@famgia/omnify-react-sso 2.2.0 → 2.2.2

package/dist/index.cjs

@@ -30,16 +30,22 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  BRANCH_HEADERS: () => BRANCH_HEADERS,
+  BranchContext: () => BranchContext,
+  BranchGate: () => BranchGate,
+  BranchProvider: () => BranchProvider,
+  OrgBranchSelectorModal: () => OrgBranchSelectorModal,
   OrganizationSwitcher: () => OrganizationSwitcher,
   ProtectedRoute: () => ProtectedRoute,
   SsoCallback: () => SsoCallback,
   SsoContext: () => SsoContext,
   SsoProvider: () => SsoProvider,
-  branchCreateSchema: () => branchCreateSchema,
-  branchI18n: () => branchI18n,
-  branchSchemas: () => branchSchemas,
-  branchUpdateSchema: () => branchUpdateSchema,
+  branchCacheCreateSchema: () => branchCacheCreateSchema,
+  branchCacheI18n: () => branchCacheI18n,
+  branchCacheSchemas: () => branchCacheSchemas,
+  branchCacheUpdateSchema: () => branchCacheUpdateSchema,
   createAuthService: () => createAuthService,
+  createBranchHeaderSetter: () => createBranchHeaderSetter,
   createBranchService: () => createBranchService,
   createPermissionService: () => createPermissionService,
   createRoleService: () => createRoleService,
@@ -49,12 +55,15 @@ __export(src_exports, {
   createUserRoleService: () => createUserRoleService,
   defaultLocale: () => defaultLocale,
   fallbackLocale: () => fallbackLocale,
-  getBranchFieldLabel: () => getBranchFieldLabel,
-  getBranchFieldPlaceholder: () => getBranchFieldPlaceholder,
-  getBranchLabel: () => getBranchLabel,
+  getBranchCacheFieldLabel: () => getBranchCacheFieldLabel,
+  getBranchCacheFieldPlaceholder: () => getBranchCacheFieldPlaceholder,
+  getBranchCacheLabel: () => getBranchCacheLabel,
   getEffectivePermissions: () => getEffectivePermissions,
   getMessage: () => getMessage,
   getMessages: () => getMessages,
+  getOrganizationCacheFieldLabel: () => getOrganizationCacheFieldLabel,
+  getOrganizationCacheFieldPlaceholder: () => getOrganizationCacheFieldPlaceholder,
+  getOrganizationCacheLabel: () => getOrganizationCacheLabel,
   getPermissionFieldLabel: () => getPermissionFieldLabel,
   getPermissionFieldPlaceholder: () => getPermissionFieldPlaceholder,
   getPermissionLabel: () => getPermissionLabel,
@@ -65,15 +74,19 @@ __export(src_exports, {
   getRolePermissionFieldPlaceholder: () => getRolePermissionFieldPlaceholder,
   getRolePermissionLabel: () => getRolePermissionLabel,
   getScopeLabel: () => getScopeLabel,
-  getTeamFieldLabel: () => getTeamFieldLabel,
-  getTeamFieldPlaceholder: () => getTeamFieldPlaceholder,
-  getTeamLabel: () => getTeamLabel,
+  getTeamCacheFieldLabel: () => getTeamCacheFieldLabel,
+  getTeamCacheFieldPlaceholder: () => getTeamCacheFieldPlaceholder,
+  getTeamCacheLabel: () => getTeamCacheLabel,
   getTeamPermissionFieldLabel: () => getTeamPermissionFieldLabel,
   getTeamPermissionFieldPlaceholder: () => getTeamPermissionFieldPlaceholder,
   getTeamPermissionLabel: () => getTeamPermissionLabel,
-  getUserFieldLabel: () => getUserFieldLabel,
-  getUserFieldPlaceholder: () => getUserFieldPlaceholder,
-  getUserLabel: () => getUserLabel,
+  getUserCacheFieldLabel: () => getUserCacheFieldLabel,
+  getUserCacheFieldPlaceholder: () => getUserCacheFieldPlaceholder,
+  getUserCacheLabel: () => getUserCacheLabel,
+  organizationCacheCreateSchema: () => organizationCacheCreateSchema,
+  organizationCacheI18n: () => organizationCacheI18n,
+  organizationCacheSchemas: () => organizationCacheSchemas,
+  organizationCacheUpdateSchema: () => organizationCacheUpdateSchema,
   permissionCreateSchema: () => permissionCreateSchema,
   permissionI18n: () => permissionI18n,
   permissionSchemas: () => permissionSchemas,
@@ -86,23 +99,26 @@ __export(src_exports, {
   rolePermissionUpdateSchema: () => rolePermissionUpdateSchema,
   roleSchemas: () => roleSchemas,
   roleUpdateSchema: () => roleUpdateSchema,
+  setBranchHeaders: () => setBranchHeaders,
   ssoQueryKeys: () => ssoQueryKeys,
   supportedLocales: () => supportedLocales,
-  teamCreateSchema: () => teamCreateSchema,
-  teamI18n: () => teamI18n,
+  teamCacheCreateSchema: () => teamCacheCreateSchema,
+  teamCacheI18n: () => teamCacheI18n,
+  teamCacheSchemas: () => teamCacheSchemas,
+  teamCacheUpdateSchema: () => teamCacheUpdateSchema,
   teamPermissionCreateSchema: () => teamPermissionCreateSchema,
   teamPermissionI18n: () => teamPermissionI18n,
   teamPermissionSchemas: () => teamPermissionSchemas,
   teamPermissionUpdateSchema: () => teamPermissionUpdateSchema,
-  teamSchemas: () => teamSchemas,
-  teamUpdateSchema: () => teamUpdateSchema,
   useAuth: () => useAuth,
+  useBranch: () => useBranch,
+  useBranchGate: () => useBranchGate,
   useOrganization: () => useOrganization,
   useSso: () => useSso,
-  userCreateSchema: () => userCreateSchema,
-  userI18n: () => userI18n,
-  userSchemas: () => userSchemas,
-  userUpdateSchema: () => userUpdateSchema,
+  userCacheCreateSchema: () => userCacheCreateSchema,
+  userCacheI18n: () => userCacheI18n,
+  userCacheSchemas: () => userCacheSchemas,
+  userCacheUpdateSchema: () => userCacheUpdateSchema,
   validationMessages: () => validationMessages
 });
 module.exports = __toCommonJS(src_exports);
@@ -162,11 +178,11 @@ function getMessages(locale) {
   return result;
 }
 
-// node_modules/@omnify-base/schemas/Branch.ts
+// node_modules/@omnify-base/schemas/BranchCache.ts
 var import_zod = require("zod");
-var branchI18n = {
+var branchCacheI18n = {
   /** Model display name */
-  label: { "en": "Branch" },
+  label: { "en": "Branch Cache" },
   /** Field labels and placeholders */
   fields: {
     console_branch_id: {
@@ -189,7 +205,7 @@ var branchI18n = {
     }
   }
 };
-var baseBranchSchemas = {
+var baseBranchCacheSchemas = {
   console_branch_id: import_zod.z.string(),
   console_org_id: import_zod.z.string(),
   code: import_zod.z.string().min(1).max(20),
@@ -197,37 +213,91 @@ var baseBranchSchemas = {
   is_headquarters: import_zod.z.boolean(),
   is_active: import_zod.z.boolean()
 };
-var baseBranchCreateSchema = import_zod.z.object({
-  console_branch_id: baseBranchSchemas.console_branch_id,
-  console_org_id: baseBranchSchemas.console_org_id,
-  code: baseBranchSchemas.code,
-  name: baseBranchSchemas.name,
-  is_headquarters: baseBranchSchemas.is_headquarters,
-  is_active: baseBranchSchemas.is_active
+var baseBranchCacheCreateSchema = import_zod.z.object({
+  console_branch_id: baseBranchCacheSchemas.console_branch_id,
+  console_org_id: baseBranchCacheSchemas.console_org_id,
+  code: baseBranchCacheSchemas.code,
+  name: baseBranchCacheSchemas.name,
+  is_headquarters: baseBranchCacheSchemas.is_headquarters,
+  is_active: baseBranchCacheSchemas.is_active
 });
-var baseBranchUpdateSchema = baseBranchCreateSchema.partial();
-function getBranchLabel(locale) {
-  return branchI18n.label[locale] ?? branchI18n.label["en"] ?? "Branch";
+var baseBranchCacheUpdateSchema = baseBranchCacheCreateSchema.partial();
+function getBranchCacheLabel(locale) {
+  return branchCacheI18n.label[locale] ?? branchCacheI18n.label["en"] ?? "BranchCache";
 }
-function getBranchFieldLabel(field, locale) {
-  const fieldI18n = branchI18n.fields[field];
+function getBranchCacheFieldLabel(field, locale) {
+  const fieldI18n = branchCacheI18n.fields[field];
   if (!fieldI18n) return field;
   return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
 }
-function getBranchFieldPlaceholder(field, locale) {
-  const fieldI18n = branchI18n.fields[field];
+function getBranchCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = branchCacheI18n.fields[field];
   if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
   const placeholder = fieldI18n.placeholder;
   return placeholder[locale] ?? placeholder["en"] ?? "";
 }
 
-// src/schemas/Branch.ts
-var branchSchemas = { ...baseBranchSchemas };
-var branchCreateSchema = baseBranchCreateSchema;
-var branchUpdateSchema = baseBranchUpdateSchema;
+// src/schemas/BranchCache.ts
+var branchCacheSchemas = { ...baseBranchCacheSchemas };
+var branchCacheCreateSchema = baseBranchCacheCreateSchema;
+var branchCacheUpdateSchema = baseBranchCacheUpdateSchema;
 
