@jmruthers/pace-core 0.6.8 → 0.6.10

package/dist/index.js

@@ -1,33 +1,33 @@
-export { ALL_PERMISSIONS, EVENT_APP_PERMISSIONS, GLOBAL_PERMISSIONS, NavigationGuard, ORGANISATION_PERMISSIONS, PAGE_PERMISSIONS, PagePermissionGuard, RBACErrorCode, RPCFunction, checkRuntimeCompliance, createRBACExpressMiddleware, createRBACMiddleware, getCustomAuthCodeFixes, getDirectSupabaseAuthFixes, getDuplicateConfigFixes, getQuickFixes, getSetupIssues, getUnprotectedPageFixes, isRBACInitialized, isValidPermission, validateAndWarn, validateDatabaseConfiguration, validateRBACSetup, withAccessLevelGuard, withPermissionGuard, withRoleGuard } from './chunk-Z2FNRKF3.js';
-export { AddressField, Avatar, Badge, Calendar, ContextSelector, FileDisplay, FileUpload, Footer, Form, FormField, Header, LoginForm, NavigationMenu, PaceAppLayout, PaceLoginPage, PasswordChangeForm, ProtectedRoute, PublicPageFooter, PublicPageHeader, PublicPageLayout, SessionRestorationLoader, Switch, Tabs, TabsContent, TabsList, TabsTrigger, Textarea, Toast, ToastAction, ToastClose, ToastDescription, ToastProvider, ToastTitle, ToastViewport, Toaster, UserMenu, useFileReference, useFileReferenceById, useFileReferenceForRecord, useFilesByCategory } from './chunk-EURB7QFZ.js';
-export { AccessDenied } from './chunk-S6ZQKDY6.js';
-import { Dialog, DialogContent, DialogHeader } from './chunk-NKHKXPI4.js';
-export { Alert, AlertDescription, AlertTitle, Checkbox, ColumnFactory, DataTable, Dialog, DialogBody, DialogClose, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogPortal, DialogTitle, DialogTrigger, Input, Label, Progress, Select, SelectContent, SelectGroup, SelectItem, SelectLabel, SelectSeparator, SelectTrigger, SelectValue, Table, TableBody, TableCaption, TableCell, TableFooter, TableHead, TableHeader, TableRow, average, count, exportToCSV, exportToCSVWithTableRows, generateCSVContent, max, min, sum } from './chunk-NKHKXPI4.js';
-import { Button } from './chunk-GS5672WG.js';
-export { Button, SECURE_CLIENT_SYMBOL, SecureSupabaseClient, Tooltip, TooltipContent, TooltipProvider, TooltipRoot, TooltipTrigger, createSecureClient, fromSupabaseClient, isSecureClient, useAccessLevel, useCan, useEvents, useMultiplePermissions, usePermissions, useRBAC, useResolvedScope, useResourcePermissions, useRoleManagement, useSecureSupabase, warnIfInsecureClient } from './chunk-GS5672WG.js';
-export { StorageUtils, clearPublicEventCache, clearPublicLogoCache, extractEventCodeFromPath, generatePublicRoutePath, getPublicEventCacheStats, getPublicLogoCacheStats, useFormDialog, useOrganisationPermissions, usePublicEvent, usePublicEventCode, usePublicEventLogo, usePublicRouteParams, useZodForm } from './chunk-4DDCYDQ3.js';
-export { APP_PATH_MAPPING, DEFAULT_FILE_SIZE_LIMIT, FILE_SIZE_LIMITS, STORAGE_CONFIG, archiveFile, clearPublicFileDisplayCache, deleteFile, downloadFile, extractFileMetadata, generateFilePath, generateFileUrlsBatch, generateUniqueFileName, getBucketName, getFileSizeLimit, getPublicFileDisplayCacheStats, getPublicUrl, getSignedUrl, listFiles, uploadFile, useEventTheme, usePublicFileDisplay, validateFileSize } from './chunk-MPBLMWVR.js';
-export { applyPalette, clearPalette, parseAndNormalizeEventColours } from './chunk-5W2A3DRC.js';
-export { useToast } from './chunk-S7DKJPLT.js';
-import { Card } from './chunk-EF2UGZWY.js';
-export { Card, CardActions, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, ErrorBoundary, ErrorBoundaryProvider, PublicPageProvider, useAppConfig, useIsPublicPage, useOrganisationSecurity, usePublicPageContext } from './chunk-EF2UGZWY.js';
+export { ALL_PERMISSIONS, EVENT_APP_PERMISSIONS, GLOBAL_PERMISSIONS, NavigationGuard, ORGANISATION_PERMISSIONS, PAGE_PERMISSIONS, PagePermissionGuard, RBACErrorCode, RPCFunction, createRBACExpressMiddleware, createRBACMiddleware, isValidPermission, useResourcePermissions, useRoleManagement, withAccessLevelGuard, withPermissionGuard, withRoleGuard } from './chunk-W46INAVW.js';
+export { AddressField, AppSwitcher, Avatar, Badge, Calendar, ContextSelector, DEFAULT_APP_PORT_MAP, DatePickerWithTimezone, ErrorBoundary, ErrorBoundaryProvider, FileDisplay, FileUpload, Footer, Form, FormField, Header, LoginForm, NavigationMenu, PaceAppLayout, PaceLoginPage, PasswordChangeForm, ProtectedRoute, PublicPageFooter, PublicPageHeader, PublicPageLayout, PublicPageProvider, SessionRestorationLoader, Switch, Tabs, TabsContent, TabsList, TabsTrigger, Textarea, Toast, ToastAction, ToastClose, ToastDescription, ToastProvider, ToastTitle, ToastViewport, Toaster, UserMenu, buildAppUrl, getAllAppPorts, getAppPort, useAccessibleApps, useFileReference, useFileReferenceById, useFileReferenceForRecord, useFilesByCategory } from './chunk-TFIPNIPE.js';
+export { AccessDenied, SECURE_CLIENT_SYMBOL, SecureSupabaseClient, createSecureClient, fromSupabaseClient, isSecureClient, useEvents, useRBAC, useSecureSupabase, warnIfInsecureClient } from './chunk-X5EAU5G7.js';
+import { Dialog, DialogContent, DialogHeader } from './chunk-MPY44PWB.js';
+export { Checkbox, ColumnFactory, DataTable, Dialog, DialogBody, DialogClose, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogPortal, DialogTitle, DialogTrigger, Input, Label, Progress, Select, SelectContent, SelectGroup, SelectItem, SelectLabel, SelectSeparator, SelectTrigger, SelectValue, Table, TableBody, TableCaption, TableCell, TableFooter, TableHead, TableHeader, TableRow, average, count, exportToCSV, exportToCSVWithTableRows, generateCSVContent, max, min, sum } from './chunk-MPY44PWB.js';
+import { Card, Button } from './chunk-KYURMOQM.js';
+export { Alert, AlertDescription, AlertTitle, Button, Card, CardActions, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Tooltip, TooltipContent, TooltipProvider, TooltipRoot, TooltipTrigger, useAccessLevel, useCan, useMultiplePermissions, usePermissions, useResolvedScope } from './chunk-KYURMOQM.js';
