@authowl/react 0.21.1 → 0.22.0

package/dist/index.js

@@ -37,7 +37,7 @@ import {
   useT,
   useUser,
   useWaitlist
-} from "./chunk-K67DJJHP.js";
+} from "./chunk-PUJV7S6G.js";
 
 // src/project-capabilities.ts
 import {
@@ -356,104 +356,19 @@ function PasskeyButton({ redirectTo, onSignedIn }) {
 }
 
 // src/components/ForgotPassword.tsx
-import * as React5 from "react";
-
-// src/components/AuthChallenge.tsx
 import * as React4 from "react";
 
-// src/components/Turnstile.tsx
+// src/components/AuthChallenge.tsx
 import * as React3 from "react";
-import { jsx as jsx4 } from "react/jsx-runtime";
-var SCRIPT_URL = "https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit";
-var SCRIPT_LOAD_TIMEOUT_MS = 1e4;
-var LOCAL_TURNSTILE_TEST_TOKEN = "XXXX.DUMMY.TOKEN.XXXX";
-var loader = null;
-function loadTurnstile() {
-  if (window.turnstile) return Promise.resolve(window.turnstile);
-  if (loader) return loader;
-  loader = new Promise((resolve, reject) => {
-    const existing = document.querySelector(`script[src="${SCRIPT_URL}"]`);
-    const script = existing ?? document.createElement("script");
-    const cleanup = () => {
-      clearTimeout(timeout);
-      script.removeEventListener("load", loaded);
-      script.removeEventListener("error", failed);
-    };
-    const loaded = () => {
-      cleanup();
-      if (window.turnstile) {
-        resolve(window.turnstile);
-      } else {
-        reject(new Error("Turnstile unavailable"));
-      }
-    };
-    const failed = () => {
-      cleanup();
-      if (!existing) script.remove();
-      reject(new Error("Turnstile failed to load"));
-    };
-    const timeout = setTimeout(failed, SCRIPT_LOAD_TIMEOUT_MS);
-    script.addEventListener("load", loaded, { once: true });
-    script.addEventListener("error", failed, { once: true });
-    if (!existing) {
-      script.src = SCRIPT_URL;
-      script.async = true;
-      script.defer = true;
-      const nonce = document.querySelector("script[nonce]")?.nonce;
-      if (nonce) script.nonce = nonce;
-      document.head.appendChild(script);
-    }
-  }).catch((error) => {
-    loader = null;
-    throw error;
-  });
-  return loader;
-}
-function Turnstile({
-  siteKey,
-  theme,
-  onToken,
-  onUnavailable
-}) {
-  const container = React3.useRef(null);
-  const callbacks = React3.useRef({ onToken, onUnavailable });
-  callbacks.current = { onToken, onUnavailable };
-  React3.useEffect(() => {
-    callbacks.current.onToken(null);
-    if (!siteKey) {
-      callbacks.current.onToken(LOCAL_TURNSTILE_TEST_TOKEN);
-      return;
-    }
-    let active = true;
-    let widget = null;
-    void loadTurnstile().then((api) => {
-      if (!active || !container.current) return;
-      const id = api.render(container.current, {
-        sitekey: siteKey,
-        theme: theme === "system" ? "auto" : theme,
-        size: "flexible",
-        callback: (token) => callbacks.current.onToken(token),
-        "expired-callback": () => callbacks.current.onToken(null),
-        "error-callback": () => {
-          callbacks.current.onToken(null);
-          callbacks.current.onUnavailable();
-        }
-      });
-      widget = { api, id };
-    }).catch(() => {
-      if (active) callbacks.current.onUnavailable();
-    });
-    return () => {
-      active = false;
-      if (widget) widget.api.remove(widget.id);
-    };
-  }, [siteKey, theme]);
-  if (!siteKey) return null;
-  return /* @__PURE__ */ jsx4("div", { className: "ba-turnstile", ref: container, "data-testid": "phoneotp-turnstile" });
+
+// src/components/captcha-provider-ids.ts
+var CAPTCHA_PROVIDER_IDS = ["turnstile", "hcaptcha", "recaptcha-v2"];
+function isSupportedCaptchaProvider(provider) {
+  return CAPTCHA_PROVIDER_IDS.includes(provider);
 }
 
 // src/components/AuthChallenge.tsx
-import { jsx as jsx5, jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
 var AUTH_CHALLENGE_ACTIONS = {
   signUp: "auth_signup",
   signIn: "auth_signin",
@@ -468,38 +383,53 @@ var challengeError = {
   code: "BOT_CHALLENGE_FAILED",
   message: "Human verification failed."
 };
-function turnstileTheme(root, fallback) {
+function captchaTheme(root, fallback) {
   const rendered = root?.dataset.authowlTheme;
   if (rendered === "light" || rendered === "dark") return rendered;
   if (fallback === "light" || fallback === "dark") return fallback;
   return "auto";
 }
 function useAuthChallenge() {
-  const { config, isLoading } = usePublicConfig();
+  const { config, isLoading, retry } = usePublicConfig();
   const t = useT();
-  const container = React4.useRef(null);
-  const active = React4.useRef(null);
-  const [status, setStatus] = React4.useState("idle");
-  const siteKey = config?.authTurnstileSiteKey ?? null;
-  const removeActive = React4.useCallback((reason) => {
+  const container = React3.useRef(null);
+  const active = React3.useRef(null);
+  const [status, setStatus] = React3.useState("idle");
+  const captcha = config?.captcha ?? null;
+  const providerSupported = captcha ? isSupportedCaptchaProvider(captcha.provider) : false;
+  const unavailableProvider = captcha && !providerSupported ? captcha.provider : null;
+  const refetched = React3.useRef(null);
+  const refetchIfConfigMayBeStale = React3.useCallback(() => {
+    if (!config || refetched.current === config) return;
+    refetched.current = config;
+    retry();
+  }, [config, retry]);
+  const removeActive = React3.useCallback((reason) => {
     const current = active.current;
     active.current = null;
     if (!current) return;
-    current.api.remove(current.id);
+    current.adapter.teardown(current.api, current.id);
     if (reason) current.reject(reason);
   }, []);
-  React4.useEffect(
-    () => () => removeActive(new Error("Turnstile challenge was cancelled")),
+  React3.useEffect(
+    () => () => removeActive(new Error("Captcha challenge was cancelled")),
     [removeActive]
   );
-  const tokenFor = React4.useCallback(
+  const tokenFor = React3.useCallback(
     async (action) => {
-      if (!siteKey) return null;
+      if (!captcha) return null;
+      if (!providerSupported) throw new Error(`Unsupported captcha provider: ${captcha.provider}`);
       setStatus("checking");
-      removeActive(new Error("Turnstile challenge was replaced"));
+      removeActive(new Error("Captcha challenge was replaced"));
       try {
-        const api = await loadTurnstile();
-        if (!container.current) throw new Error("Turnstile container unavailable");
+        const [{ loadCaptcha }, { captchaAdapterFor }] = await Promise.all([
+          import("./captcha-loader-VNULARCZ.js"),
+          import("./captcha-providers-STYFL25P.js")
+        ]);
+        const adapter = captchaAdapterFor(captcha.provider);
+        if (!adapter) throw new Error(`Unsupported captcha provider: ${captcha.provider}`);
+        const api = await loadCaptcha(adapter);
+        if (!container.current) throw new Error("Captcha container unavailable");
         return await new Promise((resolve, reject) => {
           let settled = false;
           const finish = (outcome) => {
@@ -507,27 +437,29 @@ function useAuthChallenge() {
             settled = true;
             const current = active.current;
             active.current = null;
-            if (current) current.api.remove(current.id);
+            if (current) current.adapter.teardown(current.api, current.id);
             if ("token" in outcome) resolve(outcome.token);
             else reject(outcome.error);
           };
-          const fail = () => finish({ error: new Error("Turnstile challenge failed") });
+          const fail = () => finish({ error: new Error("Captcha challenge failed") });
           const root = container.current.closest(".authowl-root");
+          const optionalFailureCallbacks = captcha.provider === "turnstile" ? {
+            "timeout-callback": fail,
+            "unsupported-callback": fail
+          } : {};
           const id = api.render(container.current, {
-            sitekey: siteKey,
-            theme: turnstileTheme(root, config?.branding?.theme),
-            action,
-            execution: "execute",
-            appearance: "interaction-only",
-            size: "flexible",
-            language: root?.dataset.authowlLocale ?? config?.locale,
+            ...adapter.invisibleRenderOptions({
+              siteKey: captcha.siteKey,
+              theme: captchaTheme(root, config?.branding?.theme),
+              action,
+              language: root?.dataset.authowlLocale ?? config?.locale
+            }),
             callback: (token) => finish({ token }),
             "expired-callback": fail,
             "error-callback": fail,
-            "timeout-callback": fail,
-            "unsupported-callback": fail
+            ...optionalFailureCallbacks
           });
-          active.current = { api, id, reject };
+          active.current = { adapter, api, id, reject };
           try {
             api.execute(id);
           } catch {
@@ -538,9 +470,9 @@ function useAuthChallenge() {
         setStatus("idle");
       }
     },
-    [config?.branding?.theme, config?.locale, removeActive, siteKey]
+    [captcha, config?.branding?.theme, config?.locale, providerSupported, removeActive]
   );
-  const run = React4.useCallback(
+  const run = React3.useCallback(
     async (action, request) => {
       if (isLoading) {
         return {
@@ -550,37 +482,40 @@ function useAuthChallenge() {
       }
       try {
         const token = await tokenFor(action);
-        return await request(token ? { authChallengeToken: token } : void 0);
+        const result = await request(token ? { authChallengeToken: token } : void 0);
+        if (result?.error?.code === challengeError.code) refetchIfConfigMayBeStale();
+        return result;
       } catch {
         setStatus("failed");
+        refetchIfConfigMayBeStale();
         return {
           data: null,
           error: challengeError
         };
       }
     },
-    [isLoading, tokenFor]
+    [isLoading, refetchIfConfigMayBeStale, tokenFor]
   );
-  const control = siteKey ? /* @__PURE__ */ jsxs4("div", { className: "ba-auth-challenge", "data-testid": "auth-challenge", children: [
-    /* @__PURE__ */ jsx5("div", { className: "ba-turnstile", ref: container }),
-    /* @__PURE__ */ jsx5("p", { className: "ba-sr-only", role: "status", "aria-live": "polite", children: status === "checking" ? t("authChallenge.checking") : status === "failed" ? t("authChallenge.error.failed") : "" })
+  const control = captcha ? /* @__PURE__ */ jsxs4("div", { className: "ba-auth-challenge", "data-testid": "auth-challenge", children: [
+    providerSupported ? /* @__PURE__ */ jsx4("div", { className: "ba-turnstile", ref: container }) : null,
+    unavailableProvider ? /* @__PURE__ */ jsx4(FormError, { "data-testid": "auth-challenge-unsupported", children: t("authChallenge.error.unsupportedProvider", { provider: unavailableProvider }) }) : /* @__PURE__ */ jsx4("p", { className: "ba-sr-only", role: "status", "aria-live": "polite", children: status === "checking" ? t("authChallenge.checking") : status === "failed" ? t("authChallenge.error.failed") : "" })
   ] }) : null;
   return { run, control, configPending: isLoading };
 }
 
 // src/components/ForgotPassword.tsx
-import { jsx as jsx6, jsxs as jsxs5 } from "react/jsx-runtime";
+import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 function ForgotPassword({ resetPasswordUrl, onBack }) {
   const t = useT();
   const { requestPasswordReset } = usePasswordReset();
   const { pending, error, run } = useSubmitAction();
   const authChallenge = useAuthChallenge();
-  const [email, setEmail] = React5.useState("");
-  const [sent, setSent] = React5.useState(false);
+  const [email, setEmail] = React4.useState("");
+  const [sent, setSent] = React4.useState(false);
   if (sent) {
     return /* @__PURE__ */ jsxs5("div", { className: "ba-fields", "data-testid": "forgot-sent", children: [
-      /* @__PURE__ */ jsx6("p", { className: "ba-muted", children: richMessage(t("forgotPassword.sent"), { email: /* @__PURE__ */ jsx6(Bidi, { children: email }) }) }),
-      onBack && /* @__PURE__ */ jsx6("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
+      /* @__PURE__ */ jsx5("p", { className: "ba-muted", children: richMessage(t("forgotPassword.sent"), { email: /* @__PURE__ */ jsx5(Bidi, { children: email }) }) }),
+      onBack && /* @__PURE__ */ jsx5("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
     ] });
   }
   return /* @__PURE__ */ jsxs5(
@@ -599,7 +534,7 @@ function ForgotPassword({ resetPasswordUrl, onBack }) {
       children: [
         /* @__PURE__ */ jsxs5("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ jsx6(
+          /* @__PURE__ */ jsx5(
             "input",
             {
               className: "ba-input",
@@ -612,25 +547,25 @@ function ForgotPassword({ resetPasswordUrl, onBack }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ jsx6(FormError, { children: error }),
-        /* @__PURE__ */ jsx6(
+        /* @__PURE__ */ jsx5(FormError, { children: error }),
+        /* @__PURE__ */ jsx5(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx6(Busy, { busy: pending, label: t("common.sending"), children: t("forgotPassword.submit") })
+            children: /* @__PURE__ */ jsx5(Busy, { busy: pending, label: t("common.sending"), children: t("forgotPassword.submit") })
           }
         ),
-        onBack && /* @__PURE__ */ jsx6("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
+        onBack && /* @__PURE__ */ jsx5("button", { type: "button", className: "ba-link-button", onClick: onBack, children: t("forgotPassword.backToSignIn") })
       ]
     }
   );
 }
 
 // src/components/OtpCodeForm.tsx
-import { jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function OtpCodeForm({
   email,
   code,
@@ -653,8 +588,8 @@ function OtpCodeForm({
       },
       children: [
         /* @__PURE__ */ jsxs6("label", { className: "ba-label", children: [
-          richMessage(t("emailOtp.codeLabel"), { email: /* @__PURE__ */ jsx7(Bidi, { children: email }) }),
-          /* @__PURE__ */ jsx7(
+          richMessage(t("emailOtp.codeLabel"), { email: /* @__PURE__ */ jsx6(Bidi, { children: email }) }),
+          /* @__PURE__ */ jsx6(
             "input",
             {
               className: "ba-input",
@@ -667,24 +602,24 @@ function OtpCodeForm({
             }
           )
         ] }),
-        /* @__PURE__ */ jsx7(FormError, { children: error }),
-        /* @__PURE__ */ jsx7("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx7(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") }) }),
-        /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", onClick: onChangeEmail, children: t("emailOtp.changeEmail") })
+        /* @__PURE__ */ jsx6(FormError, { children: error }),
+        /* @__PURE__ */ jsx6("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx6(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") }) }),
+        /* @__PURE__ */ jsx6("button", { type: "button", className: "ba-link-button", onClick: onChangeEmail, children: t("emailOtp.changeEmail") })
       ]
     }
   );
 }
 
 // src/components/MFAChallenge.tsx
-import * as React6 from "react";
-import { jsx as jsx8, jsxs as jsxs7 } from "react/jsx-runtime";
+import * as React5 from "react";
+import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const t = useT();
   const { verifyTotp, verifyBackupCode, sendOtp, verifyOtp } = useMFA();
   const { pending, error, setError, run } = useSubmitAction();
-  const [mode, setMode] = React6.useState("totp");
-  const [code, setCode] = React6.useState("");
-  const [trustDevice, setTrustDevice] = React6.useState(false);
+  const [mode, setMode] = React5.useState("totp");
+  const [code, setCode] = React5.useState("");
+  const [trustDevice, setTrustDevice] = React5.useState(false);
   const switchMode = (next) => {
     setMode(next);
     setCode("");
@@ -708,11 +643,11 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const hint = mode === "totp" ? t("mfa.challenge.totpHint") : mode === "backup" ? t("mfa.challenge.backupHint") : t("mfa.challenge.otpHint");
   const label2 = mode === "totp" ? t("mfa.challenge.totpLabel") : mode === "backup" ? t("mfa.challenge.backupLabel") : t("mfa.challenge.otpLabel");
   return /* @__PURE__ */ jsxs7("form", { method: "post", className: "ba-fields", "data-testid": "mfa-challenge", onSubmit: submit, children: [
-    /* @__PURE__ */ jsx8("h2", { className: "ba-title", children: t("mfa.challenge.title") }),
-    /* @__PURE__ */ jsx8("p", { className: "ba-muted", children: hint }),
+    /* @__PURE__ */ jsx7("h2", { className: "ba-title", children: t("mfa.challenge.title") }),
+    /* @__PURE__ */ jsx7("p", { className: "ba-muted", children: hint }),
     /* @__PURE__ */ jsxs7("label", { className: "ba-label", children: [
       label2,
-      /* @__PURE__ */ jsx8(
+      /* @__PURE__ */ jsx7(
         "input",
         {
           className: "ba-input",
@@ -730,24 +665,24 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
     ] }),
     mode !== "backup" && allowTrustDevice && /* @__PURE__ */ jsxs7("label", { className: "ba-consent ba-consent-centered", children: [
       /* @__PURE__ */ jsxs7("span", { className: "ba-checkbox-control", children: [
-        /* @__PURE__ */ jsx8("input", { className: "ba-checkbox", type: "checkbox", checked: trustDevice, onChange: (e) => setTrustDevice(e.target.checked) }),
-        /* @__PURE__ */ jsx8("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ jsx8("span", { className: "ba-checkbox-check" }) })
+        /* @__PURE__ */ jsx7("input", { className: "ba-checkbox", type: "checkbox", checked: trustDevice, onChange: (e) => setTrustDevice(e.target.checked) }),
+        /* @__PURE__ */ jsx7("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ jsx7("span", { className: "ba-checkbox-check" }) })
       ] }),
-      /* @__PURE__ */ jsx8("span", { children: t("mfa.challenge.trustDevice", { days: 30 }) })
+      /* @__PURE__ */ jsx7("span", { children: t("mfa.challenge.trustDevice", { days: 30 }) })
     ] }),
-    /* @__PURE__ */ jsx8(FormError, { children: error }),
-    /* @__PURE__ */ jsx8("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx8(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
-    mode !== "totp" && /* @__PURE__ */ jsx8("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
-    mode !== "backup" && /* @__PURE__ */ jsx8("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
-    /* @__PURE__ */ jsx8("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
+    /* @__PURE__ */ jsx7(FormError, { children: error }),
+    /* @__PURE__ */ jsx7("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx7(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
+    mode !== "totp" && /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
+    mode !== "backup" && /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
+    /* @__PURE__ */ jsx7("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
   ] });
 }
 
 // src/components/mfa-enrollment-step.tsx
-import * as React9 from "react";
+import * as React8 from "react";
 
 // src/components/MFAEnrollment.tsx
-import * as React8 from "react";
+import * as React7 from "react";
 
 // src/components/mfa-enrollment.ts
 function shouldDiscardSetup(args) {
@@ -756,12 +691,12 @@ function shouldDiscardSetup(args) {
 }
 
 // src/components/QrCode.tsx
-import * as React7 from "react";
-import { jsx as jsx9, jsxs as jsxs8 } from "react/jsx-runtime";
+import * as React6 from "react";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 function QrCode({ value, size = 200 }) {
   const t = useT();
-  const [path, setPath] = React7.useState(null);
-  React7.useEffect(() => {
+  const [path, setPath] = React6.useState(null);
+  React6.useEffect(() => {
     let active = true;
     setPath(null);
     void import("./qr-ZNG4MAV5.js").then(
@@ -790,15 +725,15 @@ function QrCode({ value, size = 200 }) {
       shapeRendering: "crispEdges",
       className: "ba-qr",
       children: [
-        /* @__PURE__ */ jsx9("rect", { width: dim, height: dim, fill: "#ffffff" }),
-        /* @__PURE__ */ jsx9("g", { transform: `translate(${margin} ${margin})`, children: /* @__PURE__ */ jsx9("path", { d: path.d, fill: "#000000" }) })
+        /* @__PURE__ */ jsx8("rect", { width: dim, height: dim, fill: "#ffffff" }),
+        /* @__PURE__ */ jsx8("g", { transform: `translate(${margin} ${margin})`, children: /* @__PURE__ */ jsx8("path", { d: path.d, fill: "#000000" }) })
       ]
     }
   );
 }
 