-// node_modules/@omnify-base/schemas/Permission.ts
+// node_modules/@omnify-base/schemas/OrganizationCache.ts
 var import_zod2 = require("zod");
+var organizationCacheI18n = {
+  /** Model display name */
+  label: { "en": "Organization Cache" },
+  /** Field labels and placeholders */
+  fields: {
+    console_org_id: {
+      label: { "en": "Console Organization ID" }
+    },
+    name: {
+      label: { "en": "Organization Name" }
+    },
+    code: {
+      label: { "en": "Organization Code" }
+    },
+    is_active: {
+      label: { "en": "Active" }
+    }
+  }
+};
+var baseOrganizationCacheSchemas = {
+  console_org_id: import_zod2.z.string(),
+  name: import_zod2.z.string().min(1).max(100),
+  code: import_zod2.z.string().min(1).max(20),
+  is_active: import_zod2.z.boolean()
+};
+var baseOrganizationCacheCreateSchema = import_zod2.z.object({
+  console_org_id: baseOrganizationCacheSchemas.console_org_id,
+  name: baseOrganizationCacheSchemas.name,
+  code: baseOrganizationCacheSchemas.code,
+  is_active: baseOrganizationCacheSchemas.is_active
+});
+var baseOrganizationCacheUpdateSchema = baseOrganizationCacheCreateSchema.partial();
+function getOrganizationCacheLabel(locale) {
+  return organizationCacheI18n.label[locale] ?? organizationCacheI18n.label["en"] ?? "OrganizationCache";
+}
+function getOrganizationCacheFieldLabel(field, locale) {
+  const fieldI18n = organizationCacheI18n.fields[field];
+  if (!fieldI18n) return field;
+  return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
+}
+function getOrganizationCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = organizationCacheI18n.fields[field];
+  if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
+  const placeholder = fieldI18n.placeholder;
+  return placeholder[locale] ?? placeholder["en"] ?? "";
+}
+
+// src/schemas/OrganizationCache.ts
+var organizationCacheSchemas = { ...baseOrganizationCacheSchemas };
+var organizationCacheCreateSchema = baseOrganizationCacheCreateSchema;
+var organizationCacheUpdateSchema = baseOrganizationCacheUpdateSchema;
+
+// node_modules/@omnify-base/schemas/Permission.ts
+var import_zod3 = require("zod");
 var permissionI18n = {
   /** Model display name */
   label: { "en": "Permission" },
@@ -248,11 +318,11 @@ var permissionI18n = {
   }
 };
 var basePermissionSchemas = {
-  name: import_zod2.z.string().min(1).max(100),
-  slug: import_zod2.z.string().min(1).max(100),
-  group: import_zod2.z.string().max(50).optional().nullable()
+  name: import_zod3.z.string().min(1).max(100),
+  slug: import_zod3.z.string().min(1).max(100),
+  group: import_zod3.z.string().max(50).optional().nullable()
 };
-var basePermissionCreateSchema = import_zod2.z.object({
+var basePermissionCreateSchema = import_zod3.z.object({
   name: basePermissionSchemas.name,
   slug: basePermissionSchemas.slug,
   group: basePermissionSchemas.group
@@ -279,7 +349,7 @@ var permissionCreateSchema = basePermissionCreateSchema;
 var permissionUpdateSchema = basePermissionUpdateSchema;
 
 // node_modules/@omnify-base/schemas/Role.ts
-var import_zod3 = require("zod");
+var import_zod4 = require("zod");
 var roleI18n = {
   /** Model display name */
   label: { "en": "Role" },
@@ -303,12 +373,12 @@ var roleI18n = {
   }
 };
 var baseRoleSchemas = {
-  name: import_zod3.z.string().min(1).max(100),
-  slug: import_zod3.z.string().min(1).max(100),
-  description: import_zod3.z.string().optional().nullable(),
-  level: import_zod3.z.number().int()
+  name: import_zod4.z.string().min(1).max(100),
+  slug: import_zod4.z.string().min(1).max(100),
+  description: import_zod4.z.string().optional().nullable(),
+  level: import_zod4.z.number().int()
 };
-var baseRoleCreateSchema = import_zod3.z.object({
+var baseRoleCreateSchema = import_zod4.z.object({
   name: baseRoleSchemas.name,
   slug: baseRoleSchemas.slug,
   description: baseRoleSchemas.description,
@@ -336,7 +406,7 @@ var roleCreateSchema = baseRoleCreateSchema;
 var roleUpdateSchema = baseRoleUpdateSchema;
 
 // node_modules/@omnify-base/schemas/RolePermission.ts
-var import_zod4 = require("zod");
+var import_zod5 = require("zod");
 var rolePermissionI18n = {
   /** Model display name */
   label: { "en": "Role Permission" },
@@ -351,7 +421,7 @@ var rolePermissionI18n = {
   }
 };
 var baseRolePermissionSchemas = {};
-var baseRolePermissionCreateSchema = import_zod4.z.object({});
+var baseRolePermissionCreateSchema = import_zod5.z.object({});
 var baseRolePermissionUpdateSchema = baseRolePermissionCreateSchema.partial();
 function getRolePermissionLabel(locale) {
   return rolePermissionI18n.label[locale] ?? rolePermissionI18n.label["en"] ?? "RolePermission";
@@ -373,11 +443,11 @@ var rolePermissionSchemas = { ...baseRolePermissionSchemas };
 var rolePermissionCreateSchema = baseRolePermissionCreateSchema;
 var rolePermissionUpdateSchema = baseRolePermissionUpdateSchema;
 
-// node_modules/@omnify-base/schemas/Team.ts
-var import_zod5 = require("zod");
-var teamI18n = {
+// node_modules/@omnify-base/schemas/TeamCache.ts
+var import_zod6 = require("zod");
+var teamCacheI18n = {
   /** Model display name */
-  label: { "en": "Team" },
+  label: { "en": "Team Cache" },
   /** Field labels and placeholders */
   fields: {
     console_team_id: {
@@ -391,39 +461,39 @@ var teamI18n = {
     }
   }
 };
-var baseTeamSchemas = {
-  console_team_id: import_zod5.z.string(),
-  console_org_id: import_zod5.z.string(),
-  name: import_zod5.z.string().min(1).max(100)
+var baseTeamCacheSchemas = {
+  console_team_id: import_zod6.z.string(),
+  console_org_id: import_zod6.z.string(),
+  name: import_zod6.z.string().min(1).max(100)
 };
-var baseTeamCreateSchema = import_zod5.z.object({
-  console_team_id: baseTeamSchemas.console_team_id,
-  console_org_id: baseTeamSchemas.console_org_id,
-  name: baseTeamSchemas.name
+var baseTeamCacheCreateSchema = import_zod6.z.object({
+  console_team_id: baseTeamCacheSchemas.console_team_id,
+  console_org_id: baseTeamCacheSchemas.console_org_id,
+  name: baseTeamCacheSchemas.name
 });
-var baseTeamUpdateSchema = baseTeamCreateSchema.partial();
-function getTeamLabel(locale) {
-  return teamI18n.label[locale] ?? teamI18n.label["en"] ?? "Team";
+var baseTeamCacheUpdateSchema = baseTeamCacheCreateSchema.partial();
+function getTeamCacheLabel(locale) {
+  return teamCacheI18n.label[locale] ?? teamCacheI18n.label["en"] ?? "TeamCache";
 }
-function getTeamFieldLabel(field, locale) {
-  const fieldI18n = teamI18n.fields[field];
+function getTeamCacheFieldLabel(field, locale) {
+  const fieldI18n = teamCacheI18n.fields[field];
   if (!fieldI18n) return field;
   return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
 }
-function getTeamFieldPlaceholder(field, locale) {
-  const fieldI18n = teamI18n.fields[field];
+function getTeamCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = teamCacheI18n.fields[field];
   if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
   const placeholder = fieldI18n.placeholder;
   return placeholder[locale] ?? placeholder["en"] ?? "";
 }
 
-// src/schemas/Team.ts
-var teamSchemas = { ...baseTeamSchemas };
-var teamCreateSchema = baseTeamCreateSchema;
-var teamUpdateSchema = baseTeamUpdateSchema;
+// src/schemas/TeamCache.ts
+var teamCacheSchemas = { ...baseTeamCacheSchemas };
+var teamCacheCreateSchema = baseTeamCacheCreateSchema;
+var teamCacheUpdateSchema = baseTeamCacheUpdateSchema;
 
 // node_modules/@omnify-base/schemas/TeamPermission.ts
-var import_zod6 = require("zod");
+var import_zod7 = require("zod");
 var teamPermissionI18n = {
   /** Model display name */
   label: { "en": "Team Permission" },
@@ -441,10 +511,10 @@ var teamPermissionI18n = {
   }
 };
 var baseTeamPermissionSchemas = {
-  console_org_id: import_zod6.z.string(),
-  console_team_id: import_zod6.z.string()
+  console_org_id: import_zod7.z.string(),
+  console_team_id: import_zod7.z.string()
 };
-var baseTeamPermissionCreateSchema = import_zod6.z.object({
+var baseTeamPermissionCreateSchema = import_zod7.z.object({
   console_org_id: baseTeamPermissionSchemas.console_org_id,
   console_team_id: baseTeamPermissionSchemas.console_team_id
 });
@@ -469,11 +539,11 @@ var teamPermissionSchemas = { ...baseTeamPermissionSchemas };
 var teamPermissionCreateSchema = baseTeamPermissionCreateSchema;
 var teamPermissionUpdateSchema = baseTeamPermissionUpdateSchema;
 
