@jmruthers/pace-core 0.6.10 → 0.6.11

package/audit-tool/audits/09-operations.cjs

@@ -34,8 +34,8 @@ function checkErrorHandlingPatterns(consumingAppPath) {
       return;
     }
     
-    // Skip test files
-    if (filePath.includes('.test.') || filePath.includes('.spec.')) {
+    // Skip test files and test-utils
+    if (filePath.includes('.test.') || filePath.includes('.spec.') || filePath.includes('test-utils')) {
       return;
     }
     
@@ -72,6 +72,7 @@ function checkErrorHandlingPatterns(consumingAppPath) {
             code: getCodeSnippet(content, functionIndex),
             severity: 'info',
             fix: 'Use ApiResult<T> type: type ApiResult<T> = { ok: true; data: T } | { ok: false; error: ApiError }',
+            standardSection: 'Error Handling Patterns / Result Types (API Errors)',
           });
         }
       }
@@ -98,6 +99,7 @@ function checkCICDConfig(consumingAppPath) {
       message: 'CI/CD workflows directory not found. Consider setting up GitHub Actions for automated testing and deployment.',
       severity: 'info',
       fix: 'Create .github/workflows/ directory and add CI/CD workflow files',
+      standardSection: 'CI/CD Integration (Required CI Checks)',
     });
     return issues;
   }
@@ -115,6 +117,7 @@ function checkCICDConfig(consumingAppPath) {
       message: 'No CI/CD workflow files found. Consider setting up automated testing and deployment.',
       severity: 'info',
       fix: 'Create workflow files in .github/workflows/ (e.g., ci.yml, deploy.yml)',
+      standardSection: 'CI/CD Integration (Required CI Checks)',
     });
   }
   
@@ -172,6 +175,7 @@ function checkErrorBoundaries(consumingAppPath) {
       message: 'ErrorBoundary component exists but is not used in main.tsx or App.tsx. Should wrap the app root to catch React errors.',
       severity: 'warning',
       fix: 'Wrap app root with ErrorBoundary in main.tsx or App.tsx',
+      standardSection: 'Error Handling Patterns (Pattern 3: Error Boundaries)',
     });
   }
   
@@ -181,15 +185,23 @@ function checkErrorBoundaries(consumingAppPath) {
 /**
  * Run audit for Standard 9: Operations
  * @param {string} consumingAppPath - Path to consuming app
+ * @param {{ isPaceCorePackage?: boolean }} [auditContext] - When isPaceCorePackage, skip CICD/errorBoundary and ApiResult noise (package has no main/App)
  * @returns {object} - Audit results with issues array
  */
-function runStandard9Audit(consumingAppPath) {
+function runStandard9Audit(consumingAppPath, auditContext = {}) {
   const issues = [];
-  
+  const isPaceCorePackage = auditContext.isPaceCorePackage === true;
+
   try {
-    issues.push(...checkErrorHandlingPatterns(consumingAppPath));
-    issues.push(...checkCICDConfig(consumingAppPath));
-    issues.push(...checkErrorBoundaries(consumingAppPath));
+    if (!isPaceCorePackage) {
+      issues.push(...checkErrorHandlingPatterns(consumingAppPath));
+    }
+    if (!isPaceCorePackage) {
+      issues.push(...checkCICDConfig(consumingAppPath));
+    }
+    if (!isPaceCorePackage) {
+      issues.push(...checkErrorBoundaries(consumingAppPath));
+    }
   } catch (error) {
     return {
       standard: '09-operations',

package/audit-tool/index.cjs

@@ -16,9 +16,13 @@
  * 
  * Usage:
  *   node packages/core/audit-tool/index.cjs [path-to-consuming-app] [--output report.md]
- *   npm run audit:pace-core [path-to-consuming-app] [--output report.md]
- * 
+ *   npm run validate (runs this tool as the pace-core Audit step)
+ *
  * If no path provided, assumes current directory is consuming app.
+ *
+ * Note: This tool does not scan supabase/migrations. RLS policy and RPC naming
+ * compliance are audited by a separate DB audit tool (to be implemented) that
+ * connects to the database directly.
  */
 
 const fs = require('fs');
@@ -54,8 +58,11 @@ const colors = {
 
 /**
  * Run all standard audits
+ * @param {string} consumingAppPath - Path to the app/package being audited
+ * @param {boolean} showProgress - Whether to log progress
+ * @param {{ consumingAppPath: string, isPaceCorePackage: boolean }} [auditContext] - Optional context (isPaceCorePackage skips app-only checks)
  */
-function runAllAudits(consumingAppPath, showProgress = false) {
+function runAllAudits(consumingAppPath, showProgress = false, auditContext = {}) {
   const results = {};
   
