@burdenoff/microfe-auth 2026.830.1 → 2026.904.1

package/dist/auth/pages/SsoConfigPage.js

@@ -1,18 +1,18 @@
-import { AlertIcon as e, SpinnerIcon as t } from "../components/AuthIcons.js";
-import { useSsoOperations as n } from "../hooks/useSsoOperations.js";
-import { useAuthPermissions as r } from "../hooks/useAuthPermissions.js";
-import { ConfirmActionDialog as i } from "../components/ConfirmActionDialog.js";
-import { nativeCopyText as a, nativeImpact as o, nativeNotify as s } from "../../utils/nativeBridge.js";
-import { useCallback as c, useEffect as l, useRef as ee, useState as u } from "react";
+import { useTr as e } from "../../shared/hooks/useTr.js";
+import { AlertIcon as t, SpinnerIcon as n } from "../components/AuthIcons.js";
+import { useSsoOperations as r } from "../hooks/useSsoOperations.js";
+import { useAuthPermissions as i } from "../hooks/useAuthPermissions.js";
+import { ConfirmActionDialog as a } from "../components/ConfirmActionDialog.js";
+import { nativeCopyText as o, nativeImpact as s, nativeNotify as c } from "../../utils/nativeBridge.js";
+import { useEffect as l, useRef as ee, useState as u } from "react";
 import { useNavigate as te, useSearchParams as ne } from "react-router";
-import { useI18n as re } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as d, jsx as f, jsxs as p } from "react/jsx-runtime";
-import { useFeatureFlagDetails as ie } from "@burdenoff/fe-libs/shared/feature-flags";
+import { useFeatureFlagDetails as re } from "@burdenoff/fe-libs/shared/feature-flags";
 import { Button as m } from "@burdenoff/fe-libs/button";
-import { EmphasisPanel as ae, IllustratedEmptyState as h, NextSteps as oe, PagePurpose as se } from "@burdenoff/fe-libs/ui";
+import { EmphasisPanel as ie, IllustratedEmptyState as h, NextSteps as ae, PagePurpose as oe } from "@burdenoff/fe-libs/ui";
 //#region src/auth/pages/SsoConfigPage.tsx
 var g = async (e) => {
-	o("light"), s(await a(e) ? "success" : "error");
+	s("light"), c(await o(e) ? "success" : "error");
 };
 function _(e) {
 	try {
@@ -47,25 +47,22 @@ function _(e) {
 		return console.error("Failed to parse SAML metadata:", e), null;
 	}
 }
-function v({ bypassEnterprisePlanGate: a = !1 }) {
-	let v = te(), [y] = ne(), { canManageSsoConfig: ce, isLoading: le } = r(), ue = ie("workspace.auth.enterprise-sso"), de = a || ue?.value === !0, b = ee(null), x = y.get("tenant"), S = y.get("org"), C = y.get("workspace"), { ssoConfig: w, oidcConfig: T, isLoading: E, isSaving: D, isDeleting: O, saveSsoConfig: k, deleteSsoConfig: fe } = n(x ?? "burdenoff.com"), { t: A } = re(), j = c((e, t) => {
-		let n = A(e);
-		return n === e ? t : n;
-	}, [A]), [M, pe] = u("saml"), [N, P] = u(!1), [me, F] = u(!1), [I, L] = u(null), [R, z] = u(null), [B, V] = u(""), [H, U] = u(!1), [W, G] = u(!1), [K, q] = u({
+function v({ bypassEnterprisePlanGate: o = !1 }) {
+	let v = e(), y = te(), [b] = ne(), { canManageSsoConfig: se, isLoading: ce } = i(), le = re("workspace.auth.enterprise-sso"), ue = o || le?.value === !0, x = ee(null), S = b.get("tenant"), C = b.get("org"), w = b.get("workspace"), { ssoConfig: T, oidcConfig: E, isLoading: D, isSaving: O, isDeleting: k, saveSsoConfig: A, deleteSsoConfig: de } = r(S ?? "burdenoff.com"), [j, fe] = u("saml"), [M, N] = u(!1), [pe, P] = u(!1), [F, I] = u(null), [L, R] = u(null), [z, B] = u(""), [V, H] = u(!1), [U, W] = u(!1), [G, K] = u({
 		client_name: "",
 		redirect_uris: "",
 		grant_types: ["authorization_code", "refresh_token"],
 		token_endpoint_auth_method: "none"
-	}), [J, Y] = u(!1), [X, he] = u(null), [Z, Q] = u({
+	}), [q, J] = u(!1), [Y, X] = u(null), [Z, Q] = u({
 		entityId: "",
 		ssoUrl: "",
 		sloUrl: "",
 		certificate: "",
 		enabled: !1
-	}), ge = async (e) => {
+	}), me = async (e) => {
 		let t = e.target.files?.[0];
 		if (t) {
-			L(null), U(!0);
+			I(null), H(!0);
 			try {
 				let e = _(await t.text());
 				e ? (Q({
@@ -74,21 +71,21 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 					ssoUrl: e.ssoUrl,
 					sloUrl: e.sloUrl || "",
 					certificate: e.certificate
-				}), z(j("auth.sso.importSuccess", "SAML metadata imported successfully! Review and save the configuration.")), P(!0)) : L(j("auth.sso.parseError", "Failed to parse SAML metadata. Make sure the file contains valid IdP metadata XML."));
+				}), R(v("auth.sso.importSuccess", "SAML metadata imported successfully! Review and save the configuration.")), N(!0)) : I(v("auth.sso.parseError", "Failed to parse SAML metadata. Make sure the file contains valid IdP metadata XML."));
 			} catch {
-				L(j("auth.sso.readError", "Failed to read metadata file"));
+				I(v("auth.sso.readError", "Failed to read metadata file"));
 			} finally {
-				U(!1), b.current && (b.current.value = "");
+				H(!1), x.current && (x.current.value = "");
 			}
 		}
-	}, _e = async () => {
-		if (!B) {
-			L(j("auth.sso.enterUrl", "Please enter a metadata URL"));
+	}, he = async () => {
+		if (!z) {
+			I(v("auth.sso.enterUrl", "Please enter a metadata URL"));
 			return;
 		}
-		L(null), U(!0);
+		I(null), H(!0);
 		try {
-			let e = await fetch(B);
+			let e = await fetch(z);
 			if (!e.ok) throw Error(`Failed to fetch: ${e.statusText}`);
 			let t = _(await e.text());
 			t ? (Q({
@@ -97,68 +94,68 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 				ssoUrl: t.ssoUrl,
 				sloUrl: t.sloUrl || "",
 				certificate: t.certificate
-			}), z(j("auth.sso.importSuccessFromUrl", "SAML metadata imported successfully! Review and save the configuration.")), P(!0), V("")) : L(j("auth.sso.parseUrlError", "Failed to parse SAML metadata from URL."));
+			}), R(v("auth.sso.importSuccessFromUrl", "SAML metadata imported successfully! Review and save the configuration.")), N(!0), B("")) : I(v("auth.sso.parseUrlError", "Failed to parse SAML metadata from URL."));
 		} catch (e) {
-			L(e instanceof Error ? e.message : j("auth.sso.fetchError", "Failed to fetch metadata from URL"));
+			I(e instanceof Error ? e.message : v("auth.sso.fetchError", "Failed to fetch metadata from URL"));
 		} finally {
-			U(!1);
+			H(!1);
 		}
-	}, ve = async () => {
-		if (!K.client_name || !K.redirect_uris) {
-			L(j("auth.sso.clientRequired", "Client name and redirect URI are required"));
+	}, ge = async () => {
+		if (!G.client_name || !G.redirect_uris) {
+			I(v("auth.sso.clientRequired", "Client name and redirect URI are required"));
 			return;
 		}
-		Y(!0), L(null);
+		J(!0), I(null);
 		try {
-			let e = T?.registrationEndpoint;
-			if (!e) throw Error(j("auth.sso.oidcNotConfigured", "OIDC dynamic client registration is not configured for this environment."));
+			let e = E?.registrationEndpoint;
+			if (!e) throw Error(v("auth.sso.oidcNotConfigured", "OIDC dynamic client registration is not configured for this environment."));
 			let t = await fetch(e, {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify({
-					client_name: K.client_name,
-					redirect_uris: K.redirect_uris.split(",").map((e) => e.trim()),
-					grant_types: K.grant_types,
+					client_name: G.client_name,
+					redirect_uris: G.redirect_uris.split(",").map((e) => e.trim()),
+					grant_types: G.grant_types,
 					response_types: ["code"],
-					token_endpoint_auth_method: K.token_endpoint_auth_method
+					token_endpoint_auth_method: G.token_endpoint_auth_method
 				})
 			});
 			if (!t.ok) {
 				let e = await t.json();
 				throw Error(e.error_description || e.error || "Registration failed");
 			}
