@jmruthers/pace-core 0.5.34 → 0.5.36

package/docs/api/interfaces/StorageFileMetadata.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StorageFileMetadata
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StorageFileMetadata
 
 # Interface: StorageFileMetadata
 

package/docs/api/interfaces/StorageListOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StorageListOptions
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StorageListOptions
 
 # Interface: StorageListOptions
 

package/docs/api/interfaces/StorageListResult.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StorageListResult
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StorageListResult
 
 # Interface: StorageListResult
 

package/docs/api/interfaces/StorageUploadOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StorageUploadOptions
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StorageUploadOptions
 
 # Interface: StorageUploadOptions
 

package/docs/api/interfaces/StorageUploadResult.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StorageUploadResult
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StorageUploadResult
 
 # Interface: StorageUploadResult
 

package/docs/api/interfaces/StorageUrlOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StorageUrlOptions
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StorageUrlOptions
 
 # Interface: StorageUrlOptions
 

package/docs/api/interfaces/StyleImport.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / StyleImport
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / StyleImport
 
 # Interface: StyleImport
 

package/docs/api/interfaces/ToastActionElement.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / ToastActionElement
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / ToastActionElement
 
 # Interface: ToastActionElement
 

package/docs/api/interfaces/ToastProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / ToastProps
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / ToastProps
 
 # Interface: ToastProps
 

package/docs/api/interfaces/UnifiedAuthContextType.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UnifiedAuthContextType
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UnifiedAuthContextType
 
 # Interface: UnifiedAuthContextType
 

package/docs/api/interfaces/UnifiedAuthProviderProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UnifiedAuthProviderProps
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UnifiedAuthProviderProps
 
 # Interface: UnifiedAuthProviderProps
 

package/docs/api/interfaces/UseInactivityTrackerOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UseInactivityTrackerOptions
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UseInactivityTrackerOptions
 
 # Interface: UseInactivityTrackerOptions
 

package/docs/api/interfaces/UseInactivityTrackerReturn.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UseInactivityTrackerReturn
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UseInactivityTrackerReturn
 
 # Interface: UseInactivityTrackerReturn
 

package/docs/api/interfaces/UsePublicEventLogoOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UsePublicEventLogoOptions
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UsePublicEventLogoOptions
 
 # Interface: UsePublicEventLogoOptions
 

package/docs/api/interfaces/UsePublicEventLogoReturn.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UsePublicEventLogoReturn
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UsePublicEventLogoReturn
 
 # Interface: UsePublicEventLogoReturn
 

package/docs/api/interfaces/UsePublicEventOptions.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UsePublicEventOptions
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UsePublicEventOptions
 
 # Interface: UsePublicEventOptions
 

package/docs/api/interfaces/UsePublicEventReturn.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UsePublicEventReturn
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UsePublicEventReturn
 
 # Interface: UsePublicEventReturn
 

package/docs/api/interfaces/UsePublicRouteParamsReturn.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UsePublicRouteParamsReturn
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UsePublicRouteParamsReturn
 
 # Interface: UsePublicRouteParamsReturn
 

package/docs/api/interfaces/UserEventAccess.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UserEventAccess
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UserEventAccess
 
 # Interface: UserEventAccess
 

package/docs/api/interfaces/UserMenuProps.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UserMenuProps
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UserMenuProps
 
 # Interface: UserMenuProps
 

package/docs/api/interfaces/UserProfile.md

@@ -1,4 +1,4 @@
-[@jmruthers/pace-core - v0.5.34](../README.md) / [Exports](../modules.md) / UserProfile
+[@jmruthers/pace-core - v0.5.36](../README.md) / [Exports](../modules.md) / UserProfile
 
 # Interface: UserProfile
 

package/docs/api/modules.md

@@ -1,6 +1,6 @@
-[@jmruthers/pace-core - v0.5.34](README.md) / Exports
+[@jmruthers/pace-core - v0.5.36](README.md) / Exports
 
-# @jmruthers/pace-core - v0.5.34
+# @jmruthers/pace-core - v0.5.36
 
 **`File`**
 
@@ -5036,7 +5036,7 @@ ___
 
 ### PagePermissionGuard
 
-▸ **PagePermissionGuard**(`props`): `Element`
+▸ **PagePermissionGuard**(`props`): ``null`` \| `string` \| `number` \| `boolean` \| `Iterable`\<`ReactNode`, `any`, `any`\> \| `Element`
 
 PagePermissionGuard - Enforces page-level permissions
 
@@ -5052,13 +5052,13 @@ prevent apps from bypassing permission checks.
 
