@jmruthers/pace-core 0.5.53 → 0.5.55

package/src/styles/core.css

@@ -33,23 +33,6 @@
   --color-card: var(--color-main-50);
   --color-card-foreground: var(--color-main-950);
 
-  /* Print-specific variables */
-  --print-margin: 0.5in;
-  --print-font-size: 12pt;
-  --print-line-height: 1.4;
-  --print-color: #000;
-  --print-bg: #fff;
-  --print-first-page-margin: 1in;
-  --print-cover-logo-size: 120px;
-  --print-cover-title-size: 2.5rem;
-  --print-page-width: 8.27in;
-  /* A4 width */
-  --print-page-height: 11.69in;
-  /* A4 height */
-  --print-landscape-width: 11.69in;
-  /* A4 landscape width */
-  --print-landscape-height: 8.27in;
-  /* A4 landscape height */
 }
 
 @layer base {
@@ -256,112 +239,4 @@
 
 @layer utilities {
 
-  /* Print-specific utilities */
-  .print-break-avoid {
-    page-break-inside: avoid;
-  }
-
-  .print-break-before {
-    page-break-before: always;
-  }
-
-  .print-break-after {
-    page-break-after: always;
-  }
-
-  /* Print page size controls */
-  .print-a4-portrait {
-    @media print {
-      @page {
-        size: A4 portrait;
-        margin: var(--print-margin);
-      }
-    }
-  }
-
-  .print-a4-landscape {
-    @media print {
-      @page {
-        size: A4 landscape;
-        margin: var(--print-margin);
-      }
-    }
-  }
-
-  /* First page header styles */
-  .print-first-page-header {
-    @media print {
-      @page :first {
-        margin-top: var(--print-first-page-margin);
-      }
-    }
-  }
-
-  .print-cover-header {
-    @media print {
-      @page :first {
-        margin-top: var(--print-first-page-margin);
-      }
-    }
-  }
-
-  .print-subsequent-header {
-    @media print {
-      @page :not(:first) {
-        margin-top: var(--print-margin);
-      }
-    }
-  }
-
-  /* Print-specific layouts */
-  @media print {
-    .print-hidden {
-      display: none !important;
-    }
-
-    .print-visible {
-      display: block !important;
-    }
-
-    .print-first-page-only {
-      display: block;
-    }
-
-    .print-subsequent-pages-only {
-      display: none;
-    }
-  }
-
-  @media print {
-    @page :not(:first) {
-      .print-first-page-only {
-        display: none !important;
-      }
-
-      .print-subsequent-pages-only {
-        display: block !important;
-      }
-    }
-  }
-
-  /* Print typography */
-  .print-text {
-    @media print {
-      font-size: var(--print-font-size);
-      line-height: var(--print-line-height);
-      color: var(--print-color);
-    }
-  }
-
-  /* Print layout container */
-  .print-layout {
-    @media print {
-      width: 100%;
-      max-width: none;
-      margin: 0;
-      padding: 0;
-      background: var(--print-bg);
-      color: var(--print-color);
-    }
-  }
 }

package/src/styles/semantic.css

@@ -0,0 +1,24 @@
+@import "tailwindcss";
+
+@theme inline {
+  /* Semantic token mapping */
+  --color-border: var(--color-app-main-500);
+  --color-input: var(--color-app-sec-200);
+  --color-ring: var(--color-app-main-950);
+  --color-background: var(--color-app-main-50);
+  --color-foreground: var(--color-app-main-950);
+  --color-primary: var(--color-app-main-600);
+  --color-primary-foreground: var(--color-app-main-50);
+  --color-secondary: var(--color-app-sec-400);
+  --color-secondary-foreground: var(--color-app-main-950);
+  --color-destructive: var(--color-app-acc-700);
+  --color-destructive-foreground: var(--color-app-main-50);
+  --color-muted: var(--color-app-sec-100);
+  --color-muted-foreground: var(--color-app-main-700);
+  --color-accent: var(--color-app-acc-400);
+  --color-accent-foreground: var(--color-app-main-950);
+  --color-popover: var(--color-app-main-50);
+  --color-popover-foreground: var(--color-app-main-950);
+  --color-card: var(--color-app-main-50);
+  --color-card-foreground: var(--color-app-main-950);
+}

