@dreamtree-org/landing-kit 0.9.0 → 0.10.1

package/dist/platform.cjs

@@ -32,6 +32,7 @@ var index_exports = {};
 __export(index_exports, {
   Card: () => Card,
   CopyButton: () => CopyButton,
+  DomainsTab: () => DomainsTab,
   Facts: () => Facts,
   HealthDot: () => HealthDot,
   InspectResult: () => InspectResult,
@@ -40,19 +41,26 @@ __export(index_exports, {
   PLATFORM_API_BASE: () => PLATFORM_API_BASE,
   PLATFORM_FEATURES: () => PLATFORM_FEATURES,
   PLATFORM_LOGIN_PATH: () => PLATFORM_LOGIN_PATH,
+  PlansView: () => PlansView,
   PlatformApiError: () => PlatformApiError,
   PlatformConsole: () => PlatformConsole,
   PlatformLogin: () => PlatformLogin,
   PlatformShell: () => PlatformShell,
   SHIPPED_FEATURES: () => SHIPPED_FEATURES,
   STEP_UP_REQUIRED: () => STEP_UP_REQUIRED,
+  SettingsTab: () => SettingsTab,
   StatusPill: () => StatusPill,
   StepUpProvider: () => StepUpProvider,
+  SubscriptionTab: () => SubscriptionTab,
+  SupportAccessView: () => SupportAccessView,
+  SupportGrants: () => SupportGrants,
+  SupportTab: () => SupportTab,
   createPlatformClient: () => createPlatformClient,
   createStepUp: () => createStepUp,
   describeAction: () => describeAction,
   enabledFeatures: () => enabledFeatures,
   formatDate: () => formatDate,
+  formatPrice: () => formatPrice,
   isStepUpRequired: () => isStepUpRequired,
   matchConsoleRoute: () => matchConsoleRoute,
   readPlatformCsrf: () => readPlatformCsrf,
@@ -67,7 +75,7 @@ module.exports = __toCommonJS(index_exports);
 var PLATFORM_API_BASE = "/api/platform";
 var PLATFORM_LOGIN_PATH = "/platform/login";
 var STEP_UP_REQUIRED = "STEP_UP_REQUIRED";
-var PLATFORM_FEATURES = ["overview", "companies", "jobs", "plans", "audit", "support", "settings", "admins"];
+var PLATFORM_FEATURES = ["overview", "companies", "jobs", "plans", "audit", "support", "settings", "domains", "admins"];
 var SHIPPED_FEATURES = ["overview", "companies", "jobs", "admins"];
 var SAFE_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD", "OPTIONS"]);
 var CSRF_HEADER = "x-csrf-token";
@@ -99,7 +107,7 @@ function readPlatformCsrf(cookieString, name) {
   return null;
 }
 function joinUrl(basePath, path, query) {
-  const base2 = basePath.replace(/\/+$/, "");
+  const base3 = basePath.replace(/\/+$/, "");
   const rel = path ? `/${String(path).replace(/^\/+/, "")}` : "";
   const params = new URLSearchParams();
   for (const [k, v] of Object.entries(query != null ? query : {})) {
@@ -107,7 +115,7 @@ function joinUrl(basePath, path, query) {
     params.append(k, String(v));
   }
   const qs = params.toString();
-  return `${base2}${rel}${qs ? `?${qs}` : ""}`;
+  return `${base3}${rel}${qs ? `?${qs}` : ""}`;
 }
 function createPlatformClient(opts = {}) {
   var _a, _b, _c, _d, _e;
@@ -210,8 +218,8 @@ function timeAgo(value, now = Date.now()) {
 }
 
 // src/platform/PlatformConsole.jsx
-var import_react13 = __toESM(require("react"), 1);
-var import_twreact_ui12 = require("@dreamtree-org/twreact-ui");
+var import_react16 = __toESM(require("react"), 1);
+var import_twreact_ui15 = require("@dreamtree-org/twreact-ui");
 
 // src/platform/context.jsx
 var import_react = __toESM(require("react"), 1);
@@ -463,6 +471,23 @@ var IconArchive = make(/* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_
   /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("path", { d: "M4 8v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8M10 12h4" })
 ] }));
 var IconDownload = make(/* @__PURE__ */ (0, import_jsx_runtime3.jsx)("path", { d: "M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4M7 10l5 5 5-5M12 15V3" }));
+var IconTag = make(/* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("path", { d: "M12.6 2.6A2 2 0 0 0 11.2 2H4a2 2 0 0 0-2 2v7.2a2 2 0 0 0 .6 1.4l8.7 8.7a2.4 2.4 0 0 0 3.4 0l6.6-6.6a2.4 2.4 0 0 0 0-3.4Z" }),
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("circle", { cx: "7.5", cy: "7.5", r: "1.5" })
+] }));
+var IconLifebuoy = make(/* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("circle", { cx: "12", cy: "12", r: "10" }),
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("circle", { cx: "12", cy: "12", r: "4" }),
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("path", { d: "m4.93 4.93 4.24 4.24M14.83 14.83l4.24 4.24M14.83 9.17l4.24-4.24M4.93 19.07l4.24-4.24" })
+] }));
+var IconGlobe = make(/* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("circle", { cx: "12", cy: "12", r: "10" }),
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("path", { d: "M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z" })
+] }));
+var IconSettings = make(/* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("path", { d: "M12.22 2h-.44a2 2 0 0 0-2 2v.18a2 2 0 0 1-1 1.73l-.43.25a2 2 0 0 1-2 0l-.15-.08a2 2 0 0 0-2.73.73l-.22.38a2 2 0 0 0 .73 2.73l.15.1a2 2 0 0 1 1 1.72v.51a2 2 0 0 1-1 1.74l-.15.09a2 2 0 0 0-.73 2.73l.22.38a2 2 0 0 0 2.73.73l.15-.08a2 2 0 0 1 2 0l.43.25a2 2 0 0 1 1 1.73V20a2 2 0 0 0 2 2h.44a2 2 0 0 0 2-2v-.18a2 2 0 0 1 1-1.73l.43-.25a2 2 0 0 1 2 0l.15.08a2 2 0 0 0 2.73-.73l.22-.39a2 2 0 0 0-.73-2.73l-.15-.08a2 2 0 0 1-1-1.74v-.5a2 2 0 0 1 1-1.74l.15-.09a2 2 0 0 0 .73-2.73l-.22-.38a2 2 0 0 0-2.73-.73l-.15.08a2 2 0 0 1-2 0l-.43-.25a2 2 0 0 1-1-1.73V4a2 2 0 0 0-2-2z" }),
+  /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("circle", { cx: "12", cy: "12", r: "3" })
+] }));
 
 // src/platform/PlatformShell.jsx
 var import_jsx_runtime4 = require("react/jsx-runtime");
@@ -536,7 +561,13 @@ var STATUS_MAP = {
   running: { label: "Running", tone: "info" },
   pending: { label: "Pending", tone: "neutral" },
   queued: { label: "Queued", tone: "neutral" },
-  cancelled: { label: "Cancelled", tone: "muted" }
+  cancelled: { label: "Cancelled", tone: "muted" },
+  trial: { label: "Trial", tone: "info" },
+  past_due: { label: "Past due", tone: "warning" },
+  expired: { label: "Expired", tone: "muted" },
+  requested: { label: "Awaiting approval", tone: "warning" },
+  revoked: { label: "Revoked", tone: "muted" },
+  verified: { label: "Verified", tone: "success" }
 };
 function StatusPill({ status }) {
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_twreact_ui3.StatusPill, { status: String(status != null ? status : ""), map: STATUS_MAP });
@@ -693,8 +724,31 @@ var ACTION_LABEL = {
   "platform.admin.roles": "changed platform admin roles",
   "platform.admin.disable": "disabled platform admin",
   "platform.admin.enable": "enabled platform admin",
-  "audit.export": "exported the audit log"
+  "audit.export": "exported the audit log",
+  "plan.create": "created plan",
+  "plan.update": "updated plan",
+  "subscription.update": "changed subscription",
+  "settings.update": "changed settings",
+  "support.grant.request": "requested support access",
+  "support.grant.approve": "approved support access",
+  "support.grant.revoke": "revoked support access",
+  "domain.add": "added domain",
+  "domain.verify": "verified domain",
+  "domain.primary": "set primary domain",
+  "domain.remove": "removed domain"
 };
+function formatPrice(priceMinor, currency = "INR", interval) {
+  var _a;
+  const amount = Number(priceMinor != null ? priceMinor : 0) / 100;
+  let text;
+  try {
+    text = new Intl.NumberFormat(void 0, { style: "currency", currency }).format(amount);
+  } catch {
+    text = `${currency} ${amount.toFixed(2)}`;
+  }
+  const per = (_a = { month: " / month", year: " / year", "one-time": " once" }[interval]) != null ? _a : "";
+  return `${text}${per}`;
+}
 function describeAction(action) {
   var _a;
   return (_a = ACTION_LABEL[action]) != null ? _a : String(action != null ? action : "").replace(/[._]/g, " ");
@@ -1171,19 +1225,503 @@ function NewCompanyView() {
 }
 
