@authowl/react 0.24.4 → 0.25.0

package/dist/index.cjs

@@ -911,13 +911,15 @@ function useSubmitAction() {
   const [error, setError] = React7.useState(null);
   const toMessage = useServerError();
   const run = React7.useCallback(
-    async (action, { failure, onSuccess, mapError, keepPendingOnSuccess }) => {
+    async (action, { failure, onSuccess, mapError, intercept, keepPendingOnSuccess }) => {
       setError(null);
       setPending(true);
       try {
         const res = await action();
         if (res?.error) {
-          setError(mapError?.(res.error) ?? toMessage(res.error, failure));
+          if (!intercept?.(res.error)) {
+            setError(mapError?.(res.error) ?? toMessage(res.error, failure));
+          }
           setPending(false);
           return;
         }
@@ -2819,13 +2821,13 @@ function PrivacyCenterContent({ className } = {}) {
   const client = useAuthClient();
   const { config } = usePublicConfig();
   const { isLoaded, isSignedIn, user } = useUser();
-  const [preferences, setPreferences] = React43.useState([]);
-  const [requests, setRequests] = React43.useState([]);
-  const [loading, setLoading] = React43.useState(true);
-  const [error, setError] = React43.useState(null);
-  const [pendingPurpose, setPendingPurpose] = React43.useState(null);
-  const [pendingRight, setPendingRight] = React43.useState(null);
-  const refresh = React43.useCallback(async () => {
+  const [preferences, setPreferences] = React46.useState([]);
+  const [requests, setRequests] = React46.useState([]);
+  const [loading, setLoading] = React46.useState(true);
+  const [error, setError] = React46.useState(null);
+  const [pendingPurpose, setPendingPurpose] = React46.useState(null);
+  const [pendingRight, setPendingRight] = React46.useState(null);
+  const refresh = React46.useCallback(async () => {
     if (!isSignedIn) return;
     setLoading(true);
     setError(null);
@@ -2837,18 +2839,18 @@ function PrivacyCenterContent({ className } = {}) {
     }
     setLoading(false);
   }, [client, isSignedIn, t, toServerError]);
-  React43.useEffect(() => {
+  React46.useEffect(() => {
     if (isLoaded && isSignedIn) void refresh();
     else if (isLoaded) setLoading(false);
   }, [isLoaded, isSignedIn, refresh, user?.id]);
   if (!isLoaded || loading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("section", { className: classes("ba-profile-section ba-privacy-center", className), "aria-busy": "true", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-skeleton" })
+    return /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("section", { className: classes("ba-profile-section ba-privacy-center", className), "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton" })
     ] });
   }
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-muted", children: t("privacy.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-muted", children: t("privacy.signedOut") });
   const privacy = config?.privacy;
   const preferenceByCode = new Map(preferences.map((item) => [item.code, item]));
   async function updateConsent(purposeCode, granted) {
@@ -2879,27 +2881,27 @@ function PrivacyCenterContent({ className } = {}) {
     else await refresh();
     setPendingRight(null);
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("section", { className: classes("ba-profile-section ba-privacy-center", className), "aria-labelledby": "ba-privacy-title", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("header", { className: "ba-profile-section-header ba-privacy-center-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-eyebrow", children: t("privacy.dataUse") }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h2", { className: "ba-title", id: "ba-privacy-title", children: t("privacy.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-muted", children: t("privacy.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("section", { className: classes("ba-profile-section ba-privacy-center", className), "aria-labelledby": "ba-privacy-title", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("header", { className: "ba-profile-section-header ba-privacy-center-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-eyebrow", children: t("privacy.dataUse") }),
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h2", { className: "ba-title", id: "ba-privacy-title", children: t("privacy.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-muted", children: t("privacy.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h3", { children: t("privacy.choices.title") }),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { children: t("privacy.choices.description") })
+    /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h3", { children: t("privacy.choices.title") }),
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { children: t("privacy.choices.description") })
       ] }),
-      (privacy?.consentPurposes.length ?? 0) === 0 ? /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-privacy-empty", children: t("privacy.choices.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-privacy-center-choices", children: privacy.consentPurposes.map((purpose) => {
+      (privacy?.consentPurposes.length ?? 0) === 0 ? /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-privacy-empty", children: t("privacy.choices.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-privacy-center-choices", children: privacy.consentPurposes.map((purpose) => {
         const granted = preferenceByCode.get(purpose.code)?.state === "granted";
         const pending = pendingPurpose === purpose.code;
-        return /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-choice", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("span", { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("strong", { children: purpose.title[locale] }),
-            /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("small", { children: purpose.description[locale] })
+        return /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-choice", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("span", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("strong", { children: purpose.title[locale] }),
+            /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("small", { children: purpose.description[locale] })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)(
+          /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)(
             "button",
             {
               type: "button",
@@ -2910,52 +2912,52 @@ function PrivacyCenterContent({ className } = {}) {
               disabled: pending,
               onClick: () => void updateConsent(purpose.code, !granted),
               children: [
-                /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("span", { "aria-hidden": "true" }),
-                /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("b", { children: pending ? t("common.working") : granted ? t("privacy.on") : t("privacy.off") })
+                /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("span", { "aria-hidden": "true" }),
+                /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("b", { children: pending ? t("common.working") : granted ? t("privacy.on") : t("privacy.off") })
               ]
             }
           )
         ] }, purpose.purposeVersionId);
       }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h3", { children: t("privacy.rights.title") }),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { children: t("privacy.rights.description") })
+    /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h3", { children: t("privacy.rights.title") }),
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { children: t("privacy.rights.description") })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-privacy-right-grid", children: Object.keys(RIGHT_KEYS).map((right) => /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-privacy-right-grid", children: Object.keys(RIGHT_KEYS).map((right) => /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
         "button",
         {
           type: "button",
           className: right === "erasure" ? "ba-privacy-right ba-privacy-right-danger" : "ba-privacy-right",
           disabled: pendingRight !== null,
           onClick: () => void createRequest(right),
-          children: /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(Busy, { busy: pendingRight === right, label: t("common.working"), children: t(RIGHT_KEYS[right]) })
+          children: /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(Busy, { busy: pendingRight === right, label: t("common.working"), children: t(RIGHT_KEYS[right]) })
         },
         right
       )) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h3", { children: t("privacy.requests.title") }),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { children: t("privacy.requests.description") })
+    /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h3", { children: t("privacy.requests.title") }),
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { children: t("privacy.requests.description") })
       ] }),
-      requests.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { className: "ba-privacy-empty", children: t("privacy.requests.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("ol", { className: "ba-privacy-request-list", children: requests.map((request) => /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("li", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("span", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("strong", { children: t(RIGHT_KEYS[request.rightType]) }),
-          /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("small", { children: formatCairo(request.receivedAt, locale) })
+      requests.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { className: "ba-privacy-empty", children: t("privacy.requests.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("ol", { className: "ba-privacy-request-list", children: requests.map((request) => /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("li", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("span", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("strong", { children: t(RIGHT_KEYS[request.rightType]) }),
+          /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("small", { children: formatCairo(request.receivedAt, locale) })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("b", { "data-state": request.state, children: t(STATE_KEYS[request.state]) })
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("b", { "data-state": request.state, children: t(STATE_KEYS[request.state]) })
       ] }, request.id)) })
     ] }),
-    (privacy?.notices.length ?? 0) > 0 && /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h3", { children: t("privacy.notices.title") }),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { children: t("privacy.notices.description") })
+    (privacy?.notices.length ?? 0) > 0 && /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("div", { className: "ba-privacy-center-block-heading", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("h3", { children: t("privacy.notices.title") }),
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { children: t("privacy.notices.description") })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("div", { className: "ba-privacy-notices", children: privacy.notices.map((notice) => /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("details", { className: "ba-privacy-notice", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("summary", { children: notice.title[locale] }),
-        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { children: notice.body[locale] })
+      /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-privacy-notices", children: privacy.notices.map((notice) => /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)("details", { className: "ba-privacy-notice", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("summary", { children: notice.title[locale] }),
+        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("p", { children: notice.body[locale] })
       ] }, notice.noticeVersionId)) })
     ] })
   ] });
@@ -2980,17 +2982,17 @@ function formatCairo(date, locale) {
 function classes(...values) {
   return values.filter(Boolean).join(" ");
 }
-var React43, import_jsx_runtime52, RIGHT_KEYS, STATE_KEYS;
+var React46, import_jsx_runtime53, RIGHT_KEYS, STATE_KEYS;
 var init_PrivacyCenterContent = __esm({
   "src/components/PrivacyCenterContent.tsx"() {
     "use strict";
     "use client";
-    React43 = __toESM(require("react"), 1);
+    React46 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_Spinner();
     init_FormError();
-    import_jsx_runtime52 = require("react/jsx-runtime");
+    import_jsx_runtime53 = require("react/jsx-runtime");
     RIGHT_KEYS = {
       access: "privacy.right.access",
       correction: "privacy.right.correction",
@@ -3066,15 +3068,15 @@ function CreateOrganization({ onCreated, title } = {}) {
   const { isLoaded, isSignedIn } = useUser();
   const api = useAuthClient().organization;
   const { pending, error, run } = useSubmitAction();
-  const [name, setName] = React47.useState("");
-  const [slug, setSlug] = React47.useState("");
-  const [logo, setLogo] = React47.useState("");
-  const [slugTouched, setSlugTouched] = React47.useState(false);
+  const [name, setName] = React50.useState("");
+  const [slug, setSlug] = React50.useState("");
+  const [logo, setLogo] = React50.useState("");
+  const [slugTouched, setSlugTouched] = React50.useState(false);
   if (configLoading || !isLoaded) {
-    return /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+    return /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   }
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
   const submit = (event) => {
     event.preventDefault();
     const normalizedName = name.trim();
@@ -3099,15 +3101,15 @@ function CreateOrganization({ onCreated, title } = {}) {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("section", { className: "ba-organization-create", children: [
-    title !== null && /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-muted", children: t("organization.create.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("section", { className: "ba-organization-create", children: [
+    title !== null && /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("h2", { className: "ba-title", children: title ?? t("organization.create.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("p", { className: "ba-muted", children: t("organization.create.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.name"),
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
           "input",
           {
             className: "ba-input",
@@ -3122,9 +3124,9 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.slug"),
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
           "input",
           {
             className: "ba-input",
@@ -3139,9 +3141,9 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.logo"),
-        /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
           "input",
           {
             className: "ba-input",
@@ -3153,33 +3155,33 @@ function CreateOrganization({ onCreated, title } = {}) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !name.trim() || !slug.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.create.submit") })
         }
       )
     ] })
   ] });
 }
-var React47, import_jsx_runtime56;
+var React50, import_jsx_runtime57;
 var init_CreateOrganization = __esm({
   "src/components/CreateOrganization.tsx"() {
     "use strict";
     "use client";
-    React47 = __toESM(require("react"), 1);
+    React50 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_model();
     init_use_submit_action();
     init_Spinner();
     init_FormError();
-    import_jsx_runtime56 = require("react/jsx-runtime");
+    import_jsx_runtime57 = require("react/jsx-runtime");
   }
 });
 
@@ -3191,8 +3193,8 @@ function OrganizationModal({
   children
 }) {
   const t = useT();
-  const titleId = React48.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)(
+  const titleId = React51.useId();
+  return /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)(
     ModalSurface,
     {
       overlayClassName: "ba-organization-overlay",
@@ -3201,9 +3203,9 @@ function OrganizationModal({
       returnFocusRef,
       onClose,
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime57.jsxs)("div", { className: "ba-organization-modal-header", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("h2", { id: titleId, className: "ba-title", children: title }),
-          /* @__PURE__ */ (0, import_jsx_runtime57.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("div", { className: "ba-organization-modal-header", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("h2", { id: titleId, className: "ba-title", children: title }),
+          /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(
             "button",
             {
               className: "ba-profile-close",
@@ -3215,36 +3217,36 @@ function OrganizationModal({
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime57.jsx)("div", { className: "ba-organization-modal-body", children })
+        /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("div", { className: "ba-organization-modal-body", children })
       ]
     }
   );
 }
-var React48, import_jsx_runtime57;
+var React51, import_jsx_runtime58;
 var init_OrganizationModal = __esm({
   "src/components/organization/OrganizationModal.tsx"() {
     "use strict";
     "use client";
-    React48 = __toESM(require("react"), 1);
+    React51 = __toESM(require("react"), 1);
     init_i18n();
     init_ModalSurface();
-    import_jsx_runtime57 = require("react/jsx-runtime");
+    import_jsx_runtime58 = require("react/jsx-runtime");
   }
 });
 
 // src/components/organization/use-organizations-resource.ts
 function useOrganizationsResource(enabled = true) {
   const api = useAuthClient().organization;
-  const apiRef = React49.useRef(api);
+  const apiRef = React52.useRef(api);
   apiRef.current = api;
   const { user, isLoaded, isSignedIn } = useUser();
   const t = useT();
   const toServerError = useServerError();
-  const [organizations, setOrganizations] = React49.useState(null);
-  const [error, setError] = React49.useState(null);
-  const requestRef = React49.useRef(0);
+  const [organizations, setOrganizations] = React52.useState(null);
+  const [error, setError] = React52.useState(null);
+  const requestRef = React52.useRef(0);
   const identity = user?.id ?? null;
-  const refresh = React49.useCallback(async () => {
+  const refresh = React52.useCallback(async () => {
     const token = ++requestRef.current;
     if (!enabled || !identity || !isSignedIn) {
       setOrganizations([]);
@@ -3264,7 +3266,7 @@ function useOrganizationsResource(enabled = true) {
       if (token === requestRef.current) setError(t("organization.error.load"));
     }
   }, [enabled, identity, isSignedIn, t, toServerError]);
-  React49.useEffect(() => {
+  React52.useEffect(() => {
     setOrganizations(null);
     setError(null);
     if (!isLoaded) return;
@@ -3273,7 +3275,7 @@ function useOrganizationsResource(enabled = true) {
       requestRef.current += 1;
     };
   }, [identity, isLoaded, refresh]);
-  React49.useEffect(
+  React52.useEffect(
     () => api.subscribe(() => void refresh()),
     [api, refresh]
   );
@@ -3284,12 +3286,12 @@ function useOrganizationsResource(enabled = true) {
     refresh
   };
 }
-var React49;
+var React52;
 var init_use_organizations_resource = __esm({
   "src/components/organization/use-organizations-resource.ts"() {
     "use strict";
     "use client";
-    React49 = __toESM(require("react"), 1);
+    React52 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
   }
@@ -3306,7 +3308,7 @@ function DangerSection({
   const api = useAuthClient().organization;
   const session = useSession();
   const { pending, error, run } = useSubmitAction();
-  const [confirmation, setConfirmation] = React50.useState("");
+  const [confirmation, setConfirmation] = React53.useState("");
   const isOwner = hasOrganizationRole(membership, "owner");
   const confirmed = confirmation.trim().toLowerCase() === organization.slug.toLowerCase();
   const leave = () => {
@@ -3336,52 +3338,52 @@ function DangerSection({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("section", { className: "ba-organization-section ba-organization-danger", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("section", { className: "ba-organization-section ba-organization-danger", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("h3", { className: "ba-title", children: t("organization.profile.danger.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("div", { className: "ba-organization-danger-action", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("strong", { children: t("organization.profile.danger.leaveTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
+    /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("div", { className: "ba-organization-danger-action", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("strong", { children: t("organization.profile.danger.leaveTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: isOwner ? t("organization.profile.danger.ownerLeaveHint") : t("organization.profile.danger.leaveHint") }),
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: leave, children: t("organization.profile.danger.leave") })
     ] }),
-    isOwner && /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("strong", { children: t("organization.profile.danger.deleteTitle") }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsxs)("label", { className: "ba-label", children: [
+    isOwner && /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("form", { method: "post", className: "ba-organization-danger-action ba-organization-delete", onSubmit: remove, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("strong", { children: t("organization.profile.danger.deleteTitle") }),
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.danger.deleteHint") }),
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.danger.deleteConfirm"),
         " ",
-        /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(Bidi, { children: organization.slug }),
-        /* @__PURE__ */ (0, import_jsx_runtime58.jsx)("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(Bidi, { children: organization.slug }),
+        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("input", { className: "ba-input", dir: "ltr", value: confirmation, onChange: (event) => setConfirmation(event.target.value), autoComplete: "off", required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(
         "button",
         {
           className: "ba-button ba-danger-button",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.danger.delete") })
         }
       )
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime58.jsx)(FormError, { children: error })
+    /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(FormError, { children: error })
   ] });
 }
-var React50, import_jsx_runtime58;
+var React53, import_jsx_runtime59;
 var init_DangerSection = __esm({
   "src/components/organization/DangerSection.tsx"() {
     "use strict";
     "use client";
-    React50 = __toESM(require("react"), 1);
+    React53 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_use_submit_action();
     init_Spinner();
     init_model();
     init_FormError();
-    import_jsx_runtime58 = require("react/jsx-runtime");
+    import_jsx_runtime59 = require("react/jsx-runtime");
   }
 });
 
