@authowl/react 0.21.1 → 0.22.0

package/dist/index.cjs

@@ -236,11 +236,12 @@ function useAccount() {
   return useAuthClient().account;
 }
 function usePublicConfig() {
-  const { config, configState } = useAuthOwlContext();
+  const { config, configState, retryPublicConfig } = useAuthOwlContext();
   return {
     config,
     isLoading: configState === "loading",
-    isError: configState === "error"
+    isError: configState === "error",
+    retry: retryPublicConfig
   };
 }
 function useSession() {
@@ -748,7 +749,7 @@ function warnPublicConfigFailed(resolved, error) {
   warnedConfigProjects.add(key);
   const reason = error instanceof Error ? error.message : String(error);
   console.warn(
-    `[AuthOwl] Could not load this project's public config from ${origin} (${reason}). Falling back to a password-only sign-in form, regardless of the methods this project actually enabled. Likely causes: the API is unreachable, \`apiUrl\` is wrong, or the publishable key points at a missing/mismatched project. If password sign-in is not enabled for this project, the form will dead-end at submit - check \`apiUrl\` and \`publishableKey\` on <AuthOwlProvider>. (This warning is dev-only.)`
+    `[AuthOwl] Could not load this project's public config from ${origin} (${reason}). Authentication UI is unavailable until the request succeeds. Likely causes: the API is unreachable, \`apiUrl\` is wrong, or the publishable key points at a missing/mismatched project. Check \`apiUrl\` and \`publishableKey\` on <AuthOwlProvider>. (This warning is dev-only.)`
   );
 }
 function detectLocale() {
@@ -784,6 +785,8 @@ function AuthOwlProvider({
   const client = React5.useMemo(() => (0, import_core2.createAuthOwlClient)(resolved), [resolved]);
   const [config, setConfig] = React5.useState(null);
   const [configState, setConfigState] = React5.useState("loading");
+  const [configAttempt, setConfigAttempt] = React5.useState(0);
+  const retryPublicConfig = React5.useCallback(() => setConfigAttempt((attempt) => attempt + 1), []);
   React5.useEffect(() => {
     let active = true;
     setConfigState("loading");
@@ -800,7 +803,7 @@ function AuthOwlProvider({
     return () => {
       active = false;
     };
-  }, [resolved]);
+  }, [resolved, configAttempt]);
   const merged = resolveAppearance(appearance, config);
   const [autoLocale, setAutoLocale] = React5.useState(null);
   React5.useEffect(() => {
@@ -811,8 +814,8 @@ function AuthOwlProvider({
     (0, import_core2.captureInvitationClaim)();
   }, []);
   const ctxValue = React5.useMemo(
-    () => ({ client, appearance, config, configState, locale }),
-    [client, appearance, config, configState, locale]
+    () => ({ client, appearance, config, configState, retryPublicConfig, locale }),
+    [client, appearance, config, configState, retryPublicConfig, locale]
   );
   return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Context.Provider, { value: ctxValue, children: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
     "div",
@@ -930,6 +933,159 @@ var init_FormError = __esm({
   }
 });
 
+// src/components/captcha-loader.ts
+var captcha_loader_exports = {};
+__export(captcha_loader_exports, {
+  loadCaptcha: () => loadCaptcha
+});
+function providerGlobal(adapter) {
+  const api = window[adapter.globalName];
+  return typeof api?.render === "function" ? api : void 0;
+}
+function loadCaptcha(adapter) {
+  const available = providerGlobal(adapter);
+  if (available) return Promise.resolve(available);
+  const cached = loaders.get(adapter.scriptUrl);
+  if (cached) return cached;
+  const loading = new Promise((resolve, reject) => {
+    const existing = document.querySelector(
+      `script[src="${adapter.scriptUrl}"]`
+    );
+    const script = existing ?? document.createElement("script");
+    let poll;
+    const cleanup = () => {
+      clearTimeout(timeout);
+      if (poll !== void 0) clearInterval(poll);
+      script.removeEventListener("load", loaded);
+      script.removeEventListener("error", failed);
+    };
+    const resolveWhenPublished = () => {
+      const api = providerGlobal(adapter);
+      if (!api) return false;
+      cleanup();
+      resolve(api);
+      return true;
+    };
+    const loaded = () => {
+      if (!resolveWhenPublished() && poll === void 0) {
+        poll = setInterval(resolveWhenPublished, GLOBAL_POLL_INTERVAL_MS);
+      }
+    };
+    const failed = () => {
+      cleanup();
+      if (!existing) script.remove();
+      reject(new Error(`${adapter.label} failed to load`));
+    };
+    const timeout = setTimeout(failed, SCRIPT_LOAD_TIMEOUT_MS);
+    script.addEventListener("load", loaded, { once: true });
+    script.addEventListener("error", failed, { once: true });
+    if (existing) {
+      loaded();
+    } else {
+      script.src = adapter.scriptUrl;
+      script.async = true;
+      script.defer = true;
+      const nonce = document.querySelector("script[nonce]")?.nonce;
+      if (nonce) script.nonce = nonce;
+      document.head.appendChild(script);
+    }
+  });
+  const retryable = loading.catch((error) => {
+    loaders.delete(adapter.scriptUrl);
+    throw error;
+  });
+  loaders.set(adapter.scriptUrl, retryable);
+  return retryable;
+}
+var SCRIPT_LOAD_TIMEOUT_MS, GLOBAL_POLL_INTERVAL_MS, loaders;
+var init_captcha_loader = __esm({
+  "src/components/captcha-loader.ts"() {
+    "use strict";
+    "use client";
+    SCRIPT_LOAD_TIMEOUT_MS = 1e4;
+    GLOBAL_POLL_INTERVAL_MS = 25;
+    loaders = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/components/captcha-providers.ts
+var captcha_providers_exports = {};
+__export(captcha_providers_exports, {
+  CAPTCHA_ADAPTERS: () => CAPTCHA_ADAPTERS,
+  captchaAdapterFor: () => captchaAdapterFor
+});
+function preferredTheme() {
+  return typeof window !== "undefined" && window.matchMedia?.("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+}
+function teardown(api, widgetId) {
+  if (api.remove) {
+    try {
+      api.remove(widgetId);
+      return;
+    } catch {
+    }
+  }
+  try {
+    api.reset?.(widgetId);
+  } catch {
+  }
+}
+function captchaAdapterFor(provider) {
+  return CAPTCHA_ADAPTERS[provider] ?? null;
+}
+var CAPTCHA_ADAPTERS;
+var init_captcha_providers = __esm({
+  "src/components/captcha-providers.ts"() {
+    "use strict";
+    "use client";
+    CAPTCHA_ADAPTERS = {
+      turnstile: {
+        scriptUrl: "https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit",
+        globalName: "turnstile",
+        label: "Cloudflare Turnstile",
+        invisibleRenderOptions: ({ siteKey, theme, action, language }) => ({
+          sitekey: siteKey,
+          theme,
+          action,
+          language,
+          execution: "execute",
+          appearance: "interaction-only",
+          size: "flexible"
+        }),
+        teardown
+      },
+      hcaptcha: {
+        scriptUrl: "https://js.hcaptcha.com/1/api.js?render=explicit",
+        globalName: "hcaptcha",
+        label: "hCaptcha",
+        invisibleRenderOptions: ({ siteKey, theme }) => ({
+          sitekey: siteKey,
+          // 'auto' is Turnstile vocabulary. hCaptcha and reCAPTCHA take light|dark
+          // only and silently fall back to light on anything else, which reads badly
+          // in a dark application.
+          theme: theme === "auto" ? preferredTheme() : theme,
+          size: "invisible"
+        }),
+        teardown
+      },
+      "recaptcha-v2": {
+        scriptUrl: "https://www.google.com/recaptcha/api.js?render=explicit",
+        globalName: "grecaptcha",
+        label: "reCAPTCHA",
+        invisibleRenderOptions: ({ siteKey, theme }) => ({
+          sitekey: siteKey,
+          // 'auto' is Turnstile vocabulary. hCaptcha and reCAPTCHA take light|dark
+          // only and silently fall back to light on anything else, which reads badly
+          // in a dark application.
+          theme: theme === "auto" ? preferredTheme() : theme,
+          size: "invisible"
+        }),
+        teardown
+      }
+    };
+  }
+});
+
 // ../../node_modules/.pnpm/qrcode-generator@2.0.4/node_modules/qrcode-generator/dist/qrcode.mjs
 var qrcode, QRMode, QRErrorCorrectionLevel, QRMaskPattern, QRUtil, QRMath, qrPolynomial, QRRSBlock, qrBitBuffer, qrNumber, qrAlphaNum, qr8BitByte, qrKanji, byteArrayOutputStream, base64EncodeOutputStream, base64DecodeInputStream, gifImage, createDataURL, qrcode_default, stringToBytes;
 var init_qrcode = __esm({
@@ -2836,34 +2992,34 @@ function TeamMembersPanel({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("div", { className: "ba-organization-user-invitations", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("h4", { children: t("organization.profile.teams.manageMembers") }),
-    canAdd && availableMembers.length > 0 && members !== null && /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: addMember, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("label", { className: "ba-label", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("div", { className: "ba-organization-user-invitations", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("h4", { children: t("organization.profile.teams.manageMembers") }),
+    canAdd && availableMembers.length > 0 && members !== null && /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: addMember, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.teams.addMember"),
-        /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("select", { className: "ba-input", value: addableUserId, onChange: (event) => setUserId(event.target.value), children: availableMembers.map((member) => /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("option", { value: member.userId, children: member.user.name || member.user.email || member.userId }, member.userId)) })
+        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("select", { className: "ba-input", value: addableUserId, onChange: (event) => setUserId(event.target.value), children: availableMembers.map((member) => /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("option", { value: member.userId, children: member.user.name || member.user.email || member.userId }, member.userId)) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !addableUserId, children: t("organization.profile.teams.addMember") })
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !addableUserId, children: t("organization.profile.teams.addMember") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(FormError, { children: actionError }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
+    /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(FormError, { children: actionError }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
     ] }),
-    members?.length ? /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("ul", { className: "ba-organization-list", children: members.map((member) => {
+    members?.length ? /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("ul", { className: "ba-organization-list", children: members.map((member) => {
       const organizationMember = organization.members.find((entry) => entry.userId === member.userId);
       const displayName = organizationMember?.user.name || member.userId;
-      return /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("li", { className: "ba-organization-member", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("span", { className: "ba-organization-member-copy", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("strong", { children: displayName }),
-          organizationMember?.user.email && /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(Bidi, { children: organizationMember.user.email }) })
+      return /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("li", { className: "ba-organization-member", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("span", { className: "ba-organization-member-copy", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("strong", { children: displayName }),
+          organizationMember?.user.email && /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(Bidi, { children: organizationMember.user.email }) })
         ] }),
-        canRemove && /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => removeMember(member), children: t("organization.profile.teams.removeMember") })
+        canRemove && /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => removeMember(member), children: t("organization.profile.teams.removeMember") })
       ] }, member.id);
-    }) }) : error ? null : members === null ? /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.membersEmpty") }) : null
+    }) }) : error ? null : members === null ? /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.membersEmpty") }) : null
   ] });
 }
-var React53, import_jsx_runtime58;
+var React53, import_jsx_runtime59;
 var init_TeamMembersPanel = __esm({
   "src/components/organization/TeamMembersPanel.tsx"() {
     "use strict";
@@ -2874,7 +3030,7 @@ var init_TeamMembersPanel = __esm({
     init_FormError();
     init_use_submit_action();
     init_use_team_resources();
-    import_jsx_runtime58 = require("react/jsx-runtime");
+    import_jsx_runtime59 = require("react/jsx-runtime");
   }
 });
 
@@ -2953,42 +3109,42 @@ function TeamsSection({
     );
   };
   const selectedTeam = teams?.find((team) => team.id === selectedTeamId);
-  return /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("h3", { className: "ba-title", children: t("organization.profile.teams.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("h3", { className: "ba-title", children: t("organization.profile.teams.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.description") })
     ] }),
-    capabilities.createTeam ? /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: create, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
+    capabilities.createTeam ? /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: create, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.teams.create"),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !name.trim(), "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.teams.create") }) })
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !name.trim(), "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.teams.create") }) })
     ] }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(FormError, { children: actionError }),
-    teamsError && /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(FormError, { children: teamsError }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
+    /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(FormError, { children: actionError }),
+    teamsError && /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(FormError, { children: teamsError }),
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
     ] }),
-    teams?.length ? /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("ul", { className: "ba-organization-list", children: teams.map((team) => /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("li", { className: "ba-organization-member", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: team.name.trim().charAt(0).toUpperCase() || "?" }),
-      editingTeamId === team.id ? /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: (event) => rename(event, team), children: [
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
+    teams?.length ? /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("ul", { className: "ba-organization-list", children: teams.map((team) => /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("li", { className: "ba-organization-member", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: team.name.trim().charAt(0).toUpperCase() || "?" }),
+      editingTeamId === team.id ? /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: (event) => rename(event, team), children: [
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
           t("organization.profile.teams.rename"),
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("input", { className: "ba-input", value: editingName, onChange: (event) => setEditingName(event.target.value), required: true, autoFocus: true })
+          /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("input", { className: "ba-input", value: editingName, onChange: (event) => setEditingName(event.target.value), required: true, autoFocus: true })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !editingName.trim(), children: t("organization.profile.teams.rename") }),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => setEditingTeamId(null), children: t("organization.profile.teams.cancel") })
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)(import_jsx_runtime59.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("span", { className: "ba-organization-member-copy", children: /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("strong", { children: team.name }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("span", { className: "ba-organization-member-actions", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, "aria-expanded": selectedTeamId === team.id, onClick: () => setSelectedTeamId(selectedTeamId === team.id ? null : team.id), children: t("organization.profile.teams.manageMembers") }),
-          capabilities.updateTeam && /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => beginRename(team), children: t("organization.profile.teams.rename") }),
-          capabilities.deleteTeam && /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(team), children: t("organization.profile.teams.removeTeam") })
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !editingName.trim(), children: t("organization.profile.teams.rename") }),
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => setEditingTeamId(null), children: t("organization.profile.teams.cancel") })
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)(import_jsx_runtime60.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("span", { className: "ba-organization-member-copy", children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("strong", { children: team.name }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("span", { className: "ba-organization-member-actions", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, "aria-expanded": selectedTeamId === team.id, onClick: () => setSelectedTeamId(selectedTeamId === team.id ? null : team.id), children: t("organization.profile.teams.manageMembers") }),
+          capabilities.updateTeam && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => beginRename(team), children: t("organization.profile.teams.rename") }),
+          capabilities.deleteTeam && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(team), children: t("organization.profile.teams.removeTeam") })
         ] })
       ] })
-    ] }, team.id)) }) : teamsError ? null : teams === null ? /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : teams.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.empty") }) : null,
-    selectedTeam && /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(
+    ] }, team.id)) }) : teamsError ? null : teams === null ? /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : teams.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.empty") }) : null,
+    selectedTeam && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
       TeamMembersPanel,
       {
         organization,
@@ -2999,7 +3155,7 @@ function TeamsSection({
     )
   ] });
 }
-var React54, import_jsx_runtime59;
+var React54, import_jsx_runtime60;
 var init_TeamsSection = __esm({
   "src/components/organization/TeamsSection.tsx"() {
     "use strict";
@@ -3014,7 +3170,7 @@ var init_TeamsSection = __esm({
     init_model();
     init_use_organization_roles();
     init_use_team_resources();
-    import_jsx_runtime59 = require("react/jsx-runtime");
+    import_jsx_runtime60 = require("react/jsx-runtime");
   }
 });
 
