@dreamtree-org/landing-kit 0.9.0 → 0.10.0

package/dist/platform.js

@@ -4,7 +4,7 @@
 var PLATFORM_API_BASE = "/api/platform";
 var PLATFORM_LOGIN_PATH = "/platform/login";
 var STEP_UP_REQUIRED = "STEP_UP_REQUIRED";
-var PLATFORM_FEATURES = ["overview", "companies", "jobs", "plans", "audit", "support", "settings", "admins"];
+var PLATFORM_FEATURES = ["overview", "companies", "jobs", "plans", "audit", "support", "settings", "domains", "admins"];
 var SHIPPED_FEATURES = ["overview", "companies", "jobs", "admins"];
 var SAFE_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD", "OPTIONS"]);
 var CSRF_HEADER = "x-csrf-token";
@@ -147,8 +147,8 @@ function timeAgo(value, now = Date.now()) {
 }
 
 // src/platform/PlatformConsole.jsx
-import React13, { useCallback as useCallback4, useEffect as useEffect6, useMemo as useMemo3, useState as useState11 } from "react";
-import { EmptyState as EmptyState4, LoadingState as LoadingState6 } from "@dreamtree-org/twreact-ui";
+import React16, { useCallback as useCallback4, useEffect as useEffect7, useMemo as useMemo3, useState as useState14 } from "react";
+import { EmptyState as EmptyState7, LoadingState as LoadingState9 } from "@dreamtree-org/twreact-ui";
 
 // src/platform/context.jsx
 import React, { createContext, forwardRef, useCallback, useContext, useEffect, useMemo, useState } from "react";
@@ -400,6 +400,23 @@ var IconArchive = make(/* @__PURE__ */ jsxs2(Fragment, { children: [
   /* @__PURE__ */ jsx3("path", { d: "M4 8v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8M10 12h4" })
 ] }));
 var IconDownload = make(/* @__PURE__ */ jsx3("path", { d: "M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4M7 10l5 5 5-5M12 15V3" }));
+var IconTag = make(/* @__PURE__ */ jsxs2(Fragment, { children: [
+  /* @__PURE__ */ jsx3("path", { d: "M12.6 2.6A2 2 0 0 0 11.2 2H4a2 2 0 0 0-2 2v7.2a2 2 0 0 0 .6 1.4l8.7 8.7a2.4 2.4 0 0 0 3.4 0l6.6-6.6a2.4 2.4 0 0 0 0-3.4Z" }),
+  /* @__PURE__ */ jsx3("circle", { cx: "7.5", cy: "7.5", r: "1.5" })
+] }));
+var IconLifebuoy = make(/* @__PURE__ */ jsxs2(Fragment, { children: [
+  /* @__PURE__ */ jsx3("circle", { cx: "12", cy: "12", r: "10" }),
+  /* @__PURE__ */ jsx3("circle", { cx: "12", cy: "12", r: "4" }),
+  /* @__PURE__ */ jsx3("path", { d: "m4.93 4.93 4.24 4.24M14.83 14.83l4.24 4.24M14.83 9.17l4.24-4.24M4.93 19.07l4.24-4.24" })
+] }));
+var IconGlobe = make(/* @__PURE__ */ jsxs2(Fragment, { children: [
+  /* @__PURE__ */ jsx3("circle", { cx: "12", cy: "12", r: "10" }),
+  /* @__PURE__ */ jsx3("path", { d: "M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z" })
+] }));
+var IconSettings = make(/* @__PURE__ */ jsxs2(Fragment, { children: [
+  /* @__PURE__ */ jsx3("path", { d: "M12.22 2h-.44a2 2 0 0 0-2 2v.18a2 2 0 0 1-1 1.73l-.43.25a2 2 0 0 1-2 0l-.15-.08a2 2 0 0 0-2.73.73l-.22.38a2 2 0 0 0 .73 2.73l.15.1a2 2 0 0 1 1 1.72v.51a2 2 0 0 1-1 1.74l-.15.09a2 2 0 0 0-.73 2.73l.22.38a2 2 0 0 0 2.73.73l.15-.08a2 2 0 0 1 2 0l.43.25a2 2 0 0 1 1 1.73V20a2 2 0 0 0 2 2h.44a2 2 0 0 0 2-2v-.18a2 2 0 0 1 1-1.73l.43-.25a2 2 0 0 1 2 0l.15.08a2 2 0 0 0 2.73-.73l.22-.39a2 2 0 0 0-.73-2.73l-.15-.08a2 2 0 0 1-1-1.74v-.5a2 2 0 0 1 1-1.74l.15-.09a2 2 0 0 0 .73-2.73l-.22-.38a2 2 0 0 0-2.73-.73l-.15.08a2 2 0 0 1-2 0l-.43-.25a2 2 0 0 1-1-1.73V4a2 2 0 0 0-2-2z" }),
+  /* @__PURE__ */ jsx3("circle", { cx: "12", cy: "12", r: "3" })
+] }));
 
 // src/platform/PlatformShell.jsx
 import { jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
@@ -473,7 +490,13 @@ var STATUS_MAP = {
   running: { label: "Running", tone: "info" },
   pending: { label: "Pending", tone: "neutral" },
   queued: { label: "Queued", tone: "neutral" },
-  cancelled: { label: "Cancelled", tone: "muted" }
+  cancelled: { label: "Cancelled", tone: "muted" },
+  trial: { label: "Trial", tone: "info" },
+  past_due: { label: "Past due", tone: "warning" },
+  expired: { label: "Expired", tone: "muted" },
+  requested: { label: "Awaiting approval", tone: "warning" },
+  revoked: { label: "Revoked", tone: "muted" },
+  verified: { label: "Verified", tone: "success" }
 };
 function StatusPill({ status }) {
   return /* @__PURE__ */ jsx5(TwStatusPill, { status: String(status != null ? status : ""), map: STATUS_MAP });
@@ -630,8 +653,31 @@ var ACTION_LABEL = {
   "platform.admin.roles": "changed platform admin roles",
   "platform.admin.disable": "disabled platform admin",
   "platform.admin.enable": "enabled platform admin",
-  "audit.export": "exported the audit log"
+  "audit.export": "exported the audit log",
+  "plan.create": "created plan",
+  "plan.update": "updated plan",
+  "subscription.update": "changed subscription",
+  "settings.update": "changed settings",
+  "support.grant.request": "requested support access",
+  "support.grant.approve": "approved support access",
+  "support.grant.revoke": "revoked support access",
+  "domain.add": "added domain",
+  "domain.verify": "verified domain",
+  "domain.primary": "set primary domain",
+  "domain.remove": "removed domain"
 };
+function formatPrice(priceMinor, currency = "INR", interval) {
+  var _a;
+  const amount = Number(priceMinor != null ? priceMinor : 0) / 100;
+  let text;
+  try {
+    text = new Intl.NumberFormat(void 0, { style: "currency", currency }).format(amount);
+  } catch {
+    text = `${currency} ${amount.toFixed(2)}`;
+  }
+  const per = (_a = { month: " / month", year: " / year", "one-time": " once" }[interval]) != null ? _a : "";
+  return `${text}${per}`;
+}
 function describeAction(action) {
   var _a;
   return (_a = ACTION_LABEL[action]) != null ? _a : String(action != null ? action : "").replace(/[._]/g, " ");
@@ -1108,30 +1154,514 @@ function NewCompanyView() {
 }
 
