@jmruthers/pace-core 0.5.54 → 0.5.55

package/dist/index.js

@@ -8,7 +8,6 @@ import {
   NavigationProvider,
   ORGANISATION_PERMISSIONS,
   PAGE_PERMISSIONS,
-  PERMISSION_GROUPS,
   PagePermissionGuard,
   PagePermissionProvider,
   PermissionEnforcer,
@@ -31,7 +30,7 @@ import {
   withAccessLevelGuard,
   withPermissionGuard,
   withRoleGuard
-} from "./chunk-GIO7BFE7.js";
+} from "./chunk-RQD3D2CO.js";
 import "./chunk-TYHR5X4W.js";
 import {
   APP_PATH_MAPPING,
@@ -45,7 +44,6 @@ import {
   EventLogoLarge,
   EventSelector,
   FILE_SIZE_LIMITS,
-  FileUpload,
   Footer,
   Form,
   Header,
@@ -68,6 +66,7 @@ import {
   PublicPageHeader,
   PublicPageLayout,
   STORAGE_CONFIG,
+  StorageUtils,
   Table,
   TableBody,
   TableCaption,
@@ -101,7 +100,7 @@ import {
   useStorage,
   useToast,
   validateFileSize
-} from "./chunk-TRIZ7IB7.js";
+} from "./chunk-MPQDF75X.js";
 import {
   Alert,
   AlertDescription,
@@ -124,7 +123,7 @@ import {
   SelectSeparator,
   SelectTrigger,
   SelectValue
-} from "./chunk-MSFACPQQ.js";
+} from "./chunk-PAEM3OWN.js";
 import {
   useAccessLevel,
   useCachedPermissions,
@@ -134,7 +133,7 @@ import {
   useMultiplePermissions,
   usePermissions,
   useRBAC as useRBAC2
-} from "./chunk-BC3S53OZ.js";
+} from "./chunk-UQE2Y64H.js";
 import {
   CACHE_PATTERNS,
   RBACCache,
@@ -154,20 +153,20 @@ import {
   isPermittedCached,
   rbacCache,
   setupRBAC
-} from "./chunk-GWSBHC4J.js";
+} from "./chunk-KLPVOPRI.js";
 import {
   RBACAuditManager,
   createAuditManager,
   emitAuditEvent,
   getGlobalAuditManager,
   setGlobalAuditManager
-} from "./chunk-7BNPOCLL.js";
-import "./chunk-6MTY77WU.js";
+} from "./chunk-B2WTCLCV.js";
+import "./chunk-TNMXZLDR.js";
 import {
   EventProvider,
   init_EventProvider,
   useEvents
-} from "./chunk-NRK4AIHQ.js";
+} from "./chunk-KBRACSJI.js";
 import {
   clearPublicEventCache,
   extractEventCodeFromPath,
@@ -178,8 +177,8 @@ import {
   usePublicEvent,
   usePublicEventCode,
   usePublicRouteParams
-} from "./chunk-MYP2EGHX.js";
-import "./chunk-NZ655MWE.js";
+} from "./chunk-AJ2KMES7.js";
+import "./chunk-ZOD2ZY6X.js";
 import {
   DefaultPublicErrorFallback,
   PublicErrorBoundary,
@@ -191,8 +190,8 @@ import {
   useIsPublicPage,
   usePublicEventLogo,
   usePublicPageContext
-} from "./chunk-NYUJ4FJR.js";
-import "./chunk-SS3E6QLB.js";
+} from "./chunk-KJDPSM64.js";
+import "./chunk-YNUBMSMV.js";
 import {
   Button,
   Dialog,
@@ -226,23 +225,23 @@ import {
   useOrganisations,
   useRBAC,
   useUnifiedAuth
-} from "./chunk-EL2O4IUX.js";
-import "./chunk-YDJW5XTN.js";
+} from "./chunk-AQFRLC7K.js";
+import "./chunk-STT7INZR.js";
 import {
   getAppConfig,
   getCurrentAppId,
   getCurrentAppName,
   setAppConfig
-} from "./chunk-22KLBHPS.js";
+} from "./chunk-W66AZIOH.js";
 import {
   LoadingSpinner
 } from "./chunk-CDQ3PX7L.js";
-import "./chunk-MZBUOP4P.js";
-import "./chunk-74C6SNEC.js";
+import "./chunk-5BSLGBYI.js";
+import "./chunk-ZPK5656W.js";
 import {
   cn,
   init_cn
-} from "./chunk-WJARTBCT.js";
+} from "./chunk-D7ARGIA3.js";
 import {
   getAllStylePaths,
   getStylePath,
@@ -361,13 +360,16 @@ var createSecureDataAccess = (supabase, organisationId, isSuperAdmin = false) =>
     return query;
   };
   const secureQuery = async (options) => {
-    const { table, select, organisationId: orgId, filters } = options;
+    const { table, select, organisationId: orgId, filters, orderBy, limit, offset } = options;
     try {
       const query = buildSecureQuery({
         table,
         select,
         organisationId: orgId,
-        filters
+        filters,
+        orderBy,
+        limit,
+        offset
       });
       const { data, error } = await query;
       if (error) {
@@ -382,13 +384,16 @@ var createSecureDataAccess = (supabase, organisationId, isSuperAdmin = false) =>
     }
   };
   const secureSingleQuery = async (options) => {
-    const { table, select, organisationId: orgId, filters } = options;
+    const { table, select, organisationId: orgId, filters, orderBy, limit, offset } = options;
     try {
       const query = buildSecureQuery({
         table,
         select,
         organisationId: orgId,
-        filters
+        filters,
+        orderBy,
+        limit,
+        offset
       });
       const { data, error } = await query.single();
       if (error) {
@@ -489,6 +494,166 @@ var createSecureDataAccess = (supabase, organisationId, isSuperAdmin = false) =>
 
 // src/index.ts
 init_cn();
+
+// src/components/FileUpload/FileUpload.tsx
+import { useCallback, useState } from "react";
+init_Button();
+import { jsx, jsxs } from "react/jsx-runtime";
+function FileUpload({
+  supabase,
+  appName,
+  orgId,
+  onUploadComplete,
+  onUploadStart,
+  accept = "*/*",
+  maxSize,
+  multiple = false,
+  disabled = false,
+  className = "",
+  children
+}) {
+  const [dragActive, setDragActive] = useState(false);
+  const [selectedFiles, setSelectedFiles] = useState([]);
+  const [validationErrors, setValidationErrors] = useState([]);
+  const { uploadWithProgress, uploadProgress, isUploading, uploadError } = useFileUpload({
+    supabase,
+    appName,
+    orgId
+  });
+  const validateFiles = useCallback((files) => {
+    const errors = [];
+    files.forEach((file, index) => {
+      const sizeValidation = validateFileSize(file);
+      if (!sizeValidation.isValid) {
+        errors.push(`File ${index + 1}: ${sizeValidation.error}`);
+      }
+      if (maxSize && file.size > maxSize) {
+        const fileMB = Math.round(file.size / (1024 * 1024));
+        const maxMB = Math.round(maxSize / (1024 * 1024));
+        errors.push(`File ${index + 1}: Size (${fileMB}MB) exceeds limit (${maxMB}MB)`);
+      }
+    });
+    return errors;
+  }, [maxSize]);
+  const handleFileSelect = useCallback((files) => {
+    if (!files) return;
+    const fileArray = Array.from(files);
+    const errors = validateFiles(fileArray);
+    setValidationErrors(errors);
+    setSelectedFiles(fileArray);
+  }, [validateFiles]);
+  const handleDrag = useCallback((e) => {
+    e.preventDefault();
+    e.stopPropagation();
+    if (e.type === "dragenter" || e.type === "dragover") {
+      setDragActive(true);
+    } else if (e.type === "dragleave") {
+      setDragActive(false);
+    }
+  }, []);
+  const handleDrop = useCallback((e) => {
+    e.preventDefault();
+    e.stopPropagation();
+    setDragActive(false);
+    if (disabled) return;
+    const files = e.dataTransfer.files;
+    handleFileSelect(files);
+  }, [disabled, handleFileSelect]);
+  const handleFileInputChange = useCallback((e) => {
+    handleFileSelect(e.target.files);
+  }, [handleFileSelect]);
+  const handleUpload = useCallback(async () => {
+    if (selectedFiles.length === 0 || validationErrors.length > 0) return;
+    onUploadStart?.();
+    for (const file of selectedFiles) {
+      const result = await uploadWithProgress(file);
+      onUploadComplete?.(result);
+    }
+    setSelectedFiles([]);
+    setValidationErrors([]);
+  }, [selectedFiles, validationErrors, uploadWithProgress, onUploadComplete, onUploadStart]);
+  const handleClear = useCallback(() => {
+    setSelectedFiles([]);
+    setValidationErrors([]);
+  }, []);
+  const canUpload = selectedFiles.length > 0 && validationErrors.length === 0 && !isUploading && !disabled;
+  return /* @__PURE__ */ jsxs("div", { className: `file-upload ${className}`, children: [
+    /* @__PURE__ */ jsxs(
+      "div",
+      {
+        className: `file-upload__dropzone ${dragActive ? "file-upload__dropzone--active" : ""} ${disabled ? "file-upload__dropzone--disabled" : ""}`,
+        onDragEnter: handleDrag,
+        onDragLeave: handleDrag,
+        onDragOver: handleDrag,
+        onDrop: handleDrop,
+        children: [
+          /* @__PURE__ */ jsx(
+            "input",
+            {
+              type: "file",
+              accept,
+              multiple,
+              onChange: handleFileInputChange,
+              disabled,
+              className: "file-upload__input"
+            }
+          ),
+          children || /* @__PURE__ */ jsxs("div", { className: "file-upload__content", children: [
+            /* @__PURE__ */ jsx("p", { className: "file-upload__text", children: dragActive ? "Drop files here" : "Drag and drop files here or click to select" }),
+            /* @__PURE__ */ jsx(
+              Button,
+              {
+                type: "button",
+                variant: "outline",
+                disabled,
+                onClick: () => document.querySelector(".file-upload__input")?.click(),