@@ -3427,110 +3583,26 @@ function PasskeyButton({ redirectTo, onSignedIn }) {
 }
 
 // src/components/ForgotPassword.tsx
-var React11 = __toESM(require("react"), 1);
+var React10 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 
 // src/components/AuthChallenge.tsx
-var React10 = __toESM(require("react"), 1);
+var React9 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
+init_FormError();
 
-// src/components/Turnstile.tsx
-var React9 = __toESM(require("react"), 1);
-var import_jsx_runtime10 = require("react/jsx-runtime");
-var SCRIPT_URL = "https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit";
-var SCRIPT_LOAD_TIMEOUT_MS = 1e4;
-var LOCAL_TURNSTILE_TEST_TOKEN = "XXXX.DUMMY.TOKEN.XXXX";
-var loader = null;
-function loadTurnstile() {
-  if (window.turnstile) return Promise.resolve(window.turnstile);
-  if (loader) return loader;
-  loader = new Promise((resolve, reject) => {
-    const existing = document.querySelector(`script[src="${SCRIPT_URL}"]`);
-    const script = existing ?? document.createElement("script");
-    const cleanup = () => {
-      clearTimeout(timeout);
-      script.removeEventListener("load", loaded);
-      script.removeEventListener("error", failed);
-    };
-    const loaded = () => {
-      cleanup();
-      if (window.turnstile) {
-        resolve(window.turnstile);
-      } else {
-        reject(new Error("Turnstile unavailable"));
-      }
-    };
-    const failed = () => {
-      cleanup();
-      if (!existing) script.remove();
-      reject(new Error("Turnstile failed to load"));
-    };
-    const timeout = setTimeout(failed, SCRIPT_LOAD_TIMEOUT_MS);
-    script.addEventListener("load", loaded, { once: true });
-    script.addEventListener("error", failed, { once: true });
-    if (!existing) {
-      script.src = SCRIPT_URL;
-      script.async = true;
-      script.defer = true;
-      const nonce = document.querySelector("script[nonce]")?.nonce;
-      if (nonce) script.nonce = nonce;
-      document.head.appendChild(script);
-    }
-  }).catch((error) => {
-    loader = null;
-    throw error;
-  });
-  return loader;
-}
-function Turnstile({
-  siteKey,
-  theme,
-  onToken,
-  onUnavailable
-}) {
-  const container = React9.useRef(null);
-  const callbacks = React9.useRef({ onToken, onUnavailable });
-  callbacks.current = { onToken, onUnavailable };
-  React9.useEffect(() => {
-    callbacks.current.onToken(null);
-    if (!siteKey) {
-      callbacks.current.onToken(LOCAL_TURNSTILE_TEST_TOKEN);
-      return;
-    }
-    let active = true;
-    let widget = null;
-    void loadTurnstile().then((api) => {
-      if (!active || !container.current) return;
-      const id = api.render(container.current, {
-        sitekey: siteKey,
-        theme: theme === "system" ? "auto" : theme,
-        size: "flexible",
-        callback: (token) => callbacks.current.onToken(token),
-        "expired-callback": () => callbacks.current.onToken(null),
-        "error-callback": () => {
-          callbacks.current.onToken(null);
-          callbacks.current.onUnavailable();
-        }
-      });
-      widget = { api, id };
-    }).catch(() => {
-      if (active) callbacks.current.onUnavailable();
-    });
-    return () => {
-      active = false;
-      if (widget) widget.api.remove(widget.id);
-    };
-  }, [siteKey, theme]);
-  if (!siteKey) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "ba-turnstile", ref: container, "data-testid": "phoneotp-turnstile" });
+// src/components/captcha-provider-ids.ts
+var CAPTCHA_PROVIDER_IDS = ["turnstile", "hcaptcha", "recaptcha-v2"];
+function isSupportedCaptchaProvider(provider) {
+  return CAPTCHA_PROVIDER_IDS.includes(provider);
 }
 
 // src/components/AuthChallenge.tsx
-var import_jsx_runtime11 = require("react/jsx-runtime");
+var import_jsx_runtime10 = require("react/jsx-runtime");
 var AUTH_CHALLENGE_ACTIONS = {
   signUp: "auth_signup",
   signIn: "auth_signin",
@@ -3545,38 +3617,53 @@ var challengeError = {
   code: "BOT_CHALLENGE_FAILED",
   message: "Human verification failed."
 };
-function turnstileTheme(root, fallback) {
+function captchaTheme(root, fallback) {
   const rendered = root?.dataset.authowlTheme;
   if (rendered === "light" || rendered === "dark") return rendered;
   if (fallback === "light" || fallback === "dark") return fallback;
   return "auto";
 }
 function useAuthChallenge() {
-  const { config, isLoading } = usePublicConfig();
+  const { config, isLoading, retry } = usePublicConfig();
   const t = useT();
-  const container = React10.useRef(null);
-  const active = React10.useRef(null);
-  const [status, setStatus] = React10.useState("idle");
-  const siteKey = config?.authTurnstileSiteKey ?? null;
-  const removeActive = React10.useCallback((reason) => {
+  const container = React9.useRef(null);
+  const active = React9.useRef(null);
+  const [status, setStatus] = React9.useState("idle");
+  const captcha = config?.captcha ?? null;
+  const providerSupported = captcha ? isSupportedCaptchaProvider(captcha.provider) : false;
+  const unavailableProvider = captcha && !providerSupported ? captcha.provider : null;
+  const refetched = React9.useRef(null);
+  const refetchIfConfigMayBeStale = React9.useCallback(() => {
+    if (!config || refetched.current === config) return;
+    refetched.current = config;
+    retry();
+  }, [config, retry]);
+  const removeActive = React9.useCallback((reason) => {
     const current = active.current;
     active.current = null;
     if (!current) return;
-    current.api.remove(current.id);
+    current.adapter.teardown(current.api, current.id);
     if (reason) current.reject(reason);
   }, []);
-  React10.useEffect(
-    () => () => removeActive(new Error("Turnstile challenge was cancelled")),
+  React9.useEffect(
+    () => () => removeActive(new Error("Captcha challenge was cancelled")),
     [removeActive]
   );
-  const tokenFor = React10.useCallback(
+  const tokenFor = React9.useCallback(
     async (action) => {
-      if (!siteKey) return null;
+      if (!captcha) return null;
+      if (!providerSupported) throw new Error(`Unsupported captcha provider: ${captcha.provider}`);
       setStatus("checking");
-      removeActive(new Error("Turnstile challenge was replaced"));
+      removeActive(new Error("Captcha challenge was replaced"));
       try {
-        const api = await loadTurnstile();
-        if (!container.current) throw new Error("Turnstile container unavailable");
+        const [{ loadCaptcha: loadCaptcha2 }, { captchaAdapterFor: captchaAdapterFor2 }] = await Promise.all([
+          Promise.resolve().then(() => (init_captcha_loader(), captcha_loader_exports)),
+          Promise.resolve().then(() => (init_captcha_providers(), captcha_providers_exports))
+        ]);
+        const adapter = captchaAdapterFor2(captcha.provider);
+        if (!adapter) throw new Error(`Unsupported captcha provider: ${captcha.provider}`);
+        const api = await loadCaptcha2(adapter);
+        if (!container.current) throw new Error("Captcha container unavailable");
         return await new Promise((resolve, reject) => {
           let settled = false;
           const finish = (outcome) => {
@@ -3584,27 +3671,29 @@ function useAuthChallenge() {
             settled = true;
             const current = active.current;
             active.current = null;
-            if (current) current.api.remove(current.id);
+            if (current) current.adapter.teardown(current.api, current.id);
             if ("token" in outcome) resolve(outcome.token);
             else reject(outcome.error);
           };
-          const fail = () => finish({ error: new Error("Turnstile challenge failed") });
+          const fail = () => finish({ error: new Error("Captcha challenge failed") });
           const root = container.current.closest(".authowl-root");
+          const optionalFailureCallbacks = captcha.provider === "turnstile" ? {
+            "timeout-callback": fail,
+            "unsupported-callback": fail
+          } : {};
           const id = api.render(container.current, {
-            sitekey: siteKey,
-            theme: turnstileTheme(root, config?.branding?.theme),
-            action,
-            execution: "execute",
-            appearance: "interaction-only",
-            size: "flexible",
-            language: root?.dataset.authowlLocale ?? config?.locale,
+            ...adapter.invisibleRenderOptions({
+              siteKey: captcha.siteKey,
+              theme: captchaTheme(root, config?.branding?.theme),
+              action,
+              language: root?.dataset.authowlLocale ?? config?.locale
+            }),
             callback: (token) => finish({ token }),
             "expired-callback": fail,
             "error-callback": fail,
-            "timeout-callback": fail,
-            "unsupported-callback": fail
+            ...optionalFailureCallbacks
           });
-          active.current = { api, id, reject };
+          active.current = { adapter, api, id, reject };
           try {
             api.execute(id);
           } catch {
@@ -3615,9 +3704,9 @@ function useAuthChallenge() {
         setStatus("idle");
       }
     },
-    [config?.branding?.theme, config?.locale, removeActive, siteKey]
+    [captcha, config?.branding?.theme, config?.locale, providerSupported, removeActive]
   );
-  const run = React10.useCallback(
+  const run = React9.useCallback(
     async (action, request) => {
       if (isLoading) {
         return {
@@ -3627,41 +3716,44 @@ function useAuthChallenge() {
       }
       try {
         const token = await tokenFor(action);
-        return await request(token ? { authChallengeToken: token } : void 0);
+        const result = await request(token ? { authChallengeToken: token } : void 0);
+        if (result?.error?.code === challengeError.code) refetchIfConfigMayBeStale();
+        return result;
       } catch {
         setStatus("failed");
+        refetchIfConfigMayBeStale();
         return {
           data: null,
           error: challengeError
         };
       }
     },
-    [isLoading, tokenFor]
+    [isLoading, refetchIfConfigMayBeStale, tokenFor]
   );
-  const control = siteKey ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "ba-auth-challenge", "data-testid": "auth-challenge", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("div", { className: "ba-turnstile", ref: container }),
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { className: "ba-sr-only", role: "status", "aria-live": "polite", children: status === "checking" ? t("authChallenge.checking") : status === "failed" ? t("authChallenge.error.failed") : "" })
+  const control = captcha ? /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "ba-auth-challenge", "data-testid": "auth-challenge", children: [
+    providerSupported ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "ba-turnstile", ref: container }) : null,
+    unavailableProvider ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(FormError, { "data-testid": "auth-challenge-unsupported", children: t("authChallenge.error.unsupportedProvider", { provider: unavailableProvider }) }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "ba-sr-only", role: "status", "aria-live": "polite", children: status === "checking" ? t("authChallenge.checking") : status === "failed" ? t("authChallenge.error.failed") : "" })
   ] }) : null;
   return { run, control, configPending: isLoading };
 }
 
 // src/components/ForgotPassword.tsx
 init_FormError();
-var import_jsx_runtime12 = require("react/jsx-runtime");
+var import_jsx_runtime11 = require("react/jsx-runtime");
 function ForgotPassword({ resetPasswordUrl, onBack }) {
   const t = useT();
   const { requestPasswordReset } = usePasswordReset();
   const { pending, error, run } = useSubmitAction();
   const authChallenge = useAuthChallenge();
-  const [email, setEmail] = React11.useState("");
-  const [sent, setSent] = React11.useState(false);
+  const [email, setEmail] = React10.useState("");
+  const [sent, setSent] = React10.useState(false);
   if (sent) {
-    return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "ba-fields", "data-testid": "forgot-sent", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "ba-muted", children: richMessage(t("forgotPassword.sent"), { email: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Bidi, { children: email }) }) }),
-      onBack && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
+    return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "ba-fields", "data-testid": "forgot-sent", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { className: "ba-muted", children: richMessage(t("forgotPassword.sent"), { email: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Bidi, { children: email }) }) }),
+      onBack && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
     "form",
     {
       method: "post",
@@ -3675,9 +3767,9 @@ function ForgotPassword({ resetPasswordUrl, onBack }) {
         });
       },
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
             "input",
             {
               className: "ba-input",
@@ -3690,18 +3782,18 @@ function ForgotPassword({ resetPasswordUrl, onBack }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(FormError, { children: error }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(FormError, { children: error }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("forgotPassword.submit") })
+            children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("forgotPassword.submit") })
           }
         ),
-        onBack && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
+        onBack && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
       ]
     }
   );
@@ -3711,7 +3803,7 @@ function ForgotPassword({ resetPasswordUrl, onBack }) {
 init_i18n();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime13 = require("react/jsx-runtime");
+var import_jsx_runtime12 = require("react/jsx-runtime");
 function OtpCodeForm({
   email,
   code,
@@ -3722,7 +3814,7 @@ function OtpCodeForm({
   error
 }) {
   const t = useT();
-  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
     "form",
     {
       method: "post",
@@ -3733,9 +3825,9 @@ function OtpCodeForm({
         onSubmit();
       },
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("label", { className: "ba-label", children: [
-          richMessage(t("emailOtp.codeLabel"), { email: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Bidi, { children: email }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("label", { className: "ba-label", children: [
+          richMessage(t("emailOtp.codeLabel"), { email: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Bidi, { children: email }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
             "input",
             {
               className: "ba-input",
@@ -3748,29 +3840,29 @@ function OtpCodeForm({
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(FormError, { children: error }),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: onChangeEmail, children: t("emailOtp.changeEmail") })
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(FormError, { children: error }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { type: "button", className: "ba-link-button", onClick: onChangeEmail, children: t("emailOtp.changeEmail") })
       ]
     }
   );
 }
 