 // src/platform/views/CompanyDetail.jsx
-import React9, { useCallback as useCallback3, useEffect as useEffect4, useState as useState7 } from "react";
+import React11, { useCallback as useCallback3, useEffect as useEffect5, useState as useState9 } from "react";
 import {
-  Alert as Alert3,
-  Button as Button6,
-  ConfirmDialog,
-  Dialog as Dialog2,
-  EmptyState as EmptyState2,
-  ErrorState as ErrorState3,
-  Input as Input4,
-  LoadingState as LoadingState3,
-  PageHeader as PageHeader4,
+  Alert as Alert4,
+  Button as Button8,
+  ConfirmDialog as ConfirmDialog2,
+  Dialog as Dialog4,
+  EmptyState as EmptyState4,
+  ErrorState as ErrorState5,
+  Input as Input6,
+  LoadingState as LoadingState5,
+  PageHeader as PageHeader5,
   Tabs,
-  Textarea
+  Textarea as Textarea3
 } from "@dreamtree-org/twreact-ui";
-import { Fragment as Fragment4, jsx as jsx10, jsxs as jsxs9 } from "react/jsx-runtime";
+
+// src/platform/views/CompanyFeatures.jsx
+import React10, { useEffect as useEffect4, useState as useState8 } from "react";
+import { Badge as Badge2, Button as Button7, ConfirmDialog, Dialog as Dialog3, EmptyState as EmptyState3, ErrorState as ErrorState4, Input as Input5, LoadingState as LoadingState4, Select as Select2, Switch, Textarea as Textarea2 } from "@dreamtree-org/twreact-ui";
+
+// src/platform/views/SupportAccess.jsx
+import React9, { useState as useState7 } from "react";
+import { Alert as Alert3, Button as Button6, Dialog as Dialog2, EmptyState as EmptyState2, ErrorState as ErrorState3, Input as Input4, LoadingState as LoadingState3, PageHeader as PageHeader4, SegmentedControl as SegmentedControl2, Select, Textarea } from "@dreamtree-org/twreact-ui";
+import { jsx as jsx10, jsxs as jsxs9 } from "react/jsx-runtime";
+var FILTERS2 = [
+  { value: "", label: "All" },
+  { value: "requested", label: "Awaiting approval" },
+  { value: "active", label: "Active" },
+  { value: "expired", label: "Expired" },
+  { value: "revoked", label: "Revoked" }
+];
+var DURATIONS = [
+  { value: "30", label: "30 minutes" },
+  { value: "60", label: "1 hour" },
+  { value: "120", label: "2 hours" },
+  { value: "240", label: "4 hours" },
+  { value: "480", label: "8 hours" }
+];
+function until(value) {
+  const ms = new Date(value).getTime() - Date.now();
+  if (!Number.isFinite(ms) || ms <= 0) return "now";
+  const m = Math.round(ms / 6e4);
+  return m < 60 ? `in ${m} min` : `in ${Math.floor(m / 60)} h ${m % 60} min`;
+}
+function SupportGrants({ companyId, companyName }) {
+  var _a, _b;
+  const { client, can, me } = usePlatform();
+  const sensitive = useSensitive();
+  const [status, setStatus] = useState7(companyId ? "" : "requested");
+  const { data, error, loading, reload } = useLoad("support-access", { company: companyId || void 0, status: status || void 0 });
+  const [flash, setFlash] = useState7(null);
+  const [requesting, setRequesting] = useState7(false);
+  const canGrant = can("support.grant");
+  const myId = (_a = me == null ? void 0 : me.admin) == null ? void 0 : _a.id;
+  const grants = (_b = data == null ? void 0 : data.grants) != null ? _b : [];
+  const act = async (g, action) => {
+    var _a2;
+    setFlash(null);
+    try {
+      await sensitive(() => client.post(`support-access/${encodeURIComponent(g.id)}`, { action }));
+      setFlash({ kind: "success", msg: action === "approve" ? `Approved access to ${(_a2 = g.companyName) != null ? _a2 : "the company"}` : "Access revoked" });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    }
+  };
+  return /* @__PURE__ */ jsxs9("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsxs9("div", { className: "flex flex-wrap items-center justify-between gap-3", children: [
+      /* @__PURE__ */ jsx10("div", { className: "overflow-x-auto", children: /* @__PURE__ */ jsx10(SegmentedControl2, { "aria-label": "Filter by status", options: FILTERS2, value: status, onChange: (v) => setStatus(String(v)) }) }),
+      can("support.request") && /* @__PURE__ */ jsx10(Button6, { variant: companyId ? "outline" : "primary", leftIcon: /* @__PURE__ */ jsx10(IconPlus, {}), onClick: () => setRequesting(true), children: "Request access" })
+    ] }),
+    flash && /* @__PURE__ */ jsx10(Alert3, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    error && !data ? /* @__PURE__ */ jsx10(ErrorState3, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ jsx10(LoadingState3, { variant: "table", rows: 3 }) : grants.length === 0 ? /* @__PURE__ */ jsx10(
+      EmptyState2,
+      {
+        compact: true,
+        icon: /* @__PURE__ */ jsx10(IconLifebuoy, { size: 24 }),
+        title: status ? "No grants with this status" : "No support access yet",
+        description: "Support access lets a platform admin work in one company for a limited time, after another admin approves it."
+      }
+    ) : /* @__PURE__ */ jsx10("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: grants.map((g) => {
+      var _a2, _b2;
+      const mine = myId && g.requestedById === myId;
+      return /* @__PURE__ */ jsxs9("li", { className: "flex flex-wrap items-start gap-3 px-4 py-3", children: [
+        /* @__PURE__ */ jsxs9("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ jsxs9("div", { className: "text-sm font-medium text-foreground", children: [
+            g.requestedBy,
+            !companyId && g.companyName ? /* @__PURE__ */ jsxs9("span", { className: "text-muted", children: [
+              " \u2192 ",
+              g.companyName
+            ] }) : null
+          ] }),
+          /* @__PURE__ */ jsx10("div", { className: "mt-0.5 break-words text-sm text-foreground", children: g.reason }),
+          /* @__PURE__ */ jsxs9("div", { className: "mt-0.5 text-xs text-muted", children: [
+            g.status === "requested" && `${(_a2 = g.minutes) != null ? _a2 : "\u2014"} min once approved \xB7 requested ${timeAgo(g.createdAt)}`,
+            g.status === "active" && `Approved by ${(_b2 = g.approvedBy) != null ? _b2 : "\u2014"} \xB7 ends ${until(g.expiresAt)}`,
+            g.status === "expired" && `Ended ${formatDate(g.expiresAt)}`,
+            g.status === "revoked" && `Revoked ${formatDate(g.revokedAt)}`
+          ] })
+        ] }),
+        /* @__PURE__ */ jsx10(StatusPill, { status: g.status }),
+        canGrant && (g.status === "requested" || g.status === "active") && /* @__PURE__ */ jsxs9("div", { className: "flex gap-1", children: [
+          g.status === "requested" && !mine && /* @__PURE__ */ jsx10(Button6, { size: "sm", onClick: () => act(g, "approve"), children: "Approve" }),
+          /* @__PURE__ */ jsx10(Button6, { size: "sm", variant: "ghost", onClick: () => act(g, "revoke"), children: g.status === "requested" ? "Decline" : "Revoke" })
+        ] })
+      ] }, g.id);
+    }) }),
+    requesting && /* @__PURE__ */ jsx10(
+      RequestDialog,
+      {
+        companyId,
+        companyName,
+        onClose: () => setRequesting(false),
+        onDone: async (g) => {
+          var _a2;
+          setRequesting(false);
+          setFlash({ kind: "success", msg: `Requested access to ${(_a2 = g.companyName) != null ? _a2 : "the company"}. Another admin has to approve it.` });
+          await reload();
+        }
+      }
+    )
+  ] });
+}
+function RequestDialog({ companyId, companyName, onClose, onDone }) {
+  var _a, _b;
+  const { client } = usePlatform();
+  const companies = useLoad(companyId ? null : "companies");
+  const [company, setCompany] = useState7(companyId != null ? companyId : "");
+  const [reason, setReason] = useState7("");
+  const [minutes, setMinutes] = useState7("60");
+  const [busy, setBusy] = useState7(false);
+  const [err, setErr] = useState7(null);
+  const options = ((_b = (_a = companies.data) == null ? void 0 : _a.companies) != null ? _b : []).map((c) => {
+    var _a2;
+    return { value: c.id, label: (_a2 = c.displayName) != null ? _a2 : c.slug };
+  });
+  const submit = async () => {
+    setBusy(true);
+    setErr(null);
+    try {
+      const r = await client.post("support-access", { companyId: company, reason: reason.trim(), minutes: Number(minutes) });
+      await onDone(r.grant);
+    } catch (e) {
+      setErr(errorText(e));
+    } finally {
+      setBusy(false);
+    }
+  };
+  return /* @__PURE__ */ jsx10(
+    Dialog2,
+    {
+      isOpen: true,
+      onClose,
+      title: "Request support access",
+      size: "sm",
+      footer: /* @__PURE__ */ jsxs9("div", { className: "flex justify-end gap-2", children: [
+        /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: onClose, children: "Cancel" }),
+        /* @__PURE__ */ jsx10(Button6, { loading: busy, disabled: !company || reason.trim().length < 8, onClick: submit, children: "Request" })
+      ] }),
+      children: /* @__PURE__ */ jsxs9("div", { className: "space-y-4", children: [
+        err && /* @__PURE__ */ jsx10(Alert3, { variant: "error", children: err }),
+        companyId ? /* @__PURE__ */ jsx10(Input4, { label: "Company", value: companyName != null ? companyName : companyId, disabled: true }) : /* @__PURE__ */ jsx10(Select, { label: "Company", searchable: true, options, loading: companies.loading, value: company, onChange: (v) => setCompany(String(v)), placeholder: "Pick a company" }),
+        /* @__PURE__ */ jsx10(Textarea, { label: "Reason", rows: 3, value: reason, onChange: (e) => setReason(e.target.value), helperText: "At least 8 characters, e.g. the ticket number. The company's audit trail shows it." }),
+        /* @__PURE__ */ jsx10(Select, { label: "For", options: DURATIONS, value: minutes, onChange: (v) => setMinutes(String(v)), helperText: "Counted from approval" })
+      ] })
+    }
+  );
+}
+function SupportAccessView() {
+  const { Link } = usePlatform();
+  return /* @__PURE__ */ jsxs9("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ jsx10(PageHeader4, { title: "Support access", subtitle: "Time-boxed access to one company, approved by a second platform admin", linkAs: Link }),
+    /* @__PURE__ */ jsx10(SupportGrants, {})
+  ] });
+}
+
+// src/platform/views/CompanyFeatures.jsx
+import { jsx as jsx11, jsxs as jsxs10 } from "react/jsx-runtime";
+var SUB_STATUSES = [
+  { value: "active", label: "Active" },
+  { value: "trial", label: "Trial" },
+  { value: "past_due", label: "Past due" },
+  { value: "cancelled", label: "Cancelled" },
+  { value: "expired", label: "Expired" }
+];
+var day = (v) => v ? String(v).slice(0, 10) : "";
+function featureTabs({ features, can }) {
+  return [
+    features.includes("plans") && can("plans.read") && { id: "subscription", label: "Subscription", Component: SubscriptionTab },
+    features.includes("domains") && can("domains.read") && { id: "domains", label: "Domains", Component: DomainsTab },
+    features.includes("settings") && can("settings.read") && { id: "settings", label: "Settings", Component: SettingsTab },
+    features.includes("support") && can("support.request") && { id: "support", label: "Support", Component: SupportTab }
+  ].filter(Boolean);
+}
+function SubscriptionTab({ company, setFlash }) {
+  var _a, _b, _c, _d, _e, _f;
+  const { client, can } = usePlatform();
+  const sensitive = useSensitive();
+  const id = encodeURIComponent(company.id);
+  const { data, error, loading, reload } = useLoad(`companies/${id}/subscription`);
+  const plans = useLoad(can("plans.write") ? "plans" : null);
+  const [editing, setEditing] = useState8(null);
+  const [busy, setBusy] = useState8(false);
+  const current = data == null ? void 0 : data.subscription;
+  const history = (_a = data == null ? void 0 : data.history) != null ? _a : [];
+  const planOptions = ((_c = (_b = plans.data) == null ? void 0 : _b.plans) != null ? _c : []).filter((p) => p.status === "active" || p.id === (current == null ? void 0 : current.planId)).map((p) => ({ value: p.id, label: `${p.name} \xB7 ${formatPrice(p.priceMinor, p.currency, p.interval)}` }));
+  const save = async () => {
+    setBusy(true);
+    try {
+      await sensitive(
+        () => client.put(`companies/${id}/subscription`, {
+          planId: editing.planId,
+          status: editing.status,
+          startsAt: editing.startsAt || void 0,
+          endsAt: editing.endsAt || null,
+          seats: editing.seats === "" ? null : Number(editing.seats),
+          notes: editing.notes || null
+        })
+      );
+      setEditing(null);
+      setFlash({ kind: "success", msg: "Subscription updated" });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(false);
+    }
+  };
+  if (error && !data) return /* @__PURE__ */ jsx11(ErrorState4, { description: error.message, onRetry: reload });
+  if (loading && !data) return /* @__PURE__ */ jsx11(LoadingState4, { variant: "detail" });
+  const open = () => {
+    var _a2, _b2;
+    return setEditing({
+      planId: (_a2 = current == null ? void 0 : current.planId) != null ? _a2 : "",
+      status: (_b2 = current == null ? void 0 : current.status) != null ? _b2 : "active",
+      startsAt: "",
+      endsAt: day(current == null ? void 0 : current.endsAt),
+      seats: (current == null ? void 0 : current.seats) == null ? "" : String(current.seats),
+      notes: ""
+    });
+  };
+  return /* @__PURE__ */ jsxs10("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsx11(
+      Card,
+      {
+        title: "Current plan",
+        actions: can("plans.write") && /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "outline", onClick: open, children: current ? "Change" : "Assign a plan" }),
+        children: current ? /* @__PURE__ */ jsx11(
+          Facts,
+          {
+            rows: [
+              ["Plan", (_e = (_d = current.planName) != null ? _d : current.planCode) != null ? _e : current.planId],
+              ["Status", /* @__PURE__ */ jsx11(StatusPill, { status: current.status }, "s")],
+              ["Started", formatDate(current.startsAt)],
+              ["Ends", current.endsAt ? formatDate(current.endsAt) : "No end date"],
+              ["Seats", (_f = current.seats) != null ? _f : "Plan default"],
+              ...current.notes ? [["Notes", current.notes]] : []
+            ]
+          }
+        ) : /* @__PURE__ */ jsx11(EmptyState3, { compact: true, icon: /* @__PURE__ */ jsx11(IconTag, { size: 24 }), title: "No plan yet", description: "This company is not on a plan." })
+      }
+    ),
+    history.length > 0 && /* @__PURE__ */ jsx11(Card, { title: "History", children: /* @__PURE__ */ jsx11("ul", { className: "divide-y divide-line", children: history.map((s) => {
+      var _a2, _b2;
+      return /* @__PURE__ */ jsxs10("li", { className: "flex flex-wrap items-center gap-3 py-2 text-sm", children: [
+        /* @__PURE__ */ jsx11("span", { className: "min-w-0 flex-1 text-foreground", children: (_b2 = (_a2 = s.planName) != null ? _a2 : s.planCode) != null ? _b2 : s.planId }),
+        /* @__PURE__ */ jsx11(StatusPill, { status: s.status }),
+        /* @__PURE__ */ jsxs10("span", { className: "text-xs text-muted", children: [
+          "from ",
+          formatDate(s.startsAt)
+        ] })
+      ] }, s.id);
+    }) }) }),
+    /* @__PURE__ */ jsx11(
+      Dialog3,
+      {
+        isOpen: editing !== null,
+        onClose: () => setEditing(null),
+        title: current ? "Change subscription" : "Assign a plan",
+        size: "sm",
+        footer: /* @__PURE__ */ jsxs10("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ jsx11(Button7, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
+          /* @__PURE__ */ jsx11(Button7, { loading: busy, disabled: !(editing == null ? void 0 : editing.planId), onClick: save, children: "Save" })
+        ] }),
+        children: editing && /* @__PURE__ */ jsxs10("div", { className: "space-y-4", children: [
+          /* @__PURE__ */ jsx11(Select2, { label: "Plan", options: planOptions, loading: plans.loading, value: editing.planId, onChange: (v) => setEditing((s) => ({ ...s, planId: String(v) })), placeholder: "Pick a plan" }),
+          /* @__PURE__ */ jsx11(Select2, { label: "Status", options: SUB_STATUSES, value: editing.status, onChange: (v) => setEditing((s) => ({ ...s, status: String(v) })) }),
+          /* @__PURE__ */ jsxs10("div", { className: "grid gap-4 sm:grid-cols-2", children: [
+            /* @__PURE__ */ jsx11(Input5, { label: "Starts", type: "date", value: editing.startsAt, onChange: (e) => setEditing((s) => ({ ...s, startsAt: e.target.value })), helperText: "Empty: today" }),
+            /* @__PURE__ */ jsx11(Input5, { label: "Ends", type: "date", value: editing.endsAt, onChange: (e) => setEditing((s) => ({ ...s, endsAt: e.target.value })), helperText: "Empty: no end date" })
+          ] }),
+          /* @__PURE__ */ jsx11(Input5, { label: "Seats", type: "number", min: "1", value: editing.seats, onChange: (e) => setEditing((s) => ({ ...s, seats: e.target.value })), helperText: "Empty: the plan's default" }),
+          /* @__PURE__ */ jsx11(Textarea2, { label: "Notes", rows: 2, value: editing.notes, onChange: (e) => setEditing((s) => ({ ...s, notes: e.target.value })) })
+        ] })
+      }
+    )
+  ] });
+}
+function DomainsTab({ company, setFlash }) {
+  var _a;
+  const { client, can } = usePlatform();
+  const sensitive = useSensitive();
+  const id = encodeURIComponent(company.id);
+  const { data, error, loading, reload } = useLoad(`companies/${id}/domains`);
+  const [host, setHost] = useState8("");
+  const [adding, setAdding] = useState8(false);
+  const [busy, setBusy] = useState8(null);
+  const [removing, setRemoving] = useState8(null);
+  const writable = can("domains.write");
+  const domains = (_a = data == null ? void 0 : data.domains) != null ? _a : [];
+  const act = async (d, action) => {
+    setBusy(`${d.id}:${action}`);
+    setFlash(null);
+    try {
+      const call = () => client.post(`companies/${id}/domains/${encodeURIComponent(d.id)}`, { action });
+      const r = await (action === "remove" ? sensitive(call) : call());
+      if (action === "verify") {
+        setFlash(r.verified ? { kind: "success", msg: `${d.host} is verified` } : { kind: "warning", msg: `The TXT record for ${d.host} was not found yet. DNS changes can take a while to appear.` });
+      } else setFlash({ kind: "success", msg: action === "remove" ? `${d.host} removed` : `${d.host} is now the primary domain` });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(null);
+    }
+  };
+  const add = async () => {
+    setBusy("add");
+    setFlash(null);
+    try {
+      await client.post(`companies/${id}/domains`, { host: host.trim() });
+      setHost("");
+      setAdding(false);
+      setFlash({ kind: "success", msg: "Domain added. Publish the TXT record below, then verify." });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(null);
+    }
+  };
+  if (error && !data) return /* @__PURE__ */ jsx11(ErrorState4, { description: error.message, onRetry: reload });
+  if (loading && !data) return /* @__PURE__ */ jsx11(LoadingState4, { variant: "table", rows: 2 });
+  return /* @__PURE__ */ jsxs10("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsxs10("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [
+      /* @__PURE__ */ jsx11("p", { className: "text-sm text-muted", children: "Custom host names for this company. A domain routes only after its TXT record is verified." }),
+      writable && /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "outline", leftIcon: /* @__PURE__ */ jsx11(IconPlus, {}), onClick: () => setAdding(true), children: "Add domain" })
+    ] }),
+    domains.length === 0 ? /* @__PURE__ */ jsx11(EmptyState3, { compact: true, icon: /* @__PURE__ */ jsx11(IconGlobe, { size: 24 }), title: "No custom domains", description: "The company signs in on the platform's own address." }) : /* @__PURE__ */ jsx11("ul", { className: "space-y-3", children: domains.map((d) => {
+      var _a2;
+      return /* @__PURE__ */ jsxs10("li", { className: "rounded-xl border border-line bg-surface p-4", children: [
+        /* @__PURE__ */ jsxs10("div", { className: "flex flex-wrap items-center gap-2", children: [
+          /* @__PURE__ */ jsx11("span", { className: "w-full break-all font-mono text-sm text-foreground sm:w-auto sm:min-w-0 sm:flex-1", children: d.host }),
+          d.primary && /* @__PURE__ */ jsx11(Badge2, { variant: "primary", size: "sm", children: "Primary" }),
+          /* @__PURE__ */ jsx11(StatusPill, { status: (_a2 = d.status) != null ? _a2 : d.verifiedAt ? "verified" : "pending" }),
+          writable && /* @__PURE__ */ jsxs10("div", { className: "flex gap-1", children: [
+            !d.verifiedAt && /* @__PURE__ */ jsx11(Button7, { size: "sm", loading: busy === `${d.id}:verify`, onClick: () => act(d, "verify"), children: "Verify" }),
+            d.verifiedAt && !d.primary && /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "ghost", loading: busy === `${d.id}:make-primary`, onClick: () => act(d, "make-primary"), children: "Make primary" }),
+            /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "ghost", onClick: () => setRemoving(d), children: "Remove" })
+          ] })
+        ] }),
+        d.verifiedAt && /* @__PURE__ */ jsxs10("p", { className: "mt-1 text-xs text-muted", children: [
+          "Verified ",
+          formatDate(d.verifiedAt)
+        ] }),
+        !d.verifiedAt && d.verification && /* @__PURE__ */ jsxs10("div", { className: "mt-3 space-y-2 rounded-lg bg-background p-3", children: [
+          /* @__PURE__ */ jsx11("p", { className: "text-xs text-muted", children: "Add this TXT record at the domain's DNS provider:" }),
+          [
+            ["Name", d.verification.name],
+            ["Value", d.verification.value]
+          ].map(([k, v]) => /* @__PURE__ */ jsxs10("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [
+            /* @__PURE__ */ jsx11("span", { className: "text-xs text-muted", children: k }),
+            /* @__PURE__ */ jsxs10("span", { className: "flex min-w-0 items-center gap-2", children: [
+              /* @__PURE__ */ jsx11("span", { className: "break-all font-mono text-xs text-foreground", children: v }),
+              /* @__PURE__ */ jsx11(CopyButton, { value: v })
+            ] })
+          ] }, k))
+        ] })
+      ] }, d.id);
+    }) }),
+    /* @__PURE__ */ jsx11(
+      Dialog3,
+      {
+        isOpen: adding,
+        onClose: () => setAdding(false),
+        title: "Add domain",
+        size: "sm",
+        footer: /* @__PURE__ */ jsxs10("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ jsx11(Button7, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
+          /* @__PURE__ */ jsx11(Button7, { loading: busy === "add", disabled: !host.trim().includes("."), onClick: add, children: "Add domain" })
+        ] }),
+        children: /* @__PURE__ */ jsx11(Input5, { label: "Host name", autoFocus: true, placeholder: "app.example.com", value: host, onChange: (e) => setHost(e.target.value), helperText: "The company points this host at the platform and proves it with a TXT record." })
+      }
+    ),
+    /* @__PURE__ */ jsx11(
+      ConfirmDialog,
+      {
+        isOpen: removing !== null,
+        title: `Remove ${removing == null ? void 0 : removing.host}?`,
+        description: "The company can no longer sign in on this host.",
+        confirmLabel: "Remove",
+        destructive: true,
+        onCancel: () => setRemoving(null),
+        onConfirm: () => {
+          const d = removing;
+          setRemoving(null);
+          void act(d, "remove");
+        }
+      }
+    )
+  ] });
+}
+function SettingsTab({ company, setFlash }) {
+  var _a;
+  const { can } = usePlatform();
+  const { data, error, loading, reload } = useLoad("settings", { company: company.id });
+  if (error && !data) return /* @__PURE__ */ jsx11(ErrorState4, { description: error.message, onRetry: reload });
+  if (loading && !data) return /* @__PURE__ */ jsx11(LoadingState4, { variant: "detail" });
+  const families = (_a = data == null ? void 0 : data.families) != null ? _a : [];
+  if (!families.length) return /* @__PURE__ */ jsx11(EmptyState3, { compact: true, icon: /* @__PURE__ */ jsx11(IconSettings, { size: 24 }), title: "No settings", description: "This product defines no company settings." });
+  return /* @__PURE__ */ jsx11("div", { className: "space-y-4", children: families.map((f) => /* @__PURE__ */ jsx11(SettingsFamily, { family: f, companyId: company.id, version: data.version, writable: can("settings.write"), setFlash, onSaved: reload }, f.family)) });
+}
+var initialValues = (family) => Object.fromEntries(family.fields.map((f) => {
+  var _a;
+  return [f.key, f.type === "secret" ? "" : (_a = f.value) != null ? _a : f.type === "boolean" ? false : ""];
+}));
+function SettingsFamily({ family, companyId, version, writable, setFlash, onSaved }) {
+  const { client } = usePlatform();
+  const sensitive = useSensitive();
+  const [values, setValues] = useState8(() => initialValues(family));
+  const [busy, setBusy] = useState8(false);
+  useEffect4(() => setValues(initialValues(family)), [family]);
+  const changed = family.fields.filter((f) => {
+    var _a;
+    return f.type === "secret" ? values[f.key] !== "" : JSON.stringify(values[f.key]) !== JSON.stringify((_a = f.value) != null ? _a : f.type === "boolean" ? false : "");
+  });
+  const save = async () => {
+    setBusy(true);
+    setFlash(null);
+    try {
+      const body = Object.fromEntries(changed.map((f) => [f.key, f.type === "number" ? values[f.key] === "" ? null : Number(values[f.key]) : values[f.key]]));
+      await sensitive(() => client.put(`settings/${encodeURIComponent(family.family)}`, { companyId, version, values: body }));
+      setFlash({ kind: "success", msg: `${family.label} saved` });
+      await onSaved();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(false);
+    }
+  };
+  const set = (key) => (v) => setValues((s) => ({ ...s, [key]: v }));
+  return /* @__PURE__ */ jsx11(
+    Card,
+    {
+      title: family.label,
+      actions: writable && /* @__PURE__ */ jsx11(Button7, { size: "sm", loading: busy, disabled: !changed.length, onClick: save, children: "Save" }),
+      children: /* @__PURE__ */ jsx11("div", { className: "grid gap-4 sm:grid-cols-2", children: family.fields.map((f) => {
+        var _a, _b, _c;
+        const help = [f.help, f.source === "default" ? "Using the default" : null].filter(Boolean).join(" \xB7 ") || void 0;
+        if (f.type === "boolean") {
+          return /* @__PURE__ */ jsxs10("div", { className: "flex items-center justify-between gap-3 rounded-lg border border-line px-3 py-2", children: [
+            /* @__PURE__ */ jsxs10("div", { className: "min-w-0", children: [
+              /* @__PURE__ */ jsx11("div", { className: "text-sm text-foreground", children: f.label }),
+              help && /* @__PURE__ */ jsx11("div", { className: "text-xs text-muted", children: help })
+            ] }),
+            /* @__PURE__ */ jsx11(Switch, { checked: Boolean(values[f.key]), disabled: !writable, onChange: set(f.key), ariaLabel: f.label })
+          ] }, f.key);
+        }
+        if (f.type === "select") {
+          return /* @__PURE__ */ jsx11(Select2, { label: f.label, options: (_a = f.options) != null ? _a : [], value: (_b = values[f.key]) != null ? _b : "", disabled: !writable, onChange: (v) => set(f.key)(String(v)), helperText: help }, f.key);
+        }
+        return /* @__PURE__ */ jsx11(
+          Input5,
+          {
+            label: f.label,
+            type: f.type === "secret" ? "password" : f.type === "number" ? "number" : f.type === "email" ? "email" : f.type === "url" ? "url" : "text",
+            autoComplete: f.type === "secret" ? "new-password" : void 0,
+            placeholder: f.type === "secret" ? f.set ? "Configured \xB7 leave blank to keep" : "Not set" : void 0,
+            value: (_c = values[f.key]) != null ? _c : "",
+            disabled: !writable,
+            onChange: (e) => set(f.key)(e.target.value),
+            helperText: help
+          },
+          f.key
+        );
+      }) })
+    }
+  );
+}
+function SupportTab({ company }) {
+  return /* @__PURE__ */ jsx11(SupportGrants, { companyId: company.id, companyName: company.displayName });
+}
+
+// src/platform/views/CompanyDetail.jsx
+import { Fragment as Fragment4, jsx as jsx12, jsxs as jsxs11 } from "react/jsx-runtime";
 var SETUP_STATES = ["draft", "provisioning", "provisioning_failed"];
 function CompanyDetailView({ companyId }) {
   var _a;
-  const { client, Link, href, can, companyTabs, companyLoginUrl, companyLoginPath } = usePlatform();
+  const { client, Link, href, can, companyTabs, companyLoginUrl, companyLoginPath, features = [] } = usePlatform();
   const sensitive = useSensitive();
   const { data, error, reload } = useLoad(`companies/${encodeURIComponent(companyId)}`);
-  const [tab, setTab] = useState7(0);
-  const [flash, setFlash] = useState7(null);
-  const [secret, setSecret] = useState7(null);
+  const [tab, setTab] = useState9(0);
+  const [flash, setFlash] = useState9(null);
+  const [secret, setSecret] = useState9(null);
   const run = useCallback3(
     async (fn, ok, { stepUp = false } = {}) => {
       setFlash(null);
@@ -1148,69 +1678,70 @@ function CompanyDetailView({ companyId }) {
     },
     [reload, sensitive]
   );
-  if (error && !data) return /* @__PURE__ */ jsx10("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ jsx10(ErrorState3, { description: error.message, onRetry: reload }) });
-  if (!data) return /* @__PURE__ */ jsx10("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ jsx10(LoadingState3, { variant: "detail" }) });
+  if (error && !data) return /* @__PURE__ */ jsx12("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ jsx12(ErrorState5, { description: error.message, onRetry: reload }) });
+  if (!data) return /* @__PURE__ */ jsx12("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ jsx12(LoadingState5, { variant: "detail" }) });
   const company = data.company;
   const database = (_a = company.database) != null ? _a : { configured: false };
   const ctx = { company, users: data.users, run, setFlash, setSecret, client, can, reload };
   const tabs = [
-    { id: "overview", label: "Overview", render: () => /* @__PURE__ */ jsx10(OverviewTab, { ...ctx }) },
-    { id: "branches", label: "Branches", render: () => /* @__PURE__ */ jsx10(BranchesTab, { ...ctx }) },
-    { id: "database", label: "Database", render: () => /* @__PURE__ */ jsx10(DatabaseTab, { ...ctx }) },
-    { id: "admins", label: "Admins", render: () => /* @__PURE__ */ jsx10(AdminsTab, { ...ctx }) },
+    { id: "overview", label: "Overview", render: () => /* @__PURE__ */ jsx12(OverviewTab, { ...ctx }) },
+    { id: "branches", label: "Branches", render: () => /* @__PURE__ */ jsx12(BranchesTab, { ...ctx }) },
+    { id: "database", label: "Database", render: () => /* @__PURE__ */ jsx12(DatabaseTab, { ...ctx }) },
+    { id: "admins", label: "Admins", render: () => /* @__PURE__ */ jsx12(AdminsTab, { ...ctx }) },
+    ...featureTabs({ features, can }).map(({ id, label, Component }) => ({ id, label, render: () => /* @__PURE__ */ jsx12(Component, { ...ctx }) })),
     ...(companyTabs != null ? companyTabs : []).map((t) => ({ id: t.id, label: t.label, render: () => t.render({ company, reload, client, sensitive }) })),
-    { id: "activity", label: "Activity", render: () => /* @__PURE__ */ jsx10(ActivityTab, { ...ctx }) }
+    { id: "activity", label: "Activity", render: () => /* @__PURE__ */ jsx12(ActivityTab, { ...ctx }) }
   ];
-  return /* @__PURE__ */ jsxs9("div", { className: "mx-auto max-w-6xl space-y-5 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ jsx10(
-      PageHeader4,
+  return /* @__PURE__ */ jsxs11("div", { className: "mx-auto max-w-6xl space-y-5 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ jsx12(
+      PageHeader5,
       {
         title: company.displayName,
-        subtitle: /* @__PURE__ */ jsxs9("span", { className: "flex flex-wrap items-center gap-2", children: [
-          /* @__PURE__ */ jsx10("span", { className: "font-mono", children: companyLoginPath(company.slug) }),
-          /* @__PURE__ */ jsx10(StatusPill, { status: company.status }),
-          /* @__PURE__ */ jsx10(ModePill, { mode: database.configured ? database.mode : null })
+        subtitle: /* @__PURE__ */ jsxs11("span", { className: "flex flex-wrap items-center gap-2", children: [
+          /* @__PURE__ */ jsx12("span", { className: "font-mono", children: companyLoginPath(company.slug) }),
+          /* @__PURE__ */ jsx12(StatusPill, { status: company.status }),
+          /* @__PURE__ */ jsx12(ModePill, { mode: database.configured ? database.mode : null })
         ] }),
         back: { href: href("companies"), label: "Companies" },
         linkAs: Link
       }
     ),
-    flash && /* @__PURE__ */ jsx10(Alert3, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
-    secret && /* @__PURE__ */ jsx10(OneTimeSecret, { title: secret.title, loginUrl: companyLoginUrl(company.slug), email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
-    /* @__PURE__ */ jsxs9(Tabs, { index: tab, onChange: setTab, variant: "line", children: [
-      /* @__PURE__ */ jsx10(Tabs.List, { children: tabs.map((t) => /* @__PURE__ */ jsx10(Tabs.Tab, { children: t.label }, t.id)) }),
-      /* @__PURE__ */ jsx10(Tabs.Panels, { children: tabs.map((t, i) => /* @__PURE__ */ jsx10(Tabs.Panel, { children: i === tab ? /* @__PURE__ */ jsx10("div", { className: "pt-4", children: t.render() }) : null }, t.id)) })
+    flash && /* @__PURE__ */ jsx12(Alert4, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    secret && /* @__PURE__ */ jsx12(OneTimeSecret, { title: secret.title, loginUrl: companyLoginUrl(company.slug), email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
+    /* @__PURE__ */ jsxs11(Tabs, { index: tab, onChange: setTab, variant: "line", children: [
+      /* @__PURE__ */ jsx12(Tabs.List, { children: tabs.map((t) => /* @__PURE__ */ jsx12(Tabs.Tab, { children: t.label }, t.id)) }),
+      /* @__PURE__ */ jsx12(Tabs.Panels, { children: tabs.map((t, i) => /* @__PURE__ */ jsx12(Tabs.Panel, { children: i === tab ? /* @__PURE__ */ jsx12("div", { className: "pt-4", children: t.render() }) : null }, t.id)) })
     ] })
   ] });
 }
 function OverviewTab({ company, users, run, setSecret, client, can }) {
   var _a, _b, _c, _d, _e, _f;
   const { companyLoginUrl } = usePlatform();
-  const [confirm, setConfirm] = useState7(null);
-  const [editing, setEditing] = useState7(false);
+  const [confirm, setConfirm] = useState9(null);
+  const [editing, setEditing] = useState9(false);
   const setup = SETUP_STATES.includes(company.status);
   const writable = can("companies.write");
   const db = (_a = company.database) != null ? _a : {};
   const url = companyLoginUrl(company.slug);
   const LABEL = { active: "Activate", suspended: "Suspend", archived: "Archive" };
-  return /* @__PURE__ */ jsxs9("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
-    /* @__PURE__ */ jsxs9("div", { className: "space-y-5", children: [
-      setup && writable && /* @__PURE__ */ jsx10(SetupPanel, { company, run, setSecret, client }),
-      /* @__PURE__ */ jsx10(
+  return /* @__PURE__ */ jsxs11("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
+    /* @__PURE__ */ jsxs11("div", { className: "space-y-5", children: [
+      setup && writable && /* @__PURE__ */ jsx12(SetupPanel, { company, run, setSecret, client }),
+      /* @__PURE__ */ jsx12(
         Card,
         {
           title: "Company",
-          actions: writable && /* @__PURE__ */ jsx10(Button6, { size: "sm", variant: "outline", onClick: () => setEditing(true), children: "Edit details" }),
-          children: /* @__PURE__ */ jsx10(
+          actions: writable && /* @__PURE__ */ jsx12(Button8, { size: "sm", variant: "outline", onClick: () => setEditing(true), children: "Edit details" }),
+          children: /* @__PURE__ */ jsx12(
             Facts,
             {
               rows: [
                 ["Name", company.displayName],
                 [
                   "Sign-in address",
-                  /* @__PURE__ */ jsxs9("span", { className: "flex items-center gap-2", children: [
-                    /* @__PURE__ */ jsx10("span", { className: "truncate font-mono text-xs", children: url }),
-                    /* @__PURE__ */ jsx10(CopyButton, { value: url })
+                  /* @__PURE__ */ jsxs11("span", { className: "flex items-center gap-2", children: [
+                    /* @__PURE__ */ jsx12("span", { className: "truncate font-mono text-xs", children: url }),
+                    /* @__PURE__ */ jsx12(CopyButton, { value: url })
                   ] }, "l")
                 ],
                 ["Branches", (_c = (_b = company.branches) == null ? void 0 : _b.length) != null ? _c : "\u2014"],
@@ -1223,17 +1754,17 @@ function OverviewTab({ company, users, run, setSecret, client, can }) {
         }
       )
     ] }),
-    /* @__PURE__ */ jsx10(Card, { title: "Lifecycle", children: setup ? /* @__PURE__ */ jsx10("p", { className: "text-sm text-muted", children: "Activation, suspension and archiving become available once the company's database is set up." }) : /* @__PURE__ */ jsxs9(Fragment4, { children: [
-      /* @__PURE__ */ jsx10("p", { className: "mb-3 text-sm text-muted", children: "Suspending immediately blocks every sign-in and request for this company. Data is kept." }),
-      /* @__PURE__ */ jsxs9("div", { className: "flex flex-col gap-2", children: [
-        writable && company.status !== "active" && /* @__PURE__ */ jsx10(Button6, { variant: "outline", leftIcon: /* @__PURE__ */ jsx10(IconPlay, {}), onClick: () => setConfirm("active"), children: "Activate" }),
-        writable && company.status === "active" && /* @__PURE__ */ jsx10(Button6, { variant: "outline", leftIcon: /* @__PURE__ */ jsx10(IconPause, {}), onClick: () => setConfirm("suspended"), children: "Suspend" }),
-        writable && company.status !== "archived" && /* @__PURE__ */ jsx10(Button6, { variant: "outline", leftIcon: /* @__PURE__ */ jsx10(IconArchive, {}), onClick: () => setConfirm("archived"), children: "Archive" })
+    /* @__PURE__ */ jsx12(Card, { title: "Lifecycle", children: setup ? /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted", children: "Activation, suspension and archiving become available once the company's database is set up." }) : /* @__PURE__ */ jsxs11(Fragment4, { children: [
+      /* @__PURE__ */ jsx12("p", { className: "mb-3 text-sm text-muted", children: "Suspending immediately blocks every sign-in and request for this company. Data is kept." }),
+      /* @__PURE__ */ jsxs11("div", { className: "flex flex-col gap-2", children: [
+        writable && company.status !== "active" && /* @__PURE__ */ jsx12(Button8, { variant: "outline", leftIcon: /* @__PURE__ */ jsx12(IconPlay, {}), onClick: () => setConfirm("active"), children: "Activate" }),
+        writable && company.status === "active" && /* @__PURE__ */ jsx12(Button8, { variant: "outline", leftIcon: /* @__PURE__ */ jsx12(IconPause, {}), onClick: () => setConfirm("suspended"), children: "Suspend" }),