+                children: "Select Files"
+              }
+            )
+          ] })
+        ]
+      }
+    ),
+    selectedFiles.length > 0 && /* @__PURE__ */ jsxs("div", { className: "file-upload__files", children: [
+      /* @__PURE__ */ jsx("h4", { className: "file-upload__files-title", children: "Selected Files:" }),
+      /* @__PURE__ */ jsx("ul", { className: "file-upload__files-list", children: selectedFiles.map((file, index) => /* @__PURE__ */ jsxs("li", { className: "file-upload__file-item", children: [
+        /* @__PURE__ */ jsx("span", { className: "file-upload__file-name", children: file.name }),
+        /* @__PURE__ */ jsx("span", { className: "file-upload__file-size", children: formatFileSize(file.size) })
+      ] }, index)) })
+    ] }),
+    validationErrors.length > 0 && /* @__PURE__ */ jsx(Alert, { variant: "destructive", className: "file-upload__errors", children: /* @__PURE__ */ jsx("ul", { children: validationErrors.map((error, index) => /* @__PURE__ */ jsx("li", { children: error }, index)) }) }),
+    isUploading && /* @__PURE__ */ jsxs("div", { className: "file-upload__progress", children: [
+      /* @__PURE__ */ jsx(Progress, { value: uploadProgress, max: 100 }),
+      /* @__PURE__ */ jsxs("p", { className: "file-upload__progress-text", children: [
+        "Uploading... ",
+        uploadProgress,
+        "%"
+      ] })
+    ] }),
+    uploadError && /* @__PURE__ */ jsx(Alert, { variant: "destructive", className: "file-upload__error", children: uploadError }),
+    selectedFiles.length > 0 && /* @__PURE__ */ jsxs("div", { className: "file-upload__actions", children: [
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          onClick: handleUpload,
+          disabled: !canUpload,
+          className: "file-upload__upload-btn",
+          children: isUploading ? "Uploading..." : `Upload ${selectedFiles.length} file${selectedFiles.length > 1 ? "s" : ""}`
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          variant: "outline",
+          onClick: handleClear,
+          disabled: isUploading,
+          className: "file-upload__clear-btn",
+          children: "Clear"
+        }
+      )
+    ] })
+  ] });
+}
 export {
   ALL_PERMISSIONS,
   APP_PATH_MAPPING,
@@ -549,7 +714,6 @@ export {
   OrganisationProvider,
   OrganisationSelector,
   PAGE_PERMISSIONS,
-  PERMISSION_GROUPS,
   PaceAppLayout,
   PaceLoginPage,
   PagePermissionGuard,
@@ -586,6 +750,7 @@ export {
   SelectSeparator,
   SelectTrigger,
   SelectValue,
+  StorageUtils,
   Table,
   TableBody,
   TableCaption,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/utils/secureDataAccess.ts"],"sourcesContent":["/**\n * @file Complete Component Library Export\n * @package @jmruthers/pace-core\n * @module Core\n * @since 0.1.0\n * \n * This file exports the primary components, hooks, and utilities from the PACE Core library.\n * It is the main entry point for developers using the library.\n * \n * @example\n * // Import common components\n * import { Button, Card, useUnifiedAuth } from '@jmruthers/pace-core';\n * \n * // For specialized components, use the complete library import:\n * import { Dialog, NavigationMenu } from '@jmruthers/pace-core/components';\n */\n\n// AUTHENTICATION & AUTHORIZATION\nexport { UnifiedAuthProvider, useUnifiedAuth } from './providers/UnifiedAuthProvider';\nexport type { UnifiedAuthProviderProps, UnifiedAuthContextType, UserEventAccess } from './providers/UnifiedAuthProvider';\nexport { EventProvider, useEvents } from './providers/EventProvider';\nexport type { EventProviderProps, EventContextType } from './providers/EventProvider';\nexport { OrganisationProvider, useOrganisations } from './providers/OrganisationProvider';\nexport type { \n  Organisation, \n  OrganisationMembership, \n  OrganisationContextType, \n  OrganisationProviderProps,\n  OrganisationSecurityError \n} from './types/organisation';\n\n// INACTIVITY TRACKING\nexport { InactivityWarningModal } from './components/InactivityWarningModal/InactivityWarningModal';\nexport type { InactivityWarningModalProps } from './components/InactivityWarningModal/InactivityWarningModal';\nexport { useInactivityTracker } from './hooks/useInactivityTracker';\nexport type { UseInactivityTrackerOptions, UseInactivityTrackerReturn } from './hooks/useInactivityTracker';\n\n// RBAC SYSTEM - Consolidated RBAC module\nexport * from './rbac';\n\n// BASIC UI COMPONENTS\nexport { Button } from './components/Button/Button';\nexport type { ButtonProps } from './components/Button/Button';\n\nexport { \n  Card, \n  CardHeader, \n  CardFooter, \n  CardTitle, \n  CardDescription, \n  CardContent,\n  CardActions\n} from './components/Card/Card';\nexport type { CardProps } from './components/Card/Card';\n\nexport { Input } from './components/Input/Input';\nexport type { InputProps } from './components/Input/Input';\nexport { Label } from './components/Label/Label';\nexport type { LabelProps } from './components/Label/Label';\n\nexport { Alert, AlertTitle, AlertDescription } from './components/Alert/Alert';\nexport { Avatar, AvatarImage, AvatarFallback } from './components/Avatar/Avatar';\n\nexport { Checkbox } from './components/Checkbox/Checkbox';\nexport { Progress } from './components/Progress/Progress';\n\n// ADVANCED UI COMPONENTS\nexport {\n  Dialog,\n  DialogPortal,\n  DialogOverlay,\n  DialogTrigger,\n  DialogClose,\n  DialogContent,\n  DialogHeader,\n  DialogBody,\n  DialogFooter,\n  DialogTitle,\n  DialogDescription,\n} from './components/Dialog/Dialog';\n\n// Dropdown Menu exports\n// DropdownMenu components have been merged into Select components\n\n// Select exports\nexport {\n  Select,\n  SelectGroup,\n  SelectValue,\n  SelectTrigger,\n  SelectContent,\n  SelectLabel,\n  SelectItem,\n  SelectSeparator,\n} from './components/Select';\n\n// Modal functionality is provided by Dialog components\n\nexport {\n  Toast,\n  Toaster,\n  ToastAction,\n  ToastProvider,\n  ToastViewport,\n  ToastTitle,\n  ToastDescription,\n  ToastClose,\n  useToast,\n} from './components/Toast/Toast';\nexport type { ToastActionElement, ToastProps } from './components/Toast/Toast';\n\nexport { Tooltip, TooltipTrigger, TooltipContent, TooltipProvider, TooltipRoot } from './components/Tooltip/Tooltip';\n\n// DATA DISPLAY COMPONENTS\nexport {\n  DataTable,\n  type DataTableProps,\n  type DataTableColumn,\n  type DataTableAction,\n  type DataTableToolbarButton,\n  type AggregateConfig,\n  type EmptyStateConfig,\n  type GetRowId\n} from './components/DataTable';\n\n// Re-export types from DataTable types\nexport type { DataRecord } from './components/DataTable/types';\n\n// FORM COMPONENTS\nexport { Form } from './components/Form/Form';\nexport { LoginForm } from './components/LoginForm/LoginForm';\nexport type { LoginFormProps } from './components/LoginForm/LoginForm';\n\n// LAYOUT COMPONENTS\nexport { Header } from './components/Header/Header';\nexport { Footer } from './components/Footer/Footer';\nexport type { FooterProps } from './components/Footer/Footer';\n\n// NAVIGATION COMPONENTS\nexport { NavigationMenu } from './components/NavigationMenu/NavigationMenu';\nexport type { NavigationMenuProps, NavigationItem } from './components/NavigationMenu/types';\nexport { UserMenu } from './components/UserMenu/UserMenu';\nexport type { UserMenuProps } from './components/UserMenu/UserMenu';\n\n// Reusable Page/Layout Components\nexport { PaceAppLayout } from './components/PaceAppLayout/PaceAppLayout';\nexport type { PaceAppLayoutProps } from './components/PaceAppLayout/PaceAppLayout';\nexport { PaceLoginPage } from './components/PaceLoginPage/PaceLoginPage';\nexport type { PaceLoginPageProps } from './components/PaceLoginPage/PaceLoginPage';\n\n// UTILITY COMPONENTS\nexport { ErrorBoundary } from './components/ErrorBoundary/ErrorBoundary';\nexport { LoadingSpinner } from './components/LoadingSpinner/LoadingSpinner';\n\n// EVENT MANAGEMENT\nexport { EventSelector } from './components/EventSelector/EventSelector';\n\n// ORGANISATION MANAGEMENT\nexport { OrganisationSelector } from './components/OrganisationSelector/OrganisationSelector';\nexport { useOrganisationPermissions } from './hooks/useOrganisationPermissions';\nexport { useOrganisationSecurity } from './hooks/useOrganisationSecurity';\nexport { createSecureDataAccess } from './utils/secureDataAccess';\n\n// TYPES\nexport type { UserProfile } from './types/organisation';\n\n// AUTHENTICATION FORMS\nexport { PasswordResetForm } from './components/PasswordReset/PasswordResetForm';\nexport { PasswordChangeForm } from './components/PasswordReset/PasswordChangeForm';\n\n// UTILS & HOOKS\nexport { useAppConfig } from './hooks/useAppConfig';\nexport { cn } from './utils/cn';\nexport { setAppConfig, getAppConfig, getCurrentAppName, getCurrentAppId } from './utils/appConfig';\n\n// STORAGE UTILITIES\nexport { FileUpload } from './components/FileUpload/FileUpload';\nexport type { FileUploadProps } from './components/FileUpload/FileUpload';\nexport { useStorage, useFileUpload } from './hooks/useStorage';\nexport * from './utils/storage';\n\n// Table components\nexport {\n  Table,\n  TableHeader,\n  TableBody,\n  TableCaption,\n  TableCell,\n  TableFooter,\n  TableHead,\n  TableRow,\n} from './components/Table/Table';\n\n// STYLES\nexport * from './styles';\n\n// PUBLIC PAGES\nexport * from './hooks/public';\nexport * from './components/PublicLayout';\n","/**\n * @file Secure Data Access Utility\n * @package @jmruthers/pace-core\n * @module Utils/SecureDataAccess\n * @since 0.4.0\n *\n * Secure data access utilities that enforce organisation context for all database operations.