 // src/components/MFAChallenge.tsx
-var React12 = __toESM(require("react"), 1);
+var React11 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime14 = require("react/jsx-runtime");
+var import_jsx_runtime13 = require("react/jsx-runtime");
 function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const t = useT();
   const { verifyTotp, verifyBackupCode, sendOtp, verifyOtp } = useMFA();
   const { pending, error, setError, run } = useSubmitAction();
-  const [mode, setMode] = React12.useState("totp");
-  const [code, setCode] = React12.useState("");
-  const [trustDevice, setTrustDevice] = React12.useState(false);
+  const [mode, setMode] = React11.useState("totp");
+  const [code, setCode] = React11.useState("");
+  const [trustDevice, setTrustDevice] = React11.useState(false);
   const switchMode = (next) => {
     setMode(next);
     setCode("");
@@ -3793,12 +3885,12 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   };
   const hint = mode === "totp" ? t("mfa.challenge.totpHint") : mode === "backup" ? t("mfa.challenge.backupHint") : t("mfa.challenge.otpHint");
   const label2 = mode === "totp" ? t("mfa.challenge.totpLabel") : mode === "backup" ? t("mfa.challenge.backupLabel") : t("mfa.challenge.otpLabel");
-  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("form", { method: "post", className: "ba-fields", "data-testid": "mfa-challenge", onSubmit: submit, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("h2", { className: "ba-title", children: t("mfa.challenge.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("p", { className: "ba-muted", children: hint }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("label", { className: "ba-label", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("form", { method: "post", className: "ba-fields", "data-testid": "mfa-challenge", onSubmit: submit, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("h2", { className: "ba-title", children: t("mfa.challenge.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("p", { className: "ba-muted", children: hint }),
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("label", { className: "ba-label", children: [
       label2,
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
         "input",
         {
           className: "ba-input",
@@ -3814,28 +3906,28 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
         }
       )
     ] }),
-    mode !== "backup" && allowTrustDevice && /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("label", { className: "ba-consent ba-consent-centered", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("span", { className: "ba-checkbox-control", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("input", { className: "ba-checkbox", type: "checkbox", checked: trustDevice, onChange: (e) => setTrustDevice(e.target.checked) }),
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { className: "ba-checkbox-check" }) })
+    mode !== "backup" && allowTrustDevice && /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("label", { className: "ba-consent ba-consent-centered", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("span", { className: "ba-checkbox-control", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("input", { className: "ba-checkbox", type: "checkbox", checked: trustDevice, onChange: (e) => setTrustDevice(e.target.checked) }),
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("span", { className: "ba-checkbox-check" }) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { children: t("mfa.challenge.trustDevice", { days: 30 }) })
+      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("span", { children: t("mfa.challenge.trustDevice", { days: 30 }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
-    mode !== "totp" && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
-    mode !== "backup" && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
+    mode !== "totp" && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
+    mode !== "backup" && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
   ] });
 }
 
 // src/components/mfa-enrollment-step.tsx
-var React15 = __toESM(require("react"), 1);
+var React14 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 
 // src/components/MFAEnrollment.tsx
-var React14 = __toESM(require("react"), 1);
+var React13 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -3848,13 +3940,13 @@ function shouldDiscardSetup(args) {
 }
 
 // src/components/QrCode.tsx
-var React13 = __toESM(require("react"), 1);
+var React12 = __toESM(require("react"), 1);
 init_i18n();
-var import_jsx_runtime15 = require("react/jsx-runtime");
+var import_jsx_runtime14 = require("react/jsx-runtime");
 function QrCode({ value, size = 200 }) {
   const t = useT();
-  const [path, setPath] = React13.useState(null);
-  React13.useEffect(() => {
+  const [path, setPath] = React12.useState(null);
+  React12.useEffect(() => {
     let active = true;
     setPath(null);
     void Promise.resolve().then(() => (init_qr(), qr_exports)).then(
@@ -3872,7 +3964,7 @@ function QrCode({ value, size = 200 }) {
   if (!path) return null;
   const margin = 4;
   const dim = path.count + margin * 2;
-  return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
     "svg",
     {
       width: size,
@@ -3883,8 +3975,8 @@ function QrCode({ value, size = 200 }) {
       shapeRendering: "crispEdges",
       className: "ba-qr",
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("rect", { width: dim, height: dim, fill: "#ffffff" }),
-        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("g", { transform: `translate(${margin} ${margin})`, children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("path", { d: path.d, fill: "#000000" }) })
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("rect", { width: dim, height: dim, fill: "#ffffff" }),
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("g", { transform: `translate(${margin} ${margin})`, children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("path", { d: path.d, fill: "#000000" }) })
       ]
     }
   );
@@ -3892,7 +3984,7 @@ function QrCode({ value, size = 200 }) {
 
 // src/components/MFAEnrollment.tsx
 init_FormError();
-var import_jsx_runtime16 = require("react/jsx-runtime");
+var import_jsx_runtime15 = require("react/jsx-runtime");
 function secretFromUri(uri) {
   try {
     return new URL(uri).searchParams.get("secret");
@@ -3905,11 +3997,11 @@ function MFAEnrollment({ onEnrolled, title }) {
   const { enable, verifyTotp } = useMFA();
   const { user, isLoaded } = useUser();
   const { pending, error, run } = useSubmitAction();
-  const [password, setPassword] = React14.useState("");
-  const [setup, setSetup] = React14.useState(null);
-  const [code, setCode] = React14.useState("");
-  const [done, setDone] = React14.useState(false);
-  const setupOwnerId = React14.useRef(null);
+  const [password, setPassword] = React13.useState("");
+  const [setup, setSetup] = React13.useState(null);
+  const [code, setCode] = React13.useState("");
+  const [done, setDone] = React13.useState(false);
+  const setupOwnerId = React13.useRef(null);
   const userId = user?.id ?? null;
   const stale = shouldDiscardSetup({
     isLoaded,
@@ -3918,7 +4010,7 @@ function MFAEnrollment({ onEnrolled, title }) {
     currentUserId: userId
   });
   const activeSetup = stale ? null : setup;
-  React14.useEffect(() => {
+  React13.useEffect(() => {
     if (stale) {
       setSetup(null);
       setPassword("");
@@ -3926,22 +4018,22 @@ function MFAEnrollment({ onEnrolled, title }) {
     }
   }, [stale]);
   if (done) {
-    return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "ba-fields", "data-testid": "mfa-enroll-done", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h2", { className: "ba-title", children: t("mfa.enroll.doneTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.doneBody") })
+    return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "ba-fields", "data-testid": "mfa-enroll-done", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("h2", { className: "ba-title", children: t("mfa.enroll.doneTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.doneBody") })
     ] });
   }
   if (!activeSetup) {
     if (!isLoaded) {
-      return /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("div", { className: "ba-fields", "data-testid": "mfa-enroll-loading", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("div", { className: "ba-skeleton" }) });
+      return /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "ba-fields", "data-testid": "mfa-enroll-loading", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "ba-skeleton" }) });
     }
     if (user?.twoFactorEnabled) {
-      return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "ba-fields", "data-testid": "mfa-enroll-active", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h2", { className: "ba-title", children: t("mfa.enroll.activeTitle") }),
-        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.activeBody") })
+      return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "ba-fields", "data-testid": "mfa-enroll-active", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("h2", { className: "ba-title", children: t("mfa.enroll.activeTitle") }),
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.activeBody") })
       ] });
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(
+    return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(
       "form",
       {
         method: "post",
@@ -3958,11 +4050,11 @@ function MFAEnrollment({ onEnrolled, title }) {
           });
         },
         children: [
-          title !== null && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h2", { className: "ba-title", children: title ?? t("mfa.enroll.title") }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.passwordHint") }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("label", { className: "ba-label", children: [
+          title !== null && /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("h2", { className: "ba-title", children: title ?? t("mfa.enroll.title") }),
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.passwordHint") }),
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("label", { className: "ba-label", children: [
             t("common.passwordLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -3974,29 +4066,29 @@ function MFAEnrollment({ onEnrolled, title }) {
               }
             )
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(FormError, { children: error }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Busy, { busy: pending, label: t("mfa.enroll.startPending"), children: t("common.continue") }) })
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(FormError, { children: error }),
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(Busy, { busy: pending, label: t("mfa.enroll.startPending"), children: t("common.continue") }) })
         ]
       }
     );
   }
   const secret = secretFromUri(activeSetup.totpURI);
-  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "ba-fields", "data-testid": "mfa-enroll-verify", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h2", { className: "ba-title", children: t("mfa.enroll.scanQrTitle") }),
-    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.scanQrHint") }),
-    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(QrCode, { value: activeSetup.totpURI }),
-    secret && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "ba-muted", children: richMessage(t("mfa.enroll.manualKey"), {
-      secret: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("code", { className: "ba-code", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Bidi, { children: secret }) })
+  return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "ba-fields", "data-testid": "mfa-enroll-verify", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("h2", { className: "ba-title", children: t("mfa.enroll.scanQrTitle") }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "ba-muted", children: t("mfa.enroll.scanQrHint") }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(QrCode, { value: activeSetup.totpURI }),
+    secret && /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "ba-muted", children: richMessage(t("mfa.enroll.manualKey"), {
+      secret: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("code", { className: "ba-code", children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(Bidi, { children: secret }) })
     }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("p", { className: "ba-muted", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("p", { className: "ba-muted", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
         " ",
         t("mfa.enroll.backupCodesWarningRest")
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("ul", { className: "ba-backup-codes", "data-testid": "mfa-backup-codes", children: activeSetup.backupCodes.map((c) => /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("code", { className: "ba-code", children: c }) }, c)) })
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("ul", { className: "ba-backup-codes", "data-testid": "mfa-backup-codes", children: activeSetup.backupCodes.map((c) => /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("code", { className: "ba-code", children: c }) }, c)) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(
       "form",
       {
         method: "post",
@@ -4014,9 +4106,9 @@ function MFAEnrollment({ onEnrolled, title }) {
           });
         },
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("label", { className: "ba-label", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("label", { className: "ba-label", children: [
             t("mfa.enroll.codeLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -4028,8 +4120,8 @@ function MFAEnrollment({ onEnrolled, title }) {
               }
             )
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(FormError, { children: error }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.enroll.activateSubmit") }) })
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(FormError, { children: error }),
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.enroll.activateSubmit") }) })
         ]
       }
     )
@@ -4037,13 +4129,13 @@ function MFAEnrollment({ onEnrolled, title }) {
 }
 
 // src/components/mfa-enrollment-step.tsx
-var import_jsx_runtime17 = require("react/jsx-runtime");
+var import_jsx_runtime16 = require("react/jsx-runtime");
 function useConfirmedMfaPending(onUnknown = "pending") {
   const client = useAuthClient();
   const { needsMfaEnrollment } = useUser();
   const { refetch } = useSession();
-  const [confirmed, setConfirmed] = React15.useState(null);
-  React15.useEffect(() => {
+  const [confirmed, setConfirmed] = React14.useState(null);
+  React14.useEffect(() => {
     if (!needsMfaEnrollment) {
       setConfirmed(null);
       return;
@@ -4067,32 +4159,32 @@ function useConfirmedMfaPending(onUnknown = "pending") {
 function MfaEnrollmentStep({ title }) {
   const t = useT();
   const { refetch } = useSession();
-  return /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)(import_jsx_runtime17.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("h2", { className: "ba-title", children: title ?? t("mfaGate.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("p", { className: "ba-muted", children: t("mfaGate.body") }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(MFAEnrollment, { onEnrolled: () => refetch({ query: { disableCookieCache: true } }) })
+  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(import_jsx_runtime16.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h2", { className: "ba-title", children: title ?? t("mfaGate.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "ba-muted", children: t("mfaGate.body") }),
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(MFAEnrollment, { onEnrolled: () => refetch({ query: { disableCookieCache: true } }) })
   ] });
 }
 
 // src/components/AuthOwlBadge.tsx
 init_hooks();
 init_i18n();
-var import_jsx_runtime18 = require("react/jsx-runtime");
+var import_jsx_runtime17 = require("react/jsx-runtime");
 function OwlMark() {
-  return /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("svg", { className: "ba-badge-mark", viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("circle", { cx: "12", cy: "12", r: "11", fill: "#F5B84C" }),
-    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("circle", { cx: "8.4", cy: "10", r: "3", fill: "#fff" }),
-    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("circle", { cx: "15.6", cy: "10", r: "3", fill: "#fff" }),
-    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("circle", { cx: "8.4", cy: "10", r: "1.4", fill: "#1f1300" }),
-    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("circle", { cx: "15.6", cy: "10", r: "1.4", fill: "#1f1300" }),
-    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("path", { d: "M12 13.1l1.5 2.1h-3z", fill: "#1f1300" })
+  return /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("svg", { className: "ba-badge-mark", viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("circle", { cx: "12", cy: "12", r: "11", fill: "#F5B84C" }),
+    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("circle", { cx: "8.4", cy: "10", r: "3", fill: "#fff" }),
+    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("circle", { cx: "15.6", cy: "10", r: "3", fill: "#fff" }),
+    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("circle", { cx: "8.4", cy: "10", r: "1.4", fill: "#1f1300" }),
+    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("circle", { cx: "15.6", cy: "10", r: "1.4", fill: "#1f1300" }),
+    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("path", { d: "M12 13.1l1.5 2.1h-3z", fill: "#1f1300" })
   ] });
 }
 function AuthOwlBadge({ href = "https://authowl.dev", force } = {}) {
   const t = useT();
   const { config } = usePublicConfig();
   if (!force && !config?.badge) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)(
     "a",
     {
       className: "ba-badge",
@@ -4101,9 +4193,9 @@ function AuthOwlBadge({ href = "https://authowl.dev", force } = {}) {
       rel: "noopener noreferrer",
       "data-testid": "authowl-badge",
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(OwlMark, {}),
-        /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("span", { children: richMessage(t("badge.securedBy"), {
-          brand: /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("span", { className: "ba-badge-brand", children: "AuthOwl" })
+        /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(OwlMark, {}),
+        /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { children: richMessage(t("badge.securedBy"), {
+          brand: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("span", { className: "ba-badge-brand", children: "AuthOwl" })
         }) })
       ]
     }
@@ -4124,19 +4216,19 @@ init_i18n();
 
 // src/components/ConsentDocLinks.tsx
 init_i18n();
-var import_jsx_runtime19 = require("react/jsx-runtime");
+var import_jsx_runtime18 = require("react/jsx-runtime");
 function ConsentDocLinks({ termsUrl, privacyUrl }) {
   const t = useT();
   if (!termsUrl && !privacyUrl) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
-    termsUrl && /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("a", { href: termsUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.termsOfService") }),
+  return /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)(import_jsx_runtime18.Fragment, { children: [
+    termsUrl && /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("a", { href: termsUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.termsOfService") }),
     termsUrl && privacyUrl && t("consent.docJoiner"),
-    privacyUrl && /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("a", { href: privacyUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.privacyPolicy") })
+    privacyUrl && /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("a", { href: privacyUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.privacyPolicy") })
   ] });
 }
 
 // src/components/LegalConsentCheckbox.tsx
-var import_jsx_runtime20 = require("react/jsx-runtime");
+var import_jsx_runtime19 = require("react/jsx-runtime");
 function LegalConsentCheckbox({
   legal,
   accepted,
@@ -4145,9 +4237,9 @@ function LegalConsentCheckbox({
 }) {
   const t = useT();
   if (!legal.required) return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("label", { className: "ba-consent", "data-testid": testId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("span", { className: "ba-checkbox-control", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("label", { className: "ba-consent", "data-testid": testId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("span", { className: "ba-checkbox-control", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(
         "input",
         {
           className: "ba-checkbox",
@@ -4156,14 +4248,69 @@ function LegalConsentCheckbox({
           onChange: (event) => onAcceptedChange(event.target.checked)
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "ba-checkbox-check" }) })
+      /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "ba-checkbox-check" }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { children: richMessage(t("signUp.consentLabel"), {
-      links: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(ConsentDocLinks, { termsUrl: legal.termsUrl, privacyUrl: legal.privacyUrl })
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { children: richMessage(t("signUp.consentLabel"), {
+      links: /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(ConsentDocLinks, { termsUrl: legal.termsUrl, privacyUrl: legal.privacyUrl })
     }) })
   ] });
 }
 