 // src/components/MFAEnrollment.tsx
-import { jsx as jsx10, jsxs as jsxs9 } from "react/jsx-runtime";
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 function secretFromUri(uri) {
   try {
     return new URL(uri).searchParams.get("secret");
@@ -811,11 +746,11 @@ function MFAEnrollment({ onEnrolled, title }) {
   const { enable, verifyTotp } = useMFA();
   const { user, isLoaded } = useUser();
   const { pending, error, run } = useSubmitAction();
-  const [password, setPassword] = React8.useState("");
-  const [setup, setSetup] = React8.useState(null);
-  const [code, setCode] = React8.useState("");
-  const [done, setDone] = React8.useState(false);
-  const setupOwnerId = React8.useRef(null);
+  const [password, setPassword] = React7.useState("");
+  const [setup, setSetup] = React7.useState(null);
+  const [code, setCode] = React7.useState("");
+  const [done, setDone] = React7.useState(false);
+  const setupOwnerId = React7.useRef(null);
   const userId = user?.id ?? null;
   const stale = shouldDiscardSetup({
     isLoaded,
@@ -824,7 +759,7 @@ function MFAEnrollment({ onEnrolled, title }) {
     currentUserId: userId
   });
   const activeSetup = stale ? null : setup;
-  React8.useEffect(() => {
+  React7.useEffect(() => {
     if (stale) {
       setSetup(null);
       setPassword("");
@@ -833,18 +768,18 @@ function MFAEnrollment({ onEnrolled, title }) {
   }, [stale]);
   if (done) {
     return /* @__PURE__ */ jsxs9("div", { className: "ba-fields", "data-testid": "mfa-enroll-done", children: [
-      /* @__PURE__ */ jsx10("h2", { className: "ba-title", children: t("mfa.enroll.doneTitle") }),
-      /* @__PURE__ */ jsx10("p", { className: "ba-muted", children: t("mfa.enroll.doneBody") })
+      /* @__PURE__ */ jsx9("h2", { className: "ba-title", children: t("mfa.enroll.doneTitle") }),
+      /* @__PURE__ */ jsx9("p", { className: "ba-muted", children: t("mfa.enroll.doneBody") })
     ] });
   }
   if (!activeSetup) {
     if (!isLoaded) {
-      return /* @__PURE__ */ jsx10("div", { className: "ba-fields", "data-testid": "mfa-enroll-loading", "aria-busy": "true", children: /* @__PURE__ */ jsx10("div", { className: "ba-skeleton" }) });
+      return /* @__PURE__ */ jsx9("div", { className: "ba-fields", "data-testid": "mfa-enroll-loading", "aria-busy": "true", children: /* @__PURE__ */ jsx9("div", { className: "ba-skeleton" }) });
     }
     if (user?.twoFactorEnabled) {
       return /* @__PURE__ */ jsxs9("div", { className: "ba-fields", "data-testid": "mfa-enroll-active", children: [
-        /* @__PURE__ */ jsx10("h2", { className: "ba-title", children: t("mfa.enroll.activeTitle") }),
-        /* @__PURE__ */ jsx10("p", { className: "ba-muted", children: t("mfa.enroll.activeBody") })
+        /* @__PURE__ */ jsx9("h2", { className: "ba-title", children: t("mfa.enroll.activeTitle") }),
+        /* @__PURE__ */ jsx9("p", { className: "ba-muted", children: t("mfa.enroll.activeBody") })
       ] });
     }
     return /* @__PURE__ */ jsxs9(
@@ -864,11 +799,11 @@ function MFAEnrollment({ onEnrolled, title }) {
           });
         },
         children: [
-          title !== null && /* @__PURE__ */ jsx10("h2", { className: "ba-title", children: title ?? t("mfa.enroll.title") }),
-          /* @__PURE__ */ jsx10("p", { className: "ba-muted", children: t("mfa.enroll.passwordHint") }),
+          title !== null && /* @__PURE__ */ jsx9("h2", { className: "ba-title", children: title ?? t("mfa.enroll.title") }),
+          /* @__PURE__ */ jsx9("p", { className: "ba-muted", children: t("mfa.enroll.passwordHint") }),
           /* @__PURE__ */ jsxs9("label", { className: "ba-label", children: [
             t("common.passwordLabel"),
-            /* @__PURE__ */ jsx10(
+            /* @__PURE__ */ jsx9(
               "input",
               {
                 className: "ba-input",
@@ -880,27 +815,27 @@ function MFAEnrollment({ onEnrolled, title }) {
               }
             )
           ] }),
-          /* @__PURE__ */ jsx10(FormError, { children: error }),
-          /* @__PURE__ */ jsx10("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx10(Busy, { busy: pending, label: t("mfa.enroll.startPending"), children: t("common.continue") }) })
+          /* @__PURE__ */ jsx9(FormError, { children: error }),
+          /* @__PURE__ */ jsx9("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx9(Busy, { busy: pending, label: t("mfa.enroll.startPending"), children: t("common.continue") }) })
         ]
       }
     );
   }
   const secret = secretFromUri(activeSetup.totpURI);
   return /* @__PURE__ */ jsxs9("div", { className: "ba-fields", "data-testid": "mfa-enroll-verify", children: [
-    /* @__PURE__ */ jsx10("h2", { className: "ba-title", children: t("mfa.enroll.scanQrTitle") }),
-    /* @__PURE__ */ jsx10("p", { className: "ba-muted", children: t("mfa.enroll.scanQrHint") }),
-    /* @__PURE__ */ jsx10(QrCode, { value: activeSetup.totpURI }),
-    secret && /* @__PURE__ */ jsx10("p", { className: "ba-muted", children: richMessage(t("mfa.enroll.manualKey"), {
-      secret: /* @__PURE__ */ jsx10("code", { className: "ba-code", children: /* @__PURE__ */ jsx10(Bidi, { children: secret }) })
+    /* @__PURE__ */ jsx9("h2", { className: "ba-title", children: t("mfa.enroll.scanQrTitle") }),
+    /* @__PURE__ */ jsx9("p", { className: "ba-muted", children: t("mfa.enroll.scanQrHint") }),
+    /* @__PURE__ */ jsx9(QrCode, { value: activeSetup.totpURI }),
+    secret && /* @__PURE__ */ jsx9("p", { className: "ba-muted", children: richMessage(t("mfa.enroll.manualKey"), {
+      secret: /* @__PURE__ */ jsx9("code", { className: "ba-code", children: /* @__PURE__ */ jsx9(Bidi, { children: secret }) })
     }) }),
     /* @__PURE__ */ jsxs9("div", { children: [
       /* @__PURE__ */ jsxs9("p", { className: "ba-muted", children: [
-        /* @__PURE__ */ jsx10("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
+        /* @__PURE__ */ jsx9("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
         " ",
         t("mfa.enroll.backupCodesWarningRest")
       ] }),
-      /* @__PURE__ */ jsx10("ul", { className: "ba-backup-codes", "data-testid": "mfa-backup-codes", children: activeSetup.backupCodes.map((c) => /* @__PURE__ */ jsx10("li", { children: /* @__PURE__ */ jsx10("code", { className: "ba-code", children: c }) }, c)) })
+      /* @__PURE__ */ jsx9("ul", { className: "ba-backup-codes", "data-testid": "mfa-backup-codes", children: activeSetup.backupCodes.map((c) => /* @__PURE__ */ jsx9("li", { children: /* @__PURE__ */ jsx9("code", { className: "ba-code", children: c }) }, c)) })
     ] }),
     /* @__PURE__ */ jsxs9(
       "form",
@@ -922,7 +857,7 @@ function MFAEnrollment({ onEnrolled, title }) {
         children: [
           /* @__PURE__ */ jsxs9("label", { className: "ba-label", children: [
             t("mfa.enroll.codeLabel"),
-            /* @__PURE__ */ jsx10(
+            /* @__PURE__ */ jsx9(
               "input",
               {
                 className: "ba-input",
@@ -934,8 +869,8 @@ function MFAEnrollment({ onEnrolled, title }) {
               }
             )
           ] }),
-          /* @__PURE__ */ jsx10(FormError, { children: error }),
-          /* @__PURE__ */ jsx10("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx10(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.enroll.activateSubmit") }) })
+          /* @__PURE__ */ jsx9(FormError, { children: error }),
+          /* @__PURE__ */ jsx9("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx9(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.enroll.activateSubmit") }) })
         ]
       }
     )
@@ -943,13 +878,13 @@ function MFAEnrollment({ onEnrolled, title }) {
 }
 
 // src/components/mfa-enrollment-step.tsx
-import { Fragment as Fragment2, jsx as jsx11, jsxs as jsxs10 } from "react/jsx-runtime";
+import { Fragment as Fragment2, jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 function useConfirmedMfaPending(onUnknown = "pending") {
   const client = useAuthClient();
   const { needsMfaEnrollment } = useUser();
   const { refetch } = useSession();
-  const [confirmed, setConfirmed] = React9.useState(null);
-  React9.useEffect(() => {
+  const [confirmed, setConfirmed] = React8.useState(null);
+  React8.useEffect(() => {
     if (!needsMfaEnrollment) {
       setConfirmed(null);
       return;
@@ -974,22 +909,22 @@ function MfaEnrollmentStep({ title }) {
   const t = useT();
   const { refetch } = useSession();
   return /* @__PURE__ */ jsxs10(Fragment2, { children: [
-    /* @__PURE__ */ jsx11("h2", { className: "ba-title", children: title ?? t("mfaGate.title") }),
-    /* @__PURE__ */ jsx11("p", { className: "ba-muted", children: t("mfaGate.body") }),
-    /* @__PURE__ */ jsx11(MFAEnrollment, { onEnrolled: () => refetch({ query: { disableCookieCache: true } }) })
+    /* @__PURE__ */ jsx10("h2", { className: "ba-title", children: title ?? t("mfaGate.title") }),
+    /* @__PURE__ */ jsx10("p", { className: "ba-muted", children: t("mfaGate.body") }),
+    /* @__PURE__ */ jsx10(MFAEnrollment, { onEnrolled: () => refetch({ query: { disableCookieCache: true } }) })
   ] });
 }
 
 // src/components/AuthOwlBadge.tsx
-import { jsx as jsx12, jsxs as jsxs11 } from "react/jsx-runtime";
+import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
 function OwlMark() {
   return /* @__PURE__ */ jsxs11("svg", { className: "ba-badge-mark", viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: [
-    /* @__PURE__ */ jsx12("circle", { cx: "12", cy: "12", r: "11", fill: "#F5B84C" }),
-    /* @__PURE__ */ jsx12("circle", { cx: "8.4", cy: "10", r: "3", fill: "#fff" }),
-    /* @__PURE__ */ jsx12("circle", { cx: "15.6", cy: "10", r: "3", fill: "#fff" }),
-    /* @__PURE__ */ jsx12("circle", { cx: "8.4", cy: "10", r: "1.4", fill: "#1f1300" }),
-    /* @__PURE__ */ jsx12("circle", { cx: "15.6", cy: "10", r: "1.4", fill: "#1f1300" }),
-    /* @__PURE__ */ jsx12("path", { d: "M12 13.1l1.5 2.1h-3z", fill: "#1f1300" })
+    /* @__PURE__ */ jsx11("circle", { cx: "12", cy: "12", r: "11", fill: "#F5B84C" }),
+    /* @__PURE__ */ jsx11("circle", { cx: "8.4", cy: "10", r: "3", fill: "#fff" }),
+    /* @__PURE__ */ jsx11("circle", { cx: "15.6", cy: "10", r: "3", fill: "#fff" }),
+    /* @__PURE__ */ jsx11("circle", { cx: "8.4", cy: "10", r: "1.4", fill: "#1f1300" }),
+    /* @__PURE__ */ jsx11("circle", { cx: "15.6", cy: "10", r: "1.4", fill: "#1f1300" }),
+    /* @__PURE__ */ jsx11("path", { d: "M12 13.1l1.5 2.1h-3z", fill: "#1f1300" })
   ] });
 }
 function AuthOwlBadge({ href = "https://authowl.dev", force } = {}) {
@@ -1005,9 +940,9 @@ function AuthOwlBadge({ href = "https://authowl.dev", force } = {}) {
       rel: "noopener noreferrer",
       "data-testid": "authowl-badge",
       children: [
-        /* @__PURE__ */ jsx12(OwlMark, {}),
-        /* @__PURE__ */ jsx12("span", { children: richMessage(t("badge.securedBy"), {
-          brand: /* @__PURE__ */ jsx12("span", { className: "ba-badge-brand", children: "AuthOwl" })
+        /* @__PURE__ */ jsx11(OwlMark, {}),
+        /* @__PURE__ */ jsx11("span", { children: richMessage(t("badge.securedBy"), {
+          brand: /* @__PURE__ */ jsx11("span", { className: "ba-badge-brand", children: "AuthOwl" })
         }) })
       ]
     }
@@ -1022,19 +957,19 @@ import {
 } from "@authowl/core";
 
 // src/components/ConsentDocLinks.tsx
-import { Fragment as Fragment3, jsx as jsx13, jsxs as jsxs12 } from "react/jsx-runtime";
+import { Fragment as Fragment3, jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
 function ConsentDocLinks({ termsUrl, privacyUrl }) {
   const t = useT();
   if (!termsUrl && !privacyUrl) return null;
   return /* @__PURE__ */ jsxs12(Fragment3, { children: [
-    termsUrl && /* @__PURE__ */ jsx13("a", { href: termsUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.termsOfService") }),
+    termsUrl && /* @__PURE__ */ jsx12("a", { href: termsUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.termsOfService") }),
     termsUrl && privacyUrl && t("consent.docJoiner"),
-    privacyUrl && /* @__PURE__ */ jsx13("a", { href: privacyUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.privacyPolicy") })
+    privacyUrl && /* @__PURE__ */ jsx12("a", { href: privacyUrl, target: "_blank", rel: "noopener noreferrer", children: t("consent.privacyPolicy") })
   ] });
 }
 
 // src/components/LegalConsentCheckbox.tsx
-import { jsx as jsx14, jsxs as jsxs13 } from "react/jsx-runtime";
+import { jsx as jsx13, jsxs as jsxs13 } from "react/jsx-runtime";
 function LegalConsentCheckbox({
   legal,
   accepted,
@@ -1045,7 +980,7 @@ function LegalConsentCheckbox({
   if (!legal.required) return null;
   return /* @__PURE__ */ jsxs13("label", { className: "ba-consent", "data-testid": testId, children: [
     /* @__PURE__ */ jsxs13("span", { className: "ba-checkbox-control", children: [
-      /* @__PURE__ */ jsx14(
+      /* @__PURE__ */ jsx13(
         "input",
         {
           className: "ba-checkbox",
@@ -1054,14 +989,69 @@ function LegalConsentCheckbox({
           onChange: (event) => onAcceptedChange(event.target.checked)
         }
       ),
-      /* @__PURE__ */ jsx14("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ jsx14("span", { className: "ba-checkbox-check" }) })
+      /* @__PURE__ */ jsx13("span", { className: "ba-checkbox-visual", "aria-hidden": "true", children: /* @__PURE__ */ jsx13("span", { className: "ba-checkbox-check" }) })
     ] }),
-    /* @__PURE__ */ jsx14("span", { children: richMessage(t("signUp.consentLabel"), {
-      links: /* @__PURE__ */ jsx14(ConsentDocLinks, { termsUrl: legal.termsUrl, privacyUrl: legal.privacyUrl })
+    /* @__PURE__ */ jsx13("span", { children: richMessage(t("signUp.consentLabel"), {
+      links: /* @__PURE__ */ jsx13(ConsentDocLinks, { termsUrl: legal.termsUrl, privacyUrl: legal.privacyUrl })
     }) })
   ] });
 }
 
+// src/components/Turnstile.tsx
+import * as React9 from "react";
+import { jsx as jsx14 } from "react/jsx-runtime";
+var LOCAL_TURNSTILE_TEST_TOKEN = "XXXX.DUMMY.TOKEN.XXXX";
+async function loadTurnstile() {
+  const [{ loadCaptcha }, { CAPTCHA_ADAPTERS }] = await Promise.all([
+    import("./captcha-loader-VNULARCZ.js"),
+    import("./captcha-providers-STYFL25P.js")
+  ]);
+  const adapter = CAPTCHA_ADAPTERS.turnstile;
+  return { api: await loadCaptcha(adapter), adapter };
+}
+function Turnstile({
+  siteKey,
+  theme,
+  onToken,
+  onUnavailable
+}) {
+  const container = React9.useRef(null);
+  const callbacks = React9.useRef({ onToken, onUnavailable });
+  callbacks.current = { onToken, onUnavailable };
+  React9.useEffect(() => {
+    callbacks.current.onToken(null);
+    if (!siteKey) {
+      callbacks.current.onToken(LOCAL_TURNSTILE_TEST_TOKEN);
+      return;
+    }
+    let active = true;
+    let widget = null;
+    void loadTurnstile().then(({ api, adapter }) => {
+      if (!active || !container.current) return;
+      const id = api.render(container.current, {
+        sitekey: siteKey,
+        theme: theme === "system" ? "auto" : theme,
+        size: "flexible",
+        callback: (token) => callbacks.current.onToken(token),
+        "expired-callback": () => callbacks.current.onToken(null),
+        "error-callback": () => {
+          callbacks.current.onToken(null);
+          callbacks.current.onUnavailable();
+        }
+      });
+      widget = { api, adapter, id };
+    }).catch(() => {
+      if (active) callbacks.current.onUnavailable();
+    });
+    return () => {
+      active = false;
+      if (widget) widget.adapter.teardown(widget.api, widget.id);
+    };
+  }, [siteKey, theme]);
+  if (!siteKey) return null;
+  return /* @__PURE__ */ jsx14("div", { className: "ba-turnstile", ref: container, "data-testid": "phoneotp-turnstile" });
+}
+
 // src/components/PhoneOTP.tsx
 import { jsx as jsx15, jsxs as jsxs14 } from "react/jsx-runtime";
 function PhoneOTP({
@@ -1374,8 +1364,25 @@ function InvitationBanner() {
   return /* @__PURE__ */ jsx17("p", { className: "ba-muted", "data-testid": "authowl-invitation-banner", children: t("organization.invitationBanner") });
 }
 