package/src/types/file-reference.ts

@@ -0,0 +1,77 @@
+// File Reference System Types
+// These types define the structure for the centralized file reference system
+
+export interface FileReference {
+  id: string;
+  table_name: string;
+  record_id: string;
+  file_path: string;
+  file_metadata: FileMetadata;
+  organisation_id: string;
+  app_id: string;
+  is_public: boolean;
+  created_at: string;
+  updated_at: string;
+}
+
+export interface FileMetadata {
+  fileName: string;
+  fileType: string;
+  fileSize?: number;
+  width?: number;
+  height?: number;
+  category: FileCategory;
+  hash?: string;
+  uploadedBy?: string;
+  uploadedAt?: string;
+  tags?: string[];
+  customMetadata?: Record<string, any>;
+}
+
+export enum FileCategory {
+  PROFILE_PHOTOS = 'profile_photos',
+  ID_DOCUMENTS = 'id_documents',
+  QUALIFICATIONS = 'qualifications',
+  MEDICAL_DOCUMENTS = 'medical_documents',
+  DISH_IMAGES = 'dish_images',
+  EVENT_LOGOS = 'event_logos',
+  GENERAL_DOCUMENTS = 'general_documents',
+  IMAGES = 'images',
+  AUDIO = 'audio',
+  VIDEO = 'video',
+  ARCHIVES = 'archives'
+}
+
+export interface FileUploadOptions {
+  table_name: string;
+  record_id: string;
+  organisation_id: string;
+  app_id: string;
+  category: FileCategory;
+  is_public?: boolean;
+  custom_metadata?: Record<string, any>;
+}
+
+export interface FileReferenceService {
+  createFileReference(options: FileUploadOptions, file: File): Promise<FileReference>;
+  getFileReference(table_name: string, record_id: string, organisation_id: string): Promise<FileReference | null>;
+  getFileUrl(table_name: string, record_id: string, organisation_id: string): Promise<string | null>;
+  getSignedUrl(table_name: string, record_id: string, organisation_id: string, expires_in?: number): Promise<string | null>;
+  updateFileReference(id: string, updates: Partial<FileReference>): Promise<FileReference>;
+  deleteFileReference(table_name: string, record_id: string, organisation_id: string, delete_file?: boolean): Promise<boolean>;
+  listFileReferences(table_name: string, record_id: string, organisation_id: string): Promise<FileReference[]>;
+  getFileCount(table_name: string, record_id: string, organisation_id: string): Promise<number>;
+}
+
+export interface StorageUploadOptions {
+  orgId: string;
+  category: FileCategory;
+  isPublic?: boolean;
+  customPath?: string;
+}
+
+export interface FileUploadResult {
+  file_reference: FileReference;
+  file_url: string;
+  signed_url?: string;
+}

