@authowl/react 0.22.0 → 0.24.0

package/dist/index.js

@@ -1,4 +1,11 @@
 "use client";
+import {
+  CreateOrganization,
+  OrganizationProfile
+} from "./chunk-2HNQYORD.js";
+import {
+  useSubmitAction
+} from "./chunk-SAVEQ6RC.js";
 import {
   AuthOwlProvider,
   Bidi,
@@ -8,10 +15,6 @@ import {
   InvitationPrompt,
   ModalSurface,
   Spinner,
-  canManageOrganization,
-  hasOrganizationRole,
-  organizationRoles,
-  organizationSlugFromName,
   richMessage,
   useAccount,
   useAuth,
@@ -20,24 +23,25 @@ import {
   useConsent,
   useEmailVerification,
   useInvitationRecipientHint,
+  useLastUsedSignInMethod,
   useLocale,
   useMFA,
   useOrganization,
   useOrganizationInvitation,
-  useOrganizationRoles,
   usePasskeys,
   usePasswordReset,
+  usePrivacy,
   usePublicConfig,
   useServerError,
   useSession,
   useSignIn,
+  useSignInMethodRecorder,
   useSignOut,
   useSignUp,
-  useSubmitAction,
   useT,
   useUser,
   useWaitlist
-} from "./chunk-PUJV7S6G.js";
+} from "./chunk-TOVDZ2ZE.js";
 
 // src/project-capabilities.ts
 import {
@@ -276,6 +280,7 @@ function SocialButtons({ providers, callbackURL }) {
   const t = useT();
   const toServerError = useServerError();
   const { signInSocial } = useSignIn();
+  const recordSignInMethod = useSignInMethodRecorder();
   const [pending, setPending] = React2.useState(null);
   const [error, setError] = React2.useState(null);
   React2.useEffect(() => {
@@ -308,6 +313,8 @@ function SocialButtons({ providers, callbackURL }) {
             if (res?.error) {
               setError(toServerError(res.error, t("social.error.startFailed")));
               setPending(null);
+            } else {
+              recordSignInMethod(`social:${provider}`, true);
             }
           } catch {
             setError(t("social.error.startFailed"));
@@ -1415,6 +1422,15 @@ function SignIn({
   const [challenge, setChallenge] = React13.useState(false);
   const mfaEnrolment = useConfirmedMfaPending("clear");
   const emailRef = React13.useRef(null);
+  const recordSignInMethod = useSignInMethodRecorder();
+  const onPasskeySignedIn = React13.useCallback(() => {
+    recordSignInMethod("passkey");
+    onSignedIn?.();
+  }, [onSignedIn, recordSignInMethod]);
+  const onPhoneOtpSignedIn = React13.useCallback(() => {
+    recordSignInMethod("phone-otp");
+    onSignedIn?.();
+  }, [onSignedIn, recordSignInMethod]);
   const plan = resolveSignInMethods(
     config,
     typeof window === "undefined" ? void 0 : window.location.hostname
@@ -1422,7 +1438,7 @@ function SignIn({
   usePasskeyAutofill({
     enabled: credentialMode === "email" && plan.autofillHost !== null,
     redirectTo,
-    onSignedIn
+    onSignedIn: onPasskeySignedIn
   });
   const badge = /* @__PURE__ */ jsx19(AuthOwlBadge, { force: showBadge });
   const branding = showBranding ? /* @__PURE__ */ jsx19(AuthOwlBranding, {}) : null;
@@ -1474,7 +1490,10 @@ function SignIn({
           error,
           onSubmit: () => void run(() => signInEmailOtp({ email, otp }), {
             failure: t("emailOtp.error.invalidCode"),
-            onSuccess: () => finishSignIn({ sessionStore, redirectTo, onSignedIn })
+            onSuccess: () => {
+              recordSignInMethod("email-otp");
+              finishSignIn({ sessionStore, redirectTo, onSignedIn });
+            }
           }),
           onChangeEmail: () => {
             setOtp("");
@@ -1502,7 +1521,7 @@ function SignIn({
         PhoneOTP,
         {
           redirectTo,
-          onSignedIn,
+          onSignedIn: onPhoneOtpSignedIn,
           onBack: () => setView("sign-in"),
           onMfaPasswordRequired: () => {
             setView("sign-in");
@@ -1530,6 +1549,7 @@ function SignIn({
       failure: t("signIn.error.failed"),
       onSuccess: (res) => {
         const data = res.data;
+        recordSignInMethod(credentialMode === "username" ? "username" : "password");
         if (data && "twoFactorRedirect" in data && data.twoFactorRedirect) {
           setChallenge(true);
         } else {
@@ -1542,7 +1562,10 @@ function SignIn({
     "magic",
     () => void run(() => authChallenge.run(AUTH_CHALLENGE_ACTIONS.passwordless, (options) => signInMagicLink({ email, callbackURL: redirectTo }, options)), {
       failure: t("magicLink.error.sendFailed"),
-      onSuccess: () => setView("magic-sent")
+      onSuccess: () => {
+        recordSignInMethod("magic-link", true);
+        setView("magic-sent");
+      }
     })
   );
   const doRequestOtp = () => start(
@@ -1559,6 +1582,7 @@ function SignIn({
       {
         failure: t("sso.error.startFailed"),
         mapError: (error2) => error2.status === 404 ? t("sso.error.notFound") : null,
+        onSuccess: () => recordSignInMethod("sso", true),
         // SSO always redirects the browser to the IdP; keep the spinner up
         // through that navigation instead of flashing back to idle.
         keepPendingOnSuccess: true
@@ -1697,7 +1721,7 @@ function SignIn({
         ]
       }
     ),
-    plan.passkey && /* @__PURE__ */ jsx19(PasskeyButton, { redirectTo, onSignedIn }),
+    plan.passkey && /* @__PURE__ */ jsx19(PasskeyButton, { redirectTo, onSignedIn: onPasskeySignedIn }),
     plan.phoneOtp && /* @__PURE__ */ jsx19(
       "button",
       {
@@ -1714,6 +1738,7 @@ function SignIn({
 
 // src/components/SignUp.tsx
 import * as React17 from "react";
+import { createIdempotencyKey as createIdempotencyKey2 } from "@authowl/core";
 
 // src/components/VerificationPending.tsx
 import * as React14 from "react";
@@ -2018,8 +2043,53 @@ function Waitlist({ onJoined, showBadge, showBranding = true } = {}) {
   ] });
 }
 
+// src/components/PrivacySignUpEvidence.tsx
+import { jsx as jsx24, jsxs as jsxs22 } from "react/jsx-runtime";
+function PrivacySignUpEvidence({
+  privacy,
+  locale,
+  grantedPurposeCodes,
+  onPurposeChange
+}) {
+  const t = useT();
+  if (privacy.notices.length === 0 && privacy.consentPurposes.length === 0) return null;
+  return /* @__PURE__ */ jsxs22("section", { className: "ba-privacy-signup", "aria-labelledby": "ba-privacy-signup-title", children: [
+    /* @__PURE__ */ jsxs22("header", { className: "ba-privacy-signup-header", children: [
+      /* @__PURE__ */ jsx24("p", { className: "ba-eyebrow", children: t("privacy.dataUse") }),
+      /* @__PURE__ */ jsx24("h3", { id: "ba-privacy-signup-title", children: t("privacy.signup.title") }),
+      /* @__PURE__ */ jsx24("p", { children: t("privacy.signup.description") })
+    ] }),
+    privacy.notices.length > 0 && /* @__PURE__ */ jsx24("div", { className: "ba-privacy-notices", children: privacy.notices.map((notice, index) => /* @__PURE__ */ jsxs22("details", { className: "ba-privacy-notice", open: index === 0, children: [
+      /* @__PURE__ */ jsx24("summary", { children: notice.title[locale] }),
+      /* @__PURE__ */ jsx24("p", { children: notice.body[locale] })
+    ] }, notice.noticeVersionId)) }),
+    privacy.consentPurposes.length > 0 && /* @__PURE__ */ jsxs22("fieldset", { className: "ba-privacy-purpose-list", children: [
+      /* @__PURE__ */ jsx24("legend", { children: t("privacy.signup.optional") }),
+      privacy.consentPurposes.map((purpose) => /* @__PURE__ */ jsxs22("label", { className: "ba-privacy-purpose", children: [
+        /* @__PURE__ */ jsxs22("span", { className: "ba-checkbox-control", children: [
+          /* @__PURE__ */ jsx24(
+            "input",
+            {
+              className: "ba-checkbox",
+              type: "checkbox",
+              checked: grantedPurposeCodes.has(purpose.code),
+              onChange: (event) => onPurposeChange(purpose.code, event.target.checked)
+            }
+          ),
+          /* @__PURE__ */ jsx24("span", { className: "ba-checkbox-visual", children: /* @__PURE__ */ jsx24("span", { className: "ba-checkbox-check" }) })
+        ] }),
+        /* @__PURE__ */ jsxs22("span", { children: [
+          /* @__PURE__ */ jsx24("strong", { children: purpose.title[locale] }),
+          /* @__PURE__ */ jsx24("small", { children: purpose.description[locale] })
+        ] })
+      ] }, purpose.purposeVersionId)),
+      /* @__PURE__ */ jsx24("p", { className: "ba-privacy-choice-note", children: t("privacy.signup.choiceNote") })
+    ] })
+  ] });
+}
+
 // src/components/SignUp.tsx
-import { Fragment as Fragment5, jsx as jsx24, jsxs as jsxs22 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx25, jsxs as jsxs23 } from "react/jsx-runtime";
 function SignUp({
   redirectTo,
   onSignedUp,
@@ -2029,6 +2099,7 @@ function SignUp({
   showBranding = true
 } = {}) {
   const t = useT();
+  const locale = useLocale();
   const toServerError = useServerError();
   const { signUp } = useSignUp();
   const { config, isLoading, isError } = usePublicConfig();
@@ -2042,6 +2113,10 @@ function SignUp({
   const [error, setError] = React17.useState(null);
   const [submitting, setSubmitting] = React17.useState(false);
   const [accepted, setAccepted] = React17.useState(false);
+  const [grantedPurposeCodes, setGrantedPurposeCodes] = React17.useState(
+    () => /* @__PURE__ */ new Set()
+  );
+  const [privacyCorrelationId] = React17.useState(createIdempotencyKey2);
   const legal = config?.legal;
   const consentRequired = Boolean(legal?.required);
   const consentBlocked = consentRequired && !accepted;
@@ -2068,6 +2143,12 @@ function SignUp({
     }
     setSubmitting(true);
     try {
+      const privacyEvidence = config?.privacy && config.privacy.notices.length > 0 ? (await import("@authowl/core/privacy")).buildPrivacySignUpEvidence(
+        config.privacy,
+        locale,
+        grantedPurposeCodes,
+        privacyCorrelationId
+      ) : void 0;
       const res = await authChallenge.run(
         AUTH_CHALLENGE_ACTIONS.signUp,
         (options) => signUp(
@@ -2081,7 +2162,8 @@ function SignUp({
               ...lastName.trim() ? { lastName: lastName.trim() } : {}
             } : {},
             callbackURL: verifyEmailUrl,
-            consentVersion: legal?.required ? legal.version : void 0
+            consentVersion: legal?.required ? legal.version : void 0,
+            ...privacyEvidence ? { privacyEvidence } : {}
           },
           options
         )
@@ -2103,21 +2185,21 @@ function SignUp({
     }
   }
   if (isLoading) {
-    return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-loading", "aria-busy": "true", children: [
-      /* @__PURE__ */ jsx24("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ jsx24("div", { className: "ba-skeleton" })
+    return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "signup-loading", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx25("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ jsx25("div", { className: "ba-skeleton" })
     ] });
   }
   if (isError) {
-    return /* @__PURE__ */ jsx24(PublicConfigError, { showBadge, showBranding });
+    return /* @__PURE__ */ jsx25(PublicConfigError, { showBadge, showBranding });
   }
   if (config?.signUp?.mode === "waitlist") {
-    return /* @__PURE__ */ jsx24(Waitlist, { onJoined: onWaitlisted, showBadge, showBranding });
+    return /* @__PURE__ */ jsx25(Waitlist, { onJoined: onWaitlisted, showBadge, showBranding });
   }
   if (pendingEmail) {
-    return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-verify-pending", children: [
-      showBranding ? /* @__PURE__ */ jsx24(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx24(
+    return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "signup-verify-pending", children: [
+      showBranding ? /* @__PURE__ */ jsx25(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx25(
         VerificationPending,
         {
           email: pendingEmail,
@@ -2125,32 +2207,33 @@ function SignUp({
           method: capabilities.emailVerificationMethod
         }
       ),
-      /* @__PURE__ */ jsx24(AuthOwlBadge, { force: showBadge })
+      /* @__PURE__ */ jsx25(AuthOwlBadge, { force: showBadge })
     ] });
   }
   const methods = config?.enabledMethods ?? ["password"];
   const publicSignupAllowed = config?.signUp?.mode !== "restricted";
-  const social = consentRequired || !publicSignupAllowed ? [] : config?.socialProviders ?? [];
+  const exactPrivacyEvidenceRequired = (config?.privacy?.notices.length ?? 0) > 0;
+  const social = consentRequired || exactPrivacyEvidenceRequired || !publicSignupAllowed ? [] : config?.socialProviders ?? [];
   const showPassword = publicSignupAllowed && capabilities.passwordSignIn && capabilities.emailSignUp && capabilities.passwordSignUp;
-  const showPasswordless = publicSignupAllowed && capabilities.emailOtpSignIn && capabilities.emailSignUp && !consentRequired && !capabilities.mfaRequired;
+  const showPasswordless = publicSignupAllowed && capabilities.emailOtpSignIn && capabilities.emailSignUp && !consentRequired && !exactPrivacyEvidenceRequired && !capabilities.mfaRequired;
   const renderable = showPassword || showPasswordless || social.length > 0;
   if (completeWithPasskey) {
-    return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
-      showBranding ? /* @__PURE__ */ jsx24(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx24(PasskeySignUpCompletion, { onComplete: finishSignUp }),
-      /* @__PURE__ */ jsx24(AuthOwlBadge, { force: showBadge })
+    return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
+      showBranding ? /* @__PURE__ */ jsx25(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx25(PasskeySignUpCompletion, { onComplete: finishSignUp }),
+      /* @__PURE__ */ jsx25(AuthOwlBadge, { force: showBadge })
     ] });
   }
-  return /* @__PURE__ */ jsxs22("div", { className: "ba-form", "data-testid": "signup-form", children: [
-    showBranding ? /* @__PURE__ */ jsx24(AuthOwlBranding, {}) : null,
-    /* @__PURE__ */ jsx24("h2", { className: "ba-title", children: t("signUp.title") }),
-    /* @__PURE__ */ jsx24(InvitationBanner, {}),
-    /* @__PURE__ */ jsx24(SocialButtons, { providers: social, callbackURL: redirectTo }),
-    showPassword && social.length > 0 && /* @__PURE__ */ jsx24("div", { className: "ba-divider", children: t("common.orDivider") }),
-    showPassword && /* @__PURE__ */ jsxs22("form", { method: "post", onSubmit, className: "ba-fields", children: [
-      capabilities.legacyNameField && /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
+  return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "signup-form", children: [
+    showBranding ? /* @__PURE__ */ jsx25(AuthOwlBranding, {}) : null,
+    /* @__PURE__ */ jsx25("h2", { className: "ba-title", children: t("signUp.title") }),
+    /* @__PURE__ */ jsx25(InvitationBanner, {}),
+    /* @__PURE__ */ jsx25(SocialButtons, { providers: social, callbackURL: redirectTo }),
+    showPassword && social.length > 0 && /* @__PURE__ */ jsx25("div", { className: "ba-divider", children: t("common.orDivider") }),
+    showPassword && /* @__PURE__ */ jsxs23("form", { method: "post", onSubmit, className: "ba-fields", children: [
+      capabilities.legacyNameField && /* @__PURE__ */ jsxs23("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ jsx24(
+        /* @__PURE__ */ jsx25(
           "input",
           {
             className: "ba-input",
@@ -2164,10 +2247,10 @@ function SignUp({
           }
         )
       ] }),
-      capabilities.firstLastName && /* @__PURE__ */ jsxs22(Fragment5, { children: [
-        /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
+      capabilities.firstLastName && /* @__PURE__ */ jsxs23(Fragment5, { children: [
+        /* @__PURE__ */ jsxs23("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ jsx24(
+          /* @__PURE__ */ jsx25(
             "input",
             {
               className: "ba-input",
@@ -2180,9 +2263,9 @@ function SignUp({
             }
           )
         ] }),
-        /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs23("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ jsx24(
+          /* @__PURE__ */ jsx25(
             "input",
             {
               className: "ba-input",
@@ -2196,9 +2279,9 @@ function SignUp({
           )
         ] })
       ] }),
-      capabilities.collectUsername && /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
+      capabilities.collectUsername && /* @__PURE__ */ jsxs23("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ jsx24(
+        /* @__PURE__ */ jsx25(
           "input",
           {
             className: "ba-input",
@@ -2212,9 +2295,9 @@ function SignUp({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs23("label", { className: "ba-label", children: [
         t("common.emailLabel"),
-        /* @__PURE__ */ jsx24(
+        /* @__PURE__ */ jsx25(
           "input",
           {
             className: "ba-input",
@@ -2229,9 +2312,9 @@ function SignUp({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs22("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs23("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ jsx24(
+        /* @__PURE__ */ jsx25(
           "input",
           {
             className: "ba-input",
@@ -2249,7 +2332,23 @@ function SignUp({
         )
       ] }),
       authChallenge.control,
-      legal && /* @__PURE__ */ jsx24(
+      config?.privacy && /* @__PURE__ */ jsx25(
+        PrivacySignUpEvidence,
+        {
+          privacy: config.privacy,
+          locale,
+          grantedPurposeCodes,
+          onPurposeChange: (purposeCode, granted) => {
+            setGrantedPurposeCodes((current) => {
+              const next = new Set(current);
+              if (granted) next.add(purposeCode);
+              else next.delete(purposeCode);
+              return next;
+            });
+          }
+        }
+      ),
+      legal && /* @__PURE__ */ jsx25(
         LegalConsentCheckbox,
         {
           legal,
@@ -2258,20 +2357,20 @@ function SignUp({
           testId: "signup-consent"
         }
       ),
-      /* @__PURE__ */ jsx24(FormError, { children: error }),
-      /* @__PURE__ */ jsx24(
+      /* @__PURE__ */ jsx25(FormError, { children: error }),
+      /* @__PURE__ */ jsx25(
         "button",
         {
           className: "ba-button",
           type: "submit",
           disabled: submitting || consentBlocked || authChallenge.configPending,
           "aria-busy": submitting || void 0,
-          children: /* @__PURE__ */ jsx24(Busy, { busy: submitting, label: t("signUp.submitPending"), children: t("signUp.submit") })
+          children: /* @__PURE__ */ jsx25(Busy, { busy: submitting, label: t("signUp.submitPending"), children: t("signUp.submit") })
         }
       )
     ] }),
-    showPasswordless && (showPassword || social.length > 0) && /* @__PURE__ */ jsx24("div", { className: "ba-divider", children: t("common.orDivider") }),
-    showPasswordless && /* @__PURE__ */ jsx24(
+    showPasswordless && (showPassword || social.length > 0) && /* @__PURE__ */ jsx25("div", { className: "ba-divider", children: t("common.orDivider") }),
+    showPasswordless && /* @__PURE__ */ jsx25(
       PasswordlessSignUp,
       {
         onAuthenticated: () => {
@@ -2280,25 +2379,25 @@ function SignUp({
         }
       }
     ),
-    !renderable && /* @__PURE__ */ jsx24("p", { className: "ba-muted", children: publicSignupAllowed && methods.length > 0 ? t("signUp.empty.unsupported") : t("signUp.empty.none") }),
-    /* @__PURE__ */ jsx24(AuthOwlBadge, { force: showBadge })
+    !renderable && /* @__PURE__ */ jsx25("p", { className: "ba-muted", children: publicSignupAllowed && methods.length > 0 ? t("signUp.empty.unsupported") : t("signUp.empty.none") }),
+    /* @__PURE__ */ jsx25(AuthOwlBadge, { force: showBadge })
   ] });
 }
 