+export { clearPublicEventCache, clearPublicLogoCache, extractEventCodeFromPath, generatePublicRoutePath, getPublicEventCacheStats, getPublicLogoCacheStats, useFormDialog, useOrganisationPermissions, usePublicEvent, usePublicEventCode, usePublicEventLogo, usePublicRouteParams, useZodForm } from './chunk-66R6RLUZ.js';
+import { generateFilePath, generateUniqueFileName, extractFileMetadata, uploadFile, getPublicUrl, getSignedUrl, deleteFile, downloadFile, listFiles, archiveFile } from './chunk-FBZ7U3ID.js';
+export { APP_PATH_MAPPING, DEFAULT_FILE_SIZE_LIMIT, FILE_SIZE_LIMITS, STORAGE_CONFIG, archiveFile, clearPublicFileDisplayCache, deleteFile, downloadFile, extractFileMetadata, generateFilePath, generateFileUrlsBatch, generateUniqueFileName, getBucketName, getFileSizeLimit, getPublicFileDisplayCacheStats, getPublicUrl, getSignedUrl, listFiles, uploadFile, useEventTheme, usePublicFileDisplay, validateFileSize } from './chunk-FBZ7U3ID.js';
+export { applyPalette, clearPalette, parseAndNormalizeEventColours } from './chunk-JJEYZ3DX.js';
+export { useOrganisationSecurity } from './chunk-KPYQWGFQ.js';
+export { useToast } from './chunk-BCTXBU6U.js';
+export { useAppConfig, useIsPublicPage, usePublicPageContext } from './chunk-3GWSPISD.js';
 import './chunk-C7NSAPTL.js';
-import { OrganisationServiceContext, UnifiedAuthContext, OrganisationServiceProvider } from './chunk-T5CVK4R3.js';
-export { EventServiceProvider, InactivityServiceProvider, OrganisationServiceProvider, UnifiedAuthProvider, useAuthService, useEventService, useInactivityService, useOrganisationService, useOrganisations, useSessionRestoration, useUnifiedAuth } from './chunk-T5CVK4R3.js';
-export { CACHE_PATTERNS, RBACCache, RBACEngine, clearInFlightRequests, createRBACConfig, createRBACEngine, disablePerformanceMonitoring, enablePerformanceMonitoring, getAccessLevel, getInFlightRequestCount, getPerformanceMetrics, getPerformanceSummary, getPermissionMap, getRBACConfig, getRBACLogger, getRoleContext, hasAllPermissions, hasAnyPermission, isDebugMode, isDevelopmentMode, isPerformanceMonitoringEnabled, isPermitted, isPermittedCached, rbacCache, recordAuditEvent, recordPermissionCheck, resetPerformanceMetrics, resolveAppContext, setupRBAC } from './chunk-LX6U42O3.js';
-export { RBACAuditManager, createAuditManager, emitAuditEvent, getGlobalAuditManager, setGlobalAuditManager } from './chunk-AHU7G2R5.js';
+import { OrganisationServiceContext, UnifiedAuthContext, OrganisationServiceProvider } from './chunk-Y4PF6HIM.js';
+export { EventServiceProvider, InactivityServiceProvider, OrganisationServiceProvider, UnifiedAuthProvider, useAuthService, useEventService, useInactivityService, useOrganisationService, useOrganisations, useSessionRestoration, useUnifiedAuth } from './chunk-Y4PF6HIM.js';
+export { CACHE_PATTERNS, RBACCache, RBACEngine, clearInFlightRequests, createRBACConfig, createRBACEngine, disablePerformanceMonitoring, enablePerformanceMonitoring, getAccessLevel, getInFlightRequestCount, getPerformanceMetrics, getPerformanceSummary, getPermissionMap, getRBACConfig, getRBACLogger, getRoleContext, hasAllPermissions, hasAnyPermission, isDebugMode, isDevelopmentMode, isPerformanceMonitoringEnabled, isPermitted, isPermittedCached, isRBACInitialized, rbacCache, recordAuditEvent, recordPermissionCheck, resetPerformanceMetrics, resolveAppContext, setupRBAC } from './chunk-LNHFAF4X.js';
+export { RBACAuditManager, createAuditManager, emitAuditEvent, getGlobalAuditManager, setGlobalAuditManager } from './chunk-NIU6DPQV.js';
 export { FileCategory } from './chunk-6QYDGKQY.js';
 import './chunk-4SXLQIZO.js';
-export { createBaseClient, emailSchema, formatCompactNumber, formatCurrency, formatDate, formatDateTime, formatFileSize, formatNumber, formatPercent, formatTime, getAppConfig, getCurrentAppId, getCurrentAppName, nameSchema, passwordSchema, phoneSchema, sanitizeFormData, sanitizeUserInput, setAppConfig, urlSchema, useSessionTracking } from './chunk-IUBRCBSY.js';
-export { formatInTimeZone, formatTimeInTimeZone, fromZonedTime, getTimeZoneDifference, getTimezoneAbbreviation, getUserTimeZone, roundToNearestMinutes, toZonedTime } from './chunk-FEJLJNWA.js';
-export { LoadingSpinner, sanitizeHtml } from './chunk-A3W6LW53.js';
-import './chunk-OJ4SKRSV.js';
-import './chunk-FYHN4DD5.js';
-import { cn } from './chunk-7ILTDCL2.js';
-export { cn } from './chunk-7ILTDCL2.js';
-import './chunk-HF6O3O37.js';
-import { logger } from './chunk-TTRFSOKR.js';
-export { LogLevel, Logger, createLogger, logger } from './chunk-TTRFSOKR.js';
+export { createBaseClient, emailSchema, formatCompactNumber, formatCurrency, formatDate, formatDateTime, formatFileSize, formatNumber, formatPercent, formatTime, getAppConfig, getCurrentAppId, getCurrentAppName, nameSchema, passwordSchema, phoneSchema, sanitizeFormData, sanitizeUserInput, setAppConfig, urlSchema, useSessionTracking } from './chunk-KSNLMI7N.js';
+export { formatInTimeZone, formatTimeInTimeZone, fromZonedTime, getTimeZoneDifference, getTimezoneAbbreviation, getUserTimeZone, roundToNearestMinutes, toZonedTime } from './chunk-FN52B75D.js';
+export { sanitizeHtml } from './chunk-DDMPHZ3D.js';
+import { cn } from './chunk-UZNAFKGW.js';
+export { LoadingSpinner, cn } from './chunk-UZNAFKGW.js';
+import './chunk-7YDC7LMU.js';
+import './chunk-RMLY6KB5.js';
+import { logger } from './chunk-BTHN5MKC.js';
+export { LogLevel, Logger, createLogger, logger } from './chunk-BTHN5MKC.js';
 export { getAllStylePaths, getStylePath, styleConfig } from './chunk-UH3NTO3F.js';
 import './chunk-3RG5ZIWI.js';
 import { useContext, useState, useEffect, useCallback, useRef } from 'react';
@@ -37,9 +37,9 @@ export { z } from 'zod';
 
