@jmruthers/pace-core 0.6.2 → 0.6.4

package/dist/{chunk-6J4GEEJR.js → chunk-ATKZM7RX.js}

@@ -5,20 +5,22 @@ import {
   useMultiplePermissions,
   useResolvedScope,
   useSecureSupabase
-} from "./chunk-XWQCNGTQ.js";
+} from "./chunk-NN6WWZ5U.js";
 import {
   useOrganisationSecurity
-} from "./chunk-MMZ7JXPU.js";
+} from "./chunk-OEWDTMG7.js";
 import {
   useUnifiedAuth
-} from "./chunk-EHMR7VYL.js";
+} from "./chunk-AVMLPIM7.js";
 import {
   RBACCache,
-  RBACNotInitializedError,
   getRBACConfig,
   getRBACLogger,
   rbacCache
-} from "./chunk-24UVZUZG.js";
+} from "./chunk-3LPHPB62.js";
+import {
+  RBACNotInitializedError
+} from "./chunk-36LVWXB2.js";
 import {
   createLogger,
   logger
@@ -176,6 +178,7 @@ var PagePermissionGuardComponent = ({
   const instanceId = useMemo2(() => Math.random().toString(36).substr(2, 9), []);
   const { user, selectedOrganisation, selectedEvent, supabase, appId: contextAppId, appName } = useUnifiedAuth();
   const [hasChecked, setHasChecked] = useState2(false);
+  const hasLoggedSuperAdminRef = useRef(false);
   const effectivePageId = useMemo2(() => {
     return pageId || pageName;
   }, [pageId, pageName]);
@@ -189,7 +192,7 @@ var PagePermissionGuardComponent = ({
     const checkSuperAdmin = async () => {
       const startTime = Date.now();
       try {
-        const { isSuperAdmin: checkSuperAdmin2 } = await import("./api-MVVQZLJI.js");
+        const { isSuperAdmin: checkSuperAdmin2 } = await import("./api-6LVZTHDS.js");
         const timeoutPromise = new Promise((_, reject) => {
           setTimeout(() => reject(new Error("Super admin check timeout")), 1e4);
         });
@@ -350,9 +353,10 @@ var PagePermissionGuardComponent = ({
   const shouldShowContent = isPermissionCheckComplete && hasValidScopeForPagePermissions && hasValidUser && !checkError && effectiveCan;
   const scopeKey = effectiveScope ? `${effectiveScope.organisationId}-${effectiveScope.eventId}-${effectiveScope.appId}` : "no-scope";
   const permissionKey = `${scopeKey}-${can}-${isLoading}-${!!checkError}-${hasChecked}`;
+  const lastLogStateRef = useRef("");
   useEffect2(() => {
     if (false) {
-      console.log("[PagePermissionGuard] Permission check state", {
+      const currentState = JSON.stringify({
         pageName,
         userId: user?.id,
         isSuperAdmin,
@@ -361,10 +365,24 @@ var PagePermissionGuardComponent = ({
         canIsLoading,
         hasChecked,
         hasValidUser,
-        effectiveCan,
-        stableScope,
-        effectiveScope
+        effectiveCan
       });
+      if (currentState !== lastLogStateRef.current) {
+        lastLogStateRef.current = currentState;
+        console.log("[PagePermissionGuard] Permission check state", {
+          pageName,
+          userId: user?.id,
+          isSuperAdmin,
+          isLoading,
+          scopeLoading,
+          canIsLoading,
+          hasChecked,
+          hasValidUser,
+          effectiveCan,
+          stableScope,
+          effectiveScope
+        });
+      }
     }
   }, [pageName, user?.id, isSuperAdmin, isLoading, scopeLoading, canIsLoading, hasChecked, hasValidUser, effectiveCan, stableScope, effectiveScope]);
   useEffect2(() => {
@@ -385,12 +403,20 @@ var PagePermissionGuardComponent = ({
       return () => clearTimeout(timeout);
     }
   }, [isLoading, isSuperAdmin, hasValidUser, pageName, user?.id, scopeLoading, canIsLoading, hasChecked, stableScope, effectiveScope, appName]);
+  useEffect2(() => {
+    if (isSuperAdmin === true && hasValidUser && !hasLoggedSuperAdminRef.current && false) {
+      hasLoggedSuperAdminRef.current = true;
+      console.log("[PagePermissionGuard] Super admin access granted - bypassing all checks", {
+        pageName,
+        userId: user?.id,
+        operation
+      });
+    }
+    if (isSuperAdmin !== true) {
+      hasLoggedSuperAdminRef.current = false;
+    }
+  }, [isSuperAdmin, hasValidUser, pageName, user?.id, operation]);
   if (isSuperAdmin === true && hasValidUser) {
-    console.log("[PagePermissionGuard] Super admin access granted - bypassing all checks", {
-      pageName,
-      userId: user?.id,
-      operation
-    });
     return /* @__PURE__ */ jsx2(Fragment, { children });
   }
   if (isLoading || !hasValidUser || !hasChecked || isSuperAdmin === null) {
