@jmruthers/pace-core 0.5.75 → 0.5.77

package/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed - RBAC Refactoring
+- **Breaking**: Renamed provider hook `useRBAC()` to `useRBACContext()` to avoid naming collision
+- **Removed**: Non-functional `usePermissionCheck` hook  
+- **Deprecated**: `RBACService`, `useRBACService` - use new RBAC system instead
+- Consolidated permission checking logic into single source of truth
+- Established consistent fail-secure error handling across RBAC components
+- Removed 100+ lines of duplicate code
+
 ### Added
 - **DataTable Initial Page Size**: Added `initialPageSize` prop to DataTable component for customizing the initial page size
 - **Page Size Validation**: Automatic validation of initial page size against available options with fallback to closest valid option

package/dist/{RBACService-C4udt_Zp.d.ts → AuthService-SBHZQtCH.d.ts}

@@ -1,62 +1,8 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React__default from 'react';
 import { SupabaseClient, User, Session, AuthError } from '@supabase/supabase-js';
-import { c as AccessLevel, r as Event } from './unified-CM7T0aTK.js';
-import { b as Organisation, c as OrganisationMembership, d as OrganisationHierarchy } from './organisation-BtshODVF.js';
-
-/**
- * @file RBAC Service Interface
- * @package @jmruthers/pace-core
- * @module Services/Interfaces
- * @since 0.1.0
- *
- * Interface for RBAC service operations.
- * Defines the contract for role-based access control functionality.
- */
-
-interface UserEventAccess {
-    event_id: string;
-    event_name: string;
-    event_description?: string | null;
-    start_date: string;
-    end_date: string;
-    event_status: string;
-    app_id: string;
-    access_level: string;
-    granted_at: string;
-    organisation_id: string;
-}
-interface AppConfig {
-    supports_direct_access: boolean;
-    requires_event: boolean;
-}
-interface IRBACService {
-    getPermissions(): Record<string, boolean>;
-    getRoles(): string[];
-    getAccessLevel(): AccessLevel;
-    isLoading(): boolean;
-    getError(): Error | null;
-    getSelectedEventId(): string | null;
-    getAppConfig(): AppConfig | null;
-    getUserEventAccess(): UserEventAccess[];
-    isEventAccessLoading(): boolean;
-    getSelectedOrganisationId(): string | null;
-    hasPermission(permission: string, orgId?: string): boolean;
-    hasAnyPermission(permissions: string[], orgId?: string): boolean;
-    hasAllPermissions(permissions: string[], orgId?: string): boolean;
-    hasRole(role: string): boolean;
-    hasAccessLevel(level: AccessLevel): boolean;
-    canAccess(resource: string, action: string, orgId?: string): boolean;
-    validatePermission(permission: string, orgId?: string): Promise<boolean>;
-    validateAccess(resource: string, action: string, orgId?: string): Promise<boolean>;
-    refreshPermissions(eventId?: string, orgId?: string): Promise<void>;
-    setSelectedEventId(eventId: string | null): void;
-    loadUserEventAccess(orgId?: string): Promise<void>;
-    getUserEventAccessById(eventId: string): UserEventAccess | undefined;
-    requireOrganisationContext(): string;
-    initialize(): Promise<void>;
-    cleanup(): void;
-}
+import { E as Event } from './unified-DQ4VcT7H.js';
+import { O as Organisation, a as OrganisationMembership, d as OrganisationHierarchy } from './organisation-D6qRDtbF.js';
 
 /**
  * @file Base Service Class
@@ -155,8 +101,8 @@ declare class EventService extends BaseService implements IEventService {
     private isFetchingRef;
     private hasAutoSelectedRef;
     private userClearedEventRef;
-    constructor(supabaseClient: any, user: any, session: any, appName: string, selectedOrganisation: any, setSelectedEventId: (eventId: string | null) => void);
-    updateDependencies(supabaseClient: any, user: any, session: any, appName: string, selectedOrganisation: any, setSelectedEventId: (eventId: string | null) => void): void;
+    constructor(supabaseClient: SupabaseClient, user: User | null, session: Session | null, appName: string, selectedOrganisation: Organisation | null, setSelectedEventId: (eventId: string | null) => void);
+    updateDependencies(supabaseClient: SupabaseClient, user: User | null, session: Session | null, appName: string, selectedOrganisation: Organisation | null, setSelectedEventId: (eventId: string | null) => void): void;
     getEvents(): Event[];
     getSelectedEvent(): Event | null;
     isLoading(): boolean;
@@ -466,63 +412,4 @@ declare class AuthService extends BaseService implements IAuthService {
     private removeErrorHandlers;
 }
 