 function OrganisationProvider({
   children,
-  requireOrganisationContext,
-  autoSelectPrimaryOrganisation,
-  onOrganisationChange
+  requireOrganisationContext: _requireOrganisationContext,
+  autoSelectPrimaryOrganisation: _autoSelectPrimaryOrganisation,
+  onOrganisationChange: _onOrganisationChange
 }) {
   const existingOrganisationService = useContext(OrganisationServiceContext);
   const authContext = useContext(UnifiedAuthContext);
@@ -295,7 +295,7 @@ function useInactivityTracker({
         document.removeEventListener(event, throttledResetActivityRef.current);
       });
     }
-    throttledResetActivityRef.current = throttle((event) => {
+    throttledResetActivityRef.current = throttle((_event) => {
       resetActivity();
     }, 100);
     ACTIVITY_EVENTS.forEach((event) => {
@@ -579,4 +579,18 @@ var createSecureDataAccess = (supabase, organisationId, isSuperAdmin = false) =>
   };
 };
 
-export { InactivityWarningModal, OrganisationProvider, createSecureDataAccess, useInactivityTracker };
+// src/utils/storage/storageUtils.ts
+var StorageUtils = class {
+};
+StorageUtils.generateFilePath = generateFilePath;
+StorageUtils.generateUniqueFileName = generateUniqueFileName;
+StorageUtils.extractFileMetadata = extractFileMetadata;
+StorageUtils.uploadFile = uploadFile;
+StorageUtils.getPublicUrl = getPublicUrl;
+StorageUtils.getSignedUrl = getSignedUrl;
+StorageUtils.deleteFile = deleteFile;
+StorageUtils.downloadFile = downloadFile;
+StorageUtils.listFiles = listFiles;
+StorageUtils.archiveFile = archiveFile;
+
+export { InactivityWarningModal, OrganisationProvider, StorageUtils, createSecureDataAccess, useInactivityTracker };

package/dist/papaparseLoader-WG2UXQ22.js

@@ -0,0 +1,7 @@
+import './chunk-3RG5ZIWI.js';
+import * as papaparse from 'papaparse';
+export * from 'papaparse';
+
+var papaparseLoader_default = papaparse;
+
+export { papaparseLoader_default as default };