+        writable && company.status !== "archived" && /* @__PURE__ */ jsx12(Button8, { variant: "outline", leftIcon: /* @__PURE__ */ jsx12(IconArchive, {}), onClick: () => setConfirm("archived"), children: "Archive" })
       ] })
     ] }) }),
-    editing && /* @__PURE__ */ jsx10(EditDetails, { company, run, client, onClose: () => setEditing(false) }),
-    /* @__PURE__ */ jsx10(
-      ConfirmDialog,
+    editing && /* @__PURE__ */ jsx12(EditDetails, { company, run, client, onClose: () => setEditing(false) }),
+    /* @__PURE__ */ jsx12(
+      ConfirmDialog2,
       {
         isOpen: confirm !== null,
         title: `${(_e = LABEL[confirm]) != null ? _e : ""} ${company.displayName}?`,
@@ -1252,11 +1783,11 @@ function OverviewTab({ company, users, run, setSecret, client, can }) {
 }
 function EditDetails({ company, run, client, onClose }) {
   const { companyLoginPath } = usePlatform();
-  const [name, setName] = useState7(company.displayName);
-  const [slug, setSlug] = useState7(company.slug);
-  const [slugState, setSlugState] = useState7({ available: true });
-  const [busy, setBusy] = useState7(false);
-  useEffect4(() => {
+  const [name, setName] = useState9(company.displayName);
+  const [slug, setSlug] = useState9(company.slug);
+  const [slugState, setSlugState] = useState9({ available: true });
+  const [busy, setBusy] = useState9(false);
+  useEffect5(() => {
     if (slug === company.slug) {
       setSlugState({ available: true });
       return void 0;
@@ -1270,17 +1801,17 @@ function EditDetails({ company, run, client, onClose }) {
     }, 350);
     return () => clearTimeout(t);
   }, [slug, company.slug, client]);
-  return /* @__PURE__ */ jsx10(
-    Dialog2,
+  return /* @__PURE__ */ jsx12(
+    Dialog4,
     {
       isOpen: true,
       onClose,
       title: "Edit company details",
       size: "md",
-      footer: /* @__PURE__ */ jsxs9("div", { className: "flex justify-end gap-2", children: [
-        /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: onClose, children: "Cancel" }),
-        /* @__PURE__ */ jsx10(
-          Button6,
+      footer: /* @__PURE__ */ jsxs11("div", { className: "flex justify-end gap-2", children: [
+        /* @__PURE__ */ jsx12(Button8, { variant: "outline", onClick: onClose, children: "Cancel" }),
+        /* @__PURE__ */ jsx12(
+          Button8,
           {
             loading: busy,
             disabled: !name.trim() || slugState.available !== true,
@@ -1298,10 +1829,10 @@ function EditDetails({ company, run, client, onClose }) {
           }
         )
       ] }),
-      children: /* @__PURE__ */ jsxs9("div", { className: "space-y-4", children: [
-        /* @__PURE__ */ jsx10(Input4, { label: "Company name", value: name, onChange: (e) => setName(e.target.value) }),
-        /* @__PURE__ */ jsx10(
-          Input4,
+      children: /* @__PURE__ */ jsxs11("div", { className: "space-y-4", children: [
+        /* @__PURE__ */ jsx12(Input6, { label: "Company name", value: name, onChange: (e) => setName(e.target.value) }),
+        /* @__PURE__ */ jsx12(
+          Input6,
           {
             label: "URL slug",
             value: slug,
@@ -1319,10 +1850,10 @@ function SetupPanel({ company, run, setSecret, client }) {
   const provisioner = useProvisioner();
   const job = company.lastJob;
   const stored = ((_a = company.database) == null ? void 0 : _a.configured) ? company.database.mode : null;
-  const [db, setDb] = useState7({ mode: stored === "external" ? "external" : "managed", url: "", report: null, testedUrl: null });
-  const [adminName, setAdminName] = useState7("");
-  const [adminEmail, setAdminEmail] = useState7("");
-  const [busy, setBusy] = useState7(false);
+  const [db, setDb] = useState9({ mode: stored === "external" ? "external" : "managed", url: "", report: null, testedUrl: null });
+  const [adminName, setAdminName] = useState9("");
+  const [adminEmail, setAdminEmail] = useState9("");
+  const [busy, setBusy] = useState9(false);
   const ready = databaseReady(db, provisioner, { acceptStates: ["empty", "company"], keepStored: stored === "external" });
   const adminOk = !adminName.trim() && !adminEmail.trim() || adminName.trim() && EMAIL_RE.test(adminEmail.trim());
   const provision = async () => {
@@ -1343,13 +1874,13 @@ function SetupPanel({ company, run, setSecret, client }) {
     setBusy(false);
   };
   const lastError = (_b = job == null ? void 0 : job.lastError) != null ? _b : job == null ? void 0 : job.last_error;
-  return /* @__PURE__ */ jsx10(Card, { title: "Finish setup", children: /* @__PURE__ */ jsxs9("div", { className: "space-y-4", children: [
-    /* @__PURE__ */ jsx10("p", { className: "text-sm text-muted", children: "This company's database is not ready yet, so nobody can sign in." }),
-    (job == null ? void 0 : job.status) === "failed" && /* @__PURE__ */ jsxs9(Alert3, { variant: "error", title: `Last attempt failed${job.step ? ` at \u201C${job.step}\u201D` : ""}`, children: [
-      /* @__PURE__ */ jsx10("span", { className: "block break-words font-mono text-xs", children: lastError }),
-      jobErrorHint(lastError) && /* @__PURE__ */ jsx10("span", { className: "mt-1 block", children: jobErrorHint(lastError) })
+  return /* @__PURE__ */ jsx12(Card, { title: "Finish setup", children: /* @__PURE__ */ jsxs11("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted", children: "This company's database is not ready yet, so nobody can sign in." }),
+    (job == null ? void 0 : job.status) === "failed" && /* @__PURE__ */ jsxs11(Alert4, { variant: "error", title: `Last attempt failed${job.step ? ` at \u201C${job.step}\u201D` : ""}`, children: [
+      /* @__PURE__ */ jsx12("span", { className: "block break-words font-mono text-xs", children: lastError }),
+      jobErrorHint(lastError) && /* @__PURE__ */ jsx12("span", { className: "mt-1 block", children: jobErrorHint(lastError) })
     ] }),
-    /* @__PURE__ */ jsx10(
+    /* @__PURE__ */ jsx12(
       DatabaseChoice,
       {
         value: db,
@@ -1361,25 +1892,25 @@ function SetupPanel({ company, run, setSecret, client }) {
         compact: true
       }
     ),
-    /* @__PURE__ */ jsxs9("div", { children: [
-      /* @__PURE__ */ jsx10("div", { className: "text-sm font-medium text-foreground", children: "First admin (recommended)" }),
-      /* @__PURE__ */ jsx10("p", { className: "mb-2 text-xs text-muted", children: "A temporary password is generated and shown once when setup finishes." }),
-      /* @__PURE__ */ jsxs9("div", { className: "grid gap-3 [grid-template-columns:repeat(auto-fit,minmax(12rem,1fr))]", children: [
-        /* @__PURE__ */ jsx10(Input4, { "aria-label": "First admin full name", placeholder: "Full name", value: adminName, onChange: (e) => setAdminName(e.target.value) }),
-        /* @__PURE__ */ jsx10(Input4, { "aria-label": "First admin email", type: "email", placeholder: "email@company.com", value: adminEmail, onChange: (e) => setAdminEmail(e.target.value) })
+    /* @__PURE__ */ jsxs11("div", { children: [
+      /* @__PURE__ */ jsx12("div", { className: "text-sm font-medium text-foreground", children: "First admin (recommended)" }),
+      /* @__PURE__ */ jsx12("p", { className: "mb-2 text-xs text-muted", children: "A temporary password is generated and shown once when setup finishes." }),
+      /* @__PURE__ */ jsxs11("div", { className: "grid gap-3 [grid-template-columns:repeat(auto-fit,minmax(12rem,1fr))]", children: [
+        /* @__PURE__ */ jsx12(Input6, { "aria-label": "First admin full name", placeholder: "Full name", value: adminName, onChange: (e) => setAdminName(e.target.value) }),
+        /* @__PURE__ */ jsx12(Input6, { "aria-label": "First admin email", type: "email", placeholder: "email@company.com", value: adminEmail, onChange: (e) => setAdminEmail(e.target.value) })
       ] })
     ] }),
-    /* @__PURE__ */ jsxs9("div", { className: "flex flex-wrap items-center gap-3", children: [
-      /* @__PURE__ */ jsx10(Button6, { loading: busy, disabled: !ready || !adminOk, leftIcon: /* @__PURE__ */ jsx10(IconRefresh, {}), onClick: provision, children: (job == null ? void 0 : job.status) === "failed" ? "Retry setup" : "Provision database" }),
-      busy && /* @__PURE__ */ jsx10("span", { className: "text-xs text-muted", children: "Applying the schema. This can take a minute\u2026" })
+    /* @__PURE__ */ jsxs11("div", { className: "flex flex-wrap items-center gap-3", children: [
+      /* @__PURE__ */ jsx12(Button8, { loading: busy, disabled: !ready || !adminOk, leftIcon: /* @__PURE__ */ jsx12(IconRefresh, {}), onClick: provision, children: (job == null ? void 0 : job.status) === "failed" ? "Retry setup" : "Provision database" }),
+      busy && /* @__PURE__ */ jsx12("span", { className: "text-xs text-muted", children: "Applying the schema. This can take a minute\u2026" })
     ] })
   ] }) });
 }
 function BranchesTab({ company, run, client, can }) {
   var _a;
-  const [editing, setEditing] = useState7(null);
-  const [code, setCode] = useState7("");
-  const [name, setName] = useState7("");
+  const [editing, setEditing] = useState9(null);
+  const [code, setCode] = useState9("");
+  const [name, setName] = useState9("");
   const writable = can("companies.write");
   const branches = (_a = company.branches) != null ? _a : [];
   const open = (b) => {
@@ -1392,23 +1923,23 @@ function BranchesTab({ company, run, client, can }) {
     const ok = editing.id ? await run(() => client.patch(`companies/${company.id}/branches/${editing.id}`, { name: name.trim() }), "Branch renamed") : await run(() => client.post(`companies/${company.id}/branches`, { code: code.trim().toUpperCase(), name: name.trim() }), "Branch added");
     if (ok) setEditing(null);
   };
-  return /* @__PURE__ */ jsxs9(
+  return /* @__PURE__ */ jsxs11(
     Card,
     {
       title: "Branches",
-      actions: writable && /* @__PURE__ */ jsx10(Button6, { size: "sm", leftIcon: /* @__PURE__ */ jsx10(IconPlus, {}), onClick: () => open(null), children: "Add branch" }),
+      actions: writable && /* @__PURE__ */ jsx12(Button8, { size: "sm", leftIcon: /* @__PURE__ */ jsx12(IconPlus, {}), onClick: () => open(null), children: "Add branch" }),
       children: [
-        branches.length === 0 ? /* @__PURE__ */ jsx10(EmptyState2, { title: "No branches", compact: true }) : /* @__PURE__ */ jsx10("ul", { className: "divide-y divide-line", children: branches.map((b) => /* @__PURE__ */ jsxs9("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
-          /* @__PURE__ */ jsx10("span", { className: "w-20 shrink-0 font-mono text-xs text-muted", children: b.code }),
-          /* @__PURE__ */ jsxs9("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
+        branches.length === 0 ? /* @__PURE__ */ jsx12(EmptyState4, { title: "No branches", compact: true }) : /* @__PURE__ */ jsx12("ul", { className: "divide-y divide-line", children: branches.map((b) => /* @__PURE__ */ jsxs11("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
+          /* @__PURE__ */ jsx12("span", { className: "w-20 shrink-0 font-mono text-xs text-muted", children: b.code }),
+          /* @__PURE__ */ jsxs11("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
             b.name,
-            b.id === company.defaultBranchId && /* @__PURE__ */ jsx10("span", { className: "ml-2 text-xs text-muted", children: "default" })
+            b.id === company.defaultBranchId && /* @__PURE__ */ jsx12("span", { className: "ml-2 text-xs text-muted", children: "default" })
           ] }),
-          /* @__PURE__ */ jsx10(StatusPill, { status: b.status }),
-          writable && /* @__PURE__ */ jsxs9("div", { className: "flex gap-1", children: [
-            /* @__PURE__ */ jsx10(Button6, { size: "sm", variant: "ghost", onClick: () => open(b), children: "Rename" }),
-            b.id !== company.defaultBranchId && /* @__PURE__ */ jsx10(
-              Button6,
+          /* @__PURE__ */ jsx12(StatusPill, { status: b.status }),
+          writable && /* @__PURE__ */ jsxs11("div", { className: "flex gap-1", children: [
+            /* @__PURE__ */ jsx12(Button8, { size: "sm", variant: "ghost", onClick: () => open(b), children: "Rename" }),
+            b.id !== company.defaultBranchId && /* @__PURE__ */ jsx12(
+              Button8,
               {
                 size: "sm",
                 variant: "ghost",
@@ -1421,20 +1952,20 @@ function BranchesTab({ company, run, client, can }) {
             )
           ] })
         ] }, b.id)) }),
-        /* @__PURE__ */ jsx10(
-          Dialog2,
+        /* @__PURE__ */ jsx12(
+          Dialog4,
           {
             isOpen: editing !== null,
             onClose: () => setEditing(null),
             title: (editing == null ? void 0 : editing.id) ? `Rename ${editing.code}` : "Add branch",
             size: "sm",
-            footer: /* @__PURE__ */ jsxs9("div", { className: "flex justify-end gap-2", children: [
-              /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
-              /* @__PURE__ */ jsx10(Button6, { disabled: !name.trim() || !(editing == null ? void 0 : editing.id) && !/^[A-Za-z0-9][A-Za-z0-9_-]{0,31}$/.test(code), onClick: save, children: "Save" })
+            footer: /* @__PURE__ */ jsxs11("div", { className: "flex justify-end gap-2", children: [
+              /* @__PURE__ */ jsx12(Button8, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
+              /* @__PURE__ */ jsx12(Button8, { disabled: !name.trim() || !(editing == null ? void 0 : editing.id) && !/^[A-Za-z0-9][A-Za-z0-9_-]{0,31}$/.test(code), onClick: save, children: "Save" })
             ] }),
-            children: /* @__PURE__ */ jsxs9("div", { className: "space-y-4", children: [
-              !(editing == null ? void 0 : editing.id) && /* @__PURE__ */ jsx10(Input4, { label: "Code", value: code, onChange: (e) => setCode(e.target.value.toUpperCase()), helperText: "Letters, digits, - and _. Cannot be changed later." }),
-              /* @__PURE__ */ jsx10(Input4, { label: "Name", value: name, onChange: (e) => setName(e.target.value) })
+            children: /* @__PURE__ */ jsxs11("div", { className: "space-y-4", children: [
+              !(editing == null ? void 0 : editing.id) && /* @__PURE__ */ jsx12(Input6, { label: "Code", value: code, onChange: (e) => setCode(e.target.value.toUpperCase()), helperText: "Letters, digits, - and _. Cannot be changed later." }),
+              /* @__PURE__ */ jsx12(Input6, { label: "Name", value: name, onChange: (e) => setName(e.target.value) })
             ] })
           }
         )
@@ -1445,29 +1976,29 @@ function BranchesTab({ company, run, client, can }) {
 function DatabaseTab({ company, run, setFlash, client, can }) {
   var _a, _b, _c, _d, _e;
   const db = (_a = company.database) != null ? _a : { configured: false };
-  const [busy, setBusy] = useState7(null);
-  const [steps, setSteps] = useState7(null);
-  const [replacing, setReplacing] = useState7(false);
-  const [newUrl, setNewUrl] = useState7("");
-  const [report, setReport] = useState7(null);
-  const [revealing, setRevealing] = useState7(false);
-  const [reason, setReason] = useState7("");
-  const [revealed, setRevealed] = useState7(null);
-  if (!db.configured) return /* @__PURE__ */ jsx10(Card, { title: "Database", children: /* @__PURE__ */ jsx10("p", { className: "text-sm text-muted", children: "No database yet. Provision it from the Overview tab." }) });
+  const [busy, setBusy] = useState9(null);
+  const [steps, setSteps] = useState9(null);
+  const [replacing, setReplacing] = useState9(false);
+  const [newUrl, setNewUrl] = useState9("");
+  const [report, setReport] = useState9(null);
+  const [revealing, setRevealing] = useState9(false);
+  const [reason, setReason] = useState9("");
+  const [revealed, setRevealed] = useState9(null);
+  if (!db.configured) return /* @__PURE__ */ jsx12(Card, { title: "Database", children: /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted", children: "No database yet. Provision it from the Overview tab." }) });
   const writable = can("db.write");
-  return /* @__PURE__ */ jsxs9("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
-    /* @__PURE__ */ jsxs9(Card, { title: "Connection", children: [
-      /* @__PURE__ */ jsx10(
+  return /* @__PURE__ */ jsxs11("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
+    /* @__PURE__ */ jsxs11(Card, { title: "Connection", children: [
+      /* @__PURE__ */ jsx12(
         Facts,
         {
           rows: [
-            ["Type", /* @__PURE__ */ jsx10(ModePill, { mode: db.mode }, "m")],
-            ["Target", /* @__PURE__ */ jsx10("span", { className: "font-mono text-xs", children: (_b = db.target) != null ? _b : "\u2014" }, "t")],
-            ["Status", /* @__PURE__ */ jsx10(StatusPill, { status: db.status }, "s")],
-            ["Health", /* @__PURE__ */ jsxs9("span", { children: [
-              /* @__PURE__ */ jsx10(HealthDot, { ok: db.lastCheckOk }),
+            ["Type", /* @__PURE__ */ jsx12(ModePill, { mode: db.mode }, "m")],
+            ["Target", /* @__PURE__ */ jsx12("span", { className: "font-mono text-xs", children: (_b = db.target) != null ? _b : "\u2014" }, "t")],
+            ["Status", /* @__PURE__ */ jsx12(StatusPill, { status: db.status }, "s")],
+            ["Health", /* @__PURE__ */ jsxs11("span", { children: [
+              /* @__PURE__ */ jsx12(HealthDot, { ok: db.lastCheckOk }),
               " ",
-              db.lastCheckAt && /* @__PURE__ */ jsxs9("span", { className: "text-xs text-muted", children: [
+              db.lastCheckAt && /* @__PURE__ */ jsxs11("span", { className: "text-xs text-muted", children: [
                 "\xB7 ",
                 timeAgo(db.lastCheckAt)
               ] })
@@ -1479,23 +2010,23 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           ]
         }
       ),
-      db.lastCheckOk === false && db.lastCheckError && /* @__PURE__ */ jsx10("div", { className: "mt-4 rounded-lg bg-error-50 p-3 font-mono text-xs text-error-800", children: db.lastCheckError }),
-      steps && /* @__PURE__ */ jsx10("ul", { className: "mt-4 space-y-1 rounded-lg bg-background p-3 text-xs text-muted", children: steps.map((s) => /* @__PURE__ */ jsxs9("li", { children: [
+      db.lastCheckOk === false && db.lastCheckError && /* @__PURE__ */ jsx12("div", { className: "mt-4 rounded-lg bg-error-50 p-3 font-mono text-xs text-error-800", children: db.lastCheckError }),
+      steps && /* @__PURE__ */ jsx12("ul", { className: "mt-4 space-y-1 rounded-lg bg-background p-3 text-xs text-muted", children: steps.map((s) => /* @__PURE__ */ jsxs11("li", { children: [
         "\u2713 ",
         s
       ] }, s)) }),
-      revealed && /* @__PURE__ */ jsxs9("div", { className: "mt-4 rounded-lg border border-warning-200 bg-warning-50 p-3", children: [
-        /* @__PURE__ */ jsx10("div", { className: "mb-1 text-xs font-medium text-warning-800", children: "Database URL (audited, shown once)" }),
-        /* @__PURE__ */ jsxs9("div", { className: "flex items-center gap-2", children: [
-          /* @__PURE__ */ jsx10("code", { className: "min-w-0 flex-1 break-all text-xs text-foreground", children: revealed }),
-          /* @__PURE__ */ jsx10(CopyButton, { value: revealed })
+      revealed && /* @__PURE__ */ jsxs11("div", { className: "mt-4 rounded-lg border border-warning-200 bg-warning-50 p-3", children: [
+        /* @__PURE__ */ jsx12("div", { className: "mb-1 text-xs font-medium text-warning-800", children: "Database URL (audited, shown once)" }),
+        /* @__PURE__ */ jsxs11("div", { className: "flex items-center gap-2", children: [
+          /* @__PURE__ */ jsx12("code", { className: "min-w-0 flex-1 break-all text-xs text-foreground", children: revealed }),
+          /* @__PURE__ */ jsx12(CopyButton, { value: revealed })
         ] }),
-        /* @__PURE__ */ jsx10("button", { type: "button", className: "mt-2 text-xs text-muted underline", onClick: () => setRevealed(null), children: "Hide" })
+        /* @__PURE__ */ jsx12("button", { type: "button", className: "mt-2 text-xs text-muted underline", onClick: () => setRevealed(null), children: "Hide" })
       ] })
     ] }),
-    writable && /* @__PURE__ */ jsx10(Card, { title: "Actions", children: /* @__PURE__ */ jsxs9("div", { className: "flex flex-col gap-2", children: [
-      /* @__PURE__ */ jsx10(
-        Button6,
+    writable && /* @__PURE__ */ jsx12(Card, { title: "Actions", children: /* @__PURE__ */ jsxs11("div", { className: "flex flex-col gap-2", children: [
+      /* @__PURE__ */ jsx12(
+        Button8,
         {
           variant: "outline",
           loading: busy === "test",
@@ -1512,8 +2043,8 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           children: "Test connection"
         }
       ),
-      /* @__PURE__ */ jsx10(
-        Button6,
+      /* @__PURE__ */ jsx12(
+        Button8,
         {
           variant: "outline",
           loading: busy === "sync",
@@ -1526,12 +2057,12 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           children: "Sync schema"
         }
       ),
-      db.mode === "external" && /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: () => setReplacing(true), children: "Replace URL" }),
-      can("db.reveal") && /* @__PURE__ */ jsx10(Button6, { variant: "ghost", onClick: () => setRevealing(true), children: "Reveal URL\u2026" }),
-      /* @__PURE__ */ jsx10("p", { className: "mt-1 text-xs text-muted", children: "Sync adds missing tables, columns and indexes. It never drops or renames anything." })
+      db.mode === "external" && /* @__PURE__ */ jsx12(Button8, { variant: "outline", onClick: () => setReplacing(true), children: "Replace URL" }),
+      can("db.reveal") && /* @__PURE__ */ jsx12(Button8, { variant: "ghost", onClick: () => setRevealing(true), children: "Reveal URL\u2026" }),
+      /* @__PURE__ */ jsx12("p", { className: "mt-1 text-xs text-muted", children: "Sync adds missing tables, columns and indexes. It never drops or renames anything." })
     ] }) }),
-    /* @__PURE__ */ jsxs9(
-      Dialog2,
+    /* @__PURE__ */ jsxs11(
+      Dialog4,
       {
         isOpen: replacing,
         onClose: () => {
@@ -1541,10 +2072,10 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
         },
         title: "Replace database URL",
         size: "md",
-        footer: /* @__PURE__ */ jsxs9("div", { className: "flex justify-end gap-2", children: [
-          /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: () => setReplacing(false), children: "Cancel" }),
-          /* @__PURE__ */ jsx10(
-            Button6,
+        footer: /* @__PURE__ */ jsxs11("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ jsx12(Button8, { variant: "outline", onClick: () => setReplacing(false), children: "Cancel" }),
+          /* @__PURE__ */ jsx12(
+            Button8,
             {
               disabled: !(report == null ? void 0 : report.ok) || report.state !== "company",
               loading: busy === "replace",
@@ -1563,11 +2094,11 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           )
         ] }),
         children: [
-          /* @__PURE__ */ jsx10("p", { className: "mb-3 text-sm text-muted", children: "Use this after moving the database or rotating its password. The new URL must point at this company's existing database." }),
-          /* @__PURE__ */ jsxs9("div", { className: "flex items-end gap-2", children: [
-            /* @__PURE__ */ jsx10("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ jsx10(Input4, { label: "New database URL", type: "password", autoComplete: "off", value: newUrl, onChange: (e) => (setNewUrl(e.target.value), setReport(null)) }) }),
-            /* @__PURE__ */ jsx10(
-              Button6,
+          /* @__PURE__ */ jsx12("p", { className: "mb-3 text-sm text-muted", children: "Use this after moving the database or rotating its password. The new URL must point at this company's existing database." }),
+          /* @__PURE__ */ jsxs11("div", { className: "flex items-end gap-2", children: [
+            /* @__PURE__ */ jsx12("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ jsx12(Input6, { label: "New database URL", type: "password", autoComplete: "off", value: newUrl, onChange: (e) => (setNewUrl(e.target.value), setReport(null)) }) }),
+            /* @__PURE__ */ jsx12(
+              Button8,
               {
                 variant: "outline",
                 disabled: !newUrl.trim(),
@@ -1582,21 +2113,21 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
               }
             )
           ] }),
-          report && /* @__PURE__ */ jsx10(InspectResult, { report })
+          report && /* @__PURE__ */ jsx12(InspectResult, { report })
         ]
       }
     ),
-    /* @__PURE__ */ jsxs9(
-      Dialog2,
+    /* @__PURE__ */ jsxs11(
+      Dialog4,
       {
         isOpen: revealing,
         onClose: () => setRevealing(false),
         title: "Reveal database URL",
         size: "md",
-        footer: /* @__PURE__ */ jsxs9("div", { className: "flex justify-end gap-2", children: [
-          /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: () => setRevealing(false), children: "Cancel" }),
-          /* @__PURE__ */ jsx10(
-            Button6,
+        footer: /* @__PURE__ */ jsxs11("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ jsx12(Button8, { variant: "outline", onClick: () => setRevealing(false), children: "Cancel" }),
+          /* @__PURE__ */ jsx12(
+            Button8,
             {
               variant: "destructive",
               disabled: reason.trim().length < 8,
@@ -1613,8 +2144,8 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           )
         ] }),
         children: [
-          /* @__PURE__ */ jsx10("p", { className: "mb-3 text-sm text-muted", children: "Only credential custodians can do this. The reveal is recorded in the audit log with your reason before the URL is read." }),
-          /* @__PURE__ */ jsx10(Textarea, { label: "Reason", rows: 3, value: reason, onChange: (e) => setReason(e.target.value), helperText: "At least 8 characters, e.g. the incident or ticket number." })
+          /* @__PURE__ */ jsx12("p", { className: "mb-3 text-sm text-muted", children: "Only credential custodians can do this. The reveal is recorded in the audit log with your reason before the URL is read." }),
+          /* @__PURE__ */ jsx12(Textarea3, { label: "Reason", rows: 3, value: reason, onChange: (e) => setReason(e.target.value), helperText: "At least 8 characters, e.g. the incident or ticket number." })
         ]
       }
     )
@@ -1625,13 +2156,13 @@ function AdminsTab({ company, setSecret, setFlash, client, can }) {
   const sensitive = useSensitive();
   const ready = ((_a = company.database) == null ? void 0 : _a.configured) && ((_b = company.database) == null ? void 0 : _b.status) === "active";
   const { data, error, reload } = useLoad(ready ? `companies/${company.id}/admins` : null);
-  const [adding, setAdding] = useState7(false);
-  const [fullName, setFullName] = useState7("");
-  const [email, setEmail] = useState7("");
-  const [phone, setPhone] = useState7("");
-  const [busy, setBusy] = useState7(false);
+  const [adding, setAdding] = useState9(false);
+  const [fullName, setFullName] = useState9("");
+  const [email, setEmail] = useState9("");
+  const [phone, setPhone] = useState9("");
+  const [busy, setBusy] = useState9(false);
   const writable = can("companies.write");
-  if (!ready) return /* @__PURE__ */ jsx10(Card, { title: "Company admins", children: /* @__PURE__ */ jsx10("p", { className: "text-sm text-muted", children: "Admins can be added once the company's database is provisioned." }) });
+  if (!ready) return /* @__PURE__ */ jsx12(Card, { title: "Company admins", children: /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted", children: "Admins can be added once the company's database is provisioned." }) });
   const act = async (a, action) => {
     var _a2;
     try {
@@ -1660,38 +2191,38 @@ function AdminsTab({ company, setSecret, setFlash, client, can }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ jsxs9(
+  return /* @__PURE__ */ jsxs11(
     Card,
     {
       title: "Company admins",
-      actions: writable && /* @__PURE__ */ jsx10(Button6, { size: "sm", leftIcon: /* @__PURE__ */ jsx10(IconPlus, {}), onClick: () => setAdding(true), children: "Add admin" }),
+      actions: writable && /* @__PURE__ */ jsx12(Button8, { size: "sm", leftIcon: /* @__PURE__ */ jsx12(IconPlus, {}), onClick: () => setAdding(true), children: "Add admin" }),
       children: [
-        error && !data ? /* @__PURE__ */ jsx10(ErrorState3, { description: error.message, onRetry: reload }) : !data ? /* @__PURE__ */ jsx10(LoadingState3, { variant: "table", rows: 2 }) : !((_c = data.admins) == null ? void 0 : _c.length) ? /* @__PURE__ */ jsx10(EmptyState2, { title: "No administrators yet", compact: true }) : /* @__PURE__ */ jsx10("ul", { className: "divide-y divide-line", children: data.admins.map((a) => /* @__PURE__ */ jsxs9("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
-          /* @__PURE__ */ jsxs9("div", { className: "min-w-0 flex-1", children: [
-            /* @__PURE__ */ jsx10("div", { className: "truncate text-sm font-medium text-foreground", children: a.fullName }),
-            /* @__PURE__ */ jsx10("div", { className: "truncate text-xs text-muted", children: a.email })
+        error && !data ? /* @__PURE__ */ jsx12(ErrorState5, { description: error.message, onRetry: reload }) : !data ? /* @__PURE__ */ jsx12(LoadingState5, { variant: "table", rows: 2 }) : !((_c = data.admins) == null ? void 0 : _c.length) ? /* @__PURE__ */ jsx12(EmptyState4, { title: "No administrators yet", compact: true }) : /* @__PURE__ */ jsx12("ul", { className: "divide-y divide-line", children: data.admins.map((a) => /* @__PURE__ */ jsxs11("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
+          /* @__PURE__ */ jsxs11("div", { className: "min-w-0 flex-1", children: [
+            /* @__PURE__ */ jsx12("div", { className: "truncate text-sm font-medium text-foreground", children: a.fullName }),
+            /* @__PURE__ */ jsx12("div", { className: "truncate text-xs text-muted", children: a.email })
           ] }),
-          /* @__PURE__ */ jsx10(StatusPill, { status: a.status }),
-          writable && /* @__PURE__ */ jsxs9("div", { className: "flex gap-1", children: [
-            /* @__PURE__ */ jsx10(Button6, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
-            /* @__PURE__ */ jsx10(Button6, { size: "sm", variant: "ghost", onClick: () => act(a, a.status === "active" ? "disable" : "enable"), children: a.status === "active" ? "Disable" : "Enable" })
+          /* @__PURE__ */ jsx12(StatusPill, { status: a.status }),
+          writable && /* @__PURE__ */ jsxs11("div", { className: "flex gap-1", children: [
+            /* @__PURE__ */ jsx12(Button8, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
+            /* @__PURE__ */ jsx12(Button8, { size: "sm", variant: "ghost", onClick: () => act(a, a.status === "active" ? "disable" : "enable"), children: a.status === "active" ? "Disable" : "Enable" })
           ] })
         ] }, a.id)) }),
-        /* @__PURE__ */ jsx10(
-          Dialog2,
+        /* @__PURE__ */ jsx12(
+          Dialog4,
           {
             isOpen: adding,
             onClose: () => setAdding(false),
             title: "Add company admin",
             size: "sm",
-            footer: /* @__PURE__ */ jsxs9("div", { className: "flex justify-end gap-2", children: [
-              /* @__PURE__ */ jsx10(Button6, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
-              /* @__PURE__ */ jsx10(Button6, { loading: busy, disabled: !fullName.trim() || !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
+            footer: /* @__PURE__ */ jsxs11("div", { className: "flex justify-end gap-2", children: [
+              /* @__PURE__ */ jsx12(Button8, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
+              /* @__PURE__ */ jsx12(Button8, { loading: busy, disabled: !fullName.trim() || !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
             ] }),
-            children: /* @__PURE__ */ jsxs9("div", { className: "space-y-4", children: [
-              /* @__PURE__ */ jsx10(Input4, { label: "Full name", autoFocus: true, value: fullName, onChange: (e) => setFullName(e.target.value) }),
-              /* @__PURE__ */ jsx10(Input4, { label: "Email", type: "email", value: email, onChange: (e) => setEmail(e.target.value) }),
-              /* @__PURE__ */ jsx10(Input4, { label: "Phone (optional)", type: "tel", value: phone, onChange: (e) => setPhone(e.target.value) })
+            children: /* @__PURE__ */ jsxs11("div", { className: "space-y-4", children: [
+              /* @__PURE__ */ jsx12(Input6, { label: "Full name", autoFocus: true, value: fullName, onChange: (e) => setFullName(e.target.value) }),
+              /* @__PURE__ */ jsx12(Input6, { label: "Email", type: "email", value: email, onChange: (e) => setEmail(e.target.value) }),
+              /* @__PURE__ */ jsx12(Input6, { label: "Phone (optional)", type: "tel", value: phone, onChange: (e) => setPhone(e.target.value) })
             ] })
           }
         )
@@ -1703,7 +2234,7 @@ function ActivityTab({ company, client, can }) {
   var _a, _b;
   const sensitive = useSensitive();
   const { data, error, reload } = useLoad(`companies/${company.id}/activity`);
-  const [retryError, setRetryError] = useState7(null);
+  const [retryError, setRetryError] = useState9(null);
   const modeOf = (payload) => {
     try {
       const p = typeof payload === "string" ? JSON.parse(payload) : payload;
@@ -1712,27 +2243,27 @@ function ActivityTab({ company, client, can }) {
       return "managed";
     }
   };
-  if (error && !data) return /* @__PURE__ */ jsx10(ErrorState3, { description: error.message, onRetry: reload });
-  if (!data) return /* @__PURE__ */ jsx10(LoadingState3, { variant: "table", rows: 4 });
-  return /* @__PURE__ */ jsxs9("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
-    /* @__PURE__ */ jsxs9(Card, { title: "Provisioning jobs", children: [
-      retryError && /* @__PURE__ */ jsx10(Alert3, { variant: "error", children: retryError }),
-      !((_a = data.jobs) == null ? void 0 : _a.length) ? /* @__PURE__ */ jsx10("p", { className: "text-sm text-muted", children: "No provisioning jobs." }) : /* @__PURE__ */ jsx10("ul", { className: "divide-y divide-line", children: data.jobs.map((j) => {
+  if (error && !data) return /* @__PURE__ */ jsx12(ErrorState5, { description: error.message, onRetry: reload });
+  if (!data) return /* @__PURE__ */ jsx12(LoadingState5, { variant: "table", rows: 4 });
+  return /* @__PURE__ */ jsxs11("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
+    /* @__PURE__ */ jsxs11(Card, { title: "Provisioning jobs", children: [
+      retryError && /* @__PURE__ */ jsx12(Alert4, { variant: "error", children: retryError }),
+      !((_a = data.jobs) == null ? void 0 : _a.length) ? /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted", children: "No provisioning jobs." }) : /* @__PURE__ */ jsx12("ul", { className: "divide-y divide-line", children: data.jobs.map((j) => {
         var _a2, _b2;
         const lastError = (_a2 = j.lastError) != null ? _a2 : j.last_error;
-        return /* @__PURE__ */ jsxs9("li", { className: "py-2.5", children: [
-          /* @__PURE__ */ jsxs9("div", { className: "flex flex-wrap items-center gap-2", children: [
-            /* @__PURE__ */ jsx10(StatusPill, { status: j.status }),
-            /* @__PURE__ */ jsxs9("span", { className: "text-xs text-muted", children: [
+        return /* @__PURE__ */ jsxs11("li", { className: "py-2.5", children: [
+          /* @__PURE__ */ jsxs11("div", { className: "flex flex-wrap items-center gap-2", children: [
+            /* @__PURE__ */ jsx12(StatusPill, { status: j.status }),
+            /* @__PURE__ */ jsxs11("span", { className: "text-xs text-muted", children: [
               modeOf(j.payload),
               " \xB7 step ",
-              /* @__PURE__ */ jsx10("span", { className: "font-mono", children: j.step }),
+              /* @__PURE__ */ jsx12("span", { className: "font-mono", children: j.step }),
               " \xB7 ",
               j.attempts,
               " attempt(s)"
             ] }),
-            j.status === "failed" && can("companies.write") && /* @__PURE__ */ jsx10(
-              Button6,
+            j.status === "failed" && can("companies.write") && /* @__PURE__ */ jsx12(
+              Button8,
               {
                 size: "sm",
                 variant: "ghost",
@@ -1750,33 +2281,33 @@ function ActivityTab({ company, client, can }) {
               }
             )
           ] }),
-          lastError && j.status !== "succeeded" && /* @__PURE__ */ jsx10("div", { className: "mt-1 break-words font-mono text-xs text-error-700", children: lastError }),
-          /* @__PURE__ */ jsx10("div", { className: "mt-0.5 text-xs text-muted", children: formatDate((_b2 = j.updatedAt) != null ? _b2 : j.updated_at) })
+          lastError && j.status !== "succeeded" && /* @__PURE__ */ jsx12("div", { className: "mt-1 break-words font-mono text-xs text-error-700", children: lastError }),
+          /* @__PURE__ */ jsx12("div", { className: "mt-0.5 text-xs text-muted", children: formatDate((_b2 = j.updatedAt) != null ? _b2 : j.updated_at) })
         ] }, j.id);
       }) })
     ] }),
-    /* @__PURE__ */ jsx10(Card, { title: "Audit trail", children: !((_b = data.events) == null ? void 0 : _b.length) ? /* @__PURE__ */ jsx10("p", { className: "text-sm text-muted", children: "No events." }) : /* @__PURE__ */ jsx10("ol", { className: "divide-y divide-line", children: data.events.map(normalizeEvent).map((e, i) => {
+    /* @__PURE__ */ jsx12(Card, { title: "Audit trail", children: !((_b = data.events) == null ? void 0 : _b.length) ? /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted", children: "No events." }) : /* @__PURE__ */ jsx12("ol", { className: "divide-y divide-line", children: data.events.map(normalizeEvent).map((e, i) => {
       var _a2;
-      return /* @__PURE__ */ jsxs9("li", { className: "py-2.5", children: [
-        /* @__PURE__ */ jsxs9("div", { className: "text-sm text-foreground", children: [
-          /* @__PURE__ */ jsx10("span", { className: "font-medium", children: e.actor }),
+      return /* @__PURE__ */ jsxs11("li", { className: "py-2.5", children: [
+        /* @__PURE__ */ jsxs11("div", { className: "text-sm text-foreground", children: [
+          /* @__PURE__ */ jsx12("span", { className: "font-medium", children: e.actor }),
           " ",
           describeAction(e.action),
-          e.target && /* @__PURE__ */ jsxs9("span", { className: "text-muted", children: [
+          e.target && /* @__PURE__ */ jsxs11("span", { className: "text-muted", children: [
             " \xB7 ",
             e.target
           ] })
         ] }),
-        /* @__PURE__ */ jsx10("div", { className: "text-xs text-muted", children: formatDate(e.at) })
+        /* @__PURE__ */ jsx12("div", { className: "text-xs text-muted", children: formatDate(e.at) })
       ] }, (_a2 = e.id) != null ? _a2 : i);
     }) }) })
   ] });
 }
 