-/**
- * @file RBAC Service
- * @package @jmruthers/pace-core
- * @module Services
- * @since 0.1.0
- *
- * RBAC service implementation.
- * Handles role-based access control, permissions, and event access management.
- */
-
-declare class RBACService extends BaseService implements IRBACService {
-    private permissions;
-    private roles;
-    private accessLevel;
-    private rbacLoading;
-    private rbacError;
-    private selectedEventId;
-    private appConfig;
-    private userEventAccess;
-    private eventAccessLoading;
-    private selectedOrganisationId;
-    private supabaseClient;
-    private user;
-    private session;
-    private appName;
-    constructor(supabaseClient: SupabaseClient, user: User | null, session: Session | null, appName: string);
-    updateDependencies(user: User | null, session: Session | null, appName: string): void;
-    getPermissions(): Record<string, boolean>;
-    getRoles(): string[];
-    getAccessLevel(): AccessLevel;
-    isLoading(): boolean;
-    getError(): Error | null;
-    getSelectedEventId(): string | null;
-    getAppConfig(): AppConfig | null;
-    getUserEventAccess(): UserEventAccess[];
-    isEventAccessLoading(): boolean;
-    getSelectedOrganisationId(): string | null;
-    hasPermission(permission: string, orgId?: string): boolean;
-    hasAnyPermission(permissions: string[], orgId?: string): boolean;
-    hasAllPermissions(permissions: string[], orgId?: string): boolean;
-    hasRole(role: string): boolean;
-    hasAccessLevel(level: AccessLevel): boolean;
-    canAccess(resource: string, action: string, orgId?: string): boolean;
-    validatePermission(permission: string, orgId?: string): Promise<boolean>;
-    validateAccess(resource: string, action: string, orgId?: string): Promise<boolean>;
-    refreshPermissions(eventId?: string, orgId?: string): Promise<void>;
-    setSelectedEventId(eventId: string | null): void;
-    loadUserEventAccess(orgId?: string): Promise<void>;
-    getUserEventAccessById(eventId: string): UserEventAccess | undefined;
-    requireOrganisationContext(): string;
-    initialize(): Promise<void>;
-    cleanup(): void;
-    protected doInitialize(): Promise<void>;
-    protected doCleanup(): void;
-    private loadAppConfig;
-    private loadPersistedState;
-    private transformRBACPermissions;
-}
-
-export { AuthService as A, type EventServiceContextType as E, type InactivityServiceContextType as I, type OrganisationServiceContextType as O, RBACService as R, type UserEventAccess as U, type EventContextType as a, EventServiceContext as b, type EventServiceProviderProps as c, EventServiceProvider as d, OrganisationServiceContext as e, type OrganisationServiceProviderProps as f, OrganisationServiceProvider as g, useOrganisationService as h, InactivityServiceContext as i, type InactivityServiceProviderProps as j, InactivityServiceProvider as k, useInactivityService as l, InactivityService as m, EventService as n, OrganisationService as o, useEventService as u };
+export { AuthService as A, type EventServiceContextType as E, type InactivityServiceContextType as I, type OrganisationServiceContextType as O, type EventContextType as a, EventServiceContext as b, type EventServiceProviderProps as c, EventServiceProvider as d, OrganisationServiceContext as e, type OrganisationServiceProviderProps as f, OrganisationServiceProvider as g, useOrganisationService as h, InactivityServiceContext as i, type InactivityServiceProviderProps as j, InactivityServiceProvider as k, useInactivityService as l, InactivityService as m, EventService as n, OrganisationService as o, useEventService as u };