package/dist/providers.d.ts

@@ -1,26 +1,40 @@
-export { b as UnifiedAuthContext, a as UnifiedAuthContextType, d as UnifiedAuthProvider, c as UnifiedAuthProviderProps, U as UserEventAccess, u as useUnifiedAuth } from './UnifiedAuthProvider-CKvHP1MK.js';
-import { A as AuthService } from './AuthService-DmfO5rGS.js';
-export { a as EventServiceContext, E as EventServiceContextType, c as EventServiceProvider, b as EventServiceProviderProps, g as InactivityServiceContext, I as InactivityServiceContextType, i as InactivityServiceProvider, h as InactivityServiceProviderProps, d as OrganisationServiceContext, O as OrganisationServiceContextType, f as OrganisationServiceProvider, e as OrganisationServiceProviderProps } from './AuthService-DmfO5rGS.js';
+export { d as UnifiedAuthContext, b as UnifiedAuthContextType, U as UnifiedAuthProvider, a as UnifiedAuthProviderProps, c as UserEventAccess, u as useUnifiedAuth } from './UnifiedAuthProvider-CiBAl9-s.js';
+import { O as OrganisationService, I as InactivityService } from './InactivityServiceProvider-DHryoh6K.js';
+export { a as EventServiceProvider, E as EventServiceProviderProps, e as InactivityServiceProvider, d as InactivityServiceProviderProps, c as OrganisationServiceProvider, b as OrganisationServiceProviderProps } from './InactivityServiceProvider-DHryoh6K.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as React from 'react';
 import React__default from 'react';
 import { SupabaseClient } from '@supabase/supabase-js';
-import { S as SessionRestorationState } from './auth-BZOJqrdd.js';
-import './event-CW5YB_2p.js';
+import './event-WTAQuGcq.js';
 import './core-CUElvH_C.js';
+import './auth-BZOJqrdd.js';
 
 /**
- * Auth service context type.
- * Provides authentication service instance and session restoration state.
+ * Organisation service context type.
+ * Provides organisation service instance to React components.
  */
-interface AuthServiceContextType {
-    authService: AuthService;
-    sessionRestoration: SessionRestorationState;
+interface OrganisationServiceContextType {
+    organisationService: OrganisationService;
 }
 /**
- * Context for AuthService.
- * Provides authentication service instance to React components.
+ * Context for OrganisationService.
+ * Provides organisation service instance to React components.
+ */
+declare const OrganisationServiceContext: React.Context<OrganisationServiceContextType | null>;
+
+/**
+ * Inactivity service context type.
+ * Provides inactivity service instance to React components.
  */
-declare const AuthServiceContext: React__default.Context<AuthServiceContextType | null>;
+interface InactivityServiceContextType {
+    inactivityService: InactivityService;
+}
+/**
+ * Context for InactivityService.
+ * Provides inactivity service instance to React components.
+ */
+declare const InactivityServiceContext: React.Context<InactivityServiceContextType | null>;
+
 /**
  * Props for the AuthServiceProvider component.
  */
@@ -38,4 +52,4 @@ interface AuthServiceProviderProps {
  */
 declare function AuthServiceProvider({ children, supabaseClient, appName }: AuthServiceProviderProps): react_jsx_runtime.JSX.Element;
 
-export { AuthServiceContext, type AuthServiceContextType, AuthServiceProvider, type AuthServiceProviderProps };
+export { AuthServiceProvider, type AuthServiceProviderProps, InactivityServiceContext, type InactivityServiceContextType, OrganisationServiceContext, type OrganisationServiceContextType };

package/dist/providers.js

@@ -1,8 +1,8 @@
 import './chunk-C7NSAPTL.js';
-export { AuthServiceContext, AuthServiceProvider, EventServiceContext, EventServiceProvider, InactivityServiceContext, InactivityServiceProvider, OrganisationServiceContext, OrganisationServiceProvider, UnifiedAuthContext, UnifiedAuthProvider, useUnifiedAuth } from './chunk-T5CVK4R3.js';
-import './chunk-LX6U42O3.js';
-import './chunk-AHU7G2R5.js';
+export { AuthServiceProvider, EventServiceProvider, InactivityServiceContext, InactivityServiceProvider, OrganisationServiceContext, OrganisationServiceProvider, UnifiedAuthContext, UnifiedAuthProvider, useUnifiedAuth } from './chunk-Y4PF6HIM.js';
+import './chunk-LNHFAF4X.js';
+import './chunk-NIU6DPQV.js';
 import './chunk-4SXLQIZO.js';
-import './chunk-HF6O3O37.js';
-import './chunk-TTRFSOKR.js';
+import './chunk-RMLY6KB5.js';
+import './chunk-BTHN5MKC.js';
 import './chunk-3RG5ZIWI.js';

package/dist/rbac/eslint-rules.js

@@ -195,7 +195,7 @@ var eslint_rules_default = {
                           `
   if (error) {
     console.error('RBAC error:', error);
-    return <div>Error loading permissions</div>;
+    return <Alert variant="destructive"><AlertDescription>Error loading permissions</AlertDescription></Alert>;
   }`
                         );
                       }
@@ -236,7 +236,7 @@ var eslint_rules_default = {
                           node,
                           `
   if (isLoading) {
-    return <div>Loading permissions...</div>;
+    return null; // or use a loading component
   }`
                         );
                       }