-// node_modules/@omnify-base/schemas/User.ts
-var import_zod7 = require("zod");
-var userI18n = {
+// node_modules/@omnify-base/schemas/UserCache.ts
+var import_zod8 = require("zod");
+var userCacheI18n = {
   /** Model display name */
-  label: { "en": "User" },
+  label: { "en": "User Cache" },
   /** Field labels and placeholders */
   fields: {
     name: {
@@ -499,42 +569,42 @@ var userI18n = {
     }
   }
 };
-var baseUserSchemas = {
-  name: import_zod7.z.string().min(1),
-  email: import_zod7.z.string().min(1),
-  console_user_id: import_zod7.z.string().optional().nullable(),
-  console_access_token: import_zod7.z.string().optional().nullable(),
-  console_refresh_token: import_zod7.z.string().optional().nullable(),
-  console_token_expires_at: import_zod7.z.string().datetime({ offset: true }).optional().nullable()
+var baseUserCacheSchemas = {
+  name: import_zod8.z.string().min(1),
+  email: import_zod8.z.string().min(1),
+  console_user_id: import_zod8.z.string().optional().nullable(),
+  console_access_token: import_zod8.z.string().optional().nullable(),
+  console_refresh_token: import_zod8.z.string().optional().nullable(),
+  console_token_expires_at: import_zod8.z.string().datetime({ offset: true }).optional().nullable()
 };
-var baseUserCreateSchema = import_zod7.z.object({
-  name: baseUserSchemas.name,
-  email: baseUserSchemas.email,
-  console_user_id: baseUserSchemas.console_user_id,
-  console_access_token: baseUserSchemas.console_access_token,
-  console_refresh_token: baseUserSchemas.console_refresh_token,
-  console_token_expires_at: baseUserSchemas.console_token_expires_at
+var baseUserCacheCreateSchema = import_zod8.z.object({
+  name: baseUserCacheSchemas.name,
+  email: baseUserCacheSchemas.email,
+  console_user_id: baseUserCacheSchemas.console_user_id,
+  console_access_token: baseUserCacheSchemas.console_access_token,
+  console_refresh_token: baseUserCacheSchemas.console_refresh_token,
+  console_token_expires_at: baseUserCacheSchemas.console_token_expires_at
 });
-var baseUserUpdateSchema = baseUserCreateSchema.partial();
-function getUserLabel(locale) {
-  return userI18n.label[locale] ?? userI18n.label["en"] ?? "User";
+var baseUserCacheUpdateSchema = baseUserCacheCreateSchema.partial();
+function getUserCacheLabel(locale) {
+  return userCacheI18n.label[locale] ?? userCacheI18n.label["en"] ?? "UserCache";
 }
-function getUserFieldLabel(field, locale) {
-  const fieldI18n = userI18n.fields[field];
+function getUserCacheFieldLabel(field, locale) {
+  const fieldI18n = userCacheI18n.fields[field];
   if (!fieldI18n) return field;
   return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
 }
-function getUserFieldPlaceholder(field, locale) {
-  const fieldI18n = userI18n.fields[field];
+function getUserCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = userCacheI18n.fields[field];
   if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
   const placeholder = fieldI18n.placeholder;
   return placeholder[locale] ?? placeholder["en"] ?? "";
 }
 
-// src/schemas/User.ts
-var userSchemas = { ...baseUserSchemas };
-var userCreateSchema = baseUserCreateSchema;
-var userUpdateSchema = baseUserUpdateSchema;
+// src/schemas/UserCache.ts
+var userCacheSchemas = { ...baseUserCacheSchemas };
+var userCacheCreateSchema = baseUserCacheCreateSchema;
+var userCacheUpdateSchema = baseUserCacheUpdateSchema;
 
 // src/context/SsoContext.tsx
 var import_react = require("react");
@@ -760,20 +830,347 @@ function SsoProvider({ children, config, onAuthChange }) {
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SsoContext.Provider, { value, children });
 }
 
-// src/hooks/useAuth.ts
+// src/context/BranchContext.tsx
 var import_react3 = require("react");
+var BranchContext = (0, import_react3.createContext)(null);
+function useBranchContext() {
+  const context = (0, import_react3.useContext)(BranchContext);
+  if (!context) {
+    throw new Error("useBranchContext must be used within a BranchProvider");
+  }
+  return context;
+}
+
+// src/context/BranchProvider.tsx
+var import_react4 = require("react");
+var import_react_query = require("@tanstack/react-query");
+
+// src/services/utils.ts
+function getXsrfToken2() {
+  if (typeof document === "undefined") return void 0;
+  return document.cookie.split("; ").find((row) => row.startsWith("XSRF-TOKEN="))?.split("=")[1];
+}
+function buildHeaders(orgSlug) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json"
+  };
+  const xsrfToken = getXsrfToken2();
+  if (xsrfToken) {
+    headers["X-XSRF-TOKEN"] = decodeURIComponent(xsrfToken);
+  }
+  if (orgSlug) {
+    headers["X-Org-Slug"] = orgSlug;
+  }
+  return headers;
+}
+async function csrf(apiUrl) {
+  await fetch(`${apiUrl}/sanctum/csrf-cookie`, {
+    credentials: "include"
+  });
+}
+async function request(apiUrl, path, options = {}) {
+  const response = await fetch(`${apiUrl}${path}`, {
+    ...options,
+    credentials: "include"
+  });
+  if (!response.ok) {
+    const error = await response.json().catch(() => ({}));
+    throw new Error(error.message || `HTTP ${response.status}`);
+  }
+  if (response.status === 204) {
+    return void 0;
+  }
+  return response.json();
+}
+
+// src/services/branchService.ts
+function createBranchService(config) {
+  const { apiUrl } = config;
+  return {
+    /**
+     * Get branches for current user in organization
+     * GET /api/sso/branches
+     */
+    list: async (orgSlug) => {
+      const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
+      return request(apiUrl, `/api/sso/branches${params}`, {
+        headers: buildHeaders()
+      });
+    },
+    /**
+     * Get a specific branch by ID
+     * GET /api/sso/branches/{id}
+     */
+    get: async (branchId) => {
+      const response = await request(
+        apiUrl,
+        `/api/sso/branches/${branchId}`,
+        { headers: buildHeaders() }
+      );
+      return "data" in response ? response.data : response;
+    },
+    /**
+     * Get headquarters branch for organization
+     */
+    getHeadquarters: async (orgSlug) => {
+      try {
+        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
+        const data = await request(
+          apiUrl,
+          `/api/sso/branches${params}`,
+          { headers: buildHeaders() }
+        );
+        return data.branches.find((b) => b.is_headquarters) ?? null;
+      } catch {
+        return null;
+      }
+    },
+    /**
+     * Get primary branch for current user
+     */
+    getPrimary: async (orgSlug) => {
+      try {
+        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
+        const data = await request(
+          apiUrl,
+          `/api/sso/branches${params}`,
+          { headers: buildHeaders() }
+        );
+        if (data.primary_branch_id) {
+          return data.branches.find((b) => b.id === data.primary_branch_id) ?? null;
+        }
+        return null;
+      } catch {
+        return null;
+      }
+    }
+  };
+}
+
+// src/queryKeys.ts
+var ssoQueryKeys = {
+  all: ["sso"],
+  // =========================================================================
+  // Auth (authService)
+  // =========================================================================
+  auth: {
+    all: () => [...ssoQueryKeys.all, "auth"],
+    user: () => [...ssoQueryKeys.auth.all(), "user"],
+    globalLogoutUrl: (redirectUri) => [...ssoQueryKeys.auth.all(), "global-logout-url", redirectUri]
+  },
+  // =========================================================================
+  // Tokens (tokenService)
+  // =========================================================================
+  tokens: {
+    all: () => [...ssoQueryKeys.all, "tokens"],
+    list: () => [...ssoQueryKeys.tokens.all(), "list"]
+  },
+  // =========================================================================
+  // Roles (roleService)
+  // =========================================================================
+  roles: {
+    all: () => [...ssoQueryKeys.all, "roles"],
+    list: () => [...ssoQueryKeys.roles.all(), "list"],
+    detail: (id) => [...ssoQueryKeys.roles.all(), "detail", id],
+    permissions: (id) => [...ssoQueryKeys.roles.all(), id, "permissions"]
+  },
+  // =========================================================================
+  // Permissions (permissionService)
+  // =========================================================================
+  permissions: {
+    all: () => [...ssoQueryKeys.all, "permissions"],
+    list: (params) => [...ssoQueryKeys.permissions.all(), "list", params],
+    detail: (id) => [...ssoQueryKeys.permissions.all(), "detail", id],
+    matrix: () => [...ssoQueryKeys.permissions.all(), "matrix"]
+  },
+  // =========================================================================
+  // Teams (teamService)
+  // =========================================================================
+  teams: {
+    all: () => [...ssoQueryKeys.all, "teams"],
+    list: () => [...ssoQueryKeys.teams.all(), "list"],
+    permissions: (teamId) => [...ssoQueryKeys.teams.all(), teamId, "permissions"],
+    orphaned: () => [...ssoQueryKeys.teams.all(), "orphaned"]
+  },
+  // =========================================================================
+  // User Roles (userRoleService) - Scoped Role Assignments
+  // =========================================================================
+  userRoles: {
+    all: () => [...ssoQueryKeys.all, "user-roles"],
+    list: (userId) => [...ssoQueryKeys.userRoles.all(), userId],
+    byBranch: (userId, orgId, branchId) => [...ssoQueryKeys.userRoles.all(), userId, orgId, branchId]
+  },
+  // =========================================================================
+  // Branches (branchService)
+  // =========================================================================
+  branches: {
+    all: () => [...ssoQueryKeys.all, "branches"],
+    list: (orgSlug) => [...ssoQueryKeys.branches.all(), "list", orgSlug],
+    detail: (branchId) => [...ssoQueryKeys.branches.all(), "detail", branchId],
+    headquarters: (orgSlug) => [...ssoQueryKeys.branches.all(), "headquarters", orgSlug],
+    primary: (orgSlug) => [...ssoQueryKeys.branches.all(), "primary", orgSlug]
+  },
+  // =========================================================================
+  // Admin variants (with org context)
+  // =========================================================================
+  admin: {
+    roles: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "roles"],
+      list: (orgSlug) => [...ssoQueryKeys.admin.roles.all(orgSlug), "list"],
+      detail: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), "detail", id],
+      permissions: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), id, "permissions"]
+    },
+    permissions: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "permissions"],
+      list: (orgSlug, params) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "list", params],
+      detail: (orgSlug, id) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "detail", id],
+      matrix: (orgSlug) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "matrix"]
+    },
+    teams: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "teams"],
+      list: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "list"],
+      permissions: (orgSlug, teamId) => [...ssoQueryKeys.admin.teams.all(orgSlug), teamId, "permissions"],
+      orphaned: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "orphaned"]
+    },
+    userRoles: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "user-roles"],
+      list: (orgSlug, userId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId],
+      byBranch: (orgSlug, userId, orgId, branchId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId, orgId, branchId]
+    }
+  }
+};
+
+// src/context/BranchProvider.tsx
+var import_jsx_runtime2 = require("react/jsx-runtime");
+var DEFAULT_STORAGE_KEY = "omnify_selected_branch";
+function BranchProvider({
+  children,
+  storage = "localStorage",
+  storageKey = DEFAULT_STORAGE_KEY,
+  onBranchChange
+}) {
+  const { config, currentOrg, isAuthenticated } = useSsoContext();
+  const queryClient = (0, import_react_query.useQueryClient)();
+  const branchService = (0, import_react4.useMemo)(
+    () => createBranchService({ apiUrl: config.apiUrl }),
+    [config.apiUrl]
+  );
+  const getSavedBranchId = (0, import_react4.useCallback)(() => {
+    if (typeof window === "undefined") return null;
+    const storageObj = storage === "localStorage" ? localStorage : sessionStorage;
+    const saved = storageObj.getItem(`${storageKey}_${currentOrg?.slug}`);
+    return saved ? parseInt(saved, 10) : null;
+  }, [storage, storageKey, currentOrg?.slug]);
+  const saveBranchId = (0, import_react4.useCallback)((branchId) => {
+    if (typeof window === "undefined" || !currentOrg?.slug) return;
+    const storageObj = storage === "localStorage" ? localStorage : sessionStorage;
+    if (branchId) {
+      storageObj.setItem(`${storageKey}_${currentOrg.slug}`, String(branchId));
+    } else {
+      storageObj.removeItem(`${storageKey}_${currentOrg.slug}`);
+    }
+  }, [storage, storageKey, currentOrg?.slug]);
+  const [selectedBranchId, setSelectedBranchId] = (0, import_react4.useState)(() => getSavedBranchId());
+  const {
+    data: branchesData,
+    isLoading,
+    error,
+    refetch
+  } = (0, import_react_query.useQuery)({
+    queryKey: ssoQueryKeys.branches.list(currentOrg?.slug),
+    queryFn: () => branchService.list(currentOrg?.slug),
+    enabled: isAuthenticated && !!currentOrg,
+    staleTime: 5 * 60 * 1e3
+    // 5 minutes
+  });
+  const branches = branchesData?.branches ?? [];
+  const allBranchesAccess = branchesData?.all_branches_access ?? false;
+  const primaryBranchId = branchesData?.primary_branch_id ?? null;
+  const hasMultipleBranches = branches.length > 1;
+  const currentBranch = (0, import_react4.useMemo)(() => {
+    if (!branches.length) return null;
+    if (branches.length === 1) {
+      return branches[0];
+    }
+    if (selectedBranchId) {
+      const found = branches.find((b) => b.id === selectedBranchId);
+      if (found) return found;
+    }
+    if (primaryBranchId) {
+      const primary = branches.find((b) => b.id === primaryBranchId);
+      if (primary) return primary;
+    }
+    const hq = branches.find((b) => b.is_headquarters);
+    if (hq) return hq;
+    return branches[0];
+  }, [branches, selectedBranchId, primaryBranchId]);
+  (0, import_react4.useEffect)(() => {
+    if (currentBranch && currentBranch.id !== selectedBranchId) {
+      setSelectedBranchId(currentBranch.id);
+      saveBranchId(currentBranch.id);
+      onBranchChange?.(currentBranch);
+    }
+  }, [currentBranch, selectedBranchId, saveBranchId, onBranchChange]);
+  (0, import_react4.useEffect)(() => {
+    const savedId = getSavedBranchId();
+    setSelectedBranchId(savedId);
+  }, [currentOrg?.slug, getSavedBranchId]);
+  const switchBranch = (0, import_react4.useCallback)((branchId) => {
+    const branch = branches.find((b) => b.id === branchId);
+    if (branch) {
+      setSelectedBranchId(branchId);
+      saveBranchId(branchId);
+      onBranchChange?.(branch);
+    }
+  }, [branches, saveBranchId, onBranchChange]);
+  const refreshBranches = (0, import_react4.useCallback)(async () => {
+    await queryClient.invalidateQueries({
+      queryKey: ssoQueryKeys.branches.list(currentOrg?.slug)
+    });
+    await refetch();
+  }, [queryClient, currentOrg?.slug, refetch]);
+  const contextValue = (0, import_react4.useMemo)(
+    () => ({
+      branches,
+      currentBranch,
+      allBranchesAccess,
+      primaryBranchId,
+      isLoading,
+      error,
+      hasMultipleBranches,
+      switchBranch,
+      refreshBranches
+    }),
+    [
+      branches,
+      currentBranch,
+      allBranchesAccess,
+      primaryBranchId,
+      isLoading,
+      error,
+      hasMultipleBranches,
+      switchBranch,
+      refreshBranches
+    ]
+  );
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(BranchContext.Provider, { value: contextValue, children });
+}
+
+// src/hooks/useAuth.ts
+var import_react5 = require("react");
 function useAuth() {
   const { user, isLoading, isAuthenticated, login, logout, globalLogout, refreshUser } = useSsoContext();
-  const handleLogin = (0, import_react3.useCallback)(
+  const handleLogin = (0, import_react5.useCallback)(
     (redirectTo) => {
       login(redirectTo);
     },
     [login]
   );
-  const handleLogout = (0, import_react3.useCallback)(async () => {
+  const handleLogout = (0, import_react5.useCallback)(async () => {
     await logout();
   }, [logout]);
-  const handleGlobalLogout = (0, import_react3.useCallback)(
+  const handleGlobalLogout = (0, import_react5.useCallback)(
     (redirectTo) => {
       globalLogout(redirectTo);
     },
@@ -791,7 +1188,7 @@ function useAuth() {
 }
 