+// src/components/PublicConfigError.tsx
+import { jsx as jsx18, jsxs as jsxs16 } from "react/jsx-runtime";
+function PublicConfigError({
+  showBadge,
+  showBranding = true
+}) {
+  const t = useT();
+  const { retry } = usePublicConfig();
+  return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "authowl-config-error", role: "alert", children: [
+    showBranding ? /* @__PURE__ */ jsx18(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ jsx18("h2", { className: "ba-title", children: t("publicConfig.error.title") }),
+    /* @__PURE__ */ jsx18("p", { className: "ba-muted", children: t("publicConfig.error.description") }),
+    /* @__PURE__ */ jsx18("button", { className: "ba-button", type: "button", onClick: retry, children: t("publicConfig.retry") }),
+    /* @__PURE__ */ jsx18(AuthOwlBadge, { force: showBadge })
+  ] });
+}
+
 // src/components/SignIn.tsx
-import { Fragment as Fragment4, jsx as jsx18, jsxs as jsxs16 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx19, jsxs as jsxs17 } from "react/jsx-runtime";
 function SignIn({
   redirectTo,
   onSignedIn,
@@ -1417,41 +1424,44 @@ function SignIn({
     redirectTo,
     onSignedIn
   });
-  const badge = /* @__PURE__ */ jsx18(AuthOwlBadge, { force: showBadge });
-  const branding = showBranding ? /* @__PURE__ */ jsx18(AuthOwlBranding, {}) : null;
+  const badge = /* @__PURE__ */ jsx19(AuthOwlBadge, { force: showBadge });
+  const branding = showBranding ? /* @__PURE__ */ jsx19(AuthOwlBranding, {}) : null;
   if (isLoading) {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-loading", "aria-busy": "true", children: [
-      /* @__PURE__ */ jsx18("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ jsx18("div", { className: "ba-skeleton" })
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-loading", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx19("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ jsx19("div", { className: "ba-skeleton" })
     ] });
   }
+  if (isError) {
+    return /* @__PURE__ */ jsx19(PublicConfigError, { showBadge, showBranding });
+  }
   if (mfaEnrolment !== "clear") {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-mfa-enrolment", "aria-busy": mfaEnrolment === "confirming", children: [
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-mfa-enrolment", "aria-busy": mfaEnrolment === "confirming", children: [
       branding,
-      mfaEnrolment === "pending" ? /* @__PURE__ */ jsx18(MfaEnrollmentStep, {}) : /* @__PURE__ */ jsx18("div", { className: "ba-skeleton" }),
+      mfaEnrolment === "pending" ? /* @__PURE__ */ jsx19(MfaEnrollmentStep, {}) : /* @__PURE__ */ jsx19("div", { className: "ba-skeleton" }),
       badge
     ] });
   }
   if (challenge) {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-mfa", children: [
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-mfa", children: [
       branding,
-      /* @__PURE__ */ jsx18(MFAChallenge, { onVerified: () => finishSignIn({ sessionStore, redirectTo, onSignedIn }) }),
+      /* @__PURE__ */ jsx19(MFAChallenge, { onVerified: () => finishSignIn({ sessionStore, redirectTo, onSignedIn }) }),
       badge
     ] });
   }
   if (view === "forgot" && resetPasswordUrl) {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-forgot", children: [
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-forgot", children: [
       branding,
-      /* @__PURE__ */ jsx18("h2", { className: "ba-title", children: t("signIn.forgotTitle") }),
-      /* @__PURE__ */ jsx18(ForgotPassword, { resetPasswordUrl, onBack: () => setView("sign-in") }),
+      /* @__PURE__ */ jsx19("h2", { className: "ba-title", children: t("signIn.forgotTitle") }),
+      /* @__PURE__ */ jsx19(ForgotPassword, { resetPasswordUrl, onBack: () => setView("sign-in") }),
       badge
     ] });
   }
   if (view === "otp-code") {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-otp-code", children: [
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-otp-code", children: [
       branding,
-      /* @__PURE__ */ jsx18("h2", { className: "ba-title", children: t("signIn.title") }),
-      /* @__PURE__ */ jsx18(
+      /* @__PURE__ */ jsx19("h2", { className: "ba-title", children: t("signIn.title") }),
+      /* @__PURE__ */ jsx19(
         OtpCodeForm,
         {
           email,
@@ -1477,18 +1487,18 @@ function SignIn({
     ] });
   }
   if (view === "magic-sent") {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-magic-sent", children: [
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-magic-sent", children: [
       branding,
-      /* @__PURE__ */ jsx18("h2", { className: "ba-title", children: t("signIn.title") }),
-      /* @__PURE__ */ jsx18("p", { className: "ba-muted", children: t("magicLink.sent") }),
-      /* @__PURE__ */ jsx18("button", { type: "button", className: "ba-link-button", onClick: () => setView("sign-in"), children: t("forgotPassword.backToSignIn") }),
+      /* @__PURE__ */ jsx19("h2", { className: "ba-title", children: t("signIn.title") }),
+      /* @__PURE__ */ jsx19("p", { className: "ba-muted", children: t("magicLink.sent") }),
+      /* @__PURE__ */ jsx19("button", { type: "button", className: "ba-link-button", onClick: () => setView("sign-in"), children: t("forgotPassword.backToSignIn") }),
       badge
     ] });
   }
   if (view === "phone") {
-    return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-phone", children: [
+    return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-phone", children: [
       branding,
-      /* @__PURE__ */ jsx18(
+      /* @__PURE__ */ jsx19(
         PhoneOTP,
         {
           redirectTo,
@@ -1565,14 +1575,13 @@ function SignIn({
     { key: "otp", enabled: plan.emailOtp, action: doRequestOtp, label: t("emailOtp.requestSubmit"), pendingLabel: t("common.sending") },
     { key: "sso", enabled: plan.sso, action: doSso, label: t("sso.continueWith"), pendingLabel: t("sso.redirecting") }
   ];
-  return /* @__PURE__ */ jsxs16("div", { className: "ba-form", "data-testid": "signin-form", children: [
+  return /* @__PURE__ */ jsxs17("div", { className: "ba-form", "data-testid": "signin-form", children: [
     branding,
-    /* @__PURE__ */ jsx18("h2", { className: "ba-title", children: t("signIn.title") }),
-    /* @__PURE__ */ jsx18(InvitationBanner, {}),
-    process.env.NODE_ENV !== "production" && isError && /* @__PURE__ */ jsx18("p", { className: "ba-muted", "data-testid": "signin-dev-config-notice", children: "AuthOwl (dev): couldn't load this project's config, so this is a password-only fallback that may not match the project's enabled sign-in methods. Check apiUrl / publishableKey; see the console for details." }),
-    /* @__PURE__ */ jsx18(SocialButtons, { providers: plan.social, callbackURL: redirectTo }),
-    showDivider && /* @__PURE__ */ jsx18("div", { className: "ba-divider", children: t("common.orDivider") }),
-    hasCredentialForm && /* @__PURE__ */ jsxs16(
+    /* @__PURE__ */ jsx19("h2", { className: "ba-title", children: t("signIn.title") }),
+    /* @__PURE__ */ jsx19(InvitationBanner, {}),
+    /* @__PURE__ */ jsx19(SocialButtons, { providers: plan.social, callbackURL: redirectTo }),
+    showDivider && /* @__PURE__ */ jsx19("div", { className: "ba-divider", children: t("common.orDivider") }),
+    hasCredentialForm && /* @__PURE__ */ jsxs17(
       "form",
       {
         method: "post",
@@ -1583,9 +1592,9 @@ function SignIn({
           else if (plan.primary) PRIMARY_ACTION[plan.primary]();
         },
         children: [
-          credentialMode === "email" ? /* @__PURE__ */ jsxs16("label", { className: "ba-label", children: [
+          credentialMode === "email" ? /* @__PURE__ */ jsxs17("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ jsx18(
+            /* @__PURE__ */ jsx19(
               "input",
               {
                 ref: emailRef,
@@ -1600,9 +1609,9 @@ function SignIn({
                 required: true
               }
             )
-          ] }) : /* @__PURE__ */ jsxs16("label", { className: "ba-label", children: [
+          ] }) : /* @__PURE__ */ jsxs17("label", { className: "ba-label", children: [
             t("common.usernameLabel"),
-            /* @__PURE__ */ jsx18(
+            /* @__PURE__ */ jsx19(
               "input",
               {
                 className: "ba-input",
@@ -1617,9 +1626,9 @@ function SignIn({
               }
             )
           ] }),
-          plan.password && /* @__PURE__ */ jsxs16("label", { className: "ba-label", children: [
+          plan.password && /* @__PURE__ */ jsxs17("label", { className: "ba-label", children: [
             t("common.passwordLabel"),
-            /* @__PURE__ */ jsx18(
+            /* @__PURE__ */ jsx19(
               "input",
               {
                 className: "ba-input",
@@ -1635,19 +1644,19 @@ function SignIn({
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ jsx18(FormError, { children: error }),
-          plan.password && /* @__PURE__ */ jsxs16(Fragment4, { children: [
-            /* @__PURE__ */ jsx18(
+          /* @__PURE__ */ jsx19(FormError, { children: error }),
+          plan.password && /* @__PURE__ */ jsxs17(Fragment4, { children: [
+            /* @__PURE__ */ jsx19(
               "button",
               {
                 className: "ba-button",
                 type: "submit",
                 disabled: pending || authChallenge.configPending,
                 "aria-busy": pending && inFlight === "password" || void 0,
-                children: /* @__PURE__ */ jsx18(Busy, { busy: pending && inFlight === "password", label: t("signIn.submitPending"), children: t("signIn.submit") })
+                children: /* @__PURE__ */ jsx19(Busy, { busy: pending && inFlight === "password", label: t("signIn.submitPending"), children: t("signIn.submit") })
               }
             ),
-            resetPasswordUrl && /* @__PURE__ */ jsx18(
+            resetPasswordUrl && /* @__PURE__ */ jsx19(
               "button",
               {
                 type: "button",
@@ -1659,7 +1668,7 @@ function SignIn({
           ] }),
           credentialMode === "email" && alternates.filter((a) => a.enabled).map(({ key, action, label: label2, pendingLabel }) => {
             const isPrimary = plan.primary === key;
-            return /* @__PURE__ */ jsx18(
+            return /* @__PURE__ */ jsx19(
               "button",
               {
                 type: isPrimary ? "submit" : "button",
@@ -1667,12 +1676,12 @@ function SignIn({
                 disabled: pending || authChallenge.configPending,
                 "aria-busy": pending && inFlight === key || void 0,
                 onClick: isPrimary ? void 0 : withEmail(action),
-                children: /* @__PURE__ */ jsx18(Busy, { busy: pending && inFlight === key, label: pendingLabel, children: label2 })
+                children: /* @__PURE__ */ jsx19(Busy, { busy: pending && inFlight === key, label: pendingLabel, children: label2 })
               },
               key
             );
           }),
-          plan.username && /* @__PURE__ */ jsx18(
+          plan.username && /* @__PURE__ */ jsx19(
             "button",
             {
               type: "button",
@@ -1688,8 +1697,8 @@ function SignIn({
         ]
       }
     ),
-    plan.passkey && /* @__PURE__ */ jsx18(PasskeyButton, { redirectTo, onSignedIn }),
-    plan.phoneOtp && /* @__PURE__ */ jsx18(
+    plan.passkey && /* @__PURE__ */ jsx19(PasskeyButton, { redirectTo, onSignedIn }),
+    plan.phoneOtp && /* @__PURE__ */ jsx19(
       "button",
       {
         type: "button",
@@ -1698,7 +1707,7 @@ function SignIn({
         children: t("phoneOtp.usePhone")
       }
     ),
-    !plan.renderable && /* @__PURE__ */ jsx18("p", { className: "ba-muted", children: plan.emptyReason === "unsupported" ? t("signIn.empty.unsupported") : t("signIn.empty.none") }),
+    !plan.renderable && /* @__PURE__ */ jsx19("p", { className: "ba-muted", children: plan.emptyReason === "unsupported" ? t("signIn.empty.unsupported") : t("signIn.empty.none") }),
     badge
   ] });
 }
@@ -1708,7 +1717,7 @@ import * as React17 from "react";
 
 // src/components/VerificationPending.tsx
 import * as React14 from "react";
-import { jsx as jsx19, jsxs as jsxs17 } from "react/jsx-runtime";
+import { jsx as jsx20, jsxs as jsxs18 } from "react/jsx-runtime";
 function VerificationPending({
   email,
   callbackURL,
@@ -1726,10 +1735,10 @@ function VerificationPending({
   const [code, setCode] = React14.useState("");
   const [verified, setVerified] = React14.useState(false);
   if (verified) {
-    return /* @__PURE__ */ jsx19("p", { className: "ba-success", role: "status", "data-testid": "verify-code-success", children: t("verifyEmail.success") });
+    return /* @__PURE__ */ jsx20("p", { className: "ba-success", role: "status", "data-testid": "verify-code-success", children: t("verifyEmail.success") });
   }
   if (method === "code") {
-    return /* @__PURE__ */ jsxs17(
+    return /* @__PURE__ */ jsxs18(
       "form",
       {
         method: "post",
@@ -1746,12 +1755,12 @@ function VerificationPending({
           );
         },
         children: [
-          /* @__PURE__ */ jsx19("p", { className: "ba-muted", children: richMessage(t("verifyPending.codeBody"), {
-            email: /* @__PURE__ */ jsx19("strong", { children: /* @__PURE__ */ jsx19(Bidi, { children: email }) })
+          /* @__PURE__ */ jsx20("p", { className: "ba-muted", children: richMessage(t("verifyPending.codeBody"), {
+            email: /* @__PURE__ */ jsx20("strong", { children: /* @__PURE__ */ jsx20(Bidi, { children: email }) })
           }) }),
-          /* @__PURE__ */ jsxs17("label", { className: "ba-label", children: [
+          /* @__PURE__ */ jsxs18("label", { className: "ba-label", children: [
             t("verifyPending.codeLabel"),
-            /* @__PURE__ */ jsx19(
+            /* @__PURE__ */ jsx20(
               "input",
               {
                 className: "ba-input",
@@ -1763,20 +1772,20 @@ function VerificationPending({
               }
             )
           ] }),
-          resent && /* @__PURE__ */ jsx19("p", { className: "ba-muted", children: t("verifyPending.resent") }),
+          resent && /* @__PURE__ */ jsx20("p", { className: "ba-muted", children: t("verifyPending.resent") }),
           authChallenge.control,
-          /* @__PURE__ */ jsx19(FormError, { children: error }),
-          /* @__PURE__ */ jsx19(
+          /* @__PURE__ */ jsx20(FormError, { children: error }),
+          /* @__PURE__ */ jsx20(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || !code,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ jsx19(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") })
+              children: /* @__PURE__ */ jsx20(Busy, { busy: pending, label: t("common.verifying"), children: t("emailOtp.verifySubmit") })
             }
           ),
-          /* @__PURE__ */ jsx19(
+          /* @__PURE__ */ jsx20(
             "button",
             {
               type: "button",
@@ -1802,14 +1811,14 @@ function VerificationPending({
       }
     );
   }
-  return /* @__PURE__ */ jsxs17("div", { className: "ba-fields", "data-testid": "verify-pending", children: [
-    /* @__PURE__ */ jsx19("p", { className: "ba-muted", children: richMessage(t("verifyPending.body"), {
-      email: /* @__PURE__ */ jsx19("strong", { children: /* @__PURE__ */ jsx19(Bidi, { children: email }) })
+  return /* @__PURE__ */ jsxs18("div", { className: "ba-fields", "data-testid": "verify-pending", children: [
+    /* @__PURE__ */ jsx20("p", { className: "ba-muted", children: richMessage(t("verifyPending.body"), {
+      email: /* @__PURE__ */ jsx20("strong", { children: /* @__PURE__ */ jsx20(Bidi, { children: email }) })
     }) }),
-    resent && /* @__PURE__ */ jsx19("p", { className: "ba-muted", children: t("verifyPending.resent") }),
+    resent && /* @__PURE__ */ jsx20("p", { className: "ba-muted", children: t("verifyPending.resent") }),
     authChallenge.control,
-    /* @__PURE__ */ jsx19(FormError, { children: error }),
-    /* @__PURE__ */ jsx19(
+    /* @__PURE__ */ jsx20(FormError, { children: error }),
+    /* @__PURE__ */ jsx20(
       "button",
       {
         type: "button",
@@ -1820,7 +1829,7 @@ function VerificationPending({
           failure: t("verifyPending.error.resendFailed"),
           onSuccess: () => setResent(true)
         }),
-        children: /* @__PURE__ */ jsx19(Busy, { busy: pending, label: t("common.sending"), children: t("verifyPending.resendButton") })
+        children: /* @__PURE__ */ jsx20(Busy, { busy: pending, label: t("common.sending"), children: t("verifyPending.resendButton") })
       }
     )
   ] });
@@ -1828,7 +1837,7 @@ function VerificationPending({
 
 // src/components/PasswordlessSignUp.tsx
 import * as React15 from "react";
-import { jsx as jsx20, jsxs as jsxs18 } from "react/jsx-runtime";
+import { jsx as jsx21, jsxs as jsxs19 } from "react/jsx-runtime";
 function PasswordlessSignUp({ onAuthenticated }) {
   const t = useT();
   const { sendEmailOtp, signInEmailOtp } = useSignIn();
@@ -1838,7 +1847,7 @@ function PasswordlessSignUp({ onAuthenticated }) {
   const [code, setCode] = React15.useState("");
   const [codeSent, setCodeSent] = React15.useState(false);
   if (codeSent) {
-    return /* @__PURE__ */ jsx20("div", { className: "ba-fields", "data-testid": "signup-emailotp-code", children: /* @__PURE__ */ jsx20(
+    return /* @__PURE__ */ jsx21("div", { className: "ba-fields", "data-testid": "signup-emailotp-code", children: /* @__PURE__ */ jsx21(
       OtpCodeForm,
       {
         email,
@@ -1858,7 +1867,7 @@ function PasswordlessSignUp({ onAuthenticated }) {
       }
     ) });
   }
-  return /* @__PURE__ */ jsxs18(
+  return /* @__PURE__ */ jsxs19(
     "form",
     {
       method: "post",
@@ -1872,9 +1881,9 @@ function PasswordlessSignUp({ onAuthenticated }) {
         });
       },
       children: [
-        /* @__PURE__ */ jsxs18("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs19("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ jsx20(
+          /* @__PURE__ */ jsx21(
             "input",
             {
               className: "ba-input",
@@ -1887,15 +1896,15 @@ function PasswordlessSignUp({ onAuthenticated }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ jsx20(FormError, { children: error }),
-        /* @__PURE__ */ jsx20(
+        /* @__PURE__ */ jsx21(FormError, { children: error }),
+        /* @__PURE__ */ jsx21(
           "button",
           {
             className: "ba-button ba-button-secondary",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx20(Busy, { busy: pending, label: t("common.sending"), children: t("signUp.passwordlessSubmit") })
+            children: /* @__PURE__ */ jsx21(Busy, { busy: pending, label: t("common.sending"), children: t("signUp.passwordlessSubmit") })
           }
         )
       ]
@@ -1904,16 +1913,16 @@ function PasswordlessSignUp({ onAuthenticated }) {
 }
 
 // src/components/PasskeySignUpCompletion.tsx
-import { jsx as jsx21, jsxs as jsxs19 } from "react/jsx-runtime";
+import { jsx as jsx22, jsxs as jsxs20 } from "react/jsx-runtime";
 function PasskeySignUpCompletion({ onComplete }) {
   const t = useT();
   const { addPasskey } = usePasskeys();
   const { pending, error, run } = useSubmitAction();
-  return /* @__PURE__ */ jsxs19("div", { className: "ba-fields", "data-testid": "signup-passkey-completion", children: [
-    /* @__PURE__ */ jsx21("h3", { className: "ba-title", children: t("signUp.passkeyTitle") }),
-    /* @__PURE__ */ jsx21("p", { className: "ba-muted", children: t("signUp.passkeyDescription") }),
-    /* @__PURE__ */ jsx21(FormError, { children: error }),
-    /* @__PURE__ */ jsx21(
+  return /* @__PURE__ */ jsxs20("div", { className: "ba-fields", "data-testid": "signup-passkey-completion", children: [
+    /* @__PURE__ */ jsx22("h3", { className: "ba-title", children: t("signUp.passkeyTitle") }),
+    /* @__PURE__ */ jsx22("p", { className: "ba-muted", children: t("signUp.passkeyDescription") }),
+    /* @__PURE__ */ jsx22(FormError, { children: error }),
+    /* @__PURE__ */ jsx22(
       "button",
       {
         className: "ba-button",
@@ -1924,16 +1933,16 @@ function PasskeySignUpCompletion({ onComplete }) {
           failure: t("signUp.error.passkeyFailed"),
           onSuccess: onComplete
         }),
-        children: /* @__PURE__ */ jsx21(Busy, { busy: pending, label: t("passkey.waiting"), children: t("signUp.passkeySubmit") })
+        children: /* @__PURE__ */ jsx22(Busy, { busy: pending, label: t("passkey.waiting"), children: t("signUp.passkeySubmit") })
       }
     ),
-    /* @__PURE__ */ jsx21("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: onComplete, children: t("signUp.passkeySkip") })
+    /* @__PURE__ */ jsx22("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: onComplete, children: t("signUp.passkeySkip") })
   ] });
 }
 