\n * Prevents data leakage between organisations and ensures proper access validation.\n */\n\nimport type { SupabaseClient } from '@supabase/supabase-js';\nimport type { SecureQueryOptions } from '../types/organisation';\n\n// Generic database record type\nexport interface DatabaseRecord {\n  id: string;\n  organisation_id: string;\n  [key: string]: unknown;\n}\n\n// Generic data for insert/update operations\nexport interface DatabaseData {\n  [key: string]: unknown;\n}\n\n// Generic filters for queries\nexport interface DatabaseFilters {\n  [key: string]: unknown;\n}\n\nexport interface SecureDataAccess {\n  // Secure query methods\n  secureQuery: <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions) => Promise<T[]>;\n  secureSingleQuery: <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions) => Promise<T | null>;\n  \n  // Secure mutation methods\n  secureInsert: <T extends DatabaseRecord = DatabaseRecord>(table: string, data: DatabaseData, organisationId: string) => Promise<T | null>;\n  secureUpdate: <T extends DatabaseRecord = DatabaseRecord>(table: string, data: DatabaseData, filters: DatabaseFilters, organisationId: string) => Promise<T | null>;\n  secureDelete: (table: string, filters: DatabaseFilters, organisationId: string) => Promise<boolean>;\n  \n  // Organisation-scoped queries\n  queryByOrganisation: <T extends DatabaseRecord = DatabaseRecord>(table: string, select: string, organisationId: string, filters?: DatabaseFilters) => Promise<T[]>;\n  \n  // Validation helpers\n  validateOrganisationContext: (organisationId: string) => void;\n  ensureOrganisationColumn: (table: string) => boolean;\n}\n\nexport interface SecureQueryBuilder {\n  table: string;\n  select: string;\n  organisationId: string;\n  filters?: DatabaseFilters;\n  orderBy?: string;\n  limit?: number;\n  offset?: number;\n}\n\n/**\n * Create a secure data access instance\n * @param supabase - Supabase client instance\n * @param organisationId - Current organisation context\n * @param isSuperAdmin - Whether user has super admin privileges\n * @returns Secure data access utilities\n */\nexport const createSecureDataAccess = (\n  supabase: SupabaseClient,\n  organisationId: string,\n  isSuperAdmin: boolean = false\n): SecureDataAccess => {\n  \n  // Validate organisation context\n  const validateOrganisationContext = (orgId: string): void => {\n    if (!orgId) {\n      throw new Error('Organisation context is required for secure data access');\n    }\n    \n    if (!isSuperAdmin && !orgId) {\n      throw new Error('Organisation context is mandatory for non-super admin users');\n    }\n  };\n\n  // Check if table has organisation_id column\n  const ensureOrganisationColumn = (table: string): boolean => {\n    // This is a simplified check - in production you might want to cache this\n    const tablesWithOrganisation = [\n      'event',  'organisation_settings',\n      'rbac_event_app_roles', 'rbac_organisation_roles',\n      // SECURITY: Phase 2 additions - complete organisation table mapping\n      'organisation_audit_log', 'organisation_invitations', 'organisation_app_access',\n      // SECURITY: Emergency additions for Phase 1 fixes\n      'cake_meal', 'cake_mealtype', 'pace_person', 'pace_member',\n      // SECURITY: Phase 3A additions - medical and personal data\n      'medi_profile', 'medi_condition', 'medi_diet', 'medi_action_plan', 'medi_profile_versions',\n      'pace_consent', 'pace_contact', 'pace_id_documents', 'pace_qualifications',\n      'form_responses', 'form_response_values', 'forms',\n      // SECURITY: Phase 3B additions - remaining critical tables\n      'invoice', 'line_item', 'credit_balance', 'payment_method',\n      'form_contexts', 'form_field_config', 'form_fields',\n      'cake_delivery', 'cake_diettype', 'cake_diner', 'cake_dish', 'cake_item', \n      'cake_logistics', 'cake_mealplan', 'cake_package', 'cake_recipe', 'cake_supplier', \n      'cake_supply', 'cake_unit', 'event_app_access', 'base_application', 'base_questions'\n    ];\n    \n    return tablesWithOrganisation.includes(table);\n  };\n\n  // Build secure query with organisation context\n  const buildSecureQuery = (options: SecureQueryBuilder) => {\n    const { table, select, organisationId: orgId, filters, orderBy, limit, offset } = options;\n    \n    validateOrganisationContext(orgId);\n    \n    let query = supabase\n      .from(table)\n      .select(select);\n    \n    // Add organisation filter (unless super admin)\n    if (!isSuperAdmin && ensureOrganisationColumn(table)) {\n      query = query.eq('organisation_id', orgId);\n    }\n    \n    // Add additional filters\n    if (filters) {\n      Object.entries(filters).forEach(([key, value]) => {\n        if (value !== undefined && value !== null) {\n          // Handle qualified column names (e.g., 'users.role')\n          const columnName = key.includes('.') ? key.split('.').pop()! : key;\n          query = query.eq(columnName, value);\n        }\n      });\n    }\n    \n    // Add ordering\n    if (orderBy) {\n      // Only use the column name, not a qualified name\n      const orderByColumn = orderBy.split('.').pop();\n      if (orderByColumn) {\n        query = query.order(orderByColumn);\n      }\n    }\n    \n    // Add pagination\n    if (limit) {\n      query = query.limit(limit);\n    }\n    \n    if (offset) {\n      query = query.range(offset, offset + (limit || 10) - 1);\n    }\n    \n    return query;\n  };\n\n  // Secure query for multiple results\n  const secureQuery = async <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions): Promise<T[]> => {\n    const { table, select, organisationId: orgId, filters } = options;\n    \n    try {\n      const query = buildSecureQuery({\n        table,\n        select,\n        organisationId: orgId,\n        filters\n      });\n      \n      const { data, error } = await query;\n      \n      if (error) {\n        throw error;\n      }\n      \n      // Ensure data is an array and not an error type\n      if (Array.isArray(data)) {\n        return data as unknown as T[];\n      }\n      \n      return [];\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure query for single result\n  const secureSingleQuery = async <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions): Promise<T | null> => {\n    const { table, select, organisationId: orgId, filters } = options;\n    \n    try {\n      const query = buildSecureQuery({\n        table,\n        select,\n        organisationId: orgId,\n        filters\n      });\n      \n      const { data, error } = await query.single();\n      \n      if (error) {\n        if (error.code === 'PGRST116') {\n          // No rows returned\n          return null;\n        }\n        throw error;\n      }\n      \n      // Ensure data is not an error type\n      if (data && typeof data === 'object' && !