 // src/platform/views/CompanyDetail.jsx
+var import_react11 = __toESM(require("react"), 1);
+var import_twreact_ui10 = require("@dreamtree-org/twreact-ui");
+
+// src/platform/views/CompanyFeatures.jsx
+var import_react10 = __toESM(require("react"), 1);
+var import_twreact_ui9 = require("@dreamtree-org/twreact-ui");
+
+// src/platform/views/SupportAccess.jsx
 var import_react9 = __toESM(require("react"), 1);
 var import_twreact_ui8 = require("@dreamtree-org/twreact-ui");
 var import_jsx_runtime10 = require("react/jsx-runtime");
+var FILTERS2 = [
+  { value: "", label: "All" },
+  { value: "requested", label: "Awaiting approval" },
+  { value: "active", label: "Active" },
+  { value: "expired", label: "Expired" },
+  { value: "revoked", label: "Revoked" }
+];
+var DURATIONS = [
+  { value: "30", label: "30 minutes" },
+  { value: "60", label: "1 hour" },
+  { value: "120", label: "2 hours" },
+  { value: "240", label: "4 hours" },
+  { value: "480", label: "8 hours" }
+];
+function until(value) {
+  const ms = new Date(value).getTime() - Date.now();
+  if (!Number.isFinite(ms) || ms <= 0) return "now";
+  const m = Math.round(ms / 6e4);
+  return m < 60 ? `in ${m} min` : `in ${Math.floor(m / 60)} h ${m % 60} min`;
+}
+function SupportGrants({ companyId, companyName }) {
+  var _a, _b;
+  const { client, can, me } = usePlatform();
+  const sensitive = useSensitive();
+  const [status, setStatus] = (0, import_react9.useState)(companyId ? "" : "requested");
+  const { data, error, loading, reload } = useLoad("support-access", { company: companyId || void 0, status: status || void 0 });
+  const [flash, setFlash] = (0, import_react9.useState)(null);
+  const [requesting, setRequesting] = (0, import_react9.useState)(false);
+  const canGrant = can("support.grant");
+  const myId = (_a = me == null ? void 0 : me.admin) == null ? void 0 : _a.id;
+  const grants = (_b = data == null ? void 0 : data.grants) != null ? _b : [];
+  const act = async (g, action) => {
+    var _a2;
+    setFlash(null);
+    try {
+      await sensitive(() => client.post(`support-access/${encodeURIComponent(g.id)}`, { action }));
+      setFlash({ kind: "success", msg: action === "approve" ? `Approved access to ${(_a2 = g.companyName) != null ? _a2 : "the company"}` : "Access revoked" });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    }
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex flex-wrap items-center justify-between gap-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "overflow-x-auto", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.SegmentedControl, { "aria-label": "Filter by status", options: FILTERS2, value: status, onChange: (v) => setStatus(String(v)) }) }),
+      can("support.request") && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: companyId ? "outline" : "primary", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconPlus, {}), onClick: () => setRequesting(true), children: "Request access" })
+    ] }),
+    flash && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Alert, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    error && !data ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.ErrorState, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.LoadingState, { variant: "table", rows: 3 }) : grants.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+      import_twreact_ui8.EmptyState,
+      {
+        compact: true,
+        icon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconLifebuoy, { size: 24 }),
+        title: status ? "No grants with this status" : "No support access yet",
+        description: "Support access lets a platform admin work in one company for a limited time, after another admin approves it."
+      }
+    ) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: grants.map((g) => {
+      var _a2, _b2;
+      const mine = myId && g.requestedById === myId;
+      return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("li", { className: "flex flex-wrap items-start gap-3 px-4 py-3", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "text-sm font-medium text-foreground", children: [
+            g.requestedBy,
+            !companyId && g.companyName ? /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "text-muted", children: [
+              " \u2192 ",
+              g.companyName
+            ] }) : null
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mt-0.5 break-words text-sm text-foreground", children: g.reason }),
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "mt-0.5 text-xs text-muted", children: [
+            g.status === "requested" && `${(_a2 = g.minutes) != null ? _a2 : "\u2014"} min once approved \xB7 requested ${timeAgo(g.createdAt)}`,
+            g.status === "active" && `Approved by ${(_b2 = g.approvedBy) != null ? _b2 : "\u2014"} \xB7 ends ${until(g.expiresAt)}`,
+            g.status === "expired" && `Ended ${formatDate(g.expiresAt)}`,
+            g.status === "revoked" && `Revoked ${formatDate(g.revokedAt)}`
+          ] })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(StatusPill, { status: g.status }),
+        canGrant && (g.status === "requested" || g.status === "active") && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex gap-1", children: [
+          g.status === "requested" && !mine && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", onClick: () => act(g, "approve"), children: "Approve" }),
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", variant: "ghost", onClick: () => act(g, "revoke"), children: g.status === "requested" ? "Decline" : "Revoke" })
+        ] })
+      ] }, g.id);
+    }) }),
+    requesting && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+      RequestDialog,
+      {
+        companyId,
+        companyName,
+        onClose: () => setRequesting(false),
+        onDone: async (g) => {
+          var _a2;
+          setRequesting(false);
+          setFlash({ kind: "success", msg: `Requested access to ${(_a2 = g.companyName) != null ? _a2 : "the company"}. Another admin has to approve it.` });
+          await reload();
+        }
+      }
+    )
+  ] });
+}
+function RequestDialog({ companyId, companyName, onClose, onDone }) {
+  var _a, _b;
+  const { client } = usePlatform();
+  const companies = useLoad(companyId ? null : "companies");
+  const [company, setCompany] = (0, import_react9.useState)(companyId != null ? companyId : "");
+  const [reason, setReason] = (0, import_react9.useState)("");
+  const [minutes, setMinutes] = (0, import_react9.useState)("60");
+  const [busy, setBusy] = (0, import_react9.useState)(false);
+  const [err, setErr] = (0, import_react9.useState)(null);
+  const options = ((_b = (_a = companies.data) == null ? void 0 : _a.companies) != null ? _b : []).map((c) => {
+    var _a2;
+    return { value: c.id, label: (_a2 = c.displayName) != null ? _a2 : c.slug };
+  });
+  const submit = async () => {
+    setBusy(true);
+    setErr(null);
+    try {
+      const r = await client.post("support-access", { companyId: company, reason: reason.trim(), minutes: Number(minutes) });
+      await onDone(r.grant);
+    } catch (e) {
+      setErr(errorText(e));
+    } finally {
+      setBusy(false);
+    }
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+    import_twreact_ui8.Dialog,
+    {
+      isOpen: true,
+      onClose,
+      title: "Request support access",
+      size: "sm",
+      footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex justify-end gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: onClose, children: "Cancel" }),
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { loading: busy, disabled: !company || reason.trim().length < 8, onClick: submit, children: "Request" })
+      ] }),
+      children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-4", children: [
+        err && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Alert, { variant: "error", children: err }),
+        companyId ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Company", value: companyName != null ? companyName : companyId, disabled: true }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Select, { label: "Company", searchable: true, options, loading: companies.loading, value: company, onChange: (v) => setCompany(String(v)), placeholder: "Pick a company" }),
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Textarea, { label: "Reason", rows: 3, value: reason, onChange: (e) => setReason(e.target.value), helperText: "At least 8 characters, e.g. the ticket number. The company's audit trail shows it." }),
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Select, { label: "For", options: DURATIONS, value: minutes, onChange: (v) => setMinutes(String(v)), helperText: "Counted from approval" })
+      ] })
+    }
+  );
+}
+function SupportAccessView() {
+  const { Link } = usePlatform();
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.PageHeader, { title: "Support access", subtitle: "Time-boxed access to one company, approved by a second platform admin", linkAs: Link }),
+    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(SupportGrants, {})
+  ] });
+}
+
+// src/platform/views/CompanyFeatures.jsx
+var import_jsx_runtime11 = require("react/jsx-runtime");
+var SUB_STATUSES = [
+  { value: "active", label: "Active" },
+  { value: "trial", label: "Trial" },
+  { value: "past_due", label: "Past due" },
+  { value: "cancelled", label: "Cancelled" },
+  { value: "expired", label: "Expired" }
+];
+var day = (v) => v ? String(v).slice(0, 10) : "";
+function featureTabs({ features, can }) {
+  return [
+    features.includes("plans") && can("plans.read") && { id: "subscription", label: "Subscription", Component: SubscriptionTab },
+    features.includes("domains") && can("domains.read") && { id: "domains", label: "Domains", Component: DomainsTab },
+    features.includes("settings") && can("settings.read") && { id: "settings", label: "Settings", Component: SettingsTab },
+    features.includes("support") && can("support.request") && { id: "support", label: "Support", Component: SupportTab }
+  ].filter(Boolean);
+}
+function SubscriptionTab({ company, setFlash }) {
+  var _a, _b, _c, _d, _e, _f;
+  const { client, can } = usePlatform();
+  const sensitive = useSensitive();
+  const id = encodeURIComponent(company.id);
+  const { data, error, loading, reload } = useLoad(`companies/${id}/subscription`);
+  const plans = useLoad(can("plans.write") ? "plans" : null);
+  const [editing, setEditing] = (0, import_react10.useState)(null);
+  const [busy, setBusy] = (0, import_react10.useState)(false);
+  const current = data == null ? void 0 : data.subscription;
+  const history = (_a = data == null ? void 0 : data.history) != null ? _a : [];
+  const planOptions = ((_c = (_b = plans.data) == null ? void 0 : _b.plans) != null ? _c : []).filter((p) => p.status === "active" || p.id === (current == null ? void 0 : current.planId)).map((p) => ({ value: p.id, label: `${p.name} \xB7 ${formatPrice(p.priceMinor, p.currency, p.interval)}` }));
+  const save = async () => {
+    setBusy(true);
+    try {
+      await sensitive(
+        () => client.put(`companies/${id}/subscription`, {
+          planId: editing.planId,
+          status: editing.status,
+          startsAt: editing.startsAt || void 0,
+          endsAt: editing.endsAt || null,
+          seats: editing.seats === "" ? null : Number(editing.seats),
+          notes: editing.notes || null
+        })
+      );
+      setEditing(null);
+      setFlash({ kind: "success", msg: "Subscription updated" });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(false);
+    }
+  };
+  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.ErrorState, { description: error.message, onRetry: reload });
+  if (loading && !data) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.LoadingState, { variant: "detail" });
+  const open = () => {
+    var _a2, _b2;
+    return setEditing({
+      planId: (_a2 = current == null ? void 0 : current.planId) != null ? _a2 : "",
+      status: (_b2 = current == null ? void 0 : current.status) != null ? _b2 : "active",
+      startsAt: "",
+      endsAt: day(current == null ? void 0 : current.endsAt),
+      seats: (current == null ? void 0 : current.seats) == null ? "" : String(current.seats),
+      notes: ""
+    });
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      Card,
+      {
+        title: "Current plan",
+        actions: can("plans.write") && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "outline", onClick: open, children: current ? "Change" : "Assign a plan" }),
+        children: current ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+          Facts,
+          {
+            rows: [
+              ["Plan", (_e = (_d = current.planName) != null ? _d : current.planCode) != null ? _e : current.planId],
+              ["Status", /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(StatusPill, { status: current.status }, "s")],
+              ["Started", formatDate(current.startsAt)],
+              ["Ends", current.endsAt ? formatDate(current.endsAt) : "No end date"],
+              ["Seats", (_f = current.seats) != null ? _f : "Plan default"],
+              ...current.notes ? [["Notes", current.notes]] : []
+            ]
+          }
+        ) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.EmptyState, { compact: true, icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(IconTag, { size: 24 }), title: "No plan yet", description: "This company is not on a plan." })
+      }
+    ),
+    history.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Card, { title: "History", children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("ul", { className: "divide-y divide-line", children: history.map((s) => {
+      var _a2, _b2;
+      return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("li", { className: "flex flex-wrap items-center gap-3 py-2 text-sm", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("span", { className: "min-w-0 flex-1 text-foreground", children: (_b2 = (_a2 = s.planName) != null ? _a2 : s.planCode) != null ? _b2 : s.planId }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(StatusPill, { status: s.status }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("span", { className: "text-xs text-muted", children: [
+          "from ",
+          formatDate(s.startsAt)
+        ] })
+      ] }, s.id);
+    }) }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      import_twreact_ui9.Dialog,
+      {
+        isOpen: editing !== null,
+        onClose: () => setEditing(null),
+        title: current ? "Change subscription" : "Assign a plan",
+        size: "sm",
+        footer: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { loading: busy, disabled: !(editing == null ? void 0 : editing.planId), onClick: save, children: "Save" })
+        ] }),
+        children: editing && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "space-y-4", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Select, { label: "Plan", options: planOptions, loading: plans.loading, value: editing.planId, onChange: (v) => setEditing((s) => ({ ...s, planId: String(v) })), placeholder: "Pick a plan" }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Select, { label: "Status", options: SUB_STATUSES, value: editing.status, onChange: (v) => setEditing((s) => ({ ...s, status: String(v) })) }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "grid gap-4 sm:grid-cols-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Input, { label: "Starts", type: "date", value: editing.startsAt, onChange: (e) => setEditing((s) => ({ ...s, startsAt: e.target.value })), helperText: "Empty: today" }),
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Input, { label: "Ends", type: "date", value: editing.endsAt, onChange: (e) => setEditing((s) => ({ ...s, endsAt: e.target.value })), helperText: "Empty: no end date" })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Input, { label: "Seats", type: "number", min: "1", value: editing.seats, onChange: (e) => setEditing((s) => ({ ...s, seats: e.target.value })), helperText: "Empty: the plan's default" }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Textarea, { label: "Notes", rows: 2, value: editing.notes, onChange: (e) => setEditing((s) => ({ ...s, notes: e.target.value })) })
+        ] })
+      }
+    )
+  ] });
+}
+function DomainsTab({ company, setFlash }) {
+  var _a;
+  const { client, can } = usePlatform();
+  const sensitive = useSensitive();
+  const id = encodeURIComponent(company.id);
+  const { data, error, loading, reload } = useLoad(`companies/${id}/domains`);
+  const [host, setHost] = (0, import_react10.useState)("");
+  const [adding, setAdding] = (0, import_react10.useState)(false);
+  const [busy, setBusy] = (0, import_react10.useState)(null);
+  const [removing, setRemoving] = (0, import_react10.useState)(null);
+  const writable = can("domains.write");
+  const domains = (_a = data == null ? void 0 : data.domains) != null ? _a : [];
+  const act = async (d, action) => {
+    setBusy(`${d.id}:${action}`);
+    setFlash(null);
+    try {
+      const call = () => client.post(`companies/${id}/domains/${encodeURIComponent(d.id)}`, { action });
+      const r = await (action === "remove" ? sensitive(call) : call());
+      if (action === "verify") {
+        setFlash(r.verified ? { kind: "success", msg: `${d.host} is verified` } : { kind: "warning", msg: `The TXT record for ${d.host} was not found yet. DNS changes can take a while to appear.` });
+      } else setFlash({ kind: "success", msg: action === "remove" ? `${d.host} removed` : `${d.host} is now the primary domain` });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(null);
+    }
+  };
+  const add = async () => {
+    setBusy("add");
+    setFlash(null);
+    try {
+      await client.post(`companies/${id}/domains`, { host: host.trim() });
+      setHost("");
+      setAdding(false);
+      setFlash({ kind: "success", msg: "Domain added. Publish the TXT record below, then verify." });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(null);
+    }
+  };
+  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.ErrorState, { description: error.message, onRetry: reload });
+  if (loading && !data) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.LoadingState, { variant: "table", rows: 2 });
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { className: "text-sm text-muted", children: "Custom host names for this company. A domain routes only after its TXT record is verified." }),
+      writable && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(IconPlus, {}), onClick: () => setAdding(true), children: "Add domain" })
+    ] }),
+    domains.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.EmptyState, { compact: true, icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(IconGlobe, { size: 24 }), title: "No custom domains", description: "The company signs in on the platform's own address." }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("ul", { className: "space-y-3", children: domains.map((d) => {
+      var _a2;
+      return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("li", { className: "rounded-xl border border-line bg-surface p-4", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex flex-wrap items-center gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("span", { className: "w-full break-all font-mono text-sm text-foreground sm:w-auto sm:min-w-0 sm:flex-1", children: d.host }),
+          d.primary && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Badge, { variant: "primary", size: "sm", children: "Primary" }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(StatusPill, { status: (_a2 = d.status) != null ? _a2 : d.verifiedAt ? "verified" : "pending" }),
+          writable && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex gap-1", children: [
+            !d.verifiedAt && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", loading: busy === `${d.id}:verify`, onClick: () => act(d, "verify"), children: "Verify" }),
+            d.verifiedAt && !d.primary && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "ghost", loading: busy === `${d.id}:make-primary`, onClick: () => act(d, "make-primary"), children: "Make primary" }),
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "ghost", onClick: () => setRemoving(d), children: "Remove" })
+          ] })
+        ] }),
+        d.verifiedAt && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("p", { className: "mt-1 text-xs text-muted", children: [
+          "Verified ",
+          formatDate(d.verifiedAt)
+        ] }),
+        !d.verifiedAt && d.verification && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "mt-3 space-y-2 rounded-lg bg-background p-3", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { className: "text-xs text-muted", children: "Add this TXT record at the domain's DNS provider:" }),
+          [
+            ["Name", d.verification.name],
+            ["Value", d.verification.value]
+          ].map(([k, v]) => /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex flex-wrap items-center justify-between gap-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("span", { className: "text-xs text-muted", children: k }),
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("span", { className: "flex min-w-0 items-center gap-2", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("span", { className: "break-all font-mono text-xs text-foreground", children: v }),
+              /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(CopyButton, { value: v })
+            ] })
+          ] }, k))
+        ] })
+      ] }, d.id);
+    }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      import_twreact_ui9.Dialog,
+      {
+        isOpen: adding,
+        onClose: () => setAdding(false),
+        title: "Add domain",
+        size: "sm",
+        footer: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { loading: busy === "add", disabled: !host.trim().includes("."), onClick: add, children: "Add domain" })
+        ] }),
+        children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Input, { label: "Host name", autoFocus: true, placeholder: "app.example.com", value: host, onChange: (e) => setHost(e.target.value), helperText: "The company points this host at the platform and proves it with a TXT record." })
+      }
+    ),
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      import_twreact_ui9.ConfirmDialog,
+      {
+        isOpen: removing !== null,
+        title: `Remove ${removing == null ? void 0 : removing.host}?`,
+        description: "The company can no longer sign in on this host.",
+        confirmLabel: "Remove",
+        destructive: true,
+        onCancel: () => setRemoving(null),
+        onConfirm: () => {
+          const d = removing;
+          setRemoving(null);
+          void act(d, "remove");
+        }
+      }
+    )
+  ] });
+}
+function SettingsTab({ company, setFlash }) {
+  var _a;
+  const { can } = usePlatform();
+  const { data, error, loading, reload } = useLoad("settings", { company: company.id });
+  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.ErrorState, { description: error.message, onRetry: reload });
+  if (loading && !data) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.LoadingState, { variant: "detail" });
+  const families = (_a = data == null ? void 0 : data.families) != null ? _a : [];
+  if (!families.length) return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.EmptyState, { compact: true, icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(IconSettings, { size: 24 }), title: "No settings", description: "This product defines no company settings." });
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("div", { className: "space-y-4", children: families.map((f) => /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(SettingsFamily, { family: f, companyId: company.id, version: data.version, writable: can("settings.write"), setFlash, onSaved: reload }, f.family)) });
+}
+var initialValues = (family) => Object.fromEntries(family.fields.map((f) => {
+  var _a;
+  return [f.key, f.type === "secret" ? "" : (_a = f.value) != null ? _a : f.type === "boolean" ? false : ""];
+}));
+function SettingsFamily({ family, companyId, version, writable, setFlash, onSaved }) {
+  const { client } = usePlatform();
+  const sensitive = useSensitive();
+  const [values, setValues] = (0, import_react10.useState)(() => initialValues(family));
+  const [busy, setBusy] = (0, import_react10.useState)(false);
+  (0, import_react10.useEffect)(() => setValues(initialValues(family)), [family]);
+  const changed = family.fields.filter((f) => {
+    var _a;
+    return f.type === "secret" ? values[f.key] !== "" : JSON.stringify(values[f.key]) !== JSON.stringify((_a = f.value) != null ? _a : f.type === "boolean" ? false : "");
+  });
+  const save = async () => {
+    setBusy(true);
+    setFlash(null);
+    try {
+      const body = Object.fromEntries(changed.map((f) => [f.key, f.type === "number" ? values[f.key] === "" ? null : Number(values[f.key]) : values[f.key]]));
+      await sensitive(() => client.put(`settings/${encodeURIComponent(family.family)}`, { companyId, version, values: body }));
+      setFlash({ kind: "success", msg: `${family.label} saved` });
+      await onSaved();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(false);
+    }
+  };
+  const set = (key) => (v) => setValues((s) => ({ ...s, [key]: v }));
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+    Card,
+    {
+      title: family.label,
+      actions: writable && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", loading: busy, disabled: !changed.length, onClick: save, children: "Save" }),
+      children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("div", { className: "grid gap-4 sm:grid-cols-2", children: family.fields.map((f) => {
+        var _a, _b, _c;
+        const help = [f.help, f.source === "default" ? "Using the default" : null].filter(Boolean).join(" \xB7 ") || void 0;
+        if (f.type === "boolean") {
+          return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex items-center justify-between gap-3 rounded-lg border border-line px-3 py-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "min-w-0", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("div", { className: "text-sm text-foreground", children: f.label }),
+              help && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("div", { className: "text-xs text-muted", children: help })
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Switch, { checked: Boolean(values[f.key]), disabled: !writable, onChange: set(f.key), ariaLabel: f.label })
+          ] }, f.key);
+        }
+        if (f.type === "select") {
+          return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Select, { label: f.label, options: (_a = f.options) != null ? _a : [], value: (_b = values[f.key]) != null ? _b : "", disabled: !writable, onChange: (v) => set(f.key)(String(v)), helperText: help }, f.key);
+        }
+        return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+          import_twreact_ui9.Input,
+          {
+            label: f.label,
+            type: f.type === "secret" ? "password" : f.type === "number" ? "number" : f.type === "email" ? "email" : f.type === "url" ? "url" : "text",
+            autoComplete: f.type === "secret" ? "new-password" : void 0,
+            placeholder: f.type === "secret" ? f.set ? "Configured \xB7 leave blank to keep" : "Not set" : void 0,
+            value: (_c = values[f.key]) != null ? _c : "",
+            disabled: !writable,
+            onChange: (e) => set(f.key)(e.target.value),
+            helperText: help
+          },
+          f.key
+        );
+      }) })
+    }
+  );
+}
+function SupportTab({ company }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(SupportGrants, { companyId: company.id, companyName: company.displayName });
+}
+
+// src/platform/views/CompanyDetail.jsx
+var import_jsx_runtime12 = require("react/jsx-runtime");
 var SETUP_STATES = ["draft", "provisioning", "provisioning_failed"];
 function CompanyDetailView({ companyId }) {
   var _a;
-  const { client, Link, href, can, companyTabs, companyLoginUrl, companyLoginPath } = usePlatform();
+  const { client, Link, href, can, companyTabs, companyLoginUrl, companyLoginPath, features = [] } = usePlatform();
   const sensitive = useSensitive();
   const { data, error, reload } = useLoad(`companies/${encodeURIComponent(companyId)}`);
-  const [tab, setTab] = (0, import_react9.useState)(0);
-  const [flash, setFlash] = (0, import_react9.useState)(null);
-  const [secret, setSecret] = (0, import_react9.useState)(null);
-  const run = (0, import_react9.useCallback)(
+  const [tab, setTab] = (0, import_react11.useState)(0);
+  const [flash, setFlash] = (0, import_react11.useState)(null);
+  const [secret, setSecret] = (0, import_react11.useState)(null);
+  const run = (0, import_react11.useCallback)(
     async (fn, ok, { stepUp = false } = {}) => {
       setFlash(null);
       try {
@@ -1199,69 +1737,70 @@ function CompanyDetailView({ companyId }) {
     },
     [reload, sensitive]
   );
-  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.ErrorState, { description: error.message, onRetry: reload }) });
-  if (!data) return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.LoadingState, { variant: "detail" }) });
+  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.ErrorState, { description: error.message, onRetry: reload }) });
+  if (!data) return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "mx-auto max-w-6xl px-4 py-6 sm:px-6", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.LoadingState, { variant: "detail" }) });
   const company = data.company;
   const database = (_a = company.database) != null ? _a : { configured: false };
   const ctx = { company, users: data.users, run, setFlash, setSecret, client, can, reload };
   const tabs = [
-    { id: "overview", label: "Overview", render: () => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(OverviewTab, { ...ctx }) },
-    { id: "branches", label: "Branches", render: () => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(BranchesTab, { ...ctx }) },
-    { id: "database", label: "Database", render: () => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(DatabaseTab, { ...ctx }) },
-    { id: "admins", label: "Admins", render: () => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(AdminsTab, { ...ctx }) },
+    { id: "overview", label: "Overview", render: () => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(OverviewTab, { ...ctx }) },
+    { id: "branches", label: "Branches", render: () => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(BranchesTab, { ...ctx }) },
+    { id: "database", label: "Database", render: () => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(DatabaseTab, { ...ctx }) },
+    { id: "admins", label: "Admins", render: () => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(AdminsTab, { ...ctx }) },
+    ...featureTabs({ features, can }).map(({ id, label, Component }) => ({ id, label, render: () => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Component, { ...ctx }) })),
     ...(companyTabs != null ? companyTabs : []).map((t) => ({ id: t.id, label: t.label, render: () => t.render({ company, reload, client, sensitive }) })),
-    { id: "activity", label: "Activity", render: () => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(ActivityTab, { ...ctx }) }
+    { id: "activity", label: "Activity", render: () => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ActivityTab, { ...ctx }) }
   ];
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "mx-auto max-w-6xl space-y-5 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-      import_twreact_ui8.PageHeader,
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "mx-auto max-w-6xl space-y-5 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+      import_twreact_ui10.PageHeader,
       {
         title: company.displayName,
-        subtitle: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "flex flex-wrap items-center gap-2", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "font-mono", children: companyLoginPath(company.slug) }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(StatusPill, { status: company.status }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(ModePill, { mode: database.configured ? database.mode : null })
+        subtitle: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "flex flex-wrap items-center gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "font-mono", children: companyLoginPath(company.slug) }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(StatusPill, { status: company.status }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ModePill, { mode: database.configured ? database.mode : null })
         ] }),
         back: { href: href("companies"), label: "Companies" },
         linkAs: Link
       }
     ),
-    flash && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Alert, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
-    secret && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(OneTimeSecret, { title: secret.title, loginUrl: companyLoginUrl(company.slug), email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_twreact_ui8.Tabs, { index: tab, onChange: setTab, variant: "line", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Tabs.List, { children: tabs.map((t) => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Tabs.Tab, { children: t.label }, t.id)) }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Tabs.Panels, { children: tabs.map((t, i) => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Tabs.Panel, { children: i === tab ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "pt-4", children: t.render() }) : null }, t.id)) })
+    flash && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Alert, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    secret && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(OneTimeSecret, { title: secret.title, loginUrl: companyLoginUrl(company.slug), email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_twreact_ui10.Tabs, { index: tab, onChange: setTab, variant: "line", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Tabs.List, { children: tabs.map((t) => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Tabs.Tab, { children: t.label }, t.id)) }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Tabs.Panels, { children: tabs.map((t, i) => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Tabs.Panel, { children: i === tab ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "pt-4", children: t.render() }) : null }, t.id)) })
     ] })
   ] });
 }
 function OverviewTab({ company, users, run, setSecret, client, can }) {
   var _a, _b, _c, _d, _e, _f;
   const { companyLoginUrl } = usePlatform();
-  const [confirm, setConfirm] = (0, import_react9.useState)(null);
-  const [editing, setEditing] = (0, import_react9.useState)(false);
+  const [confirm, setConfirm] = (0, import_react11.useState)(null);
+  const [editing, setEditing] = (0, import_react11.useState)(false);
   const setup = SETUP_STATES.includes(company.status);
   const writable = can("companies.write");
   const db = (_a = company.database) != null ? _a : {};
   const url = companyLoginUrl(company.slug);
   const LABEL = { active: "Activate", suspended: "Suspend", archived: "Archive" };
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-5", children: [
-      setup && writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(SetupPanel, { company, run, setSecret, client }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "space-y-5", children: [
+      setup && writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(SetupPanel, { company, run, setSecret, client }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
         Card,
         {
           title: "Company",
-          actions: writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", variant: "outline", onClick: () => setEditing(true), children: "Edit details" }),
-          children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+          actions: writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { size: "sm", variant: "outline", onClick: () => setEditing(true), children: "Edit details" }),
+          children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
             Facts,
             {
               rows: [
                 ["Name", company.displayName],
                 [
                   "Sign-in address",
-                  /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "flex items-center gap-2", children: [
-                    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "truncate font-mono text-xs", children: url }),
-                    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CopyButton, { value: url })
+                  /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "flex items-center gap-2", children: [
+                    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "truncate font-mono text-xs", children: url }),
+                    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(CopyButton, { value: url })
                   ] }, "l")
                 ],
                 ["Branches", (_c = (_b = company.branches) == null ? void 0 : _b.length) != null ? _c : "\u2014"],
@@ -1274,17 +1813,17 @@ function OverviewTab({ company, users, run, setSecret, client, can }) {
         }
       )
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Card, { title: "Lifecycle", children: setup ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-sm text-muted", children: "Activation, suspension and archiving become available once the company's database is set up." }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "mb-3 text-sm text-muted", children: "Suspending immediately blocks every sign-in and request for this company. Data is kept." }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex flex-col gap-2", children: [
-        writable && company.status !== "active" && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconPlay, {}), onClick: () => setConfirm("active"), children: "Activate" }),
-        writable && company.status === "active" && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconPause, {}), onClick: () => setConfirm("suspended"), children: "Suspend" }),
-        writable && company.status !== "archived" && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconArchive, {}), onClick: () => setConfirm("archived"), children: "Archive" })
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Card, { title: "Lifecycle", children: setup ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "text-sm text-muted", children: "Activation, suspension and archiving become available once the company's database is set up." }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_jsx_runtime12.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "mb-3 text-sm text-muted", children: "Suspending immediately blocks every sign-in and request for this company. Data is kept." }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex flex-col gap-2", children: [
+        writable && company.status !== "active" && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconPlay, {}), onClick: () => setConfirm("active"), children: "Activate" }),
+        writable && company.status === "active" && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconPause, {}), onClick: () => setConfirm("suspended"), children: "Suspend" }),
+        writable && company.status !== "archived" && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconArchive, {}), onClick: () => setConfirm("archived"), children: "Archive" })
       ] })
     ] }) }),
-    editing && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(EditDetails, { company, run, client, onClose: () => setEditing(false) }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-      import_twreact_ui8.ConfirmDialog,
+    editing && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(EditDetails, { company, run, client, onClose: () => setEditing(false) }),
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+      import_twreact_ui10.ConfirmDialog,
       {
         isOpen: confirm !== null,
         title: `${(_e = LABEL[confirm]) != null ? _e : ""} ${company.displayName}?`,
@@ -1303,11 +1842,11 @@ function OverviewTab({ company, users, run, setSecret, client, can }) {
 }
 function EditDetails({ company, run, client, onClose }) {
   const { companyLoginPath } = usePlatform();
-  const [name, setName] = (0, import_react9.useState)(company.displayName);
-  const [slug, setSlug] = (0, import_react9.useState)(company.slug);
-  const [slugState, setSlugState] = (0, import_react9.useState)({ available: true });
-  const [busy, setBusy] = (0, import_react9.useState)(false);
-  (0, import_react9.useEffect)(() => {
+  const [name, setName] = (0, import_react11.useState)(company.displayName);
+  const [slug, setSlug] = (0, import_react11.useState)(company.slug);
+  const [slugState, setSlugState] = (0, import_react11.useState)({ available: true });
+  const [busy, setBusy] = (0, import_react11.useState)(false);
+  (0, import_react11.useEffect)(() => {
     if (slug === company.slug) {
       setSlugState({ available: true });
       return void 0;
@@ -1321,17 +1860,17 @@ function EditDetails({ company, run, client, onClose }) {
     }, 350);
     return () => clearTimeout(t);
   }, [slug, company.slug, client]);
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-    import_twreact_ui8.Dialog,
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+    import_twreact_ui10.Dialog,
     {
       isOpen: true,
       onClose,
       title: "Edit company details",
       size: "md",
-      footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex justify-end gap-2", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: onClose, children: "Cancel" }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-          import_twreact_ui8.Button,
+      footer: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex justify-end gap-2", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", onClick: onClose, children: "Cancel" }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+          import_twreact_ui10.Button,
           {
             loading: busy,
             disabled: !name.trim() || slugState.available !== true,
@@ -1349,10 +1888,10 @@ function EditDetails({ company, run, client, onClose }) {
           }
         )
       ] }),
-      children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-4", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Company name", value: name, onChange: (e) => setName(e.target.value) }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-          import_twreact_ui8.Input,
+      children: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "space-y-4", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "Company name", value: name, onChange: (e) => setName(e.target.value) }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+          import_twreact_ui10.Input,
           {
             label: "URL slug",
             value: slug,
@@ -1370,10 +1909,10 @@ function SetupPanel({ company, run, setSecret, client }) {
   const provisioner = useProvisioner();
   const job = company.lastJob;
   const stored = ((_a = company.database) == null ? void 0 : _a.configured) ? company.database.mode : null;
-  const [db, setDb] = (0, import_react9.useState)({ mode: stored === "external" ? "external" : "managed", url: "", report: null, testedUrl: null });
-  const [adminName, setAdminName] = (0, import_react9.useState)("");
-  const [adminEmail, setAdminEmail] = (0, import_react9.useState)("");
-  const [busy, setBusy] = (0, import_react9.useState)(false);
+  const [db, setDb] = (0, import_react11.useState)({ mode: stored === "external" ? "external" : "managed", url: "", report: null, testedUrl: null });
+  const [adminName, setAdminName] = (0, import_react11.useState)("");
+  const [adminEmail, setAdminEmail] = (0, import_react11.useState)("");
+  const [busy, setBusy] = (0, import_react11.useState)(false);
   const ready = databaseReady(db, provisioner, { acceptStates: ["empty", "company"], keepStored: stored === "external" });
   const adminOk = !adminName.trim() && !adminEmail.trim() || adminName.trim() && EMAIL_RE.test(adminEmail.trim());
   const provision = async () => {
@@ -1394,13 +1933,13 @@ function SetupPanel({ company, run, setSecret, client }) {
     setBusy(false);
   };
   const lastError = (_b = job == null ? void 0 : job.lastError) != null ? _b : job == null ? void 0 : job.last_error;
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Card, { title: "Finish setup", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-4", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-sm text-muted", children: "This company's database is not ready yet, so nobody can sign in." }),
-    (job == null ? void 0 : job.status) === "failed" && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_twreact_ui8.Alert, { variant: "error", title: `Last attempt failed${job.step ? ` at \u201C${job.step}\u201D` : ""}`, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "block break-words font-mono text-xs", children: lastError }),
-      jobErrorHint(lastError) && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "mt-1 block", children: jobErrorHint(lastError) })
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Card, { title: "Finish setup", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "text-sm text-muted", children: "This company's database is not ready yet, so nobody can sign in." }),
+    (job == null ? void 0 : job.status) === "failed" && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_twreact_ui10.Alert, { variant: "error", title: `Last attempt failed${job.step ? ` at \u201C${job.step}\u201D` : ""}`, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "block break-words font-mono text-xs", children: lastError }),
+      jobErrorHint(lastError) && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "mt-1 block", children: jobErrorHint(lastError) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
       DatabaseChoice,
       {
         value: db,
@@ -1412,25 +1951,25 @@ function SetupPanel({ company, run, setSecret, client }) {
         compact: true
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "text-sm font-medium text-foreground", children: "First admin (recommended)" }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "mb-2 text-xs text-muted", children: "A temporary password is generated and shown once when setup finishes." }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "grid gap-3 [grid-template-columns:repeat(auto-fit,minmax(12rem,1fr))]", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { "aria-label": "First admin full name", placeholder: "Full name", value: adminName, onChange: (e) => setAdminName(e.target.value) }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { "aria-label": "First admin email", type: "email", placeholder: "email@company.com", value: adminEmail, onChange: (e) => setAdminEmail(e.target.value) })
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "text-sm font-medium text-foreground", children: "First admin (recommended)" }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "mb-2 text-xs text-muted", children: "A temporary password is generated and shown once when setup finishes." }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "grid gap-3 [grid-template-columns:repeat(auto-fit,minmax(12rem,1fr))]", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { "aria-label": "First admin full name", placeholder: "Full name", value: adminName, onChange: (e) => setAdminName(e.target.value) }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { "aria-label": "First admin email", type: "email", placeholder: "email@company.com", value: adminEmail, onChange: (e) => setAdminEmail(e.target.value) })
       ] })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex flex-wrap items-center gap-3", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { loading: busy, disabled: !ready || !adminOk, leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconRefresh, {}), onClick: provision, children: (job == null ? void 0 : job.status) === "failed" ? "Retry setup" : "Provision database" }),
-      busy && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "text-xs text-muted", children: "Applying the schema. This can take a minute\u2026" })
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex flex-wrap items-center gap-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { loading: busy, disabled: !ready || !adminOk, leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconRefresh, {}), onClick: provision, children: (job == null ? void 0 : job.status) === "failed" ? "Retry setup" : "Provision database" }),
+      busy && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "text-xs text-muted", children: "Applying the schema. This can take a minute\u2026" })
     ] })
   ] }) });
 }
 function BranchesTab({ company, run, client, can }) {
   var _a;
-  const [editing, setEditing] = (0, import_react9.useState)(null);
-  const [code, setCode] = (0, import_react9.useState)("");
-  const [name, setName] = (0, import_react9.useState)("");
+  const [editing, setEditing] = (0, import_react11.useState)(null);
+  const [code, setCode] = (0, import_react11.useState)("");
+  const [name, setName] = (0, import_react11.useState)("");
   const writable = can("companies.write");
   const branches = (_a = company.branches) != null ? _a : [];
   const open = (b) => {
@@ -1443,23 +1982,23 @@ function BranchesTab({ company, run, client, can }) {
     const ok = editing.id ? await run(() => client.patch(`companies/${company.id}/branches/${editing.id}`, { name: name.trim() }), "Branch renamed") : await run(() => client.post(`companies/${company.id}/branches`, { code: code.trim().toUpperCase(), name: name.trim() }), "Branch added");
     if (ok) setEditing(null);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
     Card,
     {
       title: "Branches",
-      actions: writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconPlus, {}), onClick: () => open(null), children: "Add branch" }),
+      actions: writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { size: "sm", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconPlus, {}), onClick: () => open(null), children: "Add branch" }),
       children: [
-        branches.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.EmptyState, { title: "No branches", compact: true }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("ul", { className: "divide-y divide-line", children: branches.map((b) => /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "w-20 shrink-0 font-mono text-xs text-muted", children: b.code }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
+        branches.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.EmptyState, { title: "No branches", compact: true }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("ul", { className: "divide-y divide-line", children: branches.map((b) => /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "w-20 shrink-0 font-mono text-xs text-muted", children: b.code }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
             b.name,
-            b.id === company.defaultBranchId && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "ml-2 text-xs text-muted", children: "default" })
+            b.id === company.defaultBranchId && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "ml-2 text-xs text-muted", children: "default" })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(StatusPill, { status: b.status }),
-          writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex gap-1", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", variant: "ghost", onClick: () => open(b), children: "Rename" }),
-            b.id !== company.defaultBranchId && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-              import_twreact_ui8.Button,
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(StatusPill, { status: b.status }),
+          writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex gap-1", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { size: "sm", variant: "ghost", onClick: () => open(b), children: "Rename" }),
+            b.id !== company.defaultBranchId && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              import_twreact_ui10.Button,
               {
                 size: "sm",
                 variant: "ghost",
@@ -1472,20 +2011,20 @@ function BranchesTab({ company, run, client, can }) {
             )
           ] })
         ] }, b.id)) }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-          import_twreact_ui8.Dialog,
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+          import_twreact_ui10.Dialog,
           {
             isOpen: editing !== null,
             onClose: () => setEditing(null),
             title: (editing == null ? void 0 : editing.id) ? `Rename ${editing.code}` : "Add branch",
             size: "sm",
-            footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex justify-end gap-2", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { disabled: !name.trim() || !(editing == null ? void 0 : editing.id) && !/^[A-Za-z0-9][A-Za-z0-9_-]{0,31}$/.test(code), onClick: save, children: "Save" })
+            footer: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex justify-end gap-2", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { disabled: !name.trim() || !(editing == null ? void 0 : editing.id) && !/^[A-Za-z0-9][A-Za-z0-9_-]{0,31}$/.test(code), onClick: save, children: "Save" })
             ] }),
-            children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-4", children: [
-              !(editing == null ? void 0 : editing.id) && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Code", value: code, onChange: (e) => setCode(e.target.value.toUpperCase()), helperText: "Letters, digits, - and _. Cannot be changed later." }),
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Name", value: name, onChange: (e) => setName(e.target.value) })
+            children: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "space-y-4", children: [
+              !(editing == null ? void 0 : editing.id) && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "Code", value: code, onChange: (e) => setCode(e.target.value.toUpperCase()), helperText: "Letters, digits, - and _. Cannot be changed later." }),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "Name", value: name, onChange: (e) => setName(e.target.value) })
             ] })
           }
         )
@@ -1496,29 +2035,29 @@ function BranchesTab({ company, run, client, can }) {
 function DatabaseTab({ company, run, setFlash, client, can }) {
   var _a, _b, _c, _d, _e;
   const db = (_a = company.database) != null ? _a : { configured: false };
-  const [busy, setBusy] = (0, import_react9.useState)(null);
-  const [steps, setSteps] = (0, import_react9.useState)(null);
-  const [replacing, setReplacing] = (0, import_react9.useState)(false);
-  const [newUrl, setNewUrl] = (0, import_react9.useState)("");
-  const [report, setReport] = (0, import_react9.useState)(null);
-  const [revealing, setRevealing] = (0, import_react9.useState)(false);
-  const [reason, setReason] = (0, import_react9.useState)("");
-  const [revealed, setRevealed] = (0, import_react9.useState)(null);
-  if (!db.configured) return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Card, { title: "Database", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-sm text-muted", children: "No database yet. Provision it from the Overview tab." }) });
+  const [busy, setBusy] = (0, import_react11.useState)(null);
+  const [steps, setSteps] = (0, import_react11.useState)(null);
+  const [replacing, setReplacing] = (0, import_react11.useState)(false);
+  const [newUrl, setNewUrl] = (0, import_react11.useState)("");
+  const [report, setReport] = (0, import_react11.useState)(null);
+  const [revealing, setRevealing] = (0, import_react11.useState)(false);
+  const [reason, setReason] = (0, import_react11.useState)("");
+  const [revealed, setRevealed] = (0, import_react11.useState)(null);
+  if (!db.configured) return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Card, { title: "Database", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "text-sm text-muted", children: "No database yet. Provision it from the Overview tab." }) });
   const writable = can("db.write");
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Card, { title: "Connection", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Card, { title: "Connection", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
         Facts,
         {
           rows: [
-            ["Type", /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(ModePill, { mode: db.mode }, "m")],
-            ["Target", /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "font-mono text-xs", children: (_b = db.target) != null ? _b : "\u2014" }, "t")],
-            ["Status", /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(StatusPill, { status: db.status }, "s")],
-            ["Health", /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { children: [
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(HealthDot, { ok: db.lastCheckOk }),
+            ["Type", /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ModePill, { mode: db.mode }, "m")],
+            ["Target", /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "font-mono text-xs", children: (_b = db.target) != null ? _b : "\u2014" }, "t")],
+            ["Status", /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(StatusPill, { status: db.status }, "s")],
+            ["Health", /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(HealthDot, { ok: db.lastCheckOk }),
               " ",
-              db.lastCheckAt && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "text-xs text-muted", children: [
+              db.lastCheckAt && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "text-xs text-muted", children: [
                 "\xB7 ",
                 timeAgo(db.lastCheckAt)
               ] })
@@ -1530,23 +2069,23 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           ]
         }
       ),
-      db.lastCheckOk === false && db.lastCheckError && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mt-4 rounded-lg bg-error-50 p-3 font-mono text-xs text-error-800", children: db.lastCheckError }),
-      steps && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("ul", { className: "mt-4 space-y-1 rounded-lg bg-background p-3 text-xs text-muted", children: steps.map((s) => /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("li", { children: [
+      db.lastCheckOk === false && db.lastCheckError && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "mt-4 rounded-lg bg-error-50 p-3 font-mono text-xs text-error-800", children: db.lastCheckError }),
+      steps && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("ul", { className: "mt-4 space-y-1 rounded-lg bg-background p-3 text-xs text-muted", children: steps.map((s) => /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("li", { children: [
         "\u2713 ",
         s
       ] }, s)) }),
-      revealed && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "mt-4 rounded-lg border border-warning-200 bg-warning-50 p-3", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mb-1 text-xs font-medium text-warning-800", children: "Database URL (audited, shown once)" }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex items-center gap-2", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("code", { className: "min-w-0 flex-1 break-all text-xs text-foreground", children: revealed }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CopyButton, { value: revealed })
+      revealed && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "mt-4 rounded-lg border border-warning-200 bg-warning-50 p-3", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "mb-1 text-xs font-medium text-warning-800", children: "Database URL (audited, shown once)" }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex items-center gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("code", { className: "min-w-0 flex-1 break-all text-xs text-foreground", children: revealed }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(CopyButton, { value: revealed })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("button", { type: "button", className: "mt-2 text-xs text-muted underline", onClick: () => setRevealed(null), children: "Hide" })
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { type: "button", className: "mt-2 text-xs text-muted underline", onClick: () => setRevealed(null), children: "Hide" })
       ] })
     ] }),
-    writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Card, { title: "Actions", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex flex-col gap-2", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-        import_twreact_ui8.Button,
+    writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Card, { title: "Actions", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex flex-col gap-2", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        import_twreact_ui10.Button,
         {
           variant: "outline",
           loading: busy === "test",
@@ -1563,8 +2102,8 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           children: "Test connection"
         }
       ),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-        import_twreact_ui8.Button,
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        import_twreact_ui10.Button,
         {
           variant: "outline",
           loading: busy === "sync",
@@ -1577,12 +2116,12 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           children: "Sync schema"
         }
       ),
-      db.mode === "external" && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: () => setReplacing(true), children: "Replace URL" }),
-      can("db.reveal") && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "ghost", onClick: () => setRevealing(true), children: "Reveal URL\u2026" }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "mt-1 text-xs text-muted", children: "Sync adds missing tables, columns and indexes. It never drops or renames anything." })
+      db.mode === "external" && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", onClick: () => setReplacing(true), children: "Replace URL" }),
+      can("db.reveal") && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "ghost", onClick: () => setRevealing(true), children: "Reveal URL\u2026" }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "mt-1 text-xs text-muted", children: "Sync adds missing tables, columns and indexes. It never drops or renames anything." })
     ] }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
-      import_twreact_ui8.Dialog,
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+      import_twreact_ui10.Dialog,
       {
         isOpen: replacing,
         onClose: () => {
@@ -1592,10 +2131,10 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
         },
         title: "Replace database URL",
         size: "md",
-        footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex justify-end gap-2", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: () => setReplacing(false), children: "Cancel" }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-            import_twreact_ui8.Button,
+        footer: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", onClick: () => setReplacing(false), children: "Cancel" }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+            import_twreact_ui10.Button,
             {
               disabled: !(report == null ? void 0 : report.ok) || report.state !== "company",
               loading: busy === "replace",
@@ -1614,11 +2153,11 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           )
         ] }),
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "mb-3 text-sm text-muted", children: "Use this after moving the database or rotating its password. The new URL must point at this company's existing database." }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex items-end gap-2", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "New database URL", type: "password", autoComplete: "off", value: newUrl, onChange: (e) => (setNewUrl(e.target.value), setReport(null)) }) }),
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-              import_twreact_ui8.Button,
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "mb-3 text-sm text-muted", children: "Use this after moving the database or rotating its password. The new URL must point at this company's existing database." }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex items-end gap-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "min-w-0 flex-1", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "New database URL", type: "password", autoComplete: "off", value: newUrl, onChange: (e) => (setNewUrl(e.target.value), setReport(null)) }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              import_twreact_ui10.Button,
               {
                 variant: "outline",
                 disabled: !newUrl.trim(),
@@ -1633,21 +2172,21 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
               }
             )
           ] }),
-          report && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(InspectResult, { report })
+          report && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(InspectResult, { report })
         ]
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
-      import_twreact_ui8.Dialog,
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+      import_twreact_ui10.Dialog,
       {
         isOpen: revealing,
         onClose: () => setRevealing(false),
         title: "Reveal database URL",
         size: "md",
-        footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex justify-end gap-2", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: () => setRevealing(false), children: "Cancel" }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-            import_twreact_ui8.Button,
+        footer: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", onClick: () => setRevealing(false), children: "Cancel" }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+            import_twreact_ui10.Button,
             {
               variant: "destructive",
               disabled: reason.trim().length < 8,
@@ -1664,8 +2203,8 @@ function DatabaseTab({ company, run, setFlash, client, can }) {
           )
         ] }),
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "mb-3 text-sm text-muted", children: "Only credential custodians can do this. The reveal is recorded in the audit log with your reason before the URL is read." }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Textarea, { label: "Reason", rows: 3, value: reason, onChange: (e) => setReason(e.target.value), helperText: "At least 8 characters, e.g. the incident or ticket number." })
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "mb-3 text-sm text-muted", children: "Only credential custodians can do this. The reveal is recorded in the audit log with your reason before the URL is read." }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Textarea, { label: "Reason", rows: 3, value: reason, onChange: (e) => setReason(e.target.value), helperText: "At least 8 characters, e.g. the incident or ticket number." })
         ]
       }
     )
@@ -1676,13 +2215,13 @@ function AdminsTab({ company, setSecret, setFlash, client, can }) {
   const sensitive = useSensitive();
   const ready = ((_a = company.database) == null ? void 0 : _a.configured) && ((_b = company.database) == null ? void 0 : _b.status) === "active";
   const { data, error, reload } = useLoad(ready ? `companies/${company.id}/admins` : null);
-  const [adding, setAdding] = (0, import_react9.useState)(false);
-  const [fullName, setFullName] = (0, import_react9.useState)("");
-  const [email, setEmail] = (0, import_react9.useState)("");
-  const [phone, setPhone] = (0, import_react9.useState)("");
-  const [busy, setBusy] = (0, import_react9.useState)(false);
+  const [adding, setAdding] = (0, import_react11.useState)(false);
+  const [fullName, setFullName] = (0, import_react11.useState)("");
+  const [email, setEmail] = (0, import_react11.useState)("");
+  const [phone, setPhone] = (0, import_react11.useState)("");
+  const [busy, setBusy] = (0, import_react11.useState)(false);
   const writable = can("companies.write");
-  if (!ready) return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Card, { title: "Company admins", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-sm text-muted", children: "Admins can be added once the company's database is provisioned." }) });
+  if (!ready) return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Card, { title: "Company admins", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "text-sm text-muted", children: "Admins can be added once the company's database is provisioned." }) });
   const act = async (a, action) => {
     var _a2;
     try {
@@ -1711,38 +2250,38 @@ function AdminsTab({ company, setSecret, setFlash, client, can }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
     Card,
     {
       title: "Company admins",
-      actions: writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(IconPlus, {}), onClick: () => setAdding(true), children: "Add admin" }),
+      actions: writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { size: "sm", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconPlus, {}), onClick: () => setAdding(true), children: "Add admin" }),
       children: [
-        error && !data ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.ErrorState, { description: error.message, onRetry: reload }) : !data ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.LoadingState, { variant: "table", rows: 2 }) : !((_c = data.admins) == null ? void 0 : _c.length) ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.EmptyState, { title: "No administrators yet", compact: true }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("ul", { className: "divide-y divide-line", children: data.admins.map((a) => /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "min-w-0 flex-1", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "truncate text-sm font-medium text-foreground", children: a.fullName }),
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "truncate text-xs text-muted", children: a.email })
+        error && !data ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.ErrorState, { description: error.message, onRetry: reload }) : !data ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.LoadingState, { variant: "table", rows: 2 }) : !((_c = data.admins) == null ? void 0 : _c.length) ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.EmptyState, { title: "No administrators yet", compact: true }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("ul", { className: "divide-y divide-line", children: data.admins.map((a) => /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("li", { className: "flex flex-wrap items-center gap-3 py-2.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "min-w-0 flex-1", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "truncate text-sm font-medium text-foreground", children: a.fullName }),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "truncate text-xs text-muted", children: a.email })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(StatusPill, { status: a.status }),
-          writable && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex gap-1", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { size: "sm", variant: "ghost", onClick: () => act(a, a.status === "active" ? "disable" : "enable"), children: a.status === "active" ? "Disable" : "Enable" })
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(StatusPill, { status: a.status }),
+          writable && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex gap-1", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { size: "sm", variant: "ghost", onClick: () => act(a, a.status === "active" ? "disable" : "enable"), children: a.status === "active" ? "Disable" : "Enable" })
           ] })
         ] }, a.id)) }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-          import_twreact_ui8.Dialog,
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+          import_twreact_ui10.Dialog,
           {
             isOpen: adding,
             onClose: () => setAdding(false),
             title: "Add company admin",
             size: "sm",
-            footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex justify-end gap-2", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Button, { loading: busy, disabled: !fullName.trim() || !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
+            footer: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex justify-end gap-2", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { loading: busy, disabled: !fullName.trim() || !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
             ] }),
-            children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "space-y-4", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Full name", autoFocus: true, value: fullName, onChange: (e) => setFullName(e.target.value) }),
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Email", type: "email", value: email, onChange: (e) => setEmail(e.target.value) }),
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Input, { label: "Phone (optional)", type: "tel", value: phone, onChange: (e) => setPhone(e.target.value) })
+            children: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "space-y-4", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "Full name", autoFocus: true, value: fullName, onChange: (e) => setFullName(e.target.value) }),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "Email", type: "email", value: email, onChange: (e) => setEmail(e.target.value) }),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { label: "Phone (optional)", type: "tel", value: phone, onChange: (e) => setPhone(e.target.value) })
             ] })
           }
         )
@@ -1754,7 +2293,7 @@ function ActivityTab({ company, client, can }) {
   var _a, _b;
   const sensitive = useSensitive();
   const { data, error, reload } = useLoad(`companies/${company.id}/activity`);
-  const [retryError, setRetryError] = (0, import_react9.useState)(null);
+  const [retryError, setRetryError] = (0, import_react11.useState)(null);
   const modeOf = (payload) => {
     try {
       const p = typeof payload === "string" ? JSON.parse(payload) : payload;
@@ -1763,27 +2302,27 @@ function ActivityTab({ company, client, can }) {
       return "managed";
     }
   };
-  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.ErrorState, { description: error.message, onRetry: reload });
-  if (!data) return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.LoadingState, { variant: "table", rows: 4 });
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Card, { title: "Provisioning jobs", children: [
-      retryError && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_twreact_ui8.Alert, { variant: "error", children: retryError }),
-      !((_a = data.jobs) == null ? void 0 : _a.length) ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-sm text-muted", children: "No provisioning jobs." }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("ul", { className: "divide-y divide-line", children: data.jobs.map((j) => {
+  if (error && !data) return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.ErrorState, { description: error.message, onRetry: reload });
+  if (!data) return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.LoadingState, { variant: "table", rows: 4 });
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "grid gap-5 [grid-template-columns:repeat(auto-fit,minmax(min(20rem,100%),1fr))]", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Card, { title: "Provisioning jobs", children: [
+      retryError && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Alert, { variant: "error", children: retryError }),
+      !((_a = data.jobs) == null ? void 0 : _a.length) ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "text-sm text-muted", children: "No provisioning jobs." }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("ul", { className: "divide-y divide-line", children: data.jobs.map((j) => {
         var _a2, _b2;
         const lastError = (_a2 = j.lastError) != null ? _a2 : j.last_error;
-        return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("li", { className: "py-2.5", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "flex flex-wrap items-center gap-2", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(StatusPill, { status: j.status }),
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "text-xs text-muted", children: [
+        return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("li", { className: "py-2.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "flex flex-wrap items-center gap-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(StatusPill, { status: j.status }),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "text-xs text-muted", children: [
               modeOf(j.payload),
               " \xB7 step ",
-              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "font-mono", children: j.step }),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "font-mono", children: j.step }),
               " \xB7 ",
               j.attempts,
               " attempt(s)"
             ] }),
-            j.status === "failed" && can("companies.write") && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-              import_twreact_ui8.Button,
+            j.status === "failed" && can("companies.write") && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              import_twreact_ui10.Button,
               {
                 size: "sm",
                 variant: "ghost",
@@ -1801,33 +2340,33 @@ function ActivityTab({ company, client, can }) {
               }
             )
           ] }),
-          lastError && j.status !== "succeeded" && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mt-1 break-words font-mono text-xs text-error-700", children: lastError }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "mt-0.5 text-xs text-muted", children: formatDate((_b2 = j.updatedAt) != null ? _b2 : j.updated_at) })
+          lastError && j.status !== "succeeded" && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "mt-1 break-words font-mono text-xs text-error-700", children: lastError }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "mt-0.5 text-xs text-muted", children: formatDate((_b2 = j.updatedAt) != null ? _b2 : j.updated_at) })
         ] }, j.id);
       }) })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Card, { title: "Audit trail", children: !((_b = data.events) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("p", { className: "text-sm text-muted", children: "No events." }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("ol", { className: "divide-y divide-line", children: data.events.map(normalizeEvent).map((e, i) => {
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Card, { title: "Audit trail", children: !((_b = data.events) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { className: "text-sm text-muted", children: "No events." }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("ol", { className: "divide-y divide-line", children: data.events.map(normalizeEvent).map((e, i) => {
       var _a2;
-      return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("li", { className: "py-2.5", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { className: "text-sm text-foreground", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("span", { className: "font-medium", children: e.actor }),
+      return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("li", { className: "py-2.5", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "text-sm text-foreground", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "font-medium", children: e.actor }),
           " ",
           describeAction(e.action),
-          e.target && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("span", { className: "text-muted", children: [
+          e.target && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "text-muted", children: [
             " \xB7 ",
             e.target
           ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("div", { className: "text-xs text-muted", children: formatDate(e.at) })
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "text-xs text-muted", children: formatDate(e.at) })
       ] }, (_a2 = e.id) != null ? _a2 : i);
     }) }) })
   ] });
 }
 