 #### Returns
 
-`Element`
+``null`` \| `string` \| `number` \| `boolean` \| `Iterable`\<`ReactNode`, `any`, `any`\> \| `Element`
 
 React element with permission enforcement
 
 #### Defined in
 
-[packages/core/src/rbac/components/PagePermissionGuard.tsx:673](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/PagePermissionGuard.tsx#L673)
+[packages/core/src/rbac/components/PagePermissionGuard.tsx:489](https://github.com/jmruthers/pace-core/blob/main/packages/core/src/rbac/components/PagePermissionGuard.tsx#L489)
 
 ___
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jmruthers/pace-core",
-  "version": "0.5.34",
+  "version": "0.5.36",
   "description": "Clean, modern React component library with Tailwind v4 styling and native utilities",
   "private": false,
   "publishConfig": {

package/src/components/DataTable/components/DataTableCore.tsx

@@ -50,6 +50,7 @@ import { AccessDeniedPage } from './AccessDeniedPage';
 import { useCan } from '../../../rbac/hooks';
 import { useUnifiedAuth } from '../../../providers/UnifiedAuthProvider';
 import { Scope } from '../../../rbac/types';
+import { getCurrentAppName } from '../../../utils/appNameResolver';
 
 import type { 
   DataRecord,
@@ -332,13 +333,6 @@ function DataTableInternal<TData extends DataRecord>({
   // Get scope from useUnifiedAuth hook instead of user metadata
   const { selectedOrganisationId, selectedEventId, supabase } = useUnifiedAuth();
   
-  // DEBUG: Log what we get from useUnifiedAuth
-  console.log('[DataTable] useUnifiedAuth values:', {
-    selectedOrganisationId,
-    selectedEventId,
-    hasUser: !!user,
-    userId: user?.id
-  });
   
   // Create scope the same way as PagePermissionGuard - with event-based resolution
   const [resolvedScope, setResolvedScope] = useState<Scope | null>(null);
@@ -377,12 +371,49 @@ function DataTableInternal<TData extends DataRecord>({
   
   useEffect(() => {
     const resolveScope = async () => {
+      // Get app ID from package.json or environment (SAME AS PagePermissionGuard)
+      let appId: string | undefined = undefined;
+      
+      // Try to resolve from database
+      if (supabase) {
+        const appName = getCurrentAppName();
+        if (appName) {
+        try {
+          const { data: app, error } = await supabase
+            .from('rbac_apps')
+            .select('id, name, is_active')
+            .eq('name', appName)
+            .eq('is_active', true)
+            .single() as { data: { id: string; name: string; is_active: boolean } | null; error: any };
+          
+          if (error) {
+            // Check if app exists but is inactive
+            const { data: inactiveApp } = await supabase
+              .from('rbac_apps')
+              .select('id, name, is_active')
+              .eq('name', appName)
+              .single() as { data: { id: string; name: string; is_active: boolean } | null };
+            
+            if (inactiveApp) {
+              console.error(`[DataTable] App "${appName}" exists but is inactive (is_active: ${inactiveApp.is_active})`);
+            } else {
+              console.error(`[DataTable] App "${appName}" not found in rbac_apps table`);
+            }
+          } else if (app) {
+            appId = app.id;
+          }
+        } catch (error) {
+          console.error('[DataTable] Unexpected error resolving app ID:', error);
+        }
+      }
+      }
+
       // If we have both organisation and event, use them directly
       if (selectedOrganisationId && selectedEventId) {
         setResolvedScope({
           organisationId: selectedOrganisationId,
           eventId: selectedEventId,
-          appId: undefined
+          appId: appId
         });
         return;
       }
@@ -392,7 +423,7 @@ function DataTableInternal<TData extends DataRecord>({
         setResolvedScope({
           organisationId: selectedOrganisationId,
           eventId: selectedEventId || undefined,
-          appId: undefined
+          appId: appId
         });
         return;
       }
@@ -407,7 +438,11 @@ function DataTableInternal<TData extends DataRecord>({
             setResolvedScope(null);
             return;
           }
-          setResolvedScope(eventScope);
+          // Preserve the resolved app ID
+          setResolvedScope({
+            ...eventScope,
+            appId: appId || eventScope.appId
+          });
         } catch (error) {
           console.error('[DataTable] Error resolving scope from event:', error);
           setResolvedScope(null);
@@ -423,39 +458,11 @@ function DataTableInternal<TData extends DataRecord>({
     resolveScope();
   }, [selectedOrganisationId, selectedEventId, supabase]);
   