 // src/platform/views/Admins.jsx
-import React10, { useState as useState8 } from "react";
-import { Alert as Alert4, Badge as Badge2, Button as Button7, ConfirmDialog as ConfirmDialog2, Dialog as Dialog3, ErrorState as ErrorState4, Input as Input5, LoadingState as LoadingState4, PageHeader as PageHeader5, Select } from "@dreamtree-org/twreact-ui";
-import { jsx as jsx11, jsxs as jsxs10 } from "react/jsx-runtime";
+import React12, { useState as useState10 } from "react";
+import { Alert as Alert5, Badge as Badge3, Button as Button9, ConfirmDialog as ConfirmDialog3, Dialog as Dialog5, ErrorState as ErrorState6, Input as Input7, LoadingState as LoadingState6, PageHeader as PageHeader6, Select as Select3 } from "@dreamtree-org/twreact-ui";
+import { jsx as jsx13, jsxs as jsxs12 } from "react/jsx-runtime";
 var ROLE_OPTIONS = [
   { value: "superadmin", label: "Superadmin: everything" },
   { value: "support", label: "Support: read-only" }
@@ -1786,13 +2317,13 @@ function AdminsView() {
   const { client, can, loginUrl, Link } = usePlatform();
   const sensitive = useSensitive();
   const { data, error, loading, reload } = useLoad("admins");
-  const [flash, setFlash] = useState8(null);
-  const [secret, setSecret] = useState8(null);
-  const [adding, setAdding] = useState8(false);
-  const [email, setEmail] = useState8("");
-  const [role, setRole] = useState8("superadmin");
-  const [busy, setBusy] = useState8(false);
-  const [confirm, setConfirm] = useState8(null);
+  const [flash, setFlash] = useState10(null);
+  const [secret, setSecret] = useState10(null);
+  const [adding, setAdding] = useState10(false);
+  const [email, setEmail] = useState10("");
+  const [role, setRole] = useState10("superadmin");
+  const [busy, setBusy] = useState10(false);
+  const [confirm, setConfirm] = useState10(null);
   const writable = can("admins.write");
   const act = async (a, action, extra = {}) => {
     var _a2;
@@ -1823,63 +2354,63 @@ function AdminsView() {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ jsxs10("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ jsx11(
-      PageHeader5,
+  return /* @__PURE__ */ jsxs12("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ jsx13(
+      PageHeader6,
       {
         title: "Platform admins",
         subtitle: "People who can create companies and manage the platform",
         linkAs: Link,
-        actions: writable && /* @__PURE__ */ jsx11(Button7, { leftIcon: /* @__PURE__ */ jsx11(IconPlus, {}), onClick: () => setAdding(true), children: "Add platform admin" })
+        actions: writable && /* @__PURE__ */ jsx13(Button9, { leftIcon: /* @__PURE__ */ jsx13(IconPlus, {}), onClick: () => setAdding(true), children: "Add platform admin" })
       }
     ),
-    flash && /* @__PURE__ */ jsx11(Alert4, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
-    secret && /* @__PURE__ */ jsx11(OneTimeSecret, { title: secret.title, loginUrl, email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
-    error && !data ? /* @__PURE__ */ jsx11(ErrorState4, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ jsx11(LoadingState4, { variant: "table", rows: 3 }) : /* @__PURE__ */ jsx11("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: ((_a = data == null ? void 0 : data.admins) != null ? _a : []).map((a) => {
+    flash && /* @__PURE__ */ jsx13(Alert5, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    secret && /* @__PURE__ */ jsx13(OneTimeSecret, { title: secret.title, loginUrl, email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
+    error && !data ? /* @__PURE__ */ jsx13(ErrorState6, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ jsx13(LoadingState6, { variant: "table", rows: 3 }) : /* @__PURE__ */ jsx13("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: ((_a = data == null ? void 0 : data.admins) != null ? _a : []).map((a) => {
       var _a2, _b, _c;
       const me = a.id === data.me;
       const roles = Array.isArray(a.roles) ? a.roles : [];
-      return /* @__PURE__ */ jsxs10("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [
-        /* @__PURE__ */ jsxs10("div", { className: "min-w-0 flex-1", children: [
-          /* @__PURE__ */ jsxs10("div", { className: "flex flex-wrap items-center gap-2 text-sm font-medium text-foreground", children: [
-            /* @__PURE__ */ jsx11("span", { className: "truncate", children: a.email }),
-            me && /* @__PURE__ */ jsx11(Badge2, { variant: "primary", size: "sm", children: "you" })
+      return /* @__PURE__ */ jsxs12("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [
+        /* @__PURE__ */ jsxs12("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ jsxs12("div", { className: "flex flex-wrap items-center gap-2 text-sm font-medium text-foreground", children: [
+            /* @__PURE__ */ jsx13("span", { className: "truncate", children: a.email }),
+            me && /* @__PURE__ */ jsx13(Badge3, { variant: "primary", size: "sm", children: "you" })
           ] }),
-          /* @__PURE__ */ jsxs10("div", { className: "text-xs text-muted", children: [
+          /* @__PURE__ */ jsxs12("div", { className: "text-xs text-muted", children: [
             roles.length ? roles.join(", ") : "No role",
             " \xB7 last sign-in ",
             timeAgo((_a2 = a.lastLoginAt) != null ? _a2 : a.last_login_at),
             !((_b = a.totpEnrolled) != null ? _b : Number(a.strong_factor_enrolled)) && " \xB7 no authenticator yet"
           ] })
         ] }),
-        /* @__PURE__ */ jsx11(StatusPill, { status: a.status }),
-        writable && /* @__PURE__ */ jsxs10("div", { className: "flex flex-wrap gap-1", children: [
-          /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
-          !me && ((_c = a.totpEnrolled) != null ? _c : Number(a.strong_factor_enrolled)) ? /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "reset-totp" }), children: "Reset authenticator" }) : null,
-          !me && (a.status === "active" ? /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "disable" }), children: "Disable" }) : /* @__PURE__ */ jsx11(Button7, { size: "sm", variant: "ghost", onClick: () => act(a, "enable"), children: "Enable" }))
+        /* @__PURE__ */ jsx13(StatusPill, { status: a.status }),
+        writable && /* @__PURE__ */ jsxs12("div", { className: "flex flex-wrap gap-1", children: [
+          /* @__PURE__ */ jsx13(Button9, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
+          !me && ((_c = a.totpEnrolled) != null ? _c : Number(a.strong_factor_enrolled)) ? /* @__PURE__ */ jsx13(Button9, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "reset-totp" }), children: "Reset authenticator" }) : null,
+          !me && (a.status === "active" ? /* @__PURE__ */ jsx13(Button9, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "disable" }), children: "Disable" }) : /* @__PURE__ */ jsx13(Button9, { size: "sm", variant: "ghost", onClick: () => act(a, "enable"), children: "Enable" }))
         ] })
       ] }, a.id);
     }) }),
-    /* @__PURE__ */ jsx11(
-      Dialog3,
+    /* @__PURE__ */ jsx13(
+      Dialog5,
       {
         isOpen: adding,
         onClose: () => setAdding(false),
         title: "Add platform admin",
         size: "sm",
-        footer: /* @__PURE__ */ jsxs10("div", { className: "flex justify-end gap-2", children: [
-          /* @__PURE__ */ jsx11(Button7, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
-          /* @__PURE__ */ jsx11(Button7, { loading: busy, disabled: !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
+        footer: /* @__PURE__ */ jsxs12("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ jsx13(Button9, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
+          /* @__PURE__ */ jsx13(Button9, { loading: busy, disabled: !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
         ] }),
-        children: /* @__PURE__ */ jsxs10("div", { className: "space-y-4", children: [
-          /* @__PURE__ */ jsx11("p", { className: "text-sm text-muted", children: "A temporary password is generated and shown once. They set up an authenticator app at first sign-in." }),
-          /* @__PURE__ */ jsx11(Input5, { label: "Email", type: "email", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
-          /* @__PURE__ */ jsx11(Select, { label: "Role", options: ROLE_OPTIONS, value: role, onChange: (v) => setRole(String(v)) })
+        children: /* @__PURE__ */ jsxs12("div", { className: "space-y-4", children: [
+          /* @__PURE__ */ jsx13("p", { className: "text-sm text-muted", children: "A temporary password is generated and shown once. They set up an authenticator app at first sign-in." }),
+          /* @__PURE__ */ jsx13(Input7, { label: "Email", type: "email", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
+          /* @__PURE__ */ jsx13(Select3, { label: "Role", options: ROLE_OPTIONS, value: role, onChange: (v) => setRole(String(v)) })
         ] })
       }
     ),
-    /* @__PURE__ */ jsx11(
-      ConfirmDialog2,
+    /* @__PURE__ */ jsx13(
+      ConfirmDialog3,
       {
         isOpen: confirm !== null,
         title: (confirm == null ? void 0 : confirm.action) === "disable" ? `Disable ${confirm == null ? void 0 : confirm.admin.email}?` : `Reset ${confirm == null ? void 0 : confirm.admin.email}'s authenticator?`,
@@ -1898,17 +2429,17 @@ function AdminsView() {
 }
 