-			he(await t.json()), z(j("auth.sso.clientRegistered", "OIDC client registered successfully! Save the client credentials.")), G(!1), q({
+			X(await t.json()), R(v("auth.sso.clientRegistered", "OIDC client registered successfully! Save the client credentials.")), W(!1), K({
 				client_name: "",
 				redirect_uris: "",
 				grant_types: ["authorization_code", "refresh_token"],
 				token_endpoint_auth_method: "none"
 			});
 		} catch (e) {
-			L(e instanceof Error ? e.message : j("auth.sso.registerFailed", "Failed to register client"));
+			I(e instanceof Error ? e.message : v("auth.sso.registerFailed", "Failed to register client"));
 		} finally {
-			Y(!1);
+			J(!1);
 		}
 	};
 	l(() => {
-		w && Q({
-			entityId: w.entityId || "",
-			ssoUrl: w.ssoUrl || "",
-			sloUrl: w.sloUrl || "",
-			certificate: w.certificate || "",
-			enabled: w.enabled || !1
+		T && Q({
+			entityId: T.entityId || "",
+			ssoUrl: T.ssoUrl || "",
+			sloUrl: T.sloUrl || "",
+			certificate: T.certificate || "",
+			enabled: T.enabled || !1
 		});
-	}, [w]);
-	let ye = async (e) => {
-		e.preventDefault(), L(null), z(null);
+	}, [T]);
+	let _e = async (e) => {
+		e.preventDefault(), I(null), R(null);
 		try {
-			await k(Z), z(j("auth.sso.saveSuccess", "SSO configuration saved successfully!")), P(!1);
+			await A(Z), R(v("auth.sso.saveSuccess", "SSO configuration saved successfully!")), N(!1);
 		} catch (e) {
-			L(e instanceof Error ? e.message : j("auth.sso.saveFailed", "Failed to save configuration"));
+			I(e instanceof Error ? e.message : v("auth.sso.saveFailed", "Failed to save configuration"));
 		}
-	}, be = async () => {
-		L(null), z(null), o("medium");
+	}, ve = async () => {
+		I(null), R(null), s("medium");
 		try {
-			await fe(), s("success"), z(j("auth.sso.deleteSuccess", "SSO configuration deleted successfully.")), F(!1), Q({
+			await de(), c("success"), R(v("auth.sso.deleteSuccess", "SSO configuration deleted successfully.")), P(!1), Q({
 				entityId: "",
 				ssoUrl: "",
 				sloUrl: "",
@@ -166,40 +163,40 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 				enabled: !1
 			});
 		} catch (e) {
-			s("error"), L(e instanceof Error ? e.message : j("auth.sso.deleteFailed", "Failed to delete configuration"));
+			c("error"), I(e instanceof Error ? e.message : v("auth.sso.deleteFailed", "Failed to delete configuration"));
 		}
 	}, $ = async () => {
-		L(null);
+		I(null);
 		try {
-			await k({
+			await A({
 				...Z,
 				enabled: !Z.enabled
-			}), z(Z.enabled ? j("auth.sso.ssoDisabled", "SSO disabled") : j("auth.sso.ssoEnabled", "SSO enabled"));
+			}), R(Z.enabled ? v("auth.sso.ssoDisabled", "SSO disabled") : v("auth.sso.ssoEnabled", "SSO enabled"));
 		} catch (e) {
-			L(e instanceof Error ? e.message : j("auth.sso.statusUpdateFailed", "Failed to update status"));
+			I(e instanceof Error ? e.message : v("auth.sso.statusUpdateFailed", "Failed to update status"));
 		}
 	};
-	return le ? /* @__PURE__ */ f("div", {
+	return ce ? /* @__PURE__ */ f("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ p("div", {
 			className: "text-center py-16",
-			children: [/* @__PURE__ */ f(t, { className: "size-8 mx-auto text-text-secondary animate-spin" }), /* @__PURE__ */ f("p", {
+			children: [/* @__PURE__ */ f(n, { className: "size-8 mx-auto text-text-secondary animate-spin" }), /* @__PURE__ */ f("p", {
 				className: "mt-4 text-text-secondary",
-				children: j("auth.sso.loadingPermissions", "Loading permissions...")
+				children: v("auth.sso.loadingPermissions", "Loading permissions...")
 			})]
 		})
-	}) : ce ? de ? /* @__PURE__ */ p("div", {
+	}) : se ? ue ? /* @__PURE__ */ p("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: [
-			/* @__PURE__ */ f(i, {
-				open: me,
-				onOpenChange: F,
-				title: j("auth.sso.deleteConfirmTitle", "Delete SSO configuration?"),
-				description: j("auth.sso.deleteConfirmDesc", "Users will immediately lose the ability to sign in with this SSO setup until a new configuration is saved."),
-				confirmText: j("auth.sso.deleteConfirmButton", "Delete configuration"),
+			/* @__PURE__ */ f(a, {
+				open: pe,
+				onOpenChange: P,
+				title: v("auth.sso.deleteConfirmTitle", "Delete SSO configuration?"),
+				description: v("auth.sso.deleteConfirmDesc", "Users will immediately lose the ability to sign in with this SSO setup until a new configuration is saved."),
+				confirmText: v("auth.sso.deleteConfirmButton", "Delete configuration"),
 				variant: "danger",
-				isPending: O,
-				onConfirm: be
+				isPending: k,
+				onConfirm: ve
 			}),
 			/* @__PURE__ */ p("div", {
 				className: "flex items-center justify-between mb-8",
@@ -207,8 +204,8 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 					className: "flex items-center gap-4",
 					children: [/* @__PURE__ */ f("button", {
 						type: "button",
-						onClick: () => v("/auth/security"),
-						"aria-label": j("auth.sso.backToSecurity", "Back to Security"),
+						onClick: () => y("/auth/security"),
+						"aria-label": v("auth.sso.backToSecurity", "Back to Security"),
 						className: "p-2 rounded-lg hover:bg-bg-sunken transition-colors",
 						children: /* @__PURE__ */ f("svg", {
 							className: "size-5 text-text-secondary",
@@ -225,109 +222,109 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						})
 					}), /* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("h1", {
 						className: "text-2xl font-semibold text-text-primary",
-						children: j("auth.sso.title", "Single Sign-On (SSO)")
+						children: v("auth.sso.title", "Single Sign-On (SSO)")
 					}), /* @__PURE__ */ f("p", {
 						className: "text-text-secondary mt-1",
-						children: j("auth.sso.description", "Configure enterprise SSO with SAML 2.0 or OIDC")
+						children: v("auth.sso.description", "Configure enterprise SSO with SAML 2.0 or OIDC")
 					})] })]
-				}), w && /* @__PURE__ */ p("div", {
+				}), T && /* @__PURE__ */ p("div", {
 					className: "flex items-center gap-3",
 					children: [/* @__PURE__ */ f("span", {
 						className: `px-3 py-1 rounded-full text-sm font-medium ${Z.enabled ? "bg-status-success-bg-subtle text-status-success-text" : "bg-bg-sunken text-text-secondary"}`,
-						children: Z.enabled ? j("auth.sso.enabled", "Enabled") : j("auth.sso.disabled", "Disabled")
+						children: Z.enabled ? v("auth.sso.enabled", "Enabled") : v("auth.sso.disabled", "Disabled")
 					}), /* @__PURE__ */ f("button", {
 						type: "button",
 						onClick: $,
-						disabled: D,
+						disabled: O,
 						className: "px-4 py-2 rounded-lg border border-border-default text-text-primary hover:bg-bg-sunken transition-colors text-sm font-medium",
-						children: Z.enabled ? j("auth.sso.disable", "Disable") : j("auth.sso.enable", "Enable")
+						children: Z.enabled ? v("auth.sso.disable", "Disable") : v("auth.sso.enable", "Enable")
 					})]
 				})]
 			}),
-			/* @__PURE__ */ f(se, {
+			/* @__PURE__ */ f(oe, {
 				className: "mb-6",
-				children: j("auth.sso.purpose", "Connect your organization's identity provider so your team signs in with their existing corporate credentials. Configure SAML 2.0 or OIDC here, then register the client apps that should accept these logins.")
+				children: v("auth.sso.purpose", "Connect your organization's identity provider so your team signs in with their existing corporate credentials. Configure SAML 2.0 or OIDC here, then register the client apps that should accept these logins.")
