@jmruthers/pace-core 0.6.1 → 0.6.3

package/dist/{UnifiedAuthProvider-185Ih4dj.d.ts → UnifiedAuthProvider-CKvHP1MK.d.ts}

@@ -4,6 +4,10 @@ import { SupabaseClient, User, Session, AuthError } from '@supabase/supabase-js'
 import { O as Organisation, a as OrganisationMembership, E as Event } from './event-CW5YB_2p.js';
 import { S as SessionRestorationState } from './auth-BZOJqrdd.js';
 
+/**
+ * User event access interface.
+ * Represents a user's access to a specific event.
+ */
 interface UserEventAccess {
     event_id: string;
     event_name: string;
@@ -16,6 +20,10 @@ interface UserEventAccess {
     granted_at: string;
     organisation_id: string;
 }
+/**
+ * Unified auth context type.
+ * Provides combined authentication, organisation, event, and inactivity state and methods.
+ */
 interface UnifiedAuthContextType {
     user: User | null;
     session: Session | null;
@@ -77,17 +85,28 @@ interface UnifiedAuthContextType {
     handleIdleLogout: () => Promise<void>;
     handleStaySignedIn: () => void;
     handleSignOutNow: () => Promise<void>;
-    appConfig: {
-        requires_event: boolean;
-    } | null;
     isLoading: boolean;
     hasErrors: boolean;
     sessionRestoration: SessionRestorationState;
     sessionRestorationTimedOut: boolean;
     sessionRestorationTimeoutMs: number;
 }
+/**
+ * Context for unified authentication.
+ * Provides combined authentication, organisation, event, and inactivity functionality.
+ */
 declare const UnifiedAuthContext: React__default.Context<UnifiedAuthContextType | undefined>;
+/**
+ * Hook to access unified authentication context.
+ * Must be used within a UnifiedAuthProvider.
+ *
+ * @returns Unified authentication context
+ * @throws Error if used outside UnifiedAuthProvider
+ */
 declare const useUnifiedAuth: () => UnifiedAuthContextType;
+/**
+ * Props for the UnifiedAuthProvider component.
+ */
 interface UnifiedAuthProviderProps {
     children: React__default.ReactNode;
     supabaseClient: SupabaseClient;
@@ -95,9 +114,6 @@ interface UnifiedAuthProviderProps {
     persistState?: boolean;
     enablePersistence?: boolean;
     requireOrganisationContext?: boolean;
-    appConfig?: {
-        requires_event: boolean;
-    } | null;
     idleTimeoutMs: number;
     warnBeforeMs: number;
     onIdleLogout: (reason: 'inactivity') => void;
@@ -108,8 +124,14 @@ interface UnifiedAuthProviderProps {
     }) => React__default.ReactNode;
     dangerouslyDisableInactivity?: boolean;
 }
-declare function UnifiedAuthProvider({ children, supabaseClient, appName, appConfig, // Default to requiring events
-persistState, enablePersistence, requireOrganisationContext, idleTimeoutMs, // REQUIRED: No default - must be explicitly provided
+/**
+ * Unified authentication provider.
+ * Provides authentication, organisation, event, and inactivity tracking services.
+ *
+ * @param props - Unified auth provider configuration
+ * @returns The unified auth provider
+ */
+declare function UnifiedAuthProvider({ children, supabaseClient, appName, persistState, enablePersistence, requireOrganisationContext, idleTimeoutMs, // REQUIRED: No default - must be explicitly provided
 warnBeforeMs, // REQUIRED: No default - must be explicitly provided
 onIdleLogout, // REQUIRED: No default - must be explicitly provided
 renderInactivityWarning, dangerouslyDisableInactivity }: UnifiedAuthProviderProps): react_jsx_runtime.JSX.Element;

package/dist/{UnifiedAuthProvider-ATAP5UTR.js → UnifiedAuthProvider-KAGUYQ4J.js}

@@ -2,16 +2,17 @@ import {
   UnifiedAuthContext,
   UnifiedAuthProvider,
   useUnifiedAuth
-} from "./chunk-BYFSK72L.js";
-import "./chunk-KNC55RTG.js";
+} from "./chunk-DWUBLJJM.js";
+import "./chunk-RWEBCB47.js";
 import "./chunk-63FOKYGO.js";
+import "./chunk-QRPVRXYT.js";
 import "./chunk-QXHPKYJV.js";
 import "./chunk-VBXEHIUJ.js";
 import "./chunk-PWLANIRT.js";
-import "./chunk-7D4SUZUM.js";
+import "./chunk-DGUM43GV.js";
 export {
   UnifiedAuthContext,
   UnifiedAuthProvider,
   useUnifiedAuth
 };
-//# sourceMappingURL=UnifiedAuthProvider-ATAP5UTR.js.map
+//# sourceMappingURL=UnifiedAuthProvider-KAGUYQ4J.js.map