package/src/types/rbac-functions.ts

@@ -0,0 +1,290 @@
+/**
+ * @file RBAC Function Types
+ * @package @jmruthers/pace-core
+ * @module RBAC/Types
+ * @since 1.0.0
+ * 
+ * TypeScript types for standardized RBAC functions.
+ */
+
+import { UUID } from '../rbac/types';
+
+// ============================================================================
+// PERMISSION CHECKING FUNCTION TYPES
+// ============================================================================
+
+export interface RBACPermissionCheckParams {
+  p_operation: string;
+  p_page_name: string;
+  p_user_id?: UUID;
+  p_organisation_id?: UUID;
+  p_event_id?: string;
+  p_app_id?: UUID;
+}
+
+export interface RBACPermissionCheckResult {
+  has_permission: boolean;
+  role_name: string | null;
+  permission_source: 'global' | 'organisation' | 'event_app' | 'default' | 'none';
+  granted_at: string | null;
+}
+
+export interface RBACPermissionsGetParams {
+  p_user_id?: UUID;
+  p_organisation_id?: UUID;
+  p_event_id?: string;
+  p_app_id?: UUID;
+}
+
+export interface RBACPermissionsGetResult {
+  permission_type: string;
+  role_name: string;
+  has_permission: boolean;
+  granted_at: string;
+  context_id: string;
+}
+
+export interface RBACAccessValidateParams {
+  p_resource_type: 'organisation' | 'event';
+  p_resource_id: string;
+  p_user_id?: UUID;
+  p_operation?: string;
+}
+
+export interface RBACAccessValidateResult {
+  has_access: boolean;
+  access_level: 'super_admin' | 'organisation' | 'event' | 'none';
+  context_id: string | null;
+}
+
+export interface RBACPageAccessCheckParams {
+  p_app_id: UUID;
+  p_page_id: string;
+  p_operation: string;
+  p_user_id?: UUID;
+  p_event_id?: string;
+  p_organisation_id?: UUID;
+}
+
+// ============================================================================
+// ROLE MANAGEMENT FUNCTION TYPES
+// ============================================================================
+
+export interface RBACRoleGrantParams {
+  p_user_id: UUID;
+  p_role_type: 'global' | 'organisation' | 'event_app';
+  p_role_name: string;
+  p_context_id?: string;
+  p_granted_by?: UUID;
+}
+
+export interface RBACRoleGrantResult {
+  success: boolean;
+  message: string;
+  role_id: UUID | null;
+  error_code: string | null;
+}
+
+export interface RBACRoleRevokeParams {
+  p_user_id: UUID;
+  p_role_type: 'global' | 'organisation' | 'event_app';
+  p_role_name: string;
+  p_context_id?: string;
+  p_revoked_by?: UUID;
+}
+
+export interface RBACRoleRevokeResult {
+  success: boolean;
+  message: string;
+  revoked_count: number;
+  error_code: string | null;
+}
+
+export interface RBACRolesListParams {
+  p_user_id?: UUID;
+  p_organisation_id?: UUID;
+  p_event_id?: string;
+  p_app_id?: UUID;
+}
+
+export interface RBACRolesListResult {
+  role_type: 'global' | 'organisation' | 'event_app';
+  role_name: string;
+  context_id: string;
+  granted_at: string;
+  status: 'active' | 'inactive' | 'expired';
+  granted_by: UUID | null;
+}
+
+export interface RBACRoleValidateParams {
+  p_user_id: UUID;
+  p_role_type: 'global' | 'organisation' | 'event_app';
+  p_role_name: string;
+  p_context_id?: string;
+}
+
+export interface RBACRoleValidateResult {
+  is_valid: boolean;
+  role_id: UUID | null;
+  granted_at: string | null;
+  expires_at: string | null;
+  status: string;
+}
+
+// ============================================================================
+// SESSION & AUDIT FUNCTION TYPES
+// ============================================================================
+
+export interface RBACSessionTrackParams {
+  p_user_id?: UUID;
+  p_session_type?: 'web' | 'mobile' | 'api' | 'admin';
+  p_event_id?: string;
+  p_app_id?: UUID;
+  p_ip_address?: string;
+  p_user_agent?: string;
+}
+
+export interface RBACSessionTrackResult {
+  success: boolean;
+  session_id: UUID | null;
+  message: string;
+  error_code: string | null;
+}
+
+export interface RBACAuditLogParams {
+  p_event_type: 'role_granted' | 'role_revoked' | 'permission_checked' | 'access_granted' | 'access_denied' | 'session_started' | 'session_ended' | 'login' | 'logout' | 'organisation_switched' | 'event_switched' | 'app_switched';
+  p_user_id?: UUID;
+  p_organisation_id?: UUID;
+  p_permission?: string;
+  p_metadata?: Record<string, any>;
+  p_ip_address?: string;
+  p_user_agent?: string;
+}
+
+export interface RBACAuditLogResult {
+  success: boolean;
+  audit_id: UUID | null;
+  message: string;
+  error_code: string | null;
+}
+
+// ============================================================================
+// RPC FUNCTION NAMES
+// ============================================================================
+
+export enum RPCFunction {
+  // Permission Checking Functions
+  RBAC_PERMISSION_CHECK = 'rbac_permission_check',
+  RBAC_PERMISSIONS_GET = 'rbac_permissions_get',
+  RBAC_ACCESS_VALIDATE = 'rbac_access_validate',
+  RBAC_PAGE_ACCESS_CHECK = 'rbac_page_access_check',
+  
+  // Role Management Functions
+  RBAC_ROLE_GRANT = 'rbac_role_grant',
+  RBAC_ROLE_REVOKE = 'rbac_role_revoke',
+  RBAC_ROLES_LIST = 'rbac_roles_list',
+  RBAC_ROLE_VALIDATE = 'rbac_role_validate',
+  
+  // Session & Audit Functions
+  RBAC_SESSION_TRACK = 'rbac_session_track',
+  RBAC_AUDIT_LOG = 'rbac_audit_log',
+}
+
+// ============================================================================
+// ERROR CODES
+// ============================================================================
+
+export enum RBACErrorCode {
+  USER_NOT_FOUND = 'USER_NOT_FOUND',
+  INVALID_ROLE_TYPE = 'INVALID_ROLE_TYPE',
+  INVALID_ROLE_NAME = 'INVALID_ROLE_NAME',
+  MISSING_ORGANISATION_ID = 'MISSING_ORGANISATION_ID',
+  MISSING_EVENT_APP_CONTEXT = 'MISSING_EVENT_APP_CONTEXT',
+  ORGANISATION_NOT_FOUND = 'ORGANISATION_NOT_FOUND',
+  EVENT_NOT_FOUND = 'EVENT_NOT_FOUND',
+  APP_NOT_FOUND = 'APP_NOT_FOUND',
+  INVALID_SESSION_TYPE = 'INVALID_SESSION_TYPE',
+  INVALID_EVENT_TYPE = 'INVALID_EVENT_TYPE',
+  DATABASE_ERROR = 'DATABASE_ERROR',
+  ROLE_NOT_FOUND = 'ROLE_NOT_FOUND',
+  USER_NOT_AUTHENTICATED = 'USER_NOT_AUTHENTICATED',
+  INVALID_GLOBAL_ROLE = 'INVALID_GLOBAL_ROLE',
+  INVALID_ORGANISATION_ROLE = 'INVALID_ORGANISATION_ROLE',
+  INVALID_EVENT_APP_ROLE = 'INVALID_EVENT_APP_ROLE',
+  INVALID_EVENT_APP_FORMAT = 'INVALID_EVENT_APP_FORMAT',
+  MISSING_CONTEXT = 'MISSING_CONTEXT',
+  INVALID_CONTEXT = 'INVALID_CONTEXT',
+  GRANTED_BY_NOT_FOUND = 'GRANTED_BY_NOT_FOUND',
+}
+
+// ============================================================================
+// ROLE TYPES
+// ============================================================================
+
+export type GlobalRole = 'super_admin';
+export type OrganisationRole = 'supporter' | 'member' | 'leader' | 'org_admin';
+export type EventAppRole = 'viewer' | 'participant' | 'planner' | 'event_admin';
+
+export type RBACRole = GlobalRole | OrganisationRole | EventAppRole;
+
+// ============================================================================
+// PERMISSION TYPES
+// ============================================================================
+
+export type PermissionOperation = 'read' | 'create' | 'update' | 'delete';
+export type PermissionSource = 'global' | 'organisation' | 'event_app' | 'default' | 'none';
+export type AccessLevel = 'super_admin' | 'organisation' | 'event' | 'none';
+
+// ============================================================================
+// SESSION TYPES
+// ============================================================================
+
+export type SessionType = 'web' | 'mobile' | 'api' | 'admin';
+
+// ============================================================================
+// AUDIT EVENT TYPES
+// ============================================================================
+
+export type AuditEventType = 
+  | 'role_granted' 
+  | 'role_revoked' 
+  | 'permission_checked' 
+  | 'access_granted' 
+  | 'access_denied' 
+  | 'session_started' 
+  | 'session_ended' 
+  | 'login' 
+  | 'logout'
+  | 'organisation_switched' 
+  | 'event_switched' 
+  | 'app_switched';
+
+// ============================================================================
+// UTILITY TYPES
+// ============================================================================
+
+export interface RBACContext {
+  user_id: UUID;
+  organisation_id?: UUID;
+  event_id?: string;
+  app_id?: UUID;
+}
+
+export interface RBACResult<T = any> {
+  success: boolean;
+  data?: T;
+  error?: string;
+  error_code?: RBACErrorCode;
+}
+
+// ============================================================================
+// FUNCTION RESPONSE TYPES
+// ============================================================================
+
+export type RBACFunctionResponse<T> = {
+  data: T | null;
+  error: any | null;
+  count?: number | null;
+  status: number;
+  statusText: string;
+};