+// src/components/Turnstile.tsx
+var React15 = __toESM(require("react"), 1);
+var import_jsx_runtime20 = require("react/jsx-runtime");
+var LOCAL_TURNSTILE_TEST_TOKEN = "XXXX.DUMMY.TOKEN.XXXX";
+async function loadTurnstile() {
+  const [{ loadCaptcha: loadCaptcha2 }, { CAPTCHA_ADAPTERS: CAPTCHA_ADAPTERS2 }] = await Promise.all([
+    Promise.resolve().then(() => (init_captcha_loader(), captcha_loader_exports)),
+    Promise.resolve().then(() => (init_captcha_providers(), captcha_providers_exports))
+  ]);
+  const adapter = CAPTCHA_ADAPTERS2.turnstile;
+  return { api: await loadCaptcha2(adapter), adapter };
+}
+function Turnstile({
+  siteKey,
+  theme,
+  onToken,
+  onUnavailable
+}) {
+  const container = React15.useRef(null);
+  const callbacks = React15.useRef({ onToken, onUnavailable });
+  callbacks.current = { onToken, onUnavailable };
+  React15.useEffect(() => {
+    callbacks.current.onToken(null);
+    if (!siteKey) {
+      callbacks.current.onToken(LOCAL_TURNSTILE_TEST_TOKEN);
+      return;
+    }
+    let active = true;
+    let widget = null;
+    void loadTurnstile().then(({ api, adapter }) => {
+      if (!active || !container.current) return;
+      const id = api.render(container.current, {
+        sitekey: siteKey,
+        theme: theme === "system" ? "auto" : theme,
+        size: "flexible",
+        callback: (token) => callbacks.current.onToken(token),
+        "expired-callback": () => callbacks.current.onToken(null),
+        "error-callback": () => {
+          callbacks.current.onToken(null);
+          callbacks.current.onUnavailable();
+        }
+      });
+      widget = { api, adapter, id };
+    }).catch(() => {
+      if (active) callbacks.current.onUnavailable();
+    });
+    return () => {
+      active = false;
+      if (widget) widget.adapter.teardown(widget.api, widget.id);
+    };
+  }, [siteKey, theme]);
+  if (!siteKey) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "ba-turnstile", ref: container, "data-testid": "phoneotp-turnstile" });
+}
+
 // src/components/PhoneOTP.tsx
 init_use_submit_action();
 init_Spinner();
@@ -4485,8 +4632,27 @@ function InvitationBanner() {
   return /* @__PURE__ */ (0, import_jsx_runtime23.jsx)("p", { className: "ba-muted", "data-testid": "authowl-invitation-banner", children: t("organization.invitationBanner") });
 }
 
-// src/components/SignIn.tsx
+// src/components/PublicConfigError.tsx
+init_hooks();
+init_i18n();
 var import_jsx_runtime24 = require("react/jsx-runtime");
+function PublicConfigError({
+  showBadge,
+  showBranding = true
+}) {
+  const t = useT();
+  const { retry } = usePublicConfig();
+  return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "authowl-config-error", role: "alert", children: [
+    showBranding ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("h2", { className: "ba-title", children: t("publicConfig.error.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("p", { className: "ba-muted", children: t("publicConfig.error.description") }),
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("button", { className: "ba-button", type: "button", onClick: retry, children: t("publicConfig.retry") }),
+    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(AuthOwlBadge, { force: showBadge })
+  ] });
+}
+
+// src/components/SignIn.tsx
+var import_jsx_runtime25 = require("react/jsx-runtime");
 function SignIn({
   redirectTo,
   onSignedIn,
@@ -4528,41 +4694,44 @@ function SignIn({
     redirectTo,
     onSignedIn
   });
-  const badge = /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(AuthOwlBadge, { force: showBadge });
-  const branding = showBranding ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(AuthOwlBranding, {}) : null;
+  const badge = /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AuthOwlBadge, { force: showBadge });
+  const branding = showBranding ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(AuthOwlBranding, {}) : null;
   if (isLoading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-loading", "aria-busy": "true", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("div", { className: "ba-skeleton" })
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-loading", "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("div", { className: "ba-skeleton" })
     ] });
   }
+  if (isError) {
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(PublicConfigError, { showBadge, showBranding });
+  }
   if (mfaEnrolment !== "clear") {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-mfa-enrolment", "aria-busy": mfaEnrolment === "confirming", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-mfa-enrolment", "aria-busy": mfaEnrolment === "confirming", children: [
       branding,
-      mfaEnrolment === "pending" ? /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(MfaEnrollmentStep, {}) : /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("div", { className: "ba-skeleton" }),
+      mfaEnrolment === "pending" ? /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(MfaEnrollmentStep, {}) : /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("div", { className: "ba-skeleton" }),
       badge
     ] });
   }
   if (challenge) {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-mfa", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-mfa", children: [
       branding,
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(MFAChallenge, { onVerified: () => finishSignIn({ sessionStore, redirectTo, onSignedIn }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(MFAChallenge, { onVerified: () => finishSignIn({ sessionStore, redirectTo, onSignedIn }) }),
       badge
     ] });
   }
   if (view === "forgot" && resetPasswordUrl) {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-forgot", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-forgot", children: [
       branding,
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("h2", { className: "ba-title", children: t("signIn.forgotTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(ForgotPassword, { resetPasswordUrl, onBack: () => setView("sign-in") }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("h2", { className: "ba-title", children: t("signIn.forgotTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(ForgotPassword, { resetPasswordUrl, onBack: () => setView("sign-in") }),
       badge
     ] });
   }
   if (view === "otp-code") {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-otp-code", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-otp-code", children: [
       branding,
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("h2", { className: "ba-title", children: t("signIn.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("h2", { className: "ba-title", children: t("signIn.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
         OtpCodeForm,
         {
           email,
@@ -4588,18 +4757,18 @@ function SignIn({
     ] });
   }
   if (view === "magic-sent") {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-magic-sent", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-magic-sent", children: [
       branding,
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("h2", { className: "ba-title", children: t("signIn.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("p", { className: "ba-muted", children: t("magicLink.sent") }),
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => setView("sign-in"), children: t("forgotPassword.backToSignIn") }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("h2", { className: "ba-title", children: t("signIn.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-muted", children: t("magicLink.sent") }),
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => setView("sign-in"), children: t("forgotPassword.backToSignIn") }),
       badge
     ] });
   }
   if (view === "phone") {
-    return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-phone", children: [
+    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-phone", children: [
       branding,
-      /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
         PhoneOTP,
         {
           redirectTo,
@@ -4676,14 +4845,13 @@ function SignIn({
     { key: "otp", enabled: plan.emailOtp, action: doRequestOtp, label: t("emailOtp.requestSubmit"), pendingLabel: t("common.sending") },
     { key: "sso", enabled: plan.sso, action: doSso, label: t("sso.continueWith"), pendingLabel: t("sso.redirecting") }
   ];
-  return /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("div", { className: "ba-form", "data-testid": "signin-form", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-form", "data-testid": "signin-form", children: [
     branding,
-    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("h2", { className: "ba-title", children: t("signIn.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(InvitationBanner, {}),
-    process.env.NODE_ENV !== "production" && isError && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("p", { className: "ba-muted", "data-testid": "signin-dev-config-notice", children: "AuthOwl (dev): couldn't load this project's config, so this is a password-only fallback that may not match the project's enabled sign-in methods. Check apiUrl / publishableKey; see the console for details." }),
-    /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(SocialButtons, { providers: plan.social, callbackURL: redirectTo }),
-    showDivider && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("div", { className: "ba-divider", children: t("common.orDivider") }),
-    hasCredentialForm && /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)(
+    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("h2", { className: "ba-title", children: t("signIn.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(InvitationBanner, {}),
+    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(SocialButtons, { providers: plan.social, callbackURL: redirectTo }),
+    showDivider && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("div", { className: "ba-divider", children: t("common.orDivider") }),
+    hasCredentialForm && /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(
       "form",
       {
         method: "post",
@@ -4694,9 +4862,9 @@ function SignIn({
           else if (plan.primary) PRIMARY_ACTION[plan.primary]();
         },
         children: [
-          credentialMode === "email" ? /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("label", { className: "ba-label", children: [
+          credentialMode === "email" ? /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
               "input",
               {
                 ref: emailRef,
@@ -4711,9 +4879,9 @@ function SignIn({
                 required: true
               }
             )
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("label", { className: "ba-label", children: [
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("label", { className: "ba-label", children: [
             t("common.usernameLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -4728,9 +4896,9 @@ function SignIn({
               }
             )
           ] }),
-          plan.password && /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)("label", { className: "ba-label", children: [
+          plan.password && /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("label", { className: "ba-label", children: [
             t("common.passwordLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -4746,19 +4914,19 @@ function SignIn({
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(FormError, { children: error }),
-          plan.password && /* @__PURE__ */ (0, import_jsx_runtime24.jsxs)(import_jsx_runtime24.Fragment, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(FormError, { children: error }),
+          plan.password && /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(import_jsx_runtime25.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
               "button",
               {
                 className: "ba-button",
                 type: "submit",
                 disabled: pending || authChallenge.configPending,
                 "aria-busy": pending && inFlight === "password" || void 0,
-                children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(Busy, { busy: pending && inFlight === "password", label: t("signIn.submitPending"), children: t("signIn.submit") })
+                children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Busy, { busy: pending && inFlight === "password", label: t("signIn.submitPending"), children: t("signIn.submit") })
               }
             ),
-            resetPasswordUrl && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+            resetPasswordUrl && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
               "button",
               {
                 type: "button",
@@ -4770,7 +4938,7 @@ function SignIn({
           ] }),
           credentialMode === "email" && alternates.filter((a) => a.enabled).map(({ key, action, label: label2, pendingLabel }) => {
             const isPrimary = plan.primary === key;
-            return /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+            return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
               "button",
               {
                 type: isPrimary ? "submit" : "button",
@@ -4778,12 +4946,12 @@ function SignIn({
                 disabled: pending || authChallenge.configPending,
                 "aria-busy": pending && inFlight === key || void 0,
                 onClick: isPrimary ? void 0 : withEmail(action),
-                children: /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(Busy, { busy: pending && inFlight === key, label: pendingLabel, children: label2 })
+                children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Busy, { busy: pending && inFlight === key, label: pendingLabel, children: label2 })
               },
               key
             );
           }),
-          plan.username && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+          plan.username && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
             "button",
             {
               type: "button",
@@ -4799,8 +4967,8 @@ function SignIn({
         ]
       }
     ),
-    plan.passkey && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(PasskeyButton, { redirectTo, onSignedIn }),
-    plan.phoneOtp && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)(
+    plan.passkey && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(PasskeyButton, { redirectTo, onSignedIn }),
+    plan.phoneOtp && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
       "button",
       {
         type: "button",
@@ -4809,7 +4977,7 @@ function SignIn({
         children: t("phoneOtp.usePhone")
       }
     ),
-    !plan.renderable && /* @__PURE__ */ (0, import_jsx_runtime24.jsx)("p", { className: "ba-muted", children: plan.emptyReason === "unsupported" ? t("signIn.empty.unsupported") : t("signIn.empty.none") }),
+    !plan.renderable && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-muted", children: plan.emptyReason === "unsupported" ? t("signIn.empty.unsupported") : t("signIn.empty.none") }),
     badge
   ] });
 }
@@ -4826,7 +4994,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime25 = require("react/jsx-runtime");
+var import_jsx_runtime26 = require("react/jsx-runtime");
 function VerificationPending({
   email,
   callbackURL,
@@ -4844,10 +5012,10 @@ function VerificationPending({
   const [code, setCode] = React20.useState("");
   const [verified, setVerified] = React20.useState(false);
   if (verified) {
-    return /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-success", role: "status", "data-testid": "verify-code-success", children: t("verifyEmail.success") });
+    return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "ba-success", role: "status", "data-testid": "verify-code-success", children: t("verifyEmail.success") });
   }
   if (method === "code") {
-    return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)(
+    return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(
       "form",
       {
         method: "post",
@@ -4864,12 +5032,12 @@ function VerificationPending({
           );
         },
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-muted", children: richMessage(t("verifyPending.codeBody"), {
-            email: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Bidi, { children: email }) })
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "ba-muted", children: richMessage(t("verifyPending.codeBody"), {
+            email: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Bidi, { children: email }) })
           }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("label", { className: "ba-label", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("label", { className: "ba-label", children: [
             t("verifyPending.codeLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -4881,20 +5049,20 @@ function VerificationPending({
               }
             )
           ] }),
-          resent && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-muted", children: t("verifyPending.resent") }),
+          resent && /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "ba-muted", children: t("verifyPending.resent") }),
           authChallenge.control,
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(FormError, { children: error }),
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(FormError, { children: error }),
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || !code,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") })
+              children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") })
             }
           ),
-          /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
             "button",
             {
               type: "button",
@@ -4920,14 +5088,14 @@ function VerificationPending({
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime25.jsxs)("div", { className: "ba-fields", "data-testid": "verify-pending", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-muted", children: richMessage(t("verifyPending.body"), {
-      email: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Bidi, { children: email }) })
+  return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("div", { className: "ba-fields", "data-testid": "verify-pending", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "ba-muted", children: richMessage(t("verifyPending.body"), {
+      email: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Bidi, { children: email }) })
     }) }),
-    resent && /* @__PURE__ */ (0, import_jsx_runtime25.jsx)("p", { className: "ba-muted", children: t("verifyPending.resent") }),
+    resent && /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("p", { className: "ba-muted", children: t("verifyPending.resent") }),
     authChallenge.control,
-    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
       "button",
       {
         type: "button",
@@ -4938,7 +5106,7 @@ function VerificationPending({
           failure: t("verifyPending.error.resendFailed"),
           onSuccess: () => setResent(true)
         }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime25.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("verifyPending.resendButton") })
+        children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("verifyPending.resendButton") })
       }
     )
   ] });
@@ -4951,7 +5119,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime26 = require("react/jsx-runtime");
+var import_jsx_runtime27 = require("react/jsx-runtime");
 function PasswordlessSignUp({ onAuthenticated }) {
   const t = useT();
   const { sendEmailOtp, signInEmailOtp } = useSignIn();
@@ -4961,7 +5129,7 @@ function PasswordlessSignUp({ onAuthenticated }) {
   const [code, setCode] = React21.useState("");
   const [codeSent, setCodeSent] = React21.useState(false);
   if (codeSent) {
-    return /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "ba-fields", "data-testid": "signup-emailotp-code", children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("div", { className: "ba-fields", "data-testid": "signup-emailotp-code", children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
       OtpCodeForm,
       {
         email,
@@ -4981,7 +5149,7 @@ function PasswordlessSignUp({ onAuthenticated }) {
       }
     ) });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)(
     "form",
     {
       method: "post",
@@ -4995,9 +5163,9 @@ function PasswordlessSignUp({ onAuthenticated }) {
         });
       },
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5010,15 +5178,15 @@ function PasswordlessSignUp({ onAuthenticated }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(FormError, { children: error }),
-        /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(FormError, { children: error }),
+        /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
           "button",
           {
             className: "ba-button ba-button-secondary",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ (0, import_jsx_runtime26.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("signUp.passwordlessSubmit") })
+            children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("signUp.passwordlessSubmit") })
           }
         )
       ]
@@ -5032,16 +5200,16 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime27 = require("react/jsx-runtime");
+var import_jsx_runtime28 = require("react/jsx-runtime");
 function PasskeySignUpCompletion({ onComplete }) {
   const t = useT();
   const { addPasskey } = usePasskeys();
   const { pending, error, run } = useSubmitAction();
-  return /* @__PURE__ */ (0, import_jsx_runtime27.jsxs)("div", { className: "ba-fields", "data-testid": "signup-passkey-completion", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("h3", { className: "ba-title", children: t("signUp.passkeyTitle") }),
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("p", { className: "ba-muted", children: t("signUp.passkeyDescription") }),
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "ba-fields", "data-testid": "signup-passkey-completion", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("h3", { className: "ba-title", children: t("signUp.passkeyTitle") }),
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("p", { className: "ba-muted", children: t("signUp.passkeyDescription") }),
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
       "button",
       {
         className: "ba-button",
@@ -5052,10 +5220,10 @@ function PasskeySignUpCompletion({ onComplete }) {
           failure: t("signUp.error.passkeyFailed"),
           onSuccess: onComplete
         }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime27.jsx)(Busy, { busy: pending, label: t("passkey.waiting"), children: t("signUp.passkeySubmit") })
+        children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Busy, { busy: pending, label: t("passkey.waiting"), children: t("signUp.passkeySubmit") })
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime27.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: onComplete, children: t("signUp.passkeySkip") })
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: onComplete, children: t("signUp.passkeySkip") })
   ] });
 }
 