 // src/platform/views/Admins.jsx
-var import_react10 = __toESM(require("react"), 1);
-var import_twreact_ui9 = require("@dreamtree-org/twreact-ui");
-var import_jsx_runtime11 = require("react/jsx-runtime");
+var import_react12 = __toESM(require("react"), 1);
+var import_twreact_ui11 = require("@dreamtree-org/twreact-ui");
+var import_jsx_runtime13 = require("react/jsx-runtime");
 var ROLE_OPTIONS = [
   { value: "superadmin", label: "Superadmin: everything" },
   { value: "support", label: "Support: read-only" }
@@ -1837,13 +2376,13 @@ function AdminsView() {
   const { client, can, loginUrl, Link } = usePlatform();
   const sensitive = useSensitive();
   const { data, error, loading, reload } = useLoad("admins");
-  const [flash, setFlash] = (0, import_react10.useState)(null);
-  const [secret, setSecret] = (0, import_react10.useState)(null);
-  const [adding, setAdding] = (0, import_react10.useState)(false);
-  const [email, setEmail] = (0, import_react10.useState)("");
-  const [role, setRole] = (0, import_react10.useState)("superadmin");
-  const [busy, setBusy] = (0, import_react10.useState)(false);
-  const [confirm, setConfirm] = (0, import_react10.useState)(null);
+  const [flash, setFlash] = (0, import_react12.useState)(null);
+  const [secret, setSecret] = (0, import_react12.useState)(null);
+  const [adding, setAdding] = (0, import_react12.useState)(false);
+  const [email, setEmail] = (0, import_react12.useState)("");
+  const [role, setRole] = (0, import_react12.useState)("superadmin");
+  const [busy, setBusy] = (0, import_react12.useState)(false);
+  const [confirm, setConfirm] = (0, import_react12.useState)(null);
   const writable = can("admins.write");
   const act = async (a, action, extra = {}) => {
     var _a2;
@@ -1874,63 +2413,63 @@ function AdminsView() {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-      import_twreact_ui9.PageHeader,
+  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+      import_twreact_ui11.PageHeader,
       {
         title: "Platform admins",
         subtitle: "People who can create companies and manage the platform",
         linkAs: Link,
-        actions: writable && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { leftIcon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(IconPlus, {}), onClick: () => setAdding(true), children: "Add platform admin" })
+        actions: writable && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { leftIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(IconPlus, {}), onClick: () => setAdding(true), children: "Add platform admin" })
       }
     ),
-    flash && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Alert, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
-    secret && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(OneTimeSecret, { title: secret.title, loginUrl, email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
-    error && !data ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.ErrorState, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.LoadingState, { variant: "table", rows: 3 }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: ((_a = data == null ? void 0 : data.admins) != null ? _a : []).map((a) => {
+    flash && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Alert, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    secret && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(OneTimeSecret, { title: secret.title, loginUrl, email: secret.email, password: secret.password, onDone: () => setSecret(null) }),
+    error && !data ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.ErrorState, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.LoadingState, { variant: "table", rows: 3 }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: ((_a = data == null ? void 0 : data.admins) != null ? _a : []).map((a) => {
       var _a2, _b, _c;
       const me = a.id === data.me;
       const roles = Array.isArray(a.roles) ? a.roles : [];
-      return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "min-w-0 flex-1", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex flex-wrap items-center gap-2 text-sm font-medium text-foreground", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("span", { className: "truncate", children: a.email }),
-            me && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Badge, { variant: "primary", size: "sm", children: "you" })
+      return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "flex flex-wrap items-center gap-2 text-sm font-medium text-foreground", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("span", { className: "truncate", children: a.email }),
+            me && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Badge, { variant: "primary", size: "sm", children: "you" })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "text-xs text-muted", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "text-xs text-muted", children: [
             roles.length ? roles.join(", ") : "No role",
             " \xB7 last sign-in ",
             timeAgo((_a2 = a.lastLoginAt) != null ? _a2 : a.last_login_at),
             !((_b = a.totpEnrolled) != null ? _b : Number(a.strong_factor_enrolled)) && " \xB7 no authenticator yet"
           ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(StatusPill, { status: a.status }),
-        writable && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex flex-wrap gap-1", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
-          !me && ((_c = a.totpEnrolled) != null ? _c : Number(a.strong_factor_enrolled)) ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "reset-totp" }), children: "Reset authenticator" }) : null,
-          !me && (a.status === "active" ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "disable" }), children: "Disable" }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { size: "sm", variant: "ghost", onClick: () => act(a, "enable"), children: "Enable" }))
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(StatusPill, { status: a.status }),
+        writable && /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "flex flex-wrap gap-1", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { size: "sm", variant: "ghost", onClick: () => act(a, "reset-password"), children: "Reset password" }),
+          !me && ((_c = a.totpEnrolled) != null ? _c : Number(a.strong_factor_enrolled)) ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "reset-totp" }), children: "Reset authenticator" }) : null,
+          !me && (a.status === "active" ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { size: "sm", variant: "ghost", onClick: () => setConfirm({ admin: a, action: "disable" }), children: "Disable" }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { size: "sm", variant: "ghost", onClick: () => act(a, "enable"), children: "Enable" }))
         ] })
       ] }, a.id);
     }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-      import_twreact_ui9.Dialog,
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+      import_twreact_ui11.Dialog,
       {
         isOpen: adding,
         onClose: () => setAdding(false),
         title: "Add platform admin",
         size: "sm",
-        footer: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "flex justify-end gap-2", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Button, { loading: busy, disabled: !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
+        footer: /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { variant: "outline", onClick: () => setAdding(false), children: "Cancel" }),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { loading: busy, disabled: !EMAIL_RE.test(email.trim()), onClick: add, children: "Add admin" })
         ] }),
-        children: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { className: "space-y-4", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { className: "text-sm text-muted", children: "A temporary password is generated and shown once. They set up an authenticator app at first sign-in." }),
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Input, { label: "Email", type: "email", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_twreact_ui9.Select, { label: "Role", options: ROLE_OPTIONS, value: role, onChange: (v) => setRole(String(v)) })
+        children: /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "space-y-4", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("p", { className: "text-sm text-muted", children: "A temporary password is generated and shown once. They set up an authenticator app at first sign-in." }),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Input, { label: "Email", type: "email", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Select, { label: "Role", options: ROLE_OPTIONS, value: role, onChange: (v) => setRole(String(v)) })
         ] })
       }
     ),
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-      import_twreact_ui9.ConfirmDialog,
+    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+      import_twreact_ui11.ConfirmDialog,
       {
         isOpen: confirm !== null,
         title: (confirm == null ? void 0 : confirm.action) === "disable" ? `Disable ${confirm == null ? void 0 : confirm.admin.email}?` : `Reset ${confirm == null ? void 0 : confirm.admin.email}'s authenticator?`,
@@ -1949,17 +2488,17 @@ function AdminsView() {
 }
 