 // src/components/Waitlist.tsx
 import * as React16 from "react";
-import { jsx as jsx22, jsxs as jsxs20 } from "react/jsx-runtime";
+import { jsx as jsx23, jsxs as jsxs21 } from "react/jsx-runtime";
 function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
   const t = useT();
   const { join } = useWaitlist();
@@ -1942,18 +1951,18 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
   const [email, setEmail] = React16.useState("");
   const [joined, setJoined] = React16.useState(false);
   if (joined) {
-    return /* @__PURE__ */ jsxs20("div", { className: "ba-form", "data-testid": "waitlist-accepted", children: [
-      showBranding ? /* @__PURE__ */ jsx22(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx22("h2", { className: "ba-title", children: t("waitlist.acceptedTitle") }),
-      /* @__PURE__ */ jsx22("p", { className: "ba-muted", children: t("waitlist.acceptedDescription") }),
-      /* @__PURE__ */ jsx22(AuthOwlBadge, { force: showBadge })
+    return /* @__PURE__ */ jsxs21("div", { className: "ba-form", "data-testid": "waitlist-accepted", children: [
+      showBranding ? /* @__PURE__ */ jsx23(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx23("h2", { className: "ba-title", children: t("waitlist.acceptedTitle") }),
+      /* @__PURE__ */ jsx23("p", { className: "ba-muted", children: t("waitlist.acceptedDescription") }),
+      /* @__PURE__ */ jsx23(AuthOwlBadge, { force: showBadge })
     ] });
   }
-  return /* @__PURE__ */ jsxs20("div", { className: "ba-form", "data-testid": "waitlist-form", children: [
-    showBranding ? /* @__PURE__ */ jsx22(AuthOwlBranding, {}) : null,
-    /* @__PURE__ */ jsx22("h2", { className: "ba-title", children: t("waitlist.title") }),
-    /* @__PURE__ */ jsx22("p", { className: "ba-muted", children: t("waitlist.description") }),
-    /* @__PURE__ */ jsxs20(
+  return /* @__PURE__ */ jsxs21("div", { className: "ba-form", "data-testid": "waitlist-form", children: [
+    showBranding ? /* @__PURE__ */ jsx23(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ jsx23("h2", { className: "ba-title", children: t("waitlist.title") }),
+    /* @__PURE__ */ jsx23("p", { className: "ba-muted", children: t("waitlist.description") }),
+    /* @__PURE__ */ jsxs21(
       "form",
       {
         method: "post",
@@ -1975,9 +1984,9 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
           );
         },
         children: [
-          /* @__PURE__ */ jsxs20("label", { className: "ba-label", children: [
+          /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ jsx22(
+            /* @__PURE__ */ jsx23(
               "input",
               {
                 className: "ba-input",
@@ -1991,26 +2000,26 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ jsx22(FormError, { children: error }),
-          /* @__PURE__ */ jsx22(
+          /* @__PURE__ */ jsx23(FormError, { children: error }),
+          /* @__PURE__ */ jsx23(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || authChallenge.configPending,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ jsx22(Busy, { busy: pending, label: t("waitlist.submitPending"), children: t("waitlist.submit") })
+              children: /* @__PURE__ */ jsx23(Busy, { busy: pending, label: t("waitlist.submitPending"), children: t("waitlist.submit") })
             }
           )
         ]
       }
     ),
-    /* @__PURE__ */ jsx22(AuthOwlBadge, { force: showBadge })
+    /* @__PURE__ */ jsx23(AuthOwlBadge, { force: showBadge })
   ] });
 }
 
 // src/components/SignUp.tsx
-import { Fragment as Fragment5, jsx as jsx23, jsxs as jsxs21 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx24, jsxs as jsxs22 } from "react/jsx-runtime";
 function SignUp({
   redirectTo,
   onSignedUp,
@@ -2022,7 +2031,7 @@ function SignUp({
   const t = useT();
   const toServerError = useServerError();
   const { signUp } = useSignUp();
-  const { config, isLoading } = usePublicConfig();
+  const { config, isLoading, isError } = usePublicConfig();
   const authChallenge = useAuthChallenge();
   const [email, setEmail] = React17.useState("");
   const [password, setPassword] = React17.useState("");
@@ -2094,18 +2103,21 @@ function SignUp({
     }
   }
   if (isLoading) {
-    return /* @__PURE__ */ jsxs21("div", { className: "ba-form", "data-testid": "signup-loading", "aria-busy": "true", children: [
-      /* @__PURE__ */ jsx23("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ jsx23("div", { className: "ba-skeleton" })
+    return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-loading", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx24("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ jsx24("div", { className: "ba-skeleton" })
     ] });
   }
+  if (isError) {
+    return /* @__PURE__ */ jsx24(PublicConfigError, { showBadge, showBranding });
+  }
   if (config?.signUp?.mode === "waitlist") {
-    return /* @__PURE__ */ jsx23(Waitlist, { onJoined: onWaitlisted, showBadge, showBranding });
+    return /* @__PURE__ */ jsx24(Waitlist, { onJoined: onWaitlisted, showBadge, showBranding });
   }
   if (pendingEmail) {
-    return /* @__PURE__ */ jsxs21("div", { className: "ba-form", "data-testid": "signup-verify-pending", children: [
-      showBranding ? /* @__PURE__ */ jsx23(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx23(
+    return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-verify-pending", children: [
+      showBranding ? /* @__PURE__ */ jsx24(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx24(
         VerificationPending,
         {
           email: pendingEmail,
@@ -2113,7 +2125,7 @@ function SignUp({
           method: capabilities.emailVerificationMethod
         }
       ),
-      /* @__PURE__ */ jsx23(AuthOwlBadge, { force: showBadge })
+      /* @__PURE__ */ jsx24(AuthOwlBadge, { force: showBadge })
     ] });
   }
   const methods = config?.enabledMethods ?? ["password"];
@@ -2123,22 +2135,22 @@ function SignUp({
   const showPasswordless = publicSignupAllowed && capabilities.emailOtpSignIn && capabilities.emailSignUp && !consentRequired && !capabilities.mfaRequired;
   const renderable = showPassword || showPasswordless || social.length > 0;
   if (completeWithPasskey) {
-    return /* @__PURE__ */ jsxs21("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
-      showBranding ? /* @__PURE__ */ jsx23(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx23(PasskeySignUpCompletion, { onComplete: finishSignUp }),
-      /* @__PURE__ */ jsx23(AuthOwlBadge, { force: showBadge })
+    return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
+      showBranding ? /* @__PURE__ */ jsx24(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx24(PasskeySignUpCompletion, { onComplete: finishSignUp }),
+      /* @__PURE__ */ jsx24(AuthOwlBadge, { force: showBadge })
     ] });
   }
-  return /* @__PURE__ */ jsxs21("div", { className: "ba-form", "data-testid": "signup-form", children: [
-    showBranding ? /* @__PURE__ */ jsx23(AuthOwlBranding, {}) : null,
-    /* @__PURE__ */ jsx23("h2", { className: "ba-title", children: t("signUp.title") }),
-    /* @__PURE__ */ jsx23(InvitationBanner, {}),
-    /* @__PURE__ */ jsx23(SocialButtons, { providers: social, callbackURL: redirectTo }),
-    showPassword && social.length > 0 && /* @__PURE__ */ jsx23("div", { className: "ba-divider", children: t("common.orDivider") }),
-    showPassword && /* @__PURE__ */ jsxs21("form", { method: "post", onSubmit, className: "ba-fields", children: [
-      capabilities.legacyNameField && /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
+  return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-form", children: [
+    showBranding ? /* @__PURE__ */ jsx24(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ jsx24("h2", { className: "ba-title", children: t("signUp.title") }),
+    /* @__PURE__ */ jsx24(InvitationBanner, {}),
+    /* @__PURE__ */ jsx24(SocialButtons, { providers: social, callbackURL: redirectTo }),
+    showPassword && social.length > 0 && /* @__PURE__ */ jsx24("div", { className: "ba-divider", children: t("common.orDivider") }),
+    showPassword && /* @__PURE__ */ jsxs22("form", { method: "post", onSubmit, className: "ba-fields", children: [
+      capabilities.legacyNameField && /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ jsx23(
+        /* @__PURE__ */ jsx24(
           "input",
           {
             className: "ba-input",
@@ -2152,10 +2164,10 @@ function SignUp({
           }
         )
       ] }),
-      capabilities.firstLastName && /* @__PURE__ */ jsxs21(Fragment5, { children: [
-        /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
+      capabilities.firstLastName && /* @__PURE__ */ jsxs22(Fragment5, { children: [
+        /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ jsx23(
+          /* @__PURE__ */ jsx24(
             "input",
             {
               className: "ba-input",
@@ -2168,9 +2180,9 @@ function SignUp({
             }
           )
         ] }),
-        /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ jsx23(
+          /* @__PURE__ */ jsx24(
             "input",
             {
               className: "ba-input",
@@ -2184,9 +2196,9 @@ function SignUp({
           )
         ] })
       ] }),
-      capabilities.collectUsername && /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
+      capabilities.collectUsername && /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ jsx23(
+        /* @__PURE__ */ jsx24(
           "input",
           {
             className: "ba-input",
@@ -2200,9 +2212,9 @@ function SignUp({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
         t("common.emailLabel"),
-        /* @__PURE__ */ jsx23(
+        /* @__PURE__ */ jsx24(
           "input",
           {
             className: "ba-input",
@@ -2217,9 +2229,9 @@ function SignUp({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs21("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ jsx23(
+        /* @__PURE__ */ jsx24(
           "input",
           {
             className: "ba-input",
@@ -2237,7 +2249,7 @@ function SignUp({
         )
       ] }),
       authChallenge.control,
-      legal && /* @__PURE__ */ jsx23(
+      legal && /* @__PURE__ */ jsx24(
         LegalConsentCheckbox,
         {
           legal,
@@ -2246,20 +2258,20 @@ function SignUp({
           testId: "signup-consent"
         }
       ),
-      /* @__PURE__ */ jsx23(FormError, { children: error }),
-      /* @__PURE__ */ jsx23(
+      /* @__PURE__ */ jsx24(FormError, { children: error }),
+      /* @__PURE__ */ jsx24(
         "button",
         {
           className: "ba-button",
           type: "submit",
           disabled: submitting || consentBlocked || authChallenge.configPending,
           "aria-busy": submitting || void 0,
-          children: /* @__PURE__ */ jsx23(Busy, { busy: submitting, label: t("signUp.submitPending"), children: t("signUp.submit") })
+          children: /* @__PURE__ */ jsx24(Busy, { busy: submitting, label: t("signUp.submitPending"), children: t("signUp.submit") })
         }
       )
     ] }),
-    showPasswordless && (showPassword || social.length > 0) && /* @__PURE__ */ jsx23("div", { className: "ba-divider", children: t("common.orDivider") }),
-    showPasswordless && /* @__PURE__ */ jsx23(
+    showPasswordless && (showPassword || social.length > 0) && /* @__PURE__ */ jsx24("div", { className: "ba-divider", children: t("common.orDivider") }),
+    showPasswordless && /* @__PURE__ */ jsx24(
       PasswordlessSignUp,
       {
         onAuthenticated: () => {
@@ -2268,25 +2280,25 @@ function SignUp({
         }
       }
     ),
-    !renderable && /* @__PURE__ */ jsx23("p", { className: "ba-muted", children: publicSignupAllowed && methods.length > 0 ? t("signUp.empty.unsupported") : t("signUp.empty.none") }),
-    /* @__PURE__ */ jsx23(AuthOwlBadge, { force: showBadge })
+    !renderable && /* @__PURE__ */ jsx24("p", { className: "ba-muted", children: publicSignupAllowed && methods.length > 0 ? t("signUp.empty.unsupported") : t("signUp.empty.none") }),
+    /* @__PURE__ */ jsx24(AuthOwlBadge, { force: showBadge })
   ] });
 }
 
 // src/components/ConsentGate.tsx
-import { Fragment as Fragment6, jsx as jsx24, jsxs as jsxs22 } from "react/jsx-runtime";
+import { Fragment as Fragment6, jsx as jsx25, jsxs as jsxs23 } from "react/jsx-runtime";
 function ConsentGate({ children, title }) {
   const t = useT();
   const { needsConsent, status, accept } = useConsent();
   const { pending, error, run } = useSubmitAction();
-  if (!needsConsent) return /* @__PURE__ */ jsx24(Fragment6, { children });
-  return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "consent-gate", children: [
-    /* @__PURE__ */ jsx24("h2", { className: "ba-title", children: title ?? t("consent.gateTitle") }),
-    /* @__PURE__ */ jsx24("p", { className: "ba-muted", children: richMessage(t("consent.gateBody"), {
-      links: /* @__PURE__ */ jsx24(ConsentDocLinks, { termsUrl: status?.termsUrl, privacyUrl: status?.privacyUrl })
+  if (!needsConsent) return /* @__PURE__ */ jsx25(Fragment6, { children });
+  return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "consent-gate", children: [
+    /* @__PURE__ */ jsx25("h2", { className: "ba-title", children: title ?? t("consent.gateTitle") }),
+    /* @__PURE__ */ jsx25("p", { className: "ba-muted", children: richMessage(t("consent.gateBody"), {
+      links: /* @__PURE__ */ jsx25(ConsentDocLinks, { termsUrl: status?.termsUrl, privacyUrl: status?.privacyUrl })
     }) }),
-    /* @__PURE__ */ jsx24(FormError, { children: error }),
-    /* @__PURE__ */ jsx24(
+    /* @__PURE__ */ jsx25(FormError, { children: error }),
+    /* @__PURE__ */ jsx25(
       "button",
       {
         className: "ba-button",
@@ -2300,28 +2312,28 @@ function ConsentGate({ children, title }) {
           },
           { failure: t("consent.error.acceptFailed") }
         ),
-        children: /* @__PURE__ */ jsx24(Busy, { busy: pending, label: t("consent.acceptPending"), children: t("consent.acceptSubmit") })
+        children: /* @__PURE__ */ jsx25(Busy, { busy: pending, label: t("consent.acceptPending"), children: t("consent.acceptSubmit") })
       }
     ),
-    /* @__PURE__ */ jsx24(AuthOwlBadge, {})
+    /* @__PURE__ */ jsx25(AuthOwlBadge, {})
   ] });
 }
 
 // src/components/MFARequiredGate.tsx
-import { Fragment as Fragment7, jsx as jsx25, jsxs as jsxs23 } from "react/jsx-runtime";
+import { Fragment as Fragment7, jsx as jsx26, jsxs as jsxs24 } from "react/jsx-runtime";
 function MFARequiredGate({ children, title }) {
   const state = useConfirmedMfaPending();
-  if (state === "clear") return /* @__PURE__ */ jsx25(Fragment7, { children });
+  if (state === "clear") return /* @__PURE__ */ jsx26(Fragment7, { children });
   if (state === "confirming") return null;
-  return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "mfa-required-gate", children: [
-    /* @__PURE__ */ jsx25(MfaEnrollmentStep, { title }),
-    /* @__PURE__ */ jsx25(AuthOwlBadge, {})
+  return /* @__PURE__ */ jsxs24("div", { className: "ba-form", "data-testid": "mfa-required-gate", children: [
+    /* @__PURE__ */ jsx26(MfaEnrollmentStep, { title }),
+    /* @__PURE__ */ jsx26(AuthOwlBadge, {})
   ] });
 }
 
 // src/components/BackupCodesManager.tsx
 import * as React18 from "react";
-import { Fragment as Fragment8, jsx as jsx26, jsxs as jsxs24 } from "react/jsx-runtime";
+import { Fragment as Fragment8, jsx as jsx27, jsxs as jsxs25 } from "react/jsx-runtime";
 function BackupCodesManager({ title }) {
   const t = useT();
   const { user } = useUser();
@@ -2340,20 +2352,20 @@ function BackupCodesManager({ title }) {
       }
     });
   };
-  return /* @__PURE__ */ jsxs24("div", { className: "ba-form", "data-testid": "backup-codes-manager", children: [
-    title !== null && /* @__PURE__ */ jsx26("h2", { className: "ba-title", children: title ?? t("backupCodes.title") }),
-    /* @__PURE__ */ jsx26("p", { className: "ba-muted", children: t("backupCodes.hint") }),
-    codes ? /* @__PURE__ */ jsxs24(Fragment8, { children: [
-      /* @__PURE__ */ jsxs24("p", { className: "ba-muted", children: [
-        /* @__PURE__ */ jsx26("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
+  return /* @__PURE__ */ jsxs25("div", { className: "ba-form", "data-testid": "backup-codes-manager", children: [
+    title !== null && /* @__PURE__ */ jsx27("h2", { className: "ba-title", children: title ?? t("backupCodes.title") }),
+    /* @__PURE__ */ jsx27("p", { className: "ba-muted", children: t("backupCodes.hint") }),
+    codes ? /* @__PURE__ */ jsxs25(Fragment8, { children: [
+      /* @__PURE__ */ jsxs25("p", { className: "ba-muted", children: [
+        /* @__PURE__ */ jsx27("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
         " ",
         t("mfa.enroll.backupCodesWarningRest")
       ] }),
-      /* @__PURE__ */ jsx26("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ jsx26("li", { className: "ba-passkey-item", children: /* @__PURE__ */ jsx26("code", { children: /* @__PURE__ */ jsx26("bdi", { children: c }) }) }, c)) })
-    ] }) : /* @__PURE__ */ jsxs24("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs24("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsx27("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ jsx27("li", { className: "ba-passkey-item", children: /* @__PURE__ */ jsx27("code", { children: /* @__PURE__ */ jsx27("bdi", { children: c }) }) }, c)) })
+    ] }) : /* @__PURE__ */ jsxs25("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs25("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ jsx26(
+        /* @__PURE__ */ jsx27(
           "input",
           {
             className: "ba-input",
@@ -2365,15 +2377,15 @@ function BackupCodesManager({ title }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx26(FormError, { children: error }),
-      /* @__PURE__ */ jsx26("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx26(Busy, { busy: pending, label: t("backupCodes.pending"), children: t("backupCodes.submit") }) })
+      /* @__PURE__ */ jsx27(FormError, { children: error }),
+      /* @__PURE__ */ jsx27("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx27(Busy, { busy: pending, label: t("backupCodes.pending"), children: t("backupCodes.submit") }) })
     ] })
   ] });
 }
 
 // src/components/MagicLinkForm.tsx
 import * as React19 from "react";
-import { jsx as jsx27, jsxs as jsxs25 } from "react/jsx-runtime";
+import { jsx as jsx28, jsxs as jsxs26 } from "react/jsx-runtime";
 function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const t = useT();
   const { signInMagicLink } = useSignIn();
@@ -2382,9 +2394,9 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const [email, setEmail] = React19.useState("");
   const [sent, setSent] = React19.useState(false);
   if (sent) {
-    return /* @__PURE__ */ jsx27("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
+    return /* @__PURE__ */ jsx28("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
   }
-  return /* @__PURE__ */ jsxs25(
+  return /* @__PURE__ */ jsxs26(
     "form",
     {
       method: "post",
@@ -2398,9 +2410,9 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
       className: "ba-fields",
       "data-testid": "magiclink-form",
       children: [
-        /* @__PURE__ */ jsxs25("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs26("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ jsx27(
+          /* @__PURE__ */ jsx28(
             "input",
             {
               className: "ba-input",
@@ -2413,15 +2425,15 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ jsx27(FormError, { children: error }),
-        /* @__PURE__ */ jsx27(
+        /* @__PURE__ */ jsx28(FormError, { children: error }),
+        /* @__PURE__ */ jsx28(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx27(Busy, { busy: pending, label: t("common.sending"), children: t("magicLink.submit") })
+            children: /* @__PURE__ */ jsx28(Busy, { busy: pending, label: t("common.sending"), children: t("magicLink.submit") })
           }
         )
       ]
@@ -2431,7 +2443,7 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
 
 // src/components/EmailOtpForm.tsx
 import * as React20 from "react";
-import { jsx as jsx28, jsxs as jsxs26 } from "react/jsx-runtime";
+import { jsx as jsx29, jsxs as jsxs27 } from "react/jsx-runtime";
 function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const t = useT();
   const { sessionStore } = useAuthClient();
@@ -2442,7 +2454,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const [otp, setOtp] = React20.useState("");
   const [stage, setStage] = React20.useState("email");
   if (stage === "code") {
-    return /* @__PURE__ */ jsx28(
+    return /* @__PURE__ */ jsx29(
       OtpCodeForm,
       {
         email,
@@ -2465,7 +2477,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
       }
     );
   }
-  return /* @__PURE__ */ jsxs26(
+  return /* @__PURE__ */ jsxs27(
     "form",
     {
       method: "post",
@@ -2479,9 +2491,9 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
       className: "ba-fields",
       "data-testid": "emailotp-email",
       children: [
-        /* @__PURE__ */ jsxs26("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs27("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx29(
             "input",
             {
               className: "ba-input",
@@ -2497,15 +2509,15 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ jsx28(FormError, { children: error }),
-        /* @__PURE__ */ jsx28(
+        /* @__PURE__ */ jsx29(FormError, { children: error }),
+        /* @__PURE__ */ jsx29(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx28(Busy, { busy: pending, label: t("common.sending"), children: t("emailOtp.requestSubmit") })
+            children: /* @__PURE__ */ jsx29(Busy, { busy: pending, label: t("common.sending"), children: t("emailOtp.requestSubmit") })
           }
         )
       ]
@@ -2515,7 +2527,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
 