@@ -3394,25 +3396,25 @@ function GeneralSection({
   const t = useT();
   const api = useAuthClient().organization;
   const { pending, error, run } = useSubmitAction();
-  const [name, setName] = React51.useState(organization.name);
-  const [slug, setSlug] = React51.useState(organization.slug);
-  const [logo, setLogo] = React51.useState(organization.logo ?? "");
-  React51.useEffect(() => {
+  const [name, setName] = React54.useState(organization.name);
+  const [slug, setSlug] = React54.useState(organization.slug);
+  const [logo, setLogo] = React54.useState(organization.logo ?? "");
+  React54.useEffect(() => {
     setName(organization.name);
     setSlug(organization.slug);
     setLogo(organization.logo ?? "");
   }, [organization.id, organization.logo, organization.name, organization.slug]);
   if (!canManage) {
-    return /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("section", { className: "ba-organization-section", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("dl", { className: "ba-organization-facts", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("div", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("dt", { children: t("organization.create.name") }),
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("dd", { children: organization.name })
+    return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("section", { className: "ba-organization-section", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.readOnly") }),
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("dl", { className: "ba-organization-facts", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("dt", { children: t("organization.create.name") }),
+          /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("dd", { children: organization.name })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("div", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("dt", { children: t("organization.create.slug") }),
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("dd", { children: /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(Bidi, { children: organization.slug }) })
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("dt", { children: t("organization.create.slug") }),
+          /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("dd", { children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(Bidi, { children: organization.slug }) })
         ] })
       ] })
     ] });
@@ -3430,19 +3432,19 @@ function GeneralSection({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("h3", { className: "ba-title", children: t("organization.profile.general.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.general.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.name"),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.slug"),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
           "input",
           {
             className: "ba-input",
@@ -3454,37 +3456,37 @@ function GeneralSection({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
         t("organization.create.logo"),
-        /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
+        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("input", { className: "ba-input", type: "url", dir: "ltr", value: logo, onChange: (event) => setLogo(event.target.value), placeholder: "https://" })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !name.trim() || !slug.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.general.save") })
         }
       )
     ] })
   ] });
 }
-var React51, import_jsx_runtime59;
+var React54, import_jsx_runtime60;
 var init_GeneralSection = __esm({
   "src/components/organization/GeneralSection.tsx"() {
     "use strict";
     "use client";
-    React51 = __toESM(require("react"), 1);
+    React54 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_use_submit_action();
     init_Spinner();
     init_model();
     init_FormError();
-    import_jsx_runtime59 = require("react/jsx-runtime");
+    import_jsx_runtime60 = require("react/jsx-runtime");
   }
 });
 
@@ -3509,11 +3511,11 @@ var init_role_label = __esm({
 // src/components/organization/use-organization-roles.ts
 function useOrganizationRoles(organizationId) {
   const api = useAuthClient().organization;
-  const apiRef = React52.useRef(api);
+  const apiRef = React55.useRef(api);
   apiRef.current = api;
-  const [dynamicRoles, setDynamicRoles] = React52.useState([]);
-  const requestRef = React52.useRef(0);
-  React52.useEffect(() => {
+  const [dynamicRoles, setDynamicRoles] = React55.useState([]);
+  const requestRef = React55.useRef(0);
+  React55.useEffect(() => {
     const token = ++requestRef.current;
     setDynamicRoles([]);
     if (!organizationId) return;
@@ -3529,7 +3531,7 @@ function useOrganizationRoles(organizationId) {
       requestRef.current += 1;
     };
   }, [organizationId]);
-  const roles = React52.useMemo(() => {
+  const roles = React55.useMemo(() => {
     const seen = /* @__PURE__ */ new Set();
     const out = [];
     for (const candidate of [...BUILTIN_ROLES, ...dynamicRoles.map((entry) => entry.role)]) {
@@ -3542,12 +3544,12 @@ function useOrganizationRoles(organizationId) {
   }, [dynamicRoles]);
   return { roles, dynamicRoles };
 }
-var React52, BUILTIN_ROLES;
+var React55, BUILTIN_ROLES;
 var init_use_organization_roles = __esm({
   "src/components/organization/use-organization-roles.ts"() {
     "use strict";
     "use client";
-    React52 = __toESM(require("react"), 1);
+    React55 = __toESM(require("react"), 1);
     init_hooks();
     BUILTIN_ROLES = ["owner", "admin", "member"];
   }
@@ -3562,8 +3564,8 @@ function InvitationsSection({
   const api = useAuthClient().organization;
   const { pending, error, run } = useSubmitAction();
   const { roles } = useOrganizationRoles(organization.id);
-  const [email, setEmail] = React53.useState("");
-  const [role, setRole] = React53.useState("member");
+  const [email, setEmail] = React56.useState("");
+  const [role, setRole] = React56.useState("member");
   const invitations = organization.invitations.filter((invitation) => invitation.status === "pending");
   const invite = (event) => {
     event.preventDefault();
@@ -3585,47 +3587,47 @@ function InvitationsSection({
       { failure: t("organization.profile.invitations.cancelError"), onSuccess: onChanged }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("h3", { className: "ba-title", children: t("organization.profile.invitations.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: invite, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.invitations.email"),
-        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("input", { className: "ba-input", type: "email", dir: "ltr", value: email, onChange: (event) => setEmail(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.members.role"),
-        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
+        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("select", { className: "ba-input", value: role, onChange: (event) => setRole(event.target.value), children: roles.map((option) => /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("option", { value: option, children: organizationRoleLabel(option, t) }, option)) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(
         "button",
         {
           className: "ba-button",
           type: "submit",
           disabled: pending || !email.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.invitations.invite") })
         }
       )
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(FormError, { children: error }),
-    invitations.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("li", { className: "ba-organization-invitation", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)("span", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(Bidi, { children: invitation.email }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
+    /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(FormError, { children: error }),
+    invitations.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.profile.invitations.empty") }) : /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("li", { className: "ba-organization-invitation", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("span", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(Bidi, { children: invitation.email }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
+      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => cancel(invitation), children: t("organization.profile.invitations.cancel") })
     ] }, invitation.id)) })
   ] });
 }
-var React53, import_jsx_runtime60;
+var React56, import_jsx_runtime61;
 var init_InvitationsSection = __esm({
   "src/components/organization/InvitationsSection.tsx"() {
     "use strict";
     "use client";
-    React53 = __toESM(require("react"), 1);
+    React56 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_use_submit_action();
@@ -3633,7 +3635,7 @@ var init_InvitationsSection = __esm({
     init_role_label();
     init_use_organization_roles();
     init_FormError();
-    import_jsx_runtime60 = require("react/jsx-runtime");
+    import_jsx_runtime61 = require("react/jsx-runtime");
   }
 });
 
@@ -3664,27 +3666,27 @@ function MembersSection({
       { failure: t("organization.profile.members.removeError"), onSuccess: onChanged }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("p", { className: "ba-muted", children: t("organization.profile.members.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("h3", { className: "ba-title", children: t("organization.profile.members.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.profile.members.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(FormError, { children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
+    /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(FormError, { children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("ul", { className: "ba-organization-list", children: organization.members.map((member) => {
       const primaryRole = organizationRoles(member.role)[0] ?? member.role;
       const isCurrent = member.userId === userId;
-      return /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("li", { className: "ba-organization-member", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("span", { className: "ba-organization-member-copy", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("strong", { children: [
+      return /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("li", { className: "ba-organization-member", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: member.user.name.trim().charAt(0).toUpperCase() || "?" }),
+        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { className: "ba-organization-member-copy", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("strong", { children: [
             member.user.name,
             isCurrent ? ` ${t("organization.profile.members.you")}` : ""
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(Bidi, { children: member.user.email }) })
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(Bidi, { children: member.user.email }) })
         ] }),
-        canManage && !isCurrent ? /* @__PURE__ */ (0, import_jsx_runtime61.jsxs)("span", { className: "ba-organization-member-actions", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(
+        canManage && !isCurrent ? /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { className: "ba-organization-member-actions", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("label", { className: "ba-sr-only", htmlFor: `organization-role-${member.id}`, children: t("organization.profile.members.role") }),
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(
             "select",
             {
               id: `organization-role-${member.id}`,
@@ -3692,16 +3694,16 @@ function MembersSection({
               value: primaryRole,
               disabled: pending,
               onChange: (event) => updateRole(member, event.target.value),
-              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("option", { value: role, children: organizationRoleLabel(role, t) }, role))
+              children: (roles.includes(primaryRole) ? roles : [primaryRole, ...roles]).map((role) => /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("option", { value: role, children: organizationRoleLabel(role, t) }, role))
             }
           ),
-          /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
-        ] }) : /* @__PURE__ */ (0, import_jsx_runtime61.jsx)("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ (0, import_jsx_runtime61.jsx)(Bidi, { children: organizationRoleLabel(member.role, t) }) })
+          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(member), children: t("organization.profile.members.remove") })
+        ] }) : /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("span", { className: "ba-organization-role-label", children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(Bidi, { children: organizationRoleLabel(member.role, t) }) })
       ] }, member.id);
     }) })
   ] });
 }
-var import_jsx_runtime61;
+var import_jsx_runtime62;
 var init_MembersSection = __esm({
   "src/components/organization/MembersSection.tsx"() {
     "use strict";
@@ -3713,7 +3715,7 @@ var init_MembersSection = __esm({
     init_role_label();
     init_use_organization_roles();
     init_FormError();
-    import_jsx_runtime61 = require("react/jsx-runtime");
+    import_jsx_runtime62 = require("react/jsx-runtime");
   }
 });
 
@@ -3726,12 +3728,12 @@ function useOrganizationListResource({
   inactiveData = null
 }) {
   const toServerError = useServerError();
-  const requestFn = React54.useRef(request);
+  const requestFn = React57.useRef(request);
   requestFn.current = request;
-  const [data, setData] = React54.useState(null);
-  const [error, setError] = React54.useState(null);
-  const requestToken = React54.useRef(0);
-  const refresh = React54.useCallback(async () => {
+  const [data, setData] = React57.useState(null);
+  const [error, setError] = React57.useState(null);
+  const requestToken = React57.useRef(0);
+  const refresh = React57.useCallback(async () => {
     const token = ++requestToken.current;
     if (!enabled || !resourceKey) {
       setData(inactiveData);
@@ -3751,7 +3753,7 @@ function useOrganizationListResource({
       if (token === requestToken.current) setError(fallback);
     }
   }, [enabled, fallback, inactiveData, resourceKey, toServerError]);
-  React54.useEffect(() => {
+  React57.useEffect(() => {
     setData(enabled && resourceKey ? null : inactiveData);
     setError(null);
     void refresh();
@@ -3761,12 +3763,12 @@ function useOrganizationListResource({
   }, [enabled, inactiveData, refresh, resourceKey]);
   return { data, isLoading: data === null && error === null, error, refresh };
 }
-var React54;
+var React57;
 var init_use_organization_list_resource = __esm({
   "src/components/organization/use-organization-list-resource.ts"() {
     "use strict";
     "use client";
-    React54 = __toESM(require("react"), 1);
+    React57 = __toESM(require("react"), 1);
     init_i18n();
   }
 });
@@ -3774,7 +3776,7 @@ var init_use_organization_list_resource = __esm({
 // src/components/organization/use-team-resources.ts
 function useTeamsResource(organizationId) {
   const api = useAuthClient().organization;
-  const apiRef = React55.useRef(api);
+  const apiRef = React58.useRef(api);
   apiRef.current = api;
   const t = useT();
   const resource = useOrganizationListResource({
@@ -3787,7 +3789,7 @@ function useTeamsResource(organizationId) {
 }
 function useTeamMembersResource(selectedTeamId) {
   const api = useAuthClient().organization;
-  const apiRef = React55.useRef(api);
+  const apiRef = React58.useRef(api);
   apiRef.current = api;
   const t = useT();
   const resource = useOrganizationListResource({
@@ -3798,12 +3800,12 @@ function useTeamMembersResource(selectedTeamId) {
   });
   return { members: resource.data, error: resource.error, reload: resource.refresh };
 }
-var React55;
+var React58;
 var init_use_team_resources = __esm({
   "src/components/organization/use-team-resources.ts"() {
     "use strict";
     "use client";
-    React55 = __toESM(require("react"), 1);
+    React58 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_use_organization_list_resource();
@@ -3820,7 +3822,7 @@ function TeamMembersPanel({
   const t = useT();
   const api = useAuthClient().organization;
   const { pending, error: actionError, run } = useSubmitAction();
-  const [userId, setUserId] = React56.useState("");
+  const [userId, setUserId] = React59.useState("");
   const { members, error, reload } = useTeamMembersResource(team.id);
   const assignedUserIds = new Set(members?.map((member) => member.userId));
   const availableMembers = organization.members.filter((member) => !assignedUserIds.has(member.userId));
@@ -3859,45 +3861,45 @@ function TeamMembersPanel({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-organization-user-invitations", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("h4", { children: t("organization.profile.teams.manageMembers") }),
-    canAdd && availableMembers.length > 0 && members !== null && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: addMember, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("label", { className: "ba-label", children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("div", { className: "ba-organization-user-invitations", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("h4", { children: t("organization.profile.teams.manageMembers") }),
+    canAdd && availableMembers.length > 0 && members !== null && /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: addMember, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.teams.addMember"),
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("select", { className: "ba-input", value: addableUserId, onChange: (event) => setUserId(event.target.value), children: availableMembers.map((member) => /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("option", { value: member.userId, children: member.user.name || member.user.email || member.userId }, member.userId)) })
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("select", { className: "ba-input", value: addableUserId, onChange: (event) => setUserId(event.target.value), children: availableMembers.map((member) => /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("option", { value: member.userId, children: member.user.name || member.user.email || member.userId }, member.userId)) })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !addableUserId, children: t("organization.profile.teams.addMember") })
+      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !addableUserId, children: t("organization.profile.teams.addMember") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(FormError, { children: actionError }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
+    /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(FormError, { children: actionError }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
     ] }),
-    members?.length ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("ul", { className: "ba-organization-list", children: members.map((member) => {
+    members?.length ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("ul", { className: "ba-organization-list", children: members.map((member) => {
       const organizationMember = organization.members.find((entry) => entry.userId === member.userId);
       const displayName = organizationMember?.user.name || member.userId;
-      return /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("li", { className: "ba-organization-member", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime62.jsxs)("span", { className: "ba-organization-member-copy", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("strong", { children: displayName }),
-          organizationMember?.user.email && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime62.jsx)(Bidi, { children: organizationMember.user.email }) })
+      return /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("li", { className: "ba-organization-member", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { className: "ba-organization-member-copy", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("strong", { children: displayName }),
+          organizationMember?.user.email && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(Bidi, { children: organizationMember.user.email }) })
         ] }),
-        canRemove && /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => removeMember(member), children: t("organization.profile.teams.removeMember") })
+        canRemove && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => removeMember(member), children: t("organization.profile.teams.removeMember") })
       ] }, member.id);
-    }) }) : error ? null : members === null ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime62.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.membersEmpty") }) : null
+    }) }) : error ? null : members === null ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : members.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.membersEmpty") }) : null
   ] });
 }
-var React56, import_jsx_runtime62;
+var React59, import_jsx_runtime63;
 var init_TeamMembersPanel = __esm({
   "src/components/organization/TeamMembersPanel.tsx"() {
     "use strict";
     "use client";
-    React56 = __toESM(require("react"), 1);
+    React59 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_FormError();
     init_use_submit_action();
     init_use_team_resources();
-    import_jsx_runtime62 = require("react/jsx-runtime");
+    import_jsx_runtime63 = require("react/jsx-runtime");
   }
 });
 