 // src/platform/views/Audit.jsx
-var import_react11 = __toESM(require("react"), 1);
-var import_twreact_ui10 = require("@dreamtree-org/twreact-ui");
-var import_jsx_runtime12 = require("react/jsx-runtime");
+var import_react13 = __toESM(require("react"), 1);
+var import_twreact_ui12 = require("@dreamtree-org/twreact-ui");
+var import_jsx_runtime14 = require("react/jsx-runtime");
 function AuditView() {
   const { client, Link, href } = usePlatform();
-  const [q, setQ] = (0, import_react11.useState)("");
-  const [applied, setApplied] = (0, import_react11.useState)("");
-  const [events, setEvents] = (0, import_react11.useState)([]);
-  const [cursor, setCursor] = (0, import_react11.useState)(null);
-  const [state, setState] = (0, import_react11.useState)({ loading: true, error: null });
-  const [exportError, setExportError] = (0, import_react11.useState)(null);
+  const [q, setQ] = (0, import_react13.useState)("");
+  const [applied, setApplied] = (0, import_react13.useState)("");
+  const [events, setEvents] = (0, import_react13.useState)([]);
+  const [cursor, setCursor] = (0, import_react13.useState)(null);
+  const [state, setState] = (0, import_react13.useState)({ loading: true, error: null });
+  const [exportError, setExportError] = (0, import_react13.useState)(null);
   const load = async (more = false) => {
     setState({ loading: true, error: null });
     try {
@@ -1971,7 +2510,7 @@ function AuditView() {
       setState({ loading: false, error: e });
     }
   };
-  (0, import_react11.useEffect)(() => {
+  (0, import_react13.useEffect)(() => {
     void load(false);
   }, [applied]);
   const exportCsv = async () => {
@@ -1990,18 +2529,18 @@ function AuditView() {
     }
   };
   const rows = events.map(normalizeEvent);
-  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { className: "mx-auto max-w-6xl space-y-6 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-      import_twreact_ui10.PageHeader,
+  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { className: "mx-auto max-w-6xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+      import_twreact_ui12.PageHeader,
       {
         title: "Audit log",
         subtitle: "Every platform action: who did what, to which company",
         linkAs: Link,
-        actions: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconDownload, {}), onClick: exportCsv, children: "Export CSV" })
+        actions: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.Button, { variant: "outline", leftIcon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconDownload, {}), onClick: exportCsv, children: "Export CSV" })
       }
     ),
-    exportError && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Alert, { variant: "error", children: exportError }),
-    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+    exportError && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.Alert, { variant: "error", children: exportError }),
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(
       "form",
       {
         className: "flex gap-2",
@@ -2010,50 +2549,50 @@ function AuditView() {
           setApplied(q.trim());
         },
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "flex-1", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Input, { type: "search", "aria-label": "Search the audit log", placeholder: "Search action, target or company", value: q, onChange: (e) => setQ(e.target.value) }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { type: "submit", variant: "outline", children: "Search" })
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { className: "flex-1", children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.Input, { type: "search", "aria-label": "Search the audit log", placeholder: "Search action, target or company", value: q, onChange: (e) => setQ(e.target.value) }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.Button, { type: "submit", variant: "outline", children: "Search" })
         ]
       }
     ),
-    state.error && !rows.length ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.ErrorState, { description: state.error.message, onRetry: () => load(false) }) : state.loading && !rows.length ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.LoadingState, { variant: "table", rows: 8 }) : !rows.length ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.EmptyState, { icon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(IconList, { size: 24 }), title: applied ? "Nothing matches" : "No events yet", compact: true }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_jsx_runtime12.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("ol", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: rows.map((e, i) => {
+    state.error && !rows.length ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.ErrorState, { description: state.error.message, onRetry: () => load(false) }) : state.loading && !rows.length ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.LoadingState, { variant: "table", rows: 8 }) : !rows.length ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.EmptyState, { icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconList, { size: 24 }), title: applied ? "Nothing matches" : "No events yet", compact: true }) : /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_jsx_runtime14.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("ol", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: rows.map((e, i) => {
         var _a;
-        return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("li", { className: "flex flex-wrap items-baseline gap-x-3 gap-y-1 px-4 py-2.5", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "w-40 shrink-0 text-xs text-muted", children: formatDate(e.at) }),
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("span", { className: "font-medium", children: e.actor }),
+        return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("li", { className: "flex flex-wrap items-baseline gap-x-3 gap-y-1 px-4 py-2.5", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { className: "w-40 shrink-0 text-xs text-muted", children: formatDate(e.at) }),
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("span", { className: "min-w-0 flex-1 text-sm text-foreground", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("span", { className: "font-medium", children: e.actor }),
             " ",
             describeAction(e.action),
-            e.company && e.companyId && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_jsx_runtime12.Fragment, { children: [
+            e.company && e.companyId && /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_jsx_runtime14.Fragment, { children: [
               " \xB7 ",
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Link, { href: href(`companies/${e.companyId}`), className: "text-primary-600 hover:underline", children: e.company })
+              /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(Link, { href: href(`companies/${e.companyId}`), className: "text-primary-600 hover:underline", children: e.company })
             ] }),
-            e.target && /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("span", { className: "text-muted", children: [
+            e.target && /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("span", { className: "text-muted", children: [
               " \xB7 ",
               e.target
             ] })
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("code", { className: "text-xs text-muted", children: e.action })
+          /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("code", { className: "text-xs text-muted", children: e.action })
         ] }, (_a = e.id) != null ? _a : i);
       }) }),
-      cursor && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { className: "text-center", children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_twreact_ui10.Button, { variant: "outline", loading: state.loading, onClick: () => load(true), children: "Load older" }) })
+      cursor && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { className: "text-center", children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.Button, { variant: "outline", loading: state.loading, onClick: () => load(true), children: "Load older" }) })
     ] })
   ] });
 }
 