package/dist/{api-N774RPUA.js → api-IAGWF3ZG.js}

@@ -1,10 +1,7 @@
 import {
-  OrganisationContextRequiredError,
   clearCache,
   getAccessLevel,
-  getAppConfig,
-  getAppConfigByName,
-  getAppConfigWithClient,
+  getPageScopeType,
   getPermissionMap,
   getRoleContext,
   hasAllPermissions,
@@ -18,20 +15,22 @@ import {
   isOrganisationAdmin,
   isPermitted,
   isPermittedCached,
+  isRBACInitialized,
   isSuperAdmin,
   resolveAppContext,
   setupRBAC
-} from "./chunk-KNC55RTG.js";
+} from "./chunk-RWEBCB47.js";
 import "./chunk-63FOKYGO.js";
+import {
+  OrganisationContextRequiredError
+} from "./chunk-QRPVRXYT.js";
 import "./chunk-PWLANIRT.js";
-import "./chunk-7D4SUZUM.js";
+import "./chunk-DGUM43GV.js";
 export {
   OrganisationContextRequiredError,
   clearCache,
   getAccessLevel,
-  getAppConfig,
-  getAppConfigByName,
-  getAppConfigWithClient,
+  getPageScopeType,
   getPermissionMap,
   getRoleContext,
   hasAllPermissions,
@@ -45,8 +44,9 @@ export {
   isOrganisationAdmin,
   isPermitted,
   isPermittedCached,
+  isRBACInitialized,
   isSuperAdmin,
   resolveAppContext,
   setupRBAC
 };
-//# sourceMappingURL=api-N774RPUA.js.map
+//# sourceMappingURL=api-IAGWF3ZG.js.map

package/dist/{audit-B5P6FFIR.js → audit-V53FV5AG.js}

@@ -6,7 +6,7 @@ import {
   setGlobalAuditManager
 } from "./chunk-63FOKYGO.js";
 import "./chunk-PWLANIRT.js";
-import "./chunk-7D4SUZUM.js";
+import "./chunk-DGUM43GV.js";
 export {
   RBACAuditManager,
   createAuditManager,
@@ -14,4 +14,4 @@ export {
   getGlobalAuditManager,
   setGlobalAuditManager
 };
-//# sourceMappingURL=audit-B5P6FFIR.js.map
+//# sourceMappingURL=audit-V53FV5AG.js.map

package/dist/{chunk-JBKQ3SAO.js → chunk-2T2IG7T7.js}

@@ -1,6 +1,9 @@
 import {
   useEvents
-} from "./chunk-3XTALGJF.js";
+} from "./chunk-6Z7LTB3D.js";
+import {
+  isSuperAdmin
+} from "./chunk-RWEBCB47.js";
 import {
   assertAppId
 } from "./chunk-QXHPKYJV.js";
@@ -17,7 +20,7 @@ import {
   applyPalette,
   clearPalette,
   parseAndNormalizeEventColours
-} from "./chunk-SQGMNID3.js";
+} from "./chunk-L4OXEN46.js";
 import {
   createLogger,
   logger
@@ -1207,7 +1210,7 @@ function getPublicFileDisplayCacheStats() {
 }
 
 // src/hooks/useFileDisplay.ts
-import { useState as useState4, useEffect as useEffect5, useCallback as useCallback4 } from "react";
+import { useState as useState4, useEffect as useEffect5, useCallback as useCallback4, useRef as useRef3 } from "react";
 