 // src/components/ConsentGate.tsx
-import { Fragment as Fragment6, jsx as jsx25, jsxs as jsxs23 } from "react/jsx-runtime";
+import { Fragment as Fragment6, jsx as jsx26, jsxs as jsxs24 } from "react/jsx-runtime";
 function ConsentGate({ children, title }) {
   const t = useT();
   const { needsConsent, status, accept } = useConsent();
   const { pending, error, run } = useSubmitAction();
-  if (!needsConsent) return /* @__PURE__ */ jsx25(Fragment6, { children });
-  return /* @__PURE__ */ jsxs23("div", { className: "ba-form", "data-testid": "consent-gate", children: [
-    /* @__PURE__ */ jsx25("h2", { className: "ba-title", children: title ?? t("consent.gateTitle") }),
-    /* @__PURE__ */ jsx25("p", { className: "ba-muted", children: richMessage(t("consent.gateBody"), {
-      links: /* @__PURE__ */ jsx25(ConsentDocLinks, { termsUrl: status?.termsUrl, privacyUrl: status?.privacyUrl })
+  if (!needsConsent) return /* @__PURE__ */ jsx26(Fragment6, { children });
+  return /* @__PURE__ */ jsxs24("div", { className: "ba-form", "data-testid": "consent-gate", children: [
+    /* @__PURE__ */ jsx26("h2", { className: "ba-title", children: title ?? t("consent.gateTitle") }),
+    /* @__PURE__ */ jsx26("p", { className: "ba-muted", children: richMessage(t("consent.gateBody"), {
+      links: /* @__PURE__ */ jsx26(ConsentDocLinks, { termsUrl: status?.termsUrl, privacyUrl: status?.privacyUrl })
     }) }),
-    /* @__PURE__ */ jsx25(FormError, { children: error }),
-    /* @__PURE__ */ jsx25(
+    /* @__PURE__ */ jsx26(FormError, { children: error }),
+    /* @__PURE__ */ jsx26(
       "button",
       {
         className: "ba-button",
@@ -2312,28 +2411,28 @@ function ConsentGate({ children, title }) {
           },
           { failure: t("consent.error.acceptFailed") }
         ),
-        children: /* @__PURE__ */ jsx25(Busy, { busy: pending, label: t("consent.acceptPending"), children: t("consent.acceptSubmit") })
+        children: /* @__PURE__ */ jsx26(Busy, { busy: pending, label: t("consent.acceptPending"), children: t("consent.acceptSubmit") })
       }
     ),
-    /* @__PURE__ */ jsx25(AuthOwlBadge, {})
+    /* @__PURE__ */ jsx26(AuthOwlBadge, {})
   ] });
 }
 
 // src/components/MFARequiredGate.tsx
-import { Fragment as Fragment7, jsx as jsx26, jsxs as jsxs24 } from "react/jsx-runtime";
+import { Fragment as Fragment7, jsx as jsx27, jsxs as jsxs25 } from "react/jsx-runtime";
 function MFARequiredGate({ children, title }) {
   const state = useConfirmedMfaPending();
-  if (state === "clear") return /* @__PURE__ */ jsx26(Fragment7, { children });
+  if (state === "clear") return /* @__PURE__ */ jsx27(Fragment7, { children });
   if (state === "confirming") return null;
-  return /* @__PURE__ */ jsxs24("div", { className: "ba-form", "data-testid": "mfa-required-gate", children: [
-    /* @__PURE__ */ jsx26(MfaEnrollmentStep, { title }),
-    /* @__PURE__ */ jsx26(AuthOwlBadge, {})
+  return /* @__PURE__ */ jsxs25("div", { className: "ba-form", "data-testid": "mfa-required-gate", children: [
+    /* @__PURE__ */ jsx27(MfaEnrollmentStep, { title }),
+    /* @__PURE__ */ jsx27(AuthOwlBadge, {})
   ] });
 }
 
 // src/components/BackupCodesManager.tsx
 import * as React18 from "react";
-import { Fragment as Fragment8, jsx as jsx27, jsxs as jsxs25 } from "react/jsx-runtime";
+import { Fragment as Fragment8, jsx as jsx28, jsxs as jsxs26 } from "react/jsx-runtime";
 function BackupCodesManager({ title }) {
   const t = useT();
   const { user } = useUser();
@@ -2352,20 +2451,20 @@ function BackupCodesManager({ title }) {
       }
     });
   };
-  return /* @__PURE__ */ jsxs25("div", { className: "ba-form", "data-testid": "backup-codes-manager", children: [
-    title !== null && /* @__PURE__ */ jsx27("h2", { className: "ba-title", children: title ?? t("backupCodes.title") }),
-    /* @__PURE__ */ jsx27("p", { className: "ba-muted", children: t("backupCodes.hint") }),
-    codes ? /* @__PURE__ */ jsxs25(Fragment8, { children: [
-      /* @__PURE__ */ jsxs25("p", { className: "ba-muted", children: [
-        /* @__PURE__ */ jsx27("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
+  return /* @__PURE__ */ jsxs26("div", { className: "ba-form", "data-testid": "backup-codes-manager", children: [
+    title !== null && /* @__PURE__ */ jsx28("h2", { className: "ba-title", children: title ?? t("backupCodes.title") }),
+    /* @__PURE__ */ jsx28("p", { className: "ba-muted", children: t("backupCodes.hint") }),
+    codes ? /* @__PURE__ */ jsxs26(Fragment8, { children: [
+      /* @__PURE__ */ jsxs26("p", { className: "ba-muted", children: [
+        /* @__PURE__ */ jsx28("strong", { children: t("mfa.enroll.backupCodesWarningStrong") }),
         " ",
         t("mfa.enroll.backupCodesWarningRest")
       ] }),
-      /* @__PURE__ */ jsx27("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ jsx27("li", { className: "ba-passkey-item", children: /* @__PURE__ */ jsx27("code", { children: /* @__PURE__ */ jsx27("bdi", { children: c }) }) }, c)) })
-    ] }) : /* @__PURE__ */ jsxs25("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs25("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsx28("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ jsx28("li", { className: "ba-passkey-item", children: /* @__PURE__ */ jsx28("code", { children: /* @__PURE__ */ jsx28("bdi", { children: c }) }) }, c)) })
+    ] }) : /* @__PURE__ */ jsxs26("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs26("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ jsx27(
+        /* @__PURE__ */ jsx28(
           "input",
           {
             className: "ba-input",
@@ -2377,15 +2476,15 @@ function BackupCodesManager({ title }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx27(FormError, { children: error }),
-      /* @__PURE__ */ jsx27("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx27(Busy, { busy: pending, label: t("backupCodes.pending"), children: t("backupCodes.submit") }) })
+      /* @__PURE__ */ jsx28(FormError, { children: error }),
+      /* @__PURE__ */ jsx28("button", { className: "ba-button", type: "submit", disabled: pending || !password, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx28(Busy, { busy: pending, label: t("backupCodes.pending"), children: t("backupCodes.submit") }) })
     ] })
   ] });
 }
 
 // src/components/MagicLinkForm.tsx
 import * as React19 from "react";
-import { jsx as jsx28, jsxs as jsxs26 } from "react/jsx-runtime";
+import { jsx as jsx29, jsxs as jsxs27 } from "react/jsx-runtime";
 function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const t = useT();
   const { signInMagicLink } = useSignIn();
@@ -2394,9 +2493,9 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const [email, setEmail] = React19.useState("");
   const [sent, setSent] = React19.useState(false);
   if (sent) {
-    return /* @__PURE__ */ jsx28("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
+    return /* @__PURE__ */ jsx29("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
   }
-  return /* @__PURE__ */ jsxs26(
+  return /* @__PURE__ */ jsxs27(
     "form",
     {
       method: "post",
@@ -2410,9 +2509,9 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
       className: "ba-fields",
       "data-testid": "magiclink-form",
       children: [
-        /* @__PURE__ */ jsxs26("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs27("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx29(
             "input",
             {
               className: "ba-input",
@@ -2425,15 +2524,15 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ jsx28(FormError, { children: error }),
-        /* @__PURE__ */ jsx28(
+        /* @__PURE__ */ jsx29(FormError, { children: error }),
+        /* @__PURE__ */ jsx29(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx28(Busy, { busy: pending, label: t("common.sending"), children: t("magicLink.submit") })
+            children: /* @__PURE__ */ jsx29(Busy, { busy: pending, label: t("common.sending"), children: t("magicLink.submit") })
           }
         )
       ]
@@ -2443,7 +2542,7 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
 
 // src/components/EmailOtpForm.tsx
 import * as React20 from "react";
-import { jsx as jsx29, jsxs as jsxs27 } from "react/jsx-runtime";
+import { jsx as jsx30, jsxs as jsxs28 } from "react/jsx-runtime";
 function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const t = useT();
   const { sessionStore } = useAuthClient();
@@ -2454,7 +2553,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const [otp, setOtp] = React20.useState("");
   const [stage, setStage] = React20.useState("email");
   if (stage === "code") {
-    return /* @__PURE__ */ jsx29(
+    return /* @__PURE__ */ jsx30(
       OtpCodeForm,
       {
         email,
@@ -2477,7 +2576,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
       }
     );
   }
-  return /* @__PURE__ */ jsxs27(
+  return /* @__PURE__ */ jsxs28(
     "form",
     {
       method: "post",
@@ -2491,9 +2590,9 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
       className: "ba-fields",
       "data-testid": "emailotp-email",
       children: [
-        /* @__PURE__ */ jsxs27("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs28("label", { className: "ba-label", children: [
           t("common.emailLabel"),
-          /* @__PURE__ */ jsx29(
+          /* @__PURE__ */ jsx30(
             "input",
             {
               className: "ba-input",
@@ -2509,15 +2608,15 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
           )
         ] }),
         authChallenge.control,
-        /* @__PURE__ */ jsx29(FormError, { children: error }),
-        /* @__PURE__ */ jsx29(
+        /* @__PURE__ */ jsx30(FormError, { children: error }),
+        /* @__PURE__ */ jsx30(
           "button",
           {
             className: "ba-button",
             type: "submit",
             disabled: pending || authChallenge.configPending,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx29(Busy, { busy: pending, label: t("common.sending"), children: t("emailOtp.requestSubmit") })
+            children: /* @__PURE__ */ jsx30(Busy, { busy: pending, label: t("common.sending"), children: t("emailOtp.requestSubmit") })
           }
         )
       ]
@@ -2527,7 +2626,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
 