@@ -5070,7 +5238,7 @@ init_i18n();
 init_FormError();
 init_Spinner();
 init_use_submit_action();
-var import_jsx_runtime28 = require("react/jsx-runtime");
+var import_jsx_runtime29 = require("react/jsx-runtime");
 function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
   const t = useT();
   const { join } = useWaitlist();
@@ -5079,18 +5247,18 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
   const [email, setEmail] = React22.useState("");
   const [joined, setJoined] = React22.useState(false);
   if (joined) {
-    return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "ba-form", "data-testid": "waitlist-accepted", children: [
-      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("h2", { className: "ba-title", children: t("waitlist.acceptedTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("p", { className: "ba-muted", children: t("waitlist.acceptedDescription") }),
-      /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(AuthOwlBadge, { force: showBadge })
+    return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "ba-form", "data-testid": "waitlist-accepted", children: [
+      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("h2", { className: "ba-title", children: t("waitlist.acceptedTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("p", { className: "ba-muted", children: t("waitlist.acceptedDescription") }),
+      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBadge, { force: showBadge })
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "ba-form", "data-testid": "waitlist-form", children: [
-    showBranding ? /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(AuthOwlBranding, {}) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("h2", { className: "ba-title", children: t("waitlist.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("p", { className: "ba-muted", children: t("waitlist.description") }),
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "ba-form", "data-testid": "waitlist-form", children: [
+    showBranding ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("h2", { className: "ba-title", children: t("waitlist.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("p", { className: "ba-muted", children: t("waitlist.description") }),
+    /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)(
       "form",
       {
         method: "post",
@@ -5112,9 +5280,9 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
           );
         },
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("label", { className: "ba-label", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -5128,26 +5296,26 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(FormError, { children: error }),
-          /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(FormError, { children: error }),
+          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || authChallenge.configPending,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Busy, { busy: pending, label: t("waitlist.submitPending"), children: t("waitlist.submit") })
+              children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Busy, { busy: pending, label: t("waitlist.submitPending"), children: t("waitlist.submit") })
             }
           )
         ]
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(AuthOwlBadge, { force: showBadge })
+    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBadge, { force: showBadge })
   ] });
 }
 
 // src/components/SignUp.tsx
-var import_jsx_runtime29 = require("react/jsx-runtime");
+var import_jsx_runtime30 = require("react/jsx-runtime");
 function SignUp({
   redirectTo,
   onSignedUp,
@@ -5159,7 +5327,7 @@ function SignUp({
   const t = useT();
   const toServerError = useServerError();
   const { signUp } = useSignUp();
-  const { config, isLoading } = usePublicConfig();
+  const { config, isLoading, isError } = usePublicConfig();
   const authChallenge = useAuthChallenge();
   const [email, setEmail] = React23.useState("");
   const [password, setPassword] = React23.useState("");
@@ -5231,18 +5399,21 @@ function SignUp({
     }
   }
   if (isLoading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "ba-form", "data-testid": "signup-loading", "aria-busy": "true", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("div", { className: "ba-skeleton" })
+    return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "ba-form", "data-testid": "signup-loading", "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("div", { className: "ba-skeleton" })
     ] });
   }
+  if (isError) {
+    return /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(PublicConfigError, { showBadge, showBranding });
+  }
   if (config?.signUp?.mode === "waitlist") {
-    return /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Waitlist, { onJoined: onWaitlisted, showBadge, showBranding });
+    return /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(Waitlist, { onJoined: onWaitlisted, showBadge, showBranding });
   }
   if (pendingEmail) {
-    return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "ba-form", "data-testid": "signup-verify-pending", children: [
-      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "ba-form", "data-testid": "signup-verify-pending", children: [
+      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
         VerificationPending,
         {
           email: pendingEmail,
@@ -5250,7 +5421,7 @@ function SignUp({
           method: capabilities.emailVerificationMethod
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBadge, { force: showBadge })
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBadge, { force: showBadge })
     ] });
   }
   const methods = config?.enabledMethods ?? ["password"];
@@ -5260,22 +5431,22 @@ function SignUp({
   const showPasswordless = publicSignupAllowed && capabilities.emailOtpSignIn && capabilities.emailSignUp && !consentRequired && !capabilities.mfaRequired;
   const renderable = showPassword || showPasswordless || social.length > 0;
   if (completeWithPasskey) {
-    return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
-      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(PasskeySignUpCompletion, { onComplete: finishSignUp }),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBadge, { force: showBadge })
+    return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
+      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(PasskeySignUpCompletion, { onComplete: finishSignUp }),
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBadge, { force: showBadge })
     ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("div", { className: "ba-form", "data-testid": "signup-form", children: [
-    showBranding ? /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBranding, {}) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("h2", { className: "ba-title", children: t("signUp.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(InvitationBanner, {}),
-    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(SocialButtons, { providers: social, callbackURL: redirectTo }),
-    showPassword && social.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("div", { className: "ba-divider", children: t("common.orDivider") }),
-    showPassword && /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("form", { method: "post", onSubmit, className: "ba-fields", children: [
-      capabilities.legacyNameField && /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "ba-form", "data-testid": "signup-form", children: [
+    showBranding ? /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("h2", { className: "ba-title", children: t("signUp.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(InvitationBanner, {}),
+    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(SocialButtons, { providers: social, callbackURL: redirectTo }),
+    showPassword && social.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("div", { className: "ba-divider", children: t("common.orDivider") }),
+    showPassword && /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("form", { method: "post", onSubmit, className: "ba-fields", children: [
+      capabilities.legacyNameField && /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
           "input",
           {
             className: "ba-input",
@@ -5289,10 +5460,10 @@ function SignUp({
           }
         )
       ] }),
-      capabilities.firstLastName && /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)(import_jsx_runtime29.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
+      capabilities.firstLastName && /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)(import_jsx_runtime30.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5305,9 +5476,9 @@ function SignUp({
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5321,9 +5492,9 @@ function SignUp({
           )
         ] })
       ] }),
-      capabilities.collectUsername && /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
+      capabilities.collectUsername && /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
           "input",
           {
             className: "ba-input",
@@ -5337,9 +5508,9 @@ function SignUp({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("label", { className: "ba-label", children: [
         t("common.emailLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
           "input",
           {
             className: "ba-input",
@@ -5354,9 +5525,9 @@ function SignUp({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
           "input",
           {
             className: "ba-input",
@@ -5374,7 +5545,7 @@ function SignUp({
         )
       ] }),
       authChallenge.control,
-      legal && /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+      legal && /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
         LegalConsentCheckbox,
         {
           legal,
@@ -5383,20 +5554,20 @@ function SignUp({
           testId: "signup-consent"
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
         "button",
         {
           className: "ba-button",
           type: "submit",
           disabled: submitting || consentBlocked || authChallenge.configPending,
           "aria-busy": submitting || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(Busy, { busy: submitting, label: t("signUp.submitPending"), children: t("signUp.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(Busy, { busy: submitting, label: t("signUp.submitPending"), children: t("signUp.submit") })
         }
       )
     ] }),
-    showPasswordless && (showPassword || social.length > 0) && /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("div", { className: "ba-divider", children: t("common.orDivider") }),
-    showPasswordless && /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(
+    showPasswordless && (showPassword || social.length > 0) && /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("div", { className: "ba-divider", children: t("common.orDivider") }),
+    showPasswordless && /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
       PasswordlessSignUp,
       {
         onAuthenticated: () => {
@@ -5405,8 +5576,8 @@ function SignUp({
         }
       }
     ),
-    !renderable && /* @__PURE__ */ (0, import_jsx_runtime29.jsx)("p", { className: "ba-muted", children: publicSignupAllowed && methods.length > 0 ? t("signUp.empty.unsupported") : t("signUp.empty.none") }),
-    /* @__PURE__ */ (0, import_jsx_runtime29.jsx)(AuthOwlBadge, { force: showBadge })
+    !renderable && /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("p", { className: "ba-muted", children: publicSignupAllowed && methods.length > 0 ? t("signUp.empty.unsupported") : t("signUp.empty.none") }),
+    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBadge, { force: showBadge })
   ] });
 }
 
@@ -5416,19 +5587,19 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime30 = require("react/jsx-runtime");
+var import_jsx_runtime31 = require("react/jsx-runtime");
 function ConsentGate({ children, title }) {
   const t = useT();
   const { needsConsent, status, accept } = useConsent();
   const { pending, error, run } = useSubmitAction();
-  if (!needsConsent) return /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(import_jsx_runtime30.Fragment, { children });
-  return /* @__PURE__ */ (0, import_jsx_runtime30.jsxs)("div", { className: "ba-form", "data-testid": "consent-gate", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("h2", { className: "ba-title", children: title ?? t("consent.gateTitle") }),
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)("p", { className: "ba-muted", children: richMessage(t("consent.gateBody"), {
-      links: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(ConsentDocLinks, { termsUrl: status?.termsUrl, privacyUrl: status?.privacyUrl })
+  if (!needsConsent) return /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_jsx_runtime31.Fragment, { children });
+  return /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "ba-form", "data-testid": "consent-gate", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("h2", { className: "ba-title", children: title ?? t("consent.gateTitle") }),
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)("p", { className: "ba-muted", children: richMessage(t("consent.gateBody"), {
+      links: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(ConsentDocLinks, { termsUrl: status?.termsUrl, privacyUrl: status?.privacyUrl })
     }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(
       "button",
       {
         className: "ba-button",
@@ -5442,22 +5613,22 @@ function ConsentGate({ children, title }) {
           },
           { failure: t("consent.error.acceptFailed") }
         ),
-        children: /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(Busy, { busy: pending, label: t("consent.acceptPending"), children: t("consent.acceptSubmit") })
+        children: /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(Busy, { busy: pending, label: t("consent.acceptPending"), children: t("consent.acceptSubmit") })
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime30.jsx)(AuthOwlBadge, {})
+    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(AuthOwlBadge, {})
   ] });
 }
 
 // src/components/MFARequiredGate.tsx
-var import_jsx_runtime31 = require("react/jsx-runtime");
+var import_jsx_runtime32 = require("react/jsx-runtime");
 function MFARequiredGate({ children, title }) {
   const state = useConfirmedMfaPending();
-  if (state === "clear") return /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(import_jsx_runtime31.Fragment, { children });
+  if (state === "clear") return /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(import_jsx_runtime32.Fragment, { children });
   if (state === "confirming") return null;
-  return /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "ba-form", "data-testid": "mfa-required-gate", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(MfaEnrollmentStep, { title }),
-    /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(AuthOwlBadge, {})
+  return /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("div", { className: "ba-form", "data-testid": "mfa-required-gate", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(MfaEnrollmentStep, { title }),
+    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(AuthOwlBadge, {})
   ] });
 }
 