 // src/platform/views/Audit.jsx
-import React11, { useEffect as useEffect5, useState as useState9 } from "react";
-import { Alert as Alert5, Button as Button8, EmptyState as EmptyState3, ErrorState as ErrorState5, Input as Input6, LoadingState as LoadingState5, PageHeader as PageHeader6 } from "@dreamtree-org/twreact-ui";
-import { Fragment as Fragment5, jsx as jsx12, jsxs as jsxs11 } from "react/jsx-runtime";
+import React13, { useEffect as useEffect6, useState as useState11 } from "react";
+import { Alert as Alert6, Button as Button10, EmptyState as EmptyState5, ErrorState as ErrorState7, Input as Input8, LoadingState as LoadingState7, PageHeader as PageHeader7 } from "@dreamtree-org/twreact-ui";
+import { Fragment as Fragment5, jsx as jsx14, jsxs as jsxs13 } from "react/jsx-runtime";
 function AuditView() {
   const { client, Link, href } = usePlatform();
-  const [q, setQ] = useState9("");
-  const [applied, setApplied] = useState9("");
-  const [events, setEvents] = useState9([]);
-  const [cursor, setCursor] = useState9(null);
-  const [state, setState] = useState9({ loading: true, error: null });
-  const [exportError, setExportError] = useState9(null);
+  const [q, setQ] = useState11("");
+  const [applied, setApplied] = useState11("");
+  const [events, setEvents] = useState11([]);
+  const [cursor, setCursor] = useState11(null);
+  const [state, setState] = useState11({ loading: true, error: null });
+  const [exportError, setExportError] = useState11(null);
   const load = async (more = false) => {
     setState({ loading: true, error: null });
     try {
@@ -1920,7 +2451,7 @@ function AuditView() {
       setState({ loading: false, error: e });
     }
   };
-  useEffect5(() => {
+  useEffect6(() => {
     void load(false);
   }, [applied]);
   const exportCsv = async () => {
@@ -1939,18 +2470,18 @@ function AuditView() {
     }
   };
   const rows = events.map(normalizeEvent);
-  return /* @__PURE__ */ jsxs11("div", { className: "mx-auto max-w-6xl space-y-6 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ jsx12(
-      PageHeader6,
+  return /* @__PURE__ */ jsxs13("div", { className: "mx-auto max-w-6xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ jsx14(
+      PageHeader7,
       {
         title: "Audit log",
         subtitle: "Every platform action: who did what, to which company",
         linkAs: Link,
-        actions: /* @__PURE__ */ jsx12(Button8, { variant: "outline", leftIcon: /* @__PURE__ */ jsx12(IconDownload, {}), onClick: exportCsv, children: "Export CSV" })
+        actions: /* @__PURE__ */ jsx14(Button10, { variant: "outline", leftIcon: /* @__PURE__ */ jsx14(IconDownload, {}), onClick: exportCsv, children: "Export CSV" })
       }
     ),
-    exportError && /* @__PURE__ */ jsx12(Alert5, { variant: "error", children: exportError }),
-    /* @__PURE__ */ jsxs11(
+    exportError && /* @__PURE__ */ jsx14(Alert6, { variant: "error", children: exportError }),
+    /* @__PURE__ */ jsxs13(
       "form",
       {
         className: "flex gap-2",
@@ -1959,50 +2490,50 @@ function AuditView() {
           setApplied(q.trim());
         },
         children: [
-          /* @__PURE__ */ jsx12("div", { className: "flex-1", children: /* @__PURE__ */ jsx12(Input6, { type: "search", "aria-label": "Search the audit log", placeholder: "Search action, target or company", value: q, onChange: (e) => setQ(e.target.value) }) }),
-          /* @__PURE__ */ jsx12(Button8, { type: "submit", variant: "outline", children: "Search" })
+          /* @__PURE__ */ jsx14("div", { className: "flex-1", children: /* @__PURE__ */ jsx14(Input8, { type: "search", "aria-label": "Search the audit log", placeholder: "Search action, target or company", value: q, onChange: (e) => setQ(e.target.value) }) }),
+          /* @__PURE__ */ jsx14(Button10, { type: "submit", variant: "outline", children: "Search" })
         ]
       }
     ),
-    state.error && !rows.length ? /* @__PURE__ */ jsx12(ErrorState5, { description: state.error.message, onRetry: () => load(false) }) : state.loading && !rows.length ? /* @__PURE__ */ jsx12(LoadingState5, { variant: "table", rows: 8 }) : !rows.length ? /* @__PURE__ */ jsx12(EmptyState3, { icon: /* @__PURE__ */ jsx12(IconList, { size: 24 }), title: applied ? "Nothing matches" : "No events yet", compact: true }) : /* @__PURE__ */ jsxs11(Fragment5, { children: [
-      /* @__PURE__ */ jsx12("ol", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: rows.map((e, i) => {
+    state.error && !rows.length ? /* @__PURE__ */ jsx14(ErrorState7, { description: state.error.message, onRetry: () => load(false) }) : state.loading && !rows.length ? /* @__PURE__ */ jsx14(LoadingState7, { variant: "table", rows: 8 }) : !rows.length ? /* @__PURE__ */ jsx14(EmptyState5, { icon: /* @__PURE__ */ jsx14(IconList, { size: 24 }), title: applied ? "Nothing matches" : "No events yet", compact: true }) : /* @__PURE__ */ jsxs13(Fragment5, { children: [
+      /* @__PURE__ */ jsx14("ol", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: rows.map((e, i) => {
         var _a;
-        return /* @__PURE__ */ jsxs11("li", { className: "flex flex-wrap items-baseline gap-x-3 gap-y-1 px-4 py-2.5", children: [
-          /* @__PURE__ */ jsx12("span", { className: "w-40 shrink-0 text-xs text-muted", children: formatDate(e.at) }),
-          /* @__PURE__ */ jsxs11("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
-            /* @__PURE__ */ jsx12("span", { className: "font-medium", children: e.actor }),
+        return /* @__PURE__ */ jsxs13("li", { className: "flex flex-wrap items-baseline gap-x-3 gap-y-1 px-4 py-2.5", children: [
+          /* @__PURE__ */ jsx14("span", { className: "w-40 shrink-0 text-xs text-muted", children: formatDate(e.at) }),
+          /* @__PURE__ */ jsxs13("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
+            /* @__PURE__ */ jsx14("span", { className: "font-medium", children: e.actor }),
             " ",
             describeAction(e.action),
-            e.company && e.companyId && /* @__PURE__ */ jsxs11(Fragment5, { children: [
+            e.company && e.companyId && /* @__PURE__ */ jsxs13(Fragment5, { children: [
               " \xB7 ",
-              /* @__PURE__ */ jsx12(Link, { href: href(`companies/${e.companyId}`), className: "text-primary-600 hover:underline", children: e.company })
+              /* @__PURE__ */ jsx14(Link, { href: href(`companies/${e.companyId}`), className: "text-primary-600 hover:underline", children: e.company })
             ] }),
-            e.target && /* @__PURE__ */ jsxs11("span", { className: "text-muted", children: [
+            e.target && /* @__PURE__ */ jsxs13("span", { className: "text-muted", children: [
               " \xB7 ",
               e.target
             ] })
           ] }),
-          /* @__PURE__ */ jsx12("code", { className: "text-xs text-muted", children: e.action })
+          /* @__PURE__ */ jsx14("code", { className: "text-xs text-muted", children: e.action })
         ] }, (_a = e.id) != null ? _a : i);
       }) }),
-      cursor && /* @__PURE__ */ jsx12("div", { className: "text-center", children: /* @__PURE__ */ jsx12(Button8, { variant: "outline", loading: state.loading, onClick: () => load(true), children: "Load older" }) })
+      cursor && /* @__PURE__ */ jsx14("div", { className: "text-center", children: /* @__PURE__ */ jsx14(Button10, { variant: "outline", loading: state.loading, onClick: () => load(true), children: "Load older" }) })
     ] })
   ] });
 }
 