 // src/components/ResetPassword.tsx
 import * as React21 from "react";
-import { jsx as jsx30, jsxs as jsxs28 } from "react/jsx-runtime";
+import { jsx as jsx31, jsxs as jsxs29 } from "react/jsx-runtime";
 function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
   const t = useT();
   const { resetPassword } = usePasswordReset();
@@ -2547,15 +2646,15 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
     setReady(true);
   }, [tokenProp]);
   if (!ready) {
-    return /* @__PURE__ */ jsx30("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx30("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ jsx31("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx31("div", { className: "ba-skeleton" }) });
   }
   if (!token) {
-    return /* @__PURE__ */ jsx30(FormError, { "data-testid": "reset-invalid", children: t("resetPassword.invalidLink") });
+    return /* @__PURE__ */ jsx31(FormError, { "data-testid": "reset-invalid", children: t("resetPassword.invalidLink") });
   }
   if (done) {
-    return /* @__PURE__ */ jsx30("p", { className: "ba-muted", "data-testid": "reset-done", children: t("resetPassword.done") });
+    return /* @__PURE__ */ jsx31("p", { className: "ba-muted", "data-testid": "reset-done", children: t("resetPassword.done") });
   }
-  return /* @__PURE__ */ jsxs28(
+  return /* @__PURE__ */ jsxs29(
     "form",
     {
       method: "post",
@@ -2581,9 +2680,9 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
         });
       },
       children: [
-        /* @__PURE__ */ jsxs28("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs29("label", { className: "ba-label", children: [
           t("resetPassword.newPasswordLabel"),
-          /* @__PURE__ */ jsx30(
+          /* @__PURE__ */ jsx31(
             "input",
             {
               className: "ba-input",
@@ -2600,9 +2699,9 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
             }
           )
         ] }),
-        /* @__PURE__ */ jsxs28("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs29("label", { className: "ba-label", children: [
           t("resetPassword.confirmPasswordLabel"),
-          /* @__PURE__ */ jsx30(
+          /* @__PURE__ */ jsx31(
             "input",
             {
               className: "ba-input",
@@ -2619,8 +2718,8 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
             }
           )
         ] }),
-        /* @__PURE__ */ jsx30(FormError, { children: error }),
-        /* @__PURE__ */ jsx30("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx30(Busy, { busy: pending, label: t("resetPassword.submitPending"), children: t("resetPassword.submit") }) })
+        /* @__PURE__ */ jsx31(FormError, { children: error }),
+        /* @__PURE__ */ jsx31("button", { className: "ba-button", type: "submit", disabled: pending, "aria-busy": pending || void 0, children: /* @__PURE__ */ jsx31(Busy, { busy: pending, label: t("resetPassword.submitPending"), children: t("resetPassword.submit") }) })
       ]
     }
   );
@@ -2628,7 +2727,7 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
 
 // src/components/VerifyEmail.tsx
 import * as React22 from "react";
-import { Fragment as Fragment9, jsx as jsx31, jsxs as jsxs29 } from "react/jsx-runtime";
+import { Fragment as Fragment9, jsx as jsx32, jsxs as jsxs30 } from "react/jsx-runtime";
 function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
   const t = useT();
   const { sendVerificationEmail } = useEmailVerification();
@@ -2648,12 +2747,12 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
     }
   }, [onVerified, redirectTo]);
   if (!ready) {
-    return /* @__PURE__ */ jsx31("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx31("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ jsx32("div", { className: "ba-form", "aria-busy": "true", children: /* @__PURE__ */ jsx32("div", { className: "ba-skeleton" }) });
   }
   if (!failed) {
-    return /* @__PURE__ */ jsx31("p", { className: "ba-muted", "data-testid": "verify-success", children: t("verifyEmail.success") });
+    return /* @__PURE__ */ jsx32("p", { className: "ba-muted", "data-testid": "verify-success", children: t("verifyEmail.success") });
   }
-  return /* @__PURE__ */ jsxs29(
+  return /* @__PURE__ */ jsxs30(
     "form",
     {
       method: "post",
@@ -2668,11 +2767,11 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
         });
       },
       children: [
-        /* @__PURE__ */ jsx31(FormError, { children: t("verifyEmail.invalidLink") }),
-        resent ? /* @__PURE__ */ jsx31("p", { className: "ba-muted", children: richMessage(t("verifyEmail.resent"), { email: /* @__PURE__ */ jsx31(Bidi, { children: email }) }) }) : /* @__PURE__ */ jsxs29(Fragment9, { children: [
-          /* @__PURE__ */ jsxs29("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsx32(FormError, { children: t("verifyEmail.invalidLink") }),
+        resent ? /* @__PURE__ */ jsx32("p", { className: "ba-muted", children: richMessage(t("verifyEmail.resent"), { email: /* @__PURE__ */ jsx32(Bidi, { children: email }) }) }) : /* @__PURE__ */ jsxs30(Fragment9, { children: [
+          /* @__PURE__ */ jsxs30("label", { className: "ba-label", children: [
             t("common.emailLabel"),
-            /* @__PURE__ */ jsx31(
+            /* @__PURE__ */ jsx32(
               "input",
               {
                 className: "ba-input",
@@ -2685,15 +2784,15 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
             )
           ] }),
           authChallenge.control,
-          /* @__PURE__ */ jsx31(FormError, { children: error }),
-          /* @__PURE__ */ jsx31(
+          /* @__PURE__ */ jsx32(FormError, { children: error }),
+          /* @__PURE__ */ jsx32(
             "button",
             {
               className: "ba-button",
               type: "submit",
               disabled: pending || authChallenge.configPending,
               "aria-busy": pending || void 0,
-              children: /* @__PURE__ */ jsx31(Busy, { busy: pending, label: t("common.sending"), children: t("verifyEmail.resendSubmit") })
+              children: /* @__PURE__ */ jsx32(Busy, { busy: pending, label: t("common.sending"), children: t("verifyEmail.resendSubmit") })
             }
           )
         ] })
@@ -2704,17 +2803,17 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
 
 // src/components/PasskeyManager.tsx
 import * as React23 from "react";
-import { jsx as jsx32, jsxs as jsxs30 } from "react/jsx-runtime";
+import { jsx as jsx33, jsxs as jsxs31 } from "react/jsx-runtime";
 function PasskeyManager({ title, allowAdd = true } = {}) {
   const t = useT();
   const { user, isLoaded, isSignedIn } = useUser();
   if (!isLoaded) {
-    return /* @__PURE__ */ jsx32("div", { className: "ba-form", "data-testid": "passkey-manager-loading", "aria-busy": "true", children: /* @__PURE__ */ jsx32("div", { className: "ba-skeleton" }) });
+    return /* @__PURE__ */ jsx33("div", { className: "ba-form", "data-testid": "passkey-manager-loading", "aria-busy": "true", children: /* @__PURE__ */ jsx33("div", { className: "ba-skeleton" }) });
   }
   if (!isSignedIn || !user) {
-    return /* @__PURE__ */ jsx32("p", { className: "ba-muted", children: t("passkeys.signedOut") });
+    return /* @__PURE__ */ jsx33("p", { className: "ba-muted", children: t("passkeys.signedOut") });
   }
-  return /* @__PURE__ */ jsx32(PasskeyManagerBody, { title, allowAdd }, user.id);
+  return /* @__PURE__ */ jsx33(PasskeyManagerBody, { title, allowAdd }, user.id);
 }
 function PasskeyManagerBody({
   title,
@@ -2763,13 +2862,13 @@ function PasskeyManagerBody({
       onSuccess: load
     });
   }
-  return /* @__PURE__ */ jsxs30("div", { className: "ba-form", "data-testid": "passkey-manager", children: [
-    title !== null && /* @__PURE__ */ jsx32("h2", { className: "ba-title", children: title ?? t("passkeys.title") }),
-    passkeys === null ? error ? null : /* @__PURE__ */ jsx32("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs30("ul", { className: "ba-passkey-list", children: [
-      (passkeys ?? []).map((pk) => /* @__PURE__ */ jsxs30("li", { className: "ba-passkey-item", children: [
-        /* @__PURE__ */ jsx32("span", { className: "ba-passkey-name", children: pk.name?.trim() || t("passkeys.unnamed") }),
-        /* @__PURE__ */ jsxs30("span", { className: "ba-passkey-actions", children: [
-          /* @__PURE__ */ jsx32(
+  return /* @__PURE__ */ jsxs31("div", { className: "ba-form", "data-testid": "passkey-manager", children: [
+    title !== null && /* @__PURE__ */ jsx33("h2", { className: "ba-title", children: title ?? t("passkeys.title") }),
+    passkeys === null ? error ? null : /* @__PURE__ */ jsx33("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs31("ul", { className: "ba-passkey-list", children: [
+      (passkeys ?? []).map((pk) => /* @__PURE__ */ jsxs31("li", { className: "ba-passkey-item", children: [
+        /* @__PURE__ */ jsx33("span", { className: "ba-passkey-name", children: pk.name?.trim() || t("passkeys.unnamed") }),
+        /* @__PURE__ */ jsxs31("span", { className: "ba-passkey-actions", children: [
+          /* @__PURE__ */ jsx33(
             "button",
             {
               type: "button",
@@ -2779,7 +2878,7 @@ function PasskeyManagerBody({
               children: t("passkeys.rename")
             }
           ),
-          /* @__PURE__ */ jsx32(
+          /* @__PURE__ */ jsx33(
             "button",
             {
               type: "button",
@@ -2791,13 +2890,13 @@ function PasskeyManagerBody({
           )
         ] })
       ] }, pk.id)),
-      passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ jsx32("li", { className: "ba-muted", children: t("passkeys.empty") })
+      passkeys !== null && passkeys.length === 0 && /* @__PURE__ */ jsx33("li", { className: "ba-muted", children: t("passkeys.empty") })
     ] }),
-    error && /* @__PURE__ */ jsxs30("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ jsx32(FormError, { children: error }),
-      passkeys === null && /* @__PURE__ */ jsx32("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("userProfile.retry") })
+    error && /* @__PURE__ */ jsxs31("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ jsx33(FormError, { children: error }),
+      passkeys === null && /* @__PURE__ */ jsx33("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("userProfile.retry") })
     ] }),
-    passkeys !== null && allowAdd && /* @__PURE__ */ jsx32(
+    passkeys !== null && allowAdd && /* @__PURE__ */ jsx33(
       "button",
       {
         className: "ba-button",
@@ -2808,7 +2907,7 @@ function PasskeyManagerBody({
           failure: t("passkeys.error.addFailed"),
           onSuccess: load
         }),
-        children: /* @__PURE__ */ jsx32(Busy, { busy: pending, label: t("common.working"), children: t("passkeys.add") })
+        children: /* @__PURE__ */ jsx33(Busy, { busy: pending, label: t("common.working"), children: t("passkeys.add") })
       }
     )
   ] });
@@ -2816,14 +2915,14 @@ function PasskeyManagerBody({
 
 // src/components/control.tsx
 import { membershipHas } from "@authowl/core";
-import { Fragment as Fragment10, jsx as jsx33, jsxs as jsxs31 } from "react/jsx-runtime";
+import { Fragment as Fragment10, jsx as jsx34, jsxs as jsxs32 } from "react/jsx-runtime";
 function SignedIn({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && isSignedIn ? /* @__PURE__ */ jsx33(Fragment10, { children }) : null;
+  return isLoaded && isSignedIn ? /* @__PURE__ */ jsx34(Fragment10, { children }) : null;
 }
 function SignedOut({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && !isSignedIn ? /* @__PURE__ */ jsx33(Fragment10, { children }) : null;
+  return isLoaded && !isSignedIn ? /* @__PURE__ */ jsx34(Fragment10, { children }) : null;
 }
 function Protect({
   children,
@@ -2836,36 +2935,36 @@ function Protect({
   const { user, isLoaded, isSignedIn } = useUser();
   const membership = useSession().data?.session?.membership ?? null;
   if (!isLoaded) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ jsx33(Fragment10, { children: fallback });
+  if (!isSignedIn || !user) return /* @__PURE__ */ jsx34(Fragment10, { children: fallback });
   if ((role !== void 0 || permission !== void 0 || teamId !== void 0) && !membershipHas(membership, { role, permission, teamId })) {
-    return /* @__PURE__ */ jsx33(Fragment10, { children: fallback });
+    return /* @__PURE__ */ jsx34(Fragment10, { children: fallback });
   }
-  if (condition && !condition(user)) return /* @__PURE__ */ jsx33(Fragment10, { children: fallback });
-  return /* @__PURE__ */ jsx33(Fragment10, { children });
+  if (condition && !condition(user)) return /* @__PURE__ */ jsx34(Fragment10, { children: fallback });
+  return /* @__PURE__ */ jsx34(Fragment10, { children });
 }
 function AuthLoading({ children }) {
   const t = useT();
   const { isLoaded } = useUser();
   if (isLoaded) return null;
-  if (children !== void 0) return /* @__PURE__ */ jsx33(Fragment10, { children });
-  return /* @__PURE__ */ jsxs31("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
-    /* @__PURE__ */ jsx33(Spinner, {}),
-    /* @__PURE__ */ jsx33("span", { className: "ba-sr-only", children: t("common.loading") })
+  if (children !== void 0) return /* @__PURE__ */ jsx34(Fragment10, { children });
+  return /* @__PURE__ */ jsxs32("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
+    /* @__PURE__ */ jsx34(Spinner, {}),
+    /* @__PURE__ */ jsx34("span", { className: "ba-sr-only", children: t("common.loading") })
   ] });
 }
 function AuthLoaded({ children }) {
-  return useUser().isLoaded ? /* @__PURE__ */ jsx33(Fragment10, { children }) : null;
+  return useUser().isLoaded ? /* @__PURE__ */ jsx34(Fragment10, { children }) : null;
 }
 
 // src/components/SignOutButton.tsx
 import * as React24 from "react";
-import { jsx as jsx34 } from "react/jsx-runtime";
+import { jsx as jsx35 } from "react/jsx-runtime";
 function SignOutButton({ children, redirectTo, onSignedOut, className }) {
   const t = useT();
   const { signOut } = useSignOut();
   const [pending, setPending] = React24.useState(false);
   const content = children ?? t("signOut.button");
-  return /* @__PURE__ */ jsx34(
+  return /* @__PURE__ */ jsx35(
     "button",
     {
       type: "button",
@@ -2883,20 +2982,20 @@ function SignOutButton({ children, redirectTo, onSignedOut, className }) {
           setPending(false);
         }
       },
-      children: /* @__PURE__ */ jsx34(Busy, { busy: pending, label: content, children: content })
+      children: /* @__PURE__ */ jsx35(Busy, { busy: pending, label: content, children: content })
     }
   );
 }
 
 // src/components/UserButton.tsx
-import * as React37 from "react";
+import * as React38 from "react";
 
 // src/components/UserProfile.tsx
-import * as React36 from "react";
+import * as React37 from "react";
 
