolveAppContext,
   setupRBAC
 };
-//# sourceMappingURL=api-N774RPUA.js.map
+//# sourceMappingURL=api-MVVQZLJI.js.map

package/dist/{chunk-KNC55RTG.js → chunk-24UVZUZG.js}

@@ -1669,11 +1669,30 @@ var RBACEngine = class {
     if (cached !== null) {
       return cached;
     }
+    const startTime = Date.now();
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const { data, error } = await this.supabase.from("rbac_global_roles").select("role").eq("user_id", userId).eq("role", "super_admin").lte("valid_from", now).or(`valid_to.is.null,valid_to.gte.${now}`).limit(1);
-    const isSuperAdmin2 = !error && data && data.length > 0;
-    rbacCache.set(cacheKey, isSuperAdmin2, 6e4);
-    return Boolean(isSuperAdmin2);
+    try {
+      const { data, error } = await this.supabase.from("rbac_global_roles").select("role").eq("user_id", userId).eq("role", "super_admin").lte("valid_from", now).or(`valid_to.is.null,valid_to.gte.${now}`).limit(1);
+      const elapsed = Date.now() - startTime;
+      if (elapsed > 2e3) {
+        console.warn("[RBACEngine] Super admin check took longer than expected", {
+          userId,
+          elapsedMs: elapsed,
+          error: error?.message
+        });
+      }
+      const isSuperAdmin2 = !error && data && data.length > 0;
+      rbacCache.set(cacheKey, isSuperAdmin2, 6e4);
+      return Boolean(isSuperAdmin2);
+    } catch (err) {
+      const elapsed = Date.now() - startTime;
+      console.error("[RBACEngine] Error checking super admin", {
+        userId,
+        error: err,
+        elapsedMs: elapsed
+      });
+      return false;
+    }
   }
   /**
    * Resolve a page ID to UUID if it's a page name
@@ -1915,54 +1934,66 @@ function getEngine() {
   return globalEngine;
 }
 async function getAccessLevel(input, appConfig, appName) {
-  const engine = getEngine();
-  const isSuperAdminUser = await engine["checkSuperAdmin"](input.userId);
-  if (isSuperAdminUser) {
-    return "super";
-  }
-  let resolvedAppConfig = appConfig ?? null;
-  let resolvedAppName = appName;
-  if (!resolvedAppConfig && input.scope.appId) {
-    resolvedAppConfig = await getAppConfig(input.scope.appId);
-  }
-  const validation = await ContextValidator.resolveRequiredContext(
-    input.scope,
-    resolvedAppConfig,
-    resolvedAppName,
-    engine["supabase"]
-  );
-  if (!validation.isValid || !validation.resolvedScope) {
-    throw validation.error || new OrganisationContextRequiredError();
+  try {
+    const engine = getEngine();
+    const isSuperAdminUser = await engine["checkSuperAdmin"](input.userId);
+    if (isSuperAdminUser) {
+      return "super";
+    }
+    let resolvedAppConfig = appConfig ?? null;
+    let resolvedAppName = appName;
+    if (!resolvedAppConfig && input.scope.appId) {
+      resolvedAppConfig = await getAppConfig(input.scope.appId);
+    }
+    const validation = await ContextValidator.resolveRequiredContext(
+      input.scope,
+      resolvedAppConfig,
+      resolvedAppName,
+      engine["supabase"]
+    );
+    if (!validation.isValid || !validation.resolvedScope) {
+      throw validation.error || new OrganisationContextRequiredError();
+    }
+    return engine.getAccessLevel({
+      ...input,
+      scope: validation.resolvedScope
+    });
+  } catch (error) {
+    throw error;
   }
-  return engine.getAccessLevel({
-    ...input,
-    scope: validation.resolvedScope
-  });
 }
 async function getPermissionMap(input, appConfig, appName) {
-  const engine = getEngine();
-  let resolvedAppConfig = appConfig ?? null;
-  let resolvedAppName = appName;
-  if (!resolvedAppConfig && input.scope.appId) {