package/dist/{DataTable-ntgmhO2W.d.ts → DataTable-BE0OXZKQ.d.ts}

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React__default from 'react';
-import { D as DataRecord, a as DataTableColumn, b as DataTableRBACConfig, c as DataTableFeatureConfig, H as HierarchicalConfig, P as PerformanceConfig, S as ServerSideConfig, d as PaginationMode, C as ChunkingConfig, e as SearchIndexConfig, G as GetRowId, E as EmptyStateConfig, A as AggregateConfig, f as DataTableAction } from './types-CGX9Vyf5.js';
+import { D as DataRecord, a as DataTableColumn, b as DataTableRBACConfig, c as DataTableFeatureConfig, H as HierarchicalConfig, P as PerformanceConfig, S as ServerSideConfig, d as PaginationMode, C as ChunkingConfig, e as SearchIndexConfig, G as GetRowId, E as EmptyStateConfig, A as AggregateConfig, f as DataTableAction } from './types-BDg1mAGG.js';
 
 /**
  * Configuration interface for customizing ImportModal text content
@@ -47,7 +47,7 @@ interface DataTableProps<TData extends DataRecord> {
     /** Additional CSS classes for the table container */
     className?: string;
     /** Feature configuration - all features are disabled by default */
-    features: DataTableFeatureConfig;
+    features?: DataTableFeatureConfig;
     /** Hierarchical parent/child row configuration */
     hierarchical?: HierarchicalConfig;
     /** Performance optimization configuration */
@@ -108,6 +108,13 @@ interface DataTableProps<TData extends DataRecord> {
     actions?: DataTableAction<TData>[];
     /** Column order configuration - array of column IDs in desired order */
     columnOrder?: string[];
+    /** Unique storage key for persisting table layout state across sessions */
+    storageKey?: string;
+    /** Callback when table layout changes (column order, visibility, etc.) */
+    onLayoutChange?: (layout: {
+        columnOrder: string[];
+        columnVisibility: Record<string, boolean>;
+    }) => void;
 }
 /**
  * Enhanced DataTable with comprehensive performance optimizations