 // src/components/user-profile/EmailSection.tsx
 import * as React25 from "react";
-import { jsx as jsx35, jsxs as jsxs32 } from "react/jsx-runtime";
+import { jsx as jsx36, jsxs as jsxs33 } from "react/jsx-runtime";
 function EmailSection({ allowChange }) {
   const t = useT();
   const account = useAccount();
@@ -2906,9 +3005,9 @@ function EmailSection({ allowChange }) {
   const [sent, setSent] = React25.useState(false);
   const titleId = React25.useId();
   if (!user?.email) {
-    return /* @__PURE__ */ jsxs32("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ jsx35("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ jsx35("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
+    return /* @__PURE__ */ jsxs33("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ jsx36("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
     ] });
   }
   const submit = (event) => {
@@ -2928,19 +3027,19 @@ function EmailSection({ allowChange }) {
       }
     );
   };
-  return /* @__PURE__ */ jsxs32("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs32("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx35("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ jsx35("p", { className: "ba-muted", children: t("userProfile.email.description") })
+  return /* @__PURE__ */ jsxs33("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs33("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx36("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: t("userProfile.email.description") })
     ] }),
-    /* @__PURE__ */ jsxs32("p", { className: "ba-profile-current", children: [
-      /* @__PURE__ */ jsx35("span", { children: t("userProfile.email.current") }),
-      /* @__PURE__ */ jsx35("strong", { children: /* @__PURE__ */ jsx35(Bidi, { children: user.email }) })
+    /* @__PURE__ */ jsxs33("p", { className: "ba-profile-current", children: [
+      /* @__PURE__ */ jsx36("span", { children: t("userProfile.email.current") }),
+      /* @__PURE__ */ jsx36("strong", { children: /* @__PURE__ */ jsx36(Bidi, { children: user.email }) })
     ] }),
-    !allowChange ? /* @__PURE__ */ jsx35("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ jsxs32("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs32("label", { className: "ba-label", children: [
+    !allowChange ? /* @__PURE__ */ jsx36("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ jsxs33("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs33("label", { className: "ba-label", children: [
         t("userProfile.email.newLabel"),
-        /* @__PURE__ */ jsx35(
+        /* @__PURE__ */ jsx36(
           "input",
           {
             className: "ba-input",
@@ -2952,16 +3051,16 @@ function EmailSection({ allowChange }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx35(FormError, { children: error }),
-      sent && /* @__PURE__ */ jsx35("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
-      /* @__PURE__ */ jsx35(
+      /* @__PURE__ */ jsx36(FormError, { children: error }),
+      sent && /* @__PURE__ */ jsx36("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
+      /* @__PURE__ */ jsx36(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !newEmail.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx35(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
+          children: /* @__PURE__ */ jsx36(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
         }
       )
     ] })
@@ -2970,7 +3069,7 @@ function EmailSection({ allowChange }) {
 
 // src/components/user-profile/DeleteAccountSection.tsx
 import * as React26 from "react";
-import { jsx as jsx36, jsxs as jsxs33 } from "react/jsx-runtime";
+import { jsx as jsx37, jsxs as jsxs34 } from "react/jsx-runtime";
 function DeleteAccountSection({ onDeleted }) {
   const t = useT();
   const account = useAccount();
@@ -2995,18 +3094,18 @@ function DeleteAccountSection({ onDeleted }) {
       }
     );
   };
-  return /* @__PURE__ */ jsxs33("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs33("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx36("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
-      /* @__PURE__ */ jsx36("p", { className: "ba-muted", children: t("userProfile.delete.description") })
+  return /* @__PURE__ */ jsxs34("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs34("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx37("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
+      /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: t("userProfile.delete.description") })
     ] }),
-    /* @__PURE__ */ jsxs33("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsx36("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
-      /* @__PURE__ */ jsxs33("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs34("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsx37("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
+      /* @__PURE__ */ jsxs34("label", { className: "ba-label", children: [
         t("userProfile.delete.confirmLabel"),
         " ",
-        /* @__PURE__ */ jsx36(Bidi, { children: identifier }),
-        /* @__PURE__ */ jsx36(
+        /* @__PURE__ */ jsx37(Bidi, { children: identifier }),
+        /* @__PURE__ */ jsx37(
           "input",
           {
             className: "ba-input",
@@ -3020,15 +3119,15 @@ function DeleteAccountSection({ onDeleted }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx36(FormError, { children: error }),
-      /* @__PURE__ */ jsx36(
+      /* @__PURE__ */ jsx37(FormError, { children: error }),
+      /* @__PURE__ */ jsx37(
         "button",
         {
           className: "ba-button ba-danger-button ba-profile-submit",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx36(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
+          children: /* @__PURE__ */ jsx37(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
         }
       )
     ] })
@@ -3037,7 +3136,7 @@ function DeleteAccountSection({ onDeleted }) {
 
 // src/components/user-profile/MfaSection.tsx
 import * as React27 from "react";
-import { jsx as jsx37, jsxs as jsxs34 } from "react/jsx-runtime";
+import { jsx as jsx38, jsxs as jsxs35 } from "react/jsx-runtime";
 function MfaSection() {
   const t = useT();
   const { user } = useUser();
@@ -3050,12 +3149,12 @@ function MfaSection() {
   const titleId = React27.useId();
   const required = resolveProjectCapabilities(config).mfaRequired;
   if (!user?.twoFactorEnabled) {
-    return /* @__PURE__ */ jsxs34("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ jsxs34("header", { className: "ba-profile-section-header", children: [
-        /* @__PURE__ */ jsx37("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-        /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
+    return /* @__PURE__ */ jsxs35("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ jsxs35("header", { className: "ba-profile-section-header", children: [
+        /* @__PURE__ */ jsx38("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+        /* @__PURE__ */ jsx38("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
       ] }),
-      /* @__PURE__ */ jsx37(
+      /* @__PURE__ */ jsx38(
         MFAEnrollment,
         {
           title: null,
@@ -3078,16 +3177,16 @@ function MfaSection() {
       }
     );
   };
-  return /* @__PURE__ */ jsxs34("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs34("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx37("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-      /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
+  return /* @__PURE__ */ jsxs35("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs35("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx38("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+      /* @__PURE__ */ jsx38("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
     ] }),
-    /* @__PURE__ */ jsxs34("div", { className: "ba-profile-status", role: "status", children: [
-      /* @__PURE__ */ jsx37("strong", { children: t("userProfile.mfa.enabled") }),
-      /* @__PURE__ */ jsx37("span", { children: t("userProfile.mfa.authenticator") })
+    /* @__PURE__ */ jsxs35("div", { className: "ba-profile-status", role: "status", children: [
+      /* @__PURE__ */ jsx38("strong", { children: t("userProfile.mfa.enabled") }),
+      /* @__PURE__ */ jsx38("span", { children: t("userProfile.mfa.authenticator") })
     ] }),
-    !showDisable ? /* @__PURE__ */ jsx37(
+    !showDisable ? /* @__PURE__ */ jsx38(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -3095,11 +3194,11 @@ function MfaSection() {
         onClick: () => setShowDisable(true),
         children: required ? t("userProfile.mfa.replace") : t("userProfile.mfa.disable")
       }
-    ) : /* @__PURE__ */ jsxs34("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
-      /* @__PURE__ */ jsx37("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
-      /* @__PURE__ */ jsxs34("label", { className: "ba-label", children: [
+    ) : /* @__PURE__ */ jsxs35("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
+      /* @__PURE__ */ jsx38("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
+      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ jsx37(
+        /* @__PURE__ */ jsx38(
           "input",
           {
             className: "ba-input",
@@ -3111,19 +3210,19 @@ function MfaSection() {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx37(FormError, { children: error }),
-      /* @__PURE__ */ jsxs34("span", { className: "ba-profile-action-row", children: [
-        /* @__PURE__ */ jsx37(
+      /* @__PURE__ */ jsx38(FormError, { children: error }),
+      /* @__PURE__ */ jsxs35("span", { className: "ba-profile-action-row", children: [
+        /* @__PURE__ */ jsx38(
           "button",
           {
             className: "ba-button ba-danger-button",
             type: "submit",
             disabled: pending || !password,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ jsx37(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
+            children: /* @__PURE__ */ jsx38(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
           }
         ),
-        /* @__PURE__ */ jsx37(
+        /* @__PURE__ */ jsx38(
           "button",
           {
             className: "ba-button ba-button-secondary",
@@ -3143,7 +3242,7 @@ function MfaSection() {
 
 // src/components/user-profile/PasswordSection.tsx
 import * as React28 from "react";
-import { jsx as jsx38, jsxs as jsxs35 } from "react/jsx-runtime";
+import { jsx as jsx39, jsxs as jsxs36 } from "react/jsx-runtime";
 function PasswordSection() {
   const t = useT();
   const account = useAccount();
@@ -3179,43 +3278,43 @@ function PasswordSection() {
       }
     );
   };
-  return /* @__PURE__ */ jsxs35("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs35("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx38("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
-      /* @__PURE__ */ jsx38("p", { className: "ba-muted", children: t("userProfile.password.description") })
+  return /* @__PURE__ */ jsxs36("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs36("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx39("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
+      /* @__PURE__ */ jsx39("p", { className: "ba-muted", children: t("userProfile.password.description") })
     ] }),
-    /* @__PURE__ */ jsxs35("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs36("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
         t("userProfile.password.currentLabel"),
-        /* @__PURE__ */ jsx38("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
+        /* @__PURE__ */ jsx39("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
           setCurrentPassword(event.target.value);
           setError(null);
         }, required: true })
       ] }),
-      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
         t("resetPassword.newPasswordLabel"),
-        /* @__PURE__ */ jsx38("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
+        /* @__PURE__ */ jsx39("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
           setNewPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ jsxs35("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs36("label", { className: "ba-label", children: [
         t("resetPassword.confirmPasswordLabel"),
-        /* @__PURE__ */ jsx38("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
+        /* @__PURE__ */ jsx39("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
           setConfirmPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ jsx38(FormError, { children: error }),
-      saved && /* @__PURE__ */ jsx38("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
-      /* @__PURE__ */ jsx38(
+      /* @__PURE__ */ jsx39(FormError, { children: error }),
+      saved && /* @__PURE__ */ jsx39("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
+      /* @__PURE__ */ jsx39(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !currentPassword || !newPassword || !confirmPassword,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx38(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
+          children: /* @__PURE__ */ jsx39(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
         }
       )
     ] })
@@ -3224,22 +3323,22 @@ function PasswordSection() {
 
 // src/components/user-profile/PasskeysSection.tsx
 import * as React29 from "react";
-import { jsx as jsx39, jsxs as jsxs36 } from "react/jsx-runtime";
+import { jsx as jsx40, jsxs as jsxs37 } from "react/jsx-runtime";
 function PasskeysSection({ allowAdd }) {
   const t = useT();
   const titleId = React29.useId();
-  return /* @__PURE__ */ jsxs36("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs36("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx39("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
-      /* @__PURE__ */ jsx39("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
+  return /* @__PURE__ */ jsxs37("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs37("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx40("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
+      /* @__PURE__ */ jsx40("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
     ] }),
-    /* @__PURE__ */ jsx39(PasskeyManager, { title: null, allowAdd })
+    /* @__PURE__ */ jsx40(PasskeyManager, { title: null, allowAdd })
   ] });
 }
 
 // src/components/user-profile/ProfileSection.tsx
 import * as React30 from "react";
-import { Fragment as Fragment11, jsx as jsx40, jsxs as jsxs37 } from "react/jsx-runtime";
+import { Fragment as Fragment11, jsx as jsx41, jsxs as jsxs38 } from "react/jsx-runtime";
 function ProfileSection({
   firstLastName,
   usernameEnabled,
@@ -3281,15 +3380,15 @@ function ProfileSection({
       }
     );
   };
-  return /* @__PURE__ */ jsxs37("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs37("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx40("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
-      /* @__PURE__ */ jsx40("p", { className: "ba-muted", children: t("userProfile.profile.description") })
+  return /* @__PURE__ */ jsxs38("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs38("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx41("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
+      /* @__PURE__ */ jsx41("p", { className: "ba-muted", children: t("userProfile.profile.description") })
     ] }),
-    /* @__PURE__ */ jsxs37("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      legacyNameField && /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
+    /* @__PURE__ */ jsxs38("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      legacyNameField && /* @__PURE__ */ jsxs38("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ jsx40(
+        /* @__PURE__ */ jsx41(
           "input",
           {
             className: "ba-input",
@@ -3300,10 +3399,10 @@ function ProfileSection({
           }
         )
       ] }),
-      firstLastName && /* @__PURE__ */ jsxs37(Fragment11, { children: [
-        /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
+      firstLastName && /* @__PURE__ */ jsxs38(Fragment11, { children: [
+        /* @__PURE__ */ jsxs38("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ jsx40(
+          /* @__PURE__ */ jsx41(
             "input",
             {
               className: "ba-input",
@@ -3313,9 +3412,9 @@ function ProfileSection({
             }
           )
         ] }),
-        /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
+        /* @__PURE__ */ jsxs38("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ jsx40(
+          /* @__PURE__ */ jsx41(
             "input",
             {
               className: "ba-input",
@@ -3326,9 +3425,9 @@ function ProfileSection({
           )
         ] })
       ] }),
-      usernameEnabled && /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
+      usernameEnabled && /* @__PURE__ */ jsxs38("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ jsx40(
+        /* @__PURE__ */ jsx41(
           "input",
           {
             className: "ba-input",
@@ -3338,9 +3437,9 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ jsxs37("label", { className: "ba-label", children: [
+      /* @__PURE__ */ jsxs38("label", { className: "ba-label", children: [
         t("userProfile.profile.imageLabel"),
-        /* @__PURE__ */ jsx40(
+        /* @__PURE__ */ jsx41(
           "input",
           {
             className: "ba-input",
@@ -3351,16 +3450,16 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ jsx40(FormError, { children: error }),
-      saved && /* @__PURE__ */ jsx40("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
-      /* @__PURE__ */ jsx40(
+      /* @__PURE__ */ jsx41(FormError, { children: error }),
+      saved && /* @__PURE__ */ jsx41("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
+      /* @__PURE__ */ jsx41(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || legacyNameField && !name.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx40(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
+          children: /* @__PURE__ */ jsx41(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
         }
       )
     ] })
@@ -3369,24 +3468,24 @@ function ProfileSection({
 
 // src/components/user-profile/RecoverySection.tsx
 import * as React31 from "react";
-import { Fragment as Fragment12, jsx as jsx41, jsxs as jsxs38 } from "react/jsx-runtime";
+import { Fragment as Fragment12, jsx as jsx42, jsxs as jsxs39 } from "react/jsx-runtime";
 function RecoverySection() {
   const t = useT();
   const { user } = useUser();
   const titleId = React31.useId();
-  return /* @__PURE__ */ jsxs38("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs38("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx41("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
-      /* @__PURE__ */ jsx41("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
+  return /* @__PURE__ */ jsxs39("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs39("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx42("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
+      /* @__PURE__ */ jsx42("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
     ] }),
-    /* @__PURE__ */ jsxs38("div", { className: "ba-profile-recovery-card", children: [
-      /* @__PURE__ */ jsx41("strong", { children: t("userProfile.recovery.emailTitle") }),
-      user?.email && user.emailVerified ? /* @__PURE__ */ jsxs38(Fragment12, { children: [
-        /* @__PURE__ */ jsx41("p", { children: t("userProfile.recovery.emailDescription") }),
-        /* @__PURE__ */ jsx41(Bidi, { children: user.email })
-      ] }) : /* @__PURE__ */ jsx41("p", { children: t("userProfile.recovery.emailUnavailable") })
+    /* @__PURE__ */ jsxs39("div", { className: "ba-profile-recovery-card", children: [
+      /* @__PURE__ */ jsx42("strong", { children: t("userProfile.recovery.emailTitle") }),
+      user?.email && user.emailVerified ? /* @__PURE__ */ jsxs39(Fragment12, { children: [
+        /* @__PURE__ */ jsx42("p", { children: t("userProfile.recovery.emailDescription") }),
+        /* @__PURE__ */ jsx42(Bidi, { children: user.email })
+      ] }) : /* @__PURE__ */ jsx42("p", { children: t("userProfile.recovery.emailUnavailable") })
     ] }),
-    /* @__PURE__ */ jsx41(BackupCodesManager, { title: null })
+    /* @__PURE__ */ jsx42(BackupCodesManager, { title: null })
   ] });
 }
 
@@ -3403,6 +3502,7 @@ var USER_PROFILE_SECTIONS = [
   "passkeys",
   "mfa",
   "recovery",
+  "privacy",
   "danger"
 ];
 function userProfileSectionsFor(capabilities) {
@@ -3413,6 +3513,7 @@ function userProfileSectionsFor(capabilities) {
     if (section === "recovery") return capabilities.recovery;
     if (section === "danger") return capabilities.accountDeletion;
     if (section === "social") return capabilities.social;
+    if (section === "privacy") return capabilities.privacy;
     return true;
   });
 }
@@ -3478,7 +3579,7 @@ function useAccountResource(loader, failure) {
 }
 