package/dist/rbac/index.d.ts

@@ -1,11 +1,11 @@
-import { U as UUID, g as PermissionCacheKey, h as AuditEventSource, i as RBACAuditEvent, a as PermissionCheck, S as Scope, A as AccessLevel, b as PermissionMap, j as RBACAppContext, k as RBACRoleContext, l as UserRBACContext, P as Permission } from '../types-BeoeWV5I.js';
-export { E as EventAppRole, G as GlobalRole, I as InvalidScopeError, M as MissingUserContextError, O as Operation, e as OrganisationContextRequiredError, c as OrganisationRole, d as PermissionDeniedError, R as RBACError, f as RBACNotInitializedError } from '../types-BeoeWV5I.js';
-export { A as AccessLevelContext, s as AuditEventType, P as PermissionSource, d as RBACAccessValidateParams, e as RBACAccessValidateResult, q as RBACAuditLogParams, r as RBACAuditLogResult, t as RBACContext, w as RBACErrorCode, v as RBACFunctionResponse, f as RBACPageAccessCheckParams, R as RBACPermissionCheckParams, a as RBACPermissionCheckResult, b as RBACPermissionsGetParams, c as RBACPermissionsGetResult, u as RBACResult, g as RBACRoleGrantParams, h as RBACRoleGrantResult, i as RBACRoleRevokeParams, j as RBACRoleRevokeResult, m as RBACRoleValidateParams, n as RBACRoleValidateResult, k as RBACRolesListParams, l as RBACRolesListResult, o as RBACSessionTrackParams, p as RBACSessionTrackResult, x as RPCFunction, S as SessionType } from '../functions-lBy5L2ry.js';
+import { U as UUID, g as PermissionCacheKey, h as AuditEventSource, i as RBACAuditEvent, a as PermissionCheck, S as Scope, A as AccessLevel, b as PermissionMap, j as RBACAppContext, k as RBACRoleContext, l as UserRBACContext, P as Permission } from '../types-CvOPXWWZ.js';
+export { E as EventAppRole, G as GlobalRole, I as InvalidScopeError, M as MissingUserContextError, O as Operation, e as OrganisationContextRequiredError, c as OrganisationRole, d as PermissionDeniedError, R as RBACError, f as RBACNotInitializedError } from '../types-CvOPXWWZ.js';
+export { A as AccessLevelContext, s as AuditEventType, P as PermissionSource, d as RBACAccessValidateParams, e as RBACAccessValidateResult, q as RBACAuditLogParams, r as RBACAuditLogResult, t as RBACContext, w as RBACErrorCode, v as RBACFunctionResponse, f as RBACPageAccessCheckParams, R as RBACPermissionCheckParams, a as RBACPermissionCheckResult, b as RBACPermissionsGetParams, c as RBACPermissionsGetResult, u as RBACResult, g as RBACRoleGrantParams, h as RBACRoleGrantResult, i as RBACRoleRevokeParams, j as RBACRoleRevokeResult, m as RBACRoleValidateParams, n as RBACRoleValidateResult, k as RBACRolesListParams, l as RBACRolesListResult, o as RBACSessionTrackParams, p as RBACSessionTrackResult, x as RPCFunction, S as SessionType } from '../functions-DH45k8ec.js';
 import { SupabaseClient } from '@supabase/supabase-js';
-import { D as Database } from '../database.generated-CcnC_DRc.js';
+import { D as Database } from '../database.generated-DT8JTZiP.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React__default from 'react';
-import { a as NavigationItem } from '../types-t9H8qKRw.js';
+import { a as NavigationItem } from '../types-BE2sEHKd.js';
 import '../core-CUElvH_C.js';
 