@@ -3916,11 +3918,11 @@ function TeamsSection({
   const { teams, error: teamsError, reload } = useTeamsResource(organization.id);
   const { dynamicRoles } = useOrganizationRoles(organization.id);
   const capabilities = teamManagementCapabilities(membership, dynamicRoles);
-  const [name, setName] = React57.useState("");
-  const [selectedTeamId, setSelectedTeamId] = React57.useState(null);
-  const [editingTeamId, setEditingTeamId] = React57.useState(null);
-  const [editingName, setEditingName] = React57.useState("");
-  React57.useEffect(() => {
+  const [name, setName] = React60.useState("");
+  const [selectedTeamId, setSelectedTeamId] = React60.useState(null);
+  const [editingTeamId, setEditingTeamId] = React60.useState(null);
+  const [editingName, setEditingName] = React60.useState("");
+  React60.useEffect(() => {
     setSelectedTeamId(null);
     setEditingTeamId(null);
     setEditingName("");
@@ -3976,42 +3978,42 @@ function TeamsSection({
     );
   };
   const selectedTeam = teams?.find((team) => team.id === selectedTeamId);
-  return /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("section", { className: "ba-organization-section", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("header", { className: "ba-organization-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("h3", { className: "ba-title", children: t("organization.profile.teams.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("section", { className: "ba-organization-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("header", { className: "ba-organization-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("h3", { className: "ba-title", children: t("organization.profile.teams.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.description") })
     ] }),
-    capabilities.createTeam ? /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: create, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("label", { className: "ba-label", children: [
+    capabilities.createTeam ? /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: create, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("label", { className: "ba-label", children: [
         t("organization.profile.teams.create"),
-        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
+        /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("input", { className: "ba-input", value: name, onChange: (event) => setName(event.target.value), required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !name.trim(), "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.teams.create") }) })
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !name.trim(), "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("organization.profile.teams.create") }) })
     ] }) : null,
-    /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(FormError, { children: actionError }),
-    teamsError && /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(FormError, { children: teamsError }),
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
+    /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(FormError, { children: actionError }),
+    teamsError && /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(FormError, { children: teamsError }),
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void reload(), children: t("organization.retry") })
     ] }),
-    teams?.length ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("ul", { className: "ba-organization-list", children: teams.map((team) => /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("li", { className: "ba-organization-member", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: team.name.trim().charAt(0).toUpperCase() || "?" }),
-      editingTeamId === team.id ? /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: (event) => rename(event, team), children: [
-        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("label", { className: "ba-label", children: [
+    teams?.length ? /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("ul", { className: "ba-organization-list", children: teams.map((team) => /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("li", { className: "ba-organization-member", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: team.name.trim().charAt(0).toUpperCase() || "?" }),
+      editingTeamId === team.id ? /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("form", { method: "post", className: "ba-organization-invite-form", onSubmit: (event) => rename(event, team), children: [
+        /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("label", { className: "ba-label", children: [
           t("organization.profile.teams.rename"),
-          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("input", { className: "ba-input", value: editingName, onChange: (event) => setEditingName(event.target.value), required: true, autoFocus: true })
+          /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("input", { className: "ba-input", value: editingName, onChange: (event) => setEditingName(event.target.value), required: true, autoFocus: true })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !editingName.trim(), children: t("organization.profile.teams.rename") }),
-        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => setEditingTeamId(null), children: t("organization.profile.teams.cancel") })
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)(import_jsx_runtime63.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("span", { className: "ba-organization-member-copy", children: /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("strong", { children: team.name }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime63.jsxs)("span", { className: "ba-organization-member-actions", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, "aria-expanded": selectedTeamId === team.id, onClick: () => setSelectedTeamId(selectedTeamId === team.id ? null : team.id), children: t("organization.profile.teams.manageMembers") }),
-          capabilities.updateTeam && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => beginRename(team), children: t("organization.profile.teams.rename") }),
-          capabilities.deleteTeam && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(team), children: t("organization.profile.teams.removeTeam") })
+        /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !editingName.trim(), children: t("organization.profile.teams.rename") }),
+        /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => setEditingTeamId(null), children: t("organization.profile.teams.cancel") })
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)(import_jsx_runtime64.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("span", { className: "ba-organization-member-copy", children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("strong", { children: team.name }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("span", { className: "ba-organization-member-actions", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, "aria-expanded": selectedTeamId === team.id, onClick: () => setSelectedTeamId(selectedTeamId === team.id ? null : team.id), children: t("organization.profile.teams.manageMembers") }),
+          capabilities.updateTeam && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => beginRename(team), children: t("organization.profile.teams.rename") }),
+          capabilities.deleteTeam && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: pending, onClick: () => remove(team), children: t("organization.profile.teams.removeTeam") })
         ] })
       ] })
-    ] }, team.id)) }) : teamsError ? null : teams === null ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : teams.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime63.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.empty") }) : null,
-    selectedTeam && /* @__PURE__ */ (0, import_jsx_runtime63.jsx)(
+    ] }, team.id)) }) : teamsError ? null : teams === null ? /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("div", { className: "ba-skeleton", "aria-label": t("common.loading") }) : teams.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: t("organization.profile.teams.empty") }) : null,
+    selectedTeam && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
       TeamMembersPanel,
       {
         organization,
@@ -4022,12 +4024,12 @@ function TeamsSection({
     )
   ] });
 }
-var React57, import_jsx_runtime63;
+var React60, import_jsx_runtime64;
 var init_TeamsSection = __esm({
   "src/components/organization/TeamsSection.tsx"() {
     "use strict";
     "use client";
-    React57 = __toESM(require("react"), 1);
+    React60 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_FormError();
@@ -4037,7 +4039,7 @@ var init_TeamsSection = __esm({
     init_model();
     init_use_organization_roles();
     init_use_team_resources();
-    import_jsx_runtime63 = require("react/jsx-runtime");
+    import_jsx_runtime64 = require("react/jsx-runtime");
   }
 });
 
@@ -4053,17 +4055,17 @@ function OrganizationProfileContent({ organizationId, defaultSection = "general"
   const { user, isLoaded, isSignedIn } = useUser();
   const session = useSession();
   const api = useAuthClient().organization;
-  const apiRef = React58.useRef(api);
+  const apiRef = React61.useRef(api);
   apiRef.current = api;
   const activeOrganizationId = session.data?.session.activeOrganizationId ?? null;
   const requestedId = organizationId ?? activeOrganizationId;
   const enabled = config?.organizations === true && isSignedIn;
-  const [organization, setOrganization] = React58.useState(null);
-  const [error, setError] = React58.useState(null);
-  const [wasRemoved, setWasRemoved] = React58.useState(false);
-  const [section, setSection] = React58.useState(defaultSection);
-  const requestRef = React58.useRef(0);
-  const load = React58.useCallback(async () => {
+  const [organization, setOrganization] = React61.useState(null);
+  const [error, setError] = React61.useState(null);
+  const [wasRemoved, setWasRemoved] = React61.useState(false);
+  const [section, setSection] = React61.useState(defaultSection);
+  const requestRef = React61.useRef(0);
+  const load = React61.useCallback(async () => {
     const token = ++requestRef.current;
     if (!enabled || !requestedId) {
       setOrganization(null);
@@ -4083,7 +4085,7 @@ function OrganizationProfileContent({ organizationId, defaultSection = "general"
       if (token === requestRef.current) setError(t("organization.profile.loadError"));
     }
   }, [enabled, requestedId, t, toServerError]);
-  React58.useEffect(() => {
+  React61.useEffect(() => {
     setOrganization(null);
     setError(null);
     setWasRemoved(false);
@@ -4092,20 +4094,20 @@ function OrganizationProfileContent({ organizationId, defaultSection = "general"
       requestRef.current += 1;
     };
   }, [load]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
-  if (wasRemoved) return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
-  if (!requestedId) return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
+  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (wasRemoved) return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
+  if (!requestedId) return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("p", { className: "ba-muted", children: t("organization.profile.noActive") });
   if (error) {
-    return /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("div", { className: "ba-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
+    return /* @__PURE__ */ (0, import_jsx_runtime65.jsxs)("div", { className: "ba-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void load(), children: t("organization.retry") })
     ] });
   }
-  if (!organization) return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (!organization) return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   const membership = organization.members.find((member) => member.userId === user.id);
-  if (!membership) return /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: t("organization.profile.notMember") });
+  if (!membership) return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("p", { className: "ba-muted", children: t("organization.profile.notMember") });
   const canManage = canManageOrganization(membership);
   const visibleSections = canManage ? ["general", "members", "teams", "invitations", "danger"] : ["general", "members", "teams", "danger"];
   const activeSection = visibleSections.includes(section) ? section : "general";
@@ -4114,16 +4116,16 @@ function OrganizationProfileContent({ organizationId, defaultSection = "general"
     setOrganization(null);
     callback?.(removedOrganization);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("article", { className: "ba-organization-profile", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("header", { className: "ba-organization-profile-heading", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-      /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("span", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("h2", { className: "ba-title", children: organization.name }),
-        /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("p", { className: "ba-muted", children: organization.slug })
+  return /* @__PURE__ */ (0, import_jsx_runtime65.jsxs)("article", { className: "ba-organization-profile", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime65.jsxs)("header", { className: "ba-organization-profile-heading", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+      /* @__PURE__ */ (0, import_jsx_runtime65.jsxs)("span", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("h2", { className: "ba-title", children: organization.name }),
+        /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("p", { className: "ba-muted", children: organization.slug })
       ] })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("div", { className: "ba-organization-profile-layout", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime64.jsx)("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime65.jsxs)("div", { className: "ba-organization-profile-layout", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("nav", { className: "ba-organization-profile-nav", "aria-label": t("organization.profile.nav.label"), children: visibleSections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(
         "button",
         {
           className: "ba-profile-nav-item",
@@ -4134,12 +4136,12 @@ function OrganizationProfileContent({ organizationId, defaultSection = "general"
         },
         item
       )) }),
-      /* @__PURE__ */ (0, import_jsx_runtime64.jsxs)("div", { className: "ba-organization-profile-content", children: [
-        activeSection === "general" && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(GeneralSection, { organization, canManage, onChanged: load }),
-        activeSection === "members" && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
-        activeSection === "teams" && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(React58.Suspense, { fallback: null, children: /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(TeamsSection2, { organization, membership }) }),
-        activeSection === "invitations" && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(InvitationsSection, { organization, onChanged: load }),
-        activeSection === "danger" && /* @__PURE__ */ (0, import_jsx_runtime64.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime65.jsxs)("div", { className: "ba-organization-profile-content", children: [
+        activeSection === "general" && /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(GeneralSection, { organization, canManage, onChanged: load }),
+        activeSection === "members" && /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(MembersSection, { organization, userId: user.id, canManage, onChanged: load }),
+        activeSection === "teams" && /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(React61.Suspense, { fallback: null, children: /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(TeamsSection2, { organization, membership }) }),
+        activeSection === "invitations" && /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(InvitationsSection, { organization, onChanged: load }),
+        activeSection === "danger" && /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(
           DangerSection,
           {
             organization,
@@ -4152,12 +4154,12 @@ function OrganizationProfileContent({ organizationId, defaultSection = "general"
     ] })
   ] });
 }
-var React58, import_jsx_runtime64, SECTION_KEYS2, TeamsSection2;
+var React61, import_jsx_runtime65, SECTION_KEYS2, TeamsSection2;
 var init_OrganizationProfileContent = __esm({
   "src/components/OrganizationProfileContent.tsx"() {
     "use strict";
     "use client";
-    React58 = __toESM(require("react"), 1);
+    React61 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_DangerSection();
@@ -4166,7 +4168,7 @@ var init_OrganizationProfileContent = __esm({
     init_MembersSection();
     init_model();
     init_FormError();
-    import_jsx_runtime64 = require("react/jsx-runtime");
+    import_jsx_runtime65 = require("react/jsx-runtime");
     SECTION_KEYS2 = {
       general: "organization.profile.nav.general",
       members: "organization.profile.nav.members",
@@ -4174,22 +4176,22 @@ var init_OrganizationProfileContent = __esm({
       invitations: "organization.profile.nav.invitations",
       danger: "organization.profile.nav.danger"
     };
-    TeamsSection2 = React58.lazy(() => Promise.resolve().then(() => (init_TeamsSection(), TeamsSection_exports)));
+    TeamsSection2 = React61.lazy(() => Promise.resolve().then(() => (init_TeamsSection(), TeamsSection_exports)));
   }
 });
 