   const standardNames = {
@@ -88,7 +95,7 @@ function runAllAudits(consumingAppPath, showProgress = false) {
     }
     
     try {
-      const result = fn(consumingAppPath);
+      const result = fn(consumingAppPath, auditContext);
       results[key] = result;
       
       if (result.error && showProgress) {
@@ -116,20 +123,22 @@ function main() {
   const args = process.argv.slice(2);
   const outputArg = args.find(arg => arg.startsWith('--output'));
   const outputPath = outputArg ? (outputArg.includes('=') ? outputArg.split('=')[1] : args[args.indexOf(outputArg) + 1] || 'audit-report.md') : null;
-  const consumingAppPath = args.find(arg => !arg.startsWith('--') && arg !== outputPath) || process.cwd();
+  const consumingAppPath = path.resolve(args.find(arg => !arg.startsWith('--') && arg !== outputPath) || process.cwd());
   
   console.log(`${colors.bold}${colors.cyan}pace-core Comprehensive Audit${colors.reset}\n`);
   console.log(`${colors.cyan}${'='.repeat(50)}${colors.reset}\n`);
   
-  // Get project info from package.json
+  // Get project info and detect if we're auditing the pace-core package itself
   const packageJsonPath = path.join(consumingAppPath, 'package.json');
   let projectName = 'unknown';
   let paceCoreVersion = 'unknown';
+  let isPaceCorePackage = false;
   
   if (fs.existsSync(packageJsonPath)) {
     try {
       const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
       projectName = packageJson.name || 'unknown';
+      isPaceCorePackage = projectName === '@jmruthers/pace-core';
       
       // Find pace-core version
       const allDeps = {
@@ -142,15 +151,17 @@ function main() {
     }
   }
   
+  const auditContext = { consumingAppPath, isPaceCorePackage };
+  
   console.log(`Project: ${colors.bold}${projectName}${colors.reset}`);
   console.log(`pace-core: ${colors.bold}${paceCoreVersion}${colors.reset}\n`);
   
   // Run dependency audit
   console.log(`${colors.blue}Running dependency audit...${colors.reset}`);
-  const dependencyResult = runDependencyAudit(consumingAppPath);
+  const dependencyResult = runDependencyAudit(consumingAppPath, auditContext);
   
   // Run all standard audits
-  const standardResults = runAllAudits(consumingAppPath, true);
+  const standardResults = runAllAudits(consumingAppPath, true, auditContext);
   
   // Combine results
   const allResults = {
@@ -231,12 +242,12 @@ function main() {
   const minutes = String(now.getMinutes()).padStart(2, '0');
   const timestamp = `${year}${month}${day}${hours}${minutes}`;
   
-  // Helper function to add timestamp to filename
+  // Helper function to add timestamp at start of filename
   function addTimestampToFilename(filePath) {
     const dir = path.dirname(filePath);
     const ext = path.extname(filePath);
     const name = path.basename(filePath, ext);
-    return path.join(dir, `${name}-${timestamp}${ext}`);
+    return path.join(dir, `${timestamp}-${name}${ext}`);
   }
   
   // Determine report path
@@ -249,7 +260,7 @@ function main() {
     if (!fs.existsSync(auditDir)) {
       fs.mkdirSync(auditDir, { recursive: true });
     }
-    reportPath = path.join(auditDir, `pace-core-audit-${timestamp}.md`);
+      reportPath = path.join(auditDir, `${timestamp}-pace-core-audit.md`);
   }
   
   // Save report

package/audit-tool/utils/report-utils.cjs

@@ -42,6 +42,10 @@ function formatIssue(issue, standard) {
     formatted += `**Details:** ${issue.details}\n\n`;
   }
   
+  if (issue.standardSection) {
+    formatted += `**See standard:** ${issue.standardSection}\n\n`;
+  }
+  
   return formatted;
 }
 

package/cursor-rules/01-pace-core-compliance.mdc

@@ -21,6 +21,7 @@ This guide ensures consuming apps use pace-core components, hooks, and utilities
 5. **Read documentation** - Before using any pace-core component, check its documentation for required props and usage patterns
 6. **Follow provider nesting** - Always nest providers in the correct order (QueryClientProvider → BrowserRouter → UnifiedAuthProvider → OrganisationProvider)
 7. **Configure Vite correctly** - Always exclude `@jmruthers/pace-core` and `react-router-dom` from pre-bundling
+8. **When fixing compliance issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause, do not silence tools. Re-run **`npm run validate`** to confirm (type-check, lint, build, tests, pace-core audit).
 