 // src/platform/views/Security.jsx
-import React12, { useState as useState10 } from "react";
-import { Alert as Alert6, Button as Button9, Input as Input7, PageHeader as PageHeader7 } from "@dreamtree-org/twreact-ui";
-import { jsx as jsx13, jsxs as jsxs12 } from "react/jsx-runtime";
+import React14, { useState as useState12 } from "react";
+import { Alert as Alert7, Button as Button11, Input as Input9, PageHeader as PageHeader8 } from "@dreamtree-org/twreact-ui";
+import { jsx as jsx15, jsxs as jsxs14 } from "react/jsx-runtime";
 var grouped = (s) => String(s != null ? s : "").replace(/(.{4})/g, "$1 ").trim();
 function SecurityView({ gate = false }) {
   var _a, _b;
   const { client, me, reloadMe, Link } = usePlatform();
   const sensitive = useSensitive();
-  const [setup, setSetup] = useState10(null);
-  const [code, setCode] = useState10("");
-  const [busy, setBusy] = useState10(false);
-  const [error, setError] = useState10(null);
+  const [setup, setSetup] = useState12(null);
+  const [code, setCode] = useState12("");
+  const [busy, setBusy] = useState12(false);
+  const [error, setError] = useState12(null);
   const enrolled = (_a = me == null ? void 0 : me.admin) == null ? void 0 : _a.totpEnrolled;
   const begin = async () => {
     setBusy(true);
@@ -2030,36 +2561,187 @@ function SecurityView({ gate = false }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ jsxs12("div", { className: "mx-auto max-w-2xl space-y-6 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ jsx13(PageHeader7, { title: gate ? "Set up your authenticator" : "Security", subtitle: (_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.email, linkAs: Link }),
-    gate && /* @__PURE__ */ jsx13(Alert6, { variant: "info", title: "One more step", children: "The platform console needs a second factor. Set up an authenticator app (Google Authenticator, 1Password, Authy, \u2026) to continue." }),
-    error && /* @__PURE__ */ jsx13(Alert6, { variant: "error", children: error }),
-    /* @__PURE__ */ jsx13(Card, { title: "Authenticator app", children: enrolled ? /* @__PURE__ */ jsxs12("p", { className: "flex items-center gap-2 text-sm text-success-700", children: [
-      /* @__PURE__ */ jsx13(IconCheck, {}),
+  return /* @__PURE__ */ jsxs14("div", { className: "mx-auto max-w-2xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ jsx15(PageHeader8, { title: gate ? "Set up your authenticator" : "Security", subtitle: (_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.email, linkAs: Link }),
+    gate && /* @__PURE__ */ jsx15(Alert7, { variant: "info", title: "One more step", children: "The platform console needs a second factor. Set up an authenticator app (Google Authenticator, 1Password, Authy, \u2026) to continue." }),
+    error && /* @__PURE__ */ jsx15(Alert7, { variant: "error", children: error }),
+    /* @__PURE__ */ jsx15(Card, { title: "Authenticator app", children: enrolled ? /* @__PURE__ */ jsxs14("p", { className: "flex items-center gap-2 text-sm text-success-700", children: [
+      /* @__PURE__ */ jsx15(IconCheck, {}),
       " An authenticator is set up. Sign-in and sensitive actions ask for its code. If you lose the device, ask another platform admin to reset it."
-    ] }) : !setup ? /* @__PURE__ */ jsxs12("div", { className: "space-y-3", children: [
-      /* @__PURE__ */ jsx13("p", { className: "text-sm text-muted", children: "You'll scan or type a setup key into the app, then enter the 6-digit code it shows." }),
-      /* @__PURE__ */ jsx13(Button9, { leftIcon: /* @__PURE__ */ jsx13(IconShield, {}), loading: busy, onClick: begin, children: "Start setup" })
-    ] }) : /* @__PURE__ */ jsxs12("form", { className: "space-y-4", onSubmit: verify, children: [
-      /* @__PURE__ */ jsxs12("ol", { className: "list-decimal space-y-3 pl-5 text-sm text-foreground", children: [
-        /* @__PURE__ */ jsxs12("li", { children: [
+    ] }) : !setup ? /* @__PURE__ */ jsxs14("div", { className: "space-y-3", children: [
+      /* @__PURE__ */ jsx15("p", { className: "text-sm text-muted", children: "You'll scan or type a setup key into the app, then enter the 6-digit code it shows." }),
+      /* @__PURE__ */ jsx15(Button11, { leftIcon: /* @__PURE__ */ jsx15(IconShield, {}), loading: busy, onClick: begin, children: "Start setup" })
+    ] }) : /* @__PURE__ */ jsxs14("form", { className: "space-y-4", onSubmit: verify, children: [
+      /* @__PURE__ */ jsxs14("ol", { className: "list-decimal space-y-3 pl-5 text-sm text-foreground", children: [
+        /* @__PURE__ */ jsxs14("li", { children: [
           "Add an account in your authenticator app with this setup key:",
-          /* @__PURE__ */ jsxs12("div", { className: "mt-2 flex flex-wrap items-center gap-2", children: [
-            /* @__PURE__ */ jsx13("code", { className: "rounded-md bg-background px-2 py-1 font-mono text-sm tracking-wider", children: grouped(setup.secret) }),
-            /* @__PURE__ */ jsx13(CopyButton, { value: setup.secret, label: "Copy key" }),
-            /* @__PURE__ */ jsx13("a", { href: setup.otpauthUrl, className: "text-xs text-primary-600 underline", children: "Open in authenticator app" })
+          /* @__PURE__ */ jsxs14("div", { className: "mt-2 flex flex-wrap items-center gap-2", children: [
+            /* @__PURE__ */ jsx15("code", { className: "rounded-md bg-background px-2 py-1 font-mono text-sm tracking-wider", children: grouped(setup.secret) }),
+            /* @__PURE__ */ jsx15(CopyButton, { value: setup.secret, label: "Copy key" }),
+            /* @__PURE__ */ jsx15("a", { href: setup.otpauthUrl, className: "text-xs text-primary-600 underline", children: "Open in authenticator app" })
           ] })
         ] }),
-        /* @__PURE__ */ jsx13("li", { children: "Enter the 6-digit code it shows." })
+        /* @__PURE__ */ jsx15("li", { children: "Enter the 6-digit code it shows." })
       ] }),
-      /* @__PURE__ */ jsx13("div", { className: "max-w-xs", children: /* @__PURE__ */ jsx13(Input7, { label: "Code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }) }),
-      /* @__PURE__ */ jsx13(Button9, { type: "submit", loading: busy, disabled: code.length < 6, children: "Verify and finish" })
+      /* @__PURE__ */ jsx15("div", { className: "max-w-xs", children: /* @__PURE__ */ jsx15(Input9, { label: "Code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }) }),
+      /* @__PURE__ */ jsx15(Button11, { type: "submit", loading: busy, disabled: code.length < 6, children: "Verify and finish" })
     ] }) })
   ] });
 }
 