 // src/components/OrganizationProfile.tsx
 function OrganizationProfile(props = {}) {
-  return /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(React59.Suspense, { fallback: /* @__PURE__ */ (0, import_jsx_runtime65.jsx)("div", { className: "ba-skeleton", "aria-busy": "true" }), children: /* @__PURE__ */ (0, import_jsx_runtime65.jsx)(OrganizationProfileContent2, { ...props }) });
+  return /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(React62.Suspense, { fallback: /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("div", { className: "ba-skeleton", "aria-busy": "true" }), children: /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(OrganizationProfileContent2, { ...props }) });
 }
-var React59, import_jsx_runtime65, OrganizationProfileContent2;
+var React62, import_jsx_runtime66, OrganizationProfileContent2;
 var init_OrganizationProfile = __esm({
   "src/components/OrganizationProfile.tsx"() {
     "use strict";
     "use client";
-    React59 = __toESM(require("react"), 1);
-    import_jsx_runtime65 = require("react/jsx-runtime");
-    OrganizationProfileContent2 = React59.lazy(async () => {
+    React62 = __toESM(require("react"), 1);
+    import_jsx_runtime66 = require("react/jsx-runtime");
+    OrganizationProfileContent2 = React62.lazy(async () => {
       const module2 = await Promise.resolve().then(() => (init_OrganizationProfileContent(), OrganizationProfileContent_exports));
       return { default: module2.OrganizationProfileContent };
     });
@@ -4210,15 +4212,15 @@ function OrganizationSwitcherContent({ showPersonalWorkspace = true, onOrganizat
   const enabled = config?.organizations === true && isSignedIn;
   const { organizations, isLoading, error: loadError, refresh } = useOrganizationsResource(enabled);
   const { pending, error, run } = useSubmitAction();
-  const [open, setOpen] = React60.useState(false);
-  const [dialog, setDialog] = React60.useState(null);
-  const rootRef = React60.useRef(null);
-  const triggerRef = React60.useRef(null);
-  const menuRef = React60.useRef(null);
-  const menuId = React60.useId();
+  const [open, setOpen] = React63.useState(false);
+  const [dialog, setDialog] = React63.useState(null);
+  const rootRef = React63.useRef(null);
+  const triggerRef = React63.useRef(null);
+  const menuRef = React63.useRef(null);
+  const menuId = React63.useId();
   const activeId = session.data?.session.activeOrganizationId ?? null;
   const active = organizations?.find((organization) => organization.id === activeId) ?? null;
-  React60.useEffect(() => {
+  React63.useEffect(() => {
     if (!open) return;
     const onPointerDown = (event) => {
       if (!rootRef.current?.contains(event.target)) setOpen(false);
@@ -4233,9 +4235,9 @@ function OrganizationSwitcherContent({ showPersonalWorkspace = true, onOrganizat
       document.removeEventListener("keydown", onKeyDown);
     };
   }, [open]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
   const select = (organization) => {
     void run(
       () => api.setActive({ organizationId: organization?.id ?? null }),
@@ -4278,9 +4280,9 @@ function OrganizationSwitcherContent({ showPersonalWorkspace = true, onOrganizat
     else if (event.key === "ArrowDown") items[(current + 1 + items.length) % items.length]?.focus();
     else items[(current - 1 + items.length) % items.length]?.focus();
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)(import_jsx_runtime66.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("div", { ref: rootRef, className: "ba-organization-switcher", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)(import_jsx_runtime67.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("div", { ref: rootRef, className: "ba-organization-switcher", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)(
         "button",
         {
           ref: triggerRef,
@@ -4297,43 +4299,43 @@ function OrganizationSwitcherContent({ showPersonalWorkspace = true, onOrganizat
             focusMenuItem(event.key === "ArrowDown" ? "first" : "last");
           },
           children: [
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("span", { children: active?.name ?? t("organization.personal") }),
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("span", { "aria-hidden": "true", children: "\u2304" })
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: active?.name.trim().charAt(0).toUpperCase() || "P" }),
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("span", { children: active?.name ?? t("organization.personal") }),
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("span", { "aria-hidden": "true", children: "\u2304" })
           ]
         }
       ),
-      open && /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
-        isLoading ? /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)(import_jsx_runtime66.Fragment, { children: [
-          showPersonalWorkspace && /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("span", { children: t("organization.personal") })
+      open && /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("div", { ref: menuRef, id: menuId, className: "ba-organization-menu", role: "menu", "aria-label": t("organization.switcher.label"), onKeyDown: onMenuKeyDown, children: [
+        isLoading ? /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)(import_jsx_runtime67.Fragment, { children: [
+          showPersonalWorkspace && /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === null ? "true" : void 0, disabled: pending, onClick: () => select(null), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: "P" }),
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("span", { children: t("organization.personal") })
           ] }),
-          organizations?.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-            /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("span", { children: [
+          organizations?.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("button", { className: "ba-organization-menu-item", type: "button", role: "menuitem", "aria-current": activeId === organization.id ? "true" : void 0, disabled: pending, onClick: () => select(organization), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("span", { className: "ba-organization-avatar", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+            /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("span", { children: [
               organization.name,
-              /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("small", { children: organization.slug })
+              /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("small", { children: organization.slug })
             ] })
           ] }, organization.id))
         ] }),
-        (loadError || error) && /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(FormError, { children: loadError ?? error }),
-          loadError && /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
+        (loadError || error) && /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("div", { className: "ba-inline-error", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(FormError, { children: loadError ?? error }),
+          loadError && /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime66.jsxs)("div", { className: "ba-organization-menu-actions", children: [
-          active && /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
+        /* @__PURE__ */ (0, import_jsx_runtime67.jsxs)("div", { className: "ba-organization-menu-actions", children: [
+          active && /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
             setOpen(false);
             setDialog("profile");
           }, children: t("organization.switcher.manage") }),
-          /* @__PURE__ */ (0, import_jsx_runtime66.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
+          /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("button", { className: "ba-menu-item", type: "button", role: "menuitem", onClick: () => {
             setOpen(false);
             setDialog("create");
           }, children: t("organization.switcher.create") })
         ] })
       ] })
     ] }),
-    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(
+    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(
       CreateOrganization,
       {
         title: null,
@@ -4347,15 +4349,15 @@ function OrganizationSwitcherContent({ showPersonalWorkspace = true, onOrganizat
         }
       }
     ) }),
-    dialog === "profile" && active && /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime66.jsx)(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
+    dialog === "profile" && active && /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: triggerRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(OrganizationProfile, { organizationId: active.id, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
   ] });
 }
-var React60, import_jsx_runtime66;
+var React63, import_jsx_runtime67;
 var init_OrganizationSwitcherContent = __esm({
   "src/components/OrganizationSwitcherContent.tsx"() {
     "use strict";
     "use client";
-    React60 = __toESM(require("react"), 1);
+    React63 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_CreateOrganization();
@@ -4364,7 +4366,7 @@ var init_OrganizationSwitcherContent = __esm({
     init_OrganizationProfile();
     init_use_submit_action();
     init_FormError();
-    import_jsx_runtime66 = require("react/jsx-runtime");
+    import_jsx_runtime67 = require("react/jsx-runtime");
   }
 });
 
@@ -4380,19 +4382,19 @@ function OrganizationListContent({ onOrganizationChange } = {}) {
   const { user, isLoaded, isSignedIn } = useUser();
   const session = useSession();
   const api = useAuthClient().organization;
-  const apiRef = React62.useRef(api);
+  const apiRef = React65.useRef(api);
   apiRef.current = api;
   const enabled = config?.organizations === true && isSignedIn;
   const { organizations, isLoading, error: organizationError, refresh } = useOrganizationsResource(enabled);
   const { pending, error, run } = useSubmitAction();
-  const [invitations, setInvitations] = React62.useState(null);
-  const [invitationError, setInvitationError] = React62.useState(null);
-  const [dialog, setDialog] = React62.useState(null);
-  const [profileId, setProfileId] = React62.useState(null);
-  const dialogReturnFocusRef = React62.useRef(null);
-  const invitationRequestRef = React62.useRef(0);
+  const [invitations, setInvitations] = React65.useState(null);
+  const [invitationError, setInvitationError] = React65.useState(null);
+  const [dialog, setDialog] = React65.useState(null);
+  const [profileId, setProfileId] = React65.useState(null);
+  const dialogReturnFocusRef = React65.useRef(null);
+  const invitationRequestRef = React65.useRef(0);
   const activeId = session.data?.session.activeOrganizationId ?? null;
-  const loadInvitations = React62.useCallback(async () => {
+  const loadInvitations = React65.useCallback(async () => {
     const token = ++invitationRequestRef.current;
     if (!enabled) {
       setInvitations([]);
@@ -4412,7 +4414,7 @@ function OrganizationListContent({ onOrganizationChange } = {}) {
       if (token === invitationRequestRef.current) setInvitationError(t("organization.list.invitationsError"));
     }
   }, [enabled, t, toServerError]);
-  React62.useEffect(() => {
+  React65.useEffect(() => {
     setInvitations(null);
     setInvitationError(null);
     if (!isLoaded) return;
@@ -4421,9 +4423,9 @@ function OrganizationListContent({ onOrganizationChange } = {}) {
       invitationRequestRef.current += 1;
     };
   }, [isLoaded, loadInvitations, user?.id]);
-  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
+  if (configLoading || !isLoaded) return /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("div", { className: "ba-skeleton", "aria-label": t("organization.loading") });
   if (config?.organizations !== true) return null;
-  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
+  if (!isSignedIn) return /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("p", { className: "ba-muted", children: t("organization.signedOut") });
   const setActive = (organization) => {
     void run(
       () => api.setActive({ organizationId: organization.id }),
@@ -4464,74 +4466,74 @@ function OrganizationListContent({ onOrganizationChange } = {}) {
     setDialog(null);
     setProfileId(null);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)(import_jsx_runtime68.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("section", { className: "ba-organization-directory", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("header", { className: "ba-organization-directory-header", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("span", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("h2", { className: "ba-title", children: t("organization.list.title") }),
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("p", { className: "ba-muted", children: t("organization.list.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)(import_jsx_runtime69.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("section", { className: "ba-organization-directory", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("header", { className: "ba-organization-directory-header", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("span", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("h2", { className: "ba-title", children: t("organization.list.title") }),
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("p", { className: "ba-muted", children: t("organization.list.description") })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-button", type: "button", onClick: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-button", type: "button", onClick: (event) => {
           dialogReturnFocusRef.current = event.currentTarget;
           setDialog("create");
         }, children: t("organization.switcher.create") })
       ] }),
-      (organizationError || error) && /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("div", { className: "ba-inline-error", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(FormError, { children: organizationError ?? error }),
-        organizationError && /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
+      (organizationError || error) && /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("div", { className: "ba-inline-error", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(FormError, { children: organizationError ?? error }),
+        organizationError && /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void refresh(), children: t("organization.retry") })
       ] }),
-      isLoading ? /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("div", { className: "ba-organization-card-grid", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("div", { className: "ba-skeleton" }),
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("div", { className: "ba-skeleton" })
-      ] }) : organizations?.length ? /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("li", { className: "ba-organization-card", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("span", { className: "ba-organization-card-copy", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("strong", { children: organization.name }),
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(Bidi, { children: organization.slug }) })
+      isLoading ? /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("div", { className: "ba-organization-card-grid", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("div", { className: "ba-skeleton" })
+      ] }) : organizations?.length ? /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("ul", { className: "ba-organization-card-grid", children: organizations.map((organization) => /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("li", { className: "ba-organization-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("span", { className: "ba-organization-avatar ba-organization-avatar-large", "aria-hidden": "true", children: organization.name.trim().charAt(0).toUpperCase() || "?" }),
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("span", { className: "ba-organization-card-copy", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("strong", { children: organization.name }),
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("small", { children: /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(Bidi, { children: organization.slug }) })
         ] }),
-        activeId === organization.id && /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("span", { className: "ba-organization-active", children: t("organization.list.active") }),
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("span", { className: "ba-organization-card-actions", children: [
-          activeId !== organization.id && /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
+        activeId === organization.id && /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("span", { className: "ba-organization-active", children: t("organization.list.active") }),
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("span", { className: "ba-organization-card-actions", children: [
+          activeId !== organization.id && /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-button ba-button-secondary", type: "button", disabled: pending, onClick: () => setActive(organization), children: t("organization.list.switch") }),
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-link-button", type: "button", onClick: (event) => openProfile(organization, event.currentTarget), children: t("organization.list.manage") })
         ] })
-      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("p", { className: "ba-muted", children: t("organization.list.empty") }),
-      /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("section", { className: "ba-organization-user-invitations", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("header", { className: "ba-organization-section-header", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
+      ] }, organization.id)) }) : organizationError ? null : /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("p", { className: "ba-muted", children: t("organization.list.empty") }),
+      /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("section", { className: "ba-organization-user-invitations", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("header", { className: "ba-organization-section-header", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("h3", { className: "ba-title", children: t("organization.list.invitationsTitle") }),
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("p", { className: "ba-muted", children: t("organization.list.invitationsDescription") })
         ] }),
-        invitationError && /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("div", { className: "ba-inline-error", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(FormError, { children: invitationError }),
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
+        invitationError && /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("div", { className: "ba-inline-error", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(FormError, { children: invitationError }),
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void loadInvitations(), children: t("organization.retry") })
         ] }),
-        invitations?.length ? /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("li", { className: "ba-organization-invitation", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("span", { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("strong", { children: invitation.organizationName }),
-            /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
+        invitations?.length ? /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("ul", { className: "ba-organization-list", children: invitations.map((invitation) => /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("li", { className: "ba-organization-invitation", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("span", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("strong", { children: invitation.organizationName }),
+            /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("small", { children: organizationRoleLabel(invitation.role, t) })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime68.jsxs)("span", { className: "ba-organization-card-actions", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
-            /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
+          /* @__PURE__ */ (0, import_jsx_runtime69.jsxs)("span", { className: "ba-organization-card-actions", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "accept"), children: t("organization.list.accept") }),
+            /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => invitationAction(invitation, "reject"), children: t("organization.list.reject") })
           ] })
-        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
+        ] }, invitation.id)) }) : invitationError ? null : invitations === null ? /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("div", { className: "ba-skeleton" }) : /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("p", { className: "ba-muted", children: t("organization.list.noInvitations") })
       ] })
     ] }),
-    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(CreateOrganization, { title: null, onCreated: () => {
+    dialog === "create" && /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(OrganizationModal, { title: t("organization.create.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(CreateOrganization, { title: null, onCreated: () => {
       void (async () => {
         await refresh();
         await session.refetch({ query: { disableCookieCache: true } });
         setDialog(null);
       })();
     } }) }),
-    dialog === "profile" && profileId && /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
+    dialog === "profile" && profileId && /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(OrganizationModal, { title: t("organization.profile.title"), returnFocusRef: dialogReturnFocusRef, onClose: () => setDialog(null), children: /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(OrganizationProfile, { organizationId: profileId, onDeleted: () => void afterProfileRemoval(), onLeft: () => void afterProfileRemoval() }) })
   ] });
 }
-var React62, import_jsx_runtime68;
+var React65, import_jsx_runtime69;
 var init_OrganizationListContent = __esm({
   "src/components/OrganizationListContent.tsx"() {
     "use strict";
     "use client";
-    React62 = __toESM(require("react"), 1);
+    React65 = __toESM(require("react"), 1);
     init_hooks();
     init_i18n();
     init_CreateOrganization();
@@ -4541,7 +4543,7 @@ var init_OrganizationListContent = __esm({
     init_OrganizationProfile();
     init_use_submit_action();
     init_FormError();
-    import_jsx_runtime68 = require("react/jsx-runtime");
+    import_jsx_runtime69 = require("react/jsx-runtime");
   }
 });
 