 			}),
-			/* @__PURE__ */ f(ae, {
+			/* @__PURE__ */ f(ie, {
 				className: "mb-8",
 				children: /* @__PURE__ */ f("div", {
 					className: "flex items-center justify-between gap-4",
 					children: /* @__PURE__ */ p("div", { children: [
 						/* @__PURE__ */ f("p", {
 							className: "text-sm font-medium text-text-secondary",
-							children: j("auth.sso.statusLabel", "SSO connection")
+							children: v("auth.sso.statusLabel", "SSO connection")
 						}),
 						/* @__PURE__ */ f("p", {
 							className: "mt-1 text-lg font-semibold text-text-primary",
-							children: w ? Z.enabled ? j("auth.sso.statusActive", "Active — users can sign in via SSO") : j("auth.sso.statusConfiguredDisabled", "Configured but disabled") : j("auth.sso.statusNotConfigured", "Not configured yet")
+							children: T ? Z.enabled ? v("auth.sso.statusActive", "Active — users can sign in via SSO") : v("auth.sso.statusConfiguredDisabled", "Configured but disabled") : v("auth.sso.statusNotConfigured", "Not configured yet")
 						}),
 						/* @__PURE__ */ f("p", {
 							className: "mt-1 text-sm text-text-secondary",
-							children: j("auth.sso.statusHint", "Save a SAML or OIDC configuration below, then enable it to go live.")
+							children: v("auth.sso.statusHint", "Save a SAML or OIDC configuration below, then enable it to go live.")
 						})
 					] })
 				})
 			}),
-			a && (x ?? S ?? C) && /* @__PURE__ */ p("div", {
+			o && (S ?? C ?? w) && /* @__PURE__ */ p("div", {
 				className: "mb-6 p-4 rounded-xl bg-status-info-bg-subtle border border-status-info-border",
 				children: [/* @__PURE__ */ f("p", {
 					className: "text-sm font-medium text-status-info-text mb-1",
-					children: j("auth.sso.adminContext", "Configuring SSO for")
+					children: v("auth.sso.adminContext", "Configuring SSO for")
 				}), /* @__PURE__ */ p("div", {
 					className: "flex flex-wrap gap-4 text-xs text-status-info-text",
 					children: [
-						x && /* @__PURE__ */ p("span", { children: [
+						S && /* @__PURE__ */ p("span", { children: [
 							/* @__PURE__ */ f("span", {
 								className: "font-medium",
-								children: j("auth.sso.tenant", "Tenant:")
+								children: v("auth.sso.tenant", "Tenant:")
 							}),
 							" ",
 							/* @__PURE__ */ f("code", {
 								className: "font-mono",
-								children: x
+								children: S
 							})
 						] }),
-						S && /* @__PURE__ */ p("span", { children: [
+						C && /* @__PURE__ */ p("span", { children: [
 							/* @__PURE__ */ f("span", {
 								className: "font-medium",
-								children: j("auth.sso.organization", "Organization:")
+								children: v("auth.sso.organization", "Organization:")
 							}),
 							" ",
 							/* @__PURE__ */ f("code", {
 								className: "font-mono",
-								children: S
+								children: C
 							})
 						] }),
-						C && /* @__PURE__ */ p("span", { children: [
+						w && /* @__PURE__ */ p("span", { children: [
 							/* @__PURE__ */ f("span", {
 								className: "font-medium",
-								children: j("auth.sso.workspace", "Workspace:")
+								children: v("auth.sso.workspace", "Workspace:")
 							}),
 							" ",
 							/* @__PURE__ */ f("code", {
 								className: "font-mono",
-								children: C
+								children: w
 							})
 						] })
 					]
 				})]
 			}),
-			I && /* @__PURE__ */ p("div", {
+			F && /* @__PURE__ */ p("div", {
 				className: "mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-error-bg-subtle border border-status-error-border",
-				children: [/* @__PURE__ */ f(e, { className: "size-5 text-status-error-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ p("div", {
+				children: [/* @__PURE__ */ f(t, { className: "size-5 text-status-error-text flex-shrink-0 mt-0.5" }), /* @__PURE__ */ p("div", {
 					className: "flex-1",
 					children: [/* @__PURE__ */ f("p", {
 						className: "text-sm text-status-error-text",
-						children: I
+						children: F
 					}), /* @__PURE__ */ f("button", {
 						type: "button",
-						onClick: () => L(null),
+						onClick: () => I(null),
 						className: "mt-2 text-sm text-status-error-text hover:underline",
-						children: j("auth.sso.dismiss", "Dismiss")
+						children: v("auth.sso.dismiss", "Dismiss")
 					})]
 				})]
 			}),
-			R && /* @__PURE__ */ p("div", {
+			L && /* @__PURE__ */ p("div", {
 				className: "mb-6 flex items-start gap-3 p-4 rounded-xl bg-status-success-bg-subtle border border-status-success-border",
 				children: [/* @__PURE__ */ f("svg", {
 					className: "size-5 text-status-success-text flex-shrink-0 mt-0.5",
@@ -342,12 +339,12 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 					className: "flex-1",
 					children: [/* @__PURE__ */ f("p", {
 						className: "text-sm text-status-success-text",
-						children: R
+						children: L
 					}), /* @__PURE__ */ f("button", {
 						type: "button",
-						onClick: () => z(null),
+						onClick: () => R(null),
 						className: "mt-2 text-sm text-status-success-text hover:underline",
-						children: j("auth.sso.dismiss", "Dismiss")
+						children: v("auth.sso.dismiss", "Dismiss")
 					})]
 				})]
 			}),
@@ -358,43 +355,43 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 					children: [
 						{
 							id: "saml",
-							label: j("auth.sso.samlTab", "SAML 2.0"),
+							label: v("auth.sso.samlTab", "SAML 2.0"),
 							icon: "🔐"
 						},
 						{
 							id: "oidc",
-							label: j("auth.sso.oidcTab", "OIDC Provider"),
+							label: v("auth.sso.oidcTab", "OIDC Provider"),
 							icon: "🌐"
 						},
 						{
 							id: "clients",
-							label: j("auth.sso.clientsTab", "OIDC Clients"),
+							label: v("auth.sso.clientsTab", "OIDC Clients"),
 							icon: "🔑"
 						},
 						{
 							id: "test",
-							label: j("auth.sso.testTab", "Test SSO"),
+							label: v("auth.sso.testTab", "Test SSO"),
 							icon: "🧪"
 						}
 					].map((e) => /* @__PURE__ */ p("button", {
 						type: "button",
-						onClick: () => pe(e.id),
-						className: `pb-3 text-sm font-medium transition-colors relative ${M === e.id ? "text-text-link" : "text-text-secondary hover:text-text-primary"}`,
+						onClick: () => fe(e.id),
+						className: `pb-3 text-sm font-medium transition-colors relative ${j === e.id ? "text-text-link" : "text-text-secondary hover:text-text-primary"}`,
 						children: [/* @__PURE__ */ p("span", {
 							className: "flex items-center gap-2",
 							children: [/* @__PURE__ */ f("span", { children: e.icon }), e.label]
-						}), M === e.id && /* @__PURE__ */ f("span", { className: "absolute bottom-0 left-0 right-0 h-0.5 bg-action-primary-bg" })]
+						}), j === e.id && /* @__PURE__ */ f("span", { className: "absolute bottom-0 left-0 right-0 h-0.5 bg-action-primary-bg" })]
 					}, e.id))
 				})
 			}),
-			E && /* @__PURE__ */ p("div", {
+			D && /* @__PURE__ */ p("div", {
 				className: "flex items-center justify-center py-12",
-				children: [/* @__PURE__ */ f(t, { className: "size-8 text-text-link animate-spin" }), /* @__PURE__ */ f("span", {
+				children: [/* @__PURE__ */ f(n, { className: "size-8 text-text-link animate-spin" }), /* @__PURE__ */ f("span", {
 					className: "ml-3 text-text-secondary",
-					children: j("auth.sso.loadingConfig", "Loading configuration...")
+					children: v("auth.sso.loadingConfig", "Loading configuration...")
 				})]
 			}),
-			!E && M === "saml" && /* @__PURE__ */ p("div", {
+			!D && j === "saml" && /* @__PURE__ */ p("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ p("div", {
@@ -402,18 +399,18 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						children: [
 							/* @__PURE__ */ f("h3", {
 								className: "font-medium text-status-info-text mb-2",
-								children: j("auth.sso.samlConfigTitle", "SAML 2.0 Configuration")
+								children: v("auth.sso.samlConfigTitle", "SAML 2.0 Configuration")
 							}),
 							/* @__PURE__ */ f("p", {
 								className: "text-sm text-status-info-text",
-								children: j("auth.sso.samlConfigDesc", "Configure your Identity Provider (IdP) to enable enterprise SSO. You'll need to get the following information from your IdP (Okta, Azure AD, OneLogin, etc.):")
+								children: v("auth.sso.samlConfigDesc", "Configure your Identity Provider (IdP) to enable enterprise SSO. You'll need to get the following information from your IdP (Okta, Azure AD, OneLogin, etc.):")
 							}),
 							/* @__PURE__ */ p("ul", {
 								className: "mt-2 text-sm text-status-info-text list-disc list-inside",
 								children: [
-									/* @__PURE__ */ f("li", { children: j("auth.sso.entityIdItem", "Entity ID (Issuer URL)") }),
-									/* @__PURE__ */ f("li", { children: j("auth.sso.ssoUrlItem", "SSO URL (Login URL)") }),
-									/* @__PURE__ */ f("li", { children: j("auth.sso.certificateItem", "X.509 Certificate") })
+									/* @__PURE__ */ f("li", { children: v("auth.sso.entityIdItem", "Entity ID (Issuer URL)") }),
+									/* @__PURE__ */ f("li", { children: v("auth.sso.ssoUrlItem", "SSO URL (Login URL)") }),
+									/* @__PURE__ */ f("li", { children: v("auth.sso.certificateItem", "X.509 Certificate") })
 								]
 							})
 						]
@@ -423,11 +420,11 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						children: [
 							/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: j("auth.sso.importMetadata", "Import IdP Metadata")
+								children: v("auth.sso.importMetadata", "Import IdP Metadata")
 							}),
 							/* @__PURE__ */ f("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: j("auth.sso.importMetadataDesc", "Automatically configure SSO by importing your IdP's metadata XML file or URL.")