 **Decision Tree: Should I create this or use pace-core?**
 ```

package/cursor-rules/02-project-structure.mdc

@@ -20,6 +20,7 @@ This guide defines the standard folder structure and file organization for consu
 4. **Use absolute imports** - Use `@/` path alias for imports, never relative imports for distant files
 5. **Keep root clean** - Only configuration files and documentation in root, never source files
 6. **Place migrations correctly** - All migrations in `supabase/migrations/` with timestamp format
+7. **When fixing project structure issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause, do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: File Organization**
 ```

package/cursor-rules/03-architecture.mdc

@@ -20,6 +20,8 @@ This guide enforces SOLID architecture principles, component design patterns, an
 4. **Use focused interfaces** - Create small, specific interfaces instead of large, generic ones
 5. **Depend on abstractions** - Use interfaces/types, not concrete implementations
 6. **Follow ApiResult pattern** - All RPCs must return ApiResult shape with proper error handling
+7. **When fixing architecture issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause, do not silence tools. Re-run **`npm run validate`** to confirm.
+8. **When the audit reports componentBoundary** - Fix the cause (e.g. extract data fetching to a hook, move business logic to a hook or utility, split large files or interfaces per SRP/ISP); do not silence or work around the finding. See Standard 3 "Component Design Principles / SOLID" and "How we check SOLID."
 
 **Decision Tree: Where should this logic live?**
 ```
@@ -244,7 +246,7 @@ Before committing code, verify:
      const [user, setUser] = useState(null);
      const [events, setEvents] = useState([]);
      const [organisations, setOrganisations] = useState([]);
-     // 200+ lines of logic...
+     // 400+ lines of logic...
    }
    
    // ✅ CORRECT: Separated concerns

package/cursor-rules/04-code-quality.mdc

@@ -21,6 +21,7 @@ This guide enforces code quality standards to ensure maintainable, performant, a
 5. **Use semantic HTML** - Use semantic elements (`<main>`, `<section>`, `<article>`, etc.) instead of `<div>` wrappers
 6. **Memoize appropriately** - Use `useMemo` and `useCallback` for expensive computations and stable references
 7. **Early returns** - Use early returns to reduce nesting and improve readability
+8. **When fixing code quality issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause, do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: Type Safety**
 ```

package/cursor-rules/05-styling.mdc

@@ -20,6 +20,7 @@ rulesVersion: "2025-01-28"
 4. **Use Grid for layout** - Prefer CSS Grid over Flexbox for centering, two-dimensional layouts, and full-page layouts
 5. **Minimize elements** - Use the fewest elements possible, prefer React Fragments over wrapper divs
 6. **Check CSS setup** - Before using pace-core components, verify CSS is configured correctly (see checklist below)
+7. **When fixing styling or markup issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause (e.g. app.css, @source, @theme), do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: Markup & Styling**
 ```
@@ -62,6 +63,39 @@ rulesVersion: "2025-01-28"
 
 ---
 
+## Color Palettes: main, sec, acc Only
+
+**pace-core and all pace apps MUST use only the custom design-system palettes (`main`, `sec`, `acc`). NEVER use standard Tailwind/named colors (e.g. red, blue, gray, green, orange, etc.) in class names, CSS variables, or documentation examples.**
+
+Do not define or reference CSS variables like `--color-red-500`, `--color-blue-200`, `--color-gray-500`; use `--color-main-*`, `--color-sec-*`, `--color-acc-*` only.
+
+### Color mapping (standard Tailwind to design system)
+
+When converting or writing styles, use this mapping:
+
+| Standard / Tailwind | Use palette |
+|--------------------|-------------|
+| red, orange, amber, yellow, lime, pink, rose | **acc-** |
+| green, emerald, teal, cyan, sky, blue | **main-** |
+| indigo, violet, purple, fuchsia, slate, gray, zinc, neutral, stone | **sec-** |
+| white | **main-50** |
+| black | **main-950** |
+
+### Transformation rules
+
+- Replace `bg-{standard}-{shade}` with `bg-{palette}-{shade}` (e.g. `bg-main-500`, `bg-sec-200`, `bg-acc-400`).
+- Same for `text-*`, `border-*`, `ring-*`, `outline-*`, `from-*` / `via-*` / `to-*` (gradients), `fill-*`, `stroke-*`.
+- Preserve shade numbers (50, 100, …, 950).
+- Do not change semantic Tailwind classes (e.g. `bg-background`, `text-foreground`) that are mapped in app CSS.
+- Do not create or reference new CSS variables; use existing theme tokens only.
+
+### Examples
+
+- `bg-main-500`, `text-acc-100`, `border-sec-700`, `ring-acc-400` are correct.
+- Any class using standard Tailwind color names is wrong; use the mapped palette (main/sec/acc) instead.
+
+---
+
 This guide enforces clean markup standards, semantic HTML usage, and proper pace-core component patterns to ensure maintainable, accessible, and consistent code.
 
 ## pace-core First
@@ -100,8 +134,8 @@ import { Button, Input } from '@jmruthers/pace-core';
 // ❌ WRONG: Overriding pace-core component styles
 <Button className="custom-button-style">Click me</Button>
 <Card className="custom-card-layout">Content</Card>
-<Button className="text-red-500 bg-blue-200">Custom styled button</Button>
-<Input className="border-2 border-gray-500" />
+<Button className="text-acc-500 bg-main-200">Custom styled button</Button>
+<Input className="border-2 border-sec-500" />
 
 // ✅ CORRECT: Use pace-core component variants/props
 <Button variant="default">Click me</Button>
@@ -122,7 +156,7 @@ import { Button, Input } from '@jmruthers/pace-core';
 ```tsx
 // ❌ WRONG: Custom typography classes
 <h1 className="text-2xl font-bold">Title</h1>
-<p className="text-gray-500 mb-4">Description</p>
+<p className="text-sec-500 mb-4">Description</p>
 