@@ -4552,7 +4554,7 @@ __export(index_exports, {
   AuthLoading: () => AuthLoading,
   AuthOwlBadge: () => AuthOwlBadge,
   AuthOwlBranding: () => AuthOwlBranding,
-  AuthOwlError: () => import_core9.AuthOwlError,
+  AuthOwlError: () => import_core10.AuthOwlError,
   AuthOwlProvider: () => AuthOwlProvider,
   BackupCodesManager: () => BackupCodesManager,
   Bidi: () => Bidi,
@@ -4563,7 +4565,7 @@ __export(index_exports, {
   EmailOtpForm: () => EmailOtpForm,
   ForgotPassword: () => ForgotPassword,
   GoogleOneTap: () => GoogleOneTap,
-  InvalidKeyError: () => import_core9.InvalidKeyError,
+  InvalidKeyError: () => import_core10.InvalidKeyError,
   InvitationPrompt: () => InvitationPrompt,
   KNOWN_METHODS: () => KNOWN_METHODS,
   MFAChallenge: () => MFAChallenge,
@@ -4575,11 +4577,13 @@ __export(index_exports, {
   OrganizationSwitcher: () => OrganizationSwitcher,
   PasskeyButton: () => PasskeyButton,
   PasskeyManager: () => PasskeyManager,
+  PasskeyOfferGate: () => PasskeyOfferGate,
   PhoneOTP: () => PhoneOTP,
   PrivacyCenter: () => PrivacyCenter,
   Protect: () => Protect,
-  RateLimitedError: () => import_core9.RateLimitedError,
+  RateLimitedError: () => import_core10.RateLimitedError,
   ResetPassword: () => ResetPassword,
+  SECOND_FACTOR_REQUIRED: () => SECOND_FACTOR_REQUIRED,
   SignIn: () => SignIn,
   SignOutButton: () => SignOutButton,
   SignUp: () => SignUp,
@@ -4592,11 +4596,11 @@ __export(index_exports, {
   VerificationPending: () => VerificationPending,
   VerifyEmail: () => VerifyEmail,
   Waitlist: () => Waitlist,
-  createMembershipHas: () => import_core10.createMembershipHas,
+  createMembershipHas: () => import_core11.createMembershipHas,
   emailAutocomplete: () => emailAutocomplete,
-  membershipHas: () => import_core10.membershipHas,
-  membershipHasPermission: () => import_core10.membershipHasPermission,
-  membershipHasTeam: () => import_core10.membershipHasTeam,
+  membershipHas: () => import_core11.membershipHas,
+  membershipHasPermission: () => import_core11.membershipHasPermission,
+  membershipHasTeam: () => import_core11.membershipHasTeam,
   resolveSignInMethods: () => resolveSignInMethods,
   useAccount: () => useAccount,
   useAuth: () => useAuth,
@@ -4618,6 +4622,7 @@ __export(index_exports, {
   useSignIn: () => useSignIn,
   useSignOut: () => useSignOut,
   useSignUp: () => useSignUp,
+  useStepUpAction: () => useStepUpAction,
   useUser: () => useUser,
   useWaitlist: () => useWaitlist
 });
@@ -4656,6 +4661,13 @@ function passkeyReachableFrom(authBaseUrl, pageHost, relyingPartyId) {
   if (rpId !== "localhost" && !rpId.includes(".")) return false;
   return pageHost === rpId || pageHost.endsWith(`.${rpId}`);
 }
+function passkeyReachableForConfig(config, pageHost) {
+  return passkeyReachableFrom(
+    config?.authBaseUrl,
+    pageHost,
+    config?.authentication?.passkey?.relyingPartyId
+  );
+}
 function resolveSignInMethods(config, pageHost) {
   const methods = config?.enabledMethods ?? ["password"];
   const social = config?.socialProviders ?? [];
@@ -4666,11 +4678,7 @@ function resolveSignInMethods(config, pageHost) {
   const magicLink = capabilities.magicLinkSignIn;
   const emailOtp = capabilities.emailOtpSignIn && !capabilities.totp && !capabilities.mfaRequired;
   const phoneOtp = capabilities.phoneSignIn && !capabilities.mfaRequired;
-  const passkey = capabilities.passkeySignIn && passkeyReachableFrom(
-    config?.authBaseUrl,
-    pageHost,
-    config?.authentication?.passkey?.relyingPartyId
-  );
+  const passkey = capabilities.passkeySignIn && passkeyReachableForConfig(config, pageHost);
   const sso = has("sso");
   const renderable = password || username || magicLink || emailOtp || phoneOtp || passkey || sso || social.length > 0;
   const emptyReason = renderable ? null : methods.length > 0 ? "unsupported" : "none";
@@ -5237,7 +5245,12 @@ init_use_submit_action();
 init_Spinner();
 init_FormError();
 var import_jsx_runtime13 = require("react/jsx-runtime");
-function MFAChallenge({ onVerified, allowTrustDevice = true }) {
+function MFAChallenge({
+  onVerified,
+  allowTrustDevice = true,
+  variant = "sign-in",
+  onCancel
+}) {
   const t = useT();
   const { config } = usePublicConfig();
   const { verifyTotp, verifyBackupCode, sendOtp, verifyOtp } = useMFA();
@@ -5245,7 +5258,8 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const [mode, setMode] = React12.useState("totp");
   const [code, setCode] = React12.useState("");
   const [trustDevice, setTrustDevice] = React12.useState(false);
-  const canTrustDevice = allowTrustDevice && (config?.mfa?.trustDevice ?? true);
+  const stepUp = variant === "step-up";
+  const canTrustDevice = !stepUp && allowTrustDevice && (config?.mfa?.trustDevice ?? true);
   const canUseEmailOtp = config?.mfa?.emailOtpFallback ?? true;
   React12.useEffect(() => {
     if (!canTrustDevice) setTrustDevice(false);
@@ -5278,7 +5292,7 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
   const hint = mode === "totp" ? t("mfa.challenge.totpHint") : mode === "backup" ? t("mfa.challenge.backupHint") : t("mfa.challenge.otpHint");
   const label2 = mode === "totp" ? t("mfa.challenge.totpLabel") : mode === "backup" ? t("mfa.challenge.backupLabel") : t("mfa.challenge.otpLabel");
   return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("form", { method: "post", className: "ba-fields", "data-testid": "mfa-challenge", onSubmit: submit, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("h2", { className: "ba-title", children: t("mfa.challenge.title") }),
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("h2", { className: "ba-title", children: t(stepUp ? "mfa.stepUp.title" : "mfa.challenge.title") }),
     /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("p", { className: "ba-muted", children: hint }),
     /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("label", { className: "ba-label", children: [
       label2,
@@ -5309,7 +5323,8 @@ function MFAChallenge({ onVerified, allowTrustDevice = true }) {
     /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { className: "ba-button", type: "submit", disabled: pending || !code, "aria-busy": pending || void 0, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Busy, { busy: pending, label: t("common.verifying"), children: t("mfa.challenge.submit") }) }),
     mode !== "totp" && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("totp"), children: t("mfa.challenge.useTotp") }),
     mode !== "backup" && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", onClick: () => switchMode("backup"), children: t("mfa.challenge.useBackup") }),
-    canUseEmailOtp && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") })
+    canUseEmailOtp && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: requestOtp, children: t(mode === "otp" ? "mfa.challenge.resendOtp" : "mfa.challenge.useEmailOtp") }),
+    onCancel && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("button", { type: "button", className: "ba-link-button", disabled: pending, onClick: onCancel, children: t("common.cancel") })
   ] });
 }
 
@@ -6604,20 +6619,37 @@ function PasswordlessSignUp({ onAuthenticated }) {
   );
 }
 
-// src/components/PasskeySignUpCompletion.tsx
+// src/components/PasskeyOffer.tsx
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
 var import_jsx_runtime28 = require("react/jsx-runtime");
-function PasskeySignUpCompletion({ onComplete }) {
+var COPY = {
+  "sign-up": {
+    title: "signUp.passkeyTitle",
+    body: "signUp.passkeyDescription",
+    submit: "signUp.passkeySubmit",
+    skip: "signUp.passkeySkip",
+    failed: "signUp.error.passkeyFailed"
+  },
+  "sign-in": {
+    title: "passkeyOffer.title",
+    body: "passkeyOffer.description",
+    submit: "passkeyOffer.submit",
+    skip: "passkeyOffer.skip",
+    failed: "passkeyOffer.error"
+  }
+};
+function PasskeyOffer({ onComplete, variant, title }) {
   const t = useT();
   const { addPasskey } = usePasskeys();
   const { pending, error, run } = useSubmitAction();
-  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "ba-fields", "data-testid": "signup-passkey-completion", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("h3", { className: "ba-title", children: t("signUp.passkeyTitle") }),
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("p", { className: "ba-muted", children: t("signUp.passkeyDescription") }),
+  const copy = COPY[variant];
+  return /* @__PURE__ */ (0, import_jsx_runtime28.jsxs)("div", { className: "ba-fields", "data-testid": "passkey-offer", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("h3", { className: "ba-title", children: title ?? t(copy.title) }),
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("p", { className: "ba-muted", children: t(copy.body) }),
     /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(FormError, { children: error }),
     /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(
       "button",
@@ -6627,13 +6659,13 @@ function PasskeySignUpCompletion({ onComplete }) {
         disabled: pending,
         "aria-busy": pending || void 0,
         onClick: () => void run(() => addPasskey(), {
-          failure: t("signUp.error.passkeyFailed"),
-          onSuccess: onComplete
+          failure: t(copy.failed),
+          onSuccess: () => onComplete(true)
         }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Busy, { busy: pending, label: t("passkey.waiting"), children: t("signUp.passkeySubmit") })
+        children: /* @__PURE__ */ (0, import_jsx_runtime28.jsx)(Busy, { busy: pending, label: t("passkey.waiting"), children: t(copy.submit) })
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: onComplete, children: t("signUp.passkeySkip") })
+    /* @__PURE__ */ (0, import_jsx_runtime28.jsx)("button", { className: "ba-link-button", type: "button", disabled: pending, onClick: () => onComplete(false), children: t(copy.skip) })
   ] });
 }
 
@@ -6902,7 +6934,7 @@ function SignUp({
   if (completeWithPasskey) {
     return /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)("div", { className: "ba-form", "data-testid": "signup-passkey-step", children: [
       showBranding ? /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(PasskeySignUpCompletion, { onComplete: finishSignUp }),
+      /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(PasskeyOffer, { variant: "sign-up", onComplete: finishSignUp }),
       /* @__PURE__ */ (0, import_jsx_runtime31.jsx)(AuthOwlBadge, { force: showBadge })
     ] });
   }
@@ -7118,10 +7150,56 @@ function MFARequiredGate({ children, title }) {
 }
 
 // src/components/BackupCodesManager.tsx
-var React25 = __toESM(require("react"), 1);
+var React26 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
+
+// src/components/use-step-up-action.ts
+var React25 = __toESM(require("react"), 1);
 init_use_submit_action();
+var SECOND_FACTOR_REQUIRED = "SECOND_FACTOR_REQUIRED";
+function useStepUpAction() {
+  const { pending, error, setError, run } = useSubmitAction();
+  const attempt = React25.useRef(null);
+  const [stepUpRequired, setStepUpRequired] = React25.useState(false);
+  const park = React25.useCallback((next) => {
+    if (next !== null && attempt.current !== null) return false;
+    attempt.current = next;
+    setStepUpRequired(next !== null);
+    return true;
+  }, []);
+  const epoch = React25.useRef(0);
+  const guardedRun = React25.useCallback(
+    (action, opts) => {
+      const send = () => {
+        const era = epoch.current;
+        return run(action, {
+          ...opts,
+          intercept: (failure) => {
+            if (failure.code !== SECOND_FACTOR_REQUIRED) return opts.intercept?.(failure) ?? false;
+            if (era !== epoch.current) return true;
+            return park(send);
+          }
+        });
+      };
+      return send();
+    },
+    [run, park]
+  );
+  const resume = React25.useCallback(() => {
+    const send = attempt.current;
+    park(null);
+    void send?.();
+  }, [park]);
+  const cancel = React25.useCallback(() => {
+    epoch.current += 1;
+    park(null);
+    setError(null);
+  }, [park, setError]);
+  return { pending, error, setError, stepUpRequired, run: guardedRun, resume, cancel };
+}
+
+// src/components/BackupCodesManager.tsx
 init_Spinner();
 init_FormError();
 var import_jsx_runtime34 = require("react/jsx-runtime");
@@ -7129,10 +7207,14 @@ function BackupCodesManager({ title }) {
   const t = useT();
   const { user } = useUser();
   const { regenerateBackupCodes } = useMFA();
-  const { pending, error, run } = useSubmitAction();
-  const [password, setPassword] = React25.useState("");
-  const [codes, setCodes] = React25.useState(null);
+  const { pending, error, stepUpRequired, run, resume, cancel } = useStepUpAction();
+  const [password, setPassword] = React26.useState("");
+  const [codes, setCodes] = React26.useState(null);
   if (!user?.twoFactorEnabled) return null;
+  const cancelStepUp = () => {
+    cancel();
+    setPassword("");
+  };
   const submit = (e) => {
     e.preventDefault();
     void run(() => regenerateBackupCodes({ password }), {
@@ -7153,7 +7235,7 @@ function BackupCodesManager({ title }) {
         t("mfa.enroll.backupCodesWarningRest")
       ] }),
       /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("ul", { className: "ba-passkey-list", "data-testid": "backup-codes-list", children: codes.map((c) => /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("li", { className: "ba-passkey-item", children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("code", { children: /* @__PURE__ */ (0, import_jsx_runtime34.jsx)("bdi", { children: c }) }) }, c)) })
-    ] }) : /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+    ] }) : stepUpRequired ? /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(MFAChallenge, { variant: "step-up", onVerified: resume, onCancel: cancelStepUp }) : /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
       /* @__PURE__ */ (0, import_jsx_runtime34.jsxs)("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
         /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
@@ -7175,7 +7257,7 @@ function BackupCodesManager({ title }) {
 }
 
 // src/components/MagicLinkForm.tsx
-var React26 = __toESM(require("react"), 1);
+var React27 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -7187,8 +7269,8 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
   const { signInMagicLink } = useSignIn();
   const { pending, error, run } = useSubmitAction();
   const authChallenge = useAuthChallenge();
-  const [email, setEmail] = React26.useState("");
-  const [sent, setSent] = React26.useState(false);
+  const [email, setEmail] = React27.useState("");
+  const [sent, setSent] = React27.useState(false);
   if (sent) {
     return /* @__PURE__ */ (0, import_jsx_runtime35.jsx)("p", { className: "ba-muted", "data-testid": "magiclink-sent", children: t("magicLink.sent") });
   }
@@ -7238,7 +7320,7 @@ function MagicLinkForm({ callbackURL, webauthnAutofill }) {
 }
 
 // src/components/EmailOtpForm.tsx
-var React27 = __toESM(require("react"), 1);
+var React28 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -7251,9 +7333,9 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
   const { sendEmailOtp, signInEmailOtp } = useSignIn();
   const { pending, error, setError, run } = useSubmitAction();
   const authChallenge = useAuthChallenge();
-  const [email, setEmail] = React27.useState("");
-  const [otp, setOtp] = React27.useState("");
-  const [stage, setStage] = React27.useState("email");
+  const [email, setEmail] = React28.useState("");
+  const [otp, setOtp] = React28.useState("");
+  const [stage, setStage] = React28.useState("email");
   if (stage === "code") {
     return /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
       OtpCodeForm,
@@ -7327,7 +7409,7 @@ function EmailOtpForm({ redirectTo, onSignedIn, webauthnAutofill }) {
 }
 
 // src/components/ResetPassword.tsx
-var React28 = __toESM(require("react"), 1);
+var React29 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -7341,12 +7423,12 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
   const capabilities = (0, import_core4.resolveProjectCapabilities)(config);
   const { passwordMinLength, passwordMaxLength } = capabilities;
   const { pending, error, setError, run } = useSubmitAction();
-  const [token, setToken] = React28.useState(tokenProp ?? null);
-  const [ready, setReady] = React28.useState(tokenProp != null);
-  const [password, setPassword] = React28.useState("");
-  const [confirm, setConfirm] = React28.useState("");
-  const [done, setDone] = React28.useState(false);
-  React28.useEffect(() => {
+  const [token, setToken] = React29.useState(tokenProp ?? null);
+  const [ready, setReady] = React29.useState(tokenProp != null);
+  const [password, setPassword] = React29.useState("");
+  const [confirm, setConfirm] = React29.useState("");
+  const [done, setDone] = React29.useState(false);
+  React29.useEffect(() => {
     if (tokenProp != null) return;
     const params = new URLSearchParams(window.location.search);
     setToken(params.get("token"));
@@ -7433,7 +7515,7 @@ function ResetPassword({ token: tokenProp, redirectTo, onReset }) {
 }
 
 // src/components/VerifyEmail.tsx
-var React29 = __toESM(require("react"), 1);
+var React30 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -7445,11 +7527,11 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
   const { sendVerificationEmail } = useEmailVerification();
   const { pending, error, run } = useSubmitAction();
   const authChallenge = useAuthChallenge();
-  const [ready, setReady] = React29.useState(false);
-  const [failed, setFailed] = React29.useState(false);
-  const [email, setEmail] = React29.useState("");
-  const [resent, setResent] = React29.useState(false);
-  React29.useEffect(() => {
+  const [ready, setReady] = React30.useState(false);
+  const [failed, setFailed] = React30.useState(false);
+  const [email, setEmail] = React30.useState("");
+  const [resent, setResent] = React30.useState(false);
+  React30.useEffect(() => {
     const didFail = new URLSearchParams(window.location.search).has("error");
     setFailed(didFail);
     setReady(true);
@@ -7514,7 +7596,7 @@ function VerifyEmail({ redirectTo, onVerified, callbackURL }) {
 }
 
 // src/components/PasskeyManager.tsx
-var React30 = __toESM(require("react"), 1);
+var React31 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -7539,12 +7621,12 @@ function PasskeyManagerBody({
   const t = useT();
   const toServerError = useServerError();
   const api = usePasskeys();
-  const apiRef = React30.useRef(api);
+  const apiRef = React31.useRef(api);
   apiRef.current = api;
   const { pending, error, setError, run } = useSubmitAction();
-  const [passkeys, setPasskeys] = React30.useState(null);
-  const loadTokenRef = React30.useRef(0);
-  const load = React30.useCallback(async () => {
+  const [passkeys, setPasskeys] = React31.useState(null);
+  const loadTokenRef = React31.useRef(0);
+  const load = React31.useCallback(async () => {
     const token = ++loadTokenRef.current;
     try {
       const res = await apiRef.current.listPasskeys();
@@ -7560,7 +7642,7 @@ function PasskeyManagerBody({
       setError(t("passkeys.error.loadFailed"));
     }
   }, [setError, toServerError, t]);
-  React30.useEffect(() => {
+  React31.useEffect(() => {
     void load();
   }, [load]);
   function onRename(id, current) {
@@ -7630,19 +7712,96 @@ function PasskeyManagerBody({
   ] });
 }
 