 /**
@@ -567,7 +567,7 @@ interface PermissionCheckAuditEvent {
     duration_ms: number;
     cache_hit?: boolean;
     cache_source?: 'memory' | 'database' | 'rpc';
-    metadata?: Record<string, any>;
+    metadata?: Record<string, unknown>;
 }
 /**
  * Audit event payload for permission denied
@@ -581,7 +581,7 @@ interface PermissionDeniedAuditEvent {
     pageId?: UUID;
     permission: string;
     source: AuditEventSource;
-    metadata?: Record<string, any>;
+    metadata?: Record<string, unknown>;
 }
 /**
  * Audit event payload for role granted
@@ -594,7 +594,7 @@ interface RoleGrantedAuditEvent {
     appId?: UUID;
     role: string;
     grantedBy: UUID;
-    metadata?: Record<string, any>;
+    metadata?: Record<string, unknown>;
 }
 /**
  * Audit event payload for role revoked
@@ -607,7 +607,7 @@ interface RoleRevokedAuditEvent {
     appId?: UUID;
     role: string;
     revokedBy: UUID;
-    metadata?: Record<string, any>;
+    metadata?: Record<string, unknown>;
 }
 /**
  * Audit event payload for RLS denied
@@ -618,7 +618,7 @@ interface RLSDeniedAuditEvent {
     organisationId: UUID;
     table: string;
     operation: string;
-    metadata?: Record<string, any>;
+    metadata?: Record<string, unknown>;
 }
 /**
  * Union type for all audit events
@@ -1176,14 +1176,14 @@ declare function useResourcePermissions(resource: string, options?: UseResourceP
  * function MyComponent() {
  *   const { accessLevel, isLoading, error } = useAccessLevel(userId, scope);
  *
- *   if (isLoading) return <div>Loading access level...</div>;
- *   if (error) return <div>Error: {error.message}</div>;
+ *   if (isLoading) return null; // or use a loading component
+ *   if (error) return <Alert variant="destructive"><AlertDescription>Error: {error.message}</AlertDescription></Alert>;
  *
  *   return (
- *     <div>
- *       Access Level: {accessLevel}
+ *     <>
+ *       <p>Access Level: {accessLevel}</p>
  *       {accessLevel >= AccessLevel.ADMIN && <AdminPanel />}
- *     </div>
+ *     </>
  *   );
  * }
  * ```
@@ -1211,10 +1211,10 @@ declare function useAccessLevel(userId: UUID, scope: Scope): {
  * function MyComponent() {
  *   const { can, isLoading, error } = useCan(userId, scope, 'read:users');
  *
- *   if (isLoading) return <div>Checking permission...</div>;
- *   if (error) return <div>Error: {error.message}</div>;
+ *   if (isLoading) return null; // or use a loading component
+ *   if (error) return <Alert variant="destructive"><AlertDescription>Error: {error.message}</AlertDescription></Alert>;
  *
- *   return can ? <UserList /> : <div>Access denied</div>;
+ *   return can ? <UserList /> : <AccessDenied />;
  * }
  * ```
  */
@@ -1250,15 +1250,15 @@ precomputedSuperAdmin?: boolean | null, appName?: string): {
  *     ['read:users', 'create:users', 'update:users']
  *   );
  *
- *   if (isLoading) return <div>Checking permissions...</div>;
- *   if (error) return <div>Error: {error.message}</div>;
+ *   if (isLoading) return null; // or use a loading component
+ *   if (error) return <Alert variant="destructive"><AlertDescription>Error: {error.message}</AlertDescription></Alert>;
  *
  *   return (
- *     <div>
+ *     <>
  *       {results['read:users'] && <UserList />}
  *       {results['create:users'] && <CreateUserButton />}
  *       {results['update:users'] && <EditUserButton />}
- *     </div>
+ *     </>
  *   );
  * }
  * ```
@@ -1289,14 +1289,14 @@ declare function useMultiplePermissions(userId: UUID, scope: Scope, permissions:
  *     appId
  *   );
  *
- *   if (isLoading) return <div>Loading...</div>;
- *   if (error) return <div>Error: {error.message}</div>;
+ *   if (isLoading) return null; // or use a loading component
+ *   if (error) return <Alert variant="destructive"><AlertDescription>Error: {error.message}</AlertDescription></Alert>;
  *
  *   return (
- *     <div>
+ *     <>
  *       {permissions['read:users'] && <UserList />}
  *       {permissions['create:users'] && <CreateUserButton />}
- *     </div>
+ *     </>
  *   );
  * }
  * ```
@@ -1324,6 +1324,7 @@ declare function usePermissions(userId: UUID, organisationId: string | undefined
  * @example
  * ```tsx
  * import { useRoleManagement } from '@jmruthers/pace-core/rbac';
+ * import { Button } from '@jmruthers/pace-core';
  *
  * function UserRolesComponent() {
  *   const {
@@ -1361,10 +1362,10 @@ declare function usePermissions(userId: UUID, organisationId: string | undefined
  *   };
  *
  *   return (
- *     <div>
- *       <button onClick={handleGrantGlobalRole}>Grant Super Admin</button>
- *       <button onClick={handleGrantOrgRole}>Grant Org Admin</button>
- *     </div>
+ *     <>
+ *       <Button onClick={handleGrantGlobalRole}>Grant Super Admin</Button>
+ *       <Button onClick={handleGrantOrgRole}>Grant Org Admin</Button>
+ *     </>
  *   );
  * }
  * ```
@@ -1464,7 +1465,7 @@ declare function useRoleManagement(): {
  *   const supabase = useSecureSupabase();
  *
  *   if (!supabase) {
- *     return <div>Loading context...</div>;
+ *     return null; // or use a loading component
  *   }
  *
  *   const fetchData = async () => {
@@ -1474,7 +1475,7 @@ declare function useRoleManagement(): {
  *     // Organisation context is automatically injected
  *   };
  *
- *   return <div>...</div>;
+ *   return <>...</>;
  * }
  * ```
  *
@@ -1566,7 +1567,7 @@ declare function useRoleManagement(): {
  *   const supabase = useSecureSupabase();
  *
  *   if (!supabase) {
- *     return <div>Loading context...</div>;
+ *     return null; // or use a loading component
  *   }
  *
  *   // Use supabase client - organisation context is automatically injected
@@ -1592,6 +1593,18 @@ declare function useSecureSupabase(baseClient?: SupabaseClient<Database> | null)
  * These are optional utilities for server-side applications.
  */
 
+/**
+ * Request interface for server handlers
+ * Used by permission and access level guards
+ */
+interface ServerRequest {
+    user?: {
+        id: string;
+    };
+    organisationId?: string;
+    eventId?: string;
+    appId?: string;
+}
 /**
  * Permission Guard for Server Handlers
  *
@@ -1612,10 +1625,10 @@ declare function useSecureSupabase(baseClient?: SupabaseClient<Database> | null)
  * );
  * ```
  */
-declare function withPermissionGuard<T extends any[]>(config: {
+declare function withPermissionGuard<T extends readonly [ServerRequest, ...unknown[]], R>(config: {
     permission: Permission;
     pageId?: UUID;
-}, handler: (...args: T) => Promise<any>): (...args: T) => Promise<any>;
+}, handler: (...args: T) => Promise<R>): (...args: T) => Promise<R>;
 /**
  * Access Level Guard for Server Handlers
  *
@@ -1636,7 +1649,7 @@ declare function withPermissionGuard<T extends any[]>(config: {
  * );
  * ```
  */
-declare function withAccessLevelGuard<T extends any[]>(minLevel: 'viewer' | 'participant' | 'planner' | 'admin' | 'super', handler: (...args: T) => Promise<any>): (...args: T) => Promise<any>;
+declare function withAccessLevelGuard<T extends readonly [ServerRequest, ...unknown[]], R>(minLevel: 'viewer' | 'participant' | 'planner' | 'admin' | 'super', handler: (...args: T) => Promise<R>): (...args: T) => Promise<R>;
 /**
  * Role Guard for Server Handlers
  *
@@ -1662,12 +1675,12 @@ declare function withAccessLevelGuard<T extends any[]>(minLevel: 'viewer' | 'par
  * );
  * ```
  */
-declare function withRoleGuard<T extends any[]>(config: {
+declare function withRoleGuard<T extends readonly [ServerRequest, ...unknown[]], R>(config: {
     globalRoles?: string[];
     organisationRoles?: string[];
     eventAppRoles?: string[];
     requireAll?: boolean;
-}, handler: (...args: T) => Promise<any>): (...args: T) => Promise<any>;
+}, handler: (...args: T) => Promise<R>): (...args: T) => Promise<R>;
 /**
  * Next.js Middleware for RBAC
  *
@@ -1758,6 +1771,12 @@ declare function createRBACExpressMiddleware(config: {
  * @param config - Optional configuration
  */
 declare function setupRBAC(supabase: SupabaseClient<Database>, config?: Partial<RBACConfig>): void;
+/**
+ * Check if RBAC system is initialized
+ *
+ * @returns True if RBAC is initialized
+ */
+declare function isRBACInitialized(): boolean;
 /**
  * Get user's access level in a scope
  *
@@ -2035,179 +2054,4 @@ declare const ALL_PERMISSIONS: {
 };
 type AllPermissions = typeof ALL_PERMISSIONS;
 