 // src/components/ResetPassword.tsx
 import * as React21 from "react";
-import { jsx as jsx29, jsxs as jsxs27 } from "react/jsx-runtime";
+import { jsx as jsx30, jsxs as jsxs28 } from "react/jsx-runtime";
 function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
   const t = useT();
   const { resetPassword } = usePasswordReset();
@@ -2535,15 +2547,15 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
     setReady(true);
   }, [tokenProp]);
   if (!ready) {
-    return /* @__PURE__ */ jsx29("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx29("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ jsx30("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx30("div", { className: "ba-skeleton" }) });
   }
   if (!token) {
-    return /* @__PURE__ */ jsx29(FormError, { "data-testid": "reset-invalid", children: t("resetPassword.invalidLink") });
+    return /* @__PURE__ */ jsx30(FormError, { "data-testid": "reset-invalid", children: t("resetPassword.invalidLink") });
   }
   if (done) {
-    return /* @__PURE__ */ jsx29("p", { className: "ba-muted", "data-testid": "reset-done", children: t("resetPassword.done") });
+    return /* @__PURE__ */ jsx30("p", { className: "ba-muted", "data-testid": "reset-done", children: t("resetPassword.done") });
   }
-  return /* @__PURE__ */ jsxs27(
+  return /* @__PURE__ */ jsxs28(
     "form",
     {
       method: "post",
@@ -2569,9 +2581,9 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
         });
       },
       children: [
-        /* @__PURE__ */ jsxs27("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs28("label", { className: "ba-label", children: [
           t("resetPassword.newPasswordLabel"),
-          /* @__PURE__ */ jsx29(
+          /* @__PURE__ */ jsx30(
             "input",
             {
               className: "ba-input",
@@ -2588,9 +2600,9 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
             }
           )
         ] }),
-        /* @__PURE__ */ jsxs27("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs28("label", { className: "ba-label", children: [
           t("resetPassword.confirmPasswordLabel"),
-          /* @__PURE__ */ jsx29(
+          /* @__PURE__ */ jsx30(
             "input",
             {
               className: "ba-input",
@@ -2607,8 +2619,8 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
             }
           )
         ] }),
-        /* @__PURE__ */ jsx29(FormError, { children: error }),
-        /* @__PURE__ */ jsx29("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx29(Busy, { busy: pending, label: t("resetPassword.submitPending"), children: t("resetPassword.submit") }) })
+        /* @__PURE__ */ jsx30(FormError, { children: error }),
+        /* @__PURE__ */ jsx30("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx30(Busy, { busy: pending, label: t("resetPassword.submitPending"), children: t("resetPassword.submit") }) })
       ]
     }
   );
@@ -2616,7 +2628,7 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
 
 // src/components/VerifyEmail.tsx
 import * as React22 from "react";
-import { Fragment as Fragment9, jsx as jsx30, jsxs as jsxs28 } from "react/jsx-runtime";
+import { Fragment as Fragment9, jsx as jsx31, jsxs as jsxs29 } from "react/jsx-runtime";
 function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
   const t = useT();
   const { sendVerificationEmail } = useEmailVerification();
@@ -2636,12 +2648,12 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
     }
   }, [onVerified, redirectTo]);
   if (!ready) {
-    return /* @__PURE__ */ jsx30("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx30("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ jsx31("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx31("div", { className: "ba-skeleton" }) });
   }
   if (!failed) {
-    return /* @__PURE__ */ jsx30("p", { className: "ba-muted", "data-testid": "verify-success", children: t("verifyEmail.success") });
+    return /* @__PURE__ */ jsx31("p", { className: "ba-muted", "data-testid": "verify-success", children: t("verifyEmail.success") });
   }
-  return /* @__PURE__ */ jsxs28(
+  return /* @__PURE__ */ jsxs29(
     "form",
     {
       method: "post",
@@ -2656,11 +2668,11 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
         });
       },
       children: [
-        /* @__PURE__ */ jsx30(FormError, { children: t("verifyEmail.invalidLink") }),
-        resent ? /* @__PURE__ */ jsx30("p", { className: "ba-muted", children: richMessage(t("verifyEmail.resent"), { email: /* @__PURE__ */ jsx30(Bidi, { children: email }) }) }) : /* @__PURE__ */ jsxs28(Fragment9, { children: [
-          /* @__PURE__ */ jsxs28("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsx31(FormError, { children: t("verifyEmail.invalidLink") }),
+        resent ? /* @__PURE__ */ jsx31("p", { className: "ba-muted", children: richMessage(t("verifyEmail.resent"), { email: /* @__PURE__ */ jsx31(Bidi, { children: email }) }) }) : /* @__PURE__ */ jsxs29(Fragment9, { children: [
+          /* @__PURE__ */ jsxs29("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ jsx30(
+            /* @__PURE__ */ jsx31(
               "input",
               {
                 className: "ba-input",
@@ -2673,15 +2685,15 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ jsx30(FormError, { children: error }),
-          /* @__PURE__ */ jsx30(
+          /* @__PURE__ */ jsx31(FormError, { children: error }),
+          /* @__PURE__ */ jsx31(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || authChallenge.configPending,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ jsx30(Busy, { busy: pending, label: t("common.sending"), children: t("verifyEmail.resendSubmit") })
+              children: /* @__PURE__ */ jsx31(Busy, { busy: pending, label: t("common.sending"), children: t("verifyEmail.resendSubmit") })
             }
           )
         ] })
@@ -2692,17 +2704,17 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
 
 // src/components/PasskeyManager.tsx
 import * as React23 from "react";
-import { jsx as jsx31, jsxs as jsxs29 } from "react/jsx-runtime";
+import { jsx as jsx32, jsxs as jsxs30 } from "react/jsx-runtime";
 function PasskeyManager({ title, allowAdd = true } = {}) {
   const t = useT();
   const { user, isLoaded, isSignedIn } = useUser();
   if (!isLoaded) {
-    return /* @__PURE__ */ jsx31("div", { className: "ba-form", "data-testid": "passkey-manager-loading", "aria-busy": "true", children: /* @__PURE__ */ jsx31("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ jsx32("div", { className: "ba-form", "data-testid": "passkey-manager-loading", "aria-busy": "true", children: /* @__PURE__ */ jsx32("div", { className: "ba-skeleton" }) });
   }
   if (!isSignedIn || !user) {
-    return /* @__PURE__ */ jsx31("p", { className: "ba-muted", children: t("passkeys.signedOut") });
+    return /* @__PURE__ */ jsx32("p", { className: "ba-muted", children: t("passkeys.signedOut") });
   }
-  return /* @__PURE__ */ jsx31(PasskeyManagerBody, { title, allowAdd }, user.id);
+  return /* @__PURE__ */ jsx32(PasskeyManagerBody, { title, allowAdd }, user.id);
 }
 function PasskeyManagerBody({
   title,
@@ -2751,13 +2763,13 @@ function PasskeyManagerBody({
       onSuccess: load
     });
   }
-  return /* @__PURE__ */ jsxs29("div", { className: "ba-form", "data-testid": "passkey-manager", children: [
-    title !== null && /* @__PURE__ */ jsx31("h2", { className: "ba-title", children: title ?? t("passkeys.title") }),
-    passkeys === null ? error ? null : /* @__PURE__ */ jsx31("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs29("ul", { className: "ba-passkey-list", children: [
-      (passkeys ?? []).map((pk) => /* @__PURE__ */ jsxs29("li", { className: "ba-passkey-item", children: [
-        /* @__PURE__ */ jsx31("span", { className: "ba-passkey-name", children: pk.name?.trim() || t("passkeys.unnamed") }),
-        /* @__PURE__ */ jsxs29("span", { className: "ba-passkey-actions", children: [
-          /* @__PURE__ */ jsx31(
+  return /* @__PURE__ */ jsxs30("div", { className: "ba-form", "data-testid": "passkey-manager", children: [
+    title !== null && /* @__PURE__ */ jsx32("h2", { className: "ba-title", children: title ?? t("passkeys.title") }),
+    passkeys === null ? error ? null : /* @__PURE__ */ jsx32("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs30("ul", { className: "ba-passkey-list", children: [
+      (passkeys ?? []).map((pk) => /* @__PURE__ */ jsxs30("li", { className: "ba-passkey-item", children: [
+        /* @__PURE__ */ jsx32("span", { className: "ba-passkey-name", children: pk.name?.trim() || t("passkeys.unnamed") }),
+        /* @__PURE__ */ jsxs30("span", { className: "ba-passkey-actions", children: [
+          /* @__PURE__ */ jsx32(
             "button",
             {
               type: "button",
@@ -2767,7 +2779,7 @@ function PasskeyManagerBody({
               children: t("passkeys.rename")
             }
           ),
-          /* @__PURE__ */ jsx31(
+          /* @__PURE__ */ jsx32(
             "button",
             {
               type: "button",
@@ -2779,13 +2791,13 @@ function PasskeyManagerBody({
           )
         ] })
       ] }, pk.id)),
-      passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ jsx31("li", { className: "ba-muted", children: t("passkeys.empty") })
+      passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ jsx32("li", { className: "ba-muted", children: t("passkeys.empty") })
     ] }),
-    error && /* @__PURE__ */ jsxs29("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ jsx31(FormError, { children: error }),
-      passkeys === null && /* @__PURE__ */ jsx31("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("userProfile.retry") })
+    error && /* @__PURE__ */ jsxs30("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ jsx32(FormError, { children: error }),
+      passkeys === null && /* @__PURE__ */ jsx32("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("userProfile.retry") })
     ] }),
-    passkeys !== null && allowAdd && /* @__PURE__ */ jsx31(
+    passkeys !== null && allowAdd && /* @__PURE__ */ jsx32(
       "button",
       {
         className: "ba-button",
@@ -2796,7 +2808,7 @@ function PasskeyManagerBody({
           failure: t("passkeys.error.addFailed"),
           onSuccess: load
         }),
-        children: /* @__PURE__ */ jsx31(Busy, { busy: pending, label: t("common.working"), children: t("passkeys.add") })
+        children: /* @__PURE__ */ jsx32(Busy, { busy: pending, label: t("common.working"), children: t("passkeys.add") })
       }
     )
   ] });
@@ -2804,14 +2816,14 @@ function PasskeyManagerBody({
 
 // src/components/control.tsx
 import { membershipHas } from "@authowl/core";
-import { Fragment as Fragment10, jsx as jsx32, jsxs as jsxs30 } from "react/jsx-runtime";
+import { Fragment as Fragment10, jsx as jsx33, jsxs as jsxs31 } from "react/jsx-runtime";
 function SignedIn({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && isSignedIn ? /* @__PURE__ */ jsx32(Fragment10, { children }) : null;
+  return isLoaded && isSignedIn ? /* @__PURE__ */ jsx33(Fragment10, { children }) : null;
 }
 function SignedOut({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && !isSignedIn ? /* @__PURE__ */ jsx32(Fragment10, { children }) : null;
+  return isLoaded && !isSignedIn ? /* @__PURE__ */ jsx33(Fragment10, { children }) : null;
 }
 function Protect({
   children,
@@ -2824,36 +2836,36 @@ function Protect({
   const { user, isLoaded, isSignedIn } = useUser();
   const membership = useSession().data?.session?.membership ?? null;
   if (!isLoaded) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ jsx32(Fragment10, { children: fallback });
+  if (!isSignedIn || !user) return /* @__PURE__ */ jsx33(Fragment10, { children: fallback });
   if ((role !== void 0 || permission !== void 0 || teamId !== void 0) && !membershipHas(membership, { role, permission, teamId })) {
-    return /* @__PURE__ */ jsx32(Fragment10, { children: fallback });
+    return /* @__PURE__ */ jsx33(Fragment10, { children: fallback });
   }
-  if (condition && !condition(user)) return /* @__PURE__ */ jsx32(Fragment10, { children: fallback });
-  return /* @__PURE__ */ jsx32(Fragment10, { children });
+  if (condition && !condition(user)) return /* @__PURE__ */ jsx33(Fragment10, { children: fallback });
+  return /* @__PURE__ */ jsx33(Fragment10, { children });
 }
 function AuthLoading({ children }) {
   const t = useT();
   const { isLoaded } = useUser();
   if (isLoaded) return null;
-  if (children !== void 0) return /* @__PURE__ */ jsx32(Fragment10, { children });
-  return /* @__PURE__ */ jsxs30("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
-    /* @__PURE__ */ jsx32(Spinner, {}),
-    /* @__PURE__ */ jsx32("span", { className: "ba-sr-only", children: t("common.loading") })
+  if (children !== void 0) return /* @__PURE__ */ jsx33(Fragment10, { children });
+  return /* @__PURE__ */ jsxs31("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
+    /* @__PURE__ */ jsx33(Spinner, {}),
+    /* @__PURE__ */ jsx33("span", { className: "ba-sr-only", children: t("common.loading") })
   ] });
 }
 function AuthLoaded({ children }) {
-  return useUser().isLoaded ? /* @__PURE__ */ jsx32(Fragment10, { children }) : null;
+  return useUser().isLoaded ? /* @__PURE__ */ jsx33(Fragment10, { children }) : null;
 }
 
 // src/components/SignOutButton.tsx
 import * as React24 from "react";
-import { jsx as jsx33 } from "react/jsx-runtime";
+import { jsx as jsx34 } from "react/jsx-runtime";
 function SignOutButton({ children, redirectTo, onSignedOut, className }) {
   const t = useT();
   const { signOut } = useSignOut();
   const [pending, setPending] = React24.useState(false);
   const content = children ?? t("signOut.button");
-  return /* @__PURE__ */ jsx33(
+  return /* @__PURE__ */ jsx34(
     "button",
     {
       type: "button",
@@ -2871,7 +2883,7 @@ function SignOutButton({ children, redirectTo, onSignedOut, className }) {
           setPending(false);
         }
       },
-      children: /* @__PURE__ */ jsx33(Busy, { busy: pending, label: content, children: content })
+      children: /* @__PURE__ */ jsx34(Busy, { busy: pending, label: content, children: content })
     }
   );
 }
@@ -2884,7 +2896,7 @@ import * as React36 from "react";
 
 // src/components/user-profile/EmailSection.tsx
 import * as React25 from "react";
-import { jsx as jsx34, jsxs as jsxs31 } from "react/jsx-runtime";
+import { jsx as jsx35, jsxs as jsxs32 } from "react/jsx-runtime";
 function EmailSection({ allowChange }) {
   const t = useT();
   const account = useAccount();
@@ -2894,9 +2906,9 @@ function EmailSection({ allowChange }) {
   const [sent, setSent] = React25.useState(false);
   const titleId = React25.useId();
   if (!user?.email) {
-    return /* @__PURE__ */ jsxs31("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ jsx34("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ jsx34("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
+    return /* @__PURE__ */ jsxs32("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ jsx35("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ jsx35("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
     ] });
   }
   const submit = (event) => {
@@ -2916,19 +2928,19 @@ function EmailSection({ allowChange }) {
       }
     );
   };
-  return /* @__PURE__ */ jsxs31("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs31("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx34("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ jsx34("p", { className: "ba-muted", children: t("userProfile.email.description") })
+  return /* @__PURE__ */ jsxs32("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs32("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx35("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ jsx35("p", { className: "ba-muted", children: t("userProfile.email.description") })
     ] }),
-    /* @__PURE__ */ jsxs31("p", { className: "ba-profile-current", children: [
-      /* @__PURE__ */ jsx34("span", { children: t("userProfile.email.current") }),
-      /* @__PURE__ */ jsx34("strong", { children: /* @__PURE__ */ jsx34(Bidi, { children: user.email }) })
+    /* @__PURE__ */ jsxs32("p", { className: "ba-profile-current", children: [
+      /* @__PURE__ */ jsx35("span", { children: t("userProfile.email.current") }),
+      /* @__PURE__ */ jsx35("strong", { children: /* @__PURE__ */ jsx35(Bidi, { children: user.email }) })
     ] }),
-    !allowChange ? /* @__PURE__ */ jsx34("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ jsxs31("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs31("label", { className: "ba-label", children: [
+    !allowChange ? /* @__PURE__ */ jsx35("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ jsxs32("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs32("label", { className: "ba-label", children: [
         t("userProfile.email.newLabel"),
-        /* @__PURE__ */ jsx34(
+        /* @__PURE__ */ jsx35(
           "input",
           {
             className: "ba-input",
@@ -2940,16 +2952,16 @@ function EmailSection({ allowChange }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx34(FormError, { children: error }),
-      sent && /* @__PURE__ */ jsx34("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
-      /* @__PURE__ */ jsx34(
+      /* @__PURE__ */ jsx35(FormError, { children: error }),
+      sent && /* @__PURE__ */ jsx35("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
+      /* @__PURE__ */ jsx35(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !newEmail.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx34(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
+          children: /* @__PURE__ */ jsx35(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
         }
       )
     ] })
@@ -2958,7 +2970,7 @@ function EmailSection({ allowChange }) {
 
 // src/components/user-profile/DeleteAccountSection.tsx
 import * as React26 from "react";
-import { jsx as jsx35, jsxs as jsxs32 } from "react/jsx-runtime";
+import { jsx as jsx36, jsxs as jsxs33 } from "react/jsx-runtime";
 function DeleteAccountSection({ onDeleted }) {
   const t = useT();
   const account = useAccount();
@@ -2983,18 +2995,18 @@ function DeleteAccountSection({ onDeleted }) {
       }
     );
   };
-  return /* @__PURE__ */ jsxs32("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs32("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx35("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
-      /* @__PURE__ */ jsx35("p", { className: "ba-muted", children: t("userProfile.delete.description") })
+  return /* @__PURE__ */ jsxs33("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs33("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx36("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
+      /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: t("userProfile.delete.description") })
     ] }),
-    /* @__PURE__ */ jsxs32("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsx35("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
-      /* @__PURE__ */ jsxs32("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs33("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsx36("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
+      /* @__PURE__ */ jsxs33("label", { className: "ba-label", children: [
         t("userProfile.delete.confirmLabel"),
         " ",
-        /* @__PURE__ */ jsx35(Bidi, { children: identifier }),
-        /* @__PURE__ */ jsx35(
+        /* @__PURE__ */ jsx36(Bidi, { children: identifier }),
+        /* @__PURE__ */ jsx36(
           "input",
           {
             className: "ba-input",
@@ -3008,15 +3020,15 @@ function DeleteAccountSection({ onDeleted }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx35(FormError, { children: error }),
-      /* @__PURE__ */ jsx35(
+      /* @__PURE__ */ jsx36(FormError, { children: error }),
+      /* @__PURE__ */ jsx36(
         "button",
         {
           className: "ba-button ba-danger-button ba-profile-submit",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx35(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
+          children: /* @__PURE__ */ jsx36(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
         }
       )
     ] })
@@ -3025,7 +3037,7 @@ function DeleteAccountSection({ onDeleted }) {
 
 // src/components/user-profile/MfaSection.tsx
 import * as React27 from "react";
-import { jsx as jsx36, jsxs as jsxs33 } from "react/jsx-runtime";
+import { jsx as jsx37, jsxs as jsxs34 } from "react/jsx-runtime";
 function MfaSection() {
   const t = useT();
   const { user } = useUser();
@@ -3038,12 +3050,12 @@ function MfaSection() {
   const titleId = React27.useId();
   const required = resolveProjectCapabilities(config).mfaRequired;
   if (!user?.twoFactorEnabled) {
-    return /* @__PURE__ */ jsxs33("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ jsxs33("header", { className: "ba-profile-section-header", children: [
-        /* @__PURE__ */ jsx36("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-        /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
+    return /* @__PURE__ */ jsxs34("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ jsxs34("header", { className: "ba-profile-section-header", children: [
+        /* @__PURE__ */ jsx37("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+        /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
       ] }),
-      /* @__PURE__ */ jsx36(
+      /* @__PURE__ */ jsx37(
         MFAEnrollment,
         {
           title: null,
@@ -3066,16 +3078,16 @@ function MfaSection() {
       }
     );
   };
-  return /* @__PURE__ */ jsxs33("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs33("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx36("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-      /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
+  return /* @__PURE__ */ jsxs34("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs34("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx37("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+      /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
     ] }),
-    /* @__PURE__ */ jsxs33("div", { className: "ba-profile-status", role: "status", children: [
-      /* @__PURE__ */ jsx36("strong", { children: t("userProfile.mfa.enabled") }),
-      /* @__PURE__ */ jsx36("span", { children: t("userProfile.mfa.authenticator") })
+    /* @__PURE__ */ jsxs34("div", { className: "ba-profile-status", role: "status", children: [
+      /* @__PURE__ */ jsx37("strong", { children: t("userProfile.mfa.enabled") }),
+      /* @__PURE__ */ jsx37("span", { children: t("userProfile.mfa.authenticator") })
     ] }),
-    !showDisable ? /* @__PURE__ */ jsx36(
+    !showDisable ? /* @__PURE__ */ jsx37(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -3083,11 +3095,11 @@ function MfaSection() {
         onClick: () => setShowDisable(true),
         children: required ? t("userProfile.mfa.replace") : t("userProfile.mfa.disable")
       }
-    ) : /* @__PURE__ */ jsxs33("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
-      /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
-      /* @__PURE__ */ jsxs33("label", { className: "ba-label", children: [
+    ) : /* @__PURE__ */ jsxs34("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
+      /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
+      /* @__PURE__ */ jsxs34("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ jsx36(
+        /* @__PURE__ */ jsx37(
           "input",
           {
             className: "ba-input",
@@ -3099,19 +3111,19 @@ function MfaSection() {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx36(FormError, { children: error }),
-      /* @__PURE__ */ jsxs33("span", { className: "ba-profile-action-row", children: [
-        /* @__PURE__ */ jsx36(
+      /* @__PURE__ */ jsx37(FormError, { children: error }),
+      /* @__PURE__ */ jsxs34("span", { className: "ba-profile-action-row", children: [
+        /* @__PURE__ */ jsx37(
           "button",
           {
             className: "ba-button ba-danger-button",
             type: "submit",
             disabled: pending || !password,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx36(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
+            children: /* @__PURE__ */ jsx37(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
           }
         ),
-        /* @__PURE__ */ jsx36(
+        /* @__PURE__ */ jsx37(
           "button",
           {
             className: "ba-button ba-button-secondary",
@@ -3131,7 +3143,7 @@ function MfaSection() {
 