-// src/components/control.tsx
+// src/components/PasskeyOfferGate.tsx
+var React33 = __toESM(require("react"), 1);
+
+// src/components/use-passkey-offer.ts
+var React32 = __toESM(require("react"), 1);
 var import_core8 = require("@authowl/core");
 init_hooks();
+function usePasskeyOffer() {
+  const { config } = usePublicConfig();
+  const { user, isSignedIn } = useUser();
+  const { data: sessionData } = useSession();
+  const { listPasskeys } = usePasskeys();
+  const api = React32.useRef(listPasskeys);
+  api.current = listPasskeys;
+  const projectId = config?.environmentId ?? null;
+  const eligible = projectId !== null && isSignedIn && (0, import_core4.resolveProjectCapabilities)(config).passkeyAdd && user?.twoFactorEnabled !== true && typeof window !== "undefined" && "PublicKeyCredential" in window && passkeyReachableForConfig(config, window.location.hostname);
+  const userId = user?.id ?? null;
+  const sessionId = sessionData?.session?.id ?? null;
+  const subject = React32.useMemo(
+    () => eligible && userId && sessionId ? { userId, sessionKey: `${projectId}:${sessionId}:${userId}` } : null,
+    [eligible, projectId, sessionId, userId]
+  );
+  const shouldOffer = React32.useCallback(async () => {
+    if (subject === null || projectId === null || !(0, import_core8.passkeyOfferIsDue)(projectId, subject.userId)) {
+      return false;
+    }
+    try {
+      const res = await api.current();
+      if (res?.error || !res?.data) return false;
+      return res.data.length === 0;
+    } catch {
+      return false;
+    }
+  }, [subject, projectId]);
+  const remember = React32.useCallback(
+    (added) => {
+      if (projectId === null || subject === null) return;
+      if (added) (0, import_core8.recordPasskeyOfferSettled)(projectId, subject.userId);
+      else (0, import_core8.recordPasskeyOfferDismissed)(projectId, subject.userId);
+    },
+    [projectId, subject]
+  );
+  return { subject, shouldOffer, remember };
+}
+
+// src/components/PasskeyOfferGate.tsx
+var import_jsx_runtime40 = require("react/jsx-runtime");
+function PasskeyOfferGate({ children, title }) {
+  const { subject, shouldOffer, remember } = usePasskeyOffer();
+  const [offerFor, setOfferFor] = React33.useState(null);
+  React33.useEffect(() => {
+    if (subject === null) return;
+    let cancelled = false;
+    void shouldOffer().then((due) => {
+      if (!cancelled) setOfferFor(due ? subject.sessionKey : null);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [subject, shouldOffer]);
+  if (subject === null || offerFor !== subject.sessionKey) return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children });
+  return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "ba-form", "data-testid": "passkey-offer-gate", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(
+      PasskeyOffer,
+      {
+        variant: "sign-in",
+        title,
+        onComplete: (added) => {
+          remember(added);
+          setOfferFor(null);
+        }
+      }
+    ),
+    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(AuthOwlBadge, {})
+  ] });
+}
+
+// src/components/control.tsx
+var import_core9 = require("@authowl/core");
+init_hooks();
 init_i18n();
 init_Spinner();
-var import_jsx_runtime40 = require("react/jsx-runtime");
+var import_jsx_runtime41 = require("react/jsx-runtime");
 function SignedIn({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children }) : null;
+  return isLoaded && isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children }) : null;
 }
 function SignedOut({ children }) {
   const { isLoaded, isSignedIn } = useUser();
-  return isLoaded && !isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children }) : null;
+  return isLoaded && !isSignedIn ? /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children }) : null;
 }
 function Protect({
   children,
@@ -7655,42 +7814,42 @@ function Protect({
   const { user, isLoaded, isSignedIn } = useUser();
   const membership = useSession().data?.session?.membership ?? null;
   if (!isLoaded) return null;
-  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children: fallback });
-  if ((role !== void 0 || permission !== void 0 || teamId !== void 0) && !(0, import_core8.membershipHas)(membership, { role, permission, teamId })) {
-    return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children: fallback });
+  if (!isSignedIn || !user) return /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children: fallback });
+  if ((role !== void 0 || permission !== void 0 || teamId !== void 0) && !(0, import_core9.membershipHas)(membership, { role, permission, teamId })) {
+    return /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children: fallback });
   }
-  if (condition && !condition(user)) return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children: fallback });
-  return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children });
+  if (condition && !condition(user)) return /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children: fallback });
+  return /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children });
 }
 function AuthLoading({ children }) {
   const t = useT();
   const { isLoaded } = useUser();
   if (isLoaded) return null;
-  if (children !== void 0) return /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children });
-  return /* @__PURE__ */ (0, import_jsx_runtime40.jsxs)("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(Spinner, {}),
-    /* @__PURE__ */ (0, import_jsx_runtime40.jsx)("span", { className: "ba-sr-only", children: t("common.loading") })
+  if (children !== void 0) return /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children });
+  return /* @__PURE__ */ (0, import_jsx_runtime41.jsxs)("div", { className: "ba-auth-loading", role: "status", "aria-busy": "true", "data-testid": "auth-loading", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(Spinner, {}),
+    /* @__PURE__ */ (0, import_jsx_runtime41.jsx)("span", { className: "ba-sr-only", children: t("common.loading") })
   ] });
 }
 function AuthLoaded({ children }) {
-  return useUser().isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime40.jsx)(import_jsx_runtime40.Fragment, { children }) : null;
+  return useUser().isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(import_jsx_runtime41.Fragment, { children }) : null;
 }
 
 // src/index.ts
 init_Spinner();
 
 // src/components/SignOutButton.tsx
-var React31 = __toESM(require("react"), 1);
+var React34 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_Spinner();
-var import_jsx_runtime41 = require("react/jsx-runtime");
+var import_jsx_runtime42 = require("react/jsx-runtime");
 function SignOutButton({ children, redirectTo, onSignedOut, className }) {
   const t = useT();
   const { signOut } = useSignOut();
-  const [pending, setPending] = React31.useState(false);
+  const [pending, setPending] = React34.useState(false);
   const content = children ?? t("signOut.button");
-  return /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
     "button",
     {
       type: "button",
@@ -7708,41 +7867,41 @@ function SignOutButton({ children, redirectTo, onSignedOut, className }) {
           setPending(false);
         }
       },
-      children: /* @__PURE__ */ (0, import_jsx_runtime41.jsx)(Busy, { busy: pending, label: content, children: content })
+      children: /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(Busy, { busy: pending, label: content, children: content })
     }
   );
 }
 
 // src/components/UserButton.tsx
-var React46 = __toESM(require("react"), 1);
+var React49 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 
 // src/components/UserProfile.tsx
-var React45 = __toESM(require("react"), 1);
+var React48 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 
 // src/components/user-profile/EmailSection.tsx
-var React32 = __toESM(require("react"), 1);
+var React35 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime42 = require("react/jsx-runtime");
+var import_jsx_runtime43 = require("react/jsx-runtime");
 function EmailSection({ allowChange }) {
   const t = useT();
   const account = useAccount();
   const { user } = useUser();
   const { pending, error, run } = useSubmitAction();
-  const [newEmail, setNewEmail] = React32.useState("");
-  const [sent, setSent] = React32.useState(false);
-  const titleId = React32.useId();
+  const [newEmail, setNewEmail] = React35.useState("");
+  const [sent, setSent] = React35.useState(false);
+  const titleId = React35.useId();
   if (!user?.email) {
-    return /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
+    return /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: t("userProfile.email.unavailable") })
     ] });
   }
   const submit = (event) => {
@@ -7762,19 +7921,19 @@ function EmailSection({ allowChange }) {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", children: t("userProfile.email.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.email.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: t("userProfile.email.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("p", { className: "ba-profile-current", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("span", { children: t("userProfile.email.current") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(Bidi, { children: user.email }) })
+    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("p", { className: "ba-profile-current", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("span", { children: t("userProfile.email.current") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("strong", { children: /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(Bidi, { children: user.email }) })
     ] }),
-    !allowChange ? /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsxs)("label", { className: "ba-label", children: [
+    !allowChange ? /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", "data-testid": "email-change-disabled", children: t("userProfile.email.changeDisabled") }) : /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.email.newLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7786,16 +7945,16 @@ function EmailSection({ allowChange }) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(FormError, { children: error }),
-      sent && /* @__PURE__ */ (0, import_jsx_runtime42.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
-      /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(FormError, { children: error }),
+      sent && /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.email.sent") }),
+      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !newEmail.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime42.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(Busy, { busy: pending, label: t("common.sending"), children: t("userProfile.email.submit") })
         }
       )
     ] })
@@ -7803,21 +7962,21 @@ function EmailSection({ allowChange }) {
 }
 
 // src/components/user-profile/DeleteAccountSection.tsx
-var React33 = __toESM(require("react"), 1);
+var React36 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime43 = require("react/jsx-runtime");
+var import_jsx_runtime44 = require("react/jsx-runtime");
 function DeleteAccountSection({ onDeleted }) {
   const t = useT();
   const account = useAccount();
   const session = useSession();
   const { user } = useUser();
   const { pending, error, run } = useSubmitAction();
-  const [confirmation, setConfirmation] = React33.useState("");
-  const titleId = React33.useId();
+  const [confirmation, setConfirmation] = React36.useState("");
+  const titleId = React36.useId();
   const identifier = user?.email ?? user?.phoneNumber ?? user?.id ?? "";
   const confirmed = identifier.length > 0 && confirmation.trim().toLowerCase() === identifier.toLowerCase();
   const submit = (event) => {
@@ -7834,18 +7993,18 @@ function DeleteAccountSection({ onDeleted }) {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-muted", children: t("userProfile.delete.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("section", { className: "ba-profile-section ba-profile-danger-zone", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.delete.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-muted", children: t("userProfile.delete.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-profile-delete-warning", children: t("userProfile.delete.warning", { identifier }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.delete.confirmLabel"),
         " ",
-        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(Bidi, { children: identifier }),
-        /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(Bidi, { children: identifier }),
+        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7859,15 +8018,15 @@ function DeleteAccountSection({ onDeleted }) {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
         "button",
         {
           className: "ba-button ba-danger-button ba-profile-submit",
           type: "submit",
           disabled: pending || !confirmed,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime43.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.delete.submit") })
         }
       )
     ] })
@@ -7875,31 +8034,30 @@ function DeleteAccountSection({ onDeleted }) {
 }
 
 // src/components/user-profile/MfaSection.tsx
-var React34 = __toESM(require("react"), 1);
+var React37 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
-init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime44 = require("react/jsx-runtime");
+var import_jsx_runtime45 = require("react/jsx-runtime");
 function MfaSection() {
   const t = useT();
   const { user } = useUser();
   const session = useSession();
   const { config } = usePublicConfig();
   const { disable } = useMFA();
-  const { pending, error, run } = useSubmitAction();
-  const [password, setPassword] = React34.useState("");
-  const [showDisable, setShowDisable] = React34.useState(false);
-  const titleId = React34.useId();
+  const { pending, error, stepUpRequired, run, resume, cancel } = useStepUpAction();
+  const [password, setPassword] = React37.useState("");
+  const [showDisable, setShowDisable] = React37.useState(false);
+  const titleId = React37.useId();
   const required = (0, import_core4.resolveProjectCapabilities)(config).mfaRequired;
   if (!user?.twoFactorEnabled) {
-    return /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("header", { className: "ba-profile-section-header", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
+    return /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("header", { className: "ba-profile-section-header", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredDescription") : t("userProfile.mfa.description") })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
         MFAEnrollment,
         {
           title: null,
@@ -7922,16 +8080,26 @@ function MfaSection() {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
+  const cancelDisable = () => {
+    cancel();
+    setShowDisable(false);
+    setPassword("");
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.mfa.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.requiredActive") : t("userProfile.mfa.active") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("div", { className: "ba-profile-status", role: "status", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("strong", { children: t("userProfile.mfa.enabled") }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("span", { children: t("userProfile.mfa.authenticator") })
+    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("div", { className: "ba-profile-status", role: "status", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("strong", { children: t("userProfile.mfa.enabled") }),
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("span", { children: t("userProfile.mfa.authenticator") })
     ] }),
-    !showDisable ? /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+    stepUpRequired ? (
+      // Turning the factor off requires PROVING it, not just knowing the
+      // password - see `useStepUpAction`. The parked attempt replays with the
+      // password already entered, so accepting a code finishes the removal.
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(MFAChallenge, { variant: "step-up", onVerified: resume, onCancel: cancelDisable })
+    ) : !showDisable ? /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -7939,11 +8107,11 @@ function MfaSection() {
         onClick: () => setShowDisable(true),
         children: required ? t("userProfile.mfa.replace") : t("userProfile.mfa.disable")
       }
-    ) : /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("label", { className: "ba-label", children: [
+    ) : /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("form", { method: "post", className: "ba-fields ba-profile-security-form", onSubmit: submitDisable, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-muted", children: required ? t("userProfile.mfa.replaceWarning") : t("userProfile.mfa.disableWarning") }),
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
         t("common.passwordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
           "input",
           {
             className: "ba-input",
@@ -7955,29 +8123,26 @@ function MfaSection() {
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(FormError, { children: error }),
-      /* @__PURE__ */ (0, import_jsx_runtime44.jsxs)("span", { className: "ba-profile-action-row", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(FormError, { children: error }),
+      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("span", { className: "ba-profile-action-row", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
           "button",
           {
             className: "ba-button ba-danger-button",
             type: "submit",
             disabled: pending || !password,
             "aria-busy": pending || void 0,
-            children: /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
+            children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(Busy, { busy: pending, label: t("common.working"), children: required ? t("userProfile.mfa.replaceConfirm") : t("userProfile.mfa.disableConfirm") })
           }
         ),
-        /* @__PURE__ */ (0, import_jsx_runtime44.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
           "button",
           {
             className: "ba-button ba-button-secondary",
             type: "button",
             disabled: pending,
-            onClick: () => {
-              setShowDisable(false);
-              setPassword("");
-            },
-            children: t("userProfile.cancel")
+            onClick: cancelDisable,
+            children: t("common.cancel")
           }
         )
       ] })
@@ -7986,24 +8151,24 @@ function MfaSection() {
 }
 