+								children: v("auth.sso.importMetadataDesc", "Automatically configure SSO by importing your IdP's metadata XML file or URL.")
 							}),
 							/* @__PURE__ */ p("div", {
 								className: "grid grid-cols-1 md:grid-cols-2 gap-6",
@@ -436,21 +433,21 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 									children: [
 										/* @__PURE__ */ f("label", {
 											className: "block text-sm font-medium text-text-primary",
-											children: j("auth.sso.uploadFile", "Upload Metadata File")
+											children: v("auth.sso.uploadFile", "Upload Metadata File")
 										}),
 										/* @__PURE__ */ f("input", {
-											ref: b,
+											ref: x,
 											type: "file",
 											accept: ".xml,application/xml,text/xml",
-											onChange: ge,
+											onChange: me,
 											className: "hidden",
 											id: "metadata-file",
-											"aria-label": j("auth.sso.uploadFile", "Upload Metadata File")
+											"aria-label": v("auth.sso.uploadFile", "Upload Metadata File")
 										}),
 										/* @__PURE__ */ p("label", {
 											htmlFor: "metadata-file",
 											className: "flex items-center justify-center gap-2 w-full px-4 py-3 border-2 border-dashed border-border-default rounded-xl cursor-pointer hover:border-action-primary-bg transition-colors",
-											children: [H ? /* @__PURE__ */ f(t, { className: "size-5 animate-spin text-text-link" }) : /* @__PURE__ */ f("svg", {
+											children: [V ? /* @__PURE__ */ f(n, { className: "size-5 animate-spin text-text-link" }) : /* @__PURE__ */ f("svg", {
 												className: "size-5 text-text-tertiary",
 												fill: "none",
 												viewBox: "0 0 24 24",
@@ -463,7 +460,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 												})
 											}), /* @__PURE__ */ f("span", {
 												className: "text-sm text-text-secondary",
-												children: H ? j("auth.sso.importing", "Importing...") : j("auth.sso.chooseFile", "Choose XML file")
+												children: V ? v("auth.sso.importing", "Importing...") : v("auth.sso.chooseFile", "Choose XML file")
 											})]
 										})
 									]
@@ -471,23 +468,23 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 									className: "space-y-3",
 									children: [/* @__PURE__ */ f("label", {
 										className: "block text-sm font-medium text-text-primary",
-										children: j("auth.sso.fetchFromUrl", "Fetch from URL")
+										children: v("auth.sso.fetchFromUrl", "Fetch from URL")
 									}), /* @__PURE__ */ p("div", {
 										className: "flex gap-2",
 										children: [/* @__PURE__ */ f("input", {
 											id: "sso-metadata-url",
 											type: "url",
-											value: B,
-											onChange: (e) => V(e.target.value),
+											value: z,
+											onChange: (e) => B(e.target.value),
 											placeholder: "https://idp.example.com/metadata.xml",
-											"aria-label": j("auth.sso.fetchFromUrl", "Fetch from URL"),
+											"aria-label": v("auth.sso.fetchFromUrl", "Fetch from URL"),
 											className: "flex-1 px-4 py-2.5 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all text-sm"
 										}), /* @__PURE__ */ p("button", {
 											type: "button",
-											onClick: _e,
-											disabled: H || !B,
+											onClick: he,
+											disabled: V || !z,
 											className: "px-4 py-2.5 rounded-xl bg-action-primary-bg text-white font-medium hover:bg-action-primary-bg-hover disabled:opacity-50 disabled:cursor-not-allowed transition-colors flex items-center gap-2",
-											children: [H ? /* @__PURE__ */ f(t, { className: "size-4 animate-spin" }) : /* @__PURE__ */ f("svg", {
+											children: [V ? /* @__PURE__ */ f(n, { className: "size-4 animate-spin" }) : /* @__PURE__ */ f("svg", {
 												className: "size-4",
 												fill: "none",
 												viewBox: "0 0 24 24",
@@ -498,7 +495,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 													strokeWidth: 2,
 													d: "M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4"
 												})
-											}), j("auth.sso.fetch", "Fetch")]
+											}), v("auth.sso.fetch", "Fetch")]
 										})]
 									})]
 								})]
@@ -510,17 +507,17 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						children: [
 							/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: j("auth.sso.spMetadata", "Service Provider (SP) Metadata")
+								children: v("auth.sso.spMetadata", "Service Provider (SP) Metadata")
 							}),
 							/* @__PURE__ */ f("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: j("auth.sso.spMetadataDesc", "Provide these values to your Identity Provider when setting up the SAML integration:")
+								children: v("auth.sso.spMetadataDesc", "Provide these values to your Identity Provider when setting up the SAML integration:")
 							}),
 							/* @__PURE__ */ p("div", {
 								className: "space-y-4",
 								children: [/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									className: "block text-sm font-medium text-text-primary mb-1",
-									children: j("auth.sso.spEntityId", "SP Entity ID / Audience URI")
+									children: v("auth.sso.spEntityId", "SP Entity ID / Audience URI")
 								}), /* @__PURE__ */ p("div", {
 									className: "flex items-center gap-2",
 									children: [/* @__PURE__ */ p("code", {
@@ -530,11 +527,11 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										type: "button",
 										onClick: () => void g(`${window.location.origin}/auth/saml/metadata`),
 										className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken",
-										children: j("auth.sso.copy", "Copy")
+										children: v("auth.sso.copy", "Copy")
 									})]
 								})] }), /* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									className: "block text-sm font-medium text-text-primary mb-1",
-									children: j("auth.sso.acsUrl", "Assertion Consumer Service (ACS) URL")
+									children: v("auth.sso.acsUrl", "Assertion Consumer Service (ACS) URL")
 								}), /* @__PURE__ */ p("div", {
 									className: "flex items-center gap-2",
 									children: [/* @__PURE__ */ p("code", {
@@ -544,26 +541,26 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										type: "button",
 										onClick: () => void g(`${window.location.origin}/auth/sso/callback`),
 										className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken",
-										children: j("auth.sso.copy", "Copy")
+										children: v("auth.sso.copy", "Copy")
 									})]
 								})] })]
 							})
 						]
 					}),
 					/* @__PURE__ */ p("form", {
-						onSubmit: ye,
+						onSubmit: _e,
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [
 							/* @__PURE__ */ p("div", {
 								className: "flex items-center justify-between mb-6",
 								children: [/* @__PURE__ */ f("h3", {
 									className: "text-lg font-medium text-text-primary",
-									children: j("auth.sso.idpSettings", "Identity Provider (IdP) Settings")
-								}), !N && w && /* @__PURE__ */ f("button", {
+									children: v("auth.sso.idpSettings", "Identity Provider (IdP) Settings")
+								}), !M && T && /* @__PURE__ */ f("button", {
 									type: "button",
-									onClick: () => P(!0),
+									onClick: () => N(!0),
 									className: "px-4 py-2 rounded-lg border border-status-info-border text-text-link hover:bg-status-info-bg-subtle text-sm font-medium transition-colors",
-									children: j("auth.sso.editConfig", "Edit Configuration")
+									children: v("auth.sso.editConfig", "Edit Configuration")
 								})]
 							}),
 							/* @__PURE__ */ p("div", {
@@ -574,7 +571,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 											htmlFor: "sso-entity-id",
 											className: "block text-sm font-medium text-text-primary mb-2",
 											children: [
-												j("auth.sso.idpEntityId", "IdP Entity ID / Issuer URL"),
+												v("auth.sso.idpEntityId", "IdP Entity ID / Issuer URL"),
 												" ",
 												/* @__PURE__ */ f("span", {
 													className: "text-status-error-text",
@@ -586,14 +583,14 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ f("input", {
 											id: "sso-entity-id",
 											type: "url",
-											"aria-label": j("auth.sso.idpEntityId", "IdP Entity ID"),
+											"aria-label": v("auth.sso.idpEntityId", "IdP Entity ID"),
 											value: Z.entityId,
 											onChange: (e) => Q({
 												...Z,
 												entityId: e.target.value
 											}),
-											disabled: !N && !!w,
-											placeholder: j("auth.sso.idpEntityIdPlaceholder", "https://your-idp.example.com/saml/metadata"),