 // src/components/user-profile/PasswordSection.tsx
 import * as React28 from "react";
-import { jsx as jsx37, jsxs as jsxs34 } from "react/jsx-runtime";
+import { jsx as jsx38, jsxs as jsxs35 } from "react/jsx-runtime";
 function PasswordSection() {
   const t = useT();
   const account = useAccount();
@@ -3167,43 +3179,43 @@ function PasswordSection() {
       }
     );
   };
-  return /* @__PURE__ */ jsxs34("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs34("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx37("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
-      /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: t("userProfile.password.description") })
+  return /* @__PURE__ */ jsxs35("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs35("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx38("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
+      /* @__PURE__ */ jsx38("p", { className: "ba-muted", children: t("userProfile.password.description") })
     ] }),
-    /* @__PURE__ */ jsxs34("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs34("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs35("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
         t("userProfile.password.currentLabel"),
-        /* @__PURE__ */ jsx37("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
+        /* @__PURE__ */ jsx38("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
           setCurrentPassword(event.target.value);
           setError(null);
         }, required: true })
       ] }),
-      /* @__PURE__ */ jsxs34("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
         t("resetPassword.newPasswordLabel"),
-        /* @__PURE__ */ jsx37("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
+        /* @__PURE__ */ jsx38("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
           setNewPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ jsxs34("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
         t("resetPassword.confirmPasswordLabel"),
-        /* @__PURE__ */ jsx37("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
+        /* @__PURE__ */ jsx38("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
           setConfirmPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ jsx37(FormError, { children: error }),
-      saved && /* @__PURE__ */ jsx37("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
-      /* @__PURE__ */ jsx37(
+      /* @__PURE__ */ jsx38(FormError, { children: error }),
+      saved && /* @__PURE__ */ jsx38("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
+      /* @__PURE__ */ jsx38(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !currentPassword || !newPassword || !confirmPassword,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx37(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
+          children: /* @__PURE__ */ jsx38(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
         }
       )
     ] })
@@ -3212,22 +3224,22 @@ function PasswordSection() {
 
 // src/components/user-profile/PasskeysSection.tsx
 import * as React29 from "react";
-import { jsx as jsx38, jsxs as jsxs35 } from "react/jsx-runtime";
+import { jsx as jsx39, jsxs as jsxs36 } from "react/jsx-runtime";
 function PasskeysSection({ allowAdd }) {
   const t = useT();
   const titleId = React29.useId();
-  return /* @__PURE__ */ jsxs35("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs35("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx38("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
-      /* @__PURE__ */ jsx38("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
+  return /* @__PURE__ */ jsxs36("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs36("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx39("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
+      /* @__PURE__ */ jsx39("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
     ] }),
-    /* @__PURE__ */ jsx38(PasskeyManager, { title: null, allowAdd })
+    /* @__PURE__ */ jsx39(PasskeyManager, { title: null, allowAdd })
   ] });
 }
 
 // src/components/user-profile/ProfileSection.tsx
 import * as React30 from "react";
-import { Fragment as Fragment11, jsx as jsx39, jsxs as jsxs36 } from "react/jsx-runtime";
+import { Fragment as Fragment11, jsx as jsx40, jsxs as jsxs37 } from "react/jsx-runtime";
 function ProfileSection({
   firstLastName,
   usernameEnabled,
@@ -3269,15 +3281,15 @@ function ProfileSection({
       }
     );
   };
-  return /* @__PURE__ */ jsxs36("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs36("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx39("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
-      /* @__PURE__ */ jsx39("p", { className: "ba-muted", children: t("userProfile.profile.description") })
+  return /* @__PURE__ */ jsxs37("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs37("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx40("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
+      /* @__PURE__ */ jsx40("p", { className: "ba-muted", children: t("userProfile.profile.description") })
     ] }),
-    /* @__PURE__ */ jsxs36("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      legacyNameField && /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs37("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      legacyNameField && /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ jsx39(
+        /* @__PURE__ */ jsx40(
           "input",
           {
             className: "ba-input",
@@ -3288,10 +3300,10 @@ function ProfileSection({
           }
         )
       ] }),
-      firstLastName && /* @__PURE__ */ jsxs36(Fragment11, { children: [
-        /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
+      firstLastName && /* @__PURE__ */ jsxs37(Fragment11, { children: [
+        /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ jsx39(
+          /* @__PURE__ */ jsx40(
             "input",
             {
               className: "ba-input",
@@ -3301,9 +3313,9 @@ function ProfileSection({
             }
           )
         ] }),
-        /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ jsx39(
+          /* @__PURE__ */ jsx40(
             "input",
             {
               className: "ba-input",
@@ -3314,9 +3326,9 @@ function ProfileSection({
           )
         ] })
       ] }),
-      usernameEnabled && /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
+      usernameEnabled && /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ jsx39(
+        /* @__PURE__ */ jsx40(
           "input",
           {
             className: "ba-input",
@@ -3326,9 +3338,9 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
         t("userProfile.profile.imageLabel"),
-        /* @__PURE__ */ jsx39(
+        /* @__PURE__ */ jsx40(
           "input",
           {
             className: "ba-input",
@@ -3339,16 +3351,16 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ jsx39(FormError, { children: error }),
-      saved && /* @__PURE__ */ jsx39("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
-      /* @__PURE__ */ jsx39(
+      /* @__PURE__ */ jsx40(FormError, { children: error }),
+      saved && /* @__PURE__ */ jsx40("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
+      /* @__PURE__ */ jsx40(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || legacyNameField && !name.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx39(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
+          children: /* @__PURE__ */ jsx40(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
         }
       )
     ] })
@@ -3357,24 +3369,24 @@ function ProfileSection({
 
 // src/components/user-profile/RecoverySection.tsx
 import * as React31 from "react";
-import { Fragment as Fragment12, jsx as jsx40, jsxs as jsxs37 } from "react/jsx-runtime";
+import { Fragment as Fragment12, jsx as jsx41, jsxs as jsxs38 } from "react/jsx-runtime";
 function RecoverySection() {
   const t = useT();
   const { user } = useUser();
   const titleId = React31.useId();
-  return /* @__PURE__ */ jsxs37("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs37("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx40("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
-      /* @__PURE__ */ jsx40("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
+  return /* @__PURE__ */ jsxs38("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs38("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx41("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
+      /* @__PURE__ */ jsx41("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
     ] }),
-    /* @__PURE__ */ jsxs37("div", { className: "ba-profile-recovery-card", children: [
-      /* @__PURE__ */ jsx40("strong", { children: t("userProfile.recovery.emailTitle") }),
-      user?.email && user.emailVerified ? /* @__PURE__ */ jsxs37(Fragment12, { children: [
-        /* @__PURE__ */ jsx40("p", { children: t("userProfile.recovery.emailDescription") }),
-        /* @__PURE__ */ jsx40(Bidi, { children: user.email })
-      ] }) : /* @__PURE__ */ jsx40("p", { children: t("userProfile.recovery.emailUnavailable") })
+    /* @__PURE__ */ jsxs38("div", { className: "ba-profile-recovery-card", children: [
+      /* @__PURE__ */ jsx41("strong", { children: t("userProfile.recovery.emailTitle") }),
+      user?.email && user.emailVerified ? /* @__PURE__ */ jsxs38(Fragment12, { children: [
+        /* @__PURE__ */ jsx41("p", { children: t("userProfile.recovery.emailDescription") }),
+        /* @__PURE__ */ jsx41(Bidi, { children: user.email })
+      ] }) : /* @__PURE__ */ jsx41("p", { children: t("userProfile.recovery.emailUnavailable") })
     ] }),
-    /* @__PURE__ */ jsx40(BackupCodesManager, { title: null })
+    /* @__PURE__ */ jsx41(BackupCodesManager, { title: null })
   ] });
 }
 
@@ -3427,9 +3439,9 @@ function formatSessionTime(date, locale) {
 
 // src/components/user-profile/use-account-resource.ts
 import * as React32 from "react";
-function useAccountResource(loader2, failure) {
-  const loaderRef = React32.useRef(loader2);
-  loaderRef.current = loader2;
+function useAccountResource(loader, failure) {
+  const loaderRef = React32.useRef(loader);
+  loaderRef.current = loader;
   const failureRef = React32.useRef(failure);
   failureRef.current = failure;
   const toServerError = useServerError();
@@ -3466,7 +3478,7 @@ function useAccountResource(loader2, failure) {
 }
 
 // src/components/user-profile/SessionsSection.tsx
-import { jsx as jsx41, jsxs as jsxs38 } from "react/jsx-runtime";
+import { jsx as jsx42, jsxs as jsxs39 } from "react/jsx-runtime";
 function SessionsSection() {
   const t = useT();
   const locale = useLocale();
@@ -3495,31 +3507,31 @@ function SessionsSection() {
       }
     );
   };
-  return /* @__PURE__ */ jsxs38("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs38("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx41("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
-      /* @__PURE__ */ jsx41("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
+  return /* @__PURE__ */ jsxs39("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs39("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx42("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
+      /* @__PURE__ */ jsx42("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ jsxs38("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
-      /* @__PURE__ */ jsx41("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ jsx41("div", { className: "ba-skeleton" })
-    ] }) : null : /* @__PURE__ */ jsxs38("ul", { className: "ba-profile-list", children: [
+    resource.data === null ? resource.loading ? /* @__PURE__ */ jsxs39("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx42("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ jsx42("div", { className: "ba-skeleton" })
+    ] }) : null : /* @__PURE__ */ jsxs39("ul", { className: "ba-profile-list", children: [
       sessions.map((session) => {
         const label2 = session.userAgent?.trim() || t("userProfile.sessions.unknownDevice");
-        return /* @__PURE__ */ jsxs38("li", { className: "ba-profile-list-item", children: [
-          /* @__PURE__ */ jsxs38("span", { children: [
-            /* @__PURE__ */ jsx41("strong", { children: label2 }),
-            /* @__PURE__ */ jsxs38("small", { children: [
-              session.id === currentId && /* @__PURE__ */ jsx41("em", { children: t("userProfile.sessions.current") }),
+        return /* @__PURE__ */ jsxs39("li", { className: "ba-profile-list-item", children: [
+          /* @__PURE__ */ jsxs39("span", { children: [
+            /* @__PURE__ */ jsx42("strong", { children: label2 }),
+            /* @__PURE__ */ jsxs39("small", { children: [
+              session.id === currentId && /* @__PURE__ */ jsx42("em", { children: t("userProfile.sessions.current") }),
               formatSessionTime(session.updatedAt, locale)
             ] })
           ] }),
-          /* @__PURE__ */ jsx41("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
+          /* @__PURE__ */ jsx42("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
         ] }, session.id);
       }),
-      sessions.length === 0 && /* @__PURE__ */ jsx41("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
+      sessions.length === 0 && /* @__PURE__ */ jsx42("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
     ] }),
-    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ jsx41(
+    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ jsx42(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -3535,17 +3547,17 @@ function SessionsSection() {
         children: t("userProfile.sessions.revokeOthers")
       }
     ),
-    resource.error && /* @__PURE__ */ jsxs38("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ jsx41(FormError, { children: resource.error }),
-      /* @__PURE__ */ jsx41("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ jsxs39("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ jsx42(FormError, { children: resource.error }),
+      /* @__PURE__ */ jsx42("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ jsx41(FormError, { children: mutation.error })
+    /* @__PURE__ */ jsx42(FormError, { children: mutation.error })
   ] });
 }
 
 // src/components/user-profile/SocialSection.tsx
 import * as React34 from "react";
-import { jsx as jsx42, jsxs as jsxs39 } from "react/jsx-runtime";
+import { jsx as jsx43, jsxs as jsxs40 } from "react/jsx-runtime";
 function providerLabel(provider) {
   return provider.charAt(0).toUpperCase() + provider.slice(1);
 }
@@ -3585,18 +3597,18 @@ function SocialSection() {
       { failure: t("userProfile.social.unlinkError"), onSuccess: resource.load }
     );
   };
-  return /* @__PURE__ */ jsxs39("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs39("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx42("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
-      /* @__PURE__ */ jsx42("p", { className: "ba-muted", children: t("userProfile.social.description") })
+  return /* @__PURE__ */ jsxs40("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs40("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx43("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
+      /* @__PURE__ */ jsx43("p", { className: "ba-muted", children: t("userProfile.social.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ jsx42("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ jsx42("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ jsxs39("ul", { className: "ba-profile-list", children: [
-      linked.map((item) => /* @__PURE__ */ jsxs39("li", { className: "ba-profile-list-item", children: [
-        /* @__PURE__ */ jsxs39("span", { children: [
-          /* @__PURE__ */ jsx42("strong", { children: providerLabel(item.providerId) }),
-          /* @__PURE__ */ jsx42("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
+    resource.data === null ? resource.loading ? /* @__PURE__ */ jsx43("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ jsx43("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ jsxs40("ul", { className: "ba-profile-list", children: [
+      linked.map((item) => /* @__PURE__ */ jsxs40("li", { className: "ba-profile-list-item", children: [
+        /* @__PURE__ */ jsxs40("span", { children: [
+          /* @__PURE__ */ jsx43("strong", { children: providerLabel(item.providerId) }),
+          /* @__PURE__ */ jsx43("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
         ] }),
-        /* @__PURE__ */ jsx42(
+        /* @__PURE__ */ jsx43(
           "button",
           {
             className: "ba-link-button ba-danger",
@@ -3611,23 +3623,23 @@ function SocialSection() {
           }
         )
       ] }, item.id)),
-      linked.length === 0 && /* @__PURE__ */ jsx42("li", { className: "ba-muted", children: t("userProfile.social.empty") })
+      linked.length === 0 && /* @__PURE__ */ jsx43("li", { className: "ba-muted", children: t("userProfile.social.empty") })
     ] }),
-    available.length > 0 && /* @__PURE__ */ jsxs39("div", { className: "ba-profile-provider-actions", children: [
-      /* @__PURE__ */ jsx42("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
-      available.map((provider) => /* @__PURE__ */ jsx42("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
+    available.length > 0 && /* @__PURE__ */ jsxs40("div", { className: "ba-profile-provider-actions", children: [
+      /* @__PURE__ */ jsx43("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
+      available.map((provider) => /* @__PURE__ */ jsx43("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
     ] }),
-    resource.error && /* @__PURE__ */ jsxs39("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ jsx42(FormError, { children: resource.error }),
-      /* @__PURE__ */ jsx42("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ jsxs40("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ jsx43(FormError, { children: resource.error }),
+      /* @__PURE__ */ jsx43("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ jsx42(FormError, { children: mutation.error })
+    /* @__PURE__ */ jsx43(FormError, { children: mutation.error })
   ] });
 }
 
 // src/components/user-profile/UserProfileModal.tsx
 import * as React35 from "react";
-import { jsx as jsx43, jsxs as jsxs40 } from "react/jsx-runtime";
+import { jsx as jsx44, jsxs as jsxs41 } from "react/jsx-runtime";
 function UserProfileModal({
   children,
   onClose,
@@ -3635,7 +3647,7 @@ function UserProfileModal({
 }) {
   const t = useT();
   const titleId = React35.useId();
-  return /* @__PURE__ */ jsxs40(
+  return /* @__PURE__ */ jsxs41(
     ModalSurface,
     {
       overlayClassName: "ba-profile-overlay",
@@ -3644,13 +3656,13 @@ function UserProfileModal({
       testId: "user-profile-modal",
       onClose,
       children: [
-        /* @__PURE__ */ jsxs40("div", { className: "ba-profile-modal-header", children: [
-          /* @__PURE__ */ jsxs40("span", { children: [
+        /* @__PURE__ */ jsxs41("div", { className: "ba-profile-modal-header", children: [
+          /* @__PURE__ */ jsxs41("span", { children: [
             branding,
-            /* @__PURE__ */ jsx43("h1", { id: titleId, children: t("userProfile.title") }),
-            /* @__PURE__ */ jsx43("p", { children: t("userProfile.description") })
+            /* @__PURE__ */ jsx44("h1", { id: titleId, children: t("userProfile.title") }),
+            /* @__PURE__ */ jsx44("p", { children: t("userProfile.description") })
           ] }),
-          /* @__PURE__ */ jsx43(
+          /* @__PURE__ */ jsx44(
             "button",
             {
               type: "button",
@@ -3658,7 +3670,7 @@ function UserProfileModal({
               "aria-label": t("userProfile.close"),
               onClick: onClose,
               autoFocus: true,
-              children: /* @__PURE__ */ jsx43("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ jsx43(
+              children: /* @__PURE__ */ jsx44("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ jsx44(
                 "path",
                 {
                   d: "M6 6l12 12M18 6L6 18",
@@ -3671,14 +3683,14 @@ function UserProfileModal({
           )
         ] }),
         children,
-        /* @__PURE__ */ jsx43("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx43(AuthOwlBadge, {}) })
+        /* @__PURE__ */ jsx44("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx44(AuthOwlBadge, {}) })
       ]
     }
   );
 }
 