 // src/hooks/useOrganization.ts
-var import_react4 = require("react");
+var import_react6 = require("react");
 var ROLE_LEVELS = {
   admin: 100,
   manager: 50,
@@ -801,7 +1198,7 @@ function useOrganization() {
   const { organizations, currentOrg, switchOrg } = useSsoContext();
   const hasMultipleOrgs = organizations.length > 1;
   const currentRole = currentOrg?.serviceRole ?? null;
-  const hasRole = (0, import_react4.useCallback)(
+  const hasRole = (0, import_react6.useCallback)(
     (role) => {
       if (!currentRole) return false;
       const requiredLevel = ROLE_LEVELS[role] ?? 0;
@@ -810,13 +1207,13 @@ function useOrganization() {
     },
     [currentRole]
   );
-  const handleSwitchOrg = (0, import_react4.useCallback)(
+  const handleSwitchOrg = (0, import_react6.useCallback)(
     (orgSlug) => {
       switchOrg(orgSlug);
     },
     [switchOrg]
   );
-  return (0, import_react4.useMemo)(
+  return (0, import_react6.useMemo)(
     () => ({
       organizations,
       currentOrg,
@@ -830,10 +1227,10 @@ function useOrganization() {
 }
 
 // src/hooks/useSso.ts
-var import_react5 = require("react");
+var import_react7 = require("react");
 function useSso() {
   const context = useSsoContext();
-  return (0, import_react5.useMemo)(
+  return (0, import_react7.useMemo)(
     () => ({
       // Auth
       user: context.user,
@@ -856,9 +1253,14 @@ function useSso() {
   );
 }
 
+// src/hooks/useBranch.ts
+function useBranch() {
+  return useBranchContext();
+}
+
 // src/components/SsoCallback.tsx
-var import_react6 = require("react");
-var import_jsx_runtime2 = require("react/jsx-runtime");
+var import_react8 = require("react");
+var import_jsx_runtime3 = require("react/jsx-runtime");
 function transformUser2(data) {
   return {
     id: data.id,
@@ -877,15 +1279,15 @@ function transformOrganizations2(data) {
   }));
 }
 function DefaultLoading() {
-  return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { style: {
     display: "flex",
     justifyContent: "center",
     alignItems: "center",
     minHeight: "200px"
-  }, children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { children: "Authenticating..." }) });
+  }, children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { children: "Authenticating..." }) });
 }
 function DefaultError({ error }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)("div", { style: {
     display: "flex",
     flexDirection: "column",
     justifyContent: "center",
@@ -893,8 +1295,8 @@ function DefaultError({ error }) {
     minHeight: "200px",
     color: "red"
   }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { children: "Authentication Error" }),
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("div", { style: { fontSize: "0.875rem", marginTop: "0.5rem" }, children: error.message })
+    /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { children: "Authentication Error" }),
+    /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { style: { fontSize: "0.875rem", marginTop: "0.5rem" }, children: error.message })
   ] });
 }
 function SsoCallback({
@@ -905,10 +1307,10 @@ function SsoCallback({
   errorComponent
 }) {
   const { config, refreshUser } = useSsoContext();
-  const [error, setError] = (0, import_react6.useState)(null);
-  const [isProcessing, setIsProcessing] = (0, import_react6.useState)(true);
-  const isProcessingRef = (0, import_react6.useRef)(false);
-  (0, import_react6.useEffect)(() => {
+  const [error, setError] = (0, import_react8.useState)(null);
+  const [isProcessing, setIsProcessing] = (0, import_react8.useState)(true);
+  const isProcessingRef = (0, import_react8.useRef)(false);
+  (0, import_react8.useEffect)(() => {
     if (isProcessingRef.current) {
       return;
     }
@@ -959,24 +1361,24 @@ function SsoCallback({
   }, []);
   if (error) {
     if (errorComponent) {
-      return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_jsx_runtime2.Fragment, { children: errorComponent(error) });
+      return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_jsx_runtime3.Fragment, { children: errorComponent(error) });
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(DefaultError, { error });
+    return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(DefaultError, { error });
   }
   if (isProcessing) {
     if (loadingComponent) {
-      return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_jsx_runtime2.Fragment, { children: loadingComponent });
+      return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_jsx_runtime3.Fragment, { children: loadingComponent });
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(DefaultLoading, {});
+    return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(DefaultLoading, {});
   }
   return null;
 }
 