+											disabled: !M && !!T,
+											placeholder: v("auth.sso.idpEntityIdPlaceholder", "https://your-idp.example.com/saml/metadata"),
 											required: !0,
 											"aria-required": "true",
 											"aria-describedby": "sso-entity-id-hint",
@@ -602,7 +599,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ f("p", {
 											id: "sso-entity-id-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: j("auth.sso.idpEntityIdHelper", "The unique identifier of your Identity Provider")
+											children: v("auth.sso.idpEntityIdHelper", "The unique identifier of your Identity Provider")
 										})
 									] }),
 									/* @__PURE__ */ p("div", { children: [
@@ -610,7 +607,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 											htmlFor: "sso-sso-url",
 											className: "block text-sm font-medium text-text-primary mb-2",
 											children: [
-												j("auth.sso.ssoUrl", "SSO URL (Login URL)"),
+												v("auth.sso.ssoUrl", "SSO URL (Login URL)"),
 												" ",
 												/* @__PURE__ */ f("span", {
 													className: "text-status-error-text",
@@ -622,14 +619,14 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ f("input", {
 											id: "sso-sso-url",
 											type: "url",
-											"aria-label": j("auth.sso.ssoUrl", "SSO URL"),
+											"aria-label": v("auth.sso.ssoUrl", "SSO URL"),
 											value: Z.ssoUrl,
 											onChange: (e) => Q({
 												...Z,
 												ssoUrl: e.target.value
 											}),
-											disabled: !N && !!w,
-											placeholder: j("auth.sso.ssoUrlPlaceholder", "https://your-idp.example.com/saml/sso"),
+											disabled: !M && !!T,
+											placeholder: v("auth.sso.ssoUrlPlaceholder", "https://your-idp.example.com/saml/sso"),
 											required: !0,
 											"aria-required": "true",
 											"aria-describedby": "sso-sso-url-hint",
@@ -638,7 +635,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ f("p", {
 											id: "sso-sso-url-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: j("auth.sso.ssoUrlHelper", "The URL where users are redirected to authenticate")
+											children: v("auth.sso.ssoUrlHelper", "The URL where users are redirected to authenticate")
 										})
 									] }),
 									/* @__PURE__ */ p("div", { children: [
@@ -646,7 +643,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 											htmlFor: "sso-certificate",
 											className: "block text-sm font-medium text-text-primary mb-2",
 											children: [
-												j("auth.sso.certificate", "X.509 Certificate"),
+												v("auth.sso.certificate", "X.509 Certificate"),
 												" ",
 												/* @__PURE__ */ f("span", {
 													className: "text-status-error-text",
@@ -657,14 +654,14 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										}),
 										/* @__PURE__ */ f("textarea", {
 											id: "sso-certificate",
-											"aria-label": j("auth.sso.certificate", "X.509 Certificate"),
+											"aria-label": v("auth.sso.certificate", "X.509 Certificate"),
 											value: Z.certificate,
 											onChange: (e) => Q({
 												...Z,
 												certificate: e.target.value
 											}),
-											disabled: !N && !!w,
-											placeholder: j("auth.sso.certificatePlaceholder", "-----BEGIN CERTIFICATE-----\nMIIDpDCCAoygAwIBAgIGAX...\n-----END CERTIFICATE-----"),
+											disabled: !M && !!T,
+											placeholder: v("auth.sso.certificatePlaceholder", "-----BEGIN CERTIFICATE-----\nMIIDpDCCAoygAwIBAgIGAX...\n-----END CERTIFICATE-----"),
 											required: !0,
 											"aria-required": "true",
 											"aria-describedby": "sso-certificate-hint",
@@ -674,70 +671,70 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										/* @__PURE__ */ f("p", {
 											id: "sso-certificate-hint",
 											className: "mt-1 text-xs text-text-secondary",
-											children: j("auth.sso.certificateHelper", "The public X.509 certificate from your IdP for signature verification")
+											children: v("auth.sso.certificateHelper", "The public X.509 certificate from your IdP for signature verification")
 										})
 									] })
 								]
 							}),
-							(N || !w) && /* @__PURE__ */ p("div", {
+							(M || !T) && /* @__PURE__ */ p("div", {
 								className: "mt-6 flex items-center gap-3",
 								children: [/* @__PURE__ */ f(m, {
 									type: "submit",
-									disabled: D,
+									disabled: O,
 									variant: "default",
 									size: "lg",
 									className: "font-semibold",
-									children: D ? /* @__PURE__ */ p(d, { children: [/* @__PURE__ */ f(t, { className: "size-4 animate-spin" }), j("auth.sso.saving", "Saving...")] }) : j("auth.sso.saveConfig", "Save Configuration")
-								}), N && /* @__PURE__ */ f("button", {
+									children: O ? /* @__PURE__ */ p(d, { children: [/* @__PURE__ */ f(n, { className: "size-4 animate-spin" }), v("auth.sso.saving", "Saving...")] }) : v("auth.sso.saveConfig", "Save Configuration")
+								}), M && /* @__PURE__ */ f("button", {
 									type: "button",
 									onClick: () => {
-										P(!1), w && Q({
-											entityId: w.entityId || "",
-											ssoUrl: w.ssoUrl || "",
-											sloUrl: w.sloUrl || "",
-											certificate: w.certificate || "",
-											enabled: w.enabled || !1
+										N(!1), T && Q({
+											entityId: T.entityId || "",
+											ssoUrl: T.ssoUrl || "",
+											sloUrl: T.sloUrl || "",
+											certificate: T.certificate || "",
+											enabled: T.enabled || !1
 										});
 									},
 									className: "px-6 py-3 rounded-xl border border-border-default text-text-primary font-medium hover:bg-bg-sunken transition-colors",
-									children: j("auth.sso.cancel", "Cancel")
+									children: v("auth.sso.cancel", "Cancel")
 								})]
 							})
 						]
 					}),
-					w && /* @__PURE__ */ p("div", {
+					T && /* @__PURE__ */ p("div", {
 						className: "p-6 rounded-xl border border-status-error-border bg-status-error-bg-subtle",
 						children: [
 							/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-status-error-text mb-2",
-								children: j("auth.sso.dangerZone", "Danger Zone")
+								children: v("auth.sso.dangerZone", "Danger Zone")
 							}),
 							/* @__PURE__ */ f("p", {
 								className: "text-sm text-status-error-text mb-4",
-								children: j("auth.sso.dangerZoneDesc", "Deleting the SSO configuration will prevent users from signing in with their enterprise credentials. This action cannot be undone.")
+								children: v("auth.sso.dangerZoneDesc", "Deleting the SSO configuration will prevent users from signing in with their enterprise credentials. This action cannot be undone.")
 							}),
 							/* @__PURE__ */ f("button", {
 								type: "button",
-								onClick: () => F(!0),
-								disabled: O,
+								onClick: () => P(!0),
+								disabled: k,
 								className: "px-4 py-2 rounded-lg bg-status-error-bg text-white font-medium hover:bg-status-error-bg-hover disabled:opacity-50 transition-colors flex items-center gap-2",
-								children: O ? /* @__PURE__ */ p(d, { children: [/* @__PURE__ */ f(t, { className: "size-4 animate-spin" }), j("auth.sso.deleting", "Deleting...")] }) : j("auth.sso.deleteConfig", "Delete SSO Configuration")
+								children: k ? /* @__PURE__ */ p(d, { children: [/* @__PURE__ */ f(n, { className: "size-4 animate-spin" }), v("auth.sso.deleting", "Deleting...")] }) : v("auth.sso.deleteConfig", "Delete SSO Configuration")
 							})
 						]
 					})
 				]
 			}),
-			!E && M === "oidc" && /* @__PURE__ */ p("div", {
+			!D && j === "oidc" && /* @__PURE__ */ p("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ p("div", {
 						className: "p-4 rounded-xl bg-accent-purple-subtle border border-accent-purple-subtle",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "font-medium text-accent-purple mb-2",
-							children: j("auth.sso.oidcProviderInfo", "OIDC Provider Information")
+							children: v("auth.sso.oidcProviderInfo", "OIDC Provider Information")
 						}), /* @__PURE__ */ f("p", {
 							className: "text-sm text-accent-purple",
-							children: j("auth.sso.oidcProviderInfoDesc", "Your auth service acts as an OpenID Connect Provider. This allows other applications to authenticate users through your system using standard OAuth 2.0/OIDC flows.")
+							children: v("auth.sso.oidcProviderInfoDesc", "Your auth service acts as an OpenID Connect Provider. This allows other applications to authenticate users through your system using standard OAuth 2.0/OIDC flows.")