package/dist/DataTable-QCNCV6IK.js

@@ -0,0 +1,157 @@
+import {
+  ActionButtons,
+  BulkOperationsDropdown,
+  ColumnFactory,
+  ColumnVisibilityDropdown,
+  DataTable,
+  DataTableCore,
+  DataTableErrorBoundary,
+  DataTableModals,
+  DataTableToolbar,
+  EditableRow,
+  EmptyState,
+  EnhancedPaginationControls,
+  GroupHeader,
+  GroupingDropdown,
+  ImportModal,
+  LoadingState,
+  PaginationControls,
+  UnifiedTableBody,
+  announce,
+  announceBulkOperation,
+  announceFilterChange,
+  announceLoadingState,
+  announcePaginationChange,
+  announceSearchResults,
+  announceSelectionChange,
+  announceSortChange,
+  calculateAllDepths,
+  calculateAllIndentation,
+  calculateIndentation,
+  calculateOptimalPageSize,
+  cleanupLiveRegion,
+  createHierarchicalStructure,
+  defaultDataTableFeatures,
+  exportToCSV,
+  generateCSVContent,
+  getAriaSortValue,
+  getCellRenderer,
+  getHierarchicalSortConfig,
+  getPageSizeOptions,
+  getPaginationBinding,
+  getRowDepth,
+  getRowDescription,
+  getRowIdSafe,
+  getSortButtonLabel,
+  groupHierarchicalData,
+  hasValidRowId,
+  initializeLiveRegion,
+  isHierarchicalSortableColumn,
+  normalizeDataTableFeatures,
+  shouldShowColumnForRow,
+  sortHierarchicalDataByStructure,
+  sortHierarchicalDataWithSorting,
+  validateHierarchicalData,
+  validatePaginationConfig
+} from "./chunk-DDPG7FCX.js";
+import "./chunk-PUKTJMRT.js";
+import "./chunk-S63MFSY6.js";
+import "./chunk-Q7APDV6H.js";
+import {
+  CircuitBreaker,
+  DEFAULT_FALLBACK_CONFIG,
+  DataChunkManager,
+  DataTableError,
+  DataTableErrorType,
+  ErrorRecoveryManager,
+  MemoryMonitor,
+  SearchIndex,
+  VisibilityTracker,
+  chunkData,
+  debounce,
+  determinePaginationMode,
+  getOptimalPageSizeOptions,
+  safeExecute,
+  throttle,
+  useDataTablePerformance
+} from "./chunk-YCKPEMJA.js";
+import "./chunk-CRKP3HXI.js";
+import "./chunk-DVHZ5L55.js";
+import "./chunk-JDQ7T3QB.js";
+import "./chunk-PYUXFQJ3.js";
+import "./chunk-JCQZ6LA7.js";
+import "./chunk-CVMVPYAL.js";
+import "./chunk-PLDDJCW6.js";
+export {
+  ActionButtons,
+  BulkOperationsDropdown,
+  CircuitBreaker,
+  ColumnFactory,
+  ColumnVisibilityDropdown,
+  DEFAULT_FALLBACK_CONFIG,
+  DataChunkManager,
+  DataTable,
+  DataTableCore,
+  DataTableError,
+  DataTableErrorBoundary,
+  DataTableErrorType,
+  DataTableModals,
+  DataTableToolbar,
+  EditableRow,
+  EmptyState,
+  EnhancedPaginationControls,
+  ErrorRecoveryManager,
+  GroupHeader,
+  GroupingDropdown,
+  ImportModal,
+  LoadingState,
+  MemoryMonitor,
+  PaginationControls,
+  SearchIndex,
+  UnifiedTableBody,
+  VisibilityTracker,
+  announce,
+  announceBulkOperation,
+  announceFilterChange,
+  announceLoadingState,
+  announcePaginationChange,
+  announceSearchResults,
+  announceSelectionChange,
+  announceSortChange,
+  calculateAllDepths,
+  calculateAllIndentation,
+  calculateIndentation,
+  calculateOptimalPageSize,
+  chunkData,
+  cleanupLiveRegion,
+  createHierarchicalStructure,
+  debounce,
+  defaultDataTableFeatures,
+  determinePaginationMode,
+  exportToCSV,
+  generateCSVContent,
+  getAriaSortValue,
+  getCellRenderer,
+  getHierarchicalSortConfig,
+  getOptimalPageSizeOptions,
+  getPageSizeOptions,
+  getPaginationBinding,
+  getRowDepth,
+  getRowDescription,
+  getRowIdSafe,
+  getSortButtonLabel,
+  groupHierarchicalData,
+  hasValidRowId,
+  initializeLiveRegion,
+  isHierarchicalSortableColumn,
+  normalizeDataTableFeatures,
+  safeExecute,
+  shouldShowColumnForRow,
+  sortHierarchicalDataByStructure,
+  sortHierarchicalDataWithSorting,
+  throttle,
+  useDataTablePerformance,
+  validateHierarchicalData,
+  validatePaginationConfig
+};
+//# sourceMappingURL=DataTable-QCNCV6IK.js.map

package/dist/{PublicLoadingSpinner-BKNBT6b6.d.ts → PublicLoadingSpinner-CnUaz0vG.d.ts}

@@ -12,8 +12,8 @@ import * as TooltipPrimitive from '@radix-ui/react-tooltip';
 import { FieldValues, DefaultValues, SubmitHandler, SubmitErrorHandler, UseFormReturn } from 'react-hook-form';
 import { z } from 'zod';
 import { User, SupabaseClient, createClient } from '@supabase/supabase-js';
-import { r as Event } from './unified-CM7T0aTK.js';
-import { b as Organisation } from './organisation-BtshODVF.js';
+import { E as Event } from './unified-DQ4VcT7H.js';
+import { O as Organisation } from './organisation-D6qRDtbF.js';
 import { b as FileCategory, c as FileUploadOptions, e as FileUploadResult, F as FileReference } from './file-reference-9xUOnwyt.js';
 
 interface ButtonProps extends React.ButtonHTMLAttributes<HTMLButtonElement> {
@@ -856,32 +856,43 @@ declare const DialogTitle: React.ForwardRefExoticComponent<DialogTitleProps & Re
 declare const DialogDescription: React.ForwardRefExoticComponent<DialogDescriptionProps & React.RefAttributes<HTMLParagraphElement>>;
 