 // src/components/OrganizationSwitcher.tsx
-var import_react7 = __toESM(require("react"), 1);
+var import_react9 = __toESM(require("react"), 1);
 var import_antd = require("antd");
 var import_icons = require("@ant-design/icons");
-var import_jsx_runtime3 = require("react/jsx-runtime");
+var import_jsx_runtime4 = require("react/jsx-runtime");
 var { Text } = import_antd.Typography;
 function OrganizationSwitcher({
   className,
@@ -985,8 +1387,8 @@ function OrganizationSwitcher({
   onChange
 }) {
   const { organizations, currentOrg, hasMultipleOrgs, switchOrg } = useOrganization();
-  const [isOpen, setIsOpen] = import_react7.default.useState(false);
-  const handleSelect = (0, import_react7.useCallback)(
+  const [isOpen, setIsOpen] = import_react9.default.useState(false);
+  const handleSelect = (0, import_react9.useCallback)(
     (org) => {
       switchOrg(org.slug);
       setIsOpen(false);
@@ -994,23 +1396,23 @@ function OrganizationSwitcher({
     },
     [switchOrg, onChange]
   );
-  const menuItems = (0, import_react7.useMemo)(() => {
+  const menuItems = (0, import_react9.useMemo)(() => {
     return organizations.map((org) => {
       const isSelected = currentOrg?.slug === org.slug;
       if (renderOption) {
         return {
           key: org.slug,
-          label: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { onClick: () => handleSelect(org), children: renderOption(org, isSelected) })
+          label: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { onClick: () => handleSelect(org), children: renderOption(org, isSelected) })
         };
       }
       return {
         key: org.slug,
-        label: /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_antd.Space, { style: { width: "100%", justifyContent: "space-between" }, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_antd.Space, { direction: "vertical", size: 0, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { strong: isSelected, children: org.name }),
-            org.serviceRole && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { type: "secondary", style: { fontSize: 12 }, children: org.serviceRole })
+        label: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_antd.Space, { style: { width: "100%", justifyContent: "space-between" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_antd.Space, { direction: "vertical", size: 0, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { strong: isSelected, children: org.name }),
+            org.serviceRole && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { type: "secondary", style: { fontSize: 12 }, children: org.serviceRole })
           ] }),
-          isSelected && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_icons.CheckOutlined, { style: { color: "#1890ff" } })
+          isSelected && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_icons.CheckOutlined, { style: { color: "#1890ff" } })
         ] }),
         onClick: () => handleSelect(org)
       };
@@ -1020,7 +1422,7 @@ function OrganizationSwitcher({
     return null;
   }
   if (renderTrigger) {
-    return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
       import_antd.Dropdown,
       {
         menu: { items: menuItems },
@@ -1028,11 +1430,11 @@ function OrganizationSwitcher({
         open: isOpen,
         onOpenChange: setIsOpen,
         className,
-        children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { style: { cursor: "pointer" }, children: renderTrigger(currentOrg, isOpen) })
+        children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { style: { cursor: "pointer" }, children: renderTrigger(currentOrg, isOpen) })
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
     import_antd.Dropdown,
     {
       menu: { items: menuItems },
@@ -1040,28 +1442,28 @@ function OrganizationSwitcher({
       open: isOpen,
       onOpenChange: setIsOpen,
       className,
-      children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_antd.Button, { children: /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_antd.Space, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_antd.Badge, { status: "success" }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("span", { children: currentOrg?.name ?? "Select Organization" }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(import_icons.SwapOutlined, {})
+      children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_antd.Button, { children: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_antd.Space, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_antd.Badge, { status: "success" }),
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { children: currentOrg?.name ?? "Select Organization" }),
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_icons.SwapOutlined, {})
       ] }) })
     }
   );
 }
 
 // src/components/ProtectedRoute.tsx
-var import_react8 = require("react");
-var import_jsx_runtime4 = require("react/jsx-runtime");
+var import_react10 = require("react");
+var import_jsx_runtime5 = require("react/jsx-runtime");
 function DefaultLoading2() {
-  return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: {
     display: "flex",
     justifyContent: "center",
     alignItems: "center",
     minHeight: "200px"
-  }, children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { children: "Loading..." }) });
+  }, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { children: "Loading..." }) });
 }
 function DefaultLoginFallback({ login }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
     display: "flex",
     flexDirection: "column",
     justifyContent: "center",
@@ -1069,8 +1471,8 @@ function DefaultLoginFallback({ login }) {
     minHeight: "200px",
     gap: "1rem"
   }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { children: "Please log in to continue" }),
-    /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { children: "Please log in to continue" }),
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
       "button",
       {
         onClick: login,
@@ -1088,7 +1490,7 @@ function DefaultLoginFallback({ login }) {
   ] });
 }
 function DefaultAccessDenied({ reason }) {
-  return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { style: {
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)("div", { style: {
     display: "flex",
     flexDirection: "column",
     justifyContent: "center",
@@ -1096,8 +1498,8 @@ function DefaultAccessDenied({ reason }) {
     minHeight: "200px",
     color: "#dc2626"
   }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { style: { fontSize: "1.5rem", fontWeight: 600 }, children: "Access Denied" }),
-    /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { style: { marginTop: "0.5rem" }, children: reason })
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { fontSize: "1.5rem", fontWeight: 600 }, children: "Access Denied" }),
+    /* @__PURE__ */ (0, import_jsx_runtime5.jsx)("div", { style: { marginTop: "0.5rem" }, children: reason })
   ] });
 }
 function ProtectedRoute({
@@ -1110,7 +1512,7 @@ function ProtectedRoute({
 }) {
   const { user, isLoading, isAuthenticated, login } = useAuth();
   const { hasRole, currentOrg } = useOrganization();
-  (0, import_react8.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (isLoading) return;
     if (!isAuthenticated) {
       onAccessDenied?.("unauthenticated");
@@ -1119,62 +1521,620 @@ function ProtectedRoute({
     }
   }, [isLoading, isAuthenticated, requiredRole, hasRole, onAccessDenied]);
   if (isLoading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_jsx_runtime4.Fragment, { children: fallback ?? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(DefaultLoading2, {}) });
+    return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_jsx_runtime5.Fragment, { children: fallback ?? /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(DefaultLoading2, {}) });
   }
   if (!isAuthenticated) {
     if (loginFallback) {
-      return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_jsx_runtime4.Fragment, { children: loginFallback });
+      return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_jsx_runtime5.Fragment, { children: loginFallback });
     }
-    return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(DefaultLoginFallback, { login: () => login() });
+    return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(DefaultLoginFallback, { login: () => login() });
   }
   if (requiredRole && !hasRole(requiredRole)) {
-    return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+    return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
       DefaultAccessDenied,
       {
         reason: `This page requires ${requiredRole} role. Your role: ${currentOrg?.serviceRole ?? "none"}`
       }
     );
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(import_jsx_runtime4.Fragment, { children });
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(import_jsx_runtime5.Fragment, { children });
 }
 
