@jmruthers/pace-core 0.5.53 → 0.5.55

package/dist/rbac/index.d.ts

@@ -16,7 +16,7 @@ import '../unified-CMPjE_fv.js';
  */
 
 type UUID = string;
-type Operation = 'read' | 'create' | 'update' | 'delete' | 'manage';
+type Operation = 'read' | 'create' | 'update' | 'delete';
 type Permission = `${Operation}:${string}`;
 type AccessLevel = 'viewer' | 'participant' | 'planner' | 'admin' | 'super';
 type Scope = {
@@ -365,6 +365,8 @@ interface PermissionCheckAuditEvent {
     source: AuditEventSource;
     bypass?: boolean;
     duration_ms: number;
+    cache_hit?: boolean;
+    cache_source?: 'memory' | 'database' | 'rpc';
     metadata?: Record<string, any>;
 }
 /**
@@ -1819,82 +1821,79 @@ declare function hasAllPermissions(input: {
  */
 
 declare const GLOBAL_PERMISSIONS: {
-    readonly MANAGE_ALL: Permission;
     readonly READ_ALL: Permission;
     readonly CREATE_ALL: Permission;
     readonly UPDATE_ALL: Permission;
     readonly DELETE_ALL: Permission;
 };
 declare const ORGANISATION_PERMISSIONS: {
-    readonly MANAGE_ORGANISATION: Permission;
     readonly READ_ORGANISATION: Permission;
     readonly UPDATE_ORGANISATION: Permission;
-    readonly MANAGE_USERS: Permission;
+    readonly DELETE_ORGANISATION: Permission;
     readonly READ_USERS: Permission;
     readonly CREATE_USERS: Permission;
     readonly UPDATE_USERS: Permission;
     readonly DELETE_USERS: Permission;
-    readonly MANAGE_ROLES: Permission;
     readonly READ_ROLES: Permission;
     readonly CREATE_ROLES: Permission;
     readonly UPDATE_ROLES: Permission;
     readonly DELETE_ROLES: Permission;
-    readonly MANAGE_EVENTS: Permission;
     readonly READ_EVENTS: Permission;
     readonly CREATE_EVENTS: Permission;
     readonly UPDATE_EVENTS: Permission;
     readonly DELETE_EVENTS: Permission;
-    readonly MANAGE_APPS: Permission;
     readonly READ_APPS: Permission;
     readonly CREATE_APPS: Permission;
     readonly UPDATE_APPS: Permission;
     readonly DELETE_APPS: Permission;
 };
 declare const EVENT_APP_PERMISSIONS: {
-    readonly MANAGE_EVENT: Permission;
     readonly READ_EVENT: Permission;
+    readonly CREATE_EVENT: Permission;
     readonly UPDATE_EVENT: Permission;
-    readonly MANAGE_APP: Permission;
+    readonly DELETE_EVENT: Permission;
     readonly READ_APP: Permission;
+    readonly CREATE_APP: Permission;
     readonly UPDATE_APP: Permission;
-    readonly MANAGE_TEAM: Permission;
+    readonly DELETE_APP: Permission;
     readonly READ_TEAM: Permission;
     readonly CREATE_TEAM: Permission;
     readonly UPDATE_TEAM: Permission;
     readonly DELETE_TEAM: Permission;
-    readonly MANAGE_TEAM_MEMBERS: Permission;
     readonly READ_TEAM_MEMBERS: Permission;
     readonly CREATE_TEAM_MEMBERS: Permission;
     readonly UPDATE_TEAM_MEMBERS: Permission;
     readonly DELETE_TEAM_MEMBERS: Permission;
-    readonly MANAGE_EVENT_CONTENT: Permission;
     readonly READ_EVENT_CONTENT: Permission;
     readonly CREATE_EVENT_CONTENT: Permission;
     readonly UPDATE_EVENT_CONTENT: Permission;
     readonly DELETE_EVENT_CONTENT: Permission;
-    readonly MANAGE_EVENT_SETTINGS: Permission;
     readonly READ_EVENT_SETTINGS: Permission;
+    readonly CREATE_EVENT_SETTINGS: Permission;
     readonly UPDATE_EVENT_SETTINGS: Permission;
