@jmruthers/pace-core 0.6.4 → 0.6.6

package/docs/api-reference/components.md

@@ -71,13 +71,15 @@ import { Settings } from 'lucide-react'; // for icon example
 
 ### Accessibility
 
-- **Keyboard Navigation**: Fully keyboard accessible. Use `Enter` or `Space` to activate.
+- **Keyboard Navigation**: Fully keyboard accessible via native HTML `<button>` element behavior. The `Enter` and `Space` keys automatically trigger button activation without requiring custom keyboard handlers. This is standard browser behavior for native button elements.
 - **ARIA Attributes**: Supports all standard ARIA attributes via `React.ButtonHTMLAttributes`.
 - **Disabled State**: When disabled, button is not focusable and has `aria-disabled="true"`.
 - **Icon Buttons**: Always provide `aria-label` for icon-only buttons for screen readers.
 - **Focus Management**: Visible focus indicators via `focus-visible` styles.
 - **Screen Readers**: Button text is automatically announced. Use descriptive labels.
 
+**Note**: The Button component renders a native HTML `<button>` element, which provides built-in keyboard accessibility. No additional keyboard event handlers are required - the browser handles `Enter` and `Space` key activation automatically.
+
 ### Edge Cases
 
 - **asChild Prop**: When using `asChild`, the button renders as the child element (e.g., `<Link>`). The `type` attribute is not applied in this case.

package/docs/api-reference/deprecated.md

@@ -276,28 +276,53 @@ const { data: roleId } = await supabase.rpc('rbac_role_grant', { ... });
 
 ### Legacy Event RPCs
 
-**Status**: Deprecated  
+**Status**: Removed  
 **Since**: v0.5.x  
-**Removal**: v0.7.x
+**Removed**: v0.6.x
 
-**Deprecated Functions**:
-- `get_pace_user_events` → Use `data_user_events_get`
+**Removed Functions**:
+- `get_pace_user_events` → Use `data_user_events_get` or `useEvents()` hook
+- `get_public_event_by_code` → Use direct table queries or `usePublicEvent()` hook
+- `get_public_event_logo` → Use direct table queries or `usePublicEventLogo()` hook
 
 **Migration**:
 ```typescript
-// Old
+// Old - get_pace_user_events
 const { data } = await supabase.rpc('get_pace_user_events', {
   user_uuid: userId,
   app_name: appName,
   p_organisation_id: orgId
 });
 
-// New
+// New - Modern RPC
 const { data, error } = await supabase.rpc('data_user_events_get', {
   p_user_id: userId,
   p_app_id: appId, // Use app ID instead of app name
   p_organisation_id: orgId
 });
+
+// Better - Use pace-core hook
+import { useEvents } from '@jmruthers/pace-core';
+const { events } = useEvents();
+
+// Old - get_public_event_by_code
+const { data } = await supabase.rpc('get_public_event_by_code', {
+  event_code_param: eventCode
+});
+
+// New - Direct table query (pace-core handles this internally)
+import { usePublicEvent } from '@jmruthers/pace-core';
+const { event, isLoading, error } = usePublicEvent(eventCode);
+
+// Old - get_public_event_logo
+const { data } = await supabase.rpc('get_public_event_logo', {
+  event_id_param: eventId,
+  organisation_id_param: organisationId
+});
+
+// New - Direct table query (pace-core handles this internally)
+import { usePublicEventLogo } from '@jmruthers/pace-core';
+const { logoUrl, loading, error } = usePublicEventLogo(eventId, eventName, organisationId);
 ```
 
 ### Legacy Data Access RPCs

package/docs/api-reference/rpc-functions.md

@@ -162,12 +162,87 @@ Documented in [RBAC API Reference](../rbac/api-reference.md):
 
 ### Event System
 
-- `data_user_events_get` - Get events accessible to a user (replaces deprecated `get_pace_user_events`)
-- `get_public_event_by_code` - Get public event by code (public access, exception to naming pattern)
+- `data_user_events_get` - Get events accessible to a user
 - `data_event_list` - List events (if implemented)
 - `app_event_create` - Create an event (if implemented)
 