-// src/services/utils.ts
-function getXsrfToken2() {
-  if (typeof document === "undefined") return void 0;
-  return document.cookie.split("; ").find((row) => row.startsWith("XSRF-TOKEN="))?.split("=")[1];
-}
-function buildHeaders(orgSlug) {
-  const headers = {
-    "Content-Type": "application/json",
-    Accept: "application/json"
-  };
-  const xsrfToken = getXsrfToken2();
-  if (xsrfToken) {
-    headers["X-XSRF-TOKEN"] = decodeURIComponent(xsrfToken);
-  }
-  if (orgSlug) {
-    headers["X-Org-Slug"] = orgSlug;
-  }
-  return headers;
-}
-async function csrf(apiUrl) {
-  await fetch(`${apiUrl}/sanctum/csrf-cookie`, {
-    credentials: "include"
+// src/components/OrgBranchSelectorModal.tsx
+var import_react11 = require("react");
+var import_antd2 = require("antd");
+var import_icons2 = require("@ant-design/icons");
+var import_react_query2 = require("@tanstack/react-query");
+var import_jsx_runtime6 = require("react/jsx-runtime");
+var { Text: Text2, Title } = import_antd2.Typography;
+function OrgBranchSelectorModal({
+  open,
+  onClose,
+  onConfirm,
+  title = "Select Organization & Branch",
+  requireBranch = true,
+  loadingComponent
+}) {
+  const { config } = useSsoContext();
+  const { organizations, currentOrg, hasMultipleOrgs } = useOrganization();
+  const [form] = import_antd2.Form.useForm();
+  const [selectedOrgSlug, setSelectedOrgSlug] = (0, import_react11.useState)(
+    currentOrg?.slug ?? null
+  );
+  const branchService = (0, import_react11.useMemo)(
+    () => createBranchService({ apiUrl: config.apiUrl }),
+    [config.apiUrl]
+  );
+  const {
+    data: branchesData,
+    isLoading: branchesLoading,
+    error: branchesError
+  } = (0, import_react_query2.useQuery)({
+    queryKey: ssoQueryKeys.branches.list(selectedOrgSlug ?? void 0),
+    queryFn: () => branchService.list(selectedOrgSlug ?? void 0),
+    enabled: open && !!selectedOrgSlug
   });
+  const branches = branchesData?.branches ?? [];
+  const hasMultipleBranches = branches.length > 1;
+  const selectedOrg = (0, import_react11.useMemo)(
+    () => organizations.find((o) => o.slug === selectedOrgSlug) ?? null,
+    [organizations, selectedOrgSlug]
+  );
+  (0, import_react11.useEffect)(() => {
+    if (!open) return;
+    if (organizations.length === 1 && !selectedOrgSlug) {
+      setSelectedOrgSlug(organizations[0].slug);
+      form.setFieldValue("organization_id", organizations[0].id);
+    } else if (currentOrg && !selectedOrgSlug) {
+      setSelectedOrgSlug(currentOrg.slug);
+      form.setFieldValue("organization_id", currentOrg.id);
+    }
+  }, [open, organizations, currentOrg, selectedOrgSlug, form]);
+  (0, import_react11.useEffect)(() => {
+    if (!open || branchesLoading) return;
+    if (branches.length === 1) {
+      form.setFieldValue("branch_id", branches[0].id);
+    } else if (branches.length > 0) {
+      const primaryId = branchesData?.primary_branch_id;
+      if (primaryId) {
+        form.setFieldValue("branch_id", primaryId);
+      } else {
+        const hq = branches.find((b) => b.is_headquarters);
+        if (hq) {
+          form.setFieldValue("branch_id", hq.id);
+        }
+      }
+    }
+  }, [open, branches, branchesLoading, branchesData, form]);
+  (0, import_react11.useEffect)(() => {
+    if (!open || branchesLoading) return;
+    const orgId = form.getFieldValue("organization_id");
+    const branchId = form.getFieldValue("branch_id");
+    if (orgId && branchId && !hasMultipleOrgs && !hasMultipleBranches) {
+      const timer = setTimeout(() => {
+        onConfirm(orgId, branchId);
+      }, 100);
+      return () => clearTimeout(timer);
+    }
+  }, [open, branchesLoading, hasMultipleOrgs, hasMultipleBranches, form, onConfirm]);
+  const handleOrgChange = (0, import_react11.useCallback)((orgId) => {
+    const org = organizations.find((o) => o.id === orgId);
+    if (org) {
+      setSelectedOrgSlug(org.slug);
+      form.setFieldValue("branch_id", void 0);
+    }
+  }, [organizations, form]);
+  const handleSubmit = (0, import_react11.useCallback)(() => {
+    form.validateFields().then((values) => {
+      onConfirm(values.organization_id, values.branch_id);
+    });
+  }, [form, onConfirm]);
+  const handleClose = (0, import_react11.useCallback)(() => {
+    form.resetFields();
+    setSelectedOrgSlug(currentOrg?.slug ?? null);
+    onClose();
+  }, [form, currentOrg, onClose]);
+  const isInitialLoading = open && (!organizations.length || selectedOrgSlug && branchesLoading && !branches.length);
+  const needsSelection = hasMultipleOrgs || hasMultipleBranches;
+  return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+    import_antd2.Modal,
+    {
+      title: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.BankOutlined, {}),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: title })
+      ] }),
+      open,
+      onCancel: handleClose,
+      onOk: handleSubmit,
+      okText: "Confirm",
+      cancelText: "Cancel",
+      destroyOnHidden: true,
+      width: 480,
+      children: isInitialLoading ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { textAlign: "center", padding: 40 }, children: [
+        loadingComponent ?? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_antd2.Spin, { size: "large" }),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("div", { style: { marginTop: 16 }, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { type: "secondary", children: "Loading..." }) })
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+        import_antd2.Form,
+        {
+          form,
+          layout: "vertical",
+          style: { marginTop: 16 },
+          children: [
+            branchesError && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              import_antd2.Alert,
+              {
+                type: "error",
+                message: "Failed to load branches",
+                description: branchesError.message,
+                style: { marginBottom: 16 }
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              import_antd2.Form.Item,
+              {
+                name: "organization_id",
+                label: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.BankOutlined, {}),
+                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: "Organization" }),
+                  !hasMultipleOrgs && selectedOrg && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_antd2.Badge, { status: "success", text: "Auto-selected" })
+                ] }),
+                rules: [{ required: true, message: "Please select an organization" }],
+                children: hasMultipleOrgs ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                  import_antd2.Select,
+                  {
+                    placeholder: "Select organization",
+                    onChange: handleOrgChange,
+                    size: "large",
+                    optionLabelProp: "label",
+                    children: organizations.map((org) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                      import_antd2.Select.Option,
+                      {
+                        value: org.id,
+                        label: org.name,
+                        children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { style: { width: "100%", justifyContent: "space-between" }, children: [
+                          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { children: [
+                            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { strong: true, children: org.name }),
+                            org.serviceRole && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text2, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: [
+                              "(",
+                              org.serviceRole,
+                              ")"
+                            ] })
+                          ] }),
+                          org.slug === currentOrg?.slug && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.CheckCircleFilled, { style: { color: "#52c41a" } })
+                        ] })
+                      },
+                      org.id
+                    ))
+                  }
+                ) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                  "div",
+                  {
+                    style: {
+                      padding: "8px 12px",
+                      background: "#f5f5f5",
+                      borderRadius: 6,
+                      border: "1px solid #d9d9d9"
+                    },
+                    children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.BankOutlined, { style: { color: "#1677ff" } }),
+                      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { strong: true, children: selectedOrg?.name })
+                    ] })
+                  }
+                )
+              }
+            ),
+            selectedOrgSlug && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              import_antd2.Form.Item,
+              {
+                name: "branch_id",
+                label: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.ApartmentOutlined, {}),
+                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)("span", { children: "Branch" }),
+                  !hasMultipleBranches && branches.length === 1 && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_antd2.Badge, { status: "success", text: "Auto-selected" })
+                ] }),
+                rules: requireBranch ? [{ required: true, message: "Please select a branch" }] : void 0,
+                children: branchesLoading ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { style: { padding: "8px 12px", textAlign: "center" }, children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_antd2.Spin, { size: "small" }),
+                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { type: "secondary", style: { marginLeft: 8 }, children: "Loading branches..." })
+                ] }) : hasMultipleBranches ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                  import_antd2.Select,
+                  {
+                    placeholder: "Select branch",
+                    size: "large",
+                    optionLabelProp: "label",
+                    children: branches.map((branch) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                      import_antd2.Select.Option,
+                      {
+                        value: branch.id,
+                        label: branch.name,
+                        children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { style: { width: "100%", justifyContent: "space-between" }, children: [
+                          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)("div", { children: [
+                            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { strong: true, children: branch.name }),
+                            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: branch.code })
+                          ] }),
+                          /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { size: 4, children: [
+                            branch.is_headquarters && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_antd2.Badge, { color: "blue", text: "HQ" }),
+                            branch.is_primary && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_antd2.Badge, { color: "green", text: "Primary" })
+                          ] })
+                        ] })
+                      },
+                      branch.id
+                    ))
+                  }
+                ) : branches.length === 1 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                  "div",
+                  {
+                    style: {
+                      padding: "8px 12px",
+                      background: "#f5f5f5",
+                      borderRadius: 6,
+                      border: "1px solid #d9d9d9"
+                    },
+                    children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_antd2.Space, { children: [
+                      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.ApartmentOutlined, { style: { color: "#1677ff" } }),
+                      /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text2, { strong: true, children: branches[0].name }),
+                      /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text2, { type: "secondary", children: [
+                        "(",
+                        branches[0].code,
+                        ")"
+                      ] })
+                    ] })
+                  }
+                ) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+                  import_antd2.Alert,
+                  {
+                    type: "warning",
+                    message: "No branches available",
+                    description: "You don't have access to any branches in this organization."
+                  }
+                )
+              }
+            ),
+            !needsSelection && selectedOrg && branches.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+              import_antd2.Alert,
+              {
+                type: "info",
+                message: "Auto-selected",
+                description: `Using ${selectedOrg.name} / ${branches[0]?.name ?? "Default"}`,
+                icon: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(import_icons2.CheckCircleFilled, {}),
+                showIcon: true
+              }
+            )
+          ]
+        }
+      )
+    }
+  );
 }
-async function request(apiUrl, path, options = {}) {
-  const response = await fetch(`${apiUrl}${path}`, {
-    ...options,
-    credentials: "include"
+
+// src/components/BranchGate.tsx
+var import_react12 = __toESM(require("react"), 1);
+var import_antd3 = require("antd");
+var import_icons3 = require("@ant-design/icons");
+var import_react_query3 = require("@tanstack/react-query");
+var import_jsx_runtime7 = require("react/jsx-runtime");
+var { Text: Text3, Title: Title2 } = import_antd3.Typography;
+var DEFAULT_STORAGE_KEY2 = "omnify_branch_gate_selection";
+function BranchGate({
+  children,
+  onSelectionChange,
+  storageKey = DEFAULT_STORAGE_KEY2,
+  loadingComponent,
+  title,
+  description
+}) {
+  const { config, isAuthenticated } = useSsoContext();
+  const { organizations, currentOrg, hasMultipleOrgs } = useOrganization();
+  const [storedSelection, setStoredSelection] = (0, import_react12.useState)(null);
+  const [isInitialized, setIsInitialized] = (0, import_react12.useState)(false);