 // ✅ CORRECT: Typography defined in pace-core core.css
 <h1>Title</h1>
@@ -232,15 +266,15 @@ Using semantic elements improves accessibility, maintainability, and consistency
 - `leading-*` (e.g., `leading-relaxed`, `leading-tight`)
 - `tracking-*` (e.g., `tracking-wide`, `tracking-tighter`)
 - `uppercase`, `lowercase`, `capitalize`
-- Color classes on typography elements (e.g., `text-gray-500`, `text-primary`, `text-main-600`)
+- Color classes on typography elements (use core.css; for layout color use main/sec/acc only, e.g. `text-main-600`)
 - Margin/padding classes used solely for text spacing (e.g., `mb-2`, `mt-4`, `pb-1`, `pt-3`) — unless clearly needed for layout structure
 
 ```tsx
 // ❌ WRONG: Direct typography styling
 <h1 className="text-2xl font-bold">Title</h1>
-<p className="text-gray-500 leading-relaxed mb-4">Description</p>
+<p className="text-sec-500 leading-relaxed mb-4">Description</p>
 <label className="text-sm uppercase">Label</label>
-<a className="text-blue-500">Link</a>
+<a className="text-main-500">Link</a>
 <ul className="mb-4">List</ul>
 
 // ✅ CORRECT: Typography defined in pace-core core.css
@@ -285,7 +319,7 @@ Using semantic elements improves accessibility, maintainability, and consistency
 ```tsx
 // ❌ WRONG: Typography utilities or inline styles
 <h1 className="text-3xl font-bold mb-4">Title</h1>
-<p style={{ fontSize: '14px', color: 'gray' }}>Text</p>
+<p style={{ fontSize: '14px', color: '...' }}>Text</p>
 <label className="uppercase tracking-wide">Label</label>
 <a className="text-primary hover:text-primary-600">Link</a>
 <ul className="mb-2 mt-4">List</ul>

package/cursor-rules/06-security-rbac.mdc

@@ -23,7 +23,8 @@ This guide enforces the **mandatory RBAC contract** and security patterns betwee
 5. **Never expose internals** - Never show SQL errors, stack traces, or internal details to users
 6. **Use helper functions in RLS** - Always use STABLE SECURITY DEFINER helper functions (when querying RLS-protected tables), never subqueries
 7. **Secure SECURITY DEFINER functions** - All SECURITY DEFINER functions must have `SET search_path TO public`, schema-qualified references, and documented rationale
-7. **Sanitize logs** - Never log passwords, tokens, or sensitive data
+8. **Sanitize logs** - Never log passwords, tokens, or sensitive data
+9. **When fixing security or RBAC issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause (e.g. RLS policy, helper attributes, PagePermissionGuard, Edge Function setupRBAC), do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: Security & Permissions**
 ```

package/cursor-rules/07-api-tech-stack.mdc

@@ -21,6 +21,7 @@ This guide ensures consuming apps use the correct versions and patterns for all
 5. **Return ApiResult** - All RPCs must return ApiResult shape with proper error handling
 6. **Use TanStack Query** - Always use TanStack Query for server state, never `useState + useEffect`
 7. **Use React Hook Form + Zod** - Always use `useZodForm` from pace-core for forms
+8. **When fixing API or tech stack issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause (e.g. RPC naming, package versions, Vite config), do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: RPC Naming**
 ```