 /**
- * @file Select Component - Simple HTML Structure
+ * @file Select Hooks - Custom hooks for Select component state management
  * @package @jmruthers/pace-core
- * @module Components/Select
- * @since 0.3.0
- *
- * A simple select component using semantic HTML structure
- * with proper DOM nesting and accessibility.
+ * @module Components/Select/Hooks
+ * @since 0.4.0
  *
- * Features:
- * - Semantic HTML with <form> + <button> + <ul> + <li>
- * - Proper DOM nesting (no button inside select)
- * - Built on pace-core Button component for consistency
- * - Simple positioning and styling
- * - Better accessibility and SEO
- * - Backward compatible API
+ * Custom hooks for Select component following SOLID principles:
+ * - Single Responsibility: Each hook handles one concern
+ * - Open/Closed: Easy to extend without modification
+ * - Dependency Inversion: Abstractions over concrete implementations
  */
 
-interface SelectProps extends Omit<React.HTMLAttributes<HTMLFormElement>, 'onChange' | 'onKeyDown' | 'onFocus' | 'onBlur'> {
+interface UseSelectStateProps {
     value?: string;
     defaultValue?: string;
     selectedText?: string;
-    onValueChange?: (value: string) => void;
     open?: boolean;
     defaultOpen?: boolean;
-    onOpenChange?: (open: boolean) => void;
     disabled?: boolean;
+    onValueChange?: (value: string) => void;
+    onOpenChange?: (open: boolean) => void;
+}
+
+/**
+ * @file Select Component - Refactored SOLID Implementation
+ * @package @jmruthers/pace-core
+ * @module Components/Select
+ * @since 0.4.0
+ *
+ * Refactored Select component following SOLID principles:
+ * - Single Responsibility: Each component has one clear purpose
+ * - Open/Closed: Easy to extend without modification
+ * - Liskov Substitution: Components can be substituted
+ * - Interface Segregation: Small, focused interfaces
+ * - Dependency Inversion: Depends on abstractions, not concretions
+ */
+
+interface SelectProps extends Omit<React.HTMLAttributes<HTMLFormElement>, 'onChange' | 'onKeyDown' | 'onFocus' | 'onBlur'> {
     children: React.ReactNode;
     className?: string;
 }
@@ -908,7 +919,7 @@ interface SelectItemProps {
     className?: string;
     onClick?: (e: React.MouseEvent) => void;
 }
-declare const Select: React.ForwardRefExoticComponent<SelectProps & React.RefAttributes<HTMLFormElement>>;
+declare const Select: React.ForwardRefExoticComponent<SelectProps & UseSelectStateProps & React.RefAttributes<HTMLFormElement>>;
 declare const SelectTrigger: React.ForwardRefExoticComponent<SelectTriggerProps & React.RefAttributes<HTMLButtonElement>>;
 declare const SelectValue: React.ForwardRefExoticComponent<SelectValueProps & React.RefAttributes<HTMLSpanElement>>;
 declare const SelectContent: React.ForwardRefExoticComponent<SelectContentProps & React.RefAttributes<HTMLUListElement>>;
@@ -2518,6 +2529,8 @@ interface PaceLoginPageProps {
     appName: string;
     /** The path to redirect to upon successful login. Defaults to `/`. */
     onSuccessRedirectPath?: string;
+    /** Whether to check app access using RBAC. Defaults to false. */
+    requireAppAccess?: boolean;
 }
 /**
  * A consistent, reusable login page for all PACE suite applications.
@@ -2526,6 +2539,7 @@ interface PaceLoginPageProps {
  *
  * Recent enhancements:
  * - Role-based redirection: Admin users are automatically redirected
+ * - RBAC-based app access control: Checks if user has permission to access the app
  * - Enhanced error handling with navigation error recovery
  * - Dual loading states: auth loading + form submission loading
  * - Error persistence: Auth errors are displayed below the form

package/dist/{UnifiedAuthProvider-Bj6YCf7c.d.ts → UnifiedAuthProvider-B391Aqum.d.ts}

@@ -1,59 +1,50 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React__default from 'react';
-import { SupabaseClient } from '@supabase/supabase-js';
+import { SupabaseClient, User, Session, AuthError } from '@supabase/supabase-js';
+import { O as Organisation, a as OrganisationMembership } from './organisation-D6qRDtbF.js';
+import { E as Event } from './unified-DQ4VcT7H.js';
 