 // src/components/UserProfile.tsx
-import { jsx as jsx44, jsxs as jsxs41 } from "react/jsx-runtime";
+import { jsx as jsx45, jsxs as jsxs42 } from "react/jsx-runtime";
 var SECTION_KEYS = {
   profile: "userProfile.nav.profile",
   email: "userProfile.nav.email",
@@ -3744,11 +3756,11 @@ function UserProfile(props = {}) {
       window.history.replaceState(null, "", userProfileSectionHash(next));
     }
   };
-  const content = !isLoaded ? /* @__PURE__ */ jsxs41("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
-    /* @__PURE__ */ jsx44("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ jsx44("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ jsx44("div", { className: "ba-skeleton" })
-  ] }) : !isSignedIn || !user ? /* @__PURE__ */ jsx44("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ jsx44(
+  const content = !isLoaded ? /* @__PURE__ */ jsxs42("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
+    /* @__PURE__ */ jsx45("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ jsx45("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ jsx45("div", { className: "ba-skeleton" })
+  ] }) : !isSignedIn || !user ? /* @__PURE__ */ jsx45("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ jsx45(
     UserProfileBody,
     {
       active: visibleActive,
@@ -3760,23 +3772,23 @@ function UserProfile(props = {}) {
     user.id
   );
   if (props.mode === "modal") {
-    return /* @__PURE__ */ jsx44(
+    return /* @__PURE__ */ jsx45(
       UserProfileModal,
       {
         onClose: props.onClose,
-        branding: showBranding ? /* @__PURE__ */ jsx44(AuthOwlBranding, {}) : null,
+        branding: showBranding ? /* @__PURE__ */ jsx45(AuthOwlBranding, {}) : null,
         children: content
       }
     );
   }
-  return /* @__PURE__ */ jsxs41("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
-    /* @__PURE__ */ jsxs41("header", { className: "ba-profile-heading", children: [
-      showBranding ? /* @__PURE__ */ jsx44(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx44("h1", { children: t("userProfile.title") }),
-      /* @__PURE__ */ jsx44("p", { children: t("userProfile.description") })
+  return /* @__PURE__ */ jsxs42("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
+    /* @__PURE__ */ jsxs42("header", { className: "ba-profile-heading", children: [
+      showBranding ? /* @__PURE__ */ jsx45(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx45("h1", { children: t("userProfile.title") }),
+      /* @__PURE__ */ jsx45("p", { children: t("userProfile.description") })
     ] }),
     content,
-    /* @__PURE__ */ jsx44("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx44(AuthOwlBadge, {}) })
+    /* @__PURE__ */ jsx45("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx45(AuthOwlBadge, {}) })
   ] });
 }
 function UserProfileBody({
@@ -3787,8 +3799,8 @@ function UserProfileBody({
   capabilities
 }) {
   const t = useT();
-  return /* @__PURE__ */ jsxs41("div", { className: "ba-profile-layout", children: [
-    /* @__PURE__ */ jsx44("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ jsx44(
+  return /* @__PURE__ */ jsxs42("div", { className: "ba-profile-layout", children: [
+    /* @__PURE__ */ jsx45("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ jsx45(
       "button",
       {
         type: "button",
@@ -3799,8 +3811,8 @@ function UserProfileBody({
       },
       item
     )) }),
-    /* @__PURE__ */ jsxs41("div", { className: "ba-profile-content", "data-section": active, children: [
-      active === "profile" && /* @__PURE__ */ jsx44(
+    /* @__PURE__ */ jsxs42("div", { className: "ba-profile-content", "data-section": active, children: [
+      active === "profile" && /* @__PURE__ */ jsx45(
         ProfileSection,
         {
           firstLastName: capabilities.firstLastName,
@@ -3808,43 +3820,54 @@ function UserProfileBody({
           legacyNameField: capabilities.legacyNameField
         }
       ),
-      active === "email" && /* @__PURE__ */ jsx44(EmailSection, { allowChange: capabilities.emailChange }),
-      active === "password" && /* @__PURE__ */ jsx44(PasswordSection, {}),
-      active === "social" && /* @__PURE__ */ jsx44(SocialSection, {}),
-      active === "sessions" && /* @__PURE__ */ jsx44(SessionsSection, {}),
-      active === "passkeys" && /* @__PURE__ */ jsx44(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
-      active === "mfa" && /* @__PURE__ */ jsx44(MfaSection, {}),
-      active === "recovery" && /* @__PURE__ */ jsx44(RecoverySection, {}),
-      active === "danger" && /* @__PURE__ */ jsx44(DeleteAccountSection, { onDeleted })
+      active === "email" && /* @__PURE__ */ jsx45(EmailSection, { allowChange: capabilities.emailChange }),
+      active === "password" && /* @__PURE__ */ jsx45(PasswordSection, {}),
+      active === "social" && /* @__PURE__ */ jsx45(SocialSection, {}),
+      active === "sessions" && /* @__PURE__ */ jsx45(SessionsSection, {}),
+      active === "passkeys" && /* @__PURE__ */ jsx45(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
+      active === "mfa" && /* @__PURE__ */ jsx45(MfaSection, {}),
+      active === "recovery" && /* @__PURE__ */ jsx45(RecoverySection, {}),
+      active === "danger" && /* @__PURE__ */ jsx45(DeleteAccountSection, { onDeleted })
     ] })
   ] });
 }
 
 // src/components/UserButton.tsx
-import { jsx as jsx45, jsxs as jsxs42 } from "react/jsx-runtime";
+import { jsx as jsx46, jsxs as jsxs43 } from "react/jsx-runtime";
 function UserButton() {
   const t = useT();
   const { user, isLoaded } = useUser();
   const { signOut } = useSignOut();
   const [open, setOpen] = React37.useState(false);
   const [profileOpen, setProfileOpen] = React37.useState(false);
+  const [failedImage, setFailedImage] = React37.useState(null);
   const triggerRef = React37.useRef(null);
   if (!isLoaded || !user) return null;
   const identity = user.email ?? user.phoneNumber ?? user.name ?? "?";
-  return /* @__PURE__ */ jsxs42("div", { className: "ba-user-button", "data-testid": "user-button", children: [
-    /* @__PURE__ */ jsx45(
+  const image = user.image ?? null;
+  return /* @__PURE__ */ jsxs43("div", { className: "ba-user-button", "data-testid": "user-button", children: [
+    /* @__PURE__ */ jsx46(
       "button",
       {
         ref: triggerRef,
         className: "ba-user-button-trigger",
         "aria-label": t("userButton.openMenuAria"),
         onClick: () => setOpen((v) => !v),
-        children: user.image ? /* @__PURE__ */ jsx45("img", { className: "ba-avatar", src: user.image, alt: "" }) : /* @__PURE__ */ jsx45("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
+        children: image && failedImage !== image ? /* @__PURE__ */ jsx46(
+          "img",
+          {
+            className: "ba-avatar",
+            src: image,
+            alt: "",
+            referrerPolicy: "no-referrer",
+            onError: () => setFailedImage(image)
+          }
+        ) : /* @__PURE__ */ jsx46("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
       }
     ),
-    open && /* @__PURE__ */ jsxs42("div", { className: "ba-menu", children: [
-      /* @__PURE__ */ jsx45("p", { className: "ba-menu-label", children: identity }),
-      /* @__PURE__ */ jsx45(
+    open && /* @__PURE__ */ jsxs43("div", { className: "ba-menu", children: [
+      /* @__PURE__ */ jsx46("p", { className: "ba-menu-label", children: identity }),
+      /* @__PURE__ */ jsx46(
         "button",
         {
           className: "ba-menu-item",
@@ -3855,10 +3878,10 @@ function UserButton() {
           children: t("userButton.manageAccount")
         }
       ),
-      /* @__PURE__ */ jsx45("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
-      /* @__PURE__ */ jsx45("div", { className: "ba-menu-badge", children: /* @__PURE__ */ jsx45(AuthOwlBadge, {}) })
+      /* @__PURE__ */ jsx46("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
+      /* @__PURE__ */ jsx46("div", { className: "ba-menu-badge", children: /* @__PURE__ */ jsx46(AuthOwlBadge, {}) })
     ] }),
-    profileOpen && /* @__PURE__ */ jsx45(
+    profileOpen && /* @__PURE__ */ jsx46(
       UserProfile,
       {
         mode: "modal",
@@ -3878,7 +3901,7 @@ import * as React45 from "react";
 
 // src/components/CreateOrganization.tsx
 import * as React38 from "react";
-import { jsx as jsx46, jsxs as jsxs43 } from "react/jsx-runtime";
+import { jsx as jsx47, jsxs as jsxs44 } from "react/jsx-runtime";
 function CreateOrganization({ onCreated, title } = {}) {
   const t = useT();
   const { config, isLoading: configLoading } = usePublicConfig();
@@ -3890,10 +3913,10 @@ function CreateOrganization({ onCreated, title } = {}) {
   const [logo, setLogo] = React38.useState("");
   const [slugTouched, setSlugTouched] = React38.useState(false);
   if (configLoading || !isLoaded) {
-    return /* @__PURE__ */ jsx46("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+    return /* @__PURE__ */ jsx47("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   }
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ jsx46("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ jsx47("p", { className: "ba-muted", children: t("organization.signedOut") });
   const submit = (event) => {
     event.preventDefault();
     const normalizedName = name.trim();
@@ -3918,15 +3941,15 @@ function CreateOrganization({ onCreated, title } = {}) {
       }
     );
   };
-  return /* @__PURE__ */ jsxs43("section", { className: "ba-organization-create", children: [
-    title !== null && /* @__PURE__ */ jsxs43("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx46("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
-      /* @__PURE__ */ jsx46("p", { className: "ba-muted", children: t("organization.create.description") })
+  return /* @__PURE__ */ jsxs44("section", { className: "ba-organization-create", children: [
+    title !== null && /* @__PURE__ */ jsxs44("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ jsx47("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
+      /* @__PURE__ */ jsx47("p", { className: "ba-muted", children: t("organization.create.description") })
     ] }),
-    /* @__PURE__ */ jsxs43("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs43("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs44("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs44("label", { className: "ba-label", children: [
         t("organization.create.name"),
-        /* @__PURE__ */ jsx46(
+        /* @__PURE__ */ jsx47(
           "input",
           {
             className: "ba-input",
@@ -3941,9 +3964,9 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs43("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs44("label", { className: "ba-label", children: [
         t("organization.create.slug"),
-        /* @__PURE__ */ jsx46(
+        /* @__PURE__ */ jsx47(
           "input",
           {
             className: "ba-input",
@@ -3958,9 +3981,9 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs43("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs44("label", { className: "ba-label", children: [
         t("organization.create.logo"),
-        /* @__PURE__ */ jsx46(
+        /* @__PURE__ */ jsx47(
           "input",
           {
             className: "ba-input",
@@ -3972,15 +3995,15 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx46(FormError, { children: error }),
-      /* @__PURE__ */ jsx46(
+      /* @__PURE__ */ jsx47(FormError, { children: error }),
+      /* @__PURE__ */ jsx47(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !name.trim() || !slug.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx46(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
+          children: /* @__PURE__ */ jsx47(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
         }
       )
     ] })
@@ -3989,7 +4012,7 @@ function CreateOrganization({ onCreated, title } = {}) {
 
 // src/components/organization/OrganizationModal.tsx
 import * as React39 from "react";
-import { jsx as jsx47, jsxs as jsxs44 } from "react/jsx-runtime";
+import { jsx as jsx48, jsxs as jsxs45 } from "react/jsx-runtime";
 function OrganizationModal({
   title,
   onClose,
@@ -3998,7 +4021,7 @@ function OrganizationModal({
 }) {
   const t = useT();
   const titleId = React39.useId();
-  return /* @__PURE__ */ jsxs44(
+  return /* @__PURE__ */ jsxs45(
     ModalSurface,
     {
       overlayClassName: "ba-organization-overlay",
@@ -4007,9 +4030,9 @@ function OrganizationModal({
       returnFocusRef,
       onClose,
       children: [
-        /* @__PURE__ */ jsxs44("div", { className: "ba-organization-modal-header", children: [
-          /* @__PURE__ */ jsx47("h2", { id: titleId, className: "ba-title", children: title }),
-          /* @__PURE__ */ jsx47(
+        /* @__PURE__ */ jsxs45("div", { className: "ba-organization-modal-header", children: [
+          /* @__PURE__ */ jsx48("h2", { id: titleId, className: "ba-title", children: title }),
+          /* @__PURE__ */ jsx48(
             "button",
             {
               className: "ba-profile-close",
@@ -4021,7 +4044,7 @@ function OrganizationModal({
             }
           )
         ] }),
-        /* @__PURE__ */ jsx47("div", { className: "ba-organization-modal-body", children })
+        /* @__PURE__ */ jsx48("div", { className: "ba-organization-modal-body", children })
       ]
     }
   );
@@ -4086,7 +4109,7 @@ import * as React44 from "react";
 
 // src/components/organization/DangerSection.tsx
 import * as React41 from "react";
-import { jsx as jsx48, jsxs as jsxs45 } from "react/jsx-runtime";
+import { jsx as jsx49, jsxs as jsxs46 } from "react/jsx-runtime";
 function DangerSection({
   organization,
   membership,
@@ -4127,43 +4150,43 @@ function DangerSection({
       }
     );
   };
-  return /* @__PURE__ */ jsxs45("section", { className: "ba-organization-section ba-organization-danger", children: [
-    /* @__PURE__ */ jsxs45("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx48("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
-      /* @__PURE__ */ jsx48("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
+  return /* @__PURE__ */ jsxs46("section", { className: "ba-organization-section ba-organization-danger", children: [
+    /* @__PURE__ */ jsxs46("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ jsx49("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
+      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
     ] }),
-    /* @__PURE__ */ jsxs45("div", { className: "ba-organization-danger-action", children: [
-      /* @__PURE__ */ jsx48("strong", { children: t("organization.profile.danger.leaveTitle") }),
-      /* @__PURE__ */ jsx48("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
-      /* @__PURE__ */ jsx48("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
+    /* @__PURE__ */ jsxs46("div", { className: "ba-organization-danger-action", children: [
+      /* @__PURE__ */ jsx49("strong", { children: t("organization.profile.danger.leaveTitle") }),
+      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
+      /* @__PURE__ */ jsx49("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
     ] }),
-    isOwner && /* @__PURE__ */ jsxs45("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
-      /* @__PURE__ */ jsx48("strong", { children: t("organization.profile.danger.deleteTitle") }),
-      /* @__PURE__ */ jsx48("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
-      /* @__PURE__ */ jsxs45("label", { className: "ba-label", children: [
+    isOwner && /* @__PURE__ */ jsxs46("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
+      /* @__PURE__ */ jsx49("strong", { children: t("organization.profile.danger.deleteTitle") }),
+      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
+      /* @__PURE__ */ jsxs46("label", { className: "ba-label", children: [
         t("organization.profile.danger.deleteConfirm"),
         " ",
-        /* @__PURE__ */ jsx48(Bidi, { children: organization.slug }),
-        /* @__PURE__ */ jsx48("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
+        /* @__PURE__ */ jsx49(Bidi, { children: organization.slug }),
+        /* @__PURE__ */ jsx49("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
       ] }),
-      /* @__PURE__ */ jsx48(
+      /* @__PURE__ */ jsx49(
         "button",
         {
           className: "ba-button ba-danger-button",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx48(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
+          children: /* @__PURE__ */ jsx49(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
         }
       )
     ] }),
-    /* @__PURE__ */ jsx48(FormError, { children: error })
+    /* @__PURE__ */ jsx49(FormError, { children: error })
   ] });
 }
 
 // src/components/organization/GeneralSection.tsx
 import * as React42 from "react";
-import { jsx as jsx49, jsxs as jsxs46 } from "react/jsx-runtime";
+import { jsx as jsx50, jsxs as jsxs47 } from "react/jsx-runtime";
 function GeneralSection({
   organization,
   canManage,
@@ -4181,16 +4204,16 @@ function GeneralSection({
     setLogo(organization.logo ?? "");
   }, [organization.id, organization.logo, organization.name, organization.slug]);
   if (!canManage) {
-    return /* @__PURE__ */ jsxs46("section", { className: "ba-organization-section", children: [
-      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
-      /* @__PURE__ */ jsxs46("dl", { className: "ba-organization-facts", children: [
-        /* @__PURE__ */ jsxs46("div", { children: [
-          /* @__PURE__ */ jsx49("dt", { children: t("organization.create.name") }),
-          /* @__PURE__ */ jsx49("dd", { children: organization.name })
+    return /* @__PURE__ */ jsxs47("section", { className: "ba-organization-section", children: [
+      /* @__PURE__ */ jsx50("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
+      /* @__PURE__ */ jsxs47("dl", { className: "ba-organization-facts", children: [
+        /* @__PURE__ */ jsxs47("div", { children: [
+          /* @__PURE__ */ jsx50("dt", { children: t("organization.create.name") }),
+          /* @__PURE__ */ jsx50("dd", { children: organization.name })
         ] }),
-        /* @__PURE__ */ jsxs46("div", { children: [
-          /* @__PURE__ */ jsx49("dt", { children: t("organization.create.slug") }),
-          /* @__PURE__ */ jsx49("dd", { children: /* @__PURE__ */ jsx49(Bidi, { children: organization.slug }) })
+        /* @__PURE__ */ jsxs47("div", { children: [
+          /* @__PURE__ */ jsx50("dt", { children: t("organization.create.slug") }),
+          /* @__PURE__ */ jsx50("dd", { children: /* @__PURE__ */ jsx50(Bidi, { children: organization.slug }) })
         ] })
       ] })
     ] });
@@ -4208,19 +4231,19 @@ function GeneralSection({
       }
     );
   };
-  return /* @__PURE__ */ jsxs46("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ jsxs46("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx49("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
-      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: t("organization.profile.general.description") })
+  return /* @__PURE__ */ jsxs47("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ jsxs47("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ jsx50("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
+      /* @__PURE__ */ jsx50("p", { className: "ba-muted", children: t("organization.profile.general.description") })
     ] }),
-    /* @__PURE__ */ jsxs46("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs46("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs47("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
         t("organization.create.name"),
-        /* @__PURE__ */ jsx49("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
+        /* @__PURE__ */ jsx50("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ jsxs46("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
         t("organization.create.slug"),
-        /* @__PURE__ */ jsx49(
+        /* @__PURE__ */ jsx50(
           "input",
           {
             className: "ba-input",
@@ -4232,19 +4255,19 @@ function GeneralSection({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs46("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
         t("organization.create.logo"),
-        /* @__PURE__ */ jsx49("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
+        /* @__PURE__ */ jsx50("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
       ] }),
-      /* @__PURE__ */ jsx49(FormError, { children: error }),
-      /* @__PURE__ */ jsx49(
+      /* @__PURE__ */ jsx50(FormError, { children: error }),
+      /* @__PURE__ */ jsx50(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !name.trim() || !slug.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx49(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
+          children: /* @__PURE__ */ jsx50(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
         }
       )
     ] })
@@ -4267,7 +4290,7 @@ function organizationRoleLabel(role, t) {
 }
 
 // src/components/organization/InvitationsSection.tsx
-import { jsx as jsx50, jsxs as jsxs47 } from "react/jsx-runtime";
+import { jsx as jsx51, jsxs as jsxs48 } from "react/jsx-runtime";
 function InvitationsSection({
   organization,
   onChanged
@@ -4299,44 +4322,44 @@ function InvitationsSection({
       { failure: t("organization.profile.invitations.cancelError"), onSuccess: onChanged }
     );
   };
-  return /* @__PURE__ */ jsxs47("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ jsxs47("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx50("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
-      /* @__PURE__ */ jsx50("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
+  return /* @__PURE__ */ jsxs48("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ jsxs48("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ jsx51("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
+      /* @__PURE__ */ jsx51("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
     ] }),
-    /* @__PURE__ */ jsxs47("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
-      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs48("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
+      /* @__PURE__ */ jsxs48("label", { className: "ba-label", children: [
         t("organization.profile.invitations.email"),
-        /* @__PURE__ */ jsx50("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
+        /* @__PURE__ */ jsx51("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs48("label", { className: "ba-label", children: [
         t("organization.profile.members.role"),
-        /* @__PURE__ */ jsx50("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ jsx50("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
+        /* @__PURE__ */ jsx51("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ jsx51("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
       ] }),
-      /* @__PURE__ */ jsx50(
+      /* @__PURE__ */ jsx51(
         "button",
         {
           className: "ba-button",
           type: "submit",
           disabled: pending || !email.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx50(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
+          children: /* @__PURE__ */ jsx51(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
         }
       )
     ] }),
-    /* @__PURE__ */ jsx50(FormError, { children: error }),
-    invitations.length === 0 ? /* @__PURE__ */ jsx50("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ jsx50("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ jsxs47("li", { className: "ba-organization-invitation", children: [
-      /* @__PURE__ */ jsxs47("span", { children: [
-        /* @__PURE__ */ jsx50("strong", { children: /* @__PURE__ */ jsx50(Bidi, { children: invitation.email }) }),
-        /* @__PURE__ */ jsx50("small", { children: organizationRoleLabel(invitation.role, t) })
+    /* @__PURE__ */ jsx51(FormError, { children: error }),
+    invitations.length === 0 ? /* @__PURE__ */ jsx51("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ jsx51("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ jsxs48("li", { className: "ba-organization-invitation", children: [
+      /* @__PURE__ */ jsxs48("span", { children: [
+        /* @__PURE__ */ jsx51("strong", { children: /* @__PURE__ */ jsx51(Bidi, { children: invitation.email }) }),
+        /* @__PURE__ */ jsx51("small", { children: organizationRoleLabel(invitation.role, t) })
       ] }),
-      /* @__PURE__ */ jsx50("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
+      /* @__PURE__ */ jsx51("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
     ] }, invitation.id)) })
   ] });
 }
 
