@famgia/omnify-react-sso 2.2.1 → 2.2.3

package/dist/index.js

@@ -53,34 +53,34 @@ function getMessages(locale) {
   return result;
 }
 
-// node_modules/@omnify-base/schemas/Branch.ts
+// node_modules/@omnify-base/schemas/BranchCache.ts
 import { z } from "zod";
-var branchI18n = {
+var branchCacheI18n = {
   /** Model display name */
-  label: { "en": "Branch" },
+  label: { "ja": "\u652F\u5E97\u30AD\u30E3\u30C3\u30B7\u30E5", "en": "Branch Cache" },
   /** Field labels and placeholders */
   fields: {
     console_branch_id: {
-      label: { "en": "Console Branch ID" }
+      label: { "ja": "Console Branch ID", "en": "Console Branch ID" }
     },
     console_org_id: {
-      label: { "en": "Console Organization ID" }
+      label: { "ja": "Console Organization ID", "en": "Console Organization ID" }
     },
     code: {
-      label: { "en": "Branch Code" }
+      label: { "ja": "\u652F\u5E97\u30B3\u30FC\u30C9", "en": "Branch Code" }
     },
     name: {
-      label: { "en": "Branch Name" }
+      label: { "ja": "\u652F\u5E97\u540D", "en": "Branch Name" }
     },
     is_headquarters: {
-      label: { "en": "Is Headquarters" }
+      label: { "ja": "\u672C\u793E", "en": "Is Headquarters" }
     },
     is_active: {
-      label: { "en": "Active" }
+      label: { "ja": "\u6709\u52B9", "en": "Active" }
     }
   }
 };
-var baseBranchSchemas = {
+var baseBranchCacheSchemas = {
   console_branch_id: z.string(),
   console_org_id: z.string(),
   code: z.string().min(1).max(20),
@@ -88,62 +88,116 @@ var baseBranchSchemas = {
   is_headquarters: z.boolean(),
   is_active: z.boolean()
 };
-var baseBranchCreateSchema = z.object({
-  console_branch_id: baseBranchSchemas.console_branch_id,
-  console_org_id: baseBranchSchemas.console_org_id,
-  code: baseBranchSchemas.code,
-  name: baseBranchSchemas.name,
-  is_headquarters: baseBranchSchemas.is_headquarters,
-  is_active: baseBranchSchemas.is_active
+var baseBranchCacheCreateSchema = z.object({
+  console_branch_id: baseBranchCacheSchemas.console_branch_id,
+  console_org_id: baseBranchCacheSchemas.console_org_id,
+  code: baseBranchCacheSchemas.code,
+  name: baseBranchCacheSchemas.name,
+  is_headquarters: baseBranchCacheSchemas.is_headquarters,
+  is_active: baseBranchCacheSchemas.is_active
 });
-var baseBranchUpdateSchema = baseBranchCreateSchema.partial();
-function getBranchLabel(locale) {
-  return branchI18n.label[locale] ?? branchI18n.label["en"] ?? "Branch";
+var baseBranchCacheUpdateSchema = baseBranchCacheCreateSchema.partial();
+function getBranchCacheLabel(locale) {
+  return branchCacheI18n.label[locale] ?? branchCacheI18n.label["en"] ?? "BranchCache";
 }
-function getBranchFieldLabel(field, locale) {
-  const fieldI18n = branchI18n.fields[field];
+function getBranchCacheFieldLabel(field, locale) {
+  const fieldI18n = branchCacheI18n.fields[field];
   if (!fieldI18n) return field;
   return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
 }
-function getBranchFieldPlaceholder(field, locale) {
-  const fieldI18n = branchI18n.fields[field];
+function getBranchCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = branchCacheI18n.fields[field];
   if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
   const placeholder = fieldI18n.placeholder;
   return placeholder[locale] ?? placeholder["en"] ?? "";
 }
 
-// src/schemas/Branch.ts
-var branchSchemas = { ...baseBranchSchemas };
-var branchCreateSchema = baseBranchCreateSchema;
-var branchUpdateSchema = baseBranchUpdateSchema;
+// src/schemas/BranchCache.ts
+var branchCacheSchemas = { ...baseBranchCacheSchemas };
+var branchCacheCreateSchema = baseBranchCacheCreateSchema;
+var branchCacheUpdateSchema = baseBranchCacheUpdateSchema;
 
-// node_modules/@omnify-base/schemas/Permission.ts
+// node_modules/@omnify-base/schemas/OrganizationCache.ts
 import { z as z2 } from "zod";
+var organizationCacheI18n = {
+  /** Model display name */
+  label: { "ja": "\u7D44\u7E54\u30AD\u30E3\u30C3\u30B7\u30E5", "en": "Organization Cache" },
+  /** Field labels and placeholders */
+  fields: {
+    console_org_id: {
+      label: { "ja": "Console Organization ID", "en": "Console Organization ID" }
+    },
+    name: {
+      label: { "ja": "\u7D44\u7E54\u540D", "en": "Organization Name" }
+    },
+    code: {
+      label: { "ja": "\u7D44\u7E54\u30B3\u30FC\u30C9", "en": "Organization Code" }
+    },
+    is_active: {
+      label: { "ja": "\u6709\u52B9", "en": "Active" }
+    }
+  }
+};
+var baseOrganizationCacheSchemas = {
+  console_org_id: z2.string(),
+  name: z2.string().min(1).max(100),
+  code: z2.string().min(1).max(20),
+  is_active: z2.boolean()
+};
+var baseOrganizationCacheCreateSchema = z2.object({
+  console_org_id: baseOrganizationCacheSchemas.console_org_id,
+  name: baseOrganizationCacheSchemas.name,
+  code: baseOrganizationCacheSchemas.code,
+  is_active: baseOrganizationCacheSchemas.is_active
+});
+var baseOrganizationCacheUpdateSchema = baseOrganizationCacheCreateSchema.partial();
+function getOrganizationCacheLabel(locale) {
+  return organizationCacheI18n.label[locale] ?? organizationCacheI18n.label["en"] ?? "OrganizationCache";
+}
+function getOrganizationCacheFieldLabel(field, locale) {
+  const fieldI18n = organizationCacheI18n.fields[field];
+  if (!fieldI18n) return field;
+  return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
+}
+function getOrganizationCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = organizationCacheI18n.fields[field];
+  if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
+  const placeholder = fieldI18n.placeholder;
+  return placeholder[locale] ?? placeholder["en"] ?? "";
+}
+
+// src/schemas/OrganizationCache.ts
+var organizationCacheSchemas = { ...baseOrganizationCacheSchemas };
+var organizationCacheCreateSchema = baseOrganizationCacheCreateSchema;
+var organizationCacheUpdateSchema = baseOrganizationCacheUpdateSchema;
+
+// node_modules/@omnify-base/schemas/Permission.ts
+import { z as z3 } from "zod";
 var permissionI18n = {
   /** Model display name */
-  label: { "en": "Permission" },
+  label: { "ja": "\u6A29\u9650", "en": "Permission" },
   /** Field labels and placeholders */
   fields: {
     name: {
-      label: { "en": "Permission Name" }
+      label: { "ja": "\u6A29\u9650\u540D", "en": "Permission Name" }
     },
     slug: {
-      label: { "en": "Slug" }
+      label: { "ja": "\u30B9\u30E9\u30C3\u30B0", "en": "Slug" }
     },
     group: {
-      label: { "en": "Group" }
+      label: { "ja": "\u30B0\u30EB\u30FC\u30D7", "en": "Group" }
     },
     roles: {
-      label: { "en": "Roles" }
+      label: { "ja": "\u30ED\u30FC\u30EB", "en": "Roles" }
     }
   }
 };
 var basePermissionSchemas = {
-  name: z2.string().min(1).max(100),
-  slug: z2.string().min(1).max(100),
-  group: z2.string().max(50).optional().nullable()
+  name: z3.string().min(1).max(100),
+  slug: z3.string().min(1).max(100),
+  group: z3.string().max(50).optional().nullable()
 };
-var basePermissionCreateSchema = z2.object({
+var basePermissionCreateSchema = z3.object({
   name: basePermissionSchemas.name,
   slug: basePermissionSchemas.slug,
   group: basePermissionSchemas.group
@@ -170,36 +224,41 @@ var permissionCreateSchema = basePermissionCreateSchema;
 var permissionUpdateSchema = basePermissionUpdateSchema;
 
 // node_modules/@omnify-base/schemas/Role.ts
-import { z as z3 } from "zod";
+import { z as z4 } from "zod";
 var roleI18n = {
   /** Model display name */
-  label: { "en": "Role" },
+  label: { "ja": "\u30ED\u30FC\u30EB", "en": "Role" },
   /** Field labels and placeholders */
   fields: {
+    console_org_id: {
+      label: { "ja": "\u7D44\u7E54ID", "en": "Organization ID" }
+    },
     name: {
-      label: { "en": "Role Name" }
+      label: { "ja": "\u30ED\u30FC\u30EB\u540D", "en": "Role Name" }
     },
     slug: {
-      label: { "en": "Slug" }
+      label: { "ja": "\u30B9\u30E9\u30C3\u30B0", "en": "Slug" }
     },
     description: {
-      label: { "en": "Description" }
+      label: { "ja": "\u8AAC\u660E", "en": "Description" }
     },
     level: {
-      label: { "en": "Level" }
+      label: { "ja": "\u30EC\u30D9\u30EB", "en": "Level" }
     },
     permissions: {
-      label: { "en": "Permissions" }
+      label: { "ja": "\u6A29\u9650", "en": "Permissions" }
     }
   }
 };
 var baseRoleSchemas = {
-  name: z3.string().min(1).max(100),
-  slug: z3.string().min(1).max(100),
-  description: z3.string().optional().nullable(),
-  level: z3.number().int()
+  console_org_id: z4.string().max(36).optional().nullable(),
+  name: z4.string().min(1).max(100),
+  slug: z4.string().min(1).max(100),
+  description: z4.string().optional().nullable(),
+  level: z4.number().int()
 };
-var baseRoleCreateSchema = z3.object({
+var baseRoleCreateSchema = z4.object({
+  console_org_id: baseRoleSchemas.console_org_id,
   name: baseRoleSchemas.name,
   slug: baseRoleSchemas.slug,
   description: baseRoleSchemas.description,
@@ -227,22 +286,22 @@ var roleCreateSchema = baseRoleCreateSchema;
 var roleUpdateSchema = baseRoleUpdateSchema;
 
 // node_modules/@omnify-base/schemas/RolePermission.ts
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 var rolePermissionI18n = {
   /** Model display name */
-  label: { "en": "Role Permission" },
+  label: { "ja": "\u30ED\u30FC\u30EB\u6A29\u9650", "en": "Role Permission" },
   /** Field labels and placeholders */
   fields: {
     role: {
-      label: { "en": "Role" }
+      label: { "ja": "\u30ED\u30FC\u30EB", "en": "Role" }
     },
     permission: {
-      label: { "en": "Permission" }
+      label: { "ja": "\u6A29\u9650", "en": "Permission" }
     }
   }
 };
 var baseRolePermissionSchemas = {};
-var baseRolePermissionCreateSchema = z4.object({});
+var baseRolePermissionCreateSchema = z5.object({});
 var baseRolePermissionUpdateSchema = baseRolePermissionCreateSchema.partial();
 function getRolePermissionLabel(locale) {
   return rolePermissionI18n.label[locale] ?? rolePermissionI18n.label["en"] ?? "RolePermission";
@@ -264,78 +323,78 @@ var rolePermissionSchemas = { ...baseRolePermissionSchemas };
 var rolePermissionCreateSchema = baseRolePermissionCreateSchema;
 var rolePermissionUpdateSchema = baseRolePermissionUpdateSchema;
 
-// node_modules/@omnify-base/schemas/Team.ts
-import { z as z5 } from "zod";
-var teamI18n = {
+// node_modules/@omnify-base/schemas/TeamCache.ts
+import { z as z6 } from "zod";
+var teamCacheI18n = {
   /** Model display name */
-  label: { "en": "Team" },
+  label: { "ja": "\u30C1\u30FC\u30E0\u30AD\u30E3\u30C3\u30B7\u30E5", "en": "Team Cache" },
   /** Field labels and placeholders */
   fields: {
     console_team_id: {
-      label: { "en": "Console Team ID" }
+      label: { "ja": "Console Team ID", "en": "Console Team ID" }
     },
     console_org_id: {
-      label: { "en": "Console Organization ID" }
+      label: { "ja": "Console Organization ID", "en": "Console Organization ID" }
     },
     name: {
-      label: { "en": "Team Name" }
+      label: { "ja": "\u30C1\u30FC\u30E0\u540D", "en": "Team Name" }
     }
   }
 };
-var baseTeamSchemas = {
-  console_team_id: z5.string(),
-  console_org_id: z5.string(),
-  name: z5.string().min(1).max(100)
+var baseTeamCacheSchemas = {
+  console_team_id: z6.string(),
+  console_org_id: z6.string(),
+  name: z6.string().min(1).max(100)
 };
-var baseTeamCreateSchema = z5.object({
-  console_team_id: baseTeamSchemas.console_team_id,
-  console_org_id: baseTeamSchemas.console_org_id,
-  name: baseTeamSchemas.name
+var baseTeamCacheCreateSchema = z6.object({
+  console_team_id: baseTeamCacheSchemas.console_team_id,
+  console_org_id: baseTeamCacheSchemas.console_org_id,
+  name: baseTeamCacheSchemas.name
 });
-var baseTeamUpdateSchema = baseTeamCreateSchema.partial();
-function getTeamLabel(locale) {
-  return teamI18n.label[locale] ?? teamI18n.label["en"] ?? "Team";
+var baseTeamCacheUpdateSchema = baseTeamCacheCreateSchema.partial();
+function getTeamCacheLabel(locale) {
+  return teamCacheI18n.label[locale] ?? teamCacheI18n.label["en"] ?? "TeamCache";
 }
-function getTeamFieldLabel(field, locale) {
-  const fieldI18n = teamI18n.fields[field];
+function getTeamCacheFieldLabel(field, locale) {
+  const fieldI18n = teamCacheI18n.fields[field];
   if (!fieldI18n) return field;
   return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
 }
-function getTeamFieldPlaceholder(field, locale) {
-  const fieldI18n = teamI18n.fields[field];
+function getTeamCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = teamCacheI18n.fields[field];
   if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
   const placeholder = fieldI18n.placeholder;
   return placeholder[locale] ?? placeholder["en"] ?? "";
 }
 
-// src/schemas/Team.ts
-var teamSchemas = { ...baseTeamSchemas };
-var teamCreateSchema = baseTeamCreateSchema;
-var teamUpdateSchema = baseTeamUpdateSchema;
+// src/schemas/TeamCache.ts
+var teamCacheSchemas = { ...baseTeamCacheSchemas };
+var teamCacheCreateSchema = baseTeamCacheCreateSchema;
+var teamCacheUpdateSchema = baseTeamCacheUpdateSchema;
 
 // node_modules/@omnify-base/schemas/TeamPermission.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 var teamPermissionI18n = {
   /** Model display name */
-  label: { "en": "Team Permission" },
+  label: { "ja": "\u30C1\u30FC\u30E0\u6A29\u9650", "en": "Team Permission" },
   /** Field labels and placeholders */
   fields: {
     console_org_id: {
-      label: { "en": "Console Organization ID" }
+      label: { "ja": "Console Organization ID", "en": "Console Organization ID" }
     },
     console_team_id: {
-      label: { "en": "Console Team ID" }
+      label: { "ja": "Console Team ID", "en": "Console Team ID" }
     },
     permission: {
-      label: { "en": "Permission" }
+      label: { "ja": "\u6A29\u9650", "en": "Permission" }
     }
   }
 };
 var baseTeamPermissionSchemas = {
-  console_org_id: z6.string(),
-  console_team_id: z6.string()
+  console_org_id: z7.string(),
+  console_team_id: z7.string()
 };
-var baseTeamPermissionCreateSchema = z6.object({
+var baseTeamPermissionCreateSchema = z7.object({
   console_org_id: baseTeamPermissionSchemas.console_org_id,
   console_team_id: baseTeamPermissionSchemas.console_team_id
 });
@@ -360,72 +419,77 @@ var teamPermissionSchemas = { ...baseTeamPermissionSchemas };
 var teamPermissionCreateSchema = baseTeamPermissionCreateSchema;
 var teamPermissionUpdateSchema = baseTeamPermissionUpdateSchema;
 
-// node_modules/@omnify-base/schemas/User.ts
-import { z as z7 } from "zod";
-var userI18n = {
+// node_modules/@omnify-base/schemas/UserCache.ts
+import { z as z8 } from "zod";
+var userCacheI18n = {
   /** Model display name */
-  label: { "en": "User" },
+  label: { "ja": "\u30E6\u30FC\u30B6\u30FC\u30AD\u30E3\u30C3\u30B7\u30E5", "en": "User Cache" },
   /** Field labels and placeholders */
   fields: {
     name: {
-      label: { "en": "Name" }
+      label: { "ja": "\u540D\u524D", "en": "Name" }
     },
     email: {
-      label: { "en": "Email" }
+      label: { "ja": "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9", "en": "Email" }
     },
     console_user_id: {
-      label: { "en": "Console User ID" }
+      label: { "ja": "Console User ID", "en": "Console User ID" }
+    },
+    console_org_id: {
+      label: { "ja": "\u6240\u5C5E\u7D44\u7E54ID", "en": "Organization ID" }
     },
     console_access_token: {
-      label: { "en": "Console Access Token" }
+      label: { "ja": "Console Access Token", "en": "Console Access Token" }
     },
     console_refresh_token: {
-      label: { "en": "Console Refresh Token" }
+      label: { "ja": "Console Refresh Token", "en": "Console Refresh Token" }
     },
     console_token_expires_at: {
-      label: { "en": "Console Token Expiry" }
+      label: { "ja": "Console Token\u6709\u52B9\u671F\u9650", "en": "Console Token Expiry" }
     },
     roles: {
-      label: { "en": "Roles" }
+      label: { "ja": "\u30ED\u30FC\u30EB", "en": "Roles" }
     }
   }
 };
-var baseUserSchemas = {
-  name: z7.string().min(1),
-  email: z7.string().min(1),
-  console_user_id: z7.string().optional().nullable(),
-  console_access_token: z7.string().optional().nullable(),
-  console_refresh_token: z7.string().optional().nullable(),
-  console_token_expires_at: z7.string().datetime({ offset: true }).optional().nullable()
+var baseUserCacheSchemas = {
+  name: z8.string().min(1),
+  email: z8.string().min(1),
+  console_user_id: z8.string().optional().nullable(),
+  console_org_id: z8.string().optional().nullable(),
+  console_access_token: z8.string().optional().nullable(),
+  console_refresh_token: z8.string().optional().nullable(),
+  console_token_expires_at: z8.string().datetime({ offset: true }).optional().nullable()
 };
-var baseUserCreateSchema = z7.object({
-  name: baseUserSchemas.name,
-  email: baseUserSchemas.email,
-  console_user_id: baseUserSchemas.console_user_id,
-  console_access_token: baseUserSchemas.console_access_token,
-  console_refresh_token: baseUserSchemas.console_refresh_token,
-  console_token_expires_at: baseUserSchemas.console_token_expires_at
+var baseUserCacheCreateSchema = z8.object({
+  name: baseUserCacheSchemas.name,
+  email: baseUserCacheSchemas