 // src/utils/file-reference/index.ts
 var log3 = createLogger("FileReferenceService");
@@ -1215,6 +1218,20 @@ var FileReferenceServiceImpl = class {
   constructor(supabase) {
     this.supabase = supabase;
   }
+  /**
+   * Helper method to get app name from app ID
+   */
+  async getAppName(appId) {
+    try {
+      const { data, error } = await this.supabase.from("rbac_apps").select("name").eq("id", appId).single();
+      if (error || !data) {
+        return "unknown";
+      }
+      return data.name || "unknown";
+    } catch {
+      return "unknown";
+    }
+  }
   /**
    * Creates a file reference by uploading a file to storage and linking it in the database.
    * 
@@ -1306,8 +1323,27 @@ var FileReferenceServiceImpl = class {
         throw new Error(`Failed to create file reference: ${error.message}`);
       }
       if (!data || data === null) {
+        let isSuperAdminUser = false;
+        try {
+          const { data: { user: authUser } } = await this.supabase.auth.getUser();
+          if (authUser) {
+            isSuperAdminUser = await isSuperAdmin(authUser.id);
+          }
+        } catch (superAdminCheckError) {
+          log3.warn("Failed to check super-admin status", superAdminCheckError);
+        }
         await deleteFile(this.supabase, filePath, options.is_public || false);
-        throw new Error(`File upload denied: insufficient permissions. You need 'create:page.${options.pageContext}' or 'update:page.${options.pageContext}' permission for the '${options.pageContext}' page. Make sure the page exists in rbac_app_pages table.`);
+        const appName = await this.getAppName(options.app_id).catch(() => "unknown");
+        const pageContextDisplay = options.pageContext || "undefined";
+        if (isSuperAdminUser) {
+          throw new Error(
+            `File upload failed for super-admin user. This may indicate a database issue. Page context: '${pageContextDisplay}', App: '${appName}'. Please check that the page '${pageContextDisplay}' exists in rbac_app_pages table for app '${appName}'.`
+          );
+        } else {
+          throw new Error(
+            `File upload denied: insufficient permissions. You need 'create:page.${pageContextDisplay}' or 'update:page.${pageContextDisplay}' permission for the '${pageContextDisplay}' page. Make sure the page exists in rbac_app_pages table for app '${appName}'.`
+          );
+        }
       }
       const { data: fileRef, error: fetchError } = await this.supabase.from("core_file_references").select("id, table_name, record_id, file_path, file_metadata, organisation_id, app_id, is_public, created_at, updated_at").eq("id", data).single();
       if (fetchError || !fileRef) {
@@ -1655,14 +1691,20 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
   const [fileCount, setFileCount] = useState4(0);
   const [isLoading, setIsLoading] = useState4(false);
   const [error, setError] = useState4(null);
+  const isMountedRef = useRef3(true);
+  const safeSetState = (setter, value) => {
+    if (isMountedRef.current) {
+      setter(value);
+    }
+  };
   const fetchFiles = useCallback4(async () => {
     if (!table_name || !record_id || !supabase) {
-      setFileUrl(null);
-      setFileReference(null);
-      setFileReferences([]);
-      setFileUrls(/* @__PURE__ */ new Map());
-      setFileCount(0);
-      setIsLoading(false);
+      safeSetState(setFileUrl, null);
+      safeSetState(setFileReference, null);
+      safeSetState(setFileReferences, []);
+      safeSetState(setFileUrls, /* @__PURE__ */ new Map());
+      safeSetState(setFileCount, 0);
+      safeSetState(setIsLoading, false);
       return;
     }
     if (organisation_id) {
@@ -1685,31 +1727,31 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
               expiresIn: 3600
             });
             const regeneratedUrl = signedUrlResult?.url || null;
-            setFileUrl(regeneratedUrl);
-            setFileReference(cachedData.fileReference);
-            setFileReferences(cachedData.fileReferences || []);
-            setFileUrls(cachedData.fileUrls || /* @__PURE__ */ new Map());
-            setFileCount(cachedData.fileCount || 0);
-            setIsLoading(false);
-            setError(null);
+            safeSetState(setFileUrl, regeneratedUrl);
+            safeSetState(setFileReference, cachedData.fileReference);
+            safeSetState(setFileReferences, cachedData.fileReferences || []);
+            safeSetState(setFileUrls, cachedData.fileUrls || /* @__PURE__ */ new Map());
+            safeSetState(setFileCount, cachedData.fileCount || 0);
+            safeSetState(setIsLoading, false);
+            safeSetState(setError, null);
             return;
           } catch (err) {
             logger.warn("useFileDisplay", "Failed to regenerate signed URL from cache, falling back to fetch:", err);
           }
         }
-        setFileUrl(cachedData.fileUrl || null);
-        setFileReference(cachedData.fileReference || null);
-        setFileReferences(cachedData.fileReferences || []);
-        setFileUrls(cachedData.fileUrls || /* @__PURE__ */ new Map());
-        setFileCount(cachedData.fileCount || 0);
-        setIsLoading(false);
-        setError(null);
+        safeSetState(setFileUrl, cachedData.fileUrl || null);
+        safeSetState(setFileReference, cachedData.fileReference || null);
+        safeSetState(setFileReferences, cachedData.fileReferences || []);