@@ -5468,7 +5639,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime32 = require("react/jsx-runtime");
+var import_jsx_runtime33 = require("react/jsx-runtime");
 function BackupCodesManager({ title }) {
   const t = useT();
   const { user } = useUser();
@@ -5487,20 +5658,20 @@ function BackupCodesManager({ title }) {
       }
     });
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("div", { className: "ba-form", "data-testid": "backup-codes-manager", children: [
-    title !== null && /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("h2", { className: "ba-title", children: title ?? t("backupCodes.title") }),
-    /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("p", { className: "ba-muted", children: t("backupCodes.hint") }),
-    codes ? /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)(import_jsx_runtime32.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("p", { className: "ba-muted", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
+  return /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("div", { className: "ba-form", "data-testid": "backup-codes-manager", children: [
+    title !== null && /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("h2", { className: "ba-title", children: title ?? t("backupCodes.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("p", { className: "ba-muted", children: t("backupCodes.hint") }),
+    codes ? /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(import_jsx_runtime33.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("p", { className: "ba-muted", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
         " ",
         t("mfa.enroll.backupCodesWarningRest")
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("li", { className: "ba-passkey-item", children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("code", { children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("bdi", { children: c }) }) }, c)) })
-    ] }) : /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("li", { className: "ba-passkey-item", children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("code", { children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("bdi", { children: c }) }) }, c)) })
+    ] }) : /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
           "input",
           {
             className: "ba-input",
@@ -5512,8 +5683,8 @@ function BackupCodesManager({ title }) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime32.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime32.jsx)(Busy, { busy: pending, label: t("backupCodes.pending"), children: t("backupCodes.submit") }) })
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Busy, { busy: pending, label: t("backupCodes.pending"), children: t("backupCodes.submit") }) })
     ] })
   ] });
 }
@@ -5525,7 +5696,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime33 = require("react/jsx-runtime");
+var import_jsx_runtime34 = require("react/jsx-runtime");
 function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const t = useT();
   const { signInMagicLink } = useSignIn();
@@ -5534,9 +5705,9 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const [email, setEmail] = React25.useState("");
   const [sent, setSent] = React25.useState(false);
   if (sent) {
-    return /* @__PURE__ */ (0, import_jsx_runtime33.jsx)("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
+    return /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(
     "form",
     {
       method: "post",
@@ -5550,9 +5721,9 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
       className: "ba-fields",
       "data-testid": "magiclink-form",
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime33.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5565,15 +5736,15 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(FormError, { children: error }),
-        /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(FormError, { children: error }),
+        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ (0, import_jsx_runtime33.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("magicLink.submit") })
+            children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("magicLink.submit") })
           }
         )
       ]
@@ -5588,7 +5759,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime34 = require("react/jsx-runtime");
+var import_jsx_runtime35 = require("react/jsx-runtime");
 function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const t = useT();
   const { sessionStore } = useAuthClient();
@@ -5599,7 +5770,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const [otp, setOtp] = React26.useState("");
   const [stage, setStage] = React26.useState("email");
   if (stage === "code") {
-    return /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
       OtpCodeForm,
       {
         email,
@@ -5622,7 +5793,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)(
     "form",
     {
       method: "post",
@@ -5636,9 +5807,9 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
       className: "ba-fields",
       "data-testid": "emailotp-email",
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5654,15 +5825,15 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(FormError, { children: error }),
-        /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(FormError, { children: error }),
+        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("emailOtp.requestSubmit") })
+            children: /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("emailOtp.requestSubmit") })
           }
         )
       ]
@@ -5677,7 +5848,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime35 = require("react/jsx-runtime");
+var import_jsx_runtime36 = require("react/jsx-runtime");
 function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
   const t = useT();
   const { resetPassword } = usePasswordReset();
@@ -5697,15 +5868,15 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
     setReady(true);
   }, [tokenProp]);
   if (!ready) {
-    return /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("div", { className: "ba-skeleton" }) });
   }
   if (!token) {
-    return /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(FormError, { "data-testid": "reset-invalid", children: t("resetPassword.invalidLink") });
+    return /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(FormError, { "data-testid": "reset-invalid", children: t("resetPassword.invalidLink") });
   }
   if (done) {
-    return /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("p", { className: "ba-muted", "data-testid": "reset-done", children: t("resetPassword.done") });
+    return /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("p", { className: "ba-muted", "data-testid": "reset-done", children: t("resetPassword.done") });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(
     "form",
     {
       method: "post",
@@ -5731,9 +5902,9 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
         });
       },
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("label", { className: "ba-label", children: [
           t("resetPassword.newPasswordLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5750,9 +5921,9 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("label", { className: "ba-label", children: [
           t("resetPassword.confirmPasswordLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
             "input",
             {
               className: "ba-input",
@@ -5769,8 +5940,8 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(FormError, { children: error }),
-        /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime35.jsx)(Busy, { busy: pending, label: t("resetPassword.submitPending"), children: t("resetPassword.submit") }) })
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(FormError, { children: error }),
+        /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(Busy, { busy: pending, label: t("resetPassword.submitPending"), children: t("resetPassword.submit") }) })
       ]
     }
   );
@@ -5783,7 +5954,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime36 = require("react/jsx-runtime");
+var import_jsx_runtime37 = require("react/jsx-runtime");
 function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
   const t = useT();
   const { sendVerificationEmail } = useEmailVerification();
@@ -5803,12 +5974,12 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
     }
   }, [onVerified, redirectTo]);
   if (!ready) {
-    return /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "ba-skeleton" }) });
   }
   if (!failed) {
-    return /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("p", { className: "ba-muted", "data-testid": "verify-success", children: t("verifyEmail.success") });
+    return /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("p", { className: "ba-muted", "data-testid": "verify-success", children: t("verifyEmail.success") });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(
     "form",
     {
       method: "post",
@@ -5823,11 +5994,11 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
         });
       },
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(FormError, { children: t("verifyEmail.invalidLink") }),
-        resent ? /* @__PURE__ */ (0, import_jsx_runtime36.jsx)("p", { className: "ba-muted", children: richMessage(t("verifyEmail.resent"), { email: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(Bidi, { children: email }) }) }) : /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)(import_jsx_runtime36.Fragment, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime36.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(FormError, { children: t("verifyEmail.invalidLink") }),
+        resent ? /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("p", { className: "ba-muted", children: richMessage(t("verifyEmail.resent"), { email: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(Bidi, { children: email }) }) }) : /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)(import_jsx_runtime37.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
               "input",
               {
                 className: "ba-input",
@@ -5840,15 +6011,15 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(FormError, { children: error }),
-          /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(FormError, { children: error }),
+          /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || authChallenge.configPending,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("verifyEmail.resendSubmit") })
+              children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("verifyEmail.resendSubmit") })
             }
           )
         ] })
@@ -5864,17 +6035,17 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime37 = require("react/jsx-runtime");
+var import_jsx_runtime38 = require("react/jsx-runtime");
 function PasskeyManager({ title, allowAdd = true } = {}) {
   const t = useT();
   const { user, isLoaded, isSignedIn } = useUser();
   if (!isLoaded) {
-    return /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "ba-form", "data-testid": "passkey-manager-loading", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "ba-form", "data-testid": "passkey-manager-loading", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "ba-skeleton" }) });
   }
   if (!isSignedIn || !user) {
-    return /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("p", { className: "ba-muted", children: t("passkeys.signedOut") });
+    return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("p", { className: "ba-muted", children: t("passkeys.signedOut") });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(PasskeyManagerBody, { title, allowAdd }, user.id);
+  return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(PasskeyManagerBody, { title, allowAdd }, user.id);
 }
 function PasskeyManagerBody({
   title,
@@ -5923,13 +6094,13 @@ function PasskeyManagerBody({
       onSuccess: load
     });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { className: "ba-form", "data-testid": "passkey-manager", children: [
-    title !== null && /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("h2", { className: "ba-title", children: title ?? t("passkeys.title") }),
-    passkeys === null ? error ? null : /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("ul", { className: "ba-passkey-list", children: [
-      (passkeys ?? []).map((pk) => /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("li", { className: "ba-passkey-item", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("span", { className: "ba-passkey-name", children: pk.name?.trim() || t("passkeys.unnamed") }),
-        /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("span", { className: "ba-passkey-actions", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "ba-form", "data-testid": "passkey-manager", children: [
+    title !== null && /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("h2", { className: "ba-title", children: title ?? t("passkeys.title") }),
+    passkeys === null ? error ? null : /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("ul", { className: "ba-passkey-list", children: [
+      (passkeys ?? []).map((pk) => /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("li", { className: "ba-passkey-item", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "ba-passkey-name", children: pk.name?.trim() || t("passkeys.unnamed") }),
+        /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("span", { className: "ba-passkey-actions", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(
             "button",
             {
               type: "button",
@@ -5939,7 +6110,7 @@ function PasskeyManagerBody({
               children: t("passkeys.rename")
             }
           ),
-          /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(
             "button",
             {
               type: "button",
@@ -5951,13 +6122,13 @@ function PasskeyManagerBody({
           )
         ] })
       ] }, pk.id)),
-      passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("li", { className: "ba-muted", children: t("passkeys.empty") })
+      passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("li", { className: "ba-muted", children: t("passkeys.empty") })
     ] }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime37.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(FormError, { children: error }),
-      passkeys === null && /* @__PURE__ */ (0, import_jsx_runtime37.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("userProfile.retry") })
+    error && /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(FormError, { children: error }),
+      passkeys === null && /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("userProfile.retry") })
     ] }),
-    passkeys !== null && allowAdd && /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(
+    passkeys !== null && allowAdd && /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(
       "button",
       {
         className: "ba-button",
@@ -5968,7 +6139,7 @@ function PasskeyManagerBody({
           failure: t("passkeys.error.addFailed"),
           onSuccess: load
         }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime37.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("passkeys.add") })
+        children: /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("passkeys.add") })
       }
     )
   ] });
@@ -5979,14 +6150,14 @@ var import_core6 = require("@authowl/core");
 init_hooks();
 init_i18n();
 init_Spinner();
-var import_jsx_runtime38 = require("react/jsx-runtime");
+var import_jsx_runtime39 = require("react/jsx-runtime");
 function SignedIn({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children }) : null;
+  return isLoaded && isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children }) : null;
 }
 function SignedOut({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && !isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children }) : null;
+  return isLoaded && !isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children }) : null;
 }
 function Protect({
   children,
@@ -5999,25 +6170,25 @@ function Protect({
   const { user, isLoaded, isSignedIn } = useUser();
   const membership = useSession().data?.session?.membership ?? null;
   if (!isLoaded) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children: fallback });
+  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children: fallback });
   if ((role !== void 0 || permission !== void 0 || teamId !== void 0) && !(0, import_core6.membershipHas)(membership, { role, permission, teamId })) {
-    return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children: fallback });
+    return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children: fallback });
   }
-  if (condition && !condition(user)) return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children: fallback });
-  return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children });
+  if (condition && !condition(user)) return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children: fallback });
+  return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children });
 }
 function AuthLoading({ children }) {
   const t = useT();
   const { isLoaded } = useUser();
   if (isLoaded) return null;
-  if (children !== void 0) return /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children });
-  return /* @__PURE__ */ (0, import_jsx_runtime38.jsxs)("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(Spinner, {}),
-    /* @__PURE__ */ (0, import_jsx_runtime38.jsx)("span", { className: "ba-sr-only", children: t("common.loading") })
+  if (children !== void 0) return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children });
+  return /* @__PURE__ */ (0, import_jsx_runtime39.jsxs)("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Spinner, {}),
+    /* @__PURE__ */ (0, import_jsx_runtime39.jsx)("span", { className: "ba-sr-only", children: t("common.loading") })
   ] });
 }
 function AuthLoaded({ children }) {
-  return useUser().isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime38.jsx)(import_jsx_runtime38.Fragment, { children }) : null;
+  return useUser().isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(import_jsx_runtime39.Fragment, { children }) : null;
 }
 
 // src/index.ts
@@ -6028,13 +6199,13 @@ var React30 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_Spinner();
-var import_jsx_runtime39 = require("react/jsx-runtime");
+var import_jsx_runtime40 = require("react/jsx-runtime");
 function SignOutButton({ children, redirectTo, onSignedOut, className }) {
   const t = useT();
   const { signOut } = useSignOut();
   const [pending, setPending] = React30.useState(false);
   const content = children ?? t("signOut.button");
-  return /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
     "button",
     {
       type: "button",
@@ -6052,7 +6223,7 @@ function SignOutButton({ children, redirectTo, onSignedOut, className }) {
           setPending(false);
         }
       },
-      children: /* @__PURE__ */ (0, import_jsx_runtime39.jsx)(Busy, { busy: pending, label: content, children: content })
+      children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Busy, { busy: pending, label: content, children: content })
     }
   );
 }
@@ -6074,7 +6245,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime40 = require("react/jsx-runtime");
+var import_jsx_runtime41 = require("react/jsx-runtime");
 function EmailSection({ allowChange }) {
   const t = useT();
   const account = useAccount();
@@ -6084,9 +6255,9 @@ function EmailSection({ allowChange }) {
   const [sent, setSent] = React31.useState(false);
   const titleId = React31.useId();
   if (!user?.email) {
-    return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
+    return /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
     ] });
   }
   const submit = (event) => {
@@ -6106,19 +6277,19 @@ function EmailSection({ allowChange }) {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("p", { className: "ba-muted", children: t("userProfile.email.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("p", { className: "ba-muted", children: t("userProfile.email.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("p", { className: "ba-profile-current", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("span", { children: t("userProfile.email.current") }),
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Bidi, { children: user.email }) })
+    /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("p", { className: "ba-profile-current", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("span", { children: t("userProfile.email.current") }),
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(Bidi, { children: user.email }) })
     ] }),
-    !allowChange ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("label", { className: "ba-label", children: [
+    !allowChange ? /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.email.newLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(
           "input",
           {
             className: "ba-input",
@@ -6130,16 +6301,16 @@ function EmailSection({ allowChange }) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(FormError, { children: error }),
-      sent && /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
-      /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(FormError, { children: error }),
+      sent && /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
+      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !newEmail.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
         }
       )
     ] })
@@ -6153,7 +6324,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime41 = require("react/jsx-runtime");
+var import_jsx_runtime42 = require("react/jsx-runtime");
 function DeleteAccountSection({ onDeleted }) {
   const t = useT();
   const account = useAccount();
@@ -6178,18 +6349,18 @@ function DeleteAccountSection({ onDeleted }) {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("p", { className: "ba-muted", children: t("userProfile.delete.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", children: t("userProfile.delete.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.delete.confirmLabel"),
         " ",
-        /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(Bidi, { children: identifier }),
-        /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(Bidi, { children: identifier }),
+        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
           "input",
           {
             className: "ba-input",
@@ -6203,15 +6374,15 @@ function DeleteAccountSection({ onDeleted }) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
         "button",
         {
           className: "ba-button ba-danger-button ba-profile-submit",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
         }
       )
     ] })
@@ -6225,7 +6396,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime42 = require("react/jsx-runtime");
+var import_jsx_runtime43 = require("react/jsx-runtime");
 function MfaSection() {
   const t = useT();
   const { user } = useUser();
@@ -6238,12 +6409,12 @@ function MfaSection() {
   const titleId = React33.useId();
   const required = (0, import_core3.resolveProjectCapabilities)(config).mfaRequired;
   if (!user?.twoFactorEnabled) {
-    return /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("header", { className: "ba-profile-section-header", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
+    return /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("header", { className: "ba-profile-section-header", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
         MFAEnrollment,
         {
           title: null,
@@ -6266,16 +6437,16 @@ function MfaSection() {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
+  return /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("div", { className: "ba-profile-status", role: "status", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("strong", { children: t("userProfile.mfa.enabled") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("span", { children: t("userProfile.mfa.authenticator") })
+    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("div", { className: "ba-profile-status", role: "status", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("strong", { children: t("userProfile.mfa.enabled") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("span", { children: t("userProfile.mfa.authenticator") })
     ] }),
-    !showDisable ? /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+    !showDisable ? /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -6283,11 +6454,11 @@ function MfaSection() {
         onClick: () => setShowDisable(true),
         children: required ? t("userProfile.mfa.replace") : t("userProfile.mfa.disable")
       }
-    ) : /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("label", { className: "ba-label", children: [
+    ) : /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
           "input",
           {
             className: "ba-input",
@@ -6299,19 +6470,19 @@ function MfaSection() {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("span", { className: "ba-profile-action-row", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("span", { className: "ba-profile-action-row", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
           "button",
           {
             className: "ba-button ba-danger-button",
             type: "submit",
             disabled: pending || !password,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
+            children: /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
           }
         ),
-        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
           "button",
           {
             className: "ba-button ba-button-secondary",
@@ -6336,7 +6507,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime43 = require("react/jsx-runtime");
+var import_jsx_runtime44 = require("react/jsx-runtime");
 function PasswordSection() {
   const t = useT();
   const account = useAccount();
@@ -6372,43 +6543,43 @@ function PasswordSection() {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: t("userProfile.password.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-muted", children: t("userProfile.password.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.password.currentLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
           setCurrentPassword(event.target.value);
           setError(null);
         }, required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("label", { className: "ba-label", children: [
         t("resetPassword.newPasswordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
           setNewPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("label", { className: "ba-label", children: [
         t("resetPassword.confirmPasswordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
           setConfirmPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(FormError, { children: error }),
-      saved && /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(FormError, { children: error }),
+      saved && /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !currentPassword || !newPassword || !confirmPassword,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
         }
       )
     ] })
@@ -6418,16 +6589,16 @@ function PasswordSection() {
 // src/components/user-profile/PasskeysSection.tsx
 var React35 = __toESM(require("react"), 1);
 init_i18n();
-var import_jsx_runtime44 = require("react/jsx-runtime");
+var import_jsx_runtime45 = require("react/jsx-runtime");
 function PasskeysSection({ allowAdd }) {
   const t = useT();
   const titleId = React35.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(PasskeyManager, { title: null, allowAdd })
+    /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(PasskeyManager, { title: null, allowAdd })
   ] });
 }
 