package/cursor-rules/08-testing-documentation.mdc

@@ -21,6 +21,7 @@ This guide ensures consistent, high-quality testing and documentation across con
 5. **Colocate tests** - Place test files next to source files (`Component.test.tsx` next to `Component.tsx`)
 6. **Use descriptive names** - Test names should clearly describe the behavior being tested
 7. **Group related tests** - Use `describe` blocks to organize related tests
+8. **When fixing testing or documentation issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause (e.g. test timeouts, testing tools, test file naming), do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: Writing Tests**
 ```

package/cursor-rules/09-operations.mdc

@@ -21,6 +21,7 @@ This guide enforces error handling patterns, performance optimization strategies
 5. **Avoid new objects in render** - Never create new objects/arrays in render, memoize them with `useMemo`
 6. **Use helper functions in RLS** - Always use STABLE SECURITY DEFINER helper functions, never subqueries
 7. **Provide recovery paths** - When possible, provide retry logic or fallback values
+8. **When fixing operations or error-handling issues** - Use the **audit report** (`audit/<timestamp>-pace-core-audit.md`) and the **standard doc** section linked from the report; fix the cause (e.g. ApiResult usage, CI/CD setup, ErrorBoundary), do not silence tools. Re-run **`npm run validate`** to confirm.
 
 **Decision Tree: Error Handling**
 ```

package/dist/{DataTable-SAXFG4XI.js → DataTable-EFYP2QLE.js}

@@ -1,13 +1,16 @@
-export { ActionButtons, BulkOperationsDropdown, ColumnFactory, ColumnVisibilityDropdown, DataTable, DataTableCore, DataTableErrorBoundary, DataTableModals, DataTableToolbar, EditableRow, EmptyState, EnhancedPaginationControls, GroupingDropdown, ImportModal, LoadingState, PaginationControls, SortIndicator, UnifiedTableBody, announce, announceBulkOperation, announceFilterChange, announceLoadingState, announcePaginationChange, announceSearchResults, announceSelectionChange, announceSortChange, average, calculateAllDepths, calculateAllIndentation, calculateIndentation, calculateOptimalPageSize, cleanupLiveRegion, count, createHierarchicalStructure, defaultDataTableFeatures, exportToCSV, exportToCSVWithTableRows, findSelectLabel, generateCSVContent, getAriaSortState, getAriaSortValue, getCellRenderer, getColumnHeaderText, getHierarchicalSortConfig, getPageSizeOptions, getPaginationBinding, getRowDepth, getRowDescription, getRowIdSafe, getSortButtonLabel, groupHierarchicalData, hasValidRowId, initializeLiveRegion, isHierarchicalSortableColumn, max, min, normalizeDataTableFeatures, shouldShowColumnForRow, sortHierarchicalDataByStructure, sortHierarchicalDataWithSorting, sum, validateHierarchicalData, validatePaginationConfig } from './chunk-MPY44PWB.js';
-import './chunk-KYURMOQM.js';
-export { CircuitBreaker, DEFAULT_FALLBACK_CONFIG, DataChunkManager, DataTableError, DataTableErrorType, ErrorRecoveryManager, MemoryMonitor, SearchIndex, VisibilityTracker, chunkData, debounce, determinePaginationMode, getOptimalPageSizeOptions, safeExecute, throttle, useDataTablePerformance } from './chunk-BCTXBU6U.js';
-import './chunk-3GWSPISD.js';
-import './chunk-Y4PF6HIM.js';
-import './chunk-LNHFAF4X.js';
-import './chunk-NIU6DPQV.js';
+export { ActionButtons, BulkOperationsDropdown, ColumnFactory, ColumnVisibilityDropdown, DataTable, DataTableCore, DataTableErrorBoundary, DataTableModals, DataTableToolbar, EditableRow, EmptyState, EnhancedPaginationControls, GroupingDropdown, ImportModal, LoadingState, PaginationControls, SortIndicator, UnifiedTableBody, announce, announceBulkOperation, announceFilterChange, announceLoadingState, announcePaginationChange, announceSearchResults, announceSelectionChange, announceSortChange, average, calculateAllDepths, calculateAllIndentation, calculateIndentation, calculateOptimalPageSize, cleanupLiveRegion, count, createHierarchicalStructure, defaultDataTableFeatures, exportToCSV, exportToCSVWithTableRows, findSelectLabel, generateCSVContent, getAriaSortState, getAriaSortValue, getCellRenderer, getColumnHeaderText, getHierarchicalSortConfig, getPageSizeOptions, getPaginationBinding, getRowDepth, getRowDescription, getRowIdSafe, getSortButtonLabel, groupHierarchicalData, hasValidRowId, initializeLiveRegion, isHierarchicalSortableColumn, max, min, normalizeDataTableFeatures, optionMatchesSearch, shouldShowColumnForRow, sortHierarchicalDataByStructure, sortHierarchicalDataWithSorting, sum, validateHierarchicalData, validatePaginationConfig } from './chunk-2OEVOGGR.js';
+import './chunk-V7FTM2LU.js';
+export { CircuitBreaker, DEFAULT_FALLBACK_CONFIG, DataChunkManager, DataTableError, DataTableErrorType, ErrorRecoveryManager, MemoryMonitor, SearchIndex, VisibilityTracker, chunkData, debounce, determinePaginationMode, getOptimalPageSizeOptions, safeExecute, throttle, useDataTablePerformance } from './chunk-ENLXB7GP.js';
+import './chunk-L5LFKKLJ.js';
+import './chunk-4R3T5ENU.js';
+import './chunk-D6BMFMQZ.js';
+import './chunk-7A6IMHH2.js';
+import './chunk-QRYSEPHB.js';
 import './chunk-4SXLQIZO.js';
 import './chunk-DDMPHZ3D.js';
 import './chunk-UZNAFKGW.js';
 import './chunk-RMLY6KB5.js';
 import './chunk-BTHN5MKC.js';
+import './chunk-44CNXN4P.js';
+import './chunk-CU2BU2MQ.js';
 import './chunk-3RG5ZIWI.js';