 // src/platform/views/Security.jsx
-var import_react12 = __toESM(require("react"), 1);
-var import_twreact_ui11 = require("@dreamtree-org/twreact-ui");
-var import_jsx_runtime13 = require("react/jsx-runtime");
+var import_react14 = __toESM(require("react"), 1);
+var import_twreact_ui13 = require("@dreamtree-org/twreact-ui");
+var import_jsx_runtime15 = require("react/jsx-runtime");
 var grouped = (s) => String(s != null ? s : "").replace(/(.{4})/g, "$1 ").trim();
 function SecurityView({ gate = false }) {
   var _a, _b;
   const { client, me, reloadMe, Link } = usePlatform();
   const sensitive = useSensitive();
-  const [setup, setSetup] = (0, import_react12.useState)(null);
-  const [code, setCode] = (0, import_react12.useState)("");
-  const [busy, setBusy] = (0, import_react12.useState)(false);
-  const [error, setError] = (0, import_react12.useState)(null);
+  const [setup, setSetup] = (0, import_react14.useState)(null);
+  const [code, setCode] = (0, import_react14.useState)("");
+  const [busy, setBusy] = (0, import_react14.useState)(false);
+  const [error, setError] = (0, import_react14.useState)(null);
   const enrolled = (_a = me == null ? void 0 : me.admin) == null ? void 0 : _a.totpEnrolled;
   const begin = async () => {
     setBusy(true);
@@ -2081,36 +2620,187 @@ function SecurityView({ gate = false }) {
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "mx-auto max-w-2xl space-y-6 px-4 py-6 sm:px-6", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.PageHeader, { title: gate ? "Set up your authenticator" : "Security", subtitle: (_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.email, linkAs: Link }),
-    gate && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Alert, { variant: "info", title: "One more step", children: "The platform console needs a second factor. Set up an authenticator app (Google Authenticator, 1Password, Authy, \u2026) to continue." }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Alert, { variant: "error", children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Card, { title: "Authenticator app", children: enrolled ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("p", { className: "flex items-center gap-2 text-sm text-success-700", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(IconCheck, {}),
+  return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "mx-auto max-w-2xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_twreact_ui13.PageHeader, { title: gate ? "Set up your authenticator" : "Security", subtitle: (_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.email, linkAs: Link }),
+    gate && /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_twreact_ui13.Alert, { variant: "info", title: "One more step", children: "The platform console needs a second factor. Set up an authenticator app (Google Authenticator, 1Password, Authy, \u2026) to continue." }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_twreact_ui13.Alert, { variant: "error", children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(Card, { title: "Authenticator app", children: enrolled ? /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("p", { className: "flex items-center gap-2 text-sm text-success-700", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(IconCheck, {}),
       " An authenticator is set up. Sign-in and sensitive actions ask for its code. If you lose the device, ask another platform admin to reset it."
-    ] }) : !setup ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "space-y-3", children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("p", { className: "text-sm text-muted", children: "You'll scan or type a setup key into the app, then enter the 6-digit code it shows." }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { leftIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(IconShield, {}), loading: busy, onClick: begin, children: "Start setup" })
-    ] }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("form", { className: "space-y-4", onSubmit: verify, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("ol", { className: "list-decimal space-y-3 pl-5 text-sm text-foreground", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("li", { children: [
+    ] }) : !setup ? /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "space-y-3", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "text-sm text-muted", children: "You'll scan or type a setup key into the app, then enter the 6-digit code it shows." }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_twreact_ui13.Button, { leftIcon: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(IconShield, {}), loading: busy, onClick: begin, children: "Start setup" })
+    ] }) : /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("form", { className: "space-y-4", onSubmit: verify, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("ol", { className: "list-decimal space-y-3 pl-5 text-sm text-foreground", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("li", { children: [
           "Add an account in your authenticator app with this setup key:",
-          /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)("div", { className: "mt-2 flex flex-wrap items-center gap-2", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("code", { className: "rounded-md bg-background px-2 py-1 font-mono text-sm tracking-wider", children: grouped(setup.secret) }),
-            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(CopyButton, { value: setup.secret, label: "Copy key" }),
-            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("a", { href: setup.otpauthUrl, className: "text-xs text-primary-600 underline", children: "Open in authenticator app" })
+          /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: "mt-2 flex flex-wrap items-center gap-2", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("code", { className: "rounded-md bg-background px-2 py-1 font-mono text-sm tracking-wider", children: grouped(setup.secret) }),
+            /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(CopyButton, { value: setup.secret, label: "Copy key" }),
+            /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("a", { href: setup.otpauthUrl, className: "text-xs text-primary-600 underline", children: "Open in authenticator app" })
           ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("li", { children: "Enter the 6-digit code it shows." })
+        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("li", { children: "Enter the 6-digit code it shows." })
       ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)("div", { className: "max-w-xs", children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Input, { label: "Code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }) }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_twreact_ui11.Button, { type: "submit", loading: busy, disabled: code.length < 6, children: "Verify and finish" })
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "max-w-xs", children: /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_twreact_ui13.Input, { label: "Code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(import_twreact_ui13.Button, { type: "submit", loading: busy, disabled: code.length < 6, children: "Verify and finish" })
     ] }) })
   ] });
 }
 