@@ -6438,7 +6609,7 @@ init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime45 = require("react/jsx-runtime");
+var import_jsx_runtime46 = require("react/jsx-runtime");
 function ProfileSection({
   firstLastName,
   usernameEnabled,
@@ -6480,15 +6651,15 @@ function ProfileSection({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-muted", children: t("userProfile.profile.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { className: "ba-muted", children: t("userProfile.profile.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      legacyNameField && /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      legacyNameField && /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
           "input",
           {
             className: "ba-input",
@@ -6499,10 +6670,10 @@ function ProfileSection({
           }
         )
       ] }),
-      firstLastName && /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)(import_jsx_runtime45.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+      firstLastName && /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)(import_jsx_runtime46.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
             "input",
             {
               className: "ba-input",
@@ -6512,9 +6683,9 @@ function ProfileSection({
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
             "input",
             {
               className: "ba-input",
@@ -6525,9 +6696,9 @@ function ProfileSection({
           )
         ] })
       ] }),
-      usernameEnabled && /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+      usernameEnabled && /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
           "input",
           {
             className: "ba-input",
@@ -6537,9 +6708,9 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.profile.imageLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
           "input",
           {
             className: "ba-input",
@@ -6550,16 +6721,16 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(FormError, { children: error }),
-      saved && /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(FormError, { children: error }),
+      saved && /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || legacyNameField && !name.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
         }
       )
     ] })
@@ -6570,24 +6741,24 @@ function ProfileSection({
 var React37 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
-var import_jsx_runtime46 = require("react/jsx-runtime");
+var import_jsx_runtime47 = require("react/jsx-runtime");
 function RecoverySection() {
   const t = useT();
   const { user } = useUser();
   const titleId = React37.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("div", { className: "ba-profile-recovery-card", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("strong", { children: t("userProfile.recovery.emailTitle") }),
-      user?.email && user.emailVerified ? /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)(import_jsx_runtime46.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { children: t("userProfile.recovery.emailDescription") }),
-        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(Bidi, { children: user.email })
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { children: t("userProfile.recovery.emailUnavailable") })
+    /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("div", { className: "ba-profile-recovery-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("strong", { children: t("userProfile.recovery.emailTitle") }),
+      user?.email && user.emailVerified ? /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)(import_jsx_runtime47.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { children: t("userProfile.recovery.emailDescription") }),
+        /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(Bidi, { children: user.email })
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { children: t("userProfile.recovery.emailUnavailable") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(BackupCodesManager, { title: null })
+    /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(BackupCodesManager, { title: null })
   ] });
 }
 
@@ -6644,9 +6815,9 @@ function formatSessionTime(date, locale) {
 // src/components/user-profile/use-account-resource.ts
 var React38 = __toESM(require("react"), 1);
 init_i18n();
-function useAccountResource(loader2, failure) {
-  const loaderRef = React38.useRef(loader2);
-  loaderRef.current = loader2;
+function useAccountResource(loader, failure) {
+  const loaderRef = React38.useRef(loader);
+  loaderRef.current = loader;
   const failureRef = React38.useRef(failure);
   failureRef.current = failure;
   const toServerError = useServerError();
@@ -6684,7 +6855,7 @@ function useAccountResource(loader2, failure) {
 
 // src/components/user-profile/SessionsSection.tsx
 init_FormError();
-var import_jsx_runtime47 = require("react/jsx-runtime");
+var import_jsx_runtime48 = require("react/jsx-runtime");
 function SessionsSection() {
   const t = useT();
   const locale = useLocale();
@@ -6713,31 +6884,31 @@ function SessionsSection() {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("div", { className: "ba-skeleton" })
-    ] }) : null : /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("ul", { className: "ba-profile-list", children: [
+    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("div", { className: "ba-skeleton" })
+    ] }) : null : /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("ul", { className: "ba-profile-list", children: [
       sessions.map((session) => {
         const label2 = session.userAgent?.trim() || t("userProfile.sessions.unknownDevice");
-        return /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("li", { className: "ba-profile-list-item", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("span", { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("strong", { children: label2 }),
-            /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("small", { children: [
-              session.id === currentId && /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("em", { children: t("userProfile.sessions.current") }),
+        return /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("li", { className: "ba-profile-list-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("span", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("strong", { children: label2 }),
+            /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("small", { children: [
+              session.id === currentId && /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("em", { children: t("userProfile.sessions.current") }),
               formatSessionTime(session.updatedAt, locale)
             ] })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
+          /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
         ] }, session.id);
       }),
-      sessions.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
+      sessions.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
     ] }),
-    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -6753,11 +6924,11 @@ function SessionsSection() {
         children: t("userProfile.sessions.revokeOthers")
       }
     ),
-    resource.error && /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(FormError, { children: resource.error }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(FormError, { children: resource.error }),
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(FormError, { children: mutation.error })
+    /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(FormError, { children: mutation.error })
   ] });
 }
 
@@ -6767,7 +6938,7 @@ init_hooks();
 init_i18n();
 init_use_submit_action();
 init_FormError();
-var import_jsx_runtime48 = require("react/jsx-runtime");
+var import_jsx_runtime49 = require("react/jsx-runtime");
 function providerLabel(provider) {
   return provider.charAt(0).toUpperCase() + provider.slice(1);
 }
@@ -6807,18 +6978,18 @@ function SocialSection() {
       { failure: t("userProfile.social.unlinkError"), onSuccess: resource.load }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { className: "ba-muted", children: t("userProfile.social.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { className: "ba-muted", children: t("userProfile.social.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("ul", { className: "ba-profile-list", children: [
-      linked.map((item) => /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("li", { className: "ba-profile-list-item", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("span", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("strong", { children: providerLabel(item.providerId) }),
-          /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
+    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("ul", { className: "ba-profile-list", children: [
+      linked.map((item) => /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("li", { className: "ba-profile-list-item", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("span", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("strong", { children: providerLabel(item.providerId) }),
+          /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(
           "button",
           {
             className: "ba-link-button ba-danger",
@@ -6833,17 +7004,17 @@ function SocialSection() {
           }
         )
       ] }, item.id)),
-      linked.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("li", { className: "ba-muted", children: t("userProfile.social.empty") })
+      linked.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("li", { className: "ba-muted", children: t("userProfile.social.empty") })
     ] }),
-    available.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("div", { className: "ba-profile-provider-actions", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
-      available.map((provider) => /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
+    available.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("div", { className: "ba-profile-provider-actions", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
+      available.map((provider) => /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
     ] }),
-    resource.error && /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(FormError, { children: resource.error }),
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(FormError, { children: resource.error }),
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(FormError, { children: mutation.error })
+    /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(FormError, { children: mutation.error })
   ] });
 }
 
@@ -6851,7 +7022,7 @@ function SocialSection() {
 var React41 = __toESM(require("react"), 1);
 init_i18n();
 init_ModalSurface();
-var import_jsx_runtime49 = require("react/jsx-runtime");
+var import_jsx_runtime50 = require("react/jsx-runtime");
 function UserProfileModal({
   children,
   onClose,
@@ -6859,7 +7030,7 @@ function UserProfileModal({
 }) {
   const t = useT();
   const titleId = React41.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)(
     ModalSurface,
     {
       overlayClassName: "ba-profile-overlay",
@@ -6868,13 +7039,13 @@ function UserProfileModal({
       testId: "user-profile-modal",
       onClose,
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("div", { className: "ba-profile-modal-header", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("span", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-modal-header", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("span", { children: [
             branding,
-            /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("h1", { id: titleId, children: t("userProfile.title") }),
-            /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { children: t("userProfile.description") })
+            /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("h1", { id: titleId, children: t("userProfile.title") }),
+            /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("p", { children: t("userProfile.description") })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
             "button",
             {
               type: "button",
@@ -6882,7 +7053,7 @@ function UserProfileModal({
               "aria-label": t("userProfile.close"),
               onClick: onClose,
               autoFocus: true,
-              children: /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(
+              children: /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
                 "path",
                 {
                   d: "M6 6l12 12M18 6L6 18",
@@ -6895,14 +7066,14 @@ function UserProfileModal({
           )
         ] }),
         children,
-        /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(AuthOwlBadge, {}) })
+        /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(AuthOwlBadge, {}) })
       ]
     }
   );
 }
 
 // src/components/UserProfile.tsx
-var import_jsx_runtime50 = require("react/jsx-runtime");
+var import_jsx_runtime51 = require("react/jsx-runtime");
 var SECTION_KEYS = {
   profile: "userProfile.nav.profile",
   email: "userProfile.nav.email",
@@ -6968,11 +7139,11 @@ function UserProfile(props = {}) {
       window.history.replaceState(null, "", userProfileSectionHash(next));
     }
   };
-  const content = !isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-skeleton" })
-  ] }) : !isSignedIn || !user ? /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
+  const content = !isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("div", { className: "ba-skeleton" })
+  ] }) : !isSignedIn || !user ? /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
     UserProfileBody,
     {
       active: visibleActive,
@@ -6984,23 +7155,23 @@ function UserProfile(props = {}) {
     user.id
   );
   if (props.mode === "modal") {
-    return /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
       UserProfileModal,
       {
         onClose: props.onClose,
-        branding: showBranding ? /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(AuthOwlBranding, {}) : null,
+        branding: showBranding ? /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(AuthOwlBranding, {}) : null,
         children: content
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("header", { className: "ba-profile-heading", children: [
-      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("h1", { children: t("userProfile.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("p", { children: t("userProfile.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("header", { className: "ba-profile-heading", children: [
+      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("h1", { children: t("userProfile.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("p", { children: t("userProfile.description") })
     ] }),
     content,
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(AuthOwlBadge, {}) })
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(AuthOwlBadge, {}) })
   ] });
 }
 function UserProfileBody({
@@ -7011,8 +7182,8 @@ function UserProfileBody({
   capabilities
 }) {
   const t = useT();
-  return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-layout", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-profile-layout", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
       "button",
       {
         type: "button",
@@ -7023,8 +7194,8 @@ function UserProfileBody({
       },
       item
     )) }),
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-content", "data-section": active, children: [
-      active === "profile" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-profile-content", "data-section": active, children: [
+      active === "profile" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
         ProfileSection,
         {
           firstLastName: capabilities.firstLastName,
@@ -7032,43 +7203,54 @@ function UserProfileBody({
           legacyNameField: capabilities.legacyNameField
         }
       ),
-      active === "email" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(EmailSection, { allowChange: capabilities.emailChange }),
-      active === "password" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(PasswordSection, {}),
-      active === "social" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(SocialSection, {}),
-      active === "sessions" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(SessionsSection, {}),
-      active === "passkeys" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
-      active === "mfa" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(MfaSection, {}),
-      active === "recovery" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(RecoverySection, {}),
-      active === "danger" && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(DeleteAccountSection, { onDeleted })
+      active === "email" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(EmailSection, { allowChange: capabilities.emailChange }),
+      active === "password" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(PasswordSection, {}),
+      active === "social" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(SocialSection, {}),
+      active === "sessions" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(SessionsSection, {}),
+      active === "passkeys" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
+      active === "mfa" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(MfaSection, {}),
+      active === "recovery" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(RecoverySection, {}),
+      active === "danger" && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(DeleteAccountSection, { onDeleted })
     ] })
   ] });
 }
 
 // src/components/UserButton.tsx
-var import_jsx_runtime51 = require("react/jsx-runtime");
+var import_jsx_runtime52 = require("react/jsx-runtime");
 function UserButton() {
   const t = useT();
   const { user, isLoaded } = useUser();
   const { signOut } = useSignOut();
   const [open, setOpen] = React43.useState(false);
   const [profileOpen, setProfileOpen] = React43.useState(false);
+  const [failedImage, setFailedImage] = React43.useState(null);
   const triggerRef = React43.useRef(null);
   if (!isLoaded || !user) return null;
   const identity = user.email ?? user.phoneNumber ?? user.name ?? "?";
-  return /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-user-button", "data-testid": "user-button", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
+  const image = user.image ?? null;
+  return /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-user-button", "data-testid": "user-button", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
       "button",
       {
         ref: triggerRef,
         className: "ba-user-button-trigger",
         "aria-label": t("userButton.openMenuAria"),
         onClick: () => setOpen((v) => !v),
-        children: user.image ? /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("img", { className: "ba-avatar", src: user.image, alt: "" }) : /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
+        children: image && failedImage !== image ? /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
+          "img",
+          {
+            className: "ba-avatar",
+            src: image,
+            alt: "",
+            referrerPolicy: "no-referrer",
+            onError: () => setFailedImage(image)
+          }
+        ) : /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
       }
     ),
-    open && /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-menu", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("p", { className: "ba-menu-label", children: identity }),
-      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
+    open && /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-menu", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-menu-label", children: identity }),
+      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
         "button",
         {
           className: "ba-menu-item",
@@ -7079,10 +7261,10 @@ function UserButton() {
           children: t("userButton.manageAccount")
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
-      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("div", { className: "ba-menu-badge", children: /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(AuthOwlBadge, {}) })
+      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
+      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-menu-badge", children: /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(AuthOwlBadge, {}) })
     ] }),
-    profileOpen && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
+    profileOpen && /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
       UserProfile,
       {
         mode: "modal",
@@ -7110,7 +7292,7 @@ init_model();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime52 = require("react/jsx-runtime");
+var import_jsx_runtime53 = require("react/jsx-runtime");
 function CreateOrganization({ onCreated, title } = {}) {
   const t = useT();
   const { config, isLoading: configLoading } = usePublicConfig();
@@ -7122,10 +7304,10 @@ function CreateOrganization({ onCreated, title } = {}) {
   const [logo, setLogo] = React44.useState("");
   const [slugTouched, setSlugTouched] = React44.useState(false);
   if (configLoading || !isLoaded) {
-    return /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+    return /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   }
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
   const submit = (event) => {
     event.preventDefault();
     const normalizedName = name.trim();
@@ -7150,15 +7332,15 @@ function CreateOrganization({ onCreated, title } = {}) {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("section", { className: "ba-organization-create", children: [
-    title !== null && /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-muted", children: t("organization.create.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("section", { className: "ba-organization-create", children: [
+    title !== null && /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-muted", children: t("organization.create.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.name"),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7173,9 +7355,9 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.slug"),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7190,9 +7372,9 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.logo"),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7204,15 +7386,15 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !name.trim() || !slug.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
         }
       )
     ] })
@@ -7223,7 +7405,7 @@ function CreateOrganization({ onCreated, title } = {}) {
 var React45 = __toESM(require("react"), 1);
 init_i18n();
 init_ModalSurface();
-var import_jsx_runtime53 = require("react/jsx-runtime");
+var import_jsx_runtime54 = require("react/jsx-runtime");
 function OrganizationModal({
   title,
   onClose,
@@ -7232,7 +7414,7 @@ function OrganizationModal({
 }) {
   const t = useT();
   const titleId = React45.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)(
     ModalSurface,
     {
       overlayClassName: "ba-organization-overlay",
@@ -7241,9 +7423,9 @@ function OrganizationModal({
       returnFocusRef,
       onClose,
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-organization-modal-header", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h2", { id: titleId, className: "ba-title", children: title }),
-          /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("div", { className: "ba-organization-modal-header", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("h2", { id: titleId, className: "ba-title", children: title }),
+          /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(
             "button",
             {
               className: "ba-profile-close",
@@ -7255,7 +7437,7 @@ function OrganizationModal({
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-organization-modal-body", children })
+        /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-organization-modal-body", children })
       ]
     }
   );
@@ -7330,7 +7512,7 @@ init_use_submit_action();
 init_Spinner();
 init_model();
 init_FormError();
-var import_jsx_runtime54 = require("react/jsx-runtime");
+var import_jsx_runtime55 = require("react/jsx-runtime");
 function DangerSection({
   organization,
   membership,
@@ -7371,37 +7553,37 @@ function DangerSection({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("section", { className: "ba-organization-section ba-organization-danger", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("section", { className: "ba-organization-section ba-organization-danger", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("div", { className: "ba-organization-danger-action", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("strong", { children: t("organization.profile.danger.leaveTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { className: "ba-organization-danger-action", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("strong", { children: t("organization.profile.danger.leaveTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
     ] }),
-    isOwner && /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("strong", { children: t("organization.profile.danger.deleteTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("label", { className: "ba-label", children: [
+    isOwner && /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("strong", { children: t("organization.profile.danger.deleteTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.danger.deleteConfirm"),
         " ",
-        /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(Bidi, { children: organization.slug }),
-        /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(Bidi, { children: organization.slug }),
+        /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
         "button",
         {
           className: "ba-button ba-danger-button",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
         }
       )
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(FormError, { children: error })
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(FormError, { children: error })
   ] });
 }
 