+  const [tempOrgId, setTempOrgId] = (0, import_react12.useState)(null);
+  const [tempBranchId, setTempBranchId] = (0, import_react12.useState)(null);
+  const branchService = import_react12.default.useMemo(
+    () => createBranchService({ apiUrl: config.apiUrl }),
+    [config.apiUrl]
+  );
+  const activeOrgSlug = import_react12.default.useMemo(() => {
+    if (tempOrgId) {
+      return organizations.find((o) => String(o.id) === tempOrgId)?.slug;
+    }
+    return storedSelection?.orgSlug ?? currentOrg?.slug;
+  }, [tempOrgId, organizations, storedSelection, currentOrg]);
+  const { data: branchesData, isLoading: branchesLoading } = (0, import_react_query3.useQuery)({
+    queryKey: ssoQueryKeys.branches.list(activeOrgSlug),
+    queryFn: () => branchService.list(activeOrgSlug),
+    enabled: isAuthenticated && !!activeOrgSlug
   });
-  if (!response.ok) {
-    const error = await response.json().catch(() => ({}));
-    throw new Error(error.message || `HTTP ${response.status}`);
+  const branches = branchesData?.branches ?? [];
+  const hasMultipleBranches = branches.length > 1;
+  (0, import_react12.useEffect)(() => {
+    if (typeof window === "undefined") return;
+    const saved = localStorage.getItem(storageKey);
+    if (saved) {
+      try {
+        const parsed = JSON.parse(saved);
+        setStoredSelection(parsed);
+        onSelectionChange?.(parsed);
+      } catch {
+        localStorage.removeItem(storageKey);
+      }
+    }
+    setIsInitialized(true);
+  }, [storageKey, onSelectionChange]);
+  (0, import_react12.useEffect)(() => {
+    if (!isAuthenticated || !isInitialized || storedSelection) return;
+    if (organizations.length === 1 && !tempOrgId) {
+      setTempOrgId(String(organizations[0].id));
+    }
+  }, [isAuthenticated, isInitialized, organizations, storedSelection, tempOrgId]);
+  (0, import_react12.useEffect)(() => {
+    if (!tempOrgId || branchesLoading || storedSelection) return;
+    if (branches.length === 1 && !tempBranchId) {
+      setTempBranchId(String(branches[0].id));
+    } else if (branches.length > 0 && !tempBranchId) {
+      const primaryId = branchesData?.primary_branch_id;
+      if (primaryId) {
+        setTempBranchId(String(primaryId));
+      } else {
+        const hq = branches.find((b) => b.is_headquarters);
+        if (hq) {
+          setTempBranchId(String(hq.id));
+        }
+      }
+    }
+  }, [tempOrgId, branches, branchesLoading, branchesData, storedSelection, tempBranchId]);
+  (0, import_react12.useEffect)(() => {
+    if (storedSelection || !isInitialized) return;
+    if (!tempOrgId || !tempBranchId || branchesLoading) return;
+    if (!hasMultipleOrgs && !hasMultipleBranches) {
+      confirmSelection();
+    }
+  }, [tempOrgId, tempBranchId, branchesLoading, hasMultipleOrgs, hasMultipleBranches, storedSelection, isInitialized]);
+  const confirmSelection = import_react12.default.useCallback(() => {
+    if (!tempOrgId || !tempBranchId) return;
+    const org = organizations.find((o) => String(o.id) === tempOrgId);
+    const branch = branches.find((b) => String(b.id) === tempBranchId);
+    if (!org || !branch) return;
+    const selection = {
+      orgId: String(org.id),
+      orgSlug: org.slug,
+      orgName: org.name,
+      branchId: String(branch.id),
+      branchName: branch.name,
+      branchCode: branch.code
+    };
+    localStorage.setItem(storageKey, JSON.stringify(selection));
+    setStoredSelection(selection);
+    onSelectionChange?.(selection);
+    setTempOrgId(null);
+    setTempBranchId(null);
+  }, [tempOrgId, tempBranchId, organizations, branches, storageKey, onSelectionChange]);
+  const clearSelection = import_react12.default.useCallback(() => {
+    localStorage.removeItem(storageKey);
+    setStoredSelection(null);
+    onSelectionChange?.(null);
+  }, [storageKey, onSelectionChange]);
+  const needsSelection = isAuthenticated && isInitialized && !storedSelection && (hasMultipleOrgs || hasMultipleBranches);
+  const isLoading = !isAuthenticated || !isInitialized || !!activeOrgSlug && branchesLoading && !storedSelection;
+  if (isLoading && !needsSelection) {
+    if (loadingComponent) {
+      return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_jsx_runtime7.Fragment, { children: loadingComponent });
+    }
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
+      display: "flex",
+      justifyContent: "center",
+      alignItems: "center",
+      minHeight: "100vh",
+      background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)"
+    }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Spin, { size: "large" }) });
   }
-  if (response.status === 204) {
-    return void 0;
+  if (needsSelection) {
+    const canConfirm = tempOrgId && tempBranchId;
+    return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
+      minHeight: "100vh",
+      background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)",
+      display: "flex",
+      alignItems: "center",
+      justifyContent: "center",
+      padding: 24
+    }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: {
+      background: "#fff",
+      borderRadius: 16,
+      padding: 32,
+      maxWidth: 480,
+      width: "100%",
+      boxShadow: "0 20px 60px rgba(0,0,0,0.3)"
+    }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { textAlign: "center", marginBottom: 24 }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
+          width: 64,
+          height: 64,
+          borderRadius: "50%",
+          background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          margin: "0 auto 16px"
+        }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_icons3.BankOutlined, { style: { fontSize: 28, color: "#fff" } }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Title2, { level: 3, style: { margin: 0 }, children: title ?? "Select Organization" }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { type: "secondary", children: description ?? "Please select your organization and branch to continue" })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { marginBottom: 20 }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { strong: true, style: { display: "block", marginBottom: 8 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_antd3.Space, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_icons3.BankOutlined, {}),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { children: "Organization" }),
+          !hasMultipleOrgs && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Badge, { status: "success", text: "Auto-selected" })
+        ] }) }),
+        hasMultipleOrgs ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          import_antd3.Select,
+          {
+            value: tempOrgId,
+            onChange: (value) => {
+              setTempOrgId(String(value));
+              setTempBranchId(null);
+            },
+            placeholder: "Select organization",
+            size: "large",
+            style: { width: "100%" },
+            optionLabelProp: "label",
+            children: organizations.map((org) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Select.Option, { value: String(org.id), label: org.name, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Space, { style: { width: "100%", justifyContent: "space-between" }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { strong: true, children: org.name }),
+              org.serviceRole && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text3, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: [
+                "(",
+                org.serviceRole,
+                ")"
+              ] })
+            ] }) }) }, org.id))
+          }
+        ) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
+          padding: "8px 12px",
+          background: "#f5f5f5",
+          borderRadius: 6,
+          border: "1px solid #d9d9d9"
+        }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_antd3.Space, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_icons3.BankOutlined, { style: { color: "#1677ff" } }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { strong: true, children: organizations[0]?.name })
+        ] }) })
+      ] }),
+      tempOrgId && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { marginBottom: 24 }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { strong: true, style: { display: "block", marginBottom: 8 }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_antd3.Space, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_icons3.ApartmentOutlined, {}),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { children: "Branch" }),
+          !hasMultipleBranches && branches.length === 1 && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Badge, { status: "success", text: "Auto-selected" })
+        ] }) }),
+        branchesLoading ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: { padding: "12px", textAlign: "center" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Spin, { size: "small" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { type: "secondary", style: { marginLeft: 8 }, children: "Loading..." })
+        ] }) : hasMultipleBranches ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          import_antd3.Select,
+          {
+            value: tempBranchId,
+            onChange: (value) => setTempBranchId(String(value)),
+            placeholder: "Select branch",
+            size: "large",
+            style: { width: "100%" },
+            optionLabelProp: "label",
+            children: branches.map((branch) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Select.Option, { value: String(branch.id), label: branch.name, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_antd3.Space, { style: { width: "100%", justifyContent: "space-between" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { strong: true, children: branch.name }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: branch.code })
+              ] }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_antd3.Space, { size: 4, children: [
+                branch.is_headquarters && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Badge, { color: "blue", text: "HQ" }),
+                branch.is_primary && /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_antd3.Badge, { color: "green", text: "Primary" })
+              ] })
+            ] }) }, branch.id))
+          }
+        ) : branches.length === 1 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: {
+          padding: "8px 12px",
+          background: "#f5f5f5",
+          borderRadius: 6,
+          border: "1px solid #d9d9d9"
+        }, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_antd3.Space, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_icons3.ApartmentOutlined, { style: { color: "#1677ff" } }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text3, { strong: true, children: branches[0].name }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text3, { type: "secondary", children: [
+            "(",
+            branches[0].code,
+            ")"
+          ] })
+        ] }) }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+          import_antd3.Alert,
+          {
+            type: "warning",
+            message: "No branches available",
+            description: "You don't have access to any branches in this organization."
+          }
+        )
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+        import_antd3.Button,
+        {
+          type: "primary",
+          size: "large",
+          block: true,
+          disabled: !canConfirm,
+          onClick: confirmSelection,
+          icon: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_icons3.CheckCircleFilled, {}),
+          style: {
+            height: 48,
+            fontSize: 16,
+            background: canConfirm ? "linear-gradient(135deg, #667eea 0%, #764ba2 100%)" : void 0,
+            border: "none"
+          },
+          children: "Confirm"
+        }
+      )
+    ] }) });
   }
-  return response.json();
+  return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(import_jsx_runtime7.Fragment, { children });
+}
+function useBranchGate(storageKey = DEFAULT_STORAGE_KEY2) {
+  const [selection, setSelection] = (0, import_react12.useState)(null);
+  (0, import_react12.useEffect)(() => {
+    if (typeof window === "undefined") return;
+    const saved = localStorage.getItem(storageKey);
+    if (saved) {
+      try {
+        setSelection(JSON.parse(saved));
+      } catch {
+      }
+    }
+    const handleStorage = (e) => {
+      if (e.key === storageKey) {
+        if (e.newValue) {
+          try {
+            setSelection(JSON.parse(e.newValue));
+          } catch {
+            setSelection(null);
+          }
+        } else {
+          setSelection(null);
+        }
+      }
+    };
+    window.addEventListener("storage", handleStorage);
+    return () => window.removeEventListener("storage", handleStorage);
+  }, [storageKey]);
+  const clearSelection = import_react12.default.useCallback(() => {
+    localStorage.removeItem(storageKey);
+    setSelection(null);
+  }, [storageKey]);
+  return {
+    selection,
+    selectedOrg: selection ? { id: selection.orgId, slug: selection.orgSlug, name: selection.orgName } : null,
+    selectedBranch: selection ? { id: selection.branchId, name: selection.branchName, code: selection.branchCode } : null,
+    clearSelection
+  };
+}
+
+// src/utils/branchHeaders.ts
+var BRANCH_HEADERS = {
+  BRANCH_ID: "X-Branch-Id",
+  ORG_ID: "X-Org-Id",
+  BRANCH_NAME: "X-Branch-Name",
+  BRANCH_CODE: "X-Branch-Code"
+};
+function createBranchHeaderSetter(axiosInstance) {
+  return (selection) => {
+    if (selection) {
+      axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_ID] = selection.branchId;
+      axiosInstance.defaults.headers.common[BRANCH_HEADERS.ORG_ID] = selection.orgId;
+      if (selection.branchName) {
+        axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_NAME] = selection.branchName;
+      }
+      if (selection.branchCode) {
+        axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_CODE] = selection.branchCode;
+      }
+    } else {
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_ID];
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.ORG_ID];
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_NAME];
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_CODE];
+    }
+  };
+}
+function setBranchHeaders(axiosInstance, selection) {
+  createBranchHeaderSetter(axiosInstance)(selection);
 }
 