+    readonly DELETE_EVENT_SETTINGS: Permission;
 };
 declare const PAGE_PERMISSIONS: {
     readonly READ_PAGE: Permission;
-    readonly MANAGE_PAGE: Permission;
+    readonly CREATE_PAGE: Permission;
+    readonly UPDATE_PAGE: Permission;
+    readonly DELETE_PAGE: Permission;
     readonly READ_ADMIN: Permission;
-    readonly MANAGE_ADMIN: Permission;
+    readonly CREATE_ADMIN: Permission;
+    readonly UPDATE_ADMIN: Permission;
+    readonly DELETE_ADMIN: Permission;
     readonly READ_DASHBOARD: Permission;
-    readonly MANAGE_DASHBOARD: Permission;
+    readonly CREATE_DASHBOARD: Permission;
+    readonly UPDATE_DASHBOARD: Permission;
+    readonly DELETE_DASHBOARD: Permission;
     readonly READ_SETTINGS: Permission;
-    readonly MANAGE_SETTINGS: Permission;
+    readonly CREATE_SETTINGS: Permission;
+    readonly UPDATE_SETTINGS: Permission;
+    readonly DELETE_SETTINGS: Permission;
     readonly READ_REPORTS: Permission;
-    readonly MANAGE_REPORTS: Permission;
-};
-declare const PERMISSION_GROUPS: {
-    readonly GLOBAL_ADMIN: readonly [`read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`];
-    readonly ORG_ADMIN: readonly [`read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`];
-    readonly EVENT_ADMIN: readonly [`read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`];
-    readonly PLANNER: readonly [`read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`];
-    readonly PARTICIPANT: readonly [`read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`];
-    readonly VIEWER: readonly [`read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`, `read:${string}` | `create:${string}` | `update:${string}` | `delete:${string}` | `manage:${string}`];
+    readonly CREATE_REPORTS: Permission;
+    readonly UPDATE_REPORTS: Permission;
+    readonly DELETE_REPORTS: Permission;
 };
 /**
  * Validate that a permission string is properly formatted
@@ -1904,71 +1903,91 @@ declare const PERMISSION_GROUPS: {
  */
 declare function isValidPermission(permission: string): permission is Permission;
 /**
- * Get all permissions for a role
+ * Get all permissions for a role - REMOVED
+ *
+ * @deprecated This function has been removed to ensure RBAC compliance.
+ * Permissions must be queried from the rbac_page_permissions database table,
+ * not hardcoded in application code. This allows organizations to customize
+ * their own page-level permissions as required by the RBAC specification.
+ *
+ * To get permissions for a role, query the database:
+ * ```typescript
+ * const { data } = await supabase
+ *   .from('rbac_page_permissions')
+ *   .select('operation, allowed')
+ *   .eq('role_name', roleName)
+ *   .eq('organisation_id', organisationId)
+ *   .eq('allowed', true);
+ * ```
  *
  * @param role - Role name
- * @returns Array of permissions for the role
+ * @returns Empty array (function deprecated)
  */
 declare function getPermissionsForRole(role: string): Permission[];
 declare const ALL_PERMISSIONS: {
     readonly READ_PAGE: Permission;
-    readonly MANAGE_PAGE: Permission;
+    readonly CREATE_PAGE: Permission;
+    readonly UPDATE_PAGE: Permission;
+    readonly DELETE_PAGE: Permission;
     readonly READ_ADMIN: Permission;
-    readonly MANAGE_ADMIN: Permission;