 						})]
 					}),
 					/* @__PURE__ */ p("div", {
@@ -745,57 +742,57 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						children: [
 							/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: j("auth.sso.discoveryEndpoint", "Discovery Endpoint")
+								children: v("auth.sso.discoveryEndpoint", "Discovery Endpoint")
 							}),
 							/* @__PURE__ */ f("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: j("auth.sso.discoveryEndpointDesc", "Applications can auto-configure by fetching the OpenID Connect Discovery document:")
+								children: v("auth.sso.discoveryEndpointDesc", "Applications can auto-configure by fetching the OpenID Connect Discovery document:")
 							}),
 							/* @__PURE__ */ p("div", {
 								className: "flex items-center gap-2",
 								children: [/* @__PURE__ */ f("code", {
 									className: "flex-1 px-3 py-2 rounded-lg bg-bg-sunken text-sm text-text-primary font-mono break-all",
-									children: T?.issuer ? `${T.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
+									children: E?.issuer ? `${E.issuer}/.well-known/openid-configuration` : "Discovery endpoint unavailable until OIDC is configured"
 								}), /* @__PURE__ */ f("button", {
 									type: "button",
 									onClick: () => {
-										let e = T?.issuer ? `${T.issuer}/.well-known/openid-configuration` : "";
+										let e = E?.issuer ? `${E.issuer}/.well-known/openid-configuration` : "";
 										e && g(e);
 									},
-									disabled: !T?.issuer,
+									disabled: !E?.issuer,
 									className: "px-3 py-2 rounded-lg border border-border-default text-text-secondary hover:bg-bg-sunken flex-shrink-0",
-									children: j("auth.sso.copy", "Copy")
+									children: v("auth.sso.copy", "Copy")
 								})]
 							})
 						]
 					}),
-					T && /* @__PURE__ */ p("div", {
+					E && /* @__PURE__ */ p("div", {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: j("auth.sso.oidcEndpoints", "OIDC Endpoints")
+							children: v("auth.sso.oidcEndpoints", "OIDC Endpoints")
 						}), /* @__PURE__ */ f("div", {
 							className: "space-y-4",
 							children: [
 								{
-									label: j("auth.sso.issuer", "Issuer"),
-									value: T.issuer
+									label: v("auth.sso.issuer", "Issuer"),
+									value: E.issuer
 								},
 								{
-									label: j("auth.sso.authorizationEndpoint", "Authorization Endpoint"),
-									value: T.authorizationEndpoint
+									label: v("auth.sso.authorizationEndpoint", "Authorization Endpoint"),
+									value: E.authorizationEndpoint
 								},
 								{
-									label: j("auth.sso.tokenEndpoint", "Token Endpoint"),
-									value: T.tokenEndpoint
+									label: v("auth.sso.tokenEndpoint", "Token Endpoint"),
+									value: E.tokenEndpoint
 								},
 								{
-									label: j("auth.sso.userinfoEndpoint", "UserInfo Endpoint"),
-									value: T.userinfoEndpoint
+									label: v("auth.sso.userinfoEndpoint", "UserInfo Endpoint"),
+									value: E.userinfoEndpoint
 								},
 								{
-									label: j("auth.sso.jwksUri", "JWKS URI"),
-									value: T.jwksUri
+									label: v("auth.sso.jwksUri", "JWKS URI"),
+									value: E.jwksUri
 								}
 							].map((e) => /* @__PURE__ */ p("div", {
 								className: "flex items-start gap-4",
@@ -813,32 +810,32 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: j("auth.sso.supportedFeatures", "Supported Features")
+							children: v("auth.sso.supportedFeatures", "Supported Features")
 						}), /* @__PURE__ */ f("div", {
 							className: "grid grid-cols-2 gap-4",
 							children: [
 								{
-									name: j("auth.sso.featAuthCodePkce", "Authorization Code + PKCE"),
+									name: v("auth.sso.featAuthCodePkce", "Authorization Code + PKCE"),
 									status: !0
 								},
 								{
-									name: j("auth.sso.featClientCreds", "Client Credentials"),
+									name: v("auth.sso.featClientCreds", "Client Credentials"),
 									status: !0
 								},
 								{
-									name: j("auth.sso.featDeviceAuth", "Device Authorization"),
+									name: v("auth.sso.featDeviceAuth", "Device Authorization"),
 									status: !0
 								},
 								{
-									name: j("auth.sso.featRefreshTokens", "Refresh Tokens"),
+									name: v("auth.sso.featRefreshTokens", "Refresh Tokens"),
 									status: !0
 								},
 								{
-									name: j("auth.sso.featTokenIntrospection", "Token Introspection"),
+									name: v("auth.sso.featTokenIntrospection", "Token Introspection"),
 									status: !0
 								},
 								{
-									name: j("auth.sso.featTokenRevocation", "Token Revocation"),
+									name: v("auth.sso.featTokenRevocation", "Token Revocation"),
 									status: !0
 								}
 							].map((e) => /* @__PURE__ */ p("div", {
@@ -852,33 +849,33 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 					})
 				]
 			}),
-			!E && M === "clients" && /* @__PURE__ */ p("div", {
+			!D && j === "clients" && /* @__PURE__ */ p("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ p("div", {
 						className: "p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "font-medium text-status-warning-text mb-2",
-							children: j("auth.sso.clientManagement", "OIDC Client Management")
+							children: v("auth.sso.clientManagement", "OIDC Client Management")
 						}), /* @__PURE__ */ f("p", {
 							className: "text-sm text-status-warning-text",
-							children: j("auth.sso.clientManagementDesc", "Register applications that can authenticate users through your OIDC provider. Each client gets unique credentials to use in the OAuth 2.0 / OIDC flow.")
+							children: v("auth.sso.clientManagementDesc", "Register applications that can authenticate users through your OIDC provider. Each client gets unique credentials to use in the OAuth 2.0 / OIDC flow.")
 						})]
 					}),
-					X && /* @__PURE__ */ p("div", {
+					Y && /* @__PURE__ */ p("div", {
 						className: "p-6 rounded-xl border-2 border-status-success-border bg-status-success-bg-subtle",
 						children: [/* @__PURE__ */ p("div", {
 							className: "flex items-start justify-between mb-4",
 							children: [/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-status-success-text",
-								children: j("auth.sso.clientCreatedTitle", "Client Created Successfully!")
+								children: v("auth.sso.clientCreatedTitle", "Client Created Successfully!")
 							}), /* @__PURE__ */ f("p", {
 								className: "text-sm text-status-success-text mt-1",
-								children: j("auth.sso.clientCreatedDesc", "Save these credentials securely. The client secret will not be shown again.")
+								children: v("auth.sso.clientCreatedDesc", "Save these credentials securely. The client secret will not be shown again.")
 							})] }), /* @__PURE__ */ f("button", {
 								type: "button",
-								onClick: () => he(null),
-								"aria-label": j("auth.sso.dismissClientCredentials", "Dismiss"),
+								onClick: () => X(null),
+								"aria-label": v("auth.sso.dismissClientCredentials", "Dismiss"),
 								className: "text-status-success-text hover:text-status-success-text",
 								children: /* @__PURE__ */ f("svg", {
 									className: "size-5",
@@ -898,40 +895,40 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 							children: [
 								/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									className: "block text-xs font-medium text-status-success-text mb-1",
-									children: j("auth.sso.clientId", "Client ID")
+									children: v("auth.sso.clientId", "Client ID")
 								}), /* @__PURE__ */ p("div", {
 									className: "flex gap-2",
 									children: [/* @__PURE__ */ f("code", {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
-										children: X.client_id
+										children: Y.client_id
 									}), /* @__PURE__ */ f("button", {
 										type: "button",
-										onClick: () => void g(X.client_id),
+										onClick: () => void g(Y.client_id),
 										className: "px-3 py-2 rounded-lg bg-status-success-bg text-white text-sm hover:bg-status-success-bg",
-										children: j("auth.sso.copy", "Copy")
+										children: v("auth.sso.copy", "Copy")
 									})]
 								})] }),
-								X.client_secret && /* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
+								Y.client_secret && /* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									className: "block text-xs font-medium text-status-success-text mb-1",
-									children: j("auth.sso.clientSecret", "Client Secret (save now!)")
+									children: v("auth.sso.clientSecret", "Client Secret (save now!)")