('code' in data)) {\n        return data as unknown as T;\n      }\n      \n      return null;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure insert with organisation context\n  const secureInsert = async <T extends DatabaseRecord = DatabaseRecord>(\n    table: string, \n    data: DatabaseData, \n    organisationId: string\n  ): Promise<T | null> => {\n    validateOrganisationContext(organisationId);\n    \n    try {\n      const insertData = {\n        ...data,\n        organisation_id: organisationId\n      };\n      \n      const { data: result, error } = await supabase\n        .from(table)\n        .insert(insertData)\n        .select()\n        .single();\n      \n      if (error) {\n        throw error;\n      }\n      \n      return result;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure update with organisation context\n  const secureUpdate = async <T extends DatabaseRecord = DatabaseRecord>(\n    table: string, \n    data: DatabaseData, \n    filters: DatabaseFilters, \n    organisationId: string\n  ): Promise<T | null> => {\n    validateOrganisationContext(organisationId);\n    \n    try {\n      let query = supabase\n        .from(table)\n        .update(data);\n      \n      // Add organisation filter (unless super admin)\n      if (!isSuperAdmin && ensureOrganisationColumn(table)) {\n        query = query.eq('organisation_id', organisationId);\n      }\n      \n      // Add additional filters\n      if (filters) {\n        Object.entries(filters).forEach(([key, value]) => {\n          if (value !== undefined && value !== null) {\n            query = query.eq(key, value);\n          }\n        });\n      }\n      \n      const { data: result, error } = await query.select().single();\n      \n      if (error) {\n        throw error;\n      }\n      \n      return result;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure delete with organisation context\n  const secureDelete = async (\n    table: string, \n    filters: DatabaseFilters, \n    organisationId: string\n  ): Promise<boolean> => {\n    validateOrganisationContext(organisationId);\n    \n    try {\n      let query = supabase\n        .from(table)\n        .delete();\n      \n      // Add organisation filter (unless super admin)\n      if (!isSuperAdmin && ensureOrganisationColumn(table)) {\n        query = query.eq('organisation_id', organisationId);\n      }\n      \n      // Add additional filters\n      if (filters) {\n        Object.entries(filters).forEach(([key, value]) => {\n          if (value !== undefined && value !== null) {\n            query = query.eq(key, value);\n          }\n        });\n      }\n      \n      const { error } = await query;\n      \n      if (error) {\n        throw error;\n      }\n      \n      return true;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Organisation-scoped query helper\n  const queryByOrganisation = async <T extends DatabaseRecord = DatabaseRecord>(\n    table: string, \n    select: string, \n    organisationId: string, \n    filters?: DatabaseFilters\n  ): Promise<T[]> => {\n    return secureQuery<T>({\n      table,\n      select,\n      organisationId,\n      filters\n    });\n  };\n\n  return {\n    secureQuery,\n    secureSingleQuery,\n    secureInsert,\n    secureUpdate,\n    secureDelete,\n    queryByOrganisation,\n    validateOrganisationContext,\n    ensureOrganisationColumn\n  };\n};\n\n/**\n * Hook for secure data access\n * @returns Secure data access utilities\n */\nexport const useSecureDataAccess = (): SecureDataAccess => {\n  // This would typically get the context from providers\n  // For now, we'll create a placeholder that can be used with explicit parameters\n  throw new Error('useSecureDataAccess must be used with explicit parameters. Use createSecureDataAccess instead.');\n}; "],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA;AAEA;AAEA;AAUA;AAEA;AAOA;AA0BA;AA4CA;;;AC9CO,IAAM,yBAAyB,CACpC,UACA,gBACA,eAAwB,UACH;AAGrB,QAAM,8BAA8B,CAAC,UAAwB;AAC3D,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,QAAI,CAAC,gBAAgB,CAAC,OAAO;AAC3B,YAAM,IAAI,MAAM,6DAA6D;AAAA,IAC/E;AAAA,EACF;AAGA,QAAM,2BAA2B,CAAC,UAA2B;AAE3D,UAAM,yBAAyB;AAAA,MAC7B;AAAA,MAAU;AAAA,MACV;AAAA,MAAwB;AAAA;AAAA,MAExB;AAAA,MAA0B;AAAA,MAA4B;AAAA;AAAA,MAEtD;AAAA,MAAa;AAAA,MAAiB;AAAA,MAAe;AAAA;AAAA,MAE7C;AAAA,MAAgB;AAAA,MAAkB;AAAA,MAAa;AAAA,MAAoB;AAAA,MACnE;AAAA,MAAgB;AAAA,MAAgB;AAAA,MAAqB;AAAA,MACrD;AAAA,MAAkB;AAAA,MAAwB;AAAA;AAAA,MAE1C;AAAA,MAAW;AAAA,MAAa;AAAA,MAAkB;AAAA,MAC1C;AAAA,MAAiB;AAAA,MAAqB;AAAA,MACtC;AAAA,MAAiB;AAAA,MAAiB;AAAA,MAAc;AAAA,MAAa;AAAA,MAC7D;AAAA,MAAkB;AAAA,MAAiB;AAAA,MAAgB;AAAA,MAAe;AAAA,MAClE;AAAA,MAAe;AAAA,MAAa;AAAA,MAAoB;AAAA,MAAoB;AAAA,IACtE;AAEA,WAAO,uBAAuB,SAAS,KAAK;AAAA,EAC9C;AAGA,QAAM,mBAAmB,CAAC,YAAgC;AACxD,UAAM,EAAE,OAAO,QAAQ,gBAAgB,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAElF,gCAA4B,KAAK;AAEjC,QAAI,QAAQ,SACT,KAAK,KAAK,EACV,OAAO,MAAM;AAGhB,QAAI,CAAC,gBAAgB,yBAAyB,KAAK,GAAG;AACpD,cAAQ,MAAM,GAAG,mBAAmB,KAAK;AAAA,IAC3C;AAGA,QAAI,SAAS;AACX,aAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,YAAI,UAAU,UAAa,UAAU,MAAM;AAEzC,gBAAM,aAAa,IAAI,SAAS,GAAG,IAAI,IAAI,MAAM,GAAG,EAAE,IAAI,IAAK;AAC/D,kBAAQ,MAAM,GAAG,YAAY,KAAK;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,SAAS;AAEX,YAAM,gBAAgB,QAAQ,MAAM,GAAG,EAAE,IAAI;AAC7C,UAAI,eAAe;AACjB,gBAAQ,MAAM,MAAM,aAAa;AAAA,MACnC;AAAA,IACF;AAGA,QAAI,OAAO;AACT,cAAQ,MAAM,MAAM,KAAK;AAAA,IAC3B;AAEA,QAAI,QAAQ;AACV,cAAQ,MAAM,MAAM,QAAQ,UAAU,SAAS,MAAM,CAAC;AAAA,IACxD;AAEA,WAAO;AAAA,EACT;AAGA,QAAM,cAAc,OAAkD,YAA8C;AAClH,UAAM,EAAE,OAAO,QAAQ,gBAAgB,OAAO,QAAQ,IAAI;AAE1D,QAAI;AACF,YAAM,QAAQ,iBAAiB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,MACF,CAAC;AAED,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM;AAE9B,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAGA,UAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAO;AAAA,MACT;AAEA,aAAO,CAAC;AAAA,IACV,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,oBAAoB,OAAkD,YAAmD;AAC7H,UAAM,EAAE,OAAO,QAAQ,gBAAgB,OAAO,QAAQ,IAAI;AAE1D,QAAI;AACF,YAAM,QAAQ,iBAAiB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,MACF,CAAC;AAED,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,MAAM,OAAO;AAE3C,UAAI,OAAO;AACT,YAAI,MAAM,SAAS,YAAY;AAE7B,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAGA,UAAI,QAAQ,OAAO,SAAS,YAAY,EAAE,UAAU,OAAO;AACzD,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,eAAe,OACnB,OACA,MACAA,oBACsB;AACtB,gCAA4BA,eAAc;AAE1C,QAAI;AACF,YAAM,aAAa;AAAA,QACjB,GAAG;AAAA,QACH,iBAAiBA;AAAA,MACnB;AAEA,YAAM,EAAE,MAAM,QAAQ,MAAM,IAAI,MAAM,SACnC,KAAK,KAAK,EACV,OAAO,UAAU,EACjB,OAAO,EACP,OAAO;AAEV,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,eAAe,OACnB,OACA,MACA,SACAA,oBACsB;AACtB,gCAA4BA,eAAc;AAE1C,QAAI;AACF,UAAI,QAAQ,SACT,KAAK,KAAK,EACV,OAAO,IAAI;AAGd,UAAI,CAAC,gBAAgB,yBAAyB,KAAK,GAAG;AACpD,gBAAQ,MAAM,GAAG,mBAAmBA,eAAc;AAAA,MACpD;AAGA,UAAI,SAAS;AACX,eAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,cAAI,UAAU,UAAa,UAAU,MAAM;AACzC,oBAAQ,MAAM,GAAG,KAAK,KAAK;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,EAAE,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM,OAAO,EAAE,OAAO;AAE5D,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,eAAe,OACnB,OACA,SACAA,oBACqB;AACrB,gCAA4BA,eAAc;AAE1C,QAAI;AACF,UAAI,QAAQ,SACT,KAAK,KAAK,EACV,OAAO;AAGV,UAAI,CAAC,gBAAgB,yBAAyB,KAAK,GAAG;AACpD,gBAAQ,MAAM,GAAG,mBAAmBA,eAAc;AAAA,MACpD;AAGA,UAAI,SAAS;AACX,eAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,cAAI,UAAU,UAAa,UAAU,MAAM;AACzC,oBAAQ,MAAM,GAAG,KAAK,KAAK;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,EAAE,MAAM,IAAI,MAAM;AAExB,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,sBAAsB,OAC1B,OACA,QACAA,iBACA,YACiB;AACjB,WAAO,YAAe;AAAA,MACpB;AAAA,MACA;AAAA,MACA,gBAAAA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;ADlLA;","names":["organisationId"]}
+{"version":3,"sources":["../src/index.ts","../src/utils/secureDataAccess.ts","../src/components/FileUpload/FileUpload.tsx"],"sourcesContent":["/**\n * @file Complete Component Library Export\n * @package @jmruthers/pace-core\n * @module Core\n * @since 0.1.0\n * \n * This file exports the primary components, hooks, and utilities from the PACE Core library.\n * It is the main entry point for developers using the library.