+    readonly CREATE_ADMIN: Permission;
+    readonly UPDATE_ADMIN: Permission;
+    readonly DELETE_ADMIN: Permission;
     readonly READ_DASHBOARD: Permission;
-    readonly MANAGE_DASHBOARD: Permission;
+    readonly CREATE_DASHBOARD: Permission;
+    readonly UPDATE_DASHBOARD: Permission;
+    readonly DELETE_DASHBOARD: Permission;
     readonly READ_SETTINGS: Permission;
-    readonly MANAGE_SETTINGS: Permission;
+    readonly CREATE_SETTINGS: Permission;
+    readonly UPDATE_SETTINGS: Permission;
+    readonly DELETE_SETTINGS: Permission;
     readonly READ_REPORTS: Permission;
-    readonly MANAGE_REPORTS: Permission;
-    readonly MANAGE_EVENT: Permission;
+    readonly CREATE_REPORTS: Permission;
+    readonly UPDATE_REPORTS: Permission;
+    readonly DELETE_REPORTS: Permission;
     readonly READ_EVENT: Permission;
+    readonly CREATE_EVENT: Permission;
     readonly UPDATE_EVENT: Permission;
-    readonly MANAGE_APP: Permission;
+    readonly DELETE_EVENT: Permission;
     readonly READ_APP: Permission;
+    readonly CREATE_APP: Permission;
     readonly UPDATE_APP: Permission;
-    readonly MANAGE_TEAM: Permission;
+    readonly DELETE_APP: Permission;
     readonly READ_TEAM: Permission;
     readonly CREATE_TEAM: Permission;
     readonly UPDATE_TEAM: Permission;
     readonly DELETE_TEAM: Permission;
-    readonly MANAGE_TEAM_MEMBERS: Permission;
     readonly READ_TEAM_MEMBERS: Permission;
     readonly CREATE_TEAM_MEMBERS: Permission;
     readonly UPDATE_TEAM_MEMBERS: Permission;
     readonly DELETE_TEAM_MEMBERS: Permission;
-    readonly MANAGE_EVENT_CONTENT: Permission;
     readonly READ_EVENT_CONTENT: Permission;
     readonly CREATE_EVENT_CONTENT: Permission;
     readonly UPDATE_EVENT_CONTENT: Permission;
     readonly DELETE_EVENT_CONTENT: Permission;
-    readonly MANAGE_EVENT_SETTINGS: Permission;
     readonly READ_EVENT_SETTINGS: Permission;
+    readonly CREATE_EVENT_SETTINGS: Permission;
     readonly UPDATE_EVENT_SETTINGS: Permission;
-    readonly MANAGE_ORGANISATION: Permission;
+    readonly DELETE_EVENT_SETTINGS: Permission;
     readonly READ_ORGANISATION: Permission;
     readonly UPDATE_ORGANISATION: Permission;
-    readonly MANAGE_USERS: Permission;
+    readonly DELETE_ORGANISATION: Permission;
     readonly READ_USERS: Permission;
     readonly CREATE_USERS: Permission;
     readonly UPDATE_USERS: Permission;
     readonly DELETE_USERS: Permission;
-    readonly MANAGE_ROLES: Permission;
     readonly READ_ROLES: Permission;
     readonly CREATE_ROLES: Permission;
     readonly UPDATE_ROLES: Permission;
     readonly DELETE_ROLES: Permission;
-    readonly MANAGE_EVENTS: Permission;
     readonly READ_EVENTS: Permission;
     readonly CREATE_EVENTS: Permission;
     readonly UPDATE_EVENTS: Permission;
     readonly DELETE_EVENTS: Permission;
-    readonly MANAGE_APPS: Permission;
     readonly READ_APPS: Permission;
     readonly CREATE_APPS: Permission;
     readonly UPDATE_APPS: Permission;
     readonly DELETE_APPS: Permission;
-    readonly MANAGE_ALL: Permission;
     readonly READ_ALL: Permission;
     readonly CREATE_ALL: Permission;
     readonly UPDATE_ALL: Permission;
@@ -1976,4 +1995,4 @@ declare const ALL_PERMISSIONS: {
 };
 type AllPermissions = typeof ALL_PERMISSIONS;
 