+// src/platform/views/Plans.jsx
+var import_react15 = __toESM(require("react"), 1);
+var import_twreact_ui14 = require("@dreamtree-org/twreact-ui");
+var import_jsx_runtime16 = require("react/jsx-runtime");
+var INTERVALS = [
+  { value: "month", label: "Monthly" },
+  { value: "year", label: "Yearly" },
+  { value: "one-time", label: "One-time" }
+];
+var blank = { code: "", name: "", price: "0", currency: "INR", interval: "month", seats: "", limits: "", features: "" };
+function toForm(plan) {
+  var _a, _b, _c, _d, _e;
+  return {
+    code: plan.code,
+    name: plan.name,
+    price: String((Number((_a = plan.priceMinor) != null ? _a : 0) / 100).toFixed(2)).replace(/\.00$/, ""),
+    currency: (_b = plan.currency) != null ? _b : "INR",
+    interval: (_c = plan.interval) != null ? _c : "month",
+    seats: plan.seats == null ? "" : String(plan.seats),
+    limits: Object.entries((_d = plan.limits) != null ? _d : {}).map(([k, v]) => `${k} = ${v != null ? v : ""}`).join("\n"),
+    features: ((_e = plan.features) != null ? _e : []).join(", ")
+  };
+}
+function planBody(form) {
+  const limits = {};
+  for (const line of form.limits.split("\n")) {
+    const [k, ...rest] = line.split("=");
+    if (!k.trim()) continue;
+    const v = rest.join("=").trim();
+    limits[k.trim()] = v === "" ? null : Number(v);
+  }
+  return {
+    code: form.code.trim().toLowerCase(),
+    name: form.name.trim(),
+    priceMinor: Math.round(Number(form.price || 0) * 100),
+    currency: form.currency.trim().toUpperCase(),
+    interval: form.interval,
+    seats: form.seats.trim() === "" ? null : Number(form.seats),
+    limits,
+    features: form.features.split(",").map((f) => f.trim()).filter(Boolean)
+  };
+}
+function PlansView() {
+  var _a;
+  const { client, can, Link } = usePlatform();
+  const sensitive = useSensitive();
+  const { data, error, loading, reload } = useLoad("plans");
+  const [flash, setFlash] = (0, import_react15.useState)(null);
+  const [editing, setEditing] = (0, import_react15.useState)(null);
+  const [busy, setBusy] = (0, import_react15.useState)(false);
+  const writable = can("plans.write");
+  const plans = (_a = data == null ? void 0 : data.plans) != null ? _a : [];
+  const save = async () => {
+    setBusy(true);
+    setFlash(null);
+    try {
+      const body = planBody(editing.form);
+      if (editing.plan) {
+        const { code: _code, ...patch } = body;
+        await sensitive(() => client.patch(`plans/${encodeURIComponent(editing.plan.id)}`, patch));
+      } else {
+        await sensitive(() => client.post("plans", body));
+      }
+      setFlash({ kind: "success", msg: `${body.name} saved` });
+      setEditing(null);
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    } finally {
+      setBusy(false);
+    }
+  };
+  const setStatus = async (plan, status) => {
+    setFlash(null);
+    try {
+      await sensitive(() => client.patch(`plans/${encodeURIComponent(plan.id)}`, { status }));
+      setFlash({ kind: "success", msg: `${plan.name} ${status === "archived" ? "archived" : "restored"}` });
+      await reload();
+    } catch (e) {
+      const msg = errorText(e);
+      if (msg) setFlash({ kind: "error", msg });
+    }
+  };
+  const field = (key) => {
+    var _a2;
+    return {
+      value: (_a2 = editing == null ? void 0 : editing.form[key]) != null ? _a2 : "",
+      onChange: (e) => setEditing((s) => ({ ...s, form: { ...s.form, [key]: e.target.value } }))
+    };
+  };
+  const valid = editing && /^[a-z0-9][a-z0-9_-]{0,47}$/.test(editing.form.code.trim().toLowerCase()) && editing.form.name.trim() && Number(editing.form.price) >= 0;
+  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "mx-auto max-w-5xl space-y-6 px-4 py-6 sm:px-6", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+      import_twreact_ui14.PageHeader,
+      {
+        title: "Plans",
+        subtitle: "What companies can subscribe to. Archived plans stay on the companies already using them.",
+        linkAs: Link,
+        actions: writable && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Button, { leftIcon: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(IconPlus, {}), onClick: () => setEditing({ form: { ...blank } }), children: "New plan" })
+      }
+    ),
+    flash && /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Alert, { variant: flash.kind, dismissible: true, onDismiss: () => setFlash(null), children: flash.msg }),
+    error && !data ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.ErrorState, { description: error.message, onRetry: reload }) : loading && !data ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.LoadingState, { variant: "table", rows: 3 }) : plans.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.EmptyState, { icon: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(IconTag, { size: 24 }), title: "No plans yet", description: writable ? "Create the first plan companies can subscribe to." : "A superadmin creates plans." }) : /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("ul", { className: "divide-y divide-line rounded-xl border border-line bg-surface", children: plans.map((p) => {
+      var _a2, _b;
+      return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "min-w-0 flex-1", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "flex flex-wrap items-center gap-2 text-sm font-medium text-foreground", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { children: p.name }),
+            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "font-mono text-xs text-muted", children: p.code })
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "text-xs text-muted", children: [
+            formatPrice(p.priceMinor, p.currency, p.interval),
+            p.seats ? ` \xB7 ${p.seats} seats` : "",
+            Object.keys((_a2 = p.limits) != null ? _a2 : {}).length ? ` \xB7 ${Object.entries(p.limits).map(([k, v]) => `${k} ${v != null ? v : "\u221E"}`).join(", ")}` : ""
+          ] }),
+          ((_b = p.features) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("div", { className: "mt-1 text-xs text-muted", children: p.features.join(" \xB7 ") }) : null
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(StatusPill, { status: p.status }),
+        writable && /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "flex gap-1", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Button, { size: "sm", variant: "ghost", onClick: () => setEditing({ plan: p, form: toForm(p) }), children: "Edit" }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Button, { size: "sm", variant: "ghost", onClick: () => setStatus(p, p.status === "archived" ? "active" : "archived"), children: p.status === "archived" ? "Restore" : "Archive" })
+        ] })
+      ] }, p.id);
+    }) }),
+    /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(
+      import_twreact_ui14.Dialog,
+      {
+        isOpen: editing !== null,
+        onClose: () => setEditing(null),
+        title: (editing == null ? void 0 : editing.plan) ? `Edit ${editing.plan.name}` : "New plan",
+        size: "md",
+        footer: /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "flex justify-end gap-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Button, { variant: "outline", onClick: () => setEditing(null), children: "Cancel" }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Button, { loading: busy, disabled: !valid, onClick: save, children: "Save plan" })
+        ] }),
+        children: editing && /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "grid gap-4 sm:grid-cols-2", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Input, { label: "Name", autoFocus: true, ...field("name") }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Input, { label: "Code", disabled: Boolean(editing.plan), helperText: editing.plan ? "Fixed once created" : "Lowercase, e.g. pro or team-yearly", ...field("code") }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Input, { label: "Price", type: "number", min: "0", step: "0.01", ...field("price") }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Input, { label: "Currency", maxLength: 3, ...field("currency") }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Select, { label: "Billing", options: INTERVALS, value: editing.form.interval, onChange: (v) => setEditing((s) => ({ ...s, form: { ...s.form, interval: String(v) } })) }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Input, { label: "Seats", type: "number", min: "1", helperText: "Leave empty for no seat limit", ...field("seats") }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("div", { className: "sm:col-span-2", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Textarea, { label: "Limits", rows: 3, placeholder: "users = 10\nbranches =", helperText: "One per line: name = number. Leave the number empty for unlimited.", ...field("limits") }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("div", { className: "sm:col-span-2", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(import_twreact_ui14.Input, { label: "Features", placeholder: "gst, reports, api", helperText: "Comma-separated", ...field("features") }) })
+        ] })
+      }
+    )
+  ] });
+}
+
 // src/platform/PlatformConsole.jsx
-var import_jsx_runtime14 = require("react/jsx-runtime");
+var import_jsx_runtime17 = require("react/jsx-runtime");
 var trim = (s) => String(s != null ? s : "").replace(/^\/+|\/+$/g, "");
 function matchConsoleRoute(rel, pages = []) {
   const parts = trim(rel).split("/").filter(Boolean);
@@ -2122,7 +2812,8 @@ function matchConsoleRoute(rel, pages = []) {
     if (parts[1] === "new" && parts.length === 2) return { view: "new-company" };
     if (parts.length === 2) return { view: "company", id: decodeURIComponent(parts[1]) };
   }
-  if (parts.length === 1 && ["admins", "audit", "security"].includes(parts[0])) return { view: parts[0] };
+  if (parts.length === 1 && ["admins", "audit", "security", "plans"].includes(parts[0])) return { view: parts[0] };
+  if (parts.length === 1 && parts[0] === "support-access") return { view: "support" };
   return { view: "not-found" };
 }
 function PlatformConsole({
@@ -2148,25 +2839,25 @@ function PlatformConsole({
   const browser = useBrowserLocation(!routed);
   const pathname = routed ? givenPath : browser.pathname;
   const navigate = givenNavigate != null ? givenNavigate : browser.navigate;
-  const base2 = `/${trim(basePath)}`.replace(/\/$/, "") || "";
-  const client = (0, import_react13.useMemo)(
-    () => given != null ? given : createPlatformClient({ basePath: apiBasePath, loginPath: loginPath != null ? loginPath : `${base2}/login` }),
-    [given, apiBasePath, loginPath, base2]
+  const base3 = `/${trim(basePath)}`.replace(/\/$/, "") || "";
+  const client = (0, import_react16.useMemo)(
+    () => given != null ? given : createPlatformClient({ basePath: apiBasePath, loginPath: loginPath != null ? loginPath : `${base3}/login` }),
+    [given, apiBasePath, loginPath, base3]
   );
-  const Link = (0, import_react13.useMemo)(() => makeLink(linkAs, navigate), [linkAs, navigate]);
-  const [me, setMe] = (0, import_react13.useState)(initialMe);
-  const reloadMe = (0, import_react13.useCallback)(async () => {
+  const Link = (0, import_react16.useMemo)(() => makeLink(linkAs, navigate), [linkAs, navigate]);
+  const [me, setMe] = (0, import_react16.useState)(initialMe);
+  const reloadMe = (0, import_react16.useCallback)(async () => {
     try {
       setMe(await client.get("me"));
     } catch (e) {
       if (e.status !== 401) setMe(null);
     }
   }, [client]);
-  (0, import_react13.useEffect)(() => {
+  (0, import_react16.useEffect)(() => {
     void reloadMe();
   }, [reloadMe]);
-  const href = (0, import_react13.useCallback)((rel2 = "") => `${base2}/${trim(rel2)}`.replace(/\/$/, "") || "/", [base2]);
-  const companyLoginPath = (0, import_react13.useCallback)(
+  const href = (0, import_react16.useCallback)((rel2 = "") => `${base3}/${trim(rel2)}`.replace(/\/$/, "") || "/", [base3]);
+  const companyLoginPath = (0, import_react16.useCallback)(
     (slug) => {
       var _a2, _b2;
       const pattern = (_b2 = loginPathOpt != null ? loginPathOpt : (_a2 = me == null ? void 0 : me.app) == null ? void 0 : _a2.companyLoginPath) != null ? _b2 : "/c/:slug/login";
@@ -2175,7 +2866,7 @@ function PlatformConsole({
     [loginPathOpt, me]
   );
   const origin = typeof window === "undefined" ? "" : window.location.origin;
-  const can = (0, import_react13.useCallback)((perm) => (me == null ? void 0 : me.permissions) ? me.permissions.includes(perm) : true, [me]);
+  const can = (0, import_react16.useCallback)((perm) => (me == null ? void 0 : me.permissions) ? me.permissions.includes(perm) : true, [me]);
   const enabled = enabledFeatures(features, me);
   const visiblePages = pages.filter((p) => (!p.feature || enabled.includes(p.feature)) && (!p.permission || can(p.permission)));
   const signOut = async () => {
@@ -2183,20 +2874,22 @@ function PlatformConsole({
       await client.post("auth/logout", {}, { skipAuthRedirect: true });
     } finally {
       if (onSignOut) onSignOut();
-      else if (typeof window !== "undefined") window.location.assign(loginPath != null ? loginPath : `${base2}/login`);
+      else if (typeof window !== "undefined") window.location.assign(loginPath != null ? loginPath : `${base3}/login`);
     }
   };
-  const rel = pathname.startsWith(base2) ? pathname.slice(base2.length) : pathname;
+  const rel = pathname.startsWith(base3) ? pathname.slice(base3.length) : pathname;
   const route = matchConsoleRoute(rel, visiblePages);
   const gate = me && me.access && me.access.console === false;
   const active = (prefix) => prefix === "" ? route.view === "overview" : trim(rel) === prefix || trim(rel).startsWith(`${prefix}/`);
-  const nav = gate ? [{ id: "security", label: "Set up authenticator", href: href("security"), icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconShield, {}), active: true }] : [
-    enabled.includes("overview") && { id: "overview", label: "Overview", href: href(""), icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconDashboard, {}), active: active("") },
-    enabled.includes("companies") && { id: "companies", label: "Companies", href: href("companies"), icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconBuilding, {}), active: active("companies") },
+  const nav = gate ? [{ id: "security", label: "Set up authenticator", href: href("security"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconShield, {}), active: true }] : [
+    enabled.includes("overview") && { id: "overview", label: "Overview", href: href(""), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconDashboard, {}), active: active("") },
+    enabled.includes("companies") && { id: "companies", label: "Companies", href: href("companies"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconBuilding, {}), active: active("companies") },
     ...visiblePages.map((p) => ({ id: `page:${p.path}`, label: p.label, href: href(p.path), icon: p.icon, group: p.group, active: active(trim(p.path)) })),
-    enabled.includes("audit") && can("audit.read") && { id: "audit", label: "Audit log", href: href("audit"), icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconList, {}), active: active("audit"), group: "Platform" },
-    enabled.includes("admins") && can("admins.read") && { id: "admins", label: "Platform admins", href: href("admins"), icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconUsers, {}), active: active("admins"), group: "Platform" },
-    { id: "security", label: "Security", href: href("security"), icon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(IconShield, {}), active: active("security"), group: "Platform" }
+    enabled.includes("plans") && can("plans.read") && { id: "plans", label: "Plans", href: href("plans"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconTag, {}), active: active("plans") },
+    enabled.includes("support") && can("support.request") && { id: "support", label: "Support access", href: href("support-access"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconLifebuoy, {}), active: active("support-access") },
+    enabled.includes("audit") && can("audit.read") && { id: "audit", label: "Audit log", href: href("audit"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconList, {}), active: active("audit"), group: "Platform" },
+    enabled.includes("admins") && can("admins.read") && { id: "admins", label: "Platform admins", href: href("admins"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconUsers, {}), active: active("admins"), group: "Platform" },
+    { id: "security", label: "Security", href: href("security"), icon: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(IconShield, {}), active: active("security"), group: "Platform" }
   ].filter(Boolean);
   const value = {
     client,
@@ -2207,36 +2900,39 @@ function PlatformConsole({
     navigate,
     can,
     companyTabs,
+    features: enabled,
     companyLoginPath,
     companyLoginUrl: (slug) => `${origin}${companyLoginPath(slug)}`,
-    loginUrl: `${origin}${loginPath != null ? loginPath : `${base2}/login`}`,
+    loginUrl: `${origin}${loginPath != null ? loginPath : `${base3}/login`}`,
     brand,
     appName: appName != null ? appName : (_a = me == null ? void 0 : me.app) == null ? void 0 : _a.name
   };
   let body;
-  if (me === void 0) body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { className: "p-6", children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.LoadingState, { variant: "stats" }) });
-  else if (gate) body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(SecurityView, { gate: true });
-  else if (route.view === "overview") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(OverviewView, {});
-  else if (route.view === "companies") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(CompaniesView, {});
-  else if (route.view === "new-company") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(NewCompanyView, {});
-  else if (route.view === "company") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(CompanyDetailView, { companyId: route.id }, route.id);
-  else if (route.view === "admins") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(AdminsView, {});
-  else if (route.view === "audit") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(AuditView, {});
-  else if (route.view === "security") body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(SecurityView, {});
+  if (me === void 0) body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("div", { className: "p-6", children: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui15.LoadingState, { variant: "stats" }) });
+  else if (gate) body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(SecurityView, { gate: true });
+  else if (route.view === "overview") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(OverviewView, {});
+  else if (route.view === "companies") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(CompaniesView, {});
+  else if (route.view === "new-company") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(NewCompanyView, {});
+  else if (route.view === "company") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(CompanyDetailView, { companyId: route.id }, route.id);
+  else if (route.view === "admins") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(AdminsView, {});
+  else if (route.view === "audit") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(AuditView, {});
+  else if (route.view === "security") body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(SecurityView, {});
+  else if (route.view === "plans" && enabled.includes("plans") && can("plans.read")) body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(PlansView, {});
+  else if (route.view === "support" && enabled.includes("support") && can("support.request")) body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(SupportAccessView, {});
   else if (route.view === "page") body = route.page.render({ client, path: route.rest, navigate, href, me });
-  else body = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { className: "p-6", children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_twreact_ui12.EmptyState, { title: "Page not found", description: "This console page does not exist." }) });
-  return /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(PlatformProvider, { value, children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(StepUpProvider, { client, totpEnrolled: Boolean((_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.totpEnrolled), children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(PlatformShell, { brand, appName: value.appName, nav, adminEmail: (_d = (_c = me == null ? void 0 : me.admin) == null ? void 0 : _c.email) != null ? _d : adminEmail, onSignOut: signOut, linkAs: Link, pageTitle: (_e = nav.find((n) => n.active)) == null ? void 0 : _e.label, children: body }) }) });
+  else body = /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("div", { className: "p-6", children: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui15.EmptyState, { title: "Page not found", description: "This console page does not exist." }) });
+  return /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(PlatformProvider, { value, children: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(StepUpProvider, { client, totpEnrolled: Boolean((_b = me == null ? void 0 : me.admin) == null ? void 0 : _b.totpEnrolled), children: /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(PlatformShell, { brand, appName: value.appName, nav, adminEmail: (_d = (_c = me == null ? void 0 : me.admin) == null ? void 0 : _c.email) != null ? _d : adminEmail, onSignOut: signOut, linkAs: Link, pageTitle: (_e = nav.find((n) => n.active)) == null ? void 0 : _e.label, children: body }) }) });
 }
 