 // src/components/user-profile/SessionsSection.tsx
-import { jsx as jsx42, jsxs as jsxs39 } from "react/jsx-runtime";
+import { jsx as jsx43, jsxs as jsxs40 } from "react/jsx-runtime";
 function SessionsSection() {
   const t = useT();
   const locale = useLocale();
@@ -3507,31 +3608,31 @@ function SessionsSection() {
       }
     );
   };
-  return /* @__PURE__ */ jsxs39("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs39("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx42("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
-      /* @__PURE__ */ jsx42("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
+  return /* @__PURE__ */ jsxs40("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs40("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx43("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
+      /* @__PURE__ */ jsx43("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ jsxs39("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
-      /* @__PURE__ */ jsx42("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ jsx42("div", { className: "ba-skeleton" })
-    ] }) : null : /* @__PURE__ */ jsxs39("ul", { className: "ba-profile-list", children: [
+    resource.data === null ? resource.loading ? /* @__PURE__ */ jsxs40("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
+      /* @__PURE__ */ jsx43("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ jsx43("div", { className: "ba-skeleton" })
+    ] }) : null : /* @__PURE__ */ jsxs40("ul", { className: "ba-profile-list", children: [
       sessions.map((session) => {
         const label2 = session.userAgent?.trim() || t("userProfile.sessions.unknownDevice");
-        return /* @__PURE__ */ jsxs39("li", { className: "ba-profile-list-item", children: [
-          /* @__PURE__ */ jsxs39("span", { children: [
-            /* @__PURE__ */ jsx42("strong", { children: label2 }),
-            /* @__PURE__ */ jsxs39("small", { children: [
-              session.id === currentId && /* @__PURE__ */ jsx42("em", { children: t("userProfile.sessions.current") }),
+        return /* @__PURE__ */ jsxs40("li", { className: "ba-profile-list-item", children: [
+          /* @__PURE__ */ jsxs40("span", { children: [
+            /* @__PURE__ */ jsx43("strong", { children: label2 }),
+            /* @__PURE__ */ jsxs40("small", { children: [
+              session.id === currentId && /* @__PURE__ */ jsx43("em", { children: t("userProfile.sessions.current") }),
               formatSessionTime(session.updatedAt, locale)
             ] })
           ] }),
-          /* @__PURE__ */ jsx42("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
+          /* @__PURE__ */ jsx43("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
         ] }, session.id);
       }),
-      sessions.length === 0 && /* @__PURE__ */ jsx42("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
+      sessions.length === 0 && /* @__PURE__ */ jsx43("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
     ] }),
-    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ jsx42(
+    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ jsx43(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -3547,17 +3648,17 @@ function SessionsSection() {
         children: t("userProfile.sessions.revokeOthers")
       }
     ),
-    resource.error && /* @__PURE__ */ jsxs39("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ jsx42(FormError, { children: resource.error }),
-      /* @__PURE__ */ jsx42("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ jsxs40("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ jsx43(FormError, { children: resource.error }),
+      /* @__PURE__ */ jsx43("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ jsx42(FormError, { children: mutation.error })
+    /* @__PURE__ */ jsx43(FormError, { children: mutation.error })
   ] });
 }
 
 // src/components/user-profile/SocialSection.tsx
 import * as React34 from "react";
-import { jsx as jsx43, jsxs as jsxs40 } from "react/jsx-runtime";
+import { jsx as jsx44, jsxs as jsxs41 } from "react/jsx-runtime";
 function providerLabel(provider) {
   return provider.charAt(0).toUpperCase() + provider.slice(1);
 }
@@ -3597,18 +3698,18 @@ function SocialSection() {
       { failure: t("userProfile.social.unlinkError"), onSuccess: resource.load }
     );
   };
-  return /* @__PURE__ */ jsxs40("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ jsxs40("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ jsx43("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
-      /* @__PURE__ */ jsx43("p", { className: "ba-muted", children: t("userProfile.social.description") })
+  return /* @__PURE__ */ jsxs41("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ jsxs41("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ jsx44("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
+      /* @__PURE__ */ jsx44("p", { className: "ba-muted", children: t("userProfile.social.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ jsx43("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ jsx43("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ jsxs40("ul", { className: "ba-profile-list", children: [
-      linked.map((item) => /* @__PURE__ */ jsxs40("li", { className: "ba-profile-list-item", children: [
-        /* @__PURE__ */ jsxs40("span", { children: [
-          /* @__PURE__ */ jsx43("strong", { children: providerLabel(item.providerId) }),
-          /* @__PURE__ */ jsx43("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
+    resource.data === null ? resource.loading ? /* @__PURE__ */ jsx44("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ jsx44("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ jsxs41("ul", { className: "ba-profile-list", children: [
+      linked.map((item) => /* @__PURE__ */ jsxs41("li", { className: "ba-profile-list-item", children: [
+        /* @__PURE__ */ jsxs41("span", { children: [
+          /* @__PURE__ */ jsx44("strong", { children: providerLabel(item.providerId) }),
+          /* @__PURE__ */ jsx44("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
         ] }),
-        /* @__PURE__ */ jsx43(
+        /* @__PURE__ */ jsx44(
           "button",
           {
             className: "ba-link-button ba-danger",
@@ -3623,23 +3724,23 @@ function SocialSection() {
           }
         )
       ] }, item.id)),
-      linked.length === 0 && /* @__PURE__ */ jsx43("li", { className: "ba-muted", children: t("userProfile.social.empty") })
+      linked.length === 0 && /* @__PURE__ */ jsx44("li", { className: "ba-muted", children: t("userProfile.social.empty") })
     ] }),
-    available.length > 0 && /* @__PURE__ */ jsxs40("div", { className: "ba-profile-provider-actions", children: [
-      /* @__PURE__ */ jsx43("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
-      available.map((provider) => /* @__PURE__ */ jsx43("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
+    available.length > 0 && /* @__PURE__ */ jsxs41("div", { className: "ba-profile-provider-actions", children: [
+      /* @__PURE__ */ jsx44("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
+      available.map((provider) => /* @__PURE__ */ jsx44("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
     ] }),
-    resource.error && /* @__PURE__ */ jsxs40("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ jsx43(FormError, { children: resource.error }),
-      /* @__PURE__ */ jsx43("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ jsxs41("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ jsx44(FormError, { children: resource.error }),
+      /* @__PURE__ */ jsx44("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ jsx43(FormError, { children: mutation.error })
+    /* @__PURE__ */ jsx44(FormError, { children: mutation.error })
   ] });
 }
 
 // src/components/user-profile/UserProfileModal.tsx
 import * as React35 from "react";
-import { jsx as jsx44, jsxs as jsxs41 } from "react/jsx-runtime";
+import { jsx as jsx45, jsxs as jsxs42 } from "react/jsx-runtime";
 function UserProfileModal({
   children,
   onClose,
@@ -3647,7 +3748,7 @@ function UserProfileModal({
 }) {
   const t = useT();
   const titleId = React35.useId();
-  return /* @__PURE__ */ jsxs41(
+  return /* @__PURE__ */ jsxs42(
     ModalSurface,
     {
       overlayClassName: "ba-profile-overlay",
@@ -3656,13 +3757,13 @@ function UserProfileModal({
       testId: "user-profile-modal",
       onClose,
       children: [
-        /* @__PURE__ */ jsxs41("div", { className: "ba-profile-modal-header", children: [
-          /* @__PURE__ */ jsxs41("span", { children: [
+        /* @__PURE__ */ jsxs42("div", { className: "ba-profile-modal-header", children: [
+          /* @__PURE__ */ jsxs42("span", { children: [
             branding,
-            /* @__PURE__ */ jsx44("h1", { id: titleId, children: t("userProfile.title") }),
-            /* @__PURE__ */ jsx44("p", { children: t("userProfile.description") })
+            /* @__PURE__ */ jsx45("h1", { id: titleId, children: t("userProfile.title") }),
+            /* @__PURE__ */ jsx45("p", { children: t("userProfile.description") })
           ] }),
-          /* @__PURE__ */ jsx44(
+          /* @__PURE__ */ jsx45(
             "button",
             {
               type: "button",
@@ -3670,7 +3771,7 @@ function UserProfileModal({
               "aria-label": t("userProfile.close"),
               onClick: onClose,
               autoFocus: true,
-              children: /* @__PURE__ */ jsx44("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ jsx44(
+              children: /* @__PURE__ */ jsx45("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ jsx45(
                 "path",
                 {
                   d: "M6 6l12 12M18 6L6 18",
@@ -3683,14 +3784,39 @@ function UserProfileModal({
           )
         ] }),
         children,
-        /* @__PURE__ */ jsx44("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx44(AuthOwlBadge, {}) })
+        /* @__PURE__ */ jsx45("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx45(AuthOwlBadge, {}) })
+      ]
+    }
+  );
+}
+
+// src/components/PrivacyCenter.tsx
+import * as React36 from "react";
+import { jsx as jsx46, jsxs as jsxs43 } from "react/jsx-runtime";
+var PrivacyCenterContent = React36.lazy(async () => {
+  const module = await import("./PrivacyCenterContent-EQEXXSLA.js");
+  return { default: module.PrivacyCenterContent };
+});
+function PrivacyCenter(props = {}) {
+  return /* @__PURE__ */ jsx46(React36.Suspense, { fallback: /* @__PURE__ */ jsx46(PrivacyCenterFallback, { className: props.className }), children: /* @__PURE__ */ jsx46(PrivacyCenterContent, { ...props }) });
+}
+function PrivacyCenterFallback({ className }) {
+  return /* @__PURE__ */ jsxs43(
+    "section",
+    {
+      className: ["ba-profile-section ba-privacy-center", className].filter(Boolean).join(" "),
+      "aria-busy": "true",
+      children: [
+        /* @__PURE__ */ jsx46("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ jsx46("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ jsx46("div", { className: "ba-skeleton" })
       ]
     }
   );
 }
 
 // src/components/UserProfile.tsx
-import { jsx as jsx45, jsxs as jsxs42 } from "react/jsx-runtime";
+import { jsx as jsx47, jsxs as jsxs44 } from "react/jsx-runtime";
 var SECTION_KEYS = {
   profile: "userProfile.nav.profile",
   email: "userProfile.nav.email",
@@ -3700,6 +3826,7 @@ var SECTION_KEYS = {
   passkeys: "userProfile.nav.passkeys",
   mfa: "userProfile.nav.mfa",
   recovery: "userProfile.nav.recovery",
+  privacy: "userProfile.nav.privacy",
   danger: "userProfile.nav.danger"
 };
 function initialSection(fallback) {
@@ -3719,7 +3846,7 @@ function UserProfile(props = {}) {
   const t = useT();
   const { user, isLoaded, isSignedIn } = useUser();
   const { config } = usePublicConfig();
-  const [internalSection, setInternalSection] = React36.useState(() => initialSection(defaultSection));
+  const [internalSection, setInternalSection] = React37.useState(() => initialSection(defaultSection));
   const active = section ?? internalSection;
   const capabilities = resolveProjectCapabilities(config);
   const passwordEnabled = config !== null && capabilities.passwordSignIn;
@@ -3728,18 +3855,20 @@ function UserProfile(props = {}) {
   const recoveryEnabled = capabilities.backupCodes && user?.twoFactorEnabled === true;
   const deletionEnabled = capabilities.accountDeletion;
   const socialEnabled = (config?.socialProviders?.length ?? 0) > 0;
-  const sections = React36.useMemo(
+  const privacyEnabled = config?.privacy !== void 0;
+  const sections = React37.useMemo(
     () => userProfileSectionsFor({
       password: passwordEnabled,
       passkeys: passkeysEnabled,
       mfa: mfaEnabled,
       recovery: recoveryEnabled,
       accountDeletion: deletionEnabled,
-      social: socialEnabled
+      social: socialEnabled,
+      privacy: privacyEnabled
     }),
-    [deletionEnabled, mfaEnabled, passkeysEnabled, passwordEnabled, recoveryEnabled, socialEnabled]
+    [deletionEnabled, mfaEnabled, passkeysEnabled, passwordEnabled, privacyEnabled, recoveryEnabled, socialEnabled]
   );
-  React36.useEffect(() => {
+  React37.useEffect(() => {
     if (section || mode !== "page") return;
     const onHashChange = () => {
       const next = userProfileSectionFromHash(window.location.hash);
@@ -3756,11 +3885,11 @@ function UserProfile(props = {}) {
       window.history.replaceState(null, "", userProfileSectionHash(next));
     }
   };
-  const content = !isLoaded ? /* @__PURE__ */ jsxs42("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
-    /* @__PURE__ */ jsx45("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ jsx45("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ jsx45("div", { className: "ba-skeleton" })
-  ] }) : !isSignedIn || !user ? /* @__PURE__ */ jsx45("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ jsx45(
+  const content = !isLoaded ? /* @__PURE__ */ jsxs44("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
+    /* @__PURE__ */ jsx47("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ jsx47("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ jsx47("div", { className: "ba-skeleton" })
+  ] }) : !isSignedIn || !user ? /* @__PURE__ */ jsx47("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ jsx47(
     UserProfileBody,
     {
       active: visibleActive,
@@ -3772,23 +3901,23 @@ function UserProfile(props = {}) {
     user.id
   );
   if (props.mode === "modal") {
-    return /* @__PURE__ */ jsx45(
+    return /* @__PURE__ */ jsx47(
       UserProfileModal,
       {
         onClose: props.onClose,
-        branding: showBranding ? /* @__PURE__ */ jsx45(AuthOwlBranding, {}) : null,
+        branding: showBranding ? /* @__PURE__ */ jsx47(AuthOwlBranding, {}) : null,
         children: content
       }
     );
   }
-  return /* @__PURE__ */ jsxs42("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
-    /* @__PURE__ */ jsxs42("header", { className: "ba-profile-heading", children: [
-      showBranding ? /* @__PURE__ */ jsx45(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ jsx45("h1", { children: t("userProfile.title") }),
-      /* @__PURE__ */ jsx45("p", { children: t("userProfile.description") })
+  return /* @__PURE__ */ jsxs44("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
+    /* @__PURE__ */ jsxs44("header", { className: "ba-profile-heading", children: [
+      showBranding ? /* @__PURE__ */ jsx47(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ jsx47("h1", { children: t("userProfile.title") }),
+      /* @__PURE__ */ jsx47("p", { children: t("userProfile.description") })
     ] }),
     content,
-    /* @__PURE__ */ jsx45("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx45(AuthOwlBadge, {}) })
+    /* @__PURE__ */ jsx47("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ jsx47(AuthOwlBadge, {}) })
   ] });
 }
 function UserProfileBody({
@@ -3799,8 +3928,8 @@ function UserProfileBody({
   capabilities
 }) {
   const t = useT();
-  return /* @__PURE__ */ jsxs42("div", { className: "ba-profile-layout", children: [
-    /* @__PURE__ */ jsx45("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ jsx45(
+  return /* @__PURE__ */ jsxs44("div", { className: "ba-profile-layout", children: [
+    /* @__PURE__ */ jsx47("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ jsx47(
       "button",
       {
         type: "button",
@@ -3811,8 +3940,8 @@ function UserProfileBody({
       },
       item
     )) }),
-    /* @__PURE__ */ jsxs42("div", { className: "ba-profile-content", "data-section": active, children: [
-      active === "profile" && /* @__PURE__ */ jsx45(
+    /* @__PURE__ */ jsxs44("div", { className: "ba-profile-content", "data-section": active, children: [
+      active === "profile" && /* @__PURE__ */ jsx47(
         ProfileSection,
         {
           firstLastName: capabilities.firstLastName,
@@ -3820,40 +3949,41 @@ function UserProfileBody({
           legacyNameField: capabilities.legacyNameField
         }
       ),
-      active === "email" && /* @__PURE__ */ jsx45(EmailSection, { allowChange: capabilities.emailChange }),
-      active === "password" && /* @__PURE__ */ jsx45(PasswordSection, {}),
-      active === "social" && /* @__PURE__ */ jsx45(SocialSection, {}),
-      active === "sessions" && /* @__PURE__ */ jsx45(SessionsSection, {}),
-      active === "passkeys" && /* @__PURE__ */ jsx45(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
-      active === "mfa" && /* @__PURE__ */ jsx45(MfaSection, {}),
-      active === "recovery" && /* @__PURE__ */ jsx45(RecoverySection, {}),
-      active === "danger" && /* @__PURE__ */ jsx45(DeleteAccountSection, { onDeleted })
+      active === "email" && /* @__PURE__ */ jsx47(EmailSection, { allowChange: capabilities.emailChange }),
+      active === "password" && /* @__PURE__ */ jsx47(PasswordSection, {}),
+      active === "social" && /* @__PURE__ */ jsx47(SocialSection, {}),
+      active === "sessions" && /* @__PURE__ */ jsx47(SessionsSection, {}),
+      active === "passkeys" && /* @__PURE__ */ jsx47(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
+      active === "mfa" && /* @__PURE__ */ jsx47(MfaSection, {}),
+      active === "recovery" && /* @__PURE__ */ jsx47(RecoverySection, {}),
+      active === "privacy" && /* @__PURE__ */ jsx47(PrivacyCenter, {}),
+      active === "danger" && /* @__PURE__ */ jsx47(DeleteAccountSection, { onDeleted })
     ] })
   ] });
 }
 