-    resolvedAppConfig = await getAppConfig(input.scope.appId);
-  }
-  const validation = await ContextValidator.resolveRequiredContext(
-    input.scope,
-    resolvedAppConfig,
-    resolvedAppName,
-    engine["supabase"]
-  );
-  if (!validation.isValid || !validation.resolvedScope) {
-    throw validation.error || new OrganisationContextRequiredError();
+  try {
+    const engine = getEngine();
+    let resolvedAppConfig = appConfig ?? null;
+    let resolvedAppName = appName;
+    if (!resolvedAppConfig && input.scope.appId) {
+      resolvedAppConfig = await getAppConfig(input.scope.appId);
+    }
+    const validation = await ContextValidator.resolveRequiredContext(
+      input.scope,
+      resolvedAppConfig,
+      resolvedAppName,
+      engine["supabase"]
+    );
+    if (!validation.isValid || !validation.resolvedScope) {
+      throw validation.error || new OrganisationContextRequiredError();
+    }
+    return engine.getPermissionMap({
+      ...input,
+      scope: validation.resolvedScope
+    });
+  } catch (error) {
+    throw error;
   }
-  return engine.getPermissionMap({
-    ...input,
-    scope: validation.resolvedScope
-  });
 }
 async function resolveAppContext(input) {
-  const engine = getEngine();
-  return engine.resolveAppContext(input);
+  try {
+    const engine = getEngine();
+    return await engine.resolveAppContext(input);
+  } catch (error) {
+    throw error;
+  }
 }
 async function getRoleContext(input, appConfig, appName) {
   const engine = getEngine();
@@ -1985,12 +2016,17 @@ async function getRoleContext(input, appConfig, appName) {
     scope: validation.resolvedScope
   });
 }
-async function isPermitted(input, appConfig, appName) {
+async function isPermitted(input, appConfig, appName, precomputedSuperAdmin = null) {
   const engine = getEngine();
-  const isSuperAdminUser = await engine["checkSuperAdmin"](input.userId);
-  if (isSuperAdminUser) {
+  if (precomputedSuperAdmin === true) {
     return true;
   }
+  if (precomputedSuperAdmin === null) {
+    const isSuperAdminUser = await engine["checkSuperAdmin"](input.userId);
+    if (isSuperAdminUser) {
+      return true;
+    }
+  }
   let resolvedAppConfig = appConfig ?? null;
   let resolvedAppName = appName;
   if (!resolvedAppConfig && input.scope.appId) {
@@ -2042,14 +2078,14 @@ async function isPermittedCached(input, appConfig, appName) {
     return cached;
   }
   return getOrCreateRequest(input, async (checkInput) => {
-    const result = await isPermitted(checkInput, appConfig, appName);
+    const result = await isPermitted(checkInput, appConfig, appName, null);
     const isPageLevelCheck = !!pageId || permission.includes("page.");
     rbacCache.set(cacheKey, result, void 0, isPageLevelCheck);
     return result;
   });
 }
 async function hasPermission(input) {
-  return isPermitted(input);
+  return isPermitted(input, null, void 0, null);
 }
 async function hasAnyPermission(input) {
   const { permissions, ...baseInput } = input;
@@ -2057,7 +2093,7 @@ async function hasAnyPermission(input) {
     const hasPermission2 = await isPermitted({
       ...baseInput,
       permission
-    });
+    }, null, void 0, null);
     if (hasPermission2) {
       return true;
     }
@@ -2070,7 +2106,7 @@ async function hasAllPermissions(input) {
     const hasPermission2 = await isPermitted({
       ...baseInput,
       permission
-    });
+    }, null, void 0, null);
     if (!hasPermission2) {
       return false;
     }
@@ -2212,4 +2248,4 @@ export {
   invalidateAppCache,
   clearCache
 };
-//# sourceMappingURL=chunk-KNC55RTG.js.map
+//# sourceMappingURL=chunk-24UVZUZG.js.map