 								}), /* @__PURE__ */ p("div", {
 									className: "flex gap-2",
 									children: [/* @__PURE__ */ f("code", {
 										className: "flex-1 px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
-										children: X.client_secret
+										children: Y.client_secret
 									}), /* @__PURE__ */ f("button", {
 										type: "button",
-										onClick: () => void g(X.client_secret || ""),
+										onClick: () => void g(Y.client_secret || ""),
 										className: "px-3 py-2 rounded-lg bg-status-success-bg text-white text-sm hover:bg-status-success-bg",
-										children: j("auth.sso.copy", "Copy")
+										children: v("auth.sso.copy", "Copy")
 									})]
 								})] }),
 								/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									className: "block text-xs font-medium text-status-success-text mb-1",
-									children: j("auth.sso.redirectUris", "Redirect URIs")
+									children: v("auth.sso.redirectUris", "Redirect URIs")
 								}), /* @__PURE__ */ f("code", {
 									className: "block px-3 py-2 rounded-lg bg-bg-surface text-sm font-mono border border-status-success-border",
-									children: X.redirect_uris.join(", ")
+									children: Y.redirect_uris.join(", ")
 								})] })
 							]
 						})]
@@ -942,10 +939,10 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 							className: "flex items-center justify-between mb-6",
 							children: [/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-text-primary",
-								children: j("auth.sso.registerClient", "Register New Client")
-							}), !W && /* @__PURE__ */ p("button", {
+								children: v("auth.sso.registerClient", "Register New Client")
+							}), !U && /* @__PURE__ */ p("button", {
 								type: "button",
-								onClick: () => G(!0),
+								onClick: () => W(!0),
 								className: "px-4 py-2 rounded-lg bg-action-primary-bg text-white font-medium hover:bg-action-primary-bg-hover transition-colors flex items-center gap-2",
 								children: [/* @__PURE__ */ f("svg", {
 									className: "size-4",
@@ -958,16 +955,16 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										strokeWidth: 2,
 										d: "M12 4v16m8-8H4"
 									})
-								}), j("auth.sso.newClient", "New Client")]
+								}), v("auth.sso.newClient", "New Client")]
 							})]
-						}), W ? /* @__PURE__ */ p("div", {
+						}), U ? /* @__PURE__ */ p("div", {
 							className: "space-y-5",
 							children: [
 								/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ p("label", {
 									htmlFor: "oidc-client-name",
 									className: "block text-sm font-medium text-text-primary mb-2",
 									children: [
-										j("auth.sso.clientName", "Client Name"),
+										v("auth.sso.clientName", "Client Name"),
 										" ",
 										/* @__PURE__ */ f("span", {
 											className: "text-status-error-text",
@@ -978,13 +975,13 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 								}), /* @__PURE__ */ f("input", {
 									id: "oidc-client-name",
 									type: "text",
-									"aria-label": j("auth.sso.oidcClientName", "Client Name"),
-									value: K.client_name,
-									onChange: (e) => q({
-										...K,
+									"aria-label": v("auth.sso.oidcClientName", "Client Name"),
+									value: G.client_name,
+									onChange: (e) => K({
+										...G,
 										client_name: e.target.value
 									}),
-									placeholder: j("auth.sso.clientNamePlaceholder", "My Application"),
+									placeholder: v("auth.sso.clientNamePlaceholder", "My Application"),
 									"aria-required": "true",
 									className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all"
 								})] }),
@@ -993,7 +990,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										htmlFor: "oidc-redirect-uris",
 										className: "block text-sm font-medium text-text-primary mb-2",
 										children: [
-											j("auth.sso.redirectUris", "Redirect URIs"),
+											v("auth.sso.redirectUris", "Redirect URIs"),
 											" ",
 											/* @__PURE__ */ f("span", {
 												className: "text-status-error-text",
@@ -1005,13 +1002,13 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 									/* @__PURE__ */ f("input", {
 										id: "oidc-redirect-uris",
 										type: "text",
-										"aria-label": j("auth.sso.oidcRedirectUris", "Redirect URIs"),
-										value: K.redirect_uris,
-										onChange: (e) => q({
-											...K,
+										"aria-label": v("auth.sso.oidcRedirectUris", "Redirect URIs"),
+										value: G.redirect_uris,
+										onChange: (e) => K({
+											...G,
 											redirect_uris: e.target.value
 										}),
-										placeholder: j("auth.sso.redirectUrisPlaceholder", "http://localhost:3000/callback, https://app.example.com/callback"),
+										placeholder: v("auth.sso.redirectUrisPlaceholder", "http://localhost:3000/callback, https://app.example.com/callback"),
 										"aria-required": "true",
 										"aria-describedby": "oidc-redirect-uris-hint",
 										className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary placeholder-text-tertiary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all"
@@ -1019,12 +1016,12 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 									/* @__PURE__ */ f("p", {
 										id: "oidc-redirect-uris-hint",
 										className: "mt-1 text-xs text-text-secondary",
-										children: j("auth.sso.redirectUrisHelper", "Separate multiple URIs with commas")
+										children: v("auth.sso.redirectUrisHelper", "Separate multiple URIs with commas")
 									})
 								] }),
 								/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									className: "block text-sm font-medium text-text-primary mb-2",
-									children: j("auth.sso.grantTypes", "Grant Types")
+									children: v("auth.sso.grantTypes", "Grant Types")
 								}), /* @__PURE__ */ f("div", {
 									className: "flex flex-wrap gap-3",
 									children: [
@@ -1036,14 +1033,14 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										children: [/* @__PURE__ */ f("input", {
 											type: "checkbox",
 											"aria-label": e,
-											checked: K.grant_types.includes(e),
+											checked: G.grant_types.includes(e),
 											onChange: (t) => {
-												t.target.checked ? q({
-													...K,
-													grant_types: [...K.grant_types, e]
-												}) : q({
-													...K,
-													grant_types: K.grant_types.filter((t) => t !== e)
+												t.target.checked ? K({
+													...G,
+													grant_types: [...G.grant_types, e]
+												}) : K({
+													...G,
+													grant_types: G.grant_types.filter((t) => t !== e)
 												});
 											},
 											className: "size-4 rounded border-border-default text-text-link focus:ring-action-primary-bg"
@@ -1056,27 +1053,27 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 								/* @__PURE__ */ p("div", { children: [/* @__PURE__ */ f("label", {
 									htmlFor: "oidc-token-auth-method",
 									className: "block text-sm font-medium text-text-primary mb-2",
-									children: j("auth.sso.tokenEndpointAuth", "Token Endpoint Auth Method")
+									children: v("auth.sso.tokenEndpointAuth", "Token Endpoint Auth Method")
 								}), /* @__PURE__ */ p("select", {
 									id: "oidc-token-auth-method",
-									value: K.token_endpoint_auth_method,
-									onChange: (e) => q({
-										...K,
+									value: G.token_endpoint_auth_method,
+									onChange: (e) => K({
+										...G,
 										token_endpoint_auth_method: e.target.value
 									}),
 									className: "block w-full px-4 py-3 border border-border-default rounded-xl bg-bg-surface text-text-primary focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all",
 									children: [
 										/* @__PURE__ */ f("option", {
 											value: "none",
-											children: j("auth.sso.tokenAuthNone", "None (Public Client - SPAs, Mobile Apps)")
+											children: v("auth.sso.tokenAuthNone", "None (Public Client - SPAs, Mobile Apps)")
 										}),
 										/* @__PURE__ */ f("option", {
 											value: "client_secret_basic",
-											children: j("auth.sso.tokenAuthBasic", "Client Secret Basic")
+											children: v("auth.sso.tokenAuthBasic", "Client Secret Basic")
 										}),
 										/* @__PURE__ */ f("option", {
 											value: "client_secret_post",
-											children: j("auth.sso.tokenAuthPost", "Client Secret Post")
+											children: v("auth.sso.tokenAuthPost", "Client Secret Post")
 										})
 									]
 								})] }),
@@ -1084,16 +1081,16 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 									className: "flex items-center gap-3 pt-2",
 									children: [/* @__PURE__ */ f(m, {
 										type: "button",
-										onClick: ve,
-										disabled: J,
+										onClick: ge,
+										disabled: q,
 										variant: "default",
 										size: "lg",
 										className: "font-semibold",
-										children: J ? /* @__PURE__ */ p(d, { children: [/* @__PURE__ */ f(t, { className: "size-4 animate-spin" }), j("auth.sso.registering", "Registering...")] }) : j("auth.sso.registerClientButton", "Register Client")
+										children: q ? /* @__PURE__ */ p(d, { children: [/* @__PURE__ */ f(n, { className: "size-4 animate-spin" }), v("auth.sso.registering", "Registering...")] }) : v("auth.sso.registerClientButton", "Register Client")
 									}), /* @__PURE__ */ f("button", {
 										type: "button",
 										onClick: () => {
-											G(!1), q({
+											W(!1), K({
 												client_name: "",
 												redirect_uris: "",
 												grant_types: ["authorization_code", "refresh_token"],
@@ -1101,21 +1098,21 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 											});
 										},
 										className: "px-6 py-3 rounded-xl border border-border-default text-text-primary font-medium hover:bg-bg-sunken transition-colors",
-										children: j("auth.sso.cancel", "Cancel")
+										children: v("auth.sso.cancel", "Cancel")
 									})]
 								})
 							]
 						}) : /* @__PURE__ */ f(h, {
 							illustration: "empty-generic",
-							title: j("auth.sso.emptyClientsTitle", "No client apps yet"),
-							description: j("auth.sso.emptyClients", "Click \"New Client\" to register an OAuth 2.0 / OIDC client application.")
+							title: v("auth.sso.emptyClientsTitle", "No client apps yet"),
+							description: v("auth.sso.emptyClients", "Click \"New Client\" to register an OAuth 2.0 / OIDC client application.")