+// src/platform/views/Plans.jsx
+import React15, { useState as useState13 } from "react";
+import { Alert as Alert8, Button as Button12, Dialog as Dialog6, EmptyState as EmptyState6, ErrorState as ErrorState8, Input as Input10, LoadingState as LoadingState8, PageHeader as PageHeader9, Select as Select4, Textarea as Textarea4 } from "@dreamtree-org/twreact-ui";
+import { jsx as jsx16, jsxs as jsxs15 } from "react/jsx-runtime";
+var INTERVALS = [
+  { value: "month", label: "Monthly" },
+  { value: "year", label: "Yearly" },
+  { value: "one-time", label: "One-time" }
+];
+var blank = { code: "", name: "", price: "0", currency: "INR", interval: "month", seats: "", limits: "", features: "" };
+function toForm(plan) {
+  var _a, _b, _c, _d, _e;
+  return {
+    code: plan.code,
+    name: plan.name,
+    price: String((Number((_a = plan.priceMinor) != null ? _a : 0) / 100).toFixed(2)).replace(/\.00$/, ""),
+    currency: (_b = plan.currency) != null ? _b : "INR",
+    interval: (_c = plan.interval) != null ? _c : "month",
+    seats: plan.seats == null ? "" : String(plan.seats),
+    limits: Object.entries((_d = plan.limits) != null ? _d : {}).map(([k, v]) => `${k} = ${v != null ? v : ""}`).join("\n"),
+    features: ((_e = plan.features) != null ? _e : []).join(", ")
+  };
+}
+function planBody(form) {
+  const limits = {};
+  for (const line of form.limits.split("\n")) {
+    const [k, ...rest] = line.split("=");
+    if (!k.trim()) continue;
+    const v = rest.join("=").trim();
+    limits[k.trim()] = v === "" ? null : Number(v);
+  }
+  return {
+    code: form.code.trim().toLowerCase(),
+    name: form.name.trim(),
+    priceMinor: Math.round(Number(form.price || 0) * 100),
+    currency: form.currency.trim().toUpperCase(),
+    interval: form.interval,
+    seats: form.seats.trim() === "" ? null : Number(form.seats),
+    limits,
+    features: form.features.split(",").map((f) => f.trim()).filter(Boolean)
+  };
+}
+function PlansView() {
+  var _a;
+  const { client, can, Link } = usePlatform();
+  const sensitive = useSensitive();
+  const { data, error, loading, reload } = useLoad("plans");
+  const [flash, setFlash] = useState13(null);
+  const [editing, setEditing] = useState13(null);
+  const [busy, setBusy] = useState13(false);
+  const writable = can("plans.write");
+  const plans = (_a = data == null ? void 0 : data.plans) != null ? _a : [];
+  const save = async () => {
+    setBusy(true);
+    setFlash(null);
+    try {
+      const body = planBody(editing.form);
+      if (editing.plan) {
+        const { code: _code, ...patch } = body;
+        await sensitive(() => client.patch(`plans/${encodeURIComponent(editing.plan.id)}`, patch));
+      } else {
+        await sensitive(() => client.post("plans", body));
+      }
+      setFlash({ kind: "success", msg: `${body.name} saved` });
+      setEditing(null);
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(false);
+    }
+  };
+  const setStatus = async (plan, status) => {
+    setFlash(null);
+    try {
+      await sensitive(() => client.patch(`plans/${encodeURIComponent(plan.id)}`, { status }));
+      setFlash({ kind: "success", msg: `${plan.name} ${status === "archived" ? "archived" : "restored"}` });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    }
+  };
+  const field = (key) => {
+    var _a2;
+    return {
+      value: (_a2 = editing == null ? void 0 : editing.form[key]) != null ? _a2 : "",
+      onChange: (e) => setEditing((s) => ({ ...s, form: { ...s.form, [key]: e.target.value } }))
+    };
+  };
+  const valid = editing && /^[a-z0-9][a-z0-9_-]{0,47}$/.test(editing.form.code.trim().toLowerCase()) && editing.form.name.trim() && Number(editing.form.price) >= 0;
+  return /* @__PURE__ */ jsxs15("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ jsx16(
+      PageHeader9,
+      {
+        title: "Plans",
+        subtitle: "What companies can subscribe to. Archived plans stay on the companies already using them.",
+        linkAs: Link,
+        actions: writable && /* @__PURE__ */ jsx16(Button12, { leftIcon: /* @__PURE__ */ jsx16(IconPlus, {}), onClick: () => setEditing({ form: { ...blank } }), children: "New plan" })
+      }
+    ),
+    flash && /* @__PURE__ */ jsx16(Alert8, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    error && !data ? /* @__PURE__ */ jsx16(ErrorState8, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ jsx16(LoadingState8, { variant: "table", rows: 3 }) : plans.length === 0 ? /* @__PURE__ */ jsx16(EmptyState6, { icon: /* @__PURE__ */ jsx16(IconTag, { size: 24 }), title: "No plans yet", description: writable ? "Create the first plan companies can subscribe to." : "A superadmin creates plans." }) : /* @__PURE__ */ jsx16("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: plans.map((p) => {
+      var _a2, _b;
+      return /* @__PURE__ */ jsxs15("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [
+        /* @__PURE__ */ jsxs15("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ jsxs15("div", { className: "flex flex-wrap items-center gap-2 text-sm font-medium text-foreground", children: [
+            /* @__PURE__ */ jsx16("span", { children: p.name }),
+            /* @__PURE__ */ jsx16("span", { className: "font-mono text-xs text-muted", children: p.code })
+          ] }),
+          /* @__PURE__ */ jsxs15("div", { className: "text-xs text-muted", children: [
+            formatPrice(p.priceMinor, p.currency, p.interval),
+            p.seats ? ` \xB7 ${p.seats} seats` : "",
+            Object.keys((_a2 = p.limits) != null ? _a2 : {}).length ? ` \xB7 ${Object.entries(p.limits).map(([k, v]) => `${k} ${v != null ? v : "\u221E"}`).join(", ")}` : ""
+          ] }),
+          ((_b = p.features) == null ? void 0 : _b.length) ? /* @__PURE__ */ jsx16("div", { className: "mt-1 text-xs text-muted", children: p.features.join(" \xB7 ") }) : null
+        ] }),
+        /* @__PURE__ */ jsx16(StatusPill, { status: p.status }),
+        writable && /* @__PURE__ */ jsxs15("div", { className: "flex gap-1", children: [
+          /* @__PURE__ */ jsx16(Button12, { size: "sm", variant: "ghost", onClick: () => setEditing({ plan: p, form: toForm(p) }), children: "Edit" }),
+          /* @__PURE__ */ jsx16(Button12, { size: "sm", variant: "ghost", onClick: () => setStatus(p, p.status === "archived" ? "active" : "archived"), children: p.status === "archived" ? "Restore" : "Archive" })
+        ] })
+      ] }, p.id);
+    }) }),
+    /* @__PURE__ */ jsx16(
+      Dialog6,
+      {
+        isOpen: editing !== null,
+        onClose: () => setEditing(null),
+        title: (editing == null ? void 0 : editing.plan) ? `Edit ${editing.plan.name}` : "New plan",
+        size: "md",
+        footer: /* @__PURE__ */ jsxs15("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ jsx16(Button12, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
+          /* @__PURE__ */ jsx16(Button12, { loading: busy, disabled: !valid, onClick: save, children: "Save plan" })
+        ] }),
+        children: editing && /* @__PURE__ */ jsxs15("div", { className: "grid gap-4 sm:grid-cols-2", children: [
+          /* @__PURE__ */ jsx16(Input10, { label: "Name", autoFocus: true, ...field("name") }),
+          /* @__PURE__ */ jsx16(Input10, { label: "Code", disabled: Boolean(editing.plan), helperText: editing.plan ? "Fixed once created" : "Lowercase, e.g. pro or team-yearly", ...field("code") }),
+          /* @__PURE__ */ jsx16(Input10, { label: "Price", type: "number", min: "0", step: "0.01", ...field("price") }),
+          /* @__PURE__ */ jsx16(Input10, { label: "Currency", maxLength: 3, ...field("currency") }),
+          /* @__PURE__ */ jsx16(Select4, { label: "Billing", options: INTERVALS, value: editing.form.interval, onChange: (v) => setEditing((s) => ({ ...s, form: { ...s.form, interval: String(v) } })) }),
+          /* @__PURE__ */ jsx16(Input10, { label: "Seats", type: "number", min: "1", helperText: "Leave empty for no seat limit", ...field("seats") }),
+          /* @__PURE__ */ jsx16("div", { className: "sm:col-span-2", children: /* @__PURE__ */ jsx16(Textarea4, { label: "Limits", rows: 3, placeholder: "users = 10\nbranches =", helperText: "One per line: name = number. Leave the number empty for unlimited.", ...field("limits") }) }),
+          /* @__PURE__ */ jsx16("div", { className: "sm:col-span-2", children: /* @__PURE__ */ jsx16(Input10, { label: "Features", placeholder: "gst, reports, api", helperText: "Comma-separated", ...field("features") }) })
+        ] })
+      }
+    )
+  ] });
+}
+
 // src/platform/PlatformConsole.jsx
-import { jsx as jsx14 } from "react/jsx-runtime";
+import { jsx as jsx17 } from "react/jsx-runtime";
 var trim = (s) => String(s != null ? s : "").replace(/^\/+|\/+$/g, "");
 function matchConsoleRoute(rel, pages = []) {
   const parts = trim(rel).split("/").filter(Boolean);
@@ -2071,7 +2753,8 @@ function matchConsoleRoute(rel, pages = []) {
     if (parts[1] === "new" && parts.length === 2) return { view: "new-company" };
     if (parts.length === 2) return { view: "company", id: decodeURIComponent(parts[1]) };
   }
-  if (parts.length === 1 && ["admins", "audit", "security"].includes(parts[0])) return { view: parts[0] };
+  if (parts.length === 1 && ["admins", "audit", "security", "plans"].includes(parts[0])) return { view: parts[0] };
+  if (parts.length === 1 && parts[0] === "support-access") return { view: "support" };
   return { view: "not-found" };
 }
 function PlatformConsole({
@@ -2103,7 +2786,7 @@ function PlatformConsole({
     [given, apiBasePath, loginPath, base2]
   );
   const Link = useMemo3(() => makeLink(linkAs, navigate), [linkAs, navigate]);
-  const [me, setMe] = useState11(initialMe);
+  const [me, setMe] = useState14(initialMe);
   const reloadMe = useCallback4(async () => {
     try {
       setMe(await client.get("me"));
@@ -2111,7 +2794,7 @@ function PlatformConsole({
       if (e.status !== 401) setMe(null);
     }
   }, [client]);
-  useEffect6(() => {
+  useEffect7(() => {
     void reloadMe();
   }, [reloadMe]);
   const href = useCallback4((rel2 = "") => `${base2}/${trim(rel2)}`.replace(/\/$/, "") || "/", [base2]);
@@ -2139,13 +2822,15 @@ function PlatformConsole({
   const route = matchConsoleRoute(rel, visiblePages);
   const gate = me && me.access && me.access.console === false;
   const active = (prefix) => prefix === "" ? route.view === "overview" : trim(rel) === prefix || trim(rel).startsWith(`${prefix}/`);
-  const nav = gate ? [{ id: "security", label: "Set up authenticator", href: href("security"), icon: /* @__PURE__ */ jsx14(IconShield, {}), active: true }] : [
-    enabled.includes("overview") && { id: "overview", label: "Overview", href: href(""), icon: /* @__PURE__ */ jsx14(IconDashboard, {}), active: active("") },
-    enabled.includes("companies") && { id: "companies", label: "Companies", href: href("companies"), icon: /* @__PURE__ */ jsx14(IconBuilding, {}), active: active("companies") },
+  const nav = gate ? [{ id: "security", label: "Set up authenticator", href: href("security"), icon: /* @__PURE__ */ jsx17(IconShield, {}), active: true }] : [
+    enabled.includes("overview") && { id: "overview", label: "Overview", href: href(""), icon: /* @__PURE__ */ jsx17(IconDashboard, {}), active: active("") },
+    enabled.includes("companies") && { id: "companies", label: "Companies", href: href("companies"), icon: /* @__PURE__ */ jsx17(IconBuilding, {}), active: active("companies") },
     ...visiblePages.map((p) => ({ id: `page:${p.path}`, label: p.label, href: href(p.path), icon: p.icon, group: p.group, active: active(trim(p.path)) })),
-    enabled.includes("audit") && can("audit.read") && { id: "audit", label: "Audit log", href: href("audit"), icon: /* @__PURE__ */ jsx14(IconList, {}), active: active("audit"), group: "Platform" },
-    enabled.includes("admins") && can("admins.read") && { id: "admins", label: "Platform admins", href: href("admins"), icon: /* @__PURE__ */ jsx14(IconUsers, {}), active: active("admins"), group: "Platform" },
-    { id: "security", label: "Security", href: href("security"), icon: /* @__PURE__ */ jsx14(IconShield, {}), active: active("security"), group: "Platform" }
+    enabled.includes("plans") && can("plans.read") && { id: "plans", label: "Plans", href: href("plans"), icon: /* @__PURE__ */ jsx17(IconTag, {}), active: active("plans") },
+    enabled.includes("support") && can("support.request") && { id: "support", label: "Support access", href: href("support-access"), icon: /* @__PURE__ */ jsx17(IconLifebuoy, {}), active: active("support-access") },
+    enabled.includes("audit") && can("audit.read") && { id: "audit", label: "Audit log", href: href("audit"), icon: /* @__PURE__ */ jsx17(IconList, {}), active: active("audit"), group: "Platform" },
+    enabled.includes("admins") && can("admins.read") && { id: "admins", label: "Platform admins", href: href("admins"), icon: /* @__PURE__ */ jsx17(IconUsers, {}), active: active("admins"), group: "Platform" },
+    { id: "security", label: "Security", href: href("security"), icon: /* @__PURE__ */ jsx17(IconShield, {}), active: active("security"), group: "Platform" }
   ].filter(Boolean);
   const value = {
     client,
@@ -2156,6 +2841,7 @@ function PlatformConsole({
     navigate,
     can,
     companyTabs,
+    features: enabled,
     companyLoginPath,
     companyLoginUrl: (slug) => `${origin}${companyLoginPath(slug)}`,
     loginUrl: `${origin}${loginPath != null ? loginPath : `${base2}/login`}`,
@@ -2163,29 +2849,31 @@ function PlatformConsole({
     appName: appName != null ? appName : (_a = me == null ? void 0 : me.app) == null ? void 0 : _a.name
   };
   let body;
-  if (me === void 0) body = /* @__PURE__ */ jsx14("div", { className: "p-6", children: /* @__PURE__ */ jsx14(LoadingState6, { variant: "stats" }) });
-  else if (gate) body = /* @__PURE__ */ jsx14(SecurityView, { gate: true });
-  else if (route.view === "overview") body = /* @__PURE__ */ jsx14(OverviewView, {});
-  else if (route.view === "companies") body = /* @__PURE__ */ jsx14(CompaniesView, {});
-  else if (route.view === "new-company") body = /* @__PURE__ */ jsx14(NewCompanyView, {});
-  else if (route.view === "company") body = /* @__PURE__ */ jsx14(CompanyDetailView, { companyId: route.id }, route.id);
-  else if (route.view === "admins") body = /* @__PURE__ */ jsx14(AdminsView, {});
-  else if (route.view === "audit") body = /* @__PURE__ */ jsx14(AuditView, {});
-  else if (route.view === "security") body = /* @__PURE__ */ jsx14(SecurityView, {});
+  if (me === void 0) body = /* @__PURE__ */ jsx17("div", { className: "p-6", children: /* @__PURE__ */ jsx17(LoadingState9, { variant: "stats" }) });
+  else if (gate) body = /* @__PURE__ */ jsx17(SecurityView, { gate: true });
+  else if (route.view === "overview") body = /* @__PURE__ */ jsx17(OverviewView, {});
+  else if (route.view === "companies") body = /* @__PURE__ */ jsx17(CompaniesView, {});
+  else if (route.view === "new-company") body = /* @__PURE__ */ jsx17(NewCompanyView, {});
+  else if (route.view === "company") body = /* @__PURE__ */ jsx17(CompanyDetailView, { companyId: route.id }, route.id);
+  else if (route.view === "admins") body = /* @__PURE__ */ jsx17(AdminsView, {});
+  else if (route.view === "audit") body = /* @__PURE__ */ jsx17(AuditView, {});
+  else if (route.view === "security") body = /* @__PURE__ */ jsx17(SecurityView, {});
+  else if (route.view === "plans" && enabled.includes("plans") && can("plans.read")) body = /* @__PURE__ */ jsx17(PlansView, {});
+  else if (route.view === "support" && enabled.includes("support") && can("support.request")) body = /* @__PURE__ */ jsx17(SupportAccessView, {});
   else if (route.view === "page") body = route.page.render({ client, path: route.rest, navigate, href, me });
-  else body = /* @__PURE__ */ jsx14("div", { className: "p-6", children: /* @__PURE__ */ jsx14(EmptyState4, { title: "Page not found", description: "This console page does not exist." }) });
-  return /* @__PURE__ */ jsx14(PlatformProvider, { value, children: /* @__PURE__ */ jsx14(StepUpProvider, { client, totpEnrolled: Boolean((_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.totpEnrolled), children: /* @__PURE__ */ jsx14(PlatformShell, { brand, appName: value.appName, nav, adminEmail: (_d = (_c = me == null ? void 0 : me.admin) == null ? void 0 : _c.email) != null ? _d : adminEmail, onSignOut: signOut, linkAs: Link, pageTitle: (_e = nav.find((n) => n.active)) == null ? void 0 : _e.label, children: body }) }) });
+  else body = /* @__PURE__ */ jsx17("div", { className: "p-6", children: /* @__PURE__ */ jsx17(EmptyState7, { title: "Page not found", description: "This console page does not exist." }) });
+  return /* @__PURE__ */ jsx17(PlatformProvider, { value, children: /* @__PURE__ */ jsx17(StepUpProvider, { client, totpEnrolled: Boolean((_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.totpEnrolled), children: /* @__PURE__ */ jsx17(PlatformShell, { brand, appName: value.appName, nav, adminEmail: (_d = (_c = me == null ? void 0 : me.admin) == null ? void 0 : _c.email) != null ? _d : adminEmail, onSignOut: signOut, linkAs: Link, pageTitle: (_e = nav.find((n) => n.active)) == null ? void 0 : _e.label, children: body }) }) });
 }
 