package/dist/{InactivityServiceProvider-DHryoh6K.d.ts → InactivityServiceProvider-BbxwwDz1.d.ts}

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React__default from 'react';
 import { SupabaseClient, User, Session } from '@supabase/supabase-js';
-import { O as Organisation, a as OrganisationMembership, j as OrganisationHierarchy } from './event-WTAQuGcq.js';
+import { O as Organisation, j as OrganisationMembership, s as OrganisationHierarchy } from './event-BfCox3N2.js';
 
 /**
  * Props for the EventServiceProvider component.
@@ -166,6 +166,12 @@ declare class OrganisationService extends BaseService implements IOrganisationSe
     protected doInitialize(): Promise<void>;
     protected doCleanup(): void;
     private setDatabaseOrganisationContext;
+    /** Returns false if load should return early; when true, abort controller and loading state are set. */
+    private prepareLoad;
+    private fetchRolesAndOrganisations;
+    private checkAndCacheSuperAdmin;
+    private applyEmptyStateAndNotify;
+    private selectInitialOrganisation;
     private loadUserOrganisations;
     private clearAllCachedData;
 }
@@ -270,6 +276,9 @@ declare class InactivityService extends BaseService implements IInactivityServic
     protected doInitialize(): Promise<void>;
     protected doCleanup(): void;
     private setupInactivityTracker;
+    private runUpdateState;
+    private runScheduleNextCheck;
+    private runResetTimers;
     private setupEventHandlers;
 }
 

package/dist/{UnifiedAuthProvider-CiBAl9-s.d.ts → UnifiedAuthProvider-Bkt_tzdS.d.ts}