 // src/platform/PlatformLogin.jsx
-var import_react17 = __toESM(require("react"), 1);
-var import_twreact_ui13 = require("@dreamtree-org/twreact-ui");
+var import_react22 = __toESM(require("react"), 1);
+var import_twreact_ui16 = require("@dreamtree-org/twreact-ui");
 
 // src/AuthShell.jsx
-var import_react16 = require("react");
+var import_react21 = require("react");
 
 // src/DemoAccounts.jsx
-var import_react14 = require("react");
+var import_react17 = require("react");
 
 // src/demoFill.js
 function normalizeDemoAccounts(data) {
@@ -2250,12 +2946,12 @@ function normalizeDemoAccounts(data) {
 }
 
 // src/DemoAccounts.jsx
-var import_jsx_runtime15 = require("react/jsx-runtime");
+var import_jsx_runtime18 = require("react/jsx-runtime");
 function DemoAccounts({ load, onSelect, className = "" }) {
-  const [state, setState] = (0, import_react14.useState)({ status: "loading", accounts: [] });
-  const [picked, setPicked] = (0, import_react14.useState)(null);
-  const loadRef = (0, import_react14.useRef)(load);
-  (0, import_react14.useEffect)(() => {
+  const [state, setState] = (0, import_react17.useState)({ status: "loading", accounts: [] });
+  const [picked, setPicked] = (0, import_react17.useState)(null);
+  const loadRef = (0, import_react17.useRef)(load);
+  (0, import_react17.useEffect)(() => {
     let live = true;
     Promise.resolve().then(() => loadRef.current()).then((data) => live && setState({ status: "ready", ...normalizeDemoAccounts(data) })).catch(() => live && setState({ status: "ready", accounts: [] }));
     return () => {
@@ -2267,10 +2963,10 @@ function DemoAccounts({ load, onSelect, className = "" }) {
     setPicked(i);
     onSelect == null ? void 0 : onSelect(account);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)("div", { className: `dt-auth-demo ${className}`, "aria-busy": state.status === "loading" || void 0, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "dt-auth-demo-label", children: "Demo accounts" }),
-    state.status === "loading" ? /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "dt-auth-demo-chips", "aria-hidden": "true", children: [0, 1, 2].map((i) => /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("span", { className: "dt-auth-demo-chip dt-auth-demo-chip--skeleton" }, i)) }) : /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(import_jsx_runtime15.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("div", { className: "dt-auth-demo-chips", children: state.accounts.map((a, i) => /* @__PURE__ */ (0, import_jsx_runtime15.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)("div", { className: `dt-auth-demo ${className}`, "aria-busy": state.status === "loading" || void 0, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("p", { className: "dt-auth-demo-label", children: "Demo accounts" }),
+    state.status === "loading" ? /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("div", { className: "dt-auth-demo-chips", "aria-hidden": "true", children: [0, 1, 2].map((i) => /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("span", { className: "dt-auth-demo-chip dt-auth-demo-chip--skeleton" }, i)) }) : /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)(import_jsx_runtime18.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("div", { className: "dt-auth-demo-chips", children: state.accounts.map((a, i) => /* @__PURE__ */ (0, import_jsx_runtime18.jsx)(
         "button",
         {
           type: "button",
@@ -2282,22 +2978,125 @@ function DemoAccounts({ load, onSelect, className = "" }) {
         },
         `${a.label}-${a.identifier}`
       )) }),
-      /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("p", { className: "dt-auth-demo-note", children: state.sharedPassword ? /* @__PURE__ */ (0, import_jsx_runtime15.jsxs)(import_jsx_runtime15.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("p", { className: "dt-auth-demo-note", children: state.sharedPassword ? /* @__PURE__ */ (0, import_jsx_runtime18.jsxs)(import_jsx_runtime18.Fragment, { children: [
         "Shared password ",
-        /* @__PURE__ */ (0, import_jsx_runtime15.jsx)("code", { children: state.sharedPassword }),
+        /* @__PURE__ */ (0, import_jsx_runtime18.jsx)("code", { children: state.sharedPassword }),
         " \u2014 tap a role to fill."
       ] }) : "Tap a role to fill." })
     ] })
   ] });
 }
 