-export { ALL_PERMISSIONS, type AccessLevel, AccessLevelGuard, type AllPermissions, CACHE_PATTERNS, type DataAccessRecord, EVENT_APP_PERMISSIONS, EnhancedNavigationMenu, type EnhancedNavigationMenuProps, type EventAppRole, GLOBAL_PERMISSIONS, type GlobalRole, InvalidScopeError, type LogLevel, MissingUserContextError, type NavigationAccessRecord, type NavigationContextType, NavigationGuard, type NavigationGuardProps, type NavigationItem, NavigationProvider, type NavigationProviderProps, ORGANISATION_PERMISSIONS, type Operation, OrganisationContextRequiredError, type OrganisationRole, PAGE_PERMISSIONS, PERMISSION_GROUPS, type PageAccessRecord, type PagePermissionContextType, PagePermissionGuard, type PagePermissionGuardProps, PagePermissionProvider, type PagePermissionProviderProps, type Permission, type PermissionCheck, PermissionDeniedError, PermissionEnforcer, type PermissionEnforcerProps, PermissionGuard, type PermissionMap, RBACAuditManager, RBACCache, type RBACConfig, RBACEngine, RBACError, type RBACLogger, RBACNotInitializedError, RoleBasedRouter, type RoleBasedRouterContextType, type RoleBasedRouterProps, type RouteAccessRecord, type RouteConfig, type Scope, type SecureDataContextType, SecureDataProvider, type SecureDataProviderProps, SecureSupabaseClient, type UUID, createAuditManager, createRBACConfig, createRBACEngine, createRBACExpressMiddleware, createRBACMiddleware, createSecureClient, emitAuditEvent, fromSupabaseClient, getAccessLevel, getGlobalAuditManager, getPermissionMap, getPermissionsForRole, getRBACConfig, getRBACLogger, hasAllPermissions, hasAnyPermission, hasAnyPermissionCached, hasPermission, hasPermissionCached, isDebugMode, isDevelopmentMode, isPermitted, isPermittedCached, isValidPermission, rbacCache, setGlobalAuditManager, setupRBAC, useAccessLevel, useCachedPermissions, useCan, useHasAllPermissions, useHasAnyPermission, useMultiplePermissions, useNavigationPermissions, usePagePermissions, usePermissions, useRBAC, useRoleBasedRouter, useSecureData, withAccessLevelGuard, withPermissionGuard, withRoleGuard };
+export { ALL_PERMISSIONS, type AccessLevel, AccessLevelGuard, type AllPermissions, CACHE_PATTERNS, type DataAccessRecord, EVENT_APP_PERMISSIONS, EnhancedNavigationMenu, type EnhancedNavigationMenuProps, type EventAppRole, GLOBAL_PERMISSIONS, type GlobalRole, InvalidScopeError, type LogLevel, MissingUserContextError, type NavigationAccessRecord, type NavigationContextType, NavigationGuard, type NavigationGuardProps, type NavigationItem, NavigationProvider, type NavigationProviderProps, ORGANISATION_PERMISSIONS, type Operation, OrganisationContextRequiredError, type OrganisationRole, PAGE_PERMISSIONS, type PageAccessRecord, type PagePermissionContextType, PagePermissionGuard, type PagePermissionGuardProps, PagePermissionProvider, type PagePermissionProviderProps, type Permission, type PermissionCheck, PermissionDeniedError, PermissionEnforcer, type PermissionEnforcerProps, PermissionGuard, type PermissionMap, RBACAuditManager, RBACCache, type RBACConfig, RBACEngine, RBACError, type RBACLogger, RBACNotInitializedError, RoleBasedRouter, type RoleBasedRouterContextType, type RoleBasedRouterProps, type RouteAccessRecord, type RouteConfig, type Scope, type SecureDataContextType, SecureDataProvider, type SecureDataProviderProps, SecureSupabaseClient, type UUID, createAuditManager, createRBACConfig, createRBACEngine, createRBACExpressMiddleware, createRBACMiddleware, createSecureClient, emitAuditEvent, fromSupabaseClient, getAccessLevel, getGlobalAuditManager, getPermissionMap, getPermissionsForRole, getRBACConfig, getRBACLogger, hasAllPermissions, hasAnyPermission, hasAnyPermissionCached, hasPermission, hasPermissionCached, isDebugMode, isDevelopmentMode, isPermitted, isPermittedCached, isValidPermission, rbacCache, setGlobalAuditManager, setupRBAC, useAccessLevel, useCachedPermissions, useCan, useHasAllPermissions, useHasAnyPermission, useMultiplePermissions, useNavigationPermissions, usePagePermissions, usePermissions, useRBAC, useRoleBasedRouter, useSecureData, withAccessLevelGuard, withPermissionGuard, withRoleGuard };