-/**
- * RBAC Setup Validator
- * @package @jmruthers/pace-core
- * @module RBAC/Compliance/SetupValidator
- * @since 1.0.0
- *
- * This module provides utilities to validate RBAC setup state.
- */
-interface SetupIssue {
-    type: 'not-initialized' | 'missing-config' | 'invalid-config' | 'missing-provider-context';
-    message: string;
-    recommendation: string;
-}
-interface ComplianceResult {
-    isCompliant: boolean;
-    issues: SetupIssue[];
-}
-/**
- * Check if RBAC system is initialized
- *
- * @returns true if RBAC is initialized, false otherwise
- */
-declare function isRBACInitialized(): boolean;
-/**
- * Get setup issues
- *
- * @returns Array of setup issues
- */
-declare function getSetupIssues(): SetupIssue[];
-/**
- * Validate RBAC setup
- *
- * @returns Compliance result with issues and recommendations
- */
-declare function validateRBACSetup(): ComplianceResult;
-
-/**
- * Pattern Detector for RBAC Compliance
- * @package @jmruthers/pace-core
- * @module RBAC/Compliance/PatternDetector
- * @since 1.0.0
- *
- * This module provides static and runtime pattern detection for RBAC violations.
- * It detects direct RPC calls, direct table queries, and other non-standard patterns.
- */
-interface PatternViolation {
-    type: 'direct-rpc-call' | 'direct-table-query' | 'bypass-pattern' | 'custom-component' | 'hardcoded-role-check' | 'custom-permission-utility' | 'ui-only-access-control' | 'permission-bypass-comment' | 'resource-permission-string-literal' | 'permission-wrapper-function';
-    file?: string;
-    line?: number;
-    message: string;
-    recommendation: string;
-}
-interface PatternDetectionResult {
-    violations: PatternViolation[];
-    isCompliant: boolean;
-    summary: {
-        directRpcCalls: number;
-        directTableQueries: number;
-        bypassPatterns: number;
-        customComponents: number;
-        hardcodedRoleChecks: number;
-        customPermissionUtilities: number;
-        uiOnlyAccessControl: number;
-        permissionBypassComments: number;
-        resourcePermissionStringLiterals: number;
-        permissionWrapperFunctions: number;
-    };
-}
-
-/**
- * Runtime Compliance Checking
- * @package @jmruthers/pace-core
- * @module RBAC/Compliance/RuntimeCompliance
- * @since 1.0.0
- *
- * This module provides runtime compliance checking utilities.
- */
-
-interface RuntimeComplianceResult {
-    setup: {
-        isCompliant: boolean;
-        issues: SetupIssue[];
-    };
-    warnings: string[];
-    providerContext?: {
-        available: boolean;
-        message?: string;
-    };
-    patternDetection?: PatternDetectionResult;
-}
-/**
- * Check runtime compliance
- *
- * This function checks if the RBAC system is properly set up and logs warnings
- * to the console if issues are found. This is intended for development-time
- * validation only.
- *
- * @returns Runtime compliance result
- */
-declare function checkRuntimeCompliance(): RuntimeComplianceResult;
-/**
- * Validate and warn about RBAC setup issues
- *
- * This is a convenience function that checks compliance and logs warnings.
- * Call this in development mode to get early warnings about setup issues.
- */
-declare function validateAndWarn(): void;
-
-/**
- * Database Configuration Validator
- * @package @jmruthers/pace-core
- * @module RBAC/Compliance/DatabaseValidator
- * @since 1.0.0
- *
- * This module provides utilities to validate database configuration for RBAC.
- */
-
-interface DatabaseIssue {
-    type: 'app-not-configured' | 'app-name-mismatch' | 'pages-not-configured' | 'permissions-not-configured' | 'rls-not-active' | 'roles-not-configured';
-    message: string;
-    recommendation: string;
-}
-interface DatabaseComplianceResult {
-    appConfigured: boolean;
-    pagesConfigured: boolean;
-    permissionsConfigured: boolean;
-    rlsPoliciesActive: boolean;
-    rolesConfigured: boolean;
-    issues: DatabaseIssue[];
-    recommendations: string[];
-}
-/**
- * Validate database configuration
- *
- * @param supabase - Supabase client
- * @param appName - Application name to validate
- * @returns Database compliance result
- */
-declare function validateDatabaseConfiguration(supabase: SupabaseClient<Database>, appName: string): Promise<DatabaseComplianceResult>;
-
-/**
- * Quick Fix Suggestions for RBAC/Auth Compliance
- * @package @jmruthers/pace-core
- * @module RBAC/Compliance/QuickFixSuggestions
- * @since 1.0.0
- *
- * This module provides auto-suggest fixes for common RBAC/auth compliance issues.
- */
-interface QuickFix {
-    issue: string;