 // src/components/organization/MembersSection.tsx
-import { jsx as jsx51, jsxs as jsxs48 } from "react/jsx-runtime";
+import { jsx as jsx52, jsxs as jsxs49 } from "react/jsx-runtime";
 function MembersSection({
   organization,
   userId,
@@ -4363,27 +4386,27 @@ function MembersSection({
       { failure: t("organization.profile.members.removeError"), onSuccess: onChanged }
     );
   };
-  return /* @__PURE__ */ jsxs48("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ jsxs48("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx51("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
-      /* @__PURE__ */ jsx51("p", { className: "ba-muted", children: t("organization.profile.members.description") })
+  return /* @__PURE__ */ jsxs49("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ jsxs49("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ jsx52("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
+      /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: t("organization.profile.members.description") })
     ] }),
-    /* @__PURE__ */ jsx51(FormError, { children: error }),
-    /* @__PURE__ */ jsx51("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
+    /* @__PURE__ */ jsx52(FormError, { children: error }),
+    /* @__PURE__ */ jsx52("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
       const primaryRole = organizationRoles(member.role)[0] ?? member.role;
       const isCurrent = member.userId === userId;
-      return /* @__PURE__ */ jsxs48("li", { className: "ba-organization-member", children: [
-        /* @__PURE__ */ jsx51("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ jsxs48("span", { className: "ba-organization-member-copy", children: [
-          /* @__PURE__ */ jsxs48("strong", { children: [
+      return /* @__PURE__ */ jsxs49("li", { className: "ba-organization-member", children: [
+        /* @__PURE__ */ jsx52("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
+        /* @__PURE__ */ jsxs49("span", { className: "ba-organization-member-copy", children: [
+          /* @__PURE__ */ jsxs49("strong", { children: [
             member.user.name,
             isCurrent ? ` ${t("organization.profile.members.you")}` : ""
           ] }),
-          /* @__PURE__ */ jsx51("small", { children: /* @__PURE__ */ jsx51(Bidi, { children: member.user.email }) })
+          /* @__PURE__ */ jsx52("small", { children: /* @__PURE__ */ jsx52(Bidi, { children: member.user.email }) })
         ] }),
-        canManage && !isCurrent ? /* @__PURE__ */ jsxs48("span", { className: "ba-organization-member-actions", children: [
-          /* @__PURE__ */ jsx51("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
-          /* @__PURE__ */ jsx51(
+        canManage && !isCurrent ? /* @__PURE__ */ jsxs49("span", { className: "ba-organization-member-actions", children: [
+          /* @__PURE__ */ jsx52("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
+          /* @__PURE__ */ jsx52(
             "select",
             {
               id: `organization-role-${member.id}`,
@@ -4391,18 +4414,18 @@ function MembersSection({
               value: primaryRole,
               disabled: pending,
               onChange: (event) => updateRole(member, event.target.value),
-              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ jsx51("option", { value: role, children: organizationRoleLabel(role, t) }, role))
+              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ jsx52("option", { value: role, children: organizationRoleLabel(role, t) }, role))
             }
           ),
-          /* @__PURE__ */ jsx51("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
-        ] }) : /* @__PURE__ */ jsx51("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ jsx51(Bidi, { children: organizationRoleLabel(member.role, t) }) })
+          /* @__PURE__ */ jsx52("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
+        ] }) : /* @__PURE__ */ jsx52("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ jsx52(Bidi, { children: organizationRoleLabel(member.role, t) }) })
       ] }, member.id);
     }) })
   ] });
 }
 
 // src/components/OrganizationProfile.tsx
-import { jsx as jsx52, jsxs as jsxs49 } from "react/jsx-runtime";
+import { jsx as jsx53, jsxs as jsxs50 } from "react/jsx-runtime";
 var SECTION_KEYS2 = {
   general: "organization.profile.nav.general",
   members: "organization.profile.nav.members",
@@ -4410,7 +4433,7 @@ var SECTION_KEYS2 = {
   invitations: "organization.profile.nav.invitations",
   danger: "organization.profile.nav.danger"
 };
-var TeamsSection = React44.lazy(() => import("./TeamsSection-SHXAL64Q.js"));
+var TeamsSection = React44.lazy(() => import("./TeamsSection-ZQDNMWV3.js"));
 function OrganizationProfile({ organizationId, defaultSection = "general", onDeleted, onLeft } = {}) {
   const t = useT();
   const toServerError = useServerError();
@@ -4457,20 +4480,20 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
       requestRef.current += 1;
     };
   }, [load]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx52("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx53("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: t("organization.signedOut") });
-  if (wasRemoved) return /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: t("organization.profile.noActive") });
-  if (!requestedId) return /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: t("organization.profile.noActive") });
+  if (!isSignedIn || !user) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (wasRemoved) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.profile.noActive") });
+  if (!requestedId) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.profile.noActive") });
   if (error) {
-    return /* @__PURE__ */ jsxs49("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ jsx52(FormError, { children: error }),
-      /* @__PURE__ */ jsx52("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
+    return /* @__PURE__ */ jsxs50("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ jsx53(FormError, { children: error }),
+      /* @__PURE__ */ jsx53("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
     ] });
   }
-  if (!organization) return /* @__PURE__ */ jsx52("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (!organization) return /* @__PURE__ */ jsx53("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   const membership = organization.members.find((member) => member.userId === user.id);
-  if (!membership) return /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: t("organization.profile.notMember") });
+  if (!membership) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.profile.notMember") });
   const canManage = canManageOrganization(membership);
   const visibleSections = canManage ? ["general", "members", "teams", "invitations", "danger"] : ["general", "members", "teams", "danger"];
   const activeSection = visibleSections.includes(section) ? section : "general";
@@ -4479,16 +4502,16 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
     setOrganization(null);
     callback?.(removedOrganization);
   };
-  return /* @__PURE__ */ jsxs49("article", { className: "ba-organization-profile", children: [
-    /* @__PURE__ */ jsxs49("header", { className: "ba-organization-profile-heading", children: [
-      /* @__PURE__ */ jsx52("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-      /* @__PURE__ */ jsxs49("span", { children: [
-        /* @__PURE__ */ jsx52("h2", { className: "ba-title", children: organization.name }),
-        /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: organization.slug })
+  return /* @__PURE__ */ jsxs50("article", { className: "ba-organization-profile", children: [
+    /* @__PURE__ */ jsxs50("header", { className: "ba-organization-profile-heading", children: [
+      /* @__PURE__ */ jsx53("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+      /* @__PURE__ */ jsxs50("span", { children: [
+        /* @__PURE__ */ jsx53("h2", { className: "ba-title", children: organization.name }),
+        /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: organization.slug })
       ] })
     ] }),
-    /* @__PURE__ */ jsxs49("div", { className: "ba-organization-profile-layout", children: [
-      /* @__PURE__ */ jsx52("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ jsx52(
+    /* @__PURE__ */ jsxs50("div", { className: "ba-organization-profile-layout", children: [
+      /* @__PURE__ */ jsx53("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ jsx53(
         "button",
         {
           className: "ba-profile-nav-item",
@@ -4499,12 +4522,12 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
         },
         item
       )) }),
-      /* @__PURE__ */ jsxs49("div", { className: "ba-organization-profile-content", children: [
-        activeSection === "general" && /* @__PURE__ */ jsx52(GeneralSection, { organization, canManage, onChanged: load }),
-        activeSection === "members" && /* @__PURE__ */ jsx52(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
-        activeSection === "teams" && /* @__PURE__ */ jsx52(React44.Suspense, { fallback: null, children: /* @__PURE__ */ jsx52(TeamsSection, { organization, membership }) }),
-        activeSection === "invitations" && /* @__PURE__ */ jsx52(InvitationsSection, { organization, onChanged: load }),
-        activeSection === "danger" && /* @__PURE__ */ jsx52(
+      /* @__PURE__ */ jsxs50("div", { className: "ba-organization-profile-content", children: [
+        activeSection === "general" && /* @__PURE__ */ jsx53(GeneralSection, { organization, canManage, onChanged: load }),
+        activeSection === "members" && /* @__PURE__ */ jsx53(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
+        activeSection === "teams" && /* @__PURE__ */ jsx53(React44.Suspense, { fallback: null, children: /* @__PURE__ */ jsx53(TeamsSection, { organization, membership }) }),
+        activeSection === "invitations" && /* @__PURE__ */ jsx53(InvitationsSection, { organization, onChanged: load }),
+        activeSection === "danger" && /* @__PURE__ */ jsx53(
           DangerSection,
           {
             organization,
@@ -4519,7 +4542,7 @@ function OrganizationProfile({ organizationId, defaultSection = "general", onDel
 }
 
 // src/components/OrganizationSwitcher.tsx
-import { Fragment as Fragment13, jsx as jsx53, jsxs as jsxs50 } from "react/jsx-runtime";
+import { Fragment as Fragment13, jsx as jsx54, jsxs as jsxs51 } from "react/jsx-runtime";
 function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChange } = {}) {
   const t = useT();
   const { config, isLoading: configLoading } = usePublicConfig();
@@ -4552,9 +4575,9 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
       document.removeEventListener("keydown", onKeyDown);
     };
   }, [open]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx53("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx54("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.signedOut") });
   const select = (organization) => {
     void run(
       () => api.setActive({ organizationId: organization?.id ?? null }),
@@ -4597,9 +4620,9 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
     else if (event.key === "ArrowDown") items[(current + 1 + items.length) % items.length]?.focus();
     else items[(current - 1 + items.length) % items.length]?.focus();
   };
-  return /* @__PURE__ */ jsxs50(Fragment13, { children: [
-    /* @__PURE__ */ jsxs50("div", { ref: rootRef, className: "ba-organization-switcher", children: [
-      /* @__PURE__ */ jsxs50(
+  return /* @__PURE__ */ jsxs51(Fragment13, { children: [
+    /* @__PURE__ */ jsxs51("div", { ref: rootRef, className: "ba-organization-switcher", children: [
+      /* @__PURE__ */ jsxs51(
         "button",
         {
           ref: triggerRef,
@@ -4616,43 +4639,43 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
             focusMenuItem(event.key === "ArrowDown" ? "first" : "last");
           },
           children: [
-            /* @__PURE__ */ jsx53("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
-            /* @__PURE__ */ jsx53("span", { children: active?.name ?? t("organization.personal") }),
-            /* @__PURE__ */ jsx53("span", { "aria-hidden": "true", children: "\u2304" })
+            /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
+            /* @__PURE__ */ jsx54("span", { children: active?.name ?? t("organization.personal") }),
+            /* @__PURE__ */ jsx54("span", { "aria-hidden": "true", children: "\u2304" })
           ]
         }
       ),
-      open && /* @__PURE__ */ jsxs50("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
-        isLoading ? /* @__PURE__ */ jsx53("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs50(Fragment13, { children: [
-          showPersonalWorkspace && /* @__PURE__ */ jsxs50("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
-            /* @__PURE__ */ jsx53("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
-            /* @__PURE__ */ jsx53("span", { children: t("organization.personal") })
+      open && /* @__PURE__ */ jsxs51("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
+        isLoading ? /* @__PURE__ */ jsx54("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs51(Fragment13, { children: [
+          showPersonalWorkspace && /* @__PURE__ */ jsxs51("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
+            /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
+            /* @__PURE__ */ jsx54("span", { children: t("organization.personal") })
           ] }),
-          organizations?.map((organization) => /* @__PURE__ */ jsxs50("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
-            /* @__PURE__ */ jsx53("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-            /* @__PURE__ */ jsxs50("span", { children: [
+          organizations?.map((organization) => /* @__PURE__ */ jsxs51("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
+            /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+            /* @__PURE__ */ jsxs51("span", { children: [
               organization.name,
-              /* @__PURE__ */ jsx53("small", { children: organization.slug })
+              /* @__PURE__ */ jsx54("small", { children: organization.slug })
             ] })
           ] }, organization.id))
         ] }),
-        (loadError || error) && /* @__PURE__ */ jsxs50("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ jsx53(FormError, { children: loadError ?? error }),
-          loadError && /* @__PURE__ */ jsx53("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
+        (loadError || error) && /* @__PURE__ */ jsxs51("div", { className: "ba-inline-error", children: [
+          /* @__PURE__ */ jsx54(FormError, { children: loadError ?? error }),
+          loadError && /* @__PURE__ */ jsx54("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
         ] }),
-        /* @__PURE__ */ jsxs50("div", { className: "ba-organization-menu-actions", children: [
-          active && /* @__PURE__ */ jsx53("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
+        /* @__PURE__ */ jsxs51("div", { className: "ba-organization-menu-actions", children: [
+          active && /* @__PURE__ */ jsx54("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
             setOpen(false);
             setDialog("profile");
           }, children: t("organization.switcher.manage") }),
-          /* @__PURE__ */ jsx53("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
+          /* @__PURE__ */ jsx54("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
             setOpen(false);
             setDialog("create");
           }, children: t("organization.switcher.create") })
         ] })
       ] })
     ] }),
-    dialog === "create" && /* @__PURE__ */ jsx53(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx53(
+    dialog === "create" && /* @__PURE__ */ jsx54(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx54(
       CreateOrganization,
       {
         title: null,
@@ -4666,13 +4689,13 @@ function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChan
         }
       }
     ) }),
-    dialog === "profile" && active && /* @__PURE__ */ jsx53(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx53(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
+    dialog === "profile" && active && /* @__PURE__ */ jsx54(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx54(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
   ] });
 }
 
 // src/components/OrganizationList.tsx
 import * as React46 from "react";
-import { Fragment as Fragment14, jsx as jsx54, jsxs as jsxs51 } from "react/jsx-runtime";
+import { Fragment as Fragment14, jsx as jsx55, jsxs as jsxs52 } from "react/jsx-runtime";
 function OrganizationList({ onOrganizationChange } = {}) {
   const t = useT();
   const toServerError = useServerError();
@@ -4721,9 +4744,9 @@ function OrganizationList({ onOrganizationChange } = {}) {
       invitationRequestRef.current += 1;
     };
   }, [isLoaded, loadInvitations, user?.id]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx54("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx55("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.signedOut") });
   const setActive = (organization) => {
     void run(
       () => api.setActive({ organizationId: organization.id }),
@@ -4764,66 +4787,66 @@ function OrganizationList({ onOrganizationChange } = {}) {
     setDialog(null);
     setProfileId(null);
   };
-  return /* @__PURE__ */ jsxs51(Fragment14, { children: [
-    /* @__PURE__ */ jsxs51("section", { className: "ba-organization-directory", children: [
-      /* @__PURE__ */ jsxs51("header", { className: "ba-organization-directory-header", children: [
-        /* @__PURE__ */ jsxs51("span", { children: [
-          /* @__PURE__ */ jsx54("h2", { className: "ba-title", children: t("organization.list.title") }),
-          /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.list.description") })
+  return /* @__PURE__ */ jsxs52(Fragment14, { children: [
+    /* @__PURE__ */ jsxs52("section", { className: "ba-organization-directory", children: [
+      /* @__PURE__ */ jsxs52("header", { className: "ba-organization-directory-header", children: [
+        /* @__PURE__ */ jsxs52("span", { children: [
+          /* @__PURE__ */ jsx55("h2", { className: "ba-title", children: t("organization.list.title") }),
+          /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.description") })
         ] }),
-        /* @__PURE__ */ jsx54("button", { className: "ba-button", type: "button", onClick: (event) => {
+        /* @__PURE__ */ jsx55("button", { className: "ba-button", type: "button", onClick: (event) => {
           dialogReturnFocusRef.current = event.currentTarget;
           setDialog("create");
         }, children: t("organization.switcher.create") })
       ] }),
-      (organizationError || error) && /* @__PURE__ */ jsxs51("div", { className: "ba-inline-error", children: [
-        /* @__PURE__ */ jsx54(FormError, { children: organizationError ?? error }),
-        organizationError && /* @__PURE__ */ jsx54("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
+      (organizationError || error) && /* @__PURE__ */ jsxs52("div", { className: "ba-inline-error", children: [
+        /* @__PURE__ */ jsx55(FormError, { children: organizationError ?? error }),
+        organizationError && /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
       ] }),
-      isLoading ? /* @__PURE__ */ jsxs51("div", { className: "ba-organization-card-grid", children: [
-        /* @__PURE__ */ jsx54("div", { className: "ba-skeleton" }),
-        /* @__PURE__ */ jsx54("div", { className: "ba-skeleton" })
-      ] }) : organizations?.length ? /* @__PURE__ */ jsx54("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ jsxs51("li", { className: "ba-organization-card", children: [
-        /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ jsxs51("span", { className: "ba-organization-card-copy", children: [
-          /* @__PURE__ */ jsx54("strong", { children: organization.name }),
-          /* @__PURE__ */ jsx54("small", { children: /* @__PURE__ */ jsx54(Bidi, { children: organization.slug }) })
+      isLoading ? /* @__PURE__ */ jsxs52("div", { className: "ba-organization-card-grid", children: [
+        /* @__PURE__ */ jsx55("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ jsx55("div", { className: "ba-skeleton" })
+      ] }) : organizations?.length ? /* @__PURE__ */ jsx55("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ jsxs52("li", { className: "ba-organization-card", children: [
+        /* @__PURE__ */ jsx55("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+        /* @__PURE__ */ jsxs52("span", { className: "ba-organization-card-copy", children: [
+          /* @__PURE__ */ jsx55("strong", { children: organization.name }),
+          /* @__PURE__ */ jsx55("small", { children: /* @__PURE__ */ jsx55(Bidi, { children: organization.slug }) })
         ] }),
-        activeId === organization.id && /* @__PURE__ */ jsx54("span", { className: "ba-organization-active", children: t("organization.list.active") }),
-        /* @__PURE__ */ jsxs51("span", { className: "ba-organization-card-actions", children: [
-          activeId !== organization.id && /* @__PURE__ */ jsx54("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
-          /* @__PURE__ */ jsx54("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
+        activeId === organization.id && /* @__PURE__ */ jsx55("span", { className: "ba-organization-active", children: t("organization.list.active") }),
+        /* @__PURE__ */ jsxs52("span", { className: "ba-organization-card-actions", children: [
+          activeId !== organization.id && /* @__PURE__ */ jsx55("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
+          /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
         ] })
-      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.list.empty") }),
-      /* @__PURE__ */ jsxs51("section", { className: "ba-organization-user-invitations", children: [
-        /* @__PURE__ */ jsxs51("header", { className: "ba-organization-section-header", children: [
-          /* @__PURE__ */ jsx54("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
-          /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
+      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.empty") }),
+      /* @__PURE__ */ jsxs52("section", { className: "ba-organization-user-invitations", children: [
+        /* @__PURE__ */ jsxs52("header", { className: "ba-organization-section-header", children: [
+          /* @__PURE__ */ jsx55("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
+          /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
         ] }),
-        invitationError && /* @__PURE__ */ jsxs51("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ jsx54(FormError, { children: invitationError }),
-          /* @__PURE__ */ jsx54("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
+        invitationError && /* @__PURE__ */ jsxs52("div", { className: "ba-inline-error", children: [
+          /* @__PURE__ */ jsx55(FormError, { children: invitationError }),
+          /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
         ] }),
-        invitations?.length ? /* @__PURE__ */ jsx54("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ jsxs51("li", { className: "ba-organization-invitation", children: [
-          /* @__PURE__ */ jsxs51("span", { children: [
-            /* @__PURE__ */ jsx54("strong", { children: invitation.organizationName }),
-            /* @__PURE__ */ jsx54("small", { children: organizationRoleLabel(invitation.role, t) })
+        invitations?.length ? /* @__PURE__ */ jsx55("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ jsxs52("li", { className: "ba-organization-invitation", children: [
+          /* @__PURE__ */ jsxs52("span", { children: [
+            /* @__PURE__ */ jsx55("strong", { children: invitation.organizationName }),
+            /* @__PURE__ */ jsx55("small", { children: organizationRoleLabel(invitation.role, t) })
           ] }),
-          /* @__PURE__ */ jsxs51("span", { className: "ba-organization-card-actions", children: [
-            /* @__PURE__ */ jsx54("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
-            /* @__PURE__ */ jsx54("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
+          /* @__PURE__ */ jsxs52("span", { className: "ba-organization-card-actions", children: [
+            /* @__PURE__ */ jsx55("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
+            /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
           ] })
-        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ jsx54("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
+        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ jsx55("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
       ] })
     ] }),
-    dialog === "create" && /* @__PURE__ */ jsx54(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx54(CreateOrganization, { title: null, onCreated: () => {
+    dialog === "create" && /* @__PURE__ */ jsx55(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx55(CreateOrganization, { title: null, onCreated: () => {
       void (async () => {
         await refresh();
         await session.refetch({ query: { disableCookieCache: true } });
         setDialog(null);
       })();
     } }) }),
-    dialog === "profile" && profileId && /* @__PURE__ */ jsx54(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx54(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
+    dialog === "profile" && profileId && /* @__PURE__ */ jsx55(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx55(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
   ] });
 }