package/src/types/supabase.ts

@@ -117,34 +117,16 @@ export type TableName =
  * Supabase RPC function names
  */
 export type RPCFunction = 
-  | 'get_rbac_permissions'
-  | 'get_user_app_permissions'
-  | 'get_user_current_roles'
-  | 'get_user_event_access'
-  | 'get_user_events'
-  | 'get_user_organisations'
-  | 'get_user_organisation_ids'
-  | 'get_user_effective_organisations'
-  | 'get_app_config'
-  | 'get_organisation_apps'
-  | 'get_organisation_hierarchy'
-  | 'grant_user_role'
-  | 'revoke_user_role'
-  | 'grant_direct_app_access'
-  | 'revoke_direct_app_access'
-  | 'check_page_permission'
-  | 'has_organisation_permission'
-  | 'has_organisation_role'
-  | 'user_has_role_in_org'
-  | 'user_has_min_role_in_org'
-  | 'can_access_event'
-  | 'can_access_organisation'
-  | 'is_super_admin'
-  | 'is_admin'
-  | 'track_user_session'
-  | 'record_user_login'
-  | 'log_organisation_access'
-  | 'log_medi_access'
+  | 'rbac_permission_check'
+  | 'rbac_permissions_get'
+  | 'rbac_access_validate'
+  | 'rbac_page_access_check'
+  | 'rbac_role_grant'
+  | 'rbac_role_revoke'
+  | 'rbac_roles_list'
+  | 'rbac_role_validate'
+  | 'rbac_session_track'
+  | 'rbac_audit_log'
   | 'get_pace_user_events';
 
 /**

package/src/types/unified.ts

@@ -151,7 +151,7 @@ export interface Event {
   is_visible?: boolean;
   
   // Visual branding
-  event_logo?: string;
+  event_logo?: string; // DEPRECATED: Use file_references table instead
   event_colours?: Record<string, unknown> | null; // JSONB field for theme colors
   event_col_d1?: string;
   event_col_d2?: string;
@@ -260,3 +260,6 @@ export interface DataTableColumn<T = unknown> {
   enableGrouping?: boolean;
   enableHiding?: boolean;
 }
+
+// Re-export file reference types
+export * from './file-reference';