@@ -7413,7 +7595,7 @@ init_use_submit_action();
 init_Spinner();
 init_model();
 init_FormError();
-var import_jsx_runtime55 = require("react/jsx-runtime");
+var import_jsx_runtime56 = require("react/jsx-runtime");
 function GeneralSection({
   organization,
   canManage,
@@ -7431,16 +7613,16 @@ function GeneralSection({
     setLogo(organization.logo ?? "");
   }, [organization.id, organization.logo, organization.name, organization.slug]);
   if (!canManage) {
-    return /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("section", { className: "ba-organization-section", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("dl", { className: "ba-organization-facts", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("dt", { children: t("organization.create.name") }),
-          /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("dd", { children: organization.name })
+    return /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("section", { className: "ba-organization-section", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("dl", { className: "ba-organization-facts", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("dt", { children: t("organization.create.name") }),
+          /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("dd", { children: organization.name })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("dt", { children: t("organization.create.slug") }),
-          /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("dd", { children: /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(Bidi, { children: organization.slug }) })
+        /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("dt", { children: t("organization.create.slug") }),
+          /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("dd", { children: /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(Bidi, { children: organization.slug }) })
         ] })
       ] })
     ] });
@@ -7458,19 +7640,19 @@ function GeneralSection({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.name"),
-        /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.slug"),
-        /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7482,19 +7664,19 @@ function GeneralSection({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.logo"),
-        /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
+        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !name.trim() || !slug.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
         }
       )
     ] })
@@ -7524,7 +7706,7 @@ function organizationRoleLabel(role, t) {
 // src/components/organization/InvitationsSection.tsx
 init_use_organization_roles();
 init_FormError();
-var import_jsx_runtime56 = require("react/jsx-runtime");
+var import_jsx_runtime57 = require("react/jsx-runtime");
 function InvitationsSection({
   organization,
   onChanged
@@ -7556,38 +7738,38 @@ function InvitationsSection({
       { failure: t("organization.profile.invitations.cancelError"), onSuccess: onChanged }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.invitations.email"),
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.members.role"),
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
         "button",
         {
           className: "ba-button",
           type: "submit",
           disabled: pending || !email.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
         }
       )
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(FormError, { children: error }),
-    invitations.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("li", { className: "ba-organization-invitation", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("span", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(Bidi, { children: invitation.email }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
+    /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(FormError, { children: error }),
+    invitations.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("li", { className: "ba-organization-invitation", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("span", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(Bidi, { children: invitation.email }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
     ] }, invitation.id)) })
   ] });
 }
@@ -7599,7 +7781,7 @@ init_use_submit_action();
 init_model();
 init_use_organization_roles();
 init_FormError();
-var import_jsx_runtime57 = require("react/jsx-runtime");
+var import_jsx_runtime58 = require("react/jsx-runtime");
 function MembersSection({
   organization,
   userId,
@@ -7626,27 +7808,27 @@ function MembersSection({
       { failure: t("organization.profile.members.removeError"), onSuccess: onChanged }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("p", { className: "ba-muted", children: t("organization.profile.members.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("p", { className: "ba-muted", children: t("organization.profile.members.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
+    /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
       const primaryRole = organizationRoles(member.role)[0] ?? member.role;
       const isCurrent = member.userId === userId;
-      return /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("li", { className: "ba-organization-member", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("span", { className: "ba-organization-member-copy", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("strong", { children: [
+      return /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("li", { className: "ba-organization-member", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
+        /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("span", { className: "ba-organization-member-copy", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("strong", { children: [
             member.user.name,
             isCurrent ? ` ${t("organization.profile.members.you")}` : ""
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(Bidi, { children: member.user.email }) })
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(Bidi, { children: member.user.email }) })
         ] }),
-        canManage && !isCurrent ? /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("span", { className: "ba-organization-member-actions", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
+        canManage && !isCurrent ? /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("span", { className: "ba-organization-member-actions", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(
             "select",
             {
               id: `organization-role-${member.id}`,
@@ -7654,11 +7836,11 @@ function MembersSection({
               value: primaryRole,
               disabled: pending,
               onChange: (event) => updateRole(member, event.target.value),
-              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("option", { value: role, children: organizationRoleLabel(role, t) }, role))
+              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("option", { value: role, children: organizationRoleLabel(role, t) }, role))
             }
           ),
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
-        ] }) : /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(Bidi, { children: organizationRoleLabel(member.role, t) }) })
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
+        ] }) : /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(Bidi, { children: organizationRoleLabel(member.role, t) }) })
       ] }, member.id);
     }) })
   ] });
@@ -7667,7 +7849,7 @@ function MembersSection({
 // src/components/OrganizationProfile.tsx
 init_model();
 init_FormError();
-var import_jsx_runtime60 = require("react/jsx-runtime");
+var import_jsx_runtime61 = require("react/jsx-runtime");
 var SECTION_KEYS2 = {
   general: "organization.profile.nav.general",
   members: "organization.profile.nav.members",
@@ -7722,20 +7904,20 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
       requestRef.current += 1;
     };
   }, [load]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
-  if (wasRemoved) return /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
-  if (!requestedId) return /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
+  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (wasRemoved) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
+  if (!requestedId) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
   if (error) {
-    return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
+    return /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
     ] });
   }
-  if (!organization) return /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (!organization) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   const membership = organization.members.find((member) => member.userId === user.id);
-  if (!membership) return /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.notMember") });
+  if (!membership) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.profile.notMember") });
   const canManage = canManageOrganization(membership);
   const visibleSections = canManage ? ["general", "members", "teams", "invitations", "danger"] : ["general", "members", "teams", "danger"];
   const activeSection = visibleSections.includes(section) ? section : "general";
@@ -7744,16 +7926,16 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
     setOrganization(null);
     callback?.(removedOrganization);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("article", { className: "ba-organization-profile", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("header", { className: "ba-organization-profile-heading", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("span", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("h2", { className: "ba-title", children: organization.name }),
-        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: organization.slug })
+  return /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("article", { className: "ba-organization-profile", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("header", { className: "ba-organization-profile-heading", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("span", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("h2", { className: "ba-title", children: organization.name }),
+        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: organization.slug })
       ] })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("div", { className: "ba-organization-profile-layout", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { className: "ba-organization-profile-layout", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(
         "button",
         {
           className: "ba-profile-nav-item",
@@ -7764,12 +7946,12 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
         },
         item
       )) }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("div", { className: "ba-organization-profile-content", children: [
-        activeSection === "general" && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(GeneralSection, { organization, canManage, onChanged: load }),
-        activeSection === "members" && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
-        activeSection === "teams" && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(React55.Suspense, { fallback: null, children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(TeamsSection2, { organization, membership }) }),
-        activeSection === "invitations" && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(InvitationsSection, { organization, onChanged: load }),
-        activeSection === "danger" && /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { className: "ba-organization-profile-content", children: [
+        activeSection === "general" && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(GeneralSection, { organization, canManage, onChanged: load }),
+        activeSection === "members" && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
+        activeSection === "teams" && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(React55.Suspense, { fallback: null, children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(TeamsSection2, { organization, membership }) }),
+        activeSection === "invitations" && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(InvitationsSection, { organization, onChanged: load }),
+        activeSection === "danger" && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(
           DangerSection,
           {
             organization,
@@ -7786,7 +7968,7 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
 // src/components/OrganizationSwitcher.tsx
 init_use_submit_action();
 init_FormError();
-var import_jsx_runtime61 = require("react/jsx-runtime");
+var import_jsx_runtime62 = require("react/jsx-runtime");
 function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChange } = {}) {
   const t = useT();
   const { config, isLoading: configLoading } = usePublicConfig();
@@ -7819,9 +8001,9 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
       document.removeEventListener("keydown", onKeyDown);
     };
   }, [open]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
   const select = (organization) => {
     void run(
       () => api.setActive({ organizationId: organization?.id ?? null }),
@@ -7864,9 +8046,9 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
     else if (event.key === "ArrowDown") items[(current + 1 + items.length) % items.length]?.focus();
     else items[(current - 1 + items.length) % items.length]?.focus();
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)(import_jsx_runtime61.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { ref: rootRef, className: "ba-organization-switcher", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)(import_jsx_runtime62.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { ref: rootRef, className: "ba-organization-switcher", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)(
         "button",
         {
           ref: triggerRef,
@@ -7883,43 +8065,43 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
             focusMenuItem(event.key === "ArrowDown" ? "first" : "last");
           },
           children: [
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { children: active?.name ?? t("organization.personal") }),
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { "aria-hidden": "true", children: "\u2304" })
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { children: active?.name ?? t("organization.personal") }),
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { "aria-hidden": "true", children: "\u2304" })
           ]
         }
       ),
-      open && /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
-        isLoading ? /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)(import_jsx_runtime61.Fragment, { children: [
-          showPersonalWorkspace && /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { children: t("organization.personal") })
+      open && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
+        isLoading ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)(import_jsx_runtime62.Fragment, { children: [
+          showPersonalWorkspace && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { children: t("organization.personal") })
           ] }),
-          organizations?.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-            /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("span", { children: [
+          organizations?.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+            /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { children: [
               organization.name,
-              /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("small", { children: organization.slug })
+              /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("small", { children: organization.slug })
             ] })
           ] }, organization.id))
         ] }),
-        (loadError || error) && /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(FormError, { children: loadError ?? error }),
-          loadError && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
+        (loadError || error) && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-inline-error", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(FormError, { children: loadError ?? error }),
+          loadError && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("div", { className: "ba-organization-menu-actions", children: [
-          active && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
+        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-organization-menu-actions", children: [
+          active && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
             setOpen(false);
             setDialog("profile");
           }, children: t("organization.switcher.manage") }),
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
             setOpen(false);
             setDialog("create");
           }, children: t("organization.switcher.create") })
         ] })
       ] })
     ] }),
-    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(
+    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(
       CreateOrganization,
       {
         title: null,
@@ -7933,7 +8115,7 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
         }
       }
     ) }),
-    dialog === "profile" && active && /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
+    dialog === "profile" && active && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
   ] });
 }
 
@@ -7946,7 +8128,7 @@ init_hooks();
 init_i18n();
 init_use_submit_action();
 init_FormError();
-var import_jsx_runtime62 = require("react/jsx-runtime");
+var import_jsx_runtime63 = require("react/jsx-runtime");
 function OrganizationList({ onOrganizationChange } = {}) {
   const t = useT();
   const toServerError = useServerError();
@@ -7995,9 +8177,9 @@ function OrganizationList({ onOrganizationChange } = {}) {
       invitationRequestRef.current += 1;
     };
   }, [isLoaded, loadInvitations, user?.id]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
   const setActive = (organization) => {
     void run(
       () => api.setActive({ organizationId: organization.id }),
@@ -8038,66 +8220,66 @@ function OrganizationList({ onOrganizationChange } = {}) {
     setDialog(null);
     setProfileId(null);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)(import_jsx_runtime62.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("section", { className: "ba-organization-directory", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("header", { className: "ba-organization-directory-header", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("h2", { className: "ba-title", children: t("organization.list.title") }),
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.list.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)(import_jsx_runtime63.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("section", { className: "ba-organization-directory", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("header", { className: "ba-organization-directory-header", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("h2", { className: "ba-title", children: t("organization.list.title") }),
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.list.description") })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-button", type: "button", onClick: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-button", type: "button", onClick: (event) => {
           dialogReturnFocusRef.current = event.currentTarget;
           setDialog("create");
         }, children: t("organization.switcher.create") })
       ] }),
-      (organizationError || error) && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-inline-error", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(FormError, { children: organizationError ?? error }),
-        organizationError && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
+      (organizationError || error) && /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("div", { className: "ba-inline-error", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(FormError, { children: organizationError ?? error }),
+        organizationError && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
       ] }),
-      isLoading ? /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-organization-card-grid", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton" }),
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton" })
-      ] }) : organizations?.length ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("li", { className: "ba-organization-card", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { className: "ba-organization-card-copy", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("strong", { children: organization.name }),
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(Bidi, { children: organization.slug }) })
+      isLoading ? /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("div", { className: "ba-organization-card-grid", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("div", { className: "ba-skeleton" })
+      ] }) : organizations?.length ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("li", { className: "ba-organization-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { className: "ba-organization-card-copy", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("strong", { children: organization.name }),
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(Bidi, { children: organization.slug }) })
         ] }),
-        activeId === organization.id && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-active", children: t("organization.list.active") }),
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { className: "ba-organization-card-actions", children: [
-          activeId !== organization.id && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
+        activeId === organization.id && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("span", { className: "ba-organization-active", children: t("organization.list.active") }),
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { className: "ba-organization-card-actions", children: [
+          activeId !== organization.id && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
         ] })
-      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.list.empty") }),
-      /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("section", { className: "ba-organization-user-invitations", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("header", { className: "ba-organization-section-header", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
+      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.list.empty") }),
+      /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("section", { className: "ba-organization-user-invitations", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("header", { className: "ba-organization-section-header", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
         ] }),
-        invitationError && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(FormError, { children: invitationError }),
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
+        invitationError && /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("div", { className: "ba-inline-error", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(FormError, { children: invitationError }),
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
         ] }),
-        invitations?.length ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("li", { className: "ba-organization-invitation", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("strong", { children: invitation.organizationName }),
-            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
+        invitations?.length ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("li", { className: "ba-organization-invitation", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("strong", { children: invitation.organizationName }),
+            /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { className: "ba-organization-card-actions", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
-            /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { className: "ba-organization-card-actions", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
+            /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
           ] })
-        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
+        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
       ] })
     ] }),
-    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(CreateOrganization, { title: null, onCreated: () => {
+    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(CreateOrganization, { title: null, onCreated: () => {
       void (async () => {
         await refresh();
         await session.refetch({ query: { disableCookieCache: true } });
         setDialog(null);
       })();
     } }) }),
-    dialog === "profile" && profileId && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
+    dialog === "profile" && profileId && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
   ] });
 }