\n * \n * @example\n * // Import common components\n * import { Button, Card, useUnifiedAuth } from '@jmruthers/pace-core';\n * \n * // For specialized components, use the complete library import:\n * import { Dialog, NavigationMenu } from '@jmruthers/pace-core/components';\n */\n\n// AUTHENTICATION & AUTHORIZATION\nexport { UnifiedAuthProvider, useUnifiedAuth } from './providers/UnifiedAuthProvider';\nexport type { UnifiedAuthProviderProps, UnifiedAuthContextType, UserEventAccess } from './providers/UnifiedAuthProvider';\nexport { EventProvider, useEvents } from './providers/EventProvider';\nexport type { EventProviderProps, EventContextType } from './providers/EventProvider';\nexport { OrganisationProvider, useOrganisations } from './providers/OrganisationProvider';\nexport type { \n  Organisation, \n  OrganisationMembership, \n  OrganisationContextType, \n  OrganisationProviderProps,\n  OrganisationSecurityError \n} from './types/organisation';\n\n// INACTIVITY TRACKING\nexport { InactivityWarningModal } from './components/InactivityWarningModal/InactivityWarningModal';\nexport type { InactivityWarningModalProps } from './components/InactivityWarningModal/InactivityWarningModal';\nexport { useInactivityTracker } from './hooks/useInactivityTracker';\nexport type { UseInactivityTrackerOptions, UseInactivityTrackerReturn } from './hooks/useInactivityTracker';\n\n// RBAC SYSTEM - Consolidated RBAC module\nexport * from './rbac';\n\n// BASIC UI COMPONENTS\nexport { Button } from './components/Button/Button';\nexport type { ButtonProps } from './components/Button/Button';\n\nexport { \n  Card, \n  CardHeader, \n  CardFooter, \n  CardTitle, \n  CardDescription, \n  CardContent,\n  CardActions\n} from './components/Card/Card';\nexport type { CardProps } from './components/Card/Card';\n\nexport { Input } from './components/Input/Input';\nexport type { InputProps } from './components/Input/Input';\nexport { Label } from './components/Label/Label';\nexport type { LabelProps } from './components/Label/Label';\n\nexport { Alert, AlertTitle, AlertDescription } from './components/Alert/Alert';\nexport { Avatar, AvatarImage, AvatarFallback } from './components/Avatar/Avatar';\n\nexport { Checkbox } from './components/Checkbox/Checkbox';\nexport { Progress } from './components/Progress/Progress';\n\n// ADVANCED UI COMPONENTS\nexport {\n  Dialog,\n  DialogPortal,\n  DialogOverlay,\n  DialogTrigger,\n  DialogClose,\n  DialogContent,\n  DialogHeader,\n  DialogBody,\n  DialogFooter,\n  DialogTitle,\n  DialogDescription,\n} from './components/Dialog/Dialog';\n\n// Dropdown Menu exports\n// DropdownMenu components have been merged into Select components\n\n// Select exports\nexport {\n  Select,\n  SelectGroup,\n  SelectValue,\n  SelectTrigger,\n  SelectContent,\n  SelectLabel,\n  SelectItem,\n  SelectSeparator,\n} from './components/Select';\n\n// Modal functionality is provided by Dialog components\n\nexport {\n  Toast,\n  Toaster,\n  ToastAction,\n  ToastProvider,\n  ToastViewport,\n  ToastTitle,\n  ToastDescription,\n  ToastClose,\n  useToast,\n} from './components/Toast/Toast';\nexport type { ToastActionElement, ToastProps } from './components/Toast/Toast';\n\nexport { Tooltip, TooltipTrigger, TooltipContent, TooltipProvider, TooltipRoot } from './components/Tooltip/Tooltip';\n\n// DATA DISPLAY COMPONENTS\nexport {\n  DataTable,\n  type DataTableProps,\n  type DataTableColumn,\n  type DataTableAction,\n  type DataTableToolbarButton,\n  type AggregateConfig,\n  type EmptyStateConfig,\n  type GetRowId\n} from './components/DataTable';\n\n// Re-export types from DataTable types\nexport type { DataRecord } from './components/DataTable/types';\n\n// FORM COMPONENTS\nexport { Form } from './components/Form/Form';\nexport { LoginForm } from './components/LoginForm/LoginForm';\nexport type { LoginFormProps } from './components/LoginForm/LoginForm';\n\n// LAYOUT COMPONENTS\nexport { Header } from './components/Header/Header';\nexport { Footer } from './components/Footer/Footer';\nexport type { FooterProps } from './components/Footer/Footer';\n\n// NAVIGATION COMPONENTS\nexport { NavigationMenu } from './components/NavigationMenu/NavigationMenu';\nexport type { NavigationMenuProps, NavigationItem } from './components/NavigationMenu/types';\nexport { UserMenu } from './components/UserMenu/UserMenu';\nexport type { UserMenuProps } from './components/UserMenu/UserMenu';\n\n// Reusable Page/Layout Components\nexport { PaceAppLayout } from './components/PaceAppLayout/PaceAppLayout';\nexport type { PaceAppLayoutProps } from './components/PaceAppLayout/PaceAppLayout';\nexport { PaceLoginPage } from './components/PaceLoginPage/PaceLoginPage';\nexport type { PaceLoginPageProps } from './components/PaceLoginPage/PaceLoginPage';\n\n// UTILITY COMPONENTS\nexport { ErrorBoundary } from './components/ErrorBoundary/ErrorBoundary';\nexport { LoadingSpinner } from './components/LoadingSpinner/LoadingSpinner';\n\n// EVENT MANAGEMENT\nexport { EventSelector } from './components/EventSelector/EventSelector';\n\n// ORGANISATION MANAGEMENT\nexport { OrganisationSelector } from './components/OrganisationSelector/OrganisationSelector';\nexport { useOrganisationPermissions } from './hooks/useOrganisationPermissions';\nexport { useOrganisationSecurity } from './hooks/useOrganisationSecurity';\nexport { createSecureDataAccess } from './utils/secureDataAccess';\n\n// TYPES\nexport type { UserProfile } from './types/organisation';\n\n// AUTHENTICATION FORMS\nexport { PasswordResetForm } from './components/PasswordReset/PasswordResetForm';\nexport { PasswordChangeForm } from './components/PasswordReset/PasswordChangeForm';\n\n// UTILS & HOOKS\nexport { useAppConfig } from './hooks/useAppConfig';\nexport { cn } from './utils/cn';\nexport { setAppConfig, getAppConfig, getCurrentAppName, getCurrentAppId } from './utils/appConfig';\n\n// STORAGE UTILITIES\nexport { FileUpload } from './components/FileUpload/FileUpload';\nexport type { FileUploadProps } from './components/FileUpload/FileUpload';\nexport { useStorage, useFileUpload } from './hooks/useStorage';\nexport * from './utils/storage';\n\n// Table components\nexport {\n  Table,\n  TableHeader,\n  TableBody,\n  TableCaption,\n  TableCell,\n  TableFooter,\n  TableHead,\n  TableRow,\n} from './components/Table/Table';\n\n// STYLES\nexport * from './styles';\n\n// PUBLIC PAGES\nexport * from './hooks/public';\nexport * from './components/PublicLayout';\n","/**\n * @file Secure Data Access Utility\n * @package @jmruthers/pace-core\n * @module Utils/SecureDataAccess\n * @since 0.4.0\n *\n * Secure data access utilities that enforce organisation context for all database operations.\n * Prevents data leakage between organisations and ensures proper access validation.\n */\n\nimport type { SupabaseClient } from '@supabase/supabase-js';\n\n// Generic database record type\nexport interface DatabaseRecord {\n  id: string;\n  organisation_id: string;\n  [key: string]: unknown;\n}\n\n// Generic data for insert/update operations\nexport interface DatabaseData {\n  [key: string]: unknown;\n}\n\n// Generic filters for queries\nexport interface DatabaseFilters {\n  [key: string]: unknown;\n}\n\n// Secure query options\nexport interface SecureQueryOptions {\n  table: string;\n  select: string;\n  organisationId: string;\n  filters?: DatabaseFilters;\n  orderBy?: string;\n  limit?: number;\n  offset?: number;\n}\n\nexport interface SecureDataAccess {\n  // Secure query methods\n  secureQuery: <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions) => Promise<T[]>;\n  secureSingleQuery: <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions) => Promise<T | null>;\n  \n  // Secure mutation methods\n  secureInsert: <T extends DatabaseRecord = DatabaseRecord>(table: string, data: DatabaseData, organisationId: string) => Promise<T | null>;\n  secureUpdate: <T extends DatabaseRecord = DatabaseRecord>(table: string, data: DatabaseData, filters: DatabaseFilters, organisationId: string) => Promise<T | null>;\n  secureDelete: (table: string, filters: DatabaseFilters, organisationId: string) => Promise<boolean>;\n  \n  // Organisation-scoped queries\n  queryByOrganisation: <T extends DatabaseRecord = DatabaseRecord>(table: string, select: string, organisationId: string, filters?: DatabaseFilters) => Promise<T[]>;\n  \n  // Validation helpers\n  validateOrganisationContext: (organisationId: string) => void;\n  ensureOrganisationColumn: (table: string) => boolean;\n}\n\nexport interface SecureQueryBuilder {\n  table: string;\n  select: string;\n  organisationId: string;\n  filters?: DatabaseFilters;\n  orderBy?: string;\n  limit?: number;\n  offset?: number;\n}\n\n/**\n * Create a secure data access instance\n * @param supabase - Supabase client instance\n * @param organisationId - Current organisation context\n * @param isSuperAdmin - Whether user has super admin privileges\n * @returns Secure data access utilities\n */\nexport const createSecureDataAccess = (\n  supabase: SupabaseClient,\n  organisationId: string,\n  isSuperAdmin: boolean = false\n): SecureDataAccess => {\n  \n  // Validate organisation context\n  const validateOrganisationContext = (orgId: string): void => {\n    if (!orgId) {\n      throw new Error('Organisation context is required for secure data access');\n    }\n    \n    if (!isSuperAdmin && !orgId) {\n      throw new Error('Organisation context is mandatory for non-super admin users');\n    }\n  };\n\n  // Check if table has organisation_id column\n  const ensureOrganisationColumn = (table: string): boolean => {\n    // This is a simplified check - in production you might want to cache this\n    const tablesWithOrganisation = [\n      'event',  'organisation_settings',\n      'rbac_event_app_roles', 'rbac_organisation_roles',\n      // SECURITY: Phase 2 additions - complete organisation table mapping\n      'organisation_audit_log', 'organisation_invitations', 'organisation_app_access',\n      // SECURITY: Emergency additions for Phase 1 fixes\n      'cake_meal', 'cake_mealtype', 'pace_person', 'pace_member',\n      // SECURITY: Phase 3A additions - medical and personal data\n      'medi_profile', 'medi_condition', 'medi_diet', 'medi_action_plan', 'medi_profile_versions',\n      'pace_consent', 'pace_contact', 'pace_id_documents', 'pace_qualifications',\n      'form_responses', 'form_response_values', 'forms',\n      // SECURITY: Phase 3B additions - remaining critical tables\n      'invoice', 'line_item', 'credit_balance', 'payment_method',\n      'form_contexts', 'form_field_config', 'form_fields',\n      'cake_delivery', 'cake_diettype', 'cake_diner', 'cake_dish', 'cake_item', \n      'cake_logistics', 'cake_mealplan', 'cake_package', 'cake_recipe', 'cake_supplier', \n      'cake_supply', 'cake_unit', 'event_app_access', 'base_application', 'base_questions'\n    ];\n    \n    return tablesWithOrganisation.includes(table);\n  };\n\n  // Build secure query with organisation context\n  const buildSecureQuery = (options: SecureQueryBuilder) => {\n    const { table, select, organisationId: orgId, filters, orderBy, limit, offset } = options;\n    \n    validateOrganisationContext(orgId);\n    \n    let query = supabase\n      .from(table)\n      .select(select);\n    \n    // Add organisation filter (unless super admin)\n    if (!isSuperAdmin && ensureOrganisationColumn(table)) {\n      query = query.eq('organisation_id', orgId);\n    }\n    \n    // Add additional filters\n    if (filters) {\n      Object.entries(filters).forEach(([key, value]) => {\n        if (value !== undefined && value !== null) {\n          // Handle qualified column names (e.g., 'users.role')\n          const columnName = key.includes('.') ? key.split('.').pop()! : key;\n          query = query.eq(columnName, value);\n        }\n      });\n    }\n    \n    // Add ordering\n    if (orderBy) {\n      // Only use the column name, not a qualified name\n      const orderByColumn = orderBy.split('.').pop();\n      if (orderByColumn) {\n        query = query.order(orderByColumn);\n      }\n    }\n    \n    // Add pagination\n    if (limit) {\n      query = query.limit(limit);\n    }\n    \n    if (offset) {\n      query = query.range(offset, offset + (limit || 10) - 1);\n    }\n    \n    return query;\n  };\n\n  // Secure query for multiple results\n  const secureQuery = async <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions): Promise<T[]> => {\n    const { table, select, organisationId: orgId, filters, orderBy, limit, offset } = options;\n    \n    try {\n      const query = buildSecureQuery({\n        table,\n        select,\n        organisationId: orgId,\n        filters,\n        orderBy,\n        limit,\n        offset\n      });\n      \n      const { data, error } = await query;\n      \n      if (error) {\n        throw error;\n      }\n      \n      // Ensure data is an array and not an error type\n      if (Array.isArray(data)) {\n        return data as unknown as T[];\n      }\n      \n      return [];\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure query for single result\n  const secureSingleQuery = async <T extends DatabaseRecord = DatabaseRecord>(options: SecureQueryOptions): Promise<T | null> => {\n    const { table, select, organisationId: orgId, filters, orderBy, limit, offset } = options;\n    \n    try {\n      const query = buildSecureQuery({\n        table,\n        select,\n        organisationId: orgId,\n        filters,\n        orderBy,\n        limit,\n        offset\n      });\n      \n      const { data, error } = await query.single();\n      \n      if (error) {\n        if (error.code === 'PGRST116') {\n          // No rows returned\n          return null;\n        }\n        throw error;\n      }\n      \n      // Ensure data is not an error type\n      if (data && typeof data === 'object' && !('code' in data)) {\n        return data as unknown as T;\n      }\n      \n      return null;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure insert with organisation context\n  const secureInsert = async <T extends DatabaseRecord = DatabaseRecord>(\n    table: string, \n    data: DatabaseData, \n    organisationId: string\n  ): Promise<T | null> => {\n    validateOrganisationContext(organisationId);\n    \n    try {\n      const insertData = {\n        ...data,\n        organisation_id: organisationId\n      };\n      \n      const { data: result, error } = await supabase\n        .from(table)\n        .insert(insertData)\n        .select()\n        .single();\n      \n      if (error) {\n        throw error;\n      }\n      \n      return result;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure update with organisation context\n  const secureUpdate = async <T extends DatabaseRecord = DatabaseRecord>(\n    table: string, \n    data: DatabaseData, \n    filters: DatabaseFilters, \n    organisationId: string\n  ): Promise<T | null> => {\n    validateOrganisationContext(organisationId);\n    \n    try {\n      let query = supabase\n        .from(table)\n        .update(data);\n      \n      // Add organisation filter (unless super admin)\n      if (!isSuperAdmin && ensureOrganisationColumn(table)) {\n        query = query.eq('organisation_id', organisationId);\n      }\n      \n      // Add additional filters\n      if (filters) {\n        Object.entries(filters).forEach(([key, value]) => {\n          if (value !== undefined && value !== null) {\n            query = query.eq(key, value);\n          }\n        });\n      }\n      \n      const { data: result, error } = await query.select().single();\n      \n      if (error) {\n        throw error;\n      }\n      \n      return result;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Secure delete with organisation context\n  const secureDelete = async (\n    table: string, \n    filters: DatabaseFilters, \n    organisationId: string\n  ): Promise<boolean> => {\n    validateOrganisationContext(organisationId);\n    \n    try {\n      let query = supabase\n        .from(table)\n        .delete();\n      \n      // Add organisation filter (unless super admin)\n      if (!isSuperAdmin && ensureOrganisationColumn(table)) {\n        query = query.eq('organisation_id', organisationId);\n      }\n      \n      // Add additional filters\n      if (filters) {\n        Object.entries(filters).forEach(([key, value]) => {\n          if (value !== undefined && value !== null) {\n            query = query.eq(key, value);\n          }\n        });\n      }\n      \n      const { error } = await query;\n      \n      if (error) {\n        throw error;\n      }\n      \n      return true;\n    } catch (error) {\n      throw error;\n    }\n  };\n\n  // Organisation-scoped query helper\n  const queryByOrganisation = async <T extends DatabaseRecord = DatabaseRecord>(\n    table: string, \n    select: string, \n    organisationId: string, \n    filters?: DatabaseFilters\n  ): Promise<T[]> => {\n    return secureQuery<T>({\n      table,\n      select,\n      organisationId,\n      filters\n    });\n  };\n\n  return {\n    secureQuery,\n    secureSingleQuery,\n    secureInsert,\n    secureUpdate,\n    secureDelete,\n    queryByOrganisation,\n    validateOrganisationContext,\n    ensureOrganisationColumn\n  };\n};\n\n/**\n * Hook for secure data access\n * @returns Secure data access utilities\n */\nexport const useSecureDataAccess = (): SecureDataAccess => {\n  // This would typically get the context from providers\n  // For now, we'll create a placeholder that can be used with explicit parameters\n  throw new Error('useSecureDataAccess must be used with explicit parameters. Use createSecureDataAccess instead.');\n}; ","/**\n * File upload component with app-segregated storage\n */\n\nimport React, { useCallback, useState } from 'react';\nimport { SupabaseClient } from '@supabase/supabase-js';\nimport { validateFileSize, formatFileSize } from '../../utils/storage';\nimport { useFileUpload } from '../../hooks/useStorage';\nimport { Button } from '../Button/Button';\nimport { Progress } from '../Progress/Progress';\nimport { Alert } from '../Alert/Alert';\n\nexport interface FileUploadProps {\n  supabase: SupabaseClient;\n  appName: string;\n  orgId: string;\n  onUploadComplete?: (result: { success: boolean; path?: string; error?: string }) => void;\n  onUploadStart?: () => void;\n  accept?: string;\n  maxSize?: number;\n  multiple?: boolean;\n  disabled?: boolean;\n  className?: string;\n  children?: React.ReactNode;\n}\n\nexport function FileUpload({\n  supabase,\n  appName,\n  orgId,\n  onUploadComplete,\n  onUploadStart,\n  accept = '*/*',\n  maxSize,\n  multiple = false,\n  disabled = false,\n  className = '',\n  children\n}: FileUploadProps) {\n  const [dragActive, setDragActive] = useState(false);\n  const [selectedFiles, setSelectedFiles] = useState<File[]>([]);\n  const [validationErrors, setValidationErrors] = useState<string[]>([]);\n\n  const { uploadWithProgress, uploadProgress, isUploading, uploadError } = useFileUpload({\n    supabase,\n    appName,\n    orgId\n  });\n\n  // Validate files\n  const validateFiles = useCallback((files: File[]): string[] => {\n    const errors: string[] = [];\n\n    files.forEach((file, index) => {\n      // Check file size\n      const sizeValidation = validateFileSize(file);\n      if (!sizeValidation.isValid) {\n        errors.push(`File ${index + 1}: ${sizeValidation.error}`);\n      }\n\n      // Check custom max size\n      if (maxSize && file.size > maxSize) {\n        const fileMB = Math.round(file.size / (1024 * 1024));\n        const maxMB = Math.round(maxSize / (1024 * 1024));\n        errors.push(`File ${index + 1}: Size (${fileMB}MB) exceeds limit (${maxMB}MB)`);\n      }\n    });\n\n    return errors;\n  }, [maxSize]);\n\n  // Handle file selection\n  const handleFileSelect = useCallback((files: FileList | null) => {\n    if (!files) return;\n\n    const fileArray = Array.from(files);\n    const errors = validateFiles(fileArray);\n\n    setValidationErrors(errors);\n    setSelectedFiles(fileArray);\n  }, [validateFiles]);\n\n  // Handle drag events\n  const handleDrag = useCallback((e: React.DragEvent) => {\n    e.preventDefault();\n    e.stopPropagation();\n    if (e.type === 'dragenter' || e.type === 'dragover') {\n      setDragActive(true);\n    } else if (e.type === 'dragleave') {\n      setDragActive(false);\n    }\n  }, []);\n\n  const handleDrop = useCallback((e: React.DragEvent) => {\n    e.preventDefault();\n    e.stopPropagation();\n    setDragActive(false);\n\n    if (disabled) return;\n\n    const files = e.dataTransfer.files;\n    handleFileSelect(files);\n  }, [disabled, handleFileSelect]);\n\n  // Handle file input change\n  const handleFileInputChange = useCallback((e: React.ChangeEvent<HTMLInputElement>) => {\n    handleFileSelect(e.target.files);\n  }, [handleFileSelect]);\n\n  // Handle upload\n  const handleUpload = useCallback(async () => {\n    if (selectedFiles.length === 0 || validationErrors.length > 0) return;\n\n    onUploadStart?.();\n\n    for (const file of selectedFiles) {\n      const result = await uploadWithProgress(file);\n      onUploadComplete?.(result);\n    }\n\n    // Reset selection\n    setSelectedFiles([]);\n    setValidationErrors([]);\n  }, [selectedFiles, validationErrors, uploadWithProgress, onUploadComplete, onUploadStart]);\n\n  // Handle clear\n  const handleClear = useCallback(() => {\n    setSelectedFiles([]);\n    setValidationErrors([]);\n  }, []);\n\n  const canUpload = selectedFiles.length > 0 && validationErrors.length === 0 && !isUploading && !disabled;\n\n  return (\n    <div className={`file-upload ${className}`}>\n      {/* Drop zone */}\n      <div\n        className={`file-upload__dropzone ${\n          dragActive ? 'file-upload__dropzone--active' : ''\n        } ${disabled ? 'file-upload__dropzone--disabled' : ''}`}\n        onDragEnter={handleDrag}\n        onDragLeave={handleDrag}\n        onDragOver={handleDrag}\n        onDrop={handleDrop}\n      >\n        <input\n          type=\"file\"\n          accept={accept}\n          multiple={multiple}\n          onChange={handleFileInputChange}\n          disabled={disabled}\n          className=\"file-upload__input\"\n        />\n        \n        {children || (\n          <div className=\"file-upload__content\">\n            <p className=\"file-upload__text\">\n              {dragActive ? 'Drop files here' : 'Drag and drop files here or click to select'}\n            </p>\n            <Button\n              type=\"button\"\n              variant=\"outline\"\n              disabled={disabled}\n              onClick={() => (document.querySelector('.file-upload__input') as HTMLInputElement)?.click()}\n            >\n              Select Files\n            </Button>\n          </div>\n        )}\n      </div>\n\n      {/* Selected files */}\n      {selectedFiles.length > 0 && (\n        <div className=\"file-upload__files\">\n          <h4 className=\"file-upload__files-title\">Selected Files:</h4>\n          <ul className=\"file-upload__files-list\">\n            {selectedFiles.map((file, index) => (\n              <li key={index} className=\"file-upload__file-item\">\n                <span className=\"file-upload__file-name\">{file.name}</span>\n                <span className=\"file-upload__file-size\">{formatFileSize(file.size)}</span>\n              </li>\n            ))}\n          </ul>\n        </div>\n      )}\n\n      {/* Validation errors */}\n      {validationErrors.length > 0 && (\n        <Alert variant=\"destructive\" className=\"file-upload__errors\">\n          <ul>\n            {validationErrors.map((error, index) => (\n              <li key={index}>{error}</li>\n            ))}\n          </ul>\n        </Alert>\n      )}\n\n      {/* Upload progress */}\n      {isUploading && (\n        <div className=\"file-upload__progress\">\n          <Progress value={uploadProgress} max={100} />\n          <p className=\"file-upload__progress-text\">\n            Uploading... {uploadProgress}%\n          </p>\n        </div>\n      )}\n\n      {/* Upload error */}\n      {uploadError && (\n        <Alert variant=\"destructive\" className=\"file-upload__error\">\n          {uploadError}\n        </Alert>\n      )}\n\n      {/* Actions */}\n      {selectedFiles.length > 0 && (\n        <div className=\"file-upload__actions\">\n          <Button\n            onClick={handleUpload}\n            disabled={!canUpload}\n            className=\"file-upload__upload-btn\"\n          >\n            {isUploading ? 'Uploading...' : `Upload ${selectedFiles.length} file${selectedFiles.length > 1 ? 's' : ''}`}\n          </Button>\n          <Button\n            variant=\"outline\"\n            onClick={handleClear}\n            disabled={isUploading}\n            className=\"file-upload__clear-btn\"\n          >\n            Clear\n          </Button>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA;AAEA;AAEA;AAUA;AAEA;AAOA;AA0BA;AA4CA;;;ACpCO,IAAM,yBAAyB,CACpC,UACA,gBACA,eAAwB,UACH;AAGrB,QAAM,8BAA8B,CAAC,UAAwB;AAC3D,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,QAAI,CAAC,gBAAgB,CAAC,OAAO;AAC3B,YAAM,IAAI,MAAM,6DAA6D;AAAA,IAC/E;AAAA,EACF;AAGA,QAAM,2BAA2B,CAAC,UAA2B;AAE3D,UAAM,yBAAyB;AAAA,MAC7B;AAAA,MAAU;AAAA,MACV;AAAA,MAAwB;AAAA;AAAA,MAExB;AAAA,MAA0B;AAAA,MAA4B;AAAA;AAAA,MAEtD;AAAA,MAAa;AAAA,MAAiB;AAAA,MAAe;AAAA;AAAA,MAE7C;AAAA,MAAgB;AAAA,MAAkB;AAAA,MAAa;AAAA,MAAoB;AAAA,MACnE;AAAA,MAAgB;AAAA,MAAgB;AAAA,MAAqB;AAAA,MACrD;AAAA,MAAkB;AAAA,MAAwB;AAAA;AAAA,MAE1C;AAAA,MAAW;AAAA,MAAa;AAAA,MAAkB;AAAA,MAC1C;AAAA,MAAiB;AAAA,MAAqB;AAAA,MACtC;AAAA,MAAiB;AAAA,MAAiB;AAAA,MAAc;AAAA,MAAa;AAAA,MAC7D;AAAA,MAAkB;AAAA,MAAiB;AAAA,MAAgB;AAAA,MAAe;AAAA,MAClE;AAAA,MAAe;AAAA,MAAa;AAAA,MAAoB;AAAA,MAAoB;AAAA,IACtE;AAEA,WAAO,uBAAuB,SAAS,KAAK;AAAA,EAC9C;AAGA,QAAM,mBAAmB,CAAC,YAAgC;AACxD,UAAM,EAAE,OAAO,QAAQ,gBAAgB,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAElF,gCAA4B,KAAK;AAEjC,QAAI,QAAQ,SACT,KAAK,KAAK,EACV,OAAO,MAAM;AAGhB,QAAI,CAAC,gBAAgB,yBAAyB,KAAK,GAAG;AACpD,cAAQ,MAAM,GAAG,mBAAmB,KAAK;AAAA,IAC3C;AAGA,QAAI,SAAS;AACX,aAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,YAAI,UAAU,UAAa,UAAU,MAAM;AAEzC,gBAAM,aAAa,IAAI,SAAS,GAAG,IAAI,IAAI,MAAM,GAAG,EAAE,IAAI,IAAK;AAC/D,kBAAQ,MAAM,GAAG,YAAY,KAAK;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,SAAS;AAEX,YAAM,gBAAgB,QAAQ,MAAM,GAAG,EAAE,IAAI;AAC7C,UAAI,eAAe;AACjB,gBAAQ,MAAM,MAAM,aAAa;AAAA,MACnC;AAAA,IACF;AAGA,QAAI,OAAO;AACT,cAAQ,MAAM,MAAM,KAAK;AAAA,IAC3B;AAEA,QAAI,QAAQ;AACV,cAAQ,MAAM,MAAM,QAAQ,UAAU,SAAS,MAAM,CAAC;AAAA,IACxD;AAEA,WAAO;AAAA,