-  // DEBUG: Log the exact parameters being passed to useCan
-  console.log('[DataTable] useCan parameters:', {
-    userId: user?.id || '',
-    stableScope,
-    permission: `read:page.${effectivePageId}`,
-    effectivePageId,
-    useCache: true,
-    hasValidScope: !!(stableScope && stableScope.organisationId)
-  });
-  
-  // DEBUG: Log stableScope details separately to avoid console collapsing
-  console.log('[DataTable] stableScope details:');
-  console.log('  organisationId:', stableScope?.organisationId);
-  console.log('  eventId:', stableScope?.eventId);
-  console.log('  appId:', stableScope?.appId);
-  console.log('  stableScope type:', typeof stableScope);
-  console.log('  stableScope keys:', stableScope ? Object.keys(stableScope) : 'null');
-
   // Always call useCan hooks (React rules), but use a fallback scope if needed
   const fallbackScope = { organisationId: '', eventId: undefined, appId: undefined };
   const effectiveScope = stableScope && stableScope.organisationId ? stableScope : fallbackScope;
 
-  // TEMPORARY TEST: Bypass useCan to see if the issue is with the hook itself
-  const testBypass = true; // Set to true to test bypassing useCan
-  
-  const permissions = testBypass ? {
-    canRead: { can: true, isLoading: false, error: null, refetch: async () => {} },
-    canCreate: { can: true, isLoading: false, error: null, refetch: async () => {} },
-    canUpdate: { can: true, isLoading: false, error: null, refetch: async () => {} },
-    canDelete: { can: true, isLoading: false, error: null, refetch: async () => {} },
-    canExport: { can: true, isLoading: false, error: null, refetch: async () => {} },
-    canImport: { can: true, isLoading: false, error: null, refetch: async () => {} },
-  } : {
+  const permissions = {
     canRead: useCan(user?.id || '', effectiveScope, `read:page.${effectivePageId}` as any, effectivePageId, true),
     canCreate: useCan(user?.id || '', effectiveScope, `create:page.${effectivePageId}` as any, effectivePageId, true),
     canUpdate: useCan(user?.id || '', effectiveScope, `update:page.${effectivePageId}` as any, effectivePageId, true),
@@ -463,10 +470,6 @@ function DataTableInternal<TData extends DataRecord>({
     canExport: useCan(user?.id || '', effectiveScope, `manage:page.${effectivePageId}` as any, effectivePageId, true), // Using manage for export/import
     canImport: useCan(user?.id || '', effectiveScope, `manage:page.${effectivePageId}` as any, effectivePageId, true), // Using manage for export/import
   };
-  
-  if (testBypass) {
-    console.log('[DataTable] TEST BYPASS: Using hardcoded can: true for all permissions');
-  }
 
   // ============================================================================
   // CONFIGURATION RESOLUTION - ALWAYS call these hooks
@@ -900,50 +903,11 @@ function DataTableInternal<TData extends DataRecord>({
     throw new Error('DataTable requires authenticated user for RBAC');
   }
 
-  const scope = {
-    organisationId: user?.user_metadata?.organisationId || user?.app_metadata?.organisationId,
-    eventId: user?.user_metadata?.eventId || user?.app_metadata?.eventId,
-    appId: user?.user_metadata?.appId || user?.app_metadata?.appId,
-  };
 
   // MANDATORY: No data access without read permission
-  console.log('[DataTable] RBAC DEBUG - Basic Info:', {
-    effectivePageId,
-    pageId,
-    pageName,
-    userId: user?.id,
-    permission: `read:page.${effectivePageId}`
-  });
-  
-  console.log('[DataTable] RBAC DEBUG - CanRead Details:');
-  console.log('  can:', permissions.canRead.can);
-  console.log('  isLoading:', permissions.canRead.isLoading);
-  console.log('  error:', permissions.canRead.error);
-  console.log('  refetch type:', typeof permissions.canRead.refetch);
-  
-    console.log('[DataTable] RBAC DEBUG - Scope (FIXED):');
-    console.log('  resolvedScope:', resolvedScope);
-    console.log('  stableScope:', stableScope);
-    console.log('  organisationId:', stableScope?.organisationId);
-    console.log('  eventId:', stableScope?.eventId);
-    console.log('  appId:', stableScope?.appId);
-  
   if (!permissions.canRead.can) {
-    console.error('[DataTable] ACCESS DENIED - DataTable RBAC failing!');
-    console.error('  effectivePageId:', effectivePageId);
-    console.error('  canRead.can:', permissions.canRead.can);
-    console.error('  canRead.isLoading:', permissions.canRead.isLoading);
-    console.error('  canRead.error:', permissions.canRead.error);
-    console.error('  permission:', `read:page.${effectivePageId}`);
-    console.error('  Full canRead object:', permissions.canRead);
     return <AccessDeniedPage resource={effectivePageId || 'unknown-page'} operation="read" />;
   }
-  
-  console.log('[DataTable] ACCESS GRANTED - DataTable RBAC working!');
-  console.log('  effectivePageId:', effectivePageId);
-  console.log('  canRead.can:', permissions.canRead.can);
-  console.log('  canRead.isLoading:', permissions.canRead.isLoading);
-  console.log('  canRead.error:', permissions.canRead.error);
 
   // ============================================================================
   // RENDER