package/dist/rbac/index.js

@@ -8,7 +8,6 @@ import {
   NavigationProvider,
   ORGANISATION_PERMISSIONS,
   PAGE_PERMISSIONS,
-  PERMISSION_GROUPS,
   PagePermissionGuard,
   PagePermissionProvider,
   PermissionEnforcer,
@@ -31,7 +30,7 @@ import {
   withAccessLevelGuard,
   withPermissionGuard,
   withRoleGuard
-} from "../chunk-GIO7BFE7.js";
+} from "../chunk-RQD3D2CO.js";
 import "../chunk-TYHR5X4W.js";
 import {
   useAccessLevel,
@@ -42,7 +41,7 @@ import {
   useMultiplePermissions,
   usePermissions,
   useRBAC as useRBAC2
-} from "../chunk-BC3S53OZ.js";
+} from "../chunk-UQE2Y64H.js";
 import {
   CACHE_PATTERNS,
   RBACCache,
@@ -62,23 +61,23 @@ import {
   isPermittedCached,
   rbacCache,
   setupRBAC
-} from "../chunk-GWSBHC4J.js";
+} from "../chunk-KLPVOPRI.js";
 import {
   RBACAuditManager,
   createAuditManager,
   emitAuditEvent,
   getGlobalAuditManager,
   setGlobalAuditManager
-} from "../chunk-7BNPOCLL.js";
-import "../chunk-NRK4AIHQ.js";
-import "../chunk-NZ655MWE.js";
+} from "../chunk-B2WTCLCV.js";
+import "../chunk-KBRACSJI.js";
+import "../chunk-ZOD2ZY6X.js";
 import {
   RBACProvider,
   useRBAC
-} from "../chunk-EL2O4IUX.js";
-import "../chunk-YDJW5XTN.js";
-import "../chunk-MZBUOP4P.js";
-import "../chunk-WJARTBCT.js";
+} from "../chunk-AQFRLC7K.js";
+import "../chunk-STT7INZR.js";
+import "../chunk-5BSLGBYI.js";
+import "../chunk-D7ARGIA3.js";
 import "../chunk-PLDDJCW6.js";
 export {
   ALL_PERMISSIONS,
@@ -91,7 +90,6 @@ export {
   NavigationProvider,
   ORGANISATION_PERMISSIONS,
   PAGE_PERMISSIONS,
-  PERMISSION_GROUPS,
   PagePermissionGuard,
   PagePermissionProvider,
   PermissionEnforcer,

package/dist/styles/core.css

@@ -33,23 +33,6 @@
   --color-card: var(--color-main-50);
   --color-card-foreground: var(--color-main-950);
 
-  /* Print-specific variables */
-  --print-margin: 0.5in;
-  --print-font-size: 12pt;
-  --print-line-height: 1.4;
-  --print-color: #000;
-  --print-bg: #fff;
-  --print-first-page-margin: 1in;
-  --print-cover-logo-size: 120px;
-  --print-cover-title-size: 2.5rem;
-  --print-page-width: 8.27in;
-  /* A4 width */
-  --print-page-height: 11.69in;
-  /* A4 height */
-  --print-landscape-width: 11.69in;
-  /* A4 landscape width */
-  --print-landscape-height: 8.27in;
-  /* A4 landscape height */
 }
 