EACT;AAGA,QAAM,cAAc,OAAkD,YAA8C;AAClH,UAAM,EAAE,OAAO,QAAQ,gBAAgB,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAElF,QAAI;AACF,YAAM,QAAQ,iBAAiB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM;AAE9B,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAGA,UAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAO;AAAA,MACT;AAEA,aAAO,CAAC;AAAA,IACV,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,oBAAoB,OAAkD,YAAmD;AAC7H,UAAM,EAAE,OAAO,QAAQ,gBAAgB,OAAO,SAAS,SAAS,OAAO,OAAO,IAAI;AAElF,QAAI;AACF,YAAM,QAAQ,iBAAiB;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,MAAM,OAAO;AAE3C,UAAI,OAAO;AACT,YAAI,MAAM,SAAS,YAAY;AAE7B,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAGA,UAAI,QAAQ,OAAO,SAAS,YAAY,EAAE,UAAU,OAAO;AACzD,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,eAAe,OACnB,OACA,MACAA,oBACsB;AACtB,gCAA4BA,eAAc;AAE1C,QAAI;AACF,YAAM,aAAa;AAAA,QACjB,GAAG;AAAA,QACH,iBAAiBA;AAAA,MACnB;AAEA,YAAM,EAAE,MAAM,QAAQ,MAAM,IAAI,MAAM,SACnC,KAAK,KAAK,EACV,OAAO,UAAU,EACjB,OAAO,EACP,OAAO;AAEV,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,eAAe,OACnB,OACA,MACA,SACAA,oBACsB;AACtB,gCAA4BA,eAAc;AAE1C,QAAI;AACF,UAAI,QAAQ,SACT,KAAK,KAAK,EACV,OAAO,IAAI;AAGd,UAAI,CAAC,gBAAgB,yBAAyB,KAAK,GAAG;AACpD,gBAAQ,MAAM,GAAG,mBAAmBA,eAAc;AAAA,MACpD;AAGA,UAAI,SAAS;AACX,eAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,cAAI,UAAU,UAAa,UAAU,MAAM;AACzC,oBAAQ,MAAM,GAAG,KAAK,KAAK;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,EAAE,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM,OAAO,EAAE,OAAO;AAE5D,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,eAAe,OACnB,OACA,SACAA,oBACqB;AACrB,gCAA4BA,eAAc;AAE1C,QAAI;AACF,UAAI,QAAQ,SACT,KAAK,KAAK,EACV,OAAO;AAGV,UAAI,CAAC,gBAAgB,yBAAyB,KAAK,GAAG;AACpD,gBAAQ,MAAM,GAAG,mBAAmBA,eAAc;AAAA,MACpD;AAGA,UAAI,SAAS;AACX,eAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAChD,cAAI,UAAU,UAAa,UAAU,MAAM;AACzC,oBAAQ,MAAM,GAAG,KAAK,KAAK;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,EAAE,MAAM,IAAI,MAAM;AAExB,UAAI,OAAO;AACT,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,sBAAsB,OAC1B,OACA,QACAA,iBACA,YACiB;AACjB,WAAO,YAAe;AAAA,MACpB;AAAA,MACA;AAAA,MACA,gBAAAA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;ADlMA;;;AExKA,SAAgB,aAAa,gBAAgB;AAI7C;AAyIQ,cAUE,YAVF;AAvHD,SAAS,WAAW;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACX,WAAW;AAAA,EACX,YAAY;AAAA,EACZ;AACF,GAAoB;AAClB,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAiB,CAAC,CAAC;AAC7D,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,SAAmB,CAAC,CAAC;AAErE,QAAM,EAAE,oBAAoB,gBAAgB,aAAa,YAAY,IAAI,cAAc;AAAA,IACrF;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAGD,QAAM,gBAAgB,YAAY,CAAC,UAA4B;AAC7D,UAAM,SAAmB,CAAC;AAE1B,UAAM,QAAQ,CAAC,MAAM,UAAU;AAE7B,YAAM,iBAAiB,iBAAiB,IAAI;AAC5C,UAAI,CAAC,eAAe,SAAS;AAC3B,eAAO,KAAK,QAAQ,QAAQ,CAAC,KAAK,eAAe,KAAK,EAAE;AAAA,MAC1D;AAGA,UAAI,WAAW,KAAK,OAAO,SAAS;AAClC,cAAM,SAAS,KAAK,MAAM,KAAK,QAAQ,OAAO,KAAK;AACnD,cAAM,QAAQ,KAAK,MAAM,WAAW,OAAO,KAAK;AAChD,eAAO,KAAK,QAAQ,QAAQ,CAAC,WAAW,MAAM,sBAAsB,KAAK,KAAK;AAAA,MAChF;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT,GAAG,CAAC,OAAO,CAAC;AAGZ,QAAM,mBAAmB,YAAY,CAAC,UAA2B;AAC/D,QAAI,CAAC,MAAO;AAEZ,UAAM,YAAY,MAAM,KAAK,KAAK;AAClC,UAAM,SAAS,cAAc,SAAS;AAEtC,wBAAoB,MAAM;AAC1B,qBAAiB,SAAS;AAAA,EAC5B,GAAG,CAAC,aAAa,CAAC;AAGlB,QAAM,aAAa,YAAY,CAAC,MAAuB;AACrD,MAAE,eAAe;AACjB,MAAE,gBAAgB;AAClB,QAAI,EAAE,SAAS,eAAe,EAAE,SAAS,YAAY;AACnD,oBAAc,IAAI;AAAA,IACpB,WAAW,EAAE,SAAS,aAAa;AACjC,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,aAAa,YAAY,CAAC,MAAuB;AACrD,MAAE,eAAe;AACjB,MAAE,gBAAgB;AAClB,kBAAc,KAAK;AAEnB,QAAI,SAAU;AAEd,UAAM,QAAQ,EAAE,aAAa;AAC7B,qBAAiB,KAAK;AAAA,EACxB,GAAG,CAAC,UAAU,gBAAgB,CAAC;AAG/B,QAAM,wBAAwB,YAAY,CAAC,MAA2C;AACpF,qBAAiB,EAAE,OAAO,KAAK;AAAA,EACjC,GAAG,CAAC,gBAAgB,CAAC;AAGrB,QAAM,eAAe,YAAY,YAAY;AAC3C,QAAI,cAAc,WAAW,KAAK,iBAAiB,SAAS,EAAG;AAE/D,oBAAgB;AAEhB,eAAW,QAAQ,eAAe;AAChC,YAAM,SAAS,MAAM,mBAAmB,IAAI;AAC5C,yBAAmB,MAAM;AAAA,IAC3B;AAGA,qBAAiB,CAAC,CAAC;AACnB,wBAAoB,CAAC,CAAC;AAAA,EACxB,GAAG,CAAC,eAAe,kBAAkB,oBAAoB,kBAAkB,aAAa,CAAC;AAGzF,QAAM,cAAc,YAAY,MAAM;AACpC,qBAAiB,CAAC,CAAC;AACnB,wBAAoB,CAAC,CAAC;AAAA,EACxB,GAAG,CAAC,CAAC;AAEL,QAAM,YAAY,cAAc,SAAS,KAAK,iBAAiB,WAAW,KAAK,CAAC,eAAe,CAAC;AAEhG,SACE,qBAAC,SAAI,WAAW,eAAe,SAAS,IAEtC;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,WAAW,yBACT,aAAa,kCAAkC,EACjD,IAAI,WAAW,oCAAoC,EAAE;AAAA,QACrD,aAAa;AAAA,QACb,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,QAAQ;AAAA,QAER;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL;AAAA,cACA;AAAA,cACA,UAAU;AAAA,cACV;AAAA,cACA,WAAU;AAAA;AAAA,UACZ;AAAA,UAEC,YACC,qBAAC,SAAI,WAAU,wBACb;AAAA,gCAAC,OAAE,WAAU,qBACV,uBAAa,oBAAoB,+CACpC;AAAA,YACA;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR;AAAA,gBACA,SAAS,MAAO,SAAS,cAAc,qBAAqB,GAAwB,MAAM;AAAA,gBAC3F;AAAA;AAAA,YAED;AAAA,aACF;AAAA;AAAA;AAAA,IAEJ;AAAA,IAGC,cAAc,SAAS,KACtB,qBAAC,SAAI,WAAU,sBACb;AAAA,0BAAC,QAAG,WAAU,4BAA2B,6BAAe;AAAA,MACxD,oBAAC,QAAG,WAAU,2BACX,wBAAc,IAAI,CAAC,MAAM,UACxB,qBAAC,QAAe,WAAU,0BACxB;AAAA,4BAAC,UAAK,WAAU,0BAA0B,eAAK,MAAK;AAAA,QACpD,oBAAC,UAAK,WAAU,0BAA0B,yBAAe,KAAK,IAAI,GAAE;AAAA,WAF7D,KAGT,CACD,GACH;AAAA,OACF;AAAA,IAID,iBAAiB,SAAS,KACzB,oBAAC,SAAM,SAAQ,eAAc,WAAU,uBACrC,8BAAC,QACE,2BAAiB,IAAI,CAAC,OAAO,UAC5B,oBAAC,QAAgB,mBAAR,KAAc,CACxB,GACH,GACF;AAAA,IAID,eACC,qBAAC,SAAI,WAAU,yBACb;AAAA,0BAAC,YAAS,OAAO,gBAAgB,KAAK,KAAK;AAAA,MAC3C,qBAAC,OAAE,WAAU,8BAA6B;AAAA;AAAA,QAC1B;AAAA,QAAe;AAAA,SAC/B;AAAA,OACF;AAAA,IAID,eACC,oBAAC,SAAM,SAAQ,eAAc,WAAU,sBACpC,uBACH;AAAA,IAID,cAAc,SAAS,KACtB,qBAAC,SAAI,WAAU,wBACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,UAAU,CAAC;AAAA,UACX,WAAU;AAAA,UAET,wBAAc,iBAAiB,UAAU,cAAc,MAAM,QAAQ,cAAc,SAAS,IAAI,MAAM,EAAE;AAAA;AAAA,MAC3G;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,SAAQ;AAAA,UACR,SAAS;AAAA,UACT,UAAU;AAAA,UACV,WAAU;AAAA,UACX;AAAA;AAAA,MAED;AAAA,OACF;AAAA,KAEJ;AAEJ;","names":["organisationId"]}

package/dist/{organisation-CO3Sh3_D.d.ts → organisation-t-vvQC3g.d.ts}

@@ -88,12 +88,5 @@ declare const ORGANISATION_ROLE_PERMISSIONS: {
 };
 type OrganisationRole = keyof typeof ORGANISATION_ROLE_PERMISSIONS;
 type OrganisationPermission = 'view_basic' | 'view_details' | 'moderate_content' | 'manage_events' | 'manage_members' | 'manage_settings' | '*';
-interface SecureQueryOptions {
-    table: string;
-    select: string;
-    filters?: Record<string, unknown>;
-    organisationId: string;
-    userId?: string;
-}
 
-export type { Organisation as O, SecureQueryOptions as S, UserProfile as U, OrganisationMembership as a, OrganisationContextType as b, OrganisationProviderProps as c, OrganisationSecurityError as d, OrganisationRole as e, OrganisationPermission as f, SuperAdminContext as g };
+export type { OrganisationRole as O, SuperAdminContext as S, UserProfile as U, OrganisationPermission as a, Organisation as b, OrganisationMembership as c, OrganisationContextType as d, OrganisationProviderProps as e, OrganisationSecurityError as f };

package/dist/providers.d.ts

@@ -1,8 +1,8 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React__default from 'react';
 import { r as Event } from './unified-CMPjE_fv.js';
-import { c as OrganisationProviderProps, b as OrganisationContextType } from './organisation-CO3Sh3_D.js';
-export { O as Organisation, a as OrganisationMembership, d as OrganisationSecurityError } from './organisation-CO3Sh3_D.js';
+import { e as OrganisationProviderProps, d as OrganisationContextType } from './organisation-t-vvQC3g.js';
+export { b as Organisation, c as OrganisationMembership, f as OrganisationSecurityError } from './organisation-t-vvQC3g.js';
 export { A as AuthContextType, d as AuthProvider, c as AuthProviderProps, I as InactivityContextType, h as InactivityProvider, g as InactivityProviderProps, b as UnifiedAuthContextType, U as UnifiedAuthProvider, a as UnifiedAuthProviderProps, e as useAuth, f as useInactivity, u as useUnifiedAuth } from './UnifiedAuthProvider-CQNiemcB.js';
 export { U as UserEventAccess } from './RBACProvider-BO4ilsQB.js';
 import '@supabase/supabase-js';

package/dist/providers.js

@@ -1,8 +1,8 @@
-import "./chunk-6MTY77WU.js";
+import "./chunk-TNMXZLDR.js";
 import {
   EventProvider,
   useEvents
-} from "./chunk-NRK4AIHQ.js";
+} from "./chunk-KBRACSJI.js";
 import {
   AuthProvider,
   InactivityProvider,
@@ -12,9 +12,9 @@ import {
   useInactivity,
   useOrganisations,
   useUnifiedAuth
-} from "./chunk-EL2O4IUX.js";
-import "./chunk-YDJW5XTN.js";
-import "./chunk-WJARTBCT.js";
+} from "./chunk-AQFRLC7K.js";
+import "./chunk-STT7INZR.js";
+import "./chunk-D7ARGIA3.js";
 import "./chunk-PLDDJCW6.js";
 export {
   AuthProvider,