 // src/components/UserButton.tsx
-import { jsx as jsx46, jsxs as jsxs43 } from "react/jsx-runtime";
+import { jsx as jsx48, jsxs as jsxs45 } from "react/jsx-runtime";
 function UserButton() {
   const t = useT();
   const { user, isLoaded } = useUser();
   const { signOut } = useSignOut();
-  const [open, setOpen] = React37.useState(false);
-  const [profileOpen, setProfileOpen] = React37.useState(false);
-  const [failedImage, setFailedImage] = React37.useState(null);
-  const triggerRef = React37.useRef(null);
+  const [open, setOpen] = React38.useState(false);
+  const [profileOpen, setProfileOpen] = React38.useState(false);
+  const [failedImage, setFailedImage] = React38.useState(null);
+  const triggerRef = React38.useRef(null);
   if (!isLoaded || !user) return null;
   const identity = user.email ?? user.phoneNumber ?? user.name ?? "?";
   const image = user.image ?? null;
-  return /* @__PURE__ */ jsxs43("div", { className: "ba-user-button", "data-testid": "user-button", children: [
-    /* @__PURE__ */ jsx46(
+  return /* @__PURE__ */ jsxs45("div", { className: "ba-user-button", "data-testid": "user-button", children: [
+    /* @__PURE__ */ jsx48(
       "button",
       {
         ref: triggerRef,
         className: "ba-user-button-trigger",
         "aria-label": t("userButton.openMenuAria"),
         onClick: () => setOpen((v) => !v),
-        children: image && failedImage !== image ? /* @__PURE__ */ jsx46(
+        children: image && failedImage !== image ? /* @__PURE__ */ jsx48(
           "img",
           {
             className: "ba-avatar",
@@ -3862,12 +3992,12 @@ function UserButton() {
             referrerPolicy: "no-referrer",
             onError: () => setFailedImage(image)
           }
-        ) : /* @__PURE__ */ jsx46("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
+        ) : /* @__PURE__ */ jsx48("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
       }
     ),
-    open && /* @__PURE__ */ jsxs43("div", { className: "ba-menu", children: [
-      /* @__PURE__ */ jsx46("p", { className: "ba-menu-label", children: identity }),
-      /* @__PURE__ */ jsx46(
+    open && /* @__PURE__ */ jsxs45("div", { className: "ba-menu", children: [
+      /* @__PURE__ */ jsx48("p", { className: "ba-menu-label", children: identity }),
+      /* @__PURE__ */ jsx48(
         "button",
         {
           className: "ba-menu-item",
@@ -3878,10 +4008,10 @@ function UserButton() {
           children: t("userButton.manageAccount")
         }
       ),
-      /* @__PURE__ */ jsx46("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
-      /* @__PURE__ */ jsx46("div", { className: "ba-menu-badge", children: /* @__PURE__ */ jsx46(AuthOwlBadge, {}) })
+      /* @__PURE__ */ jsx48("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
+      /* @__PURE__ */ jsx48("div", { className: "ba-menu-badge", children: /* @__PURE__ */ jsx48(AuthOwlBadge, {}) })
     ] }),
-    profileOpen && /* @__PURE__ */ jsx46(
+    profileOpen && /* @__PURE__ */ jsx48(
       UserProfile,
       {
         mode: "modal",
@@ -3897,961 +4027,35 @@ function UserButton() {
 }
 
 // src/components/OrganizationSwitcher.tsx
-import * as React45 from "react";
-
-// src/components/CreateOrganization.tsx
-import * as React38 from "react";
-import { jsx as jsx47, jsxs as jsxs44 } from "react/jsx-runtime";
-function CreateOrganization({ onCreated, title } = {}) {
-  const t = useT();
-  const { config, isLoading: configLoading } = usePublicConfig();
-  const { isLoaded, isSignedIn } = useUser();
-  const api = useAuthClient().organization;
-  const { pending, error, run } = useSubmitAction();
-  const [name, setName] = React38.useState("");
-  const [slug, setSlug] = React38.useState("");
-  const [logo, setLogo] = React38.useState("");
-  const [slugTouched, setSlugTouched] = React38.useState(false);
-  if (configLoading || !isLoaded) {
-    return /* @__PURE__ */ jsx47("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
-  }
-  if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ jsx47("p", { className: "ba-muted", children: t("organization.signedOut") });
-  const submit = (event) => {
-    event.preventDefault();
-    const normalizedName = name.trim();
-    const normalizedSlug = slug.trim();
-    if (!normalizedName || !normalizedSlug) return;
-    void run(
-      () => api.create({
-        name: normalizedName,
-        slug: normalizedSlug,
-        logo: logo.trim() || null
-      }),
-      {
-        failure: t("organization.create.error"),
-        onSuccess: (result) => {
-          if (!result.data) return;
-          setName("");
-          setSlug("");
-          setLogo("");
-          setSlugTouched(false);
-          onCreated?.(result.data);
-        }
-      }
-    );
-  };
-  return /* @__PURE__ */ jsxs44("section", { className: "ba-organization-create", children: [
-    title !== null && /* @__PURE__ */ jsxs44("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx47("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
-      /* @__PURE__ */ jsx47("p", { className: "ba-muted", children: t("organization.create.description") })
-    ] }),
-    /* @__PURE__ */ jsxs44("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs44("label", { className: "ba-label", children: [
-        t("organization.create.name"),
-        /* @__PURE__ */ jsx47(
-          "input",
-          {
-            className: "ba-input",
-            value: name,
-            onChange: (event) => {
-              const next = event.target.value;
-              setName(next);
-              if (!slugTouched) setSlug(organizationSlugFromName(next));
-            },
-            autoComplete: "organization",
-            required: true
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxs44("label", { className: "ba-label", children: [
-        t("organization.create.slug"),
-        /* @__PURE__ */ jsx47(
-          "input",
-          {
-            className: "ba-input",
-            dir: "ltr",
-            value: slug,
-            onChange: (event) => {
-              setSlugTouched(true);
-              setSlug(organizationSlugFromName(event.target.value));
-            },
-            pattern: "[a-z0-9]+(?:-[a-z0-9]+)*",
-            required: true
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxs44("label", { className: "ba-label", children: [
-        t("organization.create.logo"),
-        /* @__PURE__ */ jsx47(
-          "input",
-          {
-            className: "ba-input",
-            type: "url",
-            dir: "ltr",
-            value: logo,
-            onChange: (event) => setLogo(event.target.value),
-            placeholder: "https://"
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsx47(FormError, { children: error }),
-      /* @__PURE__ */ jsx47(
-        "button",
-        {
-          className: "ba-button ba-profile-submit",
-          type: "submit",
-          disabled: pending || !name.trim() || !slug.trim(),
-          "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx47(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
-        }
-      )
-    ] })
-  ] });
-}
-
-// src/components/organization/OrganizationModal.tsx
 import * as React39 from "react";
-import { jsx as jsx48, jsxs as jsxs45 } from "react/jsx-runtime";
-function OrganizationModal({
-  title,
-  onClose,
-  returnFocusRef,
-  children
-}) {
-  const t = useT();
-  const titleId = React39.useId();
-  return /* @__PURE__ */ jsxs45(
-    ModalSurface,
+import { jsx as jsx49 } from "react/jsx-runtime";
+var OrganizationSwitcherContent = React39.lazy(async () => {
+  const module = await import("./OrganizationSwitcherContent-2TJ76HZM.js");
+  return { default: module.OrganizationSwitcherContent };
+});
+function OrganizationSwitcher(props = {}) {
+  return /* @__PURE__ */ jsx49(
+    React39.Suspense,
     {
-      overlayClassName: "ba-organization-overlay",
-      panelClassName: "ba-organization-modal",
-      labelledBy: titleId,
-      returnFocusRef,
-      onClose,
-      children: [
-        /* @__PURE__ */ jsxs45("div", { className: "ba-organization-modal-header", children: [
-          /* @__PURE__ */ jsx48("h2", { id: titleId, className: "ba-title", children: title }),
-          /* @__PURE__ */ jsx48(
-            "button",
-            {
-              className: "ba-profile-close",
-              type: "button",
-              "aria-label": t("organization.close"),
-              onClick: onClose,
-              autoFocus: true,
-              children: "\xD7"
-            }
-          )
-        ] }),
-        /* @__PURE__ */ jsx48("div", { className: "ba-organization-modal-body", children })
-      ]
+      fallback: /* @__PURE__ */ jsx49("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-busy": "true" }),
+      children: /* @__PURE__ */ jsx49(OrganizationSwitcherContent, { ...props })
     }
   );
 }
 