@@ -1,15 +1,45 @@
 import * as React from 'react';
 import React__default from 'react';
 import { User, Session, AuthError, SupabaseClient } from '@supabase/supabase-js';
-import { O as Organisation, a as OrganisationMembership, E as Event } from './event-WTAQuGcq.js';
-import { S as SessionRestorationState } from './auth-BZOJqrdd.js';
+import { A as ApiResult } from './api-result-USV1Czr-.js';
+import { O as Organisation, j as OrganisationMembership, h as Event } from './event-BfCox3N2.js';
+import { a as SessionRestorationState } from './auth-JvdRVaud.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 
 /**
- * Unified auth context type.
- * Provides combined authentication, organisation, event, and inactivity state and methods.
+ * @file Authentication Service Interface
+ * @package @jmruthers/pace-core
+ * @module Services/Interfaces
+ * @since 0.1.0
+ *
+ * Interface for authentication service operations.
+ * Defines the contract for authentication-related functionality.
  */
-interface UnifiedAuthContextType {
+
+/** Success payload for auth methods: user and session (both null when signed out). */
+interface AuthSessionData {
+    user: User | null;
+    session: Session | null;
+}
+interface IAuthService {
+    getUser(): User | null;
+    getSession(): Session | null;
+    isAuthenticated(): boolean;
+    isLoading(): boolean;
+    getError(): AuthError | null;
+    getSupabaseClient(): SupabaseClient | null;
+    signIn(email: string, password?: string): Promise<ApiResult<AuthSessionData>>;
+    signUp(email: string, password: string): Promise<ApiResult<AuthSessionData>>;
+    signOut(): Promise<ApiResult<AuthSessionData>>;
+    resetPassword(email: string): Promise<ApiResult<AuthSessionData>>;
+    updatePassword(password: string): Promise<ApiResult<AuthSessionData>>;
+    refreshSession(): Promise<ApiResult<AuthSessionData>>;
+    initialize(): Promise<void>;
+    cleanup(): void;
+}
+
+/** Auth state and methods for unified auth context (ISP). */
+interface UnifiedAuthContextAuth {
     user: User | null;
     session: Session | null;
     isAuthenticated: boolean;
@@ -18,24 +48,15 @@ interface UnifiedAuthContextType {
     supabase: SupabaseClient | null;
     appName: string;
     appId: string | undefined;
-    signIn: (email: string, password?: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    signUp: (email: string, password: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    signOut: () => Promise<{
-        error: AuthError | null;
-    }>;
-    resetPassword: (email: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    updatePassword: (password: string) => Promise<{
-        error: AuthError | null;
-    }>;
-    refreshSession: () => Promise<{
-        error: AuthError | null;
-    }>;
+    signIn: (email: string, password?: string) => Promise<ApiResult<AuthSessionData>>;
+    signUp: (email: string, password: string) => Promise<ApiResult<AuthSessionData>>;
+    signOut: () => Promise<ApiResult<AuthSessionData>>;
+    resetPassword: (email: string) => Promise<ApiResult<AuthSessionData>>;
+    updatePassword: (password: string) => Promise<ApiResult<AuthSessionData>>;
+    refreshSession: () => Promise<ApiResult<AuthSessionData>>;
+}
+/** Organisation state and methods for unified auth context (ISP). */
+interface UnifiedAuthContextOrganisation {
     selectedOrganisation: Organisation | null;
     selectedOrganisationId: string | null;
     organisations: Organisation[];
@@ -51,6 +72,9 @@ interface UnifiedAuthContextType {
     ensureOrganisationContext: () => Organisation;
     isOrganisationSecure: () => boolean;
     getPrimaryOrganisation: () => Organisation | null;
+}
+/** Event state and methods for unified auth context (ISP). */
+interface UnifiedAuthContextEvent {
     events: Event[];
     selectedEvent: Event | null;
     selectedEventId: string | null;
@@ -58,6 +82,9 @@ interface UnifiedAuthContextType {
     eventError: Error | null;
     setSelectedEvent: (event: Event | null) => void;
     refreshEvents: () => Promise<void>;
+}
+/** Inactivity state and methods for unified auth context (ISP). */
+interface UnifiedAuthContextInactivity {
     showInactivityWarning: boolean;
     inactivityTimeRemaining: number;
     isIdle: boolean;
@@ -70,12 +97,17 @@ interface UnifiedAuthContextType {
     handleIdleLogout: () => Promise<void>;
     handleStaySignedIn: () => void;
     handleSignOutNow: () => Promise<void>;
+}
+/** Unified loading/errors/session restoration (ISP). */
+interface UnifiedAuthContextUnified {
     isLoading: boolean;
     hasErrors: boolean;
     sessionRestoration: SessionRestorationState;
     sessionRestorationTimedOut: boolean;
     sessionRestorationTimeoutMs: number;
 }
+/** Unified auth context type (ISP: composed from focused interfaces). */
+type UnifiedAuthContextType = UnifiedAuthContextAuth & UnifiedAuthContextOrganisation & UnifiedAuthContextEvent & UnifiedAuthContextInactivity & UnifiedAuthContextUnified;
 /**
  * Context for unified authentication.
  * Provides combined authentication, organisation, event, and inactivity functionality.
@@ -148,4 +180,4 @@ warnBeforeMs, // REQUIRED: No default - must be explicitly provided
 onIdleLogout, // REQUIRED: No default - must be explicitly provided
 renderInactivityWarning, dangerouslyDisableInactivity }: UnifiedAuthProviderProps): react_jsx_runtime.JSX.Element;
 