 @layer base {
@@ -256,112 +239,4 @@
 
 @layer utilities {
 
-  /* Print-specific utilities */
-  .print-break-avoid {
-    page-break-inside: avoid;
-  }
-
-  .print-break-before {
-    page-break-before: always;
-  }
-
-  .print-break-after {
-    page-break-after: always;
-  }
-
-  /* Print page size controls */
-  .print-a4-portrait {
-    @media print {
-      @page {
-        size: A4 portrait;
-        margin: var(--print-margin);
-      }
-    }
-  }
-
-  .print-a4-landscape {
-    @media print {
-      @page {
-        size: A4 landscape;
-        margin: var(--print-margin);
-      }
-    }
-  }
-
-  /* First page header styles */
-  .print-first-page-header {
-    @media print {
-      @page :first {
-        margin-top: var(--print-first-page-margin);
-      }
-    }
-  }
-
-  .print-cover-header {
-    @media print {
-      @page :first {
-        margin-top: var(--print-first-page-margin);
-      }
-    }
-  }
-
-  .print-subsequent-header {
-    @media print {
-      @page :not(:first) {
-        margin-top: var(--print-margin);
-      }
-    }
-  }
-
-  /* Print-specific layouts */
-  @media print {
-    .print-hidden {
-      display: none !important;
-    }
-
-    .print-visible {
-      display: block !important;
-    }
-
-    .print-first-page-only {
-      display: block;
-    }
-
-    .print-subsequent-pages-only {
-      display: none;
-    }
-  }
-
-  @media print {
-    @page :not(:first) {
-      .print-first-page-only {
-        display: none !important;
-      }
-
-      .print-subsequent-pages-only {
-        display: block !important;
-      }
-    }
-  }
-
-  /* Print typography */
-  .print-text {
-    @media print {
-      font-size: var(--print-font-size);
-      line-height: var(--print-line-height);
-      color: var(--print-color);
-    }
-  }
-
-  /* Print layout container */
-  .print-layout {
-    @media print {
-      width: 100%;
-      max-width: none;
-      margin: 0;
-      padding: 0;
-      background: var(--print-bg);
-      color: var(--print-color);
-    }
-  }
 }

package/dist/types.d.ts

@@ -3,6 +3,7 @@ export { D as DataRecord, t as DataTableAction, u as DataTableColumn, r as Event
 import { SupabaseClient } from '@supabase/supabase-js';
 export { D as Database } from './database-C3Szpi5J.js';
 export { C as ChangePasswordFormValues, t as ContactFormData, F as FormData, m as LoginFormData, L as LoginFormValues, P as PasswordResetFormValues, q as ProfileFormData, o as RegistrationFormData, R as RegistrationFormValues, S as SecureLoginFormValues, k as SecurePasswordResetFormValues, j as SecureRegistrationFormValues, U as UserProfileFormValues, V as ValidationError, a as ValidationResult, g as changePasswordSchema, w as combineSchemas, i as contactFormSchema, d as dateSchema, e as emailSchema, l as loginSchema, n as nameSchema, f as passwordResetSchema, b as passwordSchema, p as phoneSchema, v as pickSchema, r as registrationSchema, c as secureLoginSchema, s as securePasswordSchema, u as urlSchema, h as userProfileSchema } from './validation-PM_iOaTI.js';
+export { b as FileCategory, a as FileMetadata, F as FileReference, d as FileReferenceService, c as FileUploadOptions, e as FileUploadResult, S as StorageUploadOptions } from './file-reference-9xUOnwyt.js';
 import 'zod';
 
 /**
@@ -102,7 +103,7 @@ type TableName = 'users' | 'rbac_global_roles' | 'rbac_organisation_roles' | 'rb
 /**
  * Supabase RPC function names
  */
-type RPCFunction = 'get_rbac_permissions' | 'get_user_app_permissions' | 'get_user_current_roles' | 'get_user_event_access' | 'get_user_events' | 'get_user_organisations' | 'get_user_organisation_ids' | 'get_user_effective_organisations' | 'get_app_config' | 'get_organisation_apps' | 'get_organisation_hierarchy' | 'grant_user_role' | 'revoke_user_role' | 'grant_direct_app_access' | 'revoke_direct_app_access' | 'check_page_permission' | 'has_organisation_permission' | 'has_organisation_role' | 'user_has_role_in_org' | 'user_has_min_role_in_org' | 'can_access_event' | 'can_access_organisation' | 'is_super_admin' | 'is_admin' | 'track_user_session' | 'record_user_login' | 'log_organisation_access' | 'log_medi_access' | 'get_pace_user_events';
+type RPCFunction = 'rbac_permission_check' | 'rbac_permissions_get' | 'rbac_access_validate' | 'rbac_page_access_check' | 'rbac_role_grant' | 'rbac_role_revoke' | 'rbac_roles_list' | 'rbac_role_validate' | 'rbac_session_track' | 'rbac_audit_log' | 'get_pace_user_events';
 /**
  * Helper type for Supabase filter operations
  */

