@jmruthers/pace-core 0.5.71 → 0.5.73

package/dist/{chunk-2NWIXRSB.js → chunk-BYG6OSTC.js}

@@ -15,7 +15,7 @@ import {
   SelectSeparator,
   SelectTrigger,
   SelectValue
-} from "./chunk-VLFIYM6B.js";
+} from "./chunk-5A4RL4BC.js";
 import {
   isPermitted
 } from "./chunk-FGMFQSHX.js";
@@ -25,7 +25,15 @@ import {
   usePublicEventLogo,
   usePublicPageContext,
   useToast
-} from "./chunk-C353TCFY.js";
+} from "./chunk-M4UMXYNK.js";
+import {
+  EventProvider_exports,
+  OrganisationProvider_exports,
+  init_EventProvider,
+  init_OrganisationProvider,
+  useEvents,
+  useOrganisations
+} from "./chunk-RJNE764D.js";
 import {
   Button,
   Dialog,
@@ -34,17 +42,11 @@ import {
   DialogOverlay,
   DialogTitle,
   DialogTrigger,
-  EventProvider_exports,
-  OrganisationProvider_exports,
   UnifiedAuthProvider_exports,
   init_Button,
-  init_EventProvider,
-  init_OrganisationProvider,
   init_UnifiedAuthProvider,
-  useEvents,
-  useOrganisations,
   useUnifiedAuth
-} from "./chunk-4CET7YQI.js";
+} from "./chunk-GBC5PC3N.js";
 import {
   LoadingSpinner
 } from "./chunk-CDQ3PX7L.js";
@@ -54,7 +56,7 @@ import {
 import {
   cn,
   init_cn
-} from "./chunk-6RBH67W7.js";
+} from "./chunk-CDDYJCYU.js";
 import {
   __require,
   __toCommonJS
@@ -930,7 +932,30 @@ var NavigationMenu = React9.forwardRef(({
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       });
     }
-    const hasPermission = true;
+    if (!authContext) {
+      if (onNavigate) {
+        onNavigate(item);
+      } else if (item.href) {
+        window.location.href = item.href;
+      }
+      return;
+    }
+    const isItemVisible = filteredItems.some((filtered) => filtered.id === item.id);
+    let hasPermission = true;
+    if (item.permissions && item.permissions.length > 0) {
+      hasPermission = item.permissions.some((permission) => {
+        if (typeof permission !== "string") return true;
+        return authContext.hasPermission(permission);
+      });
+    }
+    if (!hasPermission) {
+      if (item.roles && item.roles.length > 0) {
+        hasPermission = item.roles.some((role) => {
+          if (typeof role !== "string") return true;
+          return authContext.hasRole(role);
+        });
+      }
+    }
     if (!hasPermission) {
       if (onNavigationAccessDenied) {
         onNavigationAccessDenied(item.id, "Insufficient permissions");
@@ -1330,53 +1355,77 @@ function PaceAppLayout({
   }, [baseMenuItems, filterNavigationByPermissions, enforcePermissions, pageIdMapping, routePermissions, defaultPermission]);
   useEffect3(() => {
     if (!roleBasedRouting || routeConfig.length === 0) return;
-    const currentPath = location.pathname;
-    const currentRoute = routeConfig.find((route) => route.path === currentPath);
-    if (!currentRoute) {
-      if (strictMode) {
-        console.error(`[PaceAppLayout] STRICT MODE VIOLATION: Route not found in configuration`, {
-          route: currentPath,
-          userId: user?.id,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        });
-        if (onRouteStrictModeViolation) {
-          onRouteStrictModeViolation(currentPath, "Route not found in configuration");
+    let isMounted = true;
+    const checkRouteAccess = async () => {
+      const currentPath = location.pathname;
+      const currentRoute = routeConfig.find((route) => route.path === currentPath);
+      if (!currentRoute) {
+        if (strictMode) {
+          console.error(`[PaceAppLayout] STRICT MODE VIOLATION: Route not found in configuration`, {
+            route: currentPath,
+            userId: user?.id,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
+          if (onRouteStrictModeViolation) {
+            onRouteStrictModeViolation(currentPath, "Route not found in configuration");
+          }
         }
+        return;
       }
-      return;
-    }
-    const hasAccess = true;
-    if (!hasAccess) {
-      if (onRouteAccessDenied) {
-        onRouteAccessDenied(currentPath, "Insufficient permissions");
+      let hasAccess = true;
+      if (currentRoute.pageId && currentRoute.permissions && currentRoute.permissions.length > 0) {
+        try {
+          const hasPagePermission = await checkPermission(currentRoute.permissions[0], currentRoute.pageId);
+          if (!isMounted) return;
+          hasAccess = hasPagePermission;
+        } catch (error) {
+          console.error("[PaceAppLayout] Failed to check page permission:", error);
+          if (!isMounted) return;
+          hasAccess = false;
+        }
       }
-      if (strictMode) {
-        console.error(`[PaceAppLayout] STRICT MODE VIOLATION: User attempted to access protected route without permission`, {
+      if (hasAccess && currentRoute.roles && currentRoute.roles.length > 0 && user?.id) {
+        const { useUnifiedAuth: useUnifiedAuth2 } = await import("./UnifiedAuthProvider-6SYT5WFN.js");
+        hasAccess = true;
+      }
+      if (!isMounted) return;
+      if (!hasAccess) {
+        if (onRouteAccessDenied) {
+          onRouteAccessDenied(currentPath, "Insufficient permissions");
+        }
+        if (strictMode) {
+          console.error(`[PaceAppLayout] STRICT MODE VIOLATION: User attempted to access protected route without permission`, {
+            route: currentPath,
+            userId: user?.id,
+            permissions: currentRoute.permissions,
+            roles: currentRoute.roles,
+            accessLevel: currentRoute.accessLevel,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
+          if (onRouteStrictModeViolation) {
+            onRouteStrictModeViolation(currentPath, "Insufficient permissions");
+          }
+        }
+        navigate(fallbackRoute, { replace: true });
+        return;
+      }
+      if (auditLog) {
+        console.log(`[PaceAppLayout] Route access attempt:`, {
           route: currentPath,
           userId: user?.id,
+          allowed: hasAccess,
           permissions: currentRoute.permissions,
           roles: currentRoute.roles,
           accessLevel: currentRoute.accessLevel,
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         });
-        if (onRouteStrictModeViolation) {
-          onRouteStrictModeViolation(currentPath, "Insufficient permissions");
-        }
       }
-      navigate(fallbackRoute, { replace: true });
-    }
-    if (auditLog) {
-      console.log(`[PaceAppLayout] Route access attempt:`, {
-        route: currentPath,
-        userId: user?.id,
-        allowed: hasAccess,
-        permissions: currentRoute.permissions,
-        roles: currentRoute.roles,
-        accessLevel: currentRoute.accessLevel,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      });
-    }
-  }, [roleBasedRouting, routeConfig, location.pathname, strictMode, user?.id, fallbackRoute]);
+    };
+    checkRouteAccess();
+    return () => {
+      isMounted = false;
+    };
+  }, [roleBasedRouting, routeConfig, location.pathname, strictMode, user?.id, fallbackRoute, checkPermission, navigate, auditLog, onRouteAccessDenied, onRouteStrictModeViolation]);
   const handleSignOut = async () => {
     await signOut();
   };
@@ -3753,4 +3802,4 @@ export {
   PublicPageDiagnostic,
   PublicPageContextChecker
 };
-//# sourceMappingURL=chunk-2NWIXRSB.js.map
+//# sourceMappingURL=chunk-BYG6OSTC.js.map