-// src/components/organization/use-organizations-resource.ts
+// src/components/OrganizationList.tsx
 import * as React40 from "react";
-function useOrganizationsResource(enabled = true) {
-  const api = useAuthClient().organization;
-  const apiRef = React40.useRef(api);
-  apiRef.current = api;
-  const { user, isLoaded, isSignedIn } = useUser();
-  const t = useT();
-  const toServerError = useServerError();
-  const [organizations, setOrganizations] = React40.useState(null);
-  const [error, setError] = React40.useState(null);
-  const requestRef = React40.useRef(0);
-  const identity = user?.id ?? null;
-  const refresh = React40.useCallback(async () => {
-    const token = ++requestRef.current;
-    if (!enabled || !identity || !isSignedIn) {
-      setOrganizations([]);
-      setError(null);
-      return;
-    }
-    try {
-      const result = await apiRef.current.list();
-      if (token !== requestRef.current) return;
-      if (result.error) {
-        setError(toServerError(result.error, t("organization.error.load")));
-        return;
-      }
-      setError(null);
-      setOrganizations(result.data ?? []);
-    } catch {
-      if (token === requestRef.current) setError(t("organization.error.load"));
-    }
-  }, [enabled, identity, isSignedIn, t, toServerError]);
-  React40.useEffect(() => {
-    setOrganizations(null);
-    setError(null);
-    if (!isLoaded) return;
-    void refresh();
-    return () => {
-      requestRef.current += 1;
-    };
-  }, [identity, isLoaded, refresh]);
-  React40.useEffect(
-    () => api.subscribe(() => void refresh()),
-    [api, refresh]
-  );
-  return {
-    organizations,
-    isLoading: !isLoaded || organizations === null && error === null,
-    error,
-    refresh
-  };
-}
-
-// src/components/OrganizationProfile.tsx
-import * as React44 from "react";
-
-// src/components/organization/DangerSection.tsx
-import * as React41 from "react";
-import { jsx as jsx49, jsxs as jsxs46 } from "react/jsx-runtime";
-function DangerSection({
-  organization,
-  membership,
-  onDeleted,
-  onLeft
-}) {
-  const t = useT();
-  const api = useAuthClient().organization;
-  const session = useSession();
-  const { pending, error, run } = useSubmitAction();
-  const [confirmation, setConfirmation] = React41.useState("");
-  const isOwner = hasOrganizationRole(membership, "owner");
-  const confirmed = confirmation.trim().toLowerCase() === organization.slug.toLowerCase();
-  const leave = () => {
-    if (!window.confirm(t("organization.profile.danger.leaveConfirm", { name: organization.name }))) return;
-    void run(
-      () => api.leave({ organizationId: organization.id }),
-      {
-        failure: t("organization.profile.danger.leaveError"),
-        onSuccess: async () => {
-          await session.refetch({ query: { disableCookieCache: true } });
-          onLeft?.(organization);
-        }
-      }
-    );
-  };
-  const remove = (event) => {
-    event.preventDefault();
-    if (!confirmed) return;
-    void run(
-      () => api.delete({ organizationId: organization.id }),
-      {
-        failure: t("organization.profile.danger.deleteError"),
-        onSuccess: async () => {
-          await session.refetch({ query: { disableCookieCache: true } });
-          onDeleted?.(organization);
-        }
-      }
-    );
-  };
-  return /* @__PURE__ */ jsxs46("section", { className: "ba-organization-section ba-organization-danger", children: [
-    /* @__PURE__ */ jsxs46("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx49("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
-      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
-    ] }),
-    /* @__PURE__ */ jsxs46("div", { className: "ba-organization-danger-action", children: [
-      /* @__PURE__ */ jsx49("strong", { children: t("organization.profile.danger.leaveTitle") }),
-      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
-      /* @__PURE__ */ jsx49("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
-    ] }),
-    isOwner && /* @__PURE__ */ jsxs46("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
-      /* @__PURE__ */ jsx49("strong", { children: t("organization.profile.danger.deleteTitle") }),
-      /* @__PURE__ */ jsx49("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
-      /* @__PURE__ */ jsxs46("label", { className: "ba-label", children: [
-        t("organization.profile.danger.deleteConfirm"),
-        " ",
-        /* @__PURE__ */ jsx49(Bidi, { children: organization.slug }),
-        /* @__PURE__ */ jsx49("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
-      ] }),
-      /* @__PURE__ */ jsx49(
-        "button",
-        {
-          className: "ba-button ba-danger-button",
-          type: "submit",
-          disabled: pending || !confirmed,
-          "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx49(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
-        }
-      )
-    ] }),
-    /* @__PURE__ */ jsx49(FormError, { children: error })
-  ] });
-}
-
-// src/components/organization/GeneralSection.tsx
-import * as React42 from "react";
-import { jsx as jsx50, jsxs as jsxs47 } from "react/jsx-runtime";
-function GeneralSection({
-  organization,
-  canManage,
-  onChanged
-}) {
-  const t = useT();
-  const api = useAuthClient().organization;
-  const { pending, error, run } = useSubmitAction();
-  const [name, setName] = React42.useState(organization.name);
-  const [slug, setSlug] = React42.useState(organization.slug);
-  const [logo, setLogo] = React42.useState(organization.logo ?? "");
-  React42.useEffect(() => {
-    setName(organization.name);
-    setSlug(organization.slug);
-    setLogo(organization.logo ?? "");
-  }, [organization.id, organization.logo, organization.name, organization.slug]);
-  if (!canManage) {
-    return /* @__PURE__ */ jsxs47("section", { className: "ba-organization-section", children: [
-      /* @__PURE__ */ jsx50("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
-      /* @__PURE__ */ jsxs47("dl", { className: "ba-organization-facts", children: [
-        /* @__PURE__ */ jsxs47("div", { children: [
-          /* @__PURE__ */ jsx50("dt", { children: t("organization.create.name") }),
-          /* @__PURE__ */ jsx50("dd", { children: organization.name })
-        ] }),
-        /* @__PURE__ */ jsxs47("div", { children: [
-          /* @__PURE__ */ jsx50("dt", { children: t("organization.create.slug") }),
-          /* @__PURE__ */ jsx50("dd", { children: /* @__PURE__ */ jsx50(Bidi, { children: organization.slug }) })
-        ] })
-      ] })
-    ] });
-  }
-  const submit = (event) => {
-    event.preventDefault();
-    void run(
-      () => api.update({
-        organizationId: organization.id,
-        data: { name: name.trim(), slug: slug.trim(), logo: logo.trim() || null }
-      }),
-      {
-        failure: t("organization.profile.general.error"),
-        onSuccess: onChanged
-      }
-    );
-  };
-  return /* @__PURE__ */ jsxs47("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ jsxs47("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx50("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
-      /* @__PURE__ */ jsx50("p", { className: "ba-muted", children: t("organization.profile.general.description") })
-    ] }),
-    /* @__PURE__ */ jsxs47("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
-        t("organization.create.name"),
-        /* @__PURE__ */ jsx50("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
-      ] }),
-      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
-        t("organization.create.slug"),
-        /* @__PURE__ */ jsx50(
-          "input",
-          {
-            className: "ba-input",
-            dir: "ltr",
-            value: slug,
-            onChange: (event) => setSlug(organizationSlugFromName(event.target.value)),
-            pattern: "[a-z0-9]+(?:-[a-z0-9]+)*",
-            required: true
-          }
-        )
-      ] }),
-      /* @__PURE__ */ jsxs47("label", { className: "ba-label", children: [
-        t("organization.create.logo"),
-        /* @__PURE__ */ jsx50("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
-      ] }),
-      /* @__PURE__ */ jsx50(FormError, { children: error }),
-      /* @__PURE__ */ jsx50(
-        "button",
-        {
-          className: "ba-button ba-profile-submit",
-          type: "submit",
-          disabled: pending || !name.trim() || !slug.trim(),
-          "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx50(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
-        }
-      )
-    ] })
-  ] });
-}
-
-// src/components/organization/InvitationsSection.tsx
-import * as React43 from "react";
-
-// src/components/organization/role-label.ts
-function organizationRoleLabel(role, t) {
-  const roles = organizationRoles(role);
-  return (roles.length > 0 ? roles : [role]).map((roleKey) => {
-    if (roleKey === "owner") return t("organization.role.owner");
-    if (roleKey === "admin") return t("organization.role.admin");
-    if (roleKey === "member") return t("organization.role.member");
-    const label2 = roleKey.split(/[-_]+/).filter(Boolean).map((word) => `${word.charAt(0).toUpperCase()}${word.slice(1)}`).join(" ");
-    return t("organization.role.custom", { role: label2 });
-  }).join(t("organization.role.separator"));
-}
-
-// src/components/organization/InvitationsSection.tsx
-import { jsx as jsx51, jsxs as jsxs48 } from "react/jsx-runtime";
-function InvitationsSection({
-  organization,
-  onChanged
-}) {
-  const t = useT();
-  const api = useAuthClient().organization;
-  const { pending, error, run } = useSubmitAction();
-  const { roles } = useOrganizationRoles(organization.id);
-  const [email, setEmail] = React43.useState("");
-  const [role, setRole] = React43.useState("member");
-  const invitations = organization.invitations.filter((invitation) => invitation.status === "pending");
-  const invite = (event) => {
-    event.preventDefault();
-    void run(
-      () => api.inviteMember({ organizationId: organization.id, email: email.trim(), role }),
-      {
-        failure: t("organization.profile.invitations.inviteError"),
-        onSuccess: async () => {
-          setEmail("");
-          await onChanged();
-        }
-      }
-    );
-  };
-  const cancel = (invitation) => {
-    if (!window.confirm(t("organization.profile.invitations.cancelConfirm", { email: invitation.email }))) return;
-    void run(
-      () => api.cancelInvitation({ invitationId: invitation.id }),
-      { failure: t("organization.profile.invitations.cancelError"), onSuccess: onChanged }
-    );
-  };
-  return /* @__PURE__ */ jsxs48("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ jsxs48("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx51("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
-      /* @__PURE__ */ jsx51("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
-    ] }),
-    /* @__PURE__ */ jsxs48("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
-      /* @__PURE__ */ jsxs48("label", { className: "ba-label", children: [
-        t("organization.profile.invitations.email"),
-        /* @__PURE__ */ jsx51("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
-      ] }),
-      /* @__PURE__ */ jsxs48("label", { className: "ba-label", children: [
-        t("organization.profile.members.role"),
-        /* @__PURE__ */ jsx51("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ jsx51("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
-      ] }),
-      /* @__PURE__ */ jsx51(
-        "button",
-        {
-          className: "ba-button",
-          type: "submit",
-          disabled: pending || !email.trim(),
-          "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ jsx51(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
-        }
-      )
-    ] }),
-    /* @__PURE__ */ jsx51(FormError, { children: error }),
-    invitations.length === 0 ? /* @__PURE__ */ jsx51("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ jsx51("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ jsxs48("li", { className: "ba-organization-invitation", children: [
-      /* @__PURE__ */ jsxs48("span", { children: [
-        /* @__PURE__ */ jsx51("strong", { children: /* @__PURE__ */ jsx51(Bidi, { children: invitation.email }) }),
-        /* @__PURE__ */ jsx51("small", { children: organizationRoleLabel(invitation.role, t) })
-      ] }),
-      /* @__PURE__ */ jsx51("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
-    ] }, invitation.id)) })
-  ] });
-}
-
-// src/components/organization/MembersSection.tsx
-import { jsx as jsx52, jsxs as jsxs49 } from "react/jsx-runtime";
-function MembersSection({
-  organization,
-  userId,
-  canManage,
-  onChanged
-}) {
-  const t = useT();
-  const api = useAuthClient().organization;
-  const { pending, error, run } = useSubmitAction();
-  const { roles } = useOrganizationRoles(organization.id);
-  const updateRole = (member, role) => {
-    const current = organizationRoles(member.role)[0] ?? member.role;
-    if (current === role) return;
-    if (!window.confirm(t("organization.profile.members.roleConfirm", { name: member.user.name, role: organizationRoleLabel(role, t) }))) return;
-    void run(
-      () => api.updateMemberRole({ organizationId: organization.id, memberId: member.id, role }),
-      { failure: t("organization.profile.members.roleError"), onSuccess: onChanged }
-    );
-  };
-  const remove = (member) => {
-    if (!window.confirm(t("organization.profile.members.removeConfirm", { name: member.user.name }))) return;
-    void run(
-      () => api.removeMember({ organizationId: organization.id, memberIdOrEmail: member.id }),
-      { failure: t("organization.profile.members.removeError"), onSuccess: onChanged }
-    );
-  };
-  return /* @__PURE__ */ jsxs49("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ jsxs49("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ jsx52("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
-      /* @__PURE__ */ jsx52("p", { className: "ba-muted", children: t("organization.profile.members.description") })
-    ] }),
-    /* @__PURE__ */ jsx52(FormError, { children: error }),
-    /* @__PURE__ */ jsx52("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
-      const primaryRole = organizationRoles(member.role)[0] ?? member.role;
-      const isCurrent = member.userId === userId;
-      return /* @__PURE__ */ jsxs49("li", { className: "ba-organization-member", children: [
-        /* @__PURE__ */ jsx52("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ jsxs49("span", { className: "ba-organization-member-copy", children: [
-          /* @__PURE__ */ jsxs49("strong", { children: [
-            member.user.name,
-            isCurrent ? ` ${t("organization.profile.members.you")}` : ""
-          ] }),
-          /* @__PURE__ */ jsx52("small", { children: /* @__PURE__ */ jsx52(Bidi, { children: member.user.email }) })
-        ] }),
-        canManage && !isCurrent ? /* @__PURE__ */ jsxs49("span", { className: "ba-organization-member-actions", children: [
-          /* @__PURE__ */ jsx52("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
-          /* @__PURE__ */ jsx52(
-            "select",
-            {
-              id: `organization-role-${member.id}`,
-              className: "ba-input ba-organization-role",
-              value: primaryRole,
-              disabled: pending,
-              onChange: (event) => updateRole(member, event.target.value),
-              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ jsx52("option", { value: role, children: organizationRoleLabel(role, t) }, role))
-            }
-          ),
-          /* @__PURE__ */ jsx52("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
-        ] }) : /* @__PURE__ */ jsx52("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ jsx52(Bidi, { children: organizationRoleLabel(member.role, t) }) })
-      ] }, member.id);
-    }) })
-  ] });
-}
-
-// src/components/OrganizationProfile.tsx
-import { jsx as jsx53, jsxs as jsxs50 } from "react/jsx-runtime";
-var SECTION_KEYS2 = {
-  general: "organization.profile.nav.general",
-  members: "organization.profile.nav.members",
-  teams: "organization.profile.nav.teams",
-  invitations: "organization.profile.nav.invitations",
-  danger: "organization.profile.nav.danger"
-};
-var TeamsSection = React44.lazy(() => import("./TeamsSection-ZQDNMWV3.js"));
-function OrganizationProfile({ organizationId, defaultSection = "general", onDeleted, onLeft } = {}) {
-  const t = useT();
-  const toServerError = useServerError();
-  const { config, isLoading: configLoading } = usePublicConfig();
-  const { user, isLoaded, isSignedIn } = useUser();
-  const session = useSession();
-  const api = useAuthClient().organization;
-  const apiRef = React44.useRef(api);
-  apiRef.current = api;
-  const activeOrganizationId = session.data?.session.activeOrganizationId ?? null;
-  const requestedId = organizationId ?? activeOrganizationId;
-  const enabled = config?.organizations === true && isSignedIn;
-  const [organization, setOrganization] = React44.useState(null);
-  const [error, setError] = React44.useState(null);
-  const [wasRemoved, setWasRemoved] = React44.useState(false);
-  const [section, setSection] = React44.useState(defaultSection);
-  const requestRef = React44.useRef(0);
-  const load = React44.useCallback(async () => {
-    const token = ++requestRef.current;
-    if (!enabled || !requestedId) {
-      setOrganization(null);
-      setError(null);
-      return;
-    }
-    try {
-      const result = await apiRef.current.get({ organizationId: requestedId });
-      if (token !== requestRef.current) return;
-      if (result.error) {
-        setError(toServerError(result.error, t("organization.profile.loadError")));
-        return;
-      }
-      setError(null);
-      setOrganization(result.data ?? null);
-    } catch {
-      if (token === requestRef.current) setError(t("organization.profile.loadError"));
-    }
-  }, [enabled, requestedId, t, toServerError]);
-  React44.useEffect(() => {
-    setOrganization(null);
-    setError(null);
-    setWasRemoved(false);
-    void load();
-    return () => {
-      requestRef.current += 1;
-    };
-  }, [load]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx53("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
-  if (config?.organizations !== true) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.signedOut") });
-  if (wasRemoved) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.profile.noActive") });
-  if (!requestedId) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.profile.noActive") });
-  if (error) {
-    return /* @__PURE__ */ jsxs50("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ jsx53(FormError, { children: error }),
-      /* @__PURE__ */ jsx53("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
-    ] });
-  }
-  if (!organization) return /* @__PURE__ */ jsx53("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
-  const membership = organization.members.find((member) => member.userId === user.id);
-  if (!membership) return /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: t("organization.profile.notMember") });
-  const canManage = canManageOrganization(membership);
-  const visibleSections = canManage ? ["general", "members", "teams", "invitations", "danger"] : ["general", "members", "teams", "danger"];
-  const activeSection = visibleSections.includes(section) ? section : "general";
-  const handleRemoval = (callback) => (removedOrganization) => {
-    setWasRemoved(true);
-    setOrganization(null);
-    callback?.(removedOrganization);
-  };
-  return /* @__PURE__ */ jsxs50("article", { className: "ba-organization-profile", children: [
-    /* @__PURE__ */ jsxs50("header", { className: "ba-organization-profile-heading", children: [
-      /* @__PURE__ */ jsx53("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-      /* @__PURE__ */ jsxs50("span", { children: [
-        /* @__PURE__ */ jsx53("h2", { className: "ba-title", children: organization.name }),
-        /* @__PURE__ */ jsx53("p", { className: "ba-muted", children: organization.slug })
-      ] })
-    ] }),
-    /* @__PURE__ */ jsxs50("div", { className: "ba-organization-profile-layout", children: [
-      /* @__PURE__ */ jsx53("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ jsx53(
-        "button",
-        {
-          className: "ba-profile-nav-item",
-          type: "button",
-          "aria-current": activeSection === item ? "page" : void 0,
-          onClick: () => setSection(item),
-          children: t(SECTION_KEYS2[item])
-        },
-        item
-      )) }),
-      /* @__PURE__ */ jsxs50("div", { className: "ba-organization-profile-content", children: [
-        activeSection === "general" && /* @__PURE__ */ jsx53(GeneralSection, { organization, canManage, onChanged: load }),
-        activeSection === "members" && /* @__PURE__ */ jsx53(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
-        activeSection === "teams" && /* @__PURE__ */ jsx53(React44.Suspense, { fallback: null, children: /* @__PURE__ */ jsx53(TeamsSection, { organization, membership }) }),
-        activeSection === "invitations" && /* @__PURE__ */ jsx53(InvitationsSection, { organization, onChanged: load }),
-        activeSection === "danger" && /* @__PURE__ */ jsx53(
-          DangerSection,
-          {
-            organization,
-            membership,
-            onDeleted: handleRemoval(onDeleted),
-            onLeft: handleRemoval(onLeft)
-          }
-        )
-      ] })
-    ] })
-  ] });
-}
-
-// src/components/OrganizationSwitcher.tsx
-import { Fragment as Fragment13, jsx as jsx54, jsxs as jsxs51 } from "react/jsx-runtime";
-function OrganizationSwitcher({ showPersonalWorkspace = true, onOrganizationChange } = {}) {
-  const t = useT();
-  const { config, isLoading: configLoading } = usePublicConfig();
-  const { isLoaded, isSignedIn } = useUser();
-  const session = useSession();
-  const api = useAuthClient().organization;
-  const enabled = config?.organizations === true && isSignedIn;
-  const { organizations, isLoading, error: loadError, refresh } = useOrganizationsResource(enabled);
-  const { pending, error, run } = useSubmitAction();
-  const [open, setOpen] = React45.useState(false);
-  const [dialog, setDialog] = React45.useState(null);
-  const rootRef = React45.useRef(null);
-  const triggerRef = React45.useRef(null);
-  const menuRef = React45.useRef(null);
-  const menuId = React45.useId();
-  const activeId = session.data?.session.activeOrganizationId ?? null;
-  const active = organizations?.find((organization) => organization.id === activeId) ?? null;
-  React45.useEffect(() => {
-    if (!open) return;
-    const onPointerDown = (event) => {
-      if (!rootRef.current?.contains(event.target)) setOpen(false);
-    };
-    const onKeyDown = (event) => {
-      if (event.key === "Escape") setOpen(false);
-    };
-    document.addEventListener("pointerdown", onPointerDown);
-    document.addEventListener("keydown", onKeyDown);
-    return () => {
-      document.removeEventListener("pointerdown", onPointerDown);
-      document.removeEventListener("keydown", onKeyDown);
-    };
-  }, [open]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx54("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
-  if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ jsx54("p", { className: "ba-muted", children: t("organization.signedOut") });
-  const select = (organization) => {
-    void run(
-      () => api.setActive({ organizationId: organization?.id ?? null }),
-      {
-        failure: t("organization.switcher.error"),
-        onSuccess: async () => {
-          await session.refetch({ query: { disableCookieCache: true } });
-          setOpen(false);
-          onOrganizationChange?.(organization);
-        }
-      }
-    );
-  };
-  const afterProfileRemoval = async () => {
-    await refresh();
-    await session.refetch({ query: { disableCookieCache: true } });
-    setDialog(null);
-  };
-  const focusMenuItem = (position) => {
-    window.requestAnimationFrame(() => {
-      const items = menuRef.current?.querySelectorAll('[role="menuitem"]:not([disabled])');
-      if (!items?.length) return;
-      items[position === "first" ? 0 : items.length - 1]?.focus();
-    });
-  };
-  const onMenuKeyDown = (event) => {
-    const items = [...menuRef.current?.querySelectorAll('[role="menuitem"]:not([disabled])') ?? []];
-    if (event.key === "Escape") {
-      event.preventDefault();
-      event.stopPropagation();
-      setOpen(false);
-      triggerRef.current?.focus();
-      return;
-    }
-    if (!["ArrowDown", "ArrowUp", "Home", "End"].includes(event.key) || items.length === 0) return;
-    event.preventDefault();
-    const current = items.indexOf(document.activeElement);
-    if (event.key === "Home") items[0]?.focus();
-    else if (event.key === "End") items.at(-1)?.focus();
-    else if (event.key === "ArrowDown") items[(current + 1 + items.length) % items.length]?.focus();
-    else items[(current - 1 + items.length) % items.length]?.focus();
-  };
-  return /* @__PURE__ */ jsxs51(Fragment13, { children: [
-    /* @__PURE__ */ jsxs51("div", { ref: rootRef, className: "ba-organization-switcher", children: [
-      /* @__PURE__ */ jsxs51(
-        "button",
-        {
-          ref: triggerRef,
-          className: "ba-organization-switcher-trigger",
-          type: "button",
-          "aria-haspopup": "menu",
-          "aria-expanded": open,
-          "aria-controls": open ? menuId : void 0,
-          onClick: () => setOpen((value) => !value),
-          onKeyDown: (event) => {
-            if (event.key !== "ArrowDown" && event.key !== "ArrowUp") return;
-            event.preventDefault();
-            setOpen(true);
-            focusMenuItem(event.key === "ArrowDown" ? "first" : "last");
-          },
-          children: [
-            /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
-            /* @__PURE__ */ jsx54("span", { children: active?.name ?? t("organization.personal") }),
-            /* @__PURE__ */ jsx54("span", { "aria-hidden": "true", children: "\u2304" })
-          ]
-        }
-      ),
-      open && /* @__PURE__ */ jsxs51("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
-        isLoading ? /* @__PURE__ */ jsx54("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsxs51(Fragment13, { children: [
-          showPersonalWorkspace && /* @__PURE__ */ jsxs51("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
-            /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
-            /* @__PURE__ */ jsx54("span", { children: t("organization.personal") })
-          ] }),
-          organizations?.map((organization) => /* @__PURE__ */ jsxs51("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
-            /* @__PURE__ */ jsx54("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-            /* @__PURE__ */ jsxs51("span", { children: [
-              organization.name,
-              /* @__PURE__ */ jsx54("small", { children: organization.slug })
-            ] })
-          ] }, organization.id))
-        ] }),
-        (loadError || error) && /* @__PURE__ */ jsxs51("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ jsx54(FormError, { children: loadError ?? error }),
-          loadError && /* @__PURE__ */ jsx54("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
-        ] }),
-        /* @__PURE__ */ jsxs51("div", { className: "ba-organization-menu-actions", children: [
-          active && /* @__PURE__ */ jsx54("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
-            setOpen(false);
-            setDialog("profile");
-          }, children: t("organization.switcher.manage") }),
-          /* @__PURE__ */ jsx54("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
-            setOpen(false);
-            setDialog("create");
-          }, children: t("organization.switcher.create") })
-        ] })
-      ] })
-    ] }),
-    dialog === "create" && /* @__PURE__ */ jsx54(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx54(
-      CreateOrganization,
-      {
-        title: null,
-        onCreated: (organization) => {
-          void (async () => {
-            await refresh();
-            await session.refetch({ query: { disableCookieCache: true } });
-            setDialog(null);
-            onOrganizationChange?.(organization);
-          })();
-        }
-      }
-    ) }),
-    dialog === "profile" && active && /* @__PURE__ */ jsx54(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx54(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
-  ] });
-}
-
-// src/components/OrganizationList.tsx
-import * as React46 from "react";
-import { Fragment as Fragment14, jsx as jsx55, jsxs as jsxs52 } from "react/jsx-runtime";
-function OrganizationList({ onOrganizationChange } = {}) {
-  const t = useT();
-  const toServerError = useServerError();
-  const { config, isLoading: configLoading } = usePublicConfig();
-  const { user, isLoaded, isSignedIn } = useUser();
-  const session = useSession();
-  const api = useAuthClient().organization;
-  const apiRef = React46.useRef(api);
-  apiRef.current = api;
-  const enabled = config?.organizations === true && isSignedIn;
-  const { organizations, isLoading, error: organizationError, refresh } = useOrganizationsResource(enabled);
-  const { pending, error, run } = useSubmitAction();
-  const [invitations, setInvitations] = React46.useState(null);
-  const [invitationError, setInvitationError] = React46.useState(null);
-  const [dialog, setDialog] = React46.useState(null);
-  const [profileId, setProfileId] = React46.useState(null);
-  const dialogReturnFocusRef = React46.useRef(null);
-  const invitationRequestRef = React46.useRef(0);
-  const activeId = session.data?.session.activeOrganizationId ?? null;
-  const loadInvitations = React46.useCallback(async () => {
-    const token = ++invitationRequestRef.current;
-    if (!enabled) {
-      setInvitations([]);
-      setInvitationError(null);
-      return;
-    }
-    try {
-      const result = await apiRef.current.listUserInvitations();
-      if (token !== invitationRequestRef.current) return;
-      if (result.error) {
-        setInvitationError(toServerError(result.error, t("organization.list.invitationsError")));
-        return;
-      }
-      setInvitationError(null);
-      setInvitations((result.data ?? []).filter((invitation) => invitation.status === "pending"));
-    } catch {
-      if (token === invitationRequestRef.current) setInvitationError(t("organization.list.invitationsError"));
-    }
-  }, [enabled, t, toServerError]);
-  React46.useEffect(() => {
-    setInvitations(null);
-    setInvitationError(null);
-    if (!isLoaded) return;
-    void loadInvitations();
-    return () => {
-      invitationRequestRef.current += 1;
-    };
-  }, [isLoaded, loadInvitations, user?.id]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ jsx55("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
-  if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.signedOut") });
-  const setActive = (organization) => {
-    void run(
-      () => api.setActive({ organizationId: organization.id }),
-      {
-        failure: t("organization.switcher.error"),
-        onSuccess: async () => {
-          await session.refetch({ query: { disableCookieCache: true } });
-          onOrganizationChange?.(organization);
-        }
-      }
-    );
-  };
-  const invitationAction = (invitation, action) => {
-    const onSuccess = async () => {
-      await Promise.all([refresh(), loadInvitations()]);
-      if (action === "accept") await session.refetch({ query: { disableCookieCache: true } });
-    };
-    if (action === "accept") {
-      void run(
-        () => api.acceptInvitation({ invitationId: invitation.id }),
-        { failure: t("organization.list.acceptError"), onSuccess }
-      );
-      return;
-    }
-    void run(
-      () => api.rejectInvitation({ invitationId: invitation.id }),
-      { failure: t("organization.list.rejectError"), onSuccess }
-    );
-  };
-  const openProfile = (organization, trigger) => {
-    dialogReturnFocusRef.current = trigger;
-    setProfileId(organization.id);
-    setDialog("profile");
-  };
-  const afterProfileRemoval = async () => {
-    await refresh();
-    await session.refetch({ query: { disableCookieCache: true } });
-    setDialog(null);
-    setProfileId(null);
-  };
-  return /* @__PURE__ */ jsxs52(Fragment14, { children: [
-    /* @__PURE__ */ jsxs52("section", { className: "ba-organization-directory", children: [
-      /* @__PURE__ */ jsxs52("header", { className: "ba-organization-directory-header", children: [
-        /* @__PURE__ */ jsxs52("span", { children: [
-          /* @__PURE__ */ jsx55("h2", { className: "ba-title", children: t("organization.list.title") }),
-          /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.description") })
-        ] }),
-        /* @__PURE__ */ jsx55("button", { className: "ba-button", type: "button", onClick: (event) => {
-          dialogReturnFocusRef.current = event.currentTarget;
-          setDialog("create");
-        }, children: t("organization.switcher.create") })
-      ] }),
-      (organizationError || error) && /* @__PURE__ */ jsxs52("div", { className: "ba-inline-error", children: [
-        /* @__PURE__ */ jsx55(FormError, { children: organizationError ?? error }),
-        organizationError && /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
-      ] }),
-      isLoading ? /* @__PURE__ */ jsxs52("div", { className: "ba-organization-card-grid", children: [
-        /* @__PURE__ */ jsx55("div", { className: "ba-skeleton" }),
-        /* @__PURE__ */ jsx55("div", { className: "ba-skeleton" })
-      ] }) : organizations?.length ? /* @__PURE__ */ jsx55("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ jsxs52("li", { className: "ba-organization-card", children: [
-        /* @__PURE__ */ jsx55("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ jsxs52("span", { className: "ba-organization-card-copy", children: [
-          /* @__PURE__ */ jsx55("strong", { children: organization.name }),
-          /* @__PURE__ */ jsx55("small", { children: /* @__PURE__ */ jsx55(Bidi, { children: organization.slug }) })
-        ] }),
-        activeId === organization.id && /* @__PURE__ */ jsx55("span", { className: "ba-organization-active", children: t("organization.list.active") }),
-        /* @__PURE__ */ jsxs52("span", { className: "ba-organization-card-actions", children: [
-          activeId !== organization.id && /* @__PURE__ */ jsx55("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
-          /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
-        ] })
-      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.empty") }),
-      /* @__PURE__ */ jsxs52("section", { className: "ba-organization-user-invitations", children: [
-        /* @__PURE__ */ jsxs52("header", { className: "ba-organization-section-header", children: [
-          /* @__PURE__ */ jsx55("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
-          /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
-        ] }),
-        invitationError && /* @__PURE__ */ jsxs52("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ jsx55(FormError, { children: invitationError }),
-          /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
-        ] }),
-        invitations?.length ? /* @__PURE__ */ jsx55("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ jsxs52("li", { className: "ba-organization-invitation", children: [
-          /* @__PURE__ */ jsxs52("span", { children: [
-            /* @__PURE__ */ jsx55("strong", { children: invitation.organizationName }),
-            /* @__PURE__ */ jsx55("small", { children: organizationRoleLabel(invitation.role, t) })
-          ] }),
-          /* @__PURE__ */ jsxs52("span", { className: "ba-organization-card-actions", children: [
-            /* @__PURE__ */ jsx55("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
-            /* @__PURE__ */ jsx55("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
-          ] })
-        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ jsx55("div", { className: "ba-skeleton" }) : /* @__PURE__ */ jsx55("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
-      ] })
-    ] }),
-    dialog === "create" && /* @__PURE__ */ jsx55(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx55(CreateOrganization, { title: null, onCreated: () => {
-      void (async () => {
-        await refresh();
-        await session.refetch({ query: { disableCookieCache: true } });
-        setDialog(null);
-      })();
-    } }) }),
-    dialog === "profile" && profileId && /* @__PURE__ */ jsx55(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ jsx55(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
-  ] });
+import { jsx as jsx50 } from "react/jsx-runtime";
+var OrganizationListContent = React40.lazy(async () => {
+  const module = await import("./OrganizationListContent-BSGDHYAC.js");
+  return { default: module.OrganizationListContent };
+});
+function OrganizationList(props = {}) {
+  return /* @__PURE__ */ jsx50(React40.Suspense, { fallback: /* @__PURE__ */ jsx50("div", { className: "ba-skeleton", "aria-busy": "true" }), children: /* @__PURE__ */ jsx50(OrganizationListContent, { ...props }) });
 }
 