+interface UserEventAccess {
+    event_id: string;
+    event_name: string;
+    event_description?: string | null;
+    start_date: string;
+    end_date: string;
+    event_status: string;
+    app_id: string;
+    access_level: string;
+    granted_at: string;
+    organisation_id: string;
+}
 interface UnifiedAuthContextType {
-    user: any | null;
-    session: any | null;
+    user: User | null;
+    session: Session | null;
     isAuthenticated: boolean;
     authLoading: boolean;
-    authError: any | null;
-    error: any | null;
+    authError: AuthError | null;
+    error: AuthError | null;
     supabase: SupabaseClient | null;
     signIn: (email: string, password?: string) => Promise<{
-        error: any | null;
+        error: AuthError | null;
     }>;
     signUp: (email: string, password: string) => Promise<{
-        error: any | null;
+        error: AuthError | null;
     }>;
     signOut: () => Promise<{
-        error: any | null;
+        error: AuthError | null;
     }>;
     resetPassword: (email: string) => Promise<{
-        error: any | null;
+        error: AuthError | null;
     }>;
     updatePassword: (password: string) => Promise<{
-        error: any | null;
+        error: AuthError | null;
     }>;
     refreshSession: () => Promise<{
-        error: any | null;
+        error: AuthError | null;
     }>;
-    permissions: Record<string, boolean>;
-    roles: string[];
-    accessLevel: any;
-    rbacLoading: boolean;
-    rbacError: Error | null;
-    selectedEventId: string | null;
-    appConfig: any | null;
-    userEventAccess: any[];
-    eventAccessLoading: boolean;
-    selectedOrganisationId: string | null;
-    hasPermission: (permission: string, orgId?: string) => boolean;
-    hasAnyPermission: (permissions: string[], orgId?: string) => boolean;
-    hasAllPermissions: (permissions: string[], orgId?: string) => boolean;
-    hasRole: (role: string) => boolean;
-    hasAccessLevel: (level: any) => boolean;
-    canAccess: (resource: string, action: string, orgId?: string) => boolean;
-    validatePermission: (permission: string, orgId?: string) => Promise<boolean>;
-    validateAccess: (resource: string, action: string, orgId?: string) => Promise<boolean>;
-    refreshPermissions: (eventId?: string, orgId?: string) => Promise<void>;
-    setSelectedEventId: (eventId: string | null) => void;
-    loadUserEventAccess: (orgId?: string) => Promise<void>;
-    getUserEventAccess: (eventId: string) => any | undefined;
-    requireOrganisationContext: () => string;
-    selectedOrganisation: any | null;
-    organisations: any[];
-    userMemberships: any[];
+    selectedOrganisation: Organisation | null;
+    organisations: Organisation[];
+    userMemberships: OrganisationMembership[];
     organisationLoading: boolean;
     organisationError: Error | null;
     hasValidOrganisationContext: boolean;
@@ -62,14 +53,14 @@ interface UnifiedAuthContextType {
     getUserRole: (orgId?: string) => string;
     validateOrganisationAccess: (orgId: string) => boolean;
     refreshOrganisations: () => Promise<void>;
-    ensureOrganisationContext: () => any;
+    ensureOrganisationContext: () => Organisation;
     isOrganisationSecure: () => boolean;
-    getPrimaryOrganisation: () => any | null;
-    events: any[];
-    selectedEvent: any | null;
+    getPrimaryOrganisation: () => Organisation | null;
+    events: Event[];
+    selectedEvent: Event | null;
     eventLoading: boolean;
     eventError: Error | null;
-    setSelectedEvent: (event: any | null) => void;
+    setSelectedEvent: (event: Event | null) => void;
     refreshEvents: () => Promise<void>;
     showInactivityWarning: boolean;
     inactivityTimeRemaining: number;
@@ -84,6 +75,9 @@ interface UnifiedAuthContextType {
     handleStaySignedIn: () => void;
     handleSignOutNow: () => Promise<void>;
     appName: string;
+    appConfig: {
+        requires_event: boolean;
+    } | null;
     isLoading: boolean;
     hasErrors: boolean;
 }
@@ -95,7 +89,9 @@ interface UnifiedAuthProviderProps {
     persistState?: boolean;
     enablePersistence?: boolean;
     requireOrganisationContext?: boolean;
-    enableRBAC?: boolean;
+    appConfig?: {
+        requires_event: boolean;
+    } | null;
     idleTimeoutMs: number;
     warnBeforeMs: number;
     onIdleLogout: (reason: 'inactivity') => void;
@@ -106,8 +102,9 @@ interface UnifiedAuthProviderProps {
     }) => React__default.ReactNode;
     dangerouslyDisableInactivity?: boolean;
 }
-declare function UnifiedAuthProvider({ children, supabaseClient, appName, persistState, enablePersistence, requireOrganisationContext, enableRBAC, idleTimeoutMs, // 30 minutes
+declare function UnifiedAuthProvider({ children, supabaseClient, appName, appConfig, // Default to requiring events
+persistState, enablePersistence, requireOrganisationContext, idleTimeoutMs, // 30 minutes
 warnBeforeMs, // 60 seconds
 onIdleLogout, renderInactivityWarning, dangerouslyDisableInactivity }: UnifiedAuthProviderProps): react_jsx_runtime.JSX.Element;
 