 // src/services/authService.ts
@@ -1648,70 +2608,6 @@ var getEffectivePermissions = (roleAssignments, allRoles, orgId, branchId) => {
   return Array.from(permissions);
 };
 
-// src/services/branchService.ts
-function createBranchService(config) {
-  const { apiUrl } = config;
-  return {
-    /**
-     * Get branches for current user in organization
-     * GET /api/sso/branches
-     */
-    list: async (orgSlug) => {
-      const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
-      return request(apiUrl, `/api/sso/branches${params}`, {
-        headers: buildHeaders()
-      });
-    },
-    /**
-     * Get a specific branch by ID
-     * GET /api/sso/branches/{id}
-     */
-    get: async (branchId) => {
-      const response = await request(
-        apiUrl,
-        `/api/sso/branches/${branchId}`,
-        { headers: buildHeaders() }
-      );
-      return "data" in response ? response.data : response;
-    },
-    /**
-     * Get headquarters branch for organization
-     */
-    getHeadquarters: async (orgSlug) => {
-      try {
-        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
-        const data = await request(
-          apiUrl,
-          `/api/sso/branches${params}`,
-          { headers: buildHeaders() }
-        );
-        return data.branches.find((b) => b.is_headquarters) ?? null;
-      } catch {
-        return null;
-      }
-    },
-    /**
-     * Get primary branch for current user
-     */
-    getPrimary: async (orgSlug) => {
-      try {
-        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
-        const data = await request(
-          apiUrl,
-          `/api/sso/branches${params}`,
-          { headers: buildHeaders() }
-        );
-        if (data.primary_branch_id) {
-          return data.branches.find((b) => b.id === data.primary_branch_id) ?? null;
-        }
-        return null;
-      } catch {
-        return null;
-      }
-    }
-  };
-}
-
 // src/services/ssoService.ts
 function getXsrfToken3() {
   if (typeof document === "undefined") return void 0;
@@ -2089,111 +2985,24 @@ function createSsoService(config) {
     }
   };
 }
-
-// src/queryKeys.ts
-var ssoQueryKeys = {
-  all: ["sso"],
-  // =========================================================================
-  // Auth (authService)
-  // =========================================================================
-  auth: {
-    all: () => [...ssoQueryKeys.all, "auth"],
-    user: () => [...ssoQueryKeys.auth.all(), "user"],
-    globalLogoutUrl: (redirectUri) => [...ssoQueryKeys.auth.all(), "global-logout-url", redirectUri]
-  },
-  // =========================================================================
-  // Tokens (tokenService)
-  // =========================================================================
-  tokens: {
-    all: () => [...ssoQueryKeys.all, "tokens"],
-    list: () => [...ssoQueryKeys.tokens.all(), "list"]
-  },
-  // =========================================================================
-  // Roles (roleService)
-  // =========================================================================
-  roles: {
-    all: () => [...ssoQueryKeys.all, "roles"],
-    list: () => [...ssoQueryKeys.roles.all(), "list"],
-    detail: (id) => [...ssoQueryKeys.roles.all(), "detail", id],
-    permissions: (id) => [...ssoQueryKeys.roles.all(), id, "permissions"]
-  },
-  // =========================================================================
-  // Permissions (permissionService)
-  // =========================================================================
-  permissions: {
-    all: () => [...ssoQueryKeys.all, "permissions"],
-    list: (params) => [...ssoQueryKeys.permissions.all(), "list", params],
-    detail: (id) => [...ssoQueryKeys.permissions.all(), "detail", id],
-    matrix: () => [...ssoQueryKeys.permissions.all(), "matrix"]
-  },
-  // =========================================================================
-  // Teams (teamService)
-  // =========================================================================
-  teams: {
-    all: () => [...ssoQueryKeys.all, "teams"],
-    list: () => [...ssoQueryKeys.teams.all(), "list"],
-    permissions: (teamId) => [...ssoQueryKeys.teams.all(), teamId, "permissions"],
-    orphaned: () => [...ssoQueryKeys.teams.all(), "orphaned"]
-  },
-  // =========================================================================
-  // User Roles (userRoleService) - Scoped Role Assignments
-  // =========================================================================
-  userRoles: {
-    all: () => [...ssoQueryKeys.all, "user-roles"],
-    list: (userId) => [...ssoQueryKeys.userRoles.all(), userId],
-    byBranch: (userId, orgId, branchId) => [...ssoQueryKeys.userRoles.all(), userId, orgId, branchId]
-  },
-  // =========================================================================
-  // Branches (branchService)
-  // =========================================================================
-  branches: {
-    all: () => [...ssoQueryKeys.all, "branches"],
-    list: (orgSlug) => [...ssoQueryKeys.branches.all(), "list", orgSlug],
-    detail: (branchId) => [...ssoQueryKeys.branches.all(), "detail", branchId],
-    headquarters: (orgSlug) => [...ssoQueryKeys.branches.all(), "headquarters", orgSlug],
-    primary: (orgSlug) => [...ssoQueryKeys.branches.all(), "primary", orgSlug]
-  },
-  // =========================================================================
-  // Admin variants (with org context)
-  // =========================================================================
-  admin: {
-    roles: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "roles"],
-      list: (orgSlug) => [...ssoQueryKeys.admin.roles.all(orgSlug), "list"],
-      detail: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), "detail", id],
-      permissions: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), id, "permissions"]
-    },
-    permissions: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "permissions"],
-      list: (orgSlug, params) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "list", params],
-      detail: (orgSlug, id) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "detail", id],
-      matrix: (orgSlug) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "matrix"]
-    },
-    teams: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "teams"],
-      list: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "list"],
-      permissions: (orgSlug, teamId) => [...ssoQueryKeys.admin.teams.all(orgSlug), teamId, "permissions"],
-      orphaned: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "orphaned"]
-    },
-    userRoles: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "user-roles"],
-      list: (orgSlug, userId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId],
-      byBranch: (orgSlug, userId, orgId, branchId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId, orgId, branchId]
-    }
-  }
-};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  BRANCH_HEADERS,
+  BranchContext,
+  BranchGate,
+  BranchProvider,
+  OrgBranchSelectorModal,
   OrganizationSwitcher,
   ProtectedRoute,
   SsoCallback,
   SsoContext,
   SsoProvider,
-  branchCreateSchema,
-  branchI18n,
-  branchSchemas,
-  branchUpdateSchema,
+  branchCacheCreateSchema,
+  branchCacheI18n,
+  branchCacheSchemas,
+  branchCacheUpdateSchema,
   createAuthService,
+  createBranchHeaderSetter,
   createBranchService,
   createPermissionService,
   createRoleService,
@@ -2203,12 +3012,15 @@ var ssoQueryKeys = {
   createUserRoleService,
   defaultLocale,
   fallbackLocale,
-  getBranchFieldLabel,
-  getBranchFieldPlaceholder,
-  getBranchLabel,
+  getBranchCacheFieldLabel,
+  getBranchCacheFieldPlaceholder,
+  getBranchCacheLabel,
   getEffectivePermissions,
   getMessage,
   getMessages,
+  getOrganizationCacheFieldLabel,
+  getOrganizationCacheFieldPlaceholder,
+  getOrganizationCacheLabel,
   getPermissionFieldLabel,
   getPermissionFieldPlaceholder,
   getPermissionLabel,
@@ -2219,15 +3031,19 @@ var ssoQueryKeys = {
   getRolePermissionFieldPlaceholder,
   getRolePermissionLabel,
   getScopeLabel,
-  getTeamFieldLabel,
-  getTeamFieldPlaceholder,
-  getTeamLabel,
+  getTeamCacheFieldLabel,
+  getTeamCacheFieldPlaceholder,
+  getTeamCacheLabel,
   getTeamPermissionFieldLabel,
   getTeamPermissionFieldPlaceholder,
   getTeamPermissionLabel,
-  getUserFieldLabel,
-  getUserFieldPlaceholder,
-  getUserLabel,
+  getUserCacheFieldLabel,
+  getUserCacheFieldPlaceholder,
+  getUserCacheLabel,
+  organizationCacheCreateSchema,
+  organizationCacheI18n,
+  organizationCacheSchemas,
+  organizationCacheUpdateSchema,
   permissionCreateSchema,
   permissionI18n,
   permissionSchemas,
@@ -2240,23 +3056,26 @@ var ssoQueryKeys = {
   rolePermissionUpdateSchema,
   roleSchemas,
   roleUpdateSchema,
+  setBranchHeaders,
   ssoQueryKeys,
   supportedLocales,
-  teamCreateSchema,
-  teamI18n,
+  teamCacheCreateSchema,
+  teamCacheI18n,
+  teamCacheSchemas,
+  teamCacheUpdateSchema,
   teamPermissionCreateSchema,
   teamPermissionI18n,
   teamPermissionSchemas,
   teamPermissionUpdateSchema,
-  teamSchemas,
-  teamUpdateSchema,
   useAuth,
+  useBranch,
+  useBranchGate,
   useOrganization,
   useSso,
-  userCreateSchema,
-  userI18n,
-  userSchemas,
-  userUpdateSchema,
+  userCacheCreateSchema,
+  userCacheI18n,
+  userCacheSchemas,
+  userCacheUpdateSchema,
   validationMessages
 });
 //# sourceMappingURL=index.cjs.map