 // src/components/user-profile/PasswordSection.tsx
-var React35 = __toESM(require("react"), 1);
+var React38 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime45 = require("react/jsx-runtime");
+var import_jsx_runtime46 = require("react/jsx-runtime");
 function PasswordSection() {
   const t = useT();
   const account = useAccount();
   const { config } = usePublicConfig();
   const { passwordMinLength, passwordMaxLength } = (0, import_core4.resolveProjectCapabilities)(config);
   const { pending, error, setError, run } = useSubmitAction();
-  const [currentPassword, setCurrentPassword] = React35.useState("");
-  const [newPassword, setNewPassword] = React35.useState("");
-  const [confirmPassword, setConfirmPassword] = React35.useState("");
-  const [saved, setSaved] = React35.useState(false);
-  const titleId = React35.useId();
+  const [currentPassword, setCurrentPassword] = React38.useState("");
+  const [newPassword, setNewPassword] = React38.useState("");
+  const [confirmPassword, setConfirmPassword] = React38.useState("");
+  const [saved, setSaved] = React38.useState(false);
+  const titleId = React38.useId();
   const submit = (event) => {
     event.preventDefault();
     setSaved(false);
@@ -8028,43 +8193,43 @@ function PasswordSection() {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-muted", children: t("userProfile.password.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.password.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { className: "ba-muted", children: t("userProfile.password.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.password.currentLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("input", { className: "ba-input", type: "password", autoComplete: "current-password", value: currentPassword, onChange: (event) => {
           setCurrentPassword(event.target.value);
           setError(null);
         }, required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
         t("resetPassword.newPasswordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: newPassword, onChange: (event) => {
           setNewPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("label", { className: "ba-label", children: [
         t("resetPassword.confirmPasswordLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
+        /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("input", { className: "ba-input", type: "password", autoComplete: "new-password", value: confirmPassword, onChange: (event) => {
           setConfirmPassword(event.target.value);
           setError(null);
         }, minLength: passwordMinLength, maxLength: passwordMaxLength, required: true })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(FormError, { children: error }),
-      saved && /* @__PURE__ */ (0, import_jsx_runtime45.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
-      /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(FormError, { children: error }),
+      saved && /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.password.saved") }),
+      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || !currentPassword || !newPassword || !confirmPassword,
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime45.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.password.submit") })
         }
       )
     ] })
@@ -8072,29 +8237,29 @@ function PasswordSection() {
 }
 
 // src/components/user-profile/PasskeysSection.tsx
-var React36 = __toESM(require("react"), 1);
+var React39 = __toESM(require("react"), 1);
 init_i18n();
-var import_jsx_runtime46 = require("react/jsx-runtime");
+var import_jsx_runtime47 = require("react/jsx-runtime");
 function PasskeysSection({ allowAdd }) {
   const t = useT();
-  const titleId = React36.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime46.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime46.jsx)("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
+  const titleId = React39.useId();
+  return /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.passkeys.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { className: "ba-muted", children: t("userProfile.passkeys.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime46.jsx)(PasskeyManager, { title: null, allowAdd })
+    /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(PasskeyManager, { title: null, allowAdd })
   ] });
 }
 
 // src/components/user-profile/ProfileSection.tsx
-var React37 = __toESM(require("react"), 1);
+var React40 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_Spinner();
 init_FormError();
-var import_jsx_runtime47 = require("react/jsx-runtime");
+var import_jsx_runtime48 = require("react/jsx-runtime");
 function ProfileSection({
   firstLastName,
   usernameEnabled,
@@ -8105,15 +8270,15 @@ function ProfileSection({
   const { user } = useUser();
   const session = useSession();
   const { pending, error, run } = useSubmitAction();
-  const [name, setName] = React37.useState(user?.name ?? "");
-  const [firstName, setFirstName] = React37.useState(user?.firstName ?? "");
-  const [lastName, setLastName] = React37.useState(user?.lastName ?? "");
-  const [username, setUsername] = React37.useState(
+  const [name, setName] = React40.useState(user?.name ?? "");
+  const [firstName, setFirstName] = React40.useState(user?.firstName ?? "");
+  const [lastName, setLastName] = React40.useState(user?.lastName ?? "");
+  const [username, setUsername] = React40.useState(
     user?.displayUsername ?? user?.username ?? ""
   );
-  const [image, setImage] = React37.useState(user?.image ?? "");
-  const [saved, setSaved] = React37.useState(false);
-  const titleId = React37.useId();
+  const [image, setImage] = React40.useState(user?.image ?? "");
+  const [saved, setSaved] = React40.useState(false);
+  const titleId = React40.useId();
   const submit = (event) => {
     event.preventDefault();
     setSaved(false);
@@ -8136,15 +8301,15 @@ function ProfileSection({
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { className: "ba-muted", children: t("userProfile.profile.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.profile.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { className: "ba-muted", children: t("userProfile.profile.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
-      legacyNameField && /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("label", { className: "ba-label", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("form", { method: "post", className: "ba-fields", onSubmit: submit, children: [
+      legacyNameField && /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("label", { className: "ba-label", children: [
         t("signUp.nameLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
           "input",
           {
             className: "ba-input",
@@ -8155,10 +8320,10 @@ function ProfileSection({
           }
         )
       ] }),
-      firstLastName && /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)(import_jsx_runtime47.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("label", { className: "ba-label", children: [
+      firstLastName && /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)(import_jsx_runtime48.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("label", { className: "ba-label", children: [
           t("signUp.firstNameLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
             "input",
             {
               className: "ba-input",
@@ -8168,9 +8333,9 @@ function ProfileSection({
             }
           )
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("label", { className: "ba-label", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("label", { className: "ba-label", children: [
           t("signUp.lastNameLabel"),
-          /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
             "input",
             {
               className: "ba-input",
@@ -8181,9 +8346,9 @@ function ProfileSection({
           )
         ] })
       ] }),
-      usernameEnabled && /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("label", { className: "ba-label", children: [
+      usernameEnabled && /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("label", { className: "ba-label", children: [
         t("common.usernameLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
           "input",
           {
             className: "ba-input",
@@ -8193,9 +8358,9 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsxs)("label", { className: "ba-label", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("label", { className: "ba-label", children: [
         t("userProfile.profile.imageLabel"),
-        /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
           "input",
           {
             className: "ba-input",
@@ -8206,16 +8371,16 @@ function ProfileSection({
           }
         )
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(FormError, { children: error }),
-      saved && /* @__PURE__ */ (0, import_jsx_runtime47.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
-      /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(FormError, { children: error }),
+      saved && /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { className: "ba-success", role: "status", children: t("userProfile.profile.saved") }),
+      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(
         "button",
         {
           className: "ba-button ba-profile-submit",
           type: "submit",
           disabled: pending || legacyNameField && !name.trim(),
           "aria-busy": pending || void 0,
-          children: /* @__PURE__ */ (0, import_jsx_runtime47.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
+          children: /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(Busy, { busy: pending, label: t("common.working"), children: t("userProfile.save") })
         }
       )
     ] })
@@ -8223,32 +8388,32 @@ function ProfileSection({
 }
 
 // src/components/user-profile/RecoverySection.tsx
-var React38 = __toESM(require("react"), 1);
+var React41 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
-var import_jsx_runtime48 = require("react/jsx-runtime");
+var import_jsx_runtime49 = require("react/jsx-runtime");
 function RecoverySection() {
   const t = useT();
   const { user } = useUser();
-  const titleId = React38.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
+  const titleId = React41.useId();
+  return /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.recovery.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { className: "ba-muted", children: t("userProfile.recovery.description") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)("div", { className: "ba-profile-recovery-card", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("strong", { children: t("userProfile.recovery.emailTitle") }),
-      user?.email && user.emailVerified ? /* @__PURE__ */ (0, import_jsx_runtime48.jsxs)(import_jsx_runtime48.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { children: t("userProfile.recovery.emailDescription") }),
-        /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(Bidi, { children: user.email })
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime48.jsx)("p", { children: t("userProfile.recovery.emailUnavailable") })
+    /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("div", { className: "ba-profile-recovery-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("strong", { children: t("userProfile.recovery.emailTitle") }),
+      user?.email && user.emailVerified ? /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)(import_jsx_runtime49.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { children: t("userProfile.recovery.emailDescription") }),
+        /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(Bidi, { children: user.email })
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { children: t("userProfile.recovery.emailUnavailable") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime48.jsx)(BackupCodesManager, { title: null })
+    /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(BackupCodesManager, { title: null })
   ] });
 }
 
 // src/components/user-profile/SessionsSection.tsx
-var React40 = __toESM(require("react"), 1);
+var React43 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
@@ -8300,19 +8465,19 @@ function formatSessionTime(date, locale) {
 }
 
 // src/components/user-profile/use-account-resource.ts
-var React39 = __toESM(require("react"), 1);
+var React42 = __toESM(require("react"), 1);
 init_i18n();
 function useAccountResource(loader, failure) {
-  const loaderRef = React39.useRef(loader);
+  const loaderRef = React42.useRef(loader);
   loaderRef.current = loader;
-  const failureRef = React39.useRef(failure);
+  const failureRef = React42.useRef(failure);
   failureRef.current = failure;
   const toServerError = useServerError();
-  const [data, setData] = React39.useState(null);
-  const [error, setError] = React39.useState(null);
-  const [loading, setLoading] = React39.useState(true);
-  const requestRef = React39.useRef(0);
-  const load = React39.useCallback(async () => {
+  const [data, setData] = React42.useState(null);
+  const [error, setError] = React42.useState(null);
+  const [loading, setLoading] = React42.useState(true);
+  const requestRef = React42.useRef(0);
+  const load = React42.useCallback(async () => {
     const request = ++requestRef.current;
     setLoading(true);
     try {
@@ -8331,7 +8496,7 @@ function useAccountResource(loader, failure) {
       if (request === requestRef.current) setLoading(false);
     }
   }, [toServerError]);
-  React39.useEffect(() => {
+  React42.useEffect(() => {
     void load();
     return () => {
       requestRef.current += 1;
@@ -8342,14 +8507,14 @@ function useAccountResource(loader, failure) {
 
 // src/components/user-profile/SessionsSection.tsx
 init_FormError();
-var import_jsx_runtime49 = require("react/jsx-runtime");
+var import_jsx_runtime50 = require("react/jsx-runtime");
 function SessionsSection() {
   const t = useT();
   const locale = useLocale();
   const account = useAccount();
   const sessionState = useSession();
   const mutation = useSubmitAction();
-  const titleId = React40.useId();
+  const titleId = React43.useId();
   const resource = useAccountResource(
     () => account.listSessions(),
     t("userProfile.sessions.loadError")
@@ -8371,31 +8536,31 @@ function SessionsSection() {
       }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.sessions.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("p", { className: "ba-muted", children: t("userProfile.sessions.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("div", { className: "ba-skeleton" }),
-      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("div", { className: "ba-skeleton" })
-    ] }) : null : /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("ul", { className: "ba-profile-list", children: [
+    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-skeleton" }),
+      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-skeleton" })
+    ] }) : null : /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("ul", { className: "ba-profile-list", children: [
       sessions.map((session) => {
         const label2 = session.userAgent?.trim() || t("userProfile.sessions.unknownDevice");
-        return /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("li", { className: "ba-profile-list-item", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("span", { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("strong", { children: label2 }),
-            /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("small", { children: [
-              session.id === currentId && /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("em", { children: t("userProfile.sessions.current") }),
+        return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("li", { className: "ba-profile-list-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("span", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("strong", { children: label2 }),
+            /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("small", { children: [
+              session.id === currentId && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("em", { children: t("userProfile.sessions.current") }),
               formatSessionTime(session.updatedAt, locale)
             ] })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
+          /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("button", { className: "ba-link-button ba-danger", type: "button", disabled: mutation.pending, onClick: () => revoke(session.id, label2), children: t("userProfile.sessions.revoke") })
         ] }, session.id);
       }),
-      sessions.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
+      sessions.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("li", { className: "ba-muted", children: t("userProfile.sessions.empty") })
     ] }),
-    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(
+    sessions.some((session) => session.id !== currentId) && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
       "button",
       {
         className: "ba-button ba-button-secondary ba-profile-submit",
@@ -8411,21 +8576,21 @@ function SessionsSection() {
         children: t("userProfile.sessions.revokeOthers")
       }
     ),
-    resource.error && /* @__PURE__ */ (0, import_jsx_runtime49.jsxs)("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(FormError, { children: resource.error }),
-      /* @__PURE__ */ (0, import_jsx_runtime49.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(FormError, { children: resource.error }),
+      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime49.jsx)(FormError, { children: mutation.error })
+    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(FormError, { children: mutation.error })
   ] });
 }
 
 // src/components/user-profile/SocialSection.tsx
-var React41 = __toESM(require("react"), 1);
+var React44 = __toESM(require("react"), 1);
 init_hooks();
 init_i18n();
 init_use_submit_action();
 init_FormError();
-var import_jsx_runtime50 = require("react/jsx-runtime");
+var import_jsx_runtime51 = require("react/jsx-runtime");
 function providerLabel(provider) {
   return provider.charAt(0).toUpperCase() + provider.slice(1);
 }
@@ -8434,7 +8599,7 @@ function SocialSection() {
   const account = useAccount();
   const { config } = usePublicConfig();
   const mutation = useSubmitAction();
-  const titleId = React41.useId();
+  const titleId = React44.useId();
   const resource = useAccountResource(
     () => account.listSocialAccounts(),
     t("userProfile.social.loadError")
@@ -8465,18 +8630,18 @@ function SocialSection() {
       { failure: t("userProfile.social.unlinkError"), onSuccess: resource.load }
     );
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("header", { className: "ba-profile-section-header", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("p", { className: "ba-muted", children: t("userProfile.social.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("section", { className: "ba-profile-section", "aria-labelledby": titleId, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("header", { className: "ba-profile-section-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("h2", { id: titleId, className: "ba-title", children: t("userProfile.social.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("p", { className: "ba-muted", children: t("userProfile.social.description") })
     ] }),
-    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("ul", { className: "ba-profile-list", children: [
-      linked.map((item) => /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("li", { className: "ba-profile-list-item", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("span", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("strong", { children: providerLabel(item.providerId) }),
-          /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
+    resource.data === null ? resource.loading ? /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("div", { className: "ba-profile-list-skeleton", "aria-busy": "true", children: /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("div", { className: "ba-skeleton" }) }) : null : /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("ul", { className: "ba-profile-list", children: [
+      linked.map((item) => /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("li", { className: "ba-profile-list-item", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("span", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("strong", { children: providerLabel(item.providerId) }),
+          /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("small", { children: item.canUnlink ? t("userProfile.social.connected") : t("userProfile.social.lastMethod") })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(
+        /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
           "button",
           {
             className: "ba-link-button ba-danger",
@@ -8491,33 +8656,33 @@ function SocialSection() {
           }
         )
       ] }, item.id)),
-      linked.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("li", { className: "ba-muted", children: t("userProfile.social.empty") })
+      linked.length === 0 && /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("li", { className: "ba-muted", children: t("userProfile.social.empty") })
     ] }),
-    available.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-provider-actions", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
-      available.map((provider) => /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
+    available.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-profile-provider-actions", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("p", { className: "ba-profile-subtitle", children: t("userProfile.social.add") }),
+      available.map((provider) => /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("button", { type: "button", className: "ba-button ba-button-secondary", disabled: mutation.pending, onClick: () => link(provider), children: t("userProfile.social.connectProvider", { provider: providerLabel(provider) }) }, provider))
     ] }),
-    resource.error && /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)("div", { className: "ba-profile-inline-error", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(FormError, { children: resource.error }),
-      /* @__PURE__ */ (0, import_jsx_runtime50.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
+    resource.error && /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-profile-inline-error", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(FormError, { children: resource.error }),
+      /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("button", { className: "ba-link-button", type: "button", onClick: () => void resource.load(), children: t("userProfile.retry") })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime50.jsx)(FormError, { children: mutation.error })
+    /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(FormError, { children: mutation.error })
   ] });
 }
 
 // src/components/user-profile/UserProfileModal.tsx
-var React42 = __toESM(require("react"), 1);
+var React45 = __toESM(require("react"), 1);
 init_i18n();
 init_ModalSurface();
-var import_jsx_runtime51 = require("react/jsx-runtime");
+var import_jsx_runtime52 = require("react/jsx-runtime");
 function UserProfileModal({
   children,
   onClose,
   branding
 }) {
   const t = useT();
-  const titleId = React42.useId();
-  return /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)(
+  const titleId = React45.useId();
+  return /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)(
     ModalSurface,
     {
       overlayClassName: "ba-profile-overlay",
@@ -8526,13 +8691,13 @@ function UserProfileModal({
       testId: "user-profile-modal",
       onClose,
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("div", { className: "ba-profile-modal-header", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime51.jsxs)("span", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("div", { className: "ba-profile-modal-header", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime52.jsxs)("span", { children: [
             branding,
-            /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("h1", { id: titleId, children: t("userProfile.title") }),
-            /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("p", { children: t("userProfile.description") })
+            /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("h1", { id: titleId, children: t("userProfile.title") }),
+            /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("p", { children: t("userProfile.description") })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
+          /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
             "button",
             {
               type: "button",
@@ -8540,7 +8705,7 @@ function UserProfileModal({
               "aria-label": t("userProfile.close"),
               onClick: onClose,
               autoFocus: true,
-              children: /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(
+              children: /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("svg", { viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(
                 "path",
                 {
                   d: "M6 6l12 12M18 6L6 18",
@@ -8553,39 +8718,39 @@ function UserProfileModal({
           )
         ] }),
         children,
-        /* @__PURE__ */ (0, import_jsx_runtime51.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime51.jsx)(AuthOwlBadge, {}) })
+        /* @__PURE__ */ (0, import_jsx_runtime52.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime52.jsx)(AuthOwlBadge, {}) })
       ]
     }
   );
 }
 