@@ -1354,13 +1380,13 @@ function withPermissionGuard(config, handler) {
     if (!userId || !organisationId) {
       throw new Error("User context required for permission check");
     }
-    const { isPermitted: isPermitted2 } = await import("./api-MVVQZLJI.js");
+    const { isPermitted: isPermitted2 } = await import("./api-6LVZTHDS.js");
     const hasPermission2 = await isPermitted2({
       userId,
       scope: { organisationId, eventId, appId },
       permission: config.permission,
       pageId: config.pageId
-    }, null, void 0, null);
+    });
     if (!hasPermission2) {
       throw new Error(`Permission denied: ${config.permission}`);
     }
@@ -1377,7 +1403,7 @@ function withAccessLevelGuard(minLevel, handler) {
     if (!userId || !organisationId) {
       throw new Error("User context required for access level check");
     }
-    const { getAccessLevel: getAccessLevel2 } = await import("./api-MVVQZLJI.js");
+    const { getAccessLevel: getAccessLevel2 } = await import("./api-6LVZTHDS.js");
     const accessLevel = await getAccessLevel2({
       userId,
       scope: { organisationId, eventId, appId }
@@ -1402,11 +1428,11 @@ function withRoleGuard(config, handler) {
       throw new Error("User context required for role check");
     }
     if (config.globalRoles && config.globalRoles.length > 0) {
-      const { isSuperAdmin } = await import("./api-MVVQZLJI.js");
+      const { isSuperAdmin } = await import("./api-6LVZTHDS.js");
       const isSuper = await isSuperAdmin(userId);
       if (isSuper) {
         if (organisationId) {
-          const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-B5P6FFIR.js");
+          const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-V53FV5AG.js");
           await emitAuditEvent2({
             type: "permission_check",
             userId,
@@ -1428,21 +1454,21 @@ function withRoleGuard(config, handler) {
       }
     }
     if (config.organisationRoles && config.organisationRoles.length > 0) {
-      const { isOrganisationAdmin } = await import("./api-MVVQZLJI.js");
+      const { isOrganisationAdmin } = await import("./api-6LVZTHDS.js");
       const isOrgAdmin = await isOrganisationAdmin(userId, organisationId);
       if (!isOrgAdmin && config.requireAll !== false) {
         throw new Error(`Organisation admin role required`);
       }
     }
     if (config.eventAppRoles && config.eventAppRoles.length > 0 && eventId && appId) {
-      const { isEventAdmin } = await import("./api-MVVQZLJI.js");
+      const { isEventAdmin } = await import("./api-6LVZTHDS.js");
       const isEventAdminUser = await isEventAdmin(userId, { organisationId, eventId, appId });
       if (!isEventAdminUser && config.requireAll !== false) {
         throw new Error(`Event admin role required`);
       }
     }
     if (organisationId) {
-      const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-B5P6FFIR.js");
+      const { emitAuditEvent: emitAuditEvent2 } = await import("./audit-V53FV5AG.js");
       await emitAuditEvent2({
         type: "permission_check",
         userId,
@@ -1475,13 +1501,13 @@ function createRBACMiddleware(config) {
     );
     if (protectedRoute) {
       try {
-        const { isPermitted: isPermitted2 } = await import("./api-MVVQZLJI.js");
+        const { isPermitted: isPermitted2 } = await import("./api-6LVZTHDS.js");
         const hasPermission2 = await isPermitted2({
           userId,
           scope: { organisationId },
           permission: protectedRoute.permission,
           pageId: protectedRoute.pageId
-        }, null, void 0, null);
+        });
         if (!hasPermission2) {
           return res.redirect(config.fallbackUrl || "/access-denied");
         }
@@ -1502,7 +1528,7 @@ function createRBACExpressMiddleware(config) {
       return res.status(401).json({ error: "User context required" });
     }
     try {
-      const { isPermitted: isPermitted2 } = await import("./api-MVVQZLJI.js");
+      const { isPermitted: isPermitted2 } = await import("./api-6LVZTHDS.js");
       const hasPermission2 = await isPermitted2({
         userId,
         scope: { organisationId, eventId, appId },
@@ -2024,4 +2050,4 @@ export {
   getDirectSupabaseAuthFixes,
   getQuickFixes
 };
-//# sourceMappingURL=chunk-6J4GEEJR.js.map
+//# sourceMappingURL=chunk-ATKZM7RX.js.map