-**Note**: `get_public_event_by_code` is a legacy function that doesn't follow the standard naming pattern. It's maintained for backward compatibility with public pages.
+**Note**: For public event access, use `usePublicEvent()` hook from pace-core, which handles direct table queries internally.
+
+## Removed Legacy RPC Functions
+
+The following RPC functions have been **removed** in v0.6.x. All consuming apps have been migrated to modern alternatives.
+
+### Removed Functions (v0.6.x)
+
+#### `get_pace_user_events` → `data_user_events_get` or `useEvents()` hook
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Use `data_user_events_get` RPC or `useEvents()` hook from pace-core
+
+#### `get_public_event_by_code` → Direct table queries or `usePublicEvent()` hook
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Use `usePublicEvent()` hook from pace-core (handles direct table queries internally)
+
+#### `get_public_event_logo` → Direct table queries or `usePublicEventLogo()` hook
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Use `usePublicEventLogo()` hook from pace-core (handles direct table queries internally)
+
+#### `get_organisation_members` → Direct table queries or `data_user_organisation_roles_get`
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Query `rbac_organisation_roles` table directly or use `data_user_organisation_roles_get` RPC
+
+#### `set_organisation_context` → No longer needed
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Organisation context is now handled automatically via secure Supabase client headers (`useSecureSupabase()` hook)
+
+#### `get_organisation_context` → No longer used
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Not needed - context is handled via secure client
+
+#### `get_page_scope_type` → Direct table queries
+
+**Status**: Removed in v0.6.x  
+**Replacement**: Query `rbac_app_pages.scope_type` directly
+
+**Migration Guide**: See [Deprecated Functions Documentation](./deprecated.md#legacy-event-rpcs) for detailed migration paths.
+
+### Internal Infrastructure Functions (pace-core Only)
+
+These functions are used internally by pace-core and should **NOT** be called directly by consuming apps:  
+**Modern Alternative**: Use `usePublicEvent` hook from pace-core
+
+**Action Required**: If calling directly, migrate to `usePublicEvent` hook. If using pace-core hooks, no action needed.
+
+#### `get_public_event_logo`
+
+**Status**: Legacy (exception to naming standard)  
+**Usage**: Public pages only (no authentication required)  
+**Modern Alternative**: Use `usePublicEventLogo` hook from pace-core
+
+**Action Required**: If calling directly, migrate to `usePublicEventLogo` hook. If using pace-core hooks, no action needed.
+
+### Internal Infrastructure Functions (pace-core Only)
+
+**Removed Functions** (v0.6.x):
+- ~~`set_organisation_context`~~ - **REMOVED** - Organisation context now handled via secure client headers
+- ~~`get_organisation_context`~~ - **REMOVED** - No longer needed
+- ~~`get_page_scope_type`~~ - **REMOVED** - Replaced with direct table queries
+
+**Active Functions** (pace-core internal, do not call directly):
+- `grant_event_app_role` - Used by `useRoleManagement` hook (use hook instead)
+
+**Note**: The removed functions have been replaced with direct table queries or are no longer needed. Organisation context is automatically handled by the secure Supabase client from `useSecureSupabase()` hook.
+
+### Migration Resources
+
+- **Legacy RPC Audit Prompt**: `packages/core/audit/legacy-rpc-audit-prompt.md` - Run this in your consuming app to identify usage
+- **Deprecated Functions Guide**: [Deprecated Functions Documentation](./deprecated.md) - Detailed migration guides
+- **Migration Examples**: See migration guides in `packages/core/docs/migration/`
 
 ## Application-Specific RPCs
 

package/docs/best-practices/accessibility.md

@@ -140,9 +140,12 @@ function AccessibleDataTable() {
 ### Button Component
 
 **Built-in accessibility**:
-- ✅ Keyboard focusable
-- ✅ Proper focus indicators
-- ✅ ARIA attributes support
+- ✅ Keyboard focusable via native HTML `<button>` element
+- ✅ Native keyboard support: `Enter` and `Space` keys automatically activate buttons (standard browser behavior)
+- ✅ Proper focus indicators via `focus-visible` styles
+- ✅ ARIA attributes support via `React.ButtonHTMLAttributes`
+
+**Keyboard Navigation**: The Button component uses native HTML `<button>` elements, which provide automatic keyboard accessibility. When a button is focused, pressing `Enter` or `Space` will trigger the button's `onClick` handler without requiring any custom keyboard event handlers. This is standard browser behavior and works out of the box.
 
 **Example**:
 ```tsx

package/docs/getting-started/cursor-rules.md

@@ -128,25 +128,6 @@ Content with examples and guidelines.
 
 ## Running Audits
 
-### Comprehensive Audit
-
-Run the comprehensive audit tool to check compliance:
-
-```bash
-node node_modules/@jmruthers/pace-core/scripts/audit-consuming-app.cjs
-```
-
-Or add to your `package.json`:
-
-```json
-{
-  "scripts": {
-    "audit:pace-core": "node node_modules/@jmruthers/pace-core/scripts/audit-consuming-app.cjs"
-  }
-}
-```
-
-This generates a timestamped markdown report in `audit/` directory.
 
 ### Compliance Check
 
@@ -237,10 +218,9 @@ Each app maintains its own `.cursor/rules/` directory.
    - Explicitly reference rules when needed: "Follow rules 00-04"
 
 3. **Before Committing:**
-   ```bash
-   npm run audit:pace-core
-   ```
-   Review the generated report in `audit/` directory
+   - Run linting and type checks
+   - Run tests
+   - Review code changes
 
 4. **After pace-core Updates:**
    ```bash