-export { UnifiedAuthProvider as U, type UnifiedAuthProviderProps as a, type UnifiedAuthContextType as b, type UserEventAccess as c, UnifiedAuthContext as d, useUnifiedAuth as u };
+export { type AuthSessionData as A, type IAuthService as I, UnifiedAuthProvider as U, type UnifiedAuthProviderProps as a, type UnifiedAuthContextType as b, type UserEventAccess as c, UnifiedAuthContext as d, useUnifiedAuth as u };

package/dist/{api-F47QJ7FX.js → api-BZR2CYXL.js}

@@ -1,4 +1,5 @@
-export { OrganisationContextRequiredError, clearCache, getAccessLevel, getPageScopeType, getPermissionMap, getRoleContext, hasAllPermissions, hasAnyPermission, invalidateAppCache, invalidateEventCache, invalidateOrganisationCache, invalidateUserCache, isEventAdmin, isOrganisationAdmin, isPermitted, isPermittedCached, isRBACInitialized, isSuperAdmin, resolveAppContext, setupRBAC } from './chunk-LNHFAF4X.js';
-import './chunk-NIU6DPQV.js';
+export { OrganisationContextRequiredError, clearCache, getAccessLevel, getPageScopeType, getPermissionMap, getRoleContext, hasAllPermissions, hasAnyPermission, invalidateAppCache, invalidateEventCache, invalidateOrganisationCache, invalidateUserCache, isEventAdmin, isOrganisationAdmin, isPermitted, isPermittedCached, isRBACInitialized, isSuperAdmin, resolveAppContext, setupRBAC } from './chunk-7A6IMHH2.js';
+import './chunk-QRYSEPHB.js';
 import './chunk-BTHN5MKC.js';
+import './chunk-44CNXN4P.js';
 import './chunk-3RG5ZIWI.js';

package/dist/api-result-USV1Czr-.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @file API Result Types
+ * @package @jmruthers/pace-core
+ * @module Types/ApiResult
+ * @since 1.0.0
+ *
+ * Standard result shape for async API functions. Ensures consistent error handling
+ * across pace-core and consuming apps. See Architecture and API & Tech Stack standards.
+ */
+/**
+ * Machine-readable error code and user-facing message for API failures.
+ */
+type ApiError = {
+    code: string;
+    message: string;
+    details?: object;
+};
+/**
+ * Type-safe result for async API functions: either success with data or failure with error.
+ */
+type ApiResult<T> = {
+    ok: true;
+    data: T;
+} | {
+    ok: false;
+    error: ApiError;
+};
+/**
+ * Creates a successful ApiResult.
+ */
+declare function ok<T>(data: T): ApiResult<T>;
+/**
+ * Creates a failed ApiResult.
+ */
+declare function err(error: ApiError): ApiResult<never>;
+/**
+ * Type guard: narrows ApiResult to success variant.
+ */
+declare function isOk<T>(result: ApiResult<T>): result is {
+    ok: true;
+    data: T;
+};
+/**
+ * Type guard: narrows ApiResult to failure variant.
+ */
+declare function isErr<T>(result: ApiResult<T>): result is {
+    ok: false;
+    error: ApiError;
+};
+
+export { type ApiResult as A, type ApiError as a, isErr as b, err as e, isOk as i, ok as o };

package/dist/{audit-Z6ZZBWLU.js → audit-HI2DHUVU.js}

@@ -1,3 +1,4 @@
-export { RBACAuditManager, createAuditManager, emitAuditEvent, getGlobalAuditManager, setGlobalAuditManager } from './chunk-NIU6DPQV.js';
+export { RBACAuditManager, createAuditManager, emitAuditEvent, getGlobalAuditManager, setGlobalAuditManager } from './chunk-QRYSEPHB.js';
 import './chunk-BTHN5MKC.js';
+import './chunk-44CNXN4P.js';
 import './chunk-3RG5ZIWI.js';

package/dist/{auth-BZOJqrdd.d.ts → auth-JvdRVaud.d.ts}

@@ -46,4 +46,4 @@ interface Session {
     provider_refresh_token?: string;
 }
 
-export type { SessionRestorationState as S, User as U, Session as a };
+export type { Session as S, User as U, SessionRestorationState as a };