 // src/components/GoogleOneTap.tsx
-import * as React47 from "react";
+import * as React41 from "react";
 
 // src/components/google-one-tap.ts
 var GOOGLE_IDENTITY_SCRIPT = "https://accounts.google.com/gsi/client";
@@ -5000,6 +4204,14 @@ function normalizeDismissReason(reason) {
   }
   return "unknown";
 }
+var warnedMissingNonce = /* @__PURE__ */ new Set();
+function warnOneTapWithoutNonce(clientId) {
+  if (warnedMissingNonce.has(clientId)) return;
+  warnedMissingNonce.add(clientId);
+  console.warn(
+    "[AuthOwl] <GoogleOneTap/> is running without a `nonce`. Google\u2019s ID token is then not bound to a value chosen for this prompt. Generate a fresh random value per prompt and pass it as `nonce`; AuthOwl forwards it to Google and verifies the match. The direct browser exchange does not keep separate one-time server state, so do not treat this prop by itself as replay protection. (This warning is dev-only.)"
+  );
+}
 function GoogleOneTap({
   disabled = false,
   nonce,
@@ -5019,11 +4231,16 @@ function GoogleOneTap({
   const { config, isLoading: configLoading, isError: configError } = usePublicConfig();
   const { user, isLoaded: sessionLoaded } = useUser();
   const { signInSocial } = useSignIn();
-  const callbacks = React47.useRef({ onSignedIn, onSkipped, onDismissed, onError });
+  const callbacks = React41.useRef({ onSignedIn, onSkipped, onDismissed, onError });
   callbacks.current = { onSignedIn, onSkipped, onDismissed, onError };
   const googleEnabled = config?.socialProviders.includes("google") === true;
   const clientId = config?.socialProviderClientIds?.google;
-  React47.useEffect(() => {
+  React41.useEffect(() => {
+    if (process.env.NODE_ENV === "production") return;
+    if (disabled || !googleEnabled || !clientId || nonce) return;
+    warnOneTapWithoutNonce(clientId);
+  }, [clientId, disabled, googleEnabled, nonce]);
+  React41.useEffect(() => {
     if (configLoading || !sessionLoaded) return;
     if (disabled) {
       callbacks.current.onSkipped?.("disabled");
@@ -5170,6 +4387,7 @@ export {
   PasskeyButton,
   PasskeyManager,
   PhoneOTP,
+  PrivacyCenter,
   Protect,
   RateLimitedError,
   ResetPassword,
@@ -5198,12 +4416,14 @@ export {
   useConsent,
   useEmailVerification,
   useInvitationRecipientHint,
+  useLastUsedSignInMethod,
   useLocale,
   useMFA,
   useOrganization,
   useOrganizationInvitation,
   usePasskeys,
   usePasswordReset,
+  usePrivacy,
   usePublicConfig,
   useSession,
   useSignIn,