+// src/DreamtreeSso.jsx
+var import_react19 = require("react");
+
+// src/sso.js
+function decodeKey(part) {
+  const key = part.split("=")[0];
+  try {
+    return decodeURIComponent(key.replace(/\+/g, " "));
+  } catch {
+    return key;
+  }
+}
+function buildSsoUrl(startUrl, { returnTo, companySlug } = {}) {
+  const raw = String(startUrl != null ? startUrl : "");
+  const hashAt = raw.indexOf("#");
+  const hash = hashAt === -1 ? "" : raw.slice(hashAt);
+  const beforeHash = hashAt === -1 ? raw : raw.slice(0, hashAt);
+  const queryAt = beforeHash.indexOf("?");
+  const path = queryAt === -1 ? beforeHash : beforeHash.slice(0, queryAt);
+  const query = queryAt === -1 ? "" : beforeHash.slice(queryAt + 1);
+  const add = [
+    ["return_to", returnTo],
+    ["dt_company", companySlug]
+  ].filter(([, v]) => v != null && v !== "");
+  const replaced = new Set(add.map(([k]) => k));
+  const params = query.split("&").filter((p) => p && !replaced.has(decodeKey(p))).concat(add.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`));
+  return `${path}${params.length ? `?${params.join("&")}` : ""}${hash}`;
+}
+
+// src/icons.jsx
+var import_react18 = require("react");
+var import_jsx_runtime19 = require("react/jsx-runtime");
+var base2 = {
+  viewBox: "0 0 24 24",
+  fill: "none",
+  stroke: "currentColor",
+  strokeWidth: 2,
+  strokeLinecap: "round",
+  strokeLinejoin: "round",
+  "aria-hidden": "true",
+  focusable: "false"
+};
+var make2 = (paths) => function Icon({ size = 16, className = "dt-lp-icon" }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("svg", { ...base2, width: size, height: size, className, children: paths });
+};
+var ArrowRight = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M5 12h14M13 6l6 6-6 6" }));
+var ChevronRight = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "m9 6 6 6-6 6" }));
+var Check = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M20 6 9 17l-5-5" }));
+var Help = make2(
+  /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("circle", { cx: "12", cy: "12", r: "10" }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M9.1 9a3 3 0 0 1 5.8 1c0 2-3 3-3 3M12 17h.01" })
+  ] })
+);
+var Alert9 = make2(
+  /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M10.3 3.9 1.8 18a2 2 0 0 0 1.7 3h17a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0Z" }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M12 9v4M12 17h.01" })
+  ] })
+);
+var MenuIcon = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M4 6h16M4 12h16M4 18h16" }));
+var Close = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M18 6 6 18M6 6l12 12" }));
+var Calendar = make2(
+  /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("rect", { x: "3", y: "4", width: "18", height: "18", rx: "2" }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M16 2v4M8 2v4M3 10h18m-12 6 2 2 4-4" })
+  ] })
+);
+
+// src/DreamtreeSso.jsx
+var import_jsx_runtime20 = require("react/jsx-runtime");
+var DEFAULT_SSO_LABEL = "Continue with Dreamtree";
+function DreamtreeSso({ provider, children }) {
+  const { startUrl, mode, label = DEFAULT_SSO_LABEL, companySlug, returnTo } = provider;
+  const isSso = mode === "sso";
+  const autoRedirect = isSso && provider.autoRedirect !== false;
+  const href = buildSsoUrl(startUrl, { returnTo, companySlug });
+  const redirected = (0, import_react19.useRef)(false);
+  (0, import_react19.useEffect)(() => {
+    if (!autoRedirect || redirected.current) return;
+    redirected.current = true;
+    window.location.assign(href);
+  }, [autoRedirect, href]);
+  const button = /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("a", { className: "dt-auth-sso-btn", href, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { children: label }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(ArrowRight, { size: 16, className: "dt-auth-sso-icon" })
+  ] });
+  if (isSso) {
+    return /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "dt-auth-sso dt-auth-sso--only", children: [
+      autoRedirect ? /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("p", { className: "dt-auth-sso-status", role: "status", "aria-live": "polite", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "dt-auth-sso-spinner", "aria-hidden": "true" }),
+        "Redirecting to Dreamtree ID\u2026"
+      ] }) : null,
+      button
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_jsx_runtime20.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "dt-auth-sso", children: button }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "dt-auth-or", children: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { children: "or" }) }),
+    children
+  ] });
+}
+
 // src/useTapReveal.js
-var import_react15 = require("react");
+var import_react20 = require("react");
 function useTapReveal({ taps = 4, windowMs = 1500 } = {}) {
-  const [revealed, setRevealed] = (0, import_react15.useState)(false);
-  const count = (0, import_react15.useRef)(0);
-  const last = (0, import_react15.useRef)(0);
-  const onClick = (0, import_react15.useCallback)(() => {
+  const [revealed, setRevealed] = (0, import_react20.useState)(false);
+  const count = (0, import_react20.useRef)(0);
+  const last = (0, import_react20.useRef)(0);
+  const onClick = (0, import_react20.useCallback)(() => {
     if (revealed) return;
     const now = Date.now();
     count.current = now - last.current <= windowMs ? count.current + 1 : 1;
@@ -2308,7 +3107,7 @@ function useTapReveal({ taps = 4, windowMs = 1500 } = {}) {
 }
 
 // src/AuthShell.jsx
-var import_jsx_runtime16 = require("react/jsx-runtime");
+var import_jsx_runtime21 = require("react/jsx-runtime");
 var DEFAULT_LEGAL = [
   { label: "Privacy Policy", href: "/privacy" },
   { label: "Terms", href: "/terms" },
@@ -2316,10 +3115,10 @@ var DEFAULT_LEGAL = [
 ];
 function BrandMark({ brand, size }) {
   if (brand.logoSrc) {
-    return /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("img", { className: "dt-auth-mark-img", src: brand.logoSrc, alt: "", width: size, height: size });
+    return /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("img", { className: "dt-auth-mark-img", src: brand.logoSrc, alt: "", width: size, height: size });
   }
-  if (brand.mark) return /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "dt-auth-mark-node", children: brand.mark });
-  return /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "dt-auth-monogram", style: { width: size, height: size }, "aria-hidden": "true", children: brand.name.charAt(0) });
+  if (brand.mark) return /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-mark-node", children: brand.mark });
+  return /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-monogram", style: { width: size, height: size }, "aria-hidden": "true", children: brand.name.charAt(0) });
 }
 function brandStyle(brand) {
   return {
@@ -2338,52 +3137,53 @@ function AuthShell({
   legalLinks = DEFAULT_LEGAL,
   linkComponent: LinkComponent,
   className = "",
-  demoAccounts
+  demoAccounts,
+  ssoProvider
 }) {
   var _a, _b;
-  const headingId = (0, import_react16.useId)();
+  const headingId = (0, import_react21.useId)();
   const { revealed, tapProps } = useTapReveal({ taps: (_a = demoAccounts == null ? void 0 : demoAccounts.taps) != null ? _a : 4 });
   const isPlatform = variant === "platform";
   const headline = isPlatform ? brand.platformHeadline || "Platform administration" : brand.headline;
   const pitch = isPlatform ? brand.platformPitch || `Super administrator console for ${brand.name}. Every action here is audited.` : brand.pitch;
-  const renderLink = (l) => LinkComponent ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(LinkComponent, { to: l.href, href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href) : /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("a", { href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href);
-  return /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(
+  const renderLink = (l) => LinkComponent ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(LinkComponent, { to: l.href, href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href) : /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("a", { href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href);
+  return /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)(
     "div",
     {
       className: `dt-auth ${isPlatform ? "dt-auth--platform" : ""} ${className}`,
       style: brandStyle(brand),
       "data-product": brand.id,
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("aside", { className: "dt-auth-panel", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("a", { href: "/", className: "dt-auth-brand", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(BrandMark, { brand, size: 28 }),
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
-            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("aside", { className: "dt-auth-panel", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("a", { href: "/", className: "dt-auth-brand", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(BrandMark, { brand, size: 28 }),
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
+            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "dt-auth-pitch", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h2", { children: headline }),
-            pitch ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { children: pitch }) : null,
-            !isPlatform && ((_b = brand.points) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("ul", { children: brand.points.map((p) => /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("li", { children: p }, p)) }) : null
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("div", { className: "dt-auth-pitch", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("h2", { children: headline }),
+            pitch ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("p", { children: pitch }) : null,
+            !isPlatform && ((_b = brand.points) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("ul", { children: brand.points.map((p) => /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("li", { children: p }, p)) }) : null
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { className: "dt-auth-panel-foot", children: brand.category || "by Dreamtree-Org" })
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("p", { className: "dt-auth-panel-foot", children: brand.category || "by Dreamtree-Org" })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("main", { className: "dt-auth-main", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("div", { className: "dt-auth-column", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("a", { href: "/", className: "dt-auth-brand dt-auth-brand--mobile", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(BrandMark, { brand, size: 24 }),
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
-            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("main", { className: "dt-auth-main", children: /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("div", { className: "dt-auth-column", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("a", { href: "/", className: "dt-auth-brand dt-auth-brand--mobile", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(BrandMark, { brand, size: 24 }),
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
+            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("section", { className: "dt-auth-card", "aria-labelledby": headingId, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("header", { className: "dt-auth-head", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("h1", { id: headingId, ...demoAccounts ? tapProps : {}, children: title }),
-              subtitle ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("p", { children: subtitle }) : null
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("section", { className: "dt-auth-card", "aria-labelledby": headingId, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("header", { className: "dt-auth-head", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("h1", { id: headingId, ...demoAccounts ? tapProps : {}, children: title }),
+              subtitle ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("p", { children: subtitle }) : null
             ] }),
-            children,
-            demoAccounts && revealed ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(DemoAccounts, { load: demoAccounts.load, onSelect: demoAccounts.onSelect }) : null
+            ssoProvider ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(DreamtreeSso, { provider: ssoProvider, children }) : children,
+            demoAccounts && revealed && (ssoProvider == null ? void 0 : ssoProvider.mode) !== "sso" ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(DemoAccounts, { load: demoAccounts.load, onSelect: demoAccounts.onSelect }) : null
           ] }),
-          footer ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("div", { className: "dt-auth-footer", children: footer }) : null,
-          (legalLinks == null ? void 0 : legalLinks.length) ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("nav", { className: "dt-auth-legal", "aria-label": "Legal", children: legalLinks.map((l, i) => /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)("span", { className: "dt-auth-legal-item", children: [
-            i > 0 ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)("span", { "aria-hidden": "true", children: "\xB7" }) : null,
+          footer ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("div", { className: "dt-auth-footer", children: footer }) : null,
+          (legalLinks == null ? void 0 : legalLinks.length) ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("nav", { className: "dt-auth-legal", "aria-label": "Legal", children: legalLinks.map((l, i) => /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("span", { className: "dt-auth-legal-item", children: [
+            i > 0 ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { "aria-hidden": "true", children: "\xB7" }) : null,
             renderLink(l)
           ] }, l.href)) }) : null
         ] }) })
@@ -2393,17 +3193,17 @@ function AuthShell({
 }
 
 // src/platform/PlatformLogin.jsx
-var import_jsx_runtime17 = require("react/jsx-runtime");
+var import_jsx_runtime22 = require("react/jsx-runtime");
 function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo = "/platform", title = "Platform administration", subtitle = "Administrator sign-in", linkComponent, legalLinks }) {
-  const client = (0, import_react17.useMemo)(() => given != null ? given : createPlatformClient({ basePath, onUnauthorized: () => {
+  const client = (0, import_react22.useMemo)(() => given != null ? given : createPlatformClient({ basePath, onUnauthorized: () => {
   } }), [given, basePath]);
-  const [step, setStep] = (0, import_react17.useState)("password");
-  const [email, setEmail] = (0, import_react17.useState)("");
-  const [password, setPassword] = (0, import_react17.useState)("");
-  const [ticket, setTicket] = (0, import_react17.useState)(null);
-  const [code, setCode] = (0, import_react17.useState)("");
-  const [busy, setBusy] = (0, import_react17.useState)(false);
-  const [error, setError] = (0, import_react17.useState)(null);
+  const [step, setStep] = (0, import_react22.useState)("password");
+  const [email, setEmail] = (0, import_react22.useState)("");
+  const [password, setPassword] = (0, import_react22.useState)("");
+  const [ticket, setTicket] = (0, import_react22.useState)(null);
+  const [code, setCode] = (0, import_react22.useState)("");
+  const [busy, setBusy] = (0, import_react22.useState)(false);
+  const [error, setError] = (0, import_react22.useState)(null);
   const done = (res) => {
     if (onSignedIn) onSignedIn(res);
     else if (typeof window !== "undefined") window.location.assign(redirectTo);
@@ -2443,18 +3243,18 @@ function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(AuthShell, { brand, variant: "platform", title, subtitle, linkComponent, legalLinks, children: step === "password" ? /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("form", { onSubmit: submitPassword, className: "flex flex-col gap-4", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Input, { label: "Admin email", type: "email", autoComplete: "username", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Input, { label: "Password", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Alert, { variant: "error", children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Button, { type: "submit", loading: busy, disabled: !email || !password, fullWidth: true, children: "Sign in" })
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime17.jsxs)("form", { onSubmit: submitCode, className: "flex flex-col gap-4", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)("p", { className: "text-sm", children: "Enter the 6-digit code from your authenticator app." }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Input, { label: "Authenticator code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Alert, { variant: "error", children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(import_twreact_ui13.Button, { type: "submit", loading: busy, disabled: code.length < 6, fullWidth: true, children: "Verify" }),
-    /* @__PURE__ */ (0, import_jsx_runtime17.jsx)(
-      import_twreact_ui13.Button,
+  return /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(AuthShell, { brand, variant: "platform", title, subtitle, linkComponent, legalLinks, children: step === "password" ? /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("form", { onSubmit: submitPassword, className: "flex flex-col gap-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Input, { label: "Admin email", type: "email", autoComplete: "username", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Input, { label: "Password", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Alert, { variant: "error", children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Button, { type: "submit", loading: busy, disabled: !email || !password, fullWidth: true, children: "Sign in" })
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("form", { onSubmit: submitCode, className: "flex flex-col gap-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)("p", { className: "text-sm", children: "Enter the 6-digit code from your authenticator app." }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Input, { label: "Authenticator code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Alert, { variant: "error", children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Button, { type: "submit", loading: busy, disabled: code.length < 6, fullWidth: true, children: "Verify" }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
+      import_twreact_ui16.Button,
       {
         variant: "ghost",
         onClick: () => {