 						})]
 					}),
 					/* @__PURE__ */ p("div", {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: j("auth.sso.preconfiguredClients", "Pre-configured Clients")
+							children: v("auth.sso.preconfiguredClients", "Pre-configured Clients")
 						}), /* @__PURE__ */ f("div", {
 							className: "space-y-4",
 							children: /* @__PURE__ */ p("div", {
@@ -1128,12 +1125,12 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 											children: "tenant-frontend"
 										}), /* @__PURE__ */ f("span", {
 											className: "px-2 py-1 rounded-full text-xs bg-status-success-bg-subtle text-status-success-text",
-											children: j("auth.sso.active", "Active")
+											children: v("auth.sso.active", "Active")
 										})]
 									}),
 									/* @__PURE__ */ f("p", {
 										className: "text-sm text-text-secondary",
-										children: j("auth.sso.preconfigClientDesc", "Default frontend client for tenant authentication")
+										children: v("auth.sso.preconfigClientDesc", "Default frontend client for tenant authentication")
 									}),
 									/* @__PURE__ */ p("div", {
 										className: "mt-2 flex flex-wrap gap-2",
@@ -1148,7 +1145,7 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 											}),
 											/* @__PURE__ */ f("span", {
 												className: "px-2 py-0.5 rounded bg-bg-sunken text-xs text-text-primary",
-												children: j("auth.sso.pkceRequired", "PKCE required")
+												children: v("auth.sso.pkceRequired", "PKCE required")
 											})
 										]
 									})
@@ -1158,17 +1155,17 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 					})
 				]
 			}),
-			!E && M === "test" && /* @__PURE__ */ p("div", {
+			!D && j === "test" && /* @__PURE__ */ p("div", {
 				className: "space-y-6",
 				children: [
 					/* @__PURE__ */ p("div", {
 						className: "p-4 rounded-xl bg-status-warning-bg-subtle border border-status-warning-border",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "font-medium text-status-warning-text mb-2",
-							children: j("auth.sso.testLoginTitle", "Test SSO Login")
+							children: v("auth.sso.testLoginTitle", "Test SSO Login")
 						}), /* @__PURE__ */ f("p", {
 							className: "text-sm text-status-warning-text",
-							children: j("auth.sso.testLoginDesc", "Use this section to test your SSO configuration before rolling it out to users. Make sure your IdP is properly configured with the SP metadata above.")
+							children: v("auth.sso.testLoginDesc", "Use this section to test your SSO configuration before rolling it out to users. Make sure your IdP is properly configured with the SP metadata above.")
 						})]
 					}),
 					/* @__PURE__ */ p("div", {
@@ -1176,13 +1173,13 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						children: [
 							/* @__PURE__ */ f("h3", {
 								className: "text-lg font-medium text-text-primary mb-4",
-								children: j("auth.sso.spInitiatedTest", "SP-Initiated Login Test")
+								children: v("auth.sso.spInitiatedTest", "SP-Initiated Login Test")
 							}),
 							/* @__PURE__ */ f("p", {
 								className: "text-sm text-text-secondary mb-4",
-								children: j("auth.sso.spInitiatedTestDesc", "Click the button below to initiate an SSO login flow. You will be redirected to your IdP to authenticate.")
+								children: v("auth.sso.spInitiatedTestDesc", "Click the button below to initiate an SSO login flow. You will be redirected to your IdP to authenticate.")
 							}),
-							w && w.enabled ? /* @__PURE__ */ p("a", {
+							T && T.enabled ? /* @__PURE__ */ p("a", {
 								href: `${window.location.origin}/auth/sso/login`,
 								className: "inline-flex items-center gap-2 px-6 py-3 rounded-xl bg-status-success-bg text-white font-medium shadow-sm hover:opacity-90 transition-all duration-200",
 								children: [/* @__PURE__ */ f("svg", {
@@ -1196,10 +1193,10 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 										strokeWidth: 2,
 										d: "M11 16l-4-4m0 0l4-4m-4 4h14m-5 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h7a3 3 0 013 3v1"
 									})
-								}), j("auth.sso.testSsoLoginButton", "Test SSO Login")]
+								}), v("auth.sso.testSsoLoginButton", "Test SSO Login")]
 							}) : /* @__PURE__ */ f("div", {
 								className: "p-4 rounded-xl bg-bg-sunken/50 text-text-secondary text-sm",
-								children: w ? j("auth.sso.disabledTest", "SSO is disabled. Enable it to test the login flow.") : j("auth.sso.notConfigured", "SSO is not configured. Please configure your IdP settings first.")
+								children: T ? v("auth.sso.disabledTest", "SSO is disabled. Enable it to test the login flow.") : v("auth.sso.notConfigured", "SSO is not configured. Please configure your IdP settings first.")
 							})
 						]
 					}),
@@ -1207,38 +1204,38 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 						className: "p-6 rounded-xl border border-border-subtle bg-bg-surface",
 						children: [/* @__PURE__ */ f("h3", {
 							className: "text-lg font-medium text-text-primary mb-4",
-							children: j("auth.sso.testResults", "Test Results")
+							children: v("auth.sso.testResults", "Test Results")
 						}), /* @__PURE__ */ f("p", {
 							className: "text-sm text-text-secondary",
-							children: j("auth.sso.testResultsDesc", "After testing, results will appear here. Check the browser console for detailed logs.")
+							children: v("auth.sso.testResultsDesc", "After testing, results will appear here. Check the browser console for detailed logs.")
 						})]
 					})
 				]
 			}),
-			/* @__PURE__ */ f(oe, {
+			/* @__PURE__ */ f(ae, {
 				className: "mt-8",
 				storageKey: "auth-sso-config",
 				steps: [
 					{
 						id: "save-config",
-						label: j("auth.sso.nextSave", "Save your IdP configuration"),
-						description: j("auth.sso.nextSaveDesc", "Enter your SAML or OIDC details, then save so the connection exists."),
-						done: !!w
+						label: v("auth.sso.nextSave", "Save your IdP configuration"),
+						description: v("auth.sso.nextSaveDesc", "Enter your SAML or OIDC details, then save so the connection exists."),
+						done: !!T
 					},
 					{
 						id: "enable-sso",
-						label: j("auth.sso.nextEnable", "Enable SSO for sign-in"),
-						description: j("auth.sso.nextEnableDesc", "Flip the connection on once you've confirmed the settings."),
-						done: !!(w && Z.enabled),
+						label: v("auth.sso.nextEnable", "Enable SSO for sign-in"),
+						description: v("auth.sso.nextEnableDesc", "Flip the connection on once you've confirmed the settings."),
+						done: !!(T && Z.enabled),
 						onClick: () => {
-							w && !Z.enabled && $();
+							T && !Z.enabled && $();
 						}
 					},
 					{
 						id: "test-login",
-						label: j("auth.sso.nextTest", "Test the login flow"),
-						description: j("auth.sso.nextTestDesc", "Run a test sign-in before rolling SSO out to your whole team."),
-						href: w && w.enabled ? `${window.location.origin}/auth/sso/login` : void 0
+						label: v("auth.sso.nextTest", "Test the login flow"),
+						description: v("auth.sso.nextTestDesc", "Run a test sign-in before rolling SSO out to your whole team."),
+						href: T && T.enabled ? `${window.location.origin}/auth/sso/login` : void 0
 					}
 				]
 			})
@@ -1247,19 +1244,19 @@ function v({ bypassEnterprisePlanGate: a = !1 }) {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ f(h, {
 			illustration: "onboarding",
-			title: j("auth.sso.enterprisePlanRequired", "Enterprise Plan Required"),
+			title: v("auth.sso.enterprisePlanRequired", "Enterprise Plan Required"),
 			description: /* @__PURE__ */ p(d, { children: [
-				j("auth.sso.enterprisePlanRequiredDesc", "Single Sign-On (SAML / OIDC) configuration is available on the Enterprise plan."),
+				v("auth.sso.enterprisePlanRequiredDesc", "Single Sign-On (SAML / OIDC) configuration is available on the Enterprise plan."),
 				" ",
-				j("auth.sso.contactSales", "Contact sales to upgrade your workspace to the Enterprise plan.")
+				v("auth.sso.contactSales", "Contact sales to upgrade your workspace to the Enterprise plan.")
 			] })
 		})
 	}) : /* @__PURE__ */ f("div", {
 		className: "max-w-5xl mx-auto p-6",
 		children: /* @__PURE__ */ f(h, {
 			illustration: "empty-generic",
-			title: j("auth.sso.adminRequired", "Admin Access Required"),
-			description: j("auth.sso.adminRequiredDesc", "You need administrator privileges to configure SSO settings.")
+			title: v("auth.sso.adminRequired", "Admin Access Required"),
+			description: v("auth.sso.adminRequiredDesc", "You need administrator privileges to configure SSO settings.")
 		})
 	});
 }