 // src/platform/PlatformLogin.jsx
-import React14, { useMemo as useMemo4, useState as useState14 } from "react";
-import { Alert as Alert7, Button as Button10, Input as Input8 } from "@dreamtree-org/twreact-ui";
+import React17, { useMemo as useMemo4, useState as useState17 } from "react";
+import { Alert as Alert9, Button as Button13, Input as Input11 } from "@dreamtree-org/twreact-ui";
 
 // src/AuthShell.jsx
 import { useId } from "react";
 
 // src/DemoAccounts.jsx
-import { useEffect as useEffect7, useRef as useRef3, useState as useState12 } from "react";
+import { useEffect as useEffect8, useRef as useRef3, useState as useState15 } from "react";
 
 // src/demoFill.js
 function normalizeDemoAccounts(data) {
@@ -2199,12 +2887,12 @@ function normalizeDemoAccounts(data) {
 }
 
 // src/DemoAccounts.jsx
-import { Fragment as Fragment6, jsx as jsx15, jsxs as jsxs13 } from "react/jsx-runtime";
+import { Fragment as Fragment6, jsx as jsx18, jsxs as jsxs16 } from "react/jsx-runtime";
 function DemoAccounts({ load, onSelect, className = "" }) {
-  const [state, setState] = useState12({ status: "loading", accounts: [] });
-  const [picked, setPicked] = useState12(null);
+  const [state, setState] = useState15({ status: "loading", accounts: [] });
+  const [picked, setPicked] = useState15(null);
   const loadRef = useRef3(load);
-  useEffect7(() => {
+  useEffect8(() => {
     let live = true;
     Promise.resolve().then(() => loadRef.current()).then((data) => live && setState({ status: "ready", ...normalizeDemoAccounts(data) })).catch(() => live && setState({ status: "ready", accounts: [] }));
     return () => {
@@ -2216,10 +2904,10 @@ function DemoAccounts({ load, onSelect, className = "" }) {
     setPicked(i);
     onSelect == null ? void 0 : onSelect(account);
   };
-  return /* @__PURE__ */ jsxs13("div", { className: `dt-auth-demo ${className}`, "aria-busy": state.status === "loading" || void 0, children: [
-    /* @__PURE__ */ jsx15("p", { className: "dt-auth-demo-label", children: "Demo accounts" }),
-    state.status === "loading" ? /* @__PURE__ */ jsx15("div", { className: "dt-auth-demo-chips", "aria-hidden": "true", children: [0, 1, 2].map((i) => /* @__PURE__ */ jsx15("span", { className: "dt-auth-demo-chip dt-auth-demo-chip--skeleton" }, i)) }) : /* @__PURE__ */ jsxs13(Fragment6, { children: [
-      /* @__PURE__ */ jsx15("div", { className: "dt-auth-demo-chips", children: state.accounts.map((a, i) => /* @__PURE__ */ jsx15(
+  return /* @__PURE__ */ jsxs16("div", { className: `dt-auth-demo ${className}`, "aria-busy": state.status === "loading" || void 0, children: [
+    /* @__PURE__ */ jsx18("p", { className: "dt-auth-demo-label", children: "Demo accounts" }),
+    state.status === "loading" ? /* @__PURE__ */ jsx18("div", { className: "dt-auth-demo-chips", "aria-hidden": "true", children: [0, 1, 2].map((i) => /* @__PURE__ */ jsx18("span", { className: "dt-auth-demo-chip dt-auth-demo-chip--skeleton" }, i)) }) : /* @__PURE__ */ jsxs16(Fragment6, { children: [
+      /* @__PURE__ */ jsx18("div", { className: "dt-auth-demo-chips", children: state.accounts.map((a, i) => /* @__PURE__ */ jsx18(
         "button",
         {
           type: "button",
@@ -2231,9 +2919,9 @@ function DemoAccounts({ load, onSelect, className = "" }) {
         },
         `${a.label}-${a.identifier}`
       )) }),
-      /* @__PURE__ */ jsx15("p", { className: "dt-auth-demo-note", children: state.sharedPassword ? /* @__PURE__ */ jsxs13(Fragment6, { children: [
+      /* @__PURE__ */ jsx18("p", { className: "dt-auth-demo-note", children: state.sharedPassword ? /* @__PURE__ */ jsxs16(Fragment6, { children: [
         "Shared password ",
-        /* @__PURE__ */ jsx15("code", { children: state.sharedPassword }),
+        /* @__PURE__ */ jsx18("code", { children: state.sharedPassword }),
         " \u2014 tap a role to fill."
       ] }) : "Tap a role to fill." })
     ] })
@@ -2241,9 +2929,9 @@ function DemoAccounts({ load, onSelect, className = "" }) {
 }
 
 // src/useTapReveal.js
-import { useCallback as useCallback5, useRef as useRef4, useState as useState13 } from "react";
+import { useCallback as useCallback5, useRef as useRef4, useState as useState16 } from "react";
 function useTapReveal({ taps = 4, windowMs = 1500 } = {}) {
-  const [revealed, setRevealed] = useState13(false);
+  const [revealed, setRevealed] = useState16(false);
   const count = useRef4(0);
   const last = useRef4(0);
   const onClick = useCallback5(() => {
@@ -2257,7 +2945,7 @@ function useTapReveal({ taps = 4, windowMs = 1500 } = {}) {
 }
 
 // src/AuthShell.jsx
-import { jsx as jsx16, jsxs as jsxs14 } from "react/jsx-runtime";
+import { jsx as jsx19, jsxs as jsxs17 } from "react/jsx-runtime";
 var DEFAULT_LEGAL = [
   { label: "Privacy Policy", href: "/privacy" },
   { label: "Terms", href: "/terms" },
@@ -2265,10 +2953,10 @@ var DEFAULT_LEGAL = [
 ];
 function BrandMark({ brand, size }) {
   if (brand.logoSrc) {
-    return /* @__PURE__ */ jsx16("img", { className: "dt-auth-mark-img", src: brand.logoSrc, alt: "", width: size, height: size });
+    return /* @__PURE__ */ jsx19("img", { className: "dt-auth-mark-img", src: brand.logoSrc, alt: "", width: size, height: size });
   }
-  if (brand.mark) return /* @__PURE__ */ jsx16("span", { className: "dt-auth-mark-node", children: brand.mark });
-  return /* @__PURE__ */ jsx16("span", { className: "dt-auth-monogram", style: { width: size, height: size }, "aria-hidden": "true", children: brand.name.charAt(0) });
+  if (brand.mark) return /* @__PURE__ */ jsx19("span", { className: "dt-auth-mark-node", children: brand.mark });
+  return /* @__PURE__ */ jsx19("span", { className: "dt-auth-monogram", style: { width: size, height: size }, "aria-hidden": "true", children: brand.name.charAt(0) });
 }
 function brandStyle(brand) {
   return {
@@ -2295,44 +2983,44 @@ function AuthShell({
   const isPlatform = variant === "platform";
   const headline = isPlatform ? brand.platformHeadline || "Platform administration" : brand.headline;
   const pitch = isPlatform ? brand.platformPitch || `Super administrator console for ${brand.name}. Every action here is audited.` : brand.pitch;
-  const renderLink = (l) => LinkComponent ? /* @__PURE__ */ jsx16(LinkComponent, { to: l.href, href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href) : /* @__PURE__ */ jsx16("a", { href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href);
-  return /* @__PURE__ */ jsxs14(
+  const renderLink = (l) => LinkComponent ? /* @__PURE__ */ jsx19(LinkComponent, { to: l.href, href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href) : /* @__PURE__ */ jsx19("a", { href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href);
+  return /* @__PURE__ */ jsxs17(
     "div",
     {
       className: `dt-auth ${isPlatform ? "dt-auth--platform" : ""} ${className}`,
       style: brandStyle(brand),
       "data-product": brand.id,
       children: [
-        /* @__PURE__ */ jsxs14("aside", { className: "dt-auth-panel", children: [
-          /* @__PURE__ */ jsxs14("a", { href: "/", className: "dt-auth-brand", children: [
-            /* @__PURE__ */ jsx16(BrandMark, { brand, size: 28 }),
-            /* @__PURE__ */ jsx16("span", { className: "dt-auth-brand-name", children: brand.name }),
-            isPlatform ? /* @__PURE__ */ jsx16("span", { className: "dt-auth-badge", children: "Platform" }) : null
+        /* @__PURE__ */ jsxs17("aside", { className: "dt-auth-panel", children: [
+          /* @__PURE__ */ jsxs17("a", { href: "/", className: "dt-auth-brand", children: [
+            /* @__PURE__ */ jsx19(BrandMark, { brand, size: 28 }),
+            /* @__PURE__ */ jsx19("span", { className: "dt-auth-brand-name", children: brand.name }),
+            isPlatform ? /* @__PURE__ */ jsx19("span", { className: "dt-auth-badge", children: "Platform" }) : null
           ] }),
-          /* @__PURE__ */ jsxs14("div", { className: "dt-auth-pitch", children: [
-            /* @__PURE__ */ jsx16("h2", { children: headline }),
-            pitch ? /* @__PURE__ */ jsx16("p", { children: pitch }) : null,
-            !isPlatform && ((_b = brand.points) == null ? void 0 : _b.length) ? /* @__PURE__ */ jsx16("ul", { children: brand.points.map((p) => /* @__PURE__ */ jsx16("li", { children: p }, p)) }) : null
+          /* @__PURE__ */ jsxs17("div", { className: "dt-auth-pitch", children: [
+            /* @__PURE__ */ jsx19("h2", { children: headline }),
+            pitch ? /* @__PURE__ */ jsx19("p", { children: pitch }) : null,
+            !isPlatform && ((_b = brand.points) == null ? void 0 : _b.length) ? /* @__PURE__ */ jsx19("ul", { children: brand.points.map((p) => /* @__PURE__ */ jsx19("li", { children: p }, p)) }) : null
           ] }),
-          /* @__PURE__ */ jsx16("p", { className: "dt-auth-panel-foot", children: brand.category || "by Dreamtree-Org" })
+          /* @__PURE__ */ jsx19("p", { className: "dt-auth-panel-foot", children: brand.category || "by Dreamtree-Org" })
         ] }),
-        /* @__PURE__ */ jsx16("main", { className: "dt-auth-main", children: /* @__PURE__ */ jsxs14("div", { className: "dt-auth-column", children: [
-          /* @__PURE__ */ jsxs14("a", { href: "/", className: "dt-auth-brand dt-auth-brand--mobile", children: [
-            /* @__PURE__ */ jsx16(BrandMark, { brand, size: 24 }),
-            /* @__PURE__ */ jsx16("span", { className: "dt-auth-brand-name", children: brand.name }),
-            isPlatform ? /* @__PURE__ */ jsx16("span", { className: "dt-auth-badge", children: "Platform" }) : null
+        /* @__PURE__ */ jsx19("main", { className: "dt-auth-main", children: /* @__PURE__ */ jsxs17("div", { className: "dt-auth-column", children: [
+          /* @__PURE__ */ jsxs17("a", { href: "/", className: "dt-auth-brand dt-auth-brand--mobile", children: [
+            /* @__PURE__ */ jsx19(BrandMark, { brand, size: 24 }),
+            /* @__PURE__ */ jsx19("span", { className: "dt-auth-brand-name", children: brand.name }),
+            isPlatform ? /* @__PURE__ */ jsx19("span", { className: "dt-auth-badge", children: "Platform" }) : null
           ] }),
-          /* @__PURE__ */ jsxs14("section", { className: "dt-auth-card", "aria-labelledby": headingId, children: [
-            /* @__PURE__ */ jsxs14("header", { className: "dt-auth-head", children: [
-              /* @__PURE__ */ jsx16("h1", { id: headingId, ...demoAccounts ? tapProps : {}, children: title }),
-              subtitle ? /* @__PURE__ */ jsx16("p", { children: subtitle }) : null
+          /* @__PURE__ */ jsxs17("section", { className: "dt-auth-card", "aria-labelledby": headingId, children: [
+            /* @__PURE__ */ jsxs17("header", { className: "dt-auth-head", children: [
+              /* @__PURE__ */ jsx19("h1", { id: headingId, ...demoAccounts ? tapProps : {}, children: title }),
+              subtitle ? /* @__PURE__ */ jsx19("p", { children: subtitle }) : null
             ] }),
             children,
-            demoAccounts && revealed ? /* @__PURE__ */ jsx16(DemoAccounts, { load: demoAccounts.load, onSelect: demoAccounts.onSelect }) : null
+            demoAccounts && revealed ? /* @__PURE__ */ jsx19(DemoAccounts, { load: demoAccounts.load, onSelect: demoAccounts.onSelect }) : null
           ] }),
-          footer ? /* @__PURE__ */ jsx16("div", { className: "dt-auth-footer", children: footer }) : null,
-          (legalLinks == null ? void 0 : legalLinks.length) ? /* @__PURE__ */ jsx16("nav", { className: "dt-auth-legal", "aria-label": "Legal", children: legalLinks.map((l, i) => /* @__PURE__ */ jsxs14("span", { className: "dt-auth-legal-item", children: [
-            i > 0 ? /* @__PURE__ */ jsx16("span", { "aria-hidden": "true", children: "\xB7" }) : null,
+          footer ? /* @__PURE__ */ jsx19("div", { className: "dt-auth-footer", children: footer }) : null,
+          (legalLinks == null ? void 0 : legalLinks.length) ? /* @__PURE__ */ jsx19("nav", { className: "dt-auth-legal", "aria-label": "Legal", children: legalLinks.map((l, i) => /* @__PURE__ */ jsxs17("span", { className: "dt-auth-legal-item", children: [
+            i > 0 ? /* @__PURE__ */ jsx19("span", { "aria-hidden": "true", children: "\xB7" }) : null,
             renderLink(l)
           ] }, l.href)) }) : null
         ] }) })
@@ -2342,17 +3030,17 @@ function AuthShell({
 }
 
 // src/platform/PlatformLogin.jsx
-import { jsx as jsx17, jsxs as jsxs15 } from "react/jsx-runtime";
+import { jsx as jsx20, jsxs as jsxs18 } from "react/jsx-runtime";
 function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo = "/platform", title = "Platform administration", subtitle = "Administrator sign-in", linkComponent, legalLinks }) {
   const client = useMemo4(() => given != null ? given : createPlatformClient({ basePath, onUnauthorized: () => {
   } }), [given, basePath]);
-  const [step, setStep] = useState14("password");
-  const [email, setEmail] = useState14("");
-  const [password, setPassword] = useState14("");
-  const [ticket, setTicket] = useState14(null);
-  const [code, setCode] = useState14("");
-  const [busy, setBusy] = useState14(false);
-  const [error, setError] = useState14(null);
+  const [step, setStep] = useState17("password");
+  const [email, setEmail] = useState17("");
+  const [password, setPassword] = useState17("");
+  const [ticket, setTicket] = useState17(null);
+  const [code, setCode] = useState17("");
+  const [busy, setBusy] = useState17(false);
+  const [error, setError] = useState17(null);
   const done = (res) => {
     if (onSignedIn) onSignedIn(res);
     else if (typeof window !== "undefined") window.location.assign(redirectTo);
@@ -2392,18 +3080,18 @@ function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ jsx17(AuthShell, { brand, variant: "platform", title, subtitle, linkComponent, legalLinks, children: step === "password" ? /* @__PURE__ */ jsxs15("form", { onSubmit: submitPassword, className: "flex flex-col gap-4", children: [
-    /* @__PURE__ */ jsx17(Input8, { label: "Admin email", type: "email", autoComplete: "username", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
-    /* @__PURE__ */ jsx17(Input8, { label: "Password", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) }),
-    error && /* @__PURE__ */ jsx17(Alert7, { variant: "error", children: error }),
-    /* @__PURE__ */ jsx17(Button10, { type: "submit", loading: busy, disabled: !email || !password, fullWidth: true, children: "Sign in" })
-  ] }) : /* @__PURE__ */ jsxs15("form", { onSubmit: submitCode, className: "flex flex-col gap-4", children: [
-    /* @__PURE__ */ jsx17("p", { className: "text-sm", children: "Enter the 6-digit code from your authenticator app." }),
-    /* @__PURE__ */ jsx17(Input8, { label: "Authenticator code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }),
-    error && /* @__PURE__ */ jsx17(Alert7, { variant: "error", children: error }),
-    /* @__PURE__ */ jsx17(Button10, { type: "submit", loading: busy, disabled: code.length < 6, fullWidth: true, children: "Verify" }),
-    /* @__PURE__ */ jsx17(
-      Button10,
+  return /* @__PURE__ */ jsx20(AuthShell, { brand, variant: "platform", title, subtitle, linkComponent, legalLinks, children: step === "password" ? /* @__PURE__ */ jsxs18("form", { onSubmit: submitPassword, className: "flex flex-col gap-4", children: [
+    /* @__PURE__ */ jsx20(Input11, { label: "Admin email", type: "email", autoComplete: "username", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
+    /* @__PURE__ */ jsx20(Input11, { label: "Password", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) }),
+    error && /* @__PURE__ */ jsx20(Alert9, { variant: "error", children: error }),
+    /* @__PURE__ */ jsx20(Button13, { type: "submit", loading: busy, disabled: !email || !password, fullWidth: true, children: "Sign in" })
+  ] }) : /* @__PURE__ */ jsxs18("form", { onSubmit: submitCode, className: "flex flex-col gap-4", children: [
+    /* @__PURE__ */ jsx20("p", { className: "text-sm", children: "Enter the 6-digit code from your authenticator app." }),
+    /* @__PURE__ */ jsx20(Input11, { label: "Authenticator code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }),
+    error && /* @__PURE__ */ jsx20(Alert9, { variant: "error", children: error }),
+    /* @__PURE__ */ jsx20(Button13, { type: "submit", loading: busy, disabled: code.length < 6, fullWidth: true, children: "Verify" }),
+    /* @__PURE__ */ jsx20(
+      Button13,
       {
         variant: "ghost",
         onClick: () => {
@@ -2419,6 +3107,7 @@ function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo
 export {
   Card,
   CopyButton,
+  DomainsTab,
   Facts,
   HealthDot,
   InspectResult,
@@ -2427,19 +3116,26 @@ export {
   PLATFORM_API_BASE,
   PLATFORM_FEATURES,
   PLATFORM_LOGIN_PATH,
+  PlansView,
   PlatformApiError,
   PlatformConsole,
   PlatformLogin,
   PlatformShell,
   SHIPPED_FEATURES,
   STEP_UP_REQUIRED,
+  SettingsTab,
   StatusPill,
   StepUpProvider,
+  SubscriptionTab,
+  SupportAccessView,
+  SupportGrants,
+  SupportTab,
   createPlatformClient,
   createStepUp,
   describeAction,
   enabledFeatures,
   formatDate,
+  formatPrice,
   isStepUpRequired,
   matchConsoleRoute,
   readPlatformCsrf,