-    suggestion: string;
-    codeExample?: string;
-    migrationSteps?: string[];
-}
-/**
- * Get quick fix suggestions for custom auth code
- */
-declare function getCustomAuthCodeFixes(customCodeName: string, type: 'hook' | 'component' | 'util'): QuickFix;
-/**
- * Get quick fix suggestions for duplicate Supabase config
- */
-declare function getDuplicateConfigFixes(): QuickFix;
-/**
- * Get quick fix suggestions for unprotected pages
- */
-declare function getUnprotectedPageFixes(): QuickFix;
-/**
- * Get quick fix suggestions for direct Supabase auth usage
- */
-declare function getDirectSupabaseAuthFixes(): QuickFix;
-/**
- * Get all quick fix suggestions for a compliance issue
- */
-declare function getQuickFixes(issueType: string, details?: Record<string, any>): QuickFix[];
-
-export { ALL_PERMISSIONS, AccessDenied, type AccessDeniedProps, AccessLevel, type AllPermissions, CACHE_PATTERNS, type ComplianceResult, type DatabaseComplianceResult, type DatabaseIssue, EVENT_APP_PERMISSIONS, type EventAppRoleData, GLOBAL_PERMISSIONS, type GrantEventAppRoleParams, type LogLevel, NavigationGuard, type NavigationGuardProps, ORGANISATION_PERMISSIONS, PAGE_PERMISSIONS, PagePermissionGuard, type PagePermissionGuardProps, Permission, PermissionCheck, PermissionMap, type QuickFix, RBACAuditManager, RBACCache, type RBACConfig, RBACEngine, type RBACLogger, type RBACPerformanceMetrics, type ResourcePermissions, type RevokeEventAppRoleParams, type RoleManagementResult, type RuntimeComplianceResult, SECURE_CLIENT_SYMBOL, Scope, SecureSupabaseClient, type SetupIssue, UUID, type UseResolvedScopeOptions, type UseResolvedScopeReturn, type UseResourcePermissionsOptions, checkRuntimeCompliance, clearInFlightRequests, createAuditManager, createRBACConfig, createRBACEngine, createRBACExpressMiddleware, createRBACMiddleware, createSecureClient, disablePerformanceMonitoring, emitAuditEvent, enablePerformanceMonitoring, fromSupabaseClient, getAccessLevel, getCustomAuthCodeFixes, getDirectSupabaseAuthFixes, getDuplicateConfigFixes, getGlobalAuditManager, getInFlightRequestCount, getPerformanceMetrics, getPerformanceSummary, getPermissionMap, getQuickFixes, getRBACConfig, getRBACLogger, getRoleContext, getSetupIssues, getUnprotectedPageFixes, hasAllPermissions, hasAnyPermission, isDebugMode, isDevelopmentMode, isPerformanceMonitoringEnabled, isPermitted, isPermittedCached, isRBACInitialized, isSecureClient, isValidPermission, rbacCache, recordAuditEvent, recordPermissionCheck, resetPerformanceMetrics, resolveAppContext, setGlobalAuditManager, setupRBAC, useAccessLevel, useCan, useMultiplePermissions, usePermissions, useRBAC, useResolvedScope, useResourcePermissions, useRoleManagement, useSecureSupabase, validateAndWarn, validateDatabaseConfiguration, validateRBACSetup, warnIfInsecureClient, withAccessLevelGuard, withPermissionGuard, withRoleGuard };
+export { ALL_PERMISSIONS, AccessDenied, type AccessDeniedProps, AccessLevel, type AllPermissions, CACHE_PATTERNS, EVENT_APP_PERMISSIONS, type EventAppRoleData, GLOBAL_PERMISSIONS, type GrantEventAppRoleParams, type LogLevel, NavigationGuard, type NavigationGuardProps, ORGANISATION_PERMISSIONS, PAGE_PERMISSIONS, PagePermissionGuard, type PagePermissionGuardProps, Permission, PermissionCheck, PermissionMap, RBACAuditManager, RBACCache, type RBACConfig, RBACEngine, type RBACLogger, type RBACPerformanceMetrics, type ResourcePermissions, type RevokeEventAppRoleParams, type RoleManagementResult, SECURE_CLIENT_SYMBOL, Scope, SecureSupabaseClient, UUID, type UseResolvedScopeOptions, type UseResolvedScopeReturn, type UseResourcePermissionsOptions, clearInFlightRequests, createAuditManager, createRBACConfig, createRBACEngine, createRBACExpressMiddleware, createRBACMiddleware, createSecureClient, disablePerformanceMonitoring, emitAuditEvent, enablePerformanceMonitoring, fromSupabaseClient, getAccessLevel, getGlobalAuditManager, getInFlightRequestCount, getPerformanceMetrics, getPerformanceSummary, getPermissionMap, getRBACConfig, getRBACLogger, getRoleContext, hasAllPermissions, hasAnyPermission, isDebugMode, isDevelopmentMode, isPerformanceMonitoringEnabled, isPermitted, isPermittedCached, isRBACInitialized, isSecureClient, isValidPermission, rbacCache, recordAuditEvent, recordPermissionCheck, resetPerformanceMetrics, resolveAppContext, setGlobalAuditManager, setupRBAC, useAccessLevel, useCan, useMultiplePermissions, usePermissions, useRBAC, useResolvedScope, useResourcePermissions, useRoleManagement, useSecureSupabase, warnIfInsecureClient, withAccessLevelGuard, withPermissionGuard, withRoleGuard };