+        safeSetState(setFileUrls, cachedData.fileUrls || /* @__PURE__ */ new Map());
+        safeSetState(setFileCount, cachedData.fileCount || 0);
+        safeSetState(setIsLoading, false);
+        safeSetState(setError, null);
         return;
       }
     }
     try {
-      setIsLoading(true);
-      setError(null);
+      safeSetState(setIsLoading, true);
+      safeSetState(setError, null);
       const service = createFileReferenceService(supabase);
       let files = [];
       const shouldSearchBothScopes = organisation_id === void 0;
@@ -1907,11 +1949,11 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
         }
       }
       if (files.length === 0) {
-        setFileUrl(null);
-        setFileReference(null);
-        setFileReferences([]);
-        setFileUrls(/* @__PURE__ */ new Map());
-        setFileCount(0);
+        safeSetState(setFileUrl, null);
+        safeSetState(setFileReference, null);
+        safeSetState(setFileReferences, []);
+        safeSetState(setFileUrls, /* @__PURE__ */ new Map());
+        safeSetState(setFileCount, 0);
         if (enableCache) {
           authenticatedFileCache.set(cacheKey, {
             data: { fileUrl: null, fileReference: null, fileReferences: [], fileUrls: /* @__PURE__ */ new Map(), fileCount: 0 },
@@ -1922,11 +1964,11 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
         }
         return;
       }
-      setFileReferences(files);
-      setFileCount(files.length);
+      safeSetState(setFileReferences, files);
+      safeSetState(setFileCount, files.length);
       if (category && files.length > 0) {
         const firstFile = files[0];
-        setFileReference(firstFile);
+        safeSetState(setFileReference, firstFile);
         let url = null;
         if (firstFile.is_public) {
           url = getPublicUrl(supabase, firstFile.file_path, true);
@@ -1946,7 +1988,7 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
             });
           }
         }
-        setFileUrl(url);
+        safeSetState(setFileUrl, url);
       } else {
         const urlMap = await generateFileUrlsBatch(supabase, files, {
           appName: "pace-core",
@@ -1954,9 +1996,9 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
           userId: organisation_id ? void 0 : record_id,
           expiresIn: 3600
         });
-        setFileUrls(urlMap);
-        setFileReference(null);
-        setFileUrl(null);
+        safeSetState(setFileUrls, urlMap);
+        safeSetState(setFileReference, null);
+        safeSetState(setFileUrl, null);
       }
       if (enableCache) {
         let cacheData = {
@@ -1994,28 +2036,36 @@ function useFileDisplay(table_name, record_id, organisation_id, category, option
     } catch (err) {
       logger.error("useFileDisplay", "Error fetching files:", err);
       const error2 = err instanceof Error ? err : new Error("Unknown error occurred");
-      setError(error2);
-      setFileUrl(null);
-      setFileReference(null);
-      setFileReferences([]);
-      setFileUrls(/* @__PURE__ */ new Map());
-      setFileCount(0);
+      safeSetState(setError, error2);
+      safeSetState(setFileUrl, null);
+      safeSetState(setFileReference, null);
+      safeSetState(setFileReferences, []);
+      safeSetState(setFileUrls, /* @__PURE__ */ new Map());
+      safeSetState(setFileCount, 0);
     } finally {
-      setIsLoading(false);
+      safeSetState(setIsLoading, false);
     }
   }, [table_name, record_id, organisation_id, category, supabase, cacheTtl, enableCache]);
   useEffect5(() => {
+    isMountedRef.current = true;
     if (table_name && record_id && supabase) {
-      fetchFiles();
+      fetchFiles().catch((err) => {
+        if (isMountedRef.current) {
+          safeSetState(setError, err instanceof Error ? err : new Error("Unknown error"));
+        }
+      });
     } else {
-      setFileUrl(null);
-      setFileReference(null);
-      setFileReferences([]);
-      setFileUrls(/* @__PURE__ */ new Map());
-      setFileCount(0);
-      setIsLoading(false);
-      setError(null);
+      safeSetState(setFileUrl, null);
+      safeSetState(setFileReference, null);
+      safeSetState(setFileReferences, []);
+      safeSetState(setFileUrls, /* @__PURE__ */ new Map());
+      safeSetState(setFileCount, 0);
+      safeSetState(setIsLoading, false);
+      safeSetState(setError, null);
     }
+    return () => {
+      isMountedRef.current = false;
+    };
   }, [table_name, record_id, organisation_id, supabase]);
   const refetch = useCallback4(async () => {
     if (!table_name || !record_id || !supabase) return;
@@ -2107,11 +2157,11 @@ function useEventTheme(event) {
 }
 
 // src/hooks/usePreventTabReload.ts
-import { useEffect as useEffect7, useRef as useRef3 } from "react";
+import { useEffect as useEffect7, useRef as useRef4 } from "react";
 function usePreventTabReload(options = {}) {
   const { enabled = true, gracePeriodMs = 2e3 } = options;
-  const isRestoringFromCacheRef = useRef3(false);
-  const gracePeriodTimeoutRef = useRef3(null);
+  const isRestoringFromCacheRef = useRef4(false);
+  const gracePeriodTimeoutRef = useRef4(null);
   useEffect7(() => {
     if (!enabled || typeof window === "undefined") return;
     const handlePageShow = (event) => {
@@ -2184,4 +2234,4 @@ export {
   useEventTheme,
   usePreventTabReload
 };
-//# sourceMappingURL=chunk-JBKQ3SAO.js.map
+//# sourceMappingURL=chunk-2T2IG7T7.js.map