 // src/components/PrivacyCenter.tsx
-var React44 = __toESM(require("react"), 1);
-var import_jsx_runtime53 = require("react/jsx-runtime");
-var PrivacyCenterContent2 = React44.lazy(async () => {
+var React47 = __toESM(require("react"), 1);
+var import_jsx_runtime54 = require("react/jsx-runtime");
+var PrivacyCenterContent2 = React47.lazy(async () => {
   const module2 = await Promise.resolve().then(() => (init_PrivacyCenterContent(), PrivacyCenterContent_exports));
   return { default: module2.PrivacyCenterContent };
 });
 function PrivacyCenter(props = {}) {
-  return /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(React44.Suspense, { fallback: /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(PrivacyCenterFallback, { className: props.className }), children: /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(PrivacyCenterContent2, { ...props }) });
+  return /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(React47.Suspense, { fallback: /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(PrivacyCenterFallback, { className: props.className }), children: /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(PrivacyCenterContent2, { ...props }) });
 }
 function PrivacyCenterFallback({ className }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime53.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)(
     "section",
     {
       className: ["ba-profile-section ba-privacy-center", className].filter(Boolean).join(" "),
       "aria-busy": "true",
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton" }),
-        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton" }),
-        /* @__PURE__ */ (0, import_jsx_runtime53.jsx)("div", { className: "ba-skeleton" })
+        /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-skeleton" }),
+        /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-skeleton" })
       ]
     }
   );
 }
 
 // src/components/UserProfile.tsx
-var import_jsx_runtime54 = require("react/jsx-runtime");
+var import_jsx_runtime55 = require("react/jsx-runtime");
 var SECTION_KEYS = {
   profile: "userProfile.nav.profile",
   email: "userProfile.nav.email",
@@ -8615,7 +8780,7 @@ function UserProfile(props = {}) {
   const t = useT();
   const { user, isLoaded, isSignedIn } = useUser();
   const { config } = usePublicConfig();
-  const [internalSection, setInternalSection] = React45.useState(() => initialSection(defaultSection));
+  const [internalSection, setInternalSection] = React48.useState(() => initialSection(defaultSection));
   const active = section ?? internalSection;
   const capabilities = (0, import_core4.resolveProjectCapabilities)(config);
   const passwordEnabled = config !== null && capabilities.passwordSignIn;
@@ -8625,7 +8790,7 @@ function UserProfile(props = {}) {
   const deletionEnabled = capabilities.accountDeletion;
   const socialEnabled = (config?.socialProviders?.length ?? 0) > 0;
   const privacyEnabled = config?.privacy !== void 0;
-  const sections = React45.useMemo(
+  const sections = React48.useMemo(
     () => userProfileSectionsFor({
       password: passwordEnabled,
       passkeys: passkeysEnabled,
@@ -8637,7 +8802,7 @@ function UserProfile(props = {}) {
     }),
     [deletionEnabled, mfaEnabled, passkeysEnabled, passwordEnabled, privacyEnabled, recoveryEnabled, socialEnabled]
   );
-  React45.useEffect(() => {
+  React48.useEffect(() => {
     if (section || mode !== "page") return;
     const onHashChange = () => {
       const next = userProfileSectionFromHash(window.location.hash);
@@ -8654,11 +8819,11 @@ function UserProfile(props = {}) {
       window.history.replaceState(null, "", userProfileSectionHash(next));
     }
   };
-  const content = !isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-skeleton" }),
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("div", { className: "ba-skeleton" })
-  ] }) : !isSignedIn || !user ? /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(
+  const content = !isLoaded ? /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { className: "ba-profile-loading", "aria-busy": "true", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("div", { className: "ba-skeleton" }),
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("div", { className: "ba-skeleton" })
+  ] }) : !isSignedIn || !user ? /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-muted", children: t("userProfile.signedOut") }) : /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
     UserProfileBody,
     {
       active: visibleActive,
@@ -8670,23 +8835,23 @@ function UserProfile(props = {}) {
     user.id
   );
   if (props.mode === "modal") {
-    return /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
       UserProfileModal,
       {
         onClose: props.onClose,
-        branding: showBranding ? /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(AuthOwlBranding, {}) : null,
+        branding: showBranding ? /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(AuthOwlBranding, {}) : null,
         children: content
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("header", { className: "ba-profile-heading", children: [
-      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(AuthOwlBranding, {}) : null,
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("h1", { children: t("userProfile.title") }),
-      /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("p", { children: t("userProfile.description") })
+  return /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("article", { className: "ba-profile ba-profile-page", "data-testid": "user-profile", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("header", { className: "ba-profile-heading", children: [
+      showBranding ? /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(AuthOwlBranding, {}) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("h1", { children: t("userProfile.title") }),
+      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { children: t("userProfile.description") })
     ] }),
     content,
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(AuthOwlBadge, {}) })
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("footer", { className: "ba-profile-modal-footer", children: /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(AuthOwlBadge, {}) })
   ] });
 }
 function UserProfileBody({
@@ -8697,8 +8862,8 @@ function UserProfileBody({
   capabilities
 }) {
   const t = useT();
-  return /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("div", { className: "ba-profile-layout", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsx)("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { className: "ba-profile-layout", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("nav", { className: "ba-profile-nav", "aria-label": t("userProfile.nav.aria"), children: sections.map((item) => /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
       "button",
       {
         type: "button",
@@ -8709,8 +8874,8 @@ function UserProfileBody({
       },
       item
     )) }),
-    /* @__PURE__ */ (0, import_jsx_runtime54.jsxs)("div", { className: "ba-profile-content", "data-section": active, children: [
-      active === "profile" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { className: "ba-profile-content", "data-section": active, children: [
+      active === "profile" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
         ProfileSection,
         {
           firstLastName: capabilities.firstLastName,
@@ -8718,41 +8883,41 @@ function UserProfileBody({
           legacyNameField: capabilities.legacyNameField
         }
       ),
-      active === "email" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(EmailSection, { allowChange: capabilities.emailChange }),
-      active === "password" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(PasswordSection, {}),
-      active === "social" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(SocialSection, {}),
-      active === "sessions" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(SessionsSection, {}),
-      active === "passkeys" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
-      active === "mfa" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(MfaSection, {}),
-      active === "recovery" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(RecoverySection, {}),
-      active === "privacy" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(PrivacyCenter, {}),
-      active === "danger" && /* @__PURE__ */ (0, import_jsx_runtime54.jsx)(DeleteAccountSection, { onDeleted })
+      active === "email" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(EmailSection, { allowChange: capabilities.emailChange }),
+      active === "password" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(PasswordSection, {}),
+      active === "social" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(SocialSection, {}),
+      active === "sessions" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(SessionsSection, {}),
+      active === "passkeys" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(PasskeysSection, { allowAdd: capabilities.passkeyAdd }),
+      active === "mfa" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(MfaSection, {}),
+      active === "recovery" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(RecoverySection, {}),
+      active === "privacy" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(PrivacyCenter, {}),
+      active === "danger" && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(DeleteAccountSection, { onDeleted })
     ] })
   ] });
 }
 
 // src/components/UserButton.tsx
-var import_jsx_runtime55 = require("react/jsx-runtime");
+var import_jsx_runtime56 = require("react/jsx-runtime");
 function UserButton() {
   const t = useT();
   const { user, isLoaded } = useUser();
   const { signOut } = useSignOut();
-  const [open, setOpen] = React46.useState(false);
-  const [profileOpen, setProfileOpen] = React46.useState(false);
-  const [failedImage, setFailedImage] = React46.useState(null);
-  const triggerRef = React46.useRef(null);
+  const [open, setOpen] = React49.useState(false);
+  const [profileOpen, setProfileOpen] = React49.useState(false);
+  const [failedImage, setFailedImage] = React49.useState(null);
+  const triggerRef = React49.useRef(null);
   if (!isLoaded || !user) return null;
   const identity = user.email ?? user.phoneNumber ?? user.name ?? "?";
   const image = user.image ?? null;
-  return /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { className: "ba-user-button", "data-testid": "user-button", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("div", { className: "ba-user-button", "data-testid": "user-button", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
       "button",
       {
         ref: triggerRef,
         className: "ba-user-button-trigger",
         "aria-label": t("userButton.openMenuAria"),
         onClick: () => setOpen((v) => !v),
-        children: image && failedImage !== image ? /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
+        children: image && failedImage !== image ? /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
           "img",
           {
             className: "ba-avatar",
@@ -8761,12 +8926,12 @@ function UserButton() {
             referrerPolicy: "no-referrer",
             onError: () => setFailedImage(image)
           }
-        ) : /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
+        ) : /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("span", { className: "ba-avatar ba-avatar-fallback", children: identity[0]?.toUpperCase() })
       }
     ),
-    open && /* @__PURE__ */ (0, import_jsx_runtime55.jsxs)("div", { className: "ba-menu", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("p", { className: "ba-menu-label", children: identity }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
+    open && /* @__PURE__ */ (0, import_jsx_runtime56.jsxs)("div", { className: "ba-menu", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("p", { className: "ba-menu-label", children: identity }),
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
         "button",
         {
           className: "ba-menu-item",
@@ -8777,10 +8942,10 @@ function UserButton() {
           children: t("userButton.manageAccount")
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
-      /* @__PURE__ */ (0, import_jsx_runtime55.jsx)("div", { className: "ba-menu-badge", children: /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(AuthOwlBadge, {}) })
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("button", { className: "ba-menu-item", onClick: () => signOut(), children: t("userButton.signOut") }),
+      /* @__PURE__ */ (0, import_jsx_runtime56.jsx)("div", { className: "ba-menu-badge", children: /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(AuthOwlBadge, {}) })
     ] }),
-    profileOpen && /* @__PURE__ */ (0, import_jsx_runtime55.jsx)(
+    profileOpen && /* @__PURE__ */ (0, import_jsx_runtime56.jsx)(
       UserProfile,
       {
         mode: "modal",
@@ -8796,18 +8961,18 @@ function UserButton() {
 }
 
 // src/components/OrganizationSwitcher.tsx
-var React61 = __toESM(require("react"), 1);
-var import_jsx_runtime67 = require("react/jsx-runtime");
-var OrganizationSwitcherContent2 = React61.lazy(async () => {
+var React64 = __toESM(require("react"), 1);
+var import_jsx_runtime68 = require("react/jsx-runtime");
+var OrganizationSwitcherContent2 = React64.lazy(async () => {
   const module2 = await Promise.resolve().then(() => (init_OrganizationSwitcherContent(), OrganizationSwitcherContent_exports));
   return { default: module2.OrganizationSwitcherContent };
 });
 function OrganizationSwitcher(props = {}) {
-  return /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(
-    React61.Suspense,
+  return /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(
+    React64.Suspense,
     {
-      fallback: /* @__PURE__ */ (0, import_jsx_runtime67.jsx)("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-busy": "true" }),
-      children: /* @__PURE__ */ (0, import_jsx_runtime67.jsx)(OrganizationSwitcherContent2, { ...props })
+      fallback: /* @__PURE__ */ (0, import_jsx_runtime68.jsx)("div", { className: "ba-skeleton ba-organization-switcher-skeleton", "aria-busy": "true" }),
+      children: /* @__PURE__ */ (0, import_jsx_runtime68.jsx)(OrganizationSwitcherContent2, { ...props })
     }
   );
 }
@@ -8816,14 +8981,14 @@ function OrganizationSwitcher(props = {}) {
 init_InvitationPrompt();
 
 // src/components/OrganizationList.tsx
-var React63 = __toESM(require("react"), 1);
-var import_jsx_runtime69 = require("react/jsx-runtime");
-var OrganizationListContent2 = React63.lazy(async () => {
+var React66 = __toESM(require("react"), 1);
+var import_jsx_runtime70 = require("react/jsx-runtime");
+var OrganizationListContent2 = React66.lazy(async () => {
   const module2 = await Promise.resolve().then(() => (init_OrganizationListContent(), OrganizationListContent_exports));
   return { default: module2.OrganizationListContent };
 });
 function OrganizationList(props = {}) {
-  return /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(React63.Suspense, { fallback: /* @__PURE__ */ (0, import_jsx_runtime69.jsx)("div", { className: "ba-skeleton", "aria-busy": "true" }), children: /* @__PURE__ */ (0, import_jsx_runtime69.jsx)(OrganizationListContent2, { ...props }) });
+  return /* @__PURE__ */ (0, import_jsx_runtime70.jsx)(React66.Suspense, { fallback: /* @__PURE__ */ (0, import_jsx_runtime70.jsx)("div", { className: "ba-skeleton", "aria-busy": "true" }), children: /* @__PURE__ */ (0, import_jsx_runtime70.jsx)(OrganizationListContent2, { ...props }) });
 }
 
 // src/index.ts
@@ -8831,7 +8996,7 @@ init_CreateOrganization();
 init_OrganizationProfile();
 
 // src/components/GoogleOneTap.tsx
-var React64 = __toESM(require("react"), 1);
+var React67 = __toESM(require("react"), 1);
 init_hooks();
 
 // src/components/google-one-tap.ts
@@ -9008,16 +9173,16 @@ function GoogleOneTap({
   const { config, isLoading: configLoading, isError: configError } = usePublicConfig();
   const { user, isLoaded: sessionLoaded } = useUser();
   const { signInSocial } = useSignIn();
-  const callbacks = React64.useRef({ onSignedIn, onSkipped, onDismissed, onError });
+  const callbacks = React67.useRef({ onSignedIn, onSkipped, onDismissed, onError });
   callbacks.current = { onSignedIn, onSkipped, onDismissed, onError };
   const googleEnabled = config?.socialProviders.includes("google") === true;
   const clientId = config?.socialProviderClientIds?.google;
-  React64.useEffect(() => {
+  React67.useEffect(() => {
     if (process.env.NODE_ENV === "production") return;
     if (disabled || !googleEnabled || !clientId || nonce) return;
     warnOneTapWithoutNonce(clientId);
   }, [clientId, disabled, googleEnabled, nonce]);
-  React64.useEffect(() => {
+  React67.useEffect(() => {
     if (configLoading || !sessionLoaded) return;
     if (disabled) {
       callbacks.current.onSkipped?.("disabled");
@@ -9133,8 +9298,8 @@ function GoogleOneTap({
 }
 
 // src/index.ts
-var import_core9 = require("@authowl/core");
 var import_core10 = require("@authowl/core");
+var import_core11 = require("@authowl/core");
 init_last_used_method();
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
@@ -9165,11 +9330,13 @@ init_last_used_method();
   OrganizationSwitcher,
   PasskeyButton,
   PasskeyManager,
+  PasskeyOfferGate,
   PhoneOTP,
   PrivacyCenter,
   Protect,
   RateLimitedError,
   ResetPassword,
+  SECOND_FACTOR_REQUIRED,
   SignIn,
   SignOutButton,
   SignUp,
@@ -9208,6 +9375,7 @@ init_last_used_method();
   useSignIn,
   useSignOut,
   useSignUp,
+  useStepUpAction,
   useUser,
   useWaitlist
 });