package/dist/types.js

@@ -19,6 +19,7 @@ import {
 import {
   AccessLevel,
   AuthErrorCode,
+  FileCategory,
   PermissionErrorCode,
   createPermissionString,
   createRequestId,
@@ -29,7 +30,7 @@ import {
   isRequestId,
   isSessionToken,
   isUserId
-} from "./chunk-YDJW5XTN.js";
+} from "./chunk-STT7INZR.js";
 import "./chunk-PLDDJCW6.js";
 
 // src/types/index.ts
@@ -51,6 +52,7 @@ function isSession(obj) {
 export {
   AccessLevel,
   AuthErrorCode,
+  FileCategory,
   PermissionErrorCode,
   changePasswordSchema,
   combineSchemas,

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types/index.ts","../src/types/guards.ts"],"sourcesContent":["/**\n * @file Types Module Exports\n * @package @jmruthers/pace-core\n * @module Types\n * @since 0.1.0\n * \n * Complete collection of type definitions for the PACE Core library.\n * Use this import path when you need access to types not included in the main export.\n * \n * @example\n * // Specialized type imports\n * import { User, Event, AccessLevel } from '@jmruthers/pace-core/types';\n * \n * // For common types, prefer the main export:\n * import { ButtonProps, CardProps } from '@jmruthers/pace-core';\n */\n\n// Core type exports\nexport * from './unified';\nexport * from './supabase';\nexport * from './database';\nexport * from './guards';\nexport * from './validation';\nexport * from './theme';\nexport * from './security';\n","\n/**\n * @file Type Guards\n */\n\nimport { AuthErrorCode, User, Session } from './unified';\n\nexport function isAuthErrorCode(code: string): code is AuthErrorCode {\n  return Object.values(AuthErrorCode).includes(code as AuthErrorCode);\n}\n\nexport function isUser(obj: unknown): obj is User {\n  const candidate = obj as Partial<User> | null | undefined;\n  return (\n    candidate != null &&\n    typeof candidate === 'object' &&\n    typeof candidate.id === 'string' &&\n    typeof candidate.created_at === 'string'\n  );\n}\n\nexport function isSession(obj: unknown): obj is Session {\n  const candidate = obj as Partial<Session> | null | undefined;\n  return (\n    candidate != null &&\n    typeof candidate === 'object' &&\n    typeof candidate.access_token === 'string' &&\n    typeof candidate.user === 'object'\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA;;;ACbA;AAEO,SAAS,gBAAgB,MAAqC;AACnE,SAAO,OAAO,OAAO,aAAa,EAAE,SAAS,IAAqB;AACpE;AAEO,SAAS,OAAO,KAA2B;AAChD,QAAM,YAAY;AAClB,SACE,aAAa,QACb,OAAO,cAAc,YACrB,OAAO,UAAU,OAAO,YACxB,OAAO,UAAU,eAAe;AAEpC;AAEO,SAAS,UAAU,KAA8B;AACtD,QAAM,YAAY;AAClB,SACE,aAAa,QACb,OAAO,cAAc,YACrB,OAAO,UAAU,iBAAiB,YAClC,OAAO,UAAU,SAAS;AAE9B;","names":[]}
+{"version":3,"sources":["../src/types/index.ts","../src/types/guards.ts"],"sourcesContent":["/**\n * @file Types Module Exports\n * @package @jmruthers/pace-core\n * @module Types\n * @since 0.1.0\n * \n * Complete collection of type definitions for the PACE Core library.\n * Use this import path when you need access to types not included in the main export.\n * \n * @example\n * // Specialized type imports\n * import { User, Event, AccessLevel } from '@jmruthers/pace-core/types';\n * \n * // For common types, prefer the main export:\n * import { ButtonProps, CardProps } from '@jmruthers/pace-core';\n */\n\n// Core type exports\nexport * from './unified';\nexport * from './supabase';\nexport * from './database';\nexport * from './guards';\nexport * from './validation';\nexport * from './theme';\nexport * from './security';\n","\n/**\n * @file Type Guards\n */\n\nimport { AuthErrorCode, User, Session } from './unified';\n\nexport function isAuthErrorCode(code: string): code is AuthErrorCode {\n  return Object.values(AuthErrorCode).includes(code as AuthErrorCode);\n}\n\nexport function isUser(obj: unknown): obj is User {\n  const candidate = obj as Partial<User> | null | undefined;\n  return (\n    candidate != null &&\n    typeof candidate === 'object' &&\n    typeof candidate.id === 'string' &&\n    typeof candidate.created_at === 'string'\n  );\n}\n\nexport function isSession(obj: unknown): obj is Session {\n  const candidate = obj as Partial<Session> | null | undefined;\n  return (\n    candidate != null &&\n    typeof candidate === 'object' &&\n    typeof candidate.access_token === 'string' &&\n    typeof candidate.user === 'object'\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA;;;ACbA;AAEO,SAAS,gBAAgB,MAAqC;AACnE,SAAO,OAAO,OAAO,aAAa,EAAE,SAAS,IAAqB;AACpE;AAEO,SAAS,OAAO,KAA2B;AAChD,QAAM,YAAY;AAClB,SACE,aAAa,QACb,OAAO,cAAc,YACrB,OAAO,UAAU,OAAO,YACxB,OAAO,UAAU,eAAe;AAEpC;AAEO,SAAS,UAAU,KAA8B;AACtD,QAAM,YAAY;AAClB,SACE,aAAa,QACb,OAAO,cAAc,YACrB,OAAO,UAAU,iBAAiB,YAClC,OAAO,UAAU,SAAS;AAE9B;","names":[]}

package/dist/{usePublicRouteParams-B2OcAsur.d.ts → usePublicRouteParams-CdoFxnJK.d.ts}

@@ -1,4 +1,4 @@
-import { e as OrganisationRole, f as OrganisationPermission, g as SuperAdminContext } from './organisation-CO3Sh3_D.js';
+import { O as OrganisationRole, a as OrganisationPermission, S as SuperAdminContext } from './organisation-t-vvQC3g.js';
 import { r as Event } from './unified-CMPjE_fv.js';
 import { SupabaseClient } from '@supabase/supabase-js';
 import { D as Database } from './database-C3Szpi5J.js';

package/dist/utils.d.ts

@@ -1,11 +1,10 @@
-export { A as AppConfig, S as SecureDataAccess, a as cn, g as getAppConfig, d as getCurrentAppId, b as getCurrentAppName, s as setAppConfig } from './appConfig-BVGyuvI7.js';
+export { A as AppConfig, S as SecureDataAccess, a as cn, g as getAppConfig, d as getCurrentAppId, b as getCurrentAppName, s as setAppConfig } from './appConfig-DjpeG6P-.js';
 import { z } from 'zod';
 export { u as useComponentPerformance } from './useComponentPerformance-DE9l5RkL.js';
 import * as date_fns from 'date-fns';
 import { D as DataTable } from './DataTable-DqDDvBfI.js';
 import React__default, { ComponentType } from 'react';
 import { SupabaseClient } from '@supabase/supabase-js';
-import './organisation-CO3Sh3_D.js';
 import 'clsx';
 import 'react/jsx-runtime';
 import './types-E5WSpEtz.js';
@@ -419,8 +418,8 @@ declare const LazyDataTable: typeof DataTable;
  */
 declare function transformPermissionMapToBoolean(permissions: Record<string, unknown>): Record<string, boolean>;
 declare function hasPermission(permissions: Record<string, boolean>, permission: string): boolean;
-declare function hasAnyPermission(permissions: Record<string, boolean>, permissionList: string[]): boolean;
-declare function hasAllPermissions(permissions: Record<string, boolean>, permissionList: string[]): boolean;
+declare function hasAnyPermission(permissions: Record<string, boolean>, permissionList: string[] | null | undefined): boolean;
+declare function hasAllPermissions(permissions: Record<string, boolean>, permissionList: string[] | null | undefined): boolean;
 
 /**
  * @file Permission type definitions and utilities