-export { type UnifiedAuthContextType as U, type UnifiedAuthProviderProps as a, UnifiedAuthProvider as b, useUnifiedAuth as u };
+export { type UserEventAccess as U, type UnifiedAuthContextType as a, type UnifiedAuthProviderProps as b, UnifiedAuthProvider as c, useUnifiedAuth as u };

package/dist/{UnifiedAuthProvider-3NKDOSOK.js → UnifiedAuthProvider-Z2FWNW7O.js}

@@ -1,16 +1,15 @@
 import {
   init_UnifiedAuthProvider
-} from "./chunk-URUTVZ7N.js";
+} from "./chunk-DVHZ5L55.js";
 import {
   UnifiedAuthProvider,
   useUnifiedAuth
-} from "./chunk-WN6XJWOS.js";
-import "./chunk-ULBI5JGB.js";
-import "./chunk-XLZ7U46Z.js";
+} from "./chunk-JDQ7T3QB.js";
+import "./chunk-CVMVPYAL.js";
 import "./chunk-PLDDJCW6.js";
 init_UnifiedAuthProvider();
 export {
   UnifiedAuthProvider,
   useUnifiedAuth
 };
-//# sourceMappingURL=UnifiedAuthProvider-3NKDOSOK.js.map
+//# sourceMappingURL=UnifiedAuthProvider-Z2FWNW7O.js.map

package/dist/{api-DDMUKIUD.js → api-KG4A2X7P.js}

@@ -2,7 +2,9 @@ import {
   clearCache,
   getAccessLevel,
   getAppConfig,
+  getAppConfigWithClient,
   getPermissionMap,
+  getRoleContext,
   hasAllPermissions,
   hasAnyPermission,
   hasPermission,
@@ -15,15 +17,18 @@ import {
   isPermitted,
   isPermittedCached,
   isSuperAdmin,
+  resolveAppContext,
   setupRBAC
-} from "./chunk-FGMFQSHX.js";
-import "./chunk-B2WTCLCV.js";
+} from "./chunk-S63MFSY6.js";
+import "./chunk-Q7APDV6H.js";
 import "./chunk-PLDDJCW6.js";
 export {
   clearCache,
   getAccessLevel,
   getAppConfig,
+  getAppConfigWithClient,
   getPermissionMap,
+  getRoleContext,
   hasAllPermissions,
   hasAnyPermission,
   hasPermission,
@@ -36,6 +41,7 @@ export {
   isPermitted,
   isPermittedCached,
   isSuperAdmin,
+  resolveAppContext,
   setupRBAC
 };
-//# sourceMappingURL=api-DDMUKIUD.js.map
+//# sourceMappingURL=api-KG4A2X7P.js.map

package/dist/{audit-6TOCAMKO.js → audit-65VNHEV2.js}

@@ -4,7 +4,7 @@ import {
   emitAuditEvent,
   getGlobalAuditManager,
   setGlobalAuditManager
-} from "./chunk-B2WTCLCV.js";
+} from "./chunk-Q7APDV6H.js";
 import "./chunk-PLDDJCW6.js";
 export {
   RBACAuditManager,
@@ -13,4 +13,4 @@ export {
   getGlobalAuditManager,
   setGlobalAuditManager
 };
-//# sourceMappingURL=audit-6TOCAMKO.js.map
+//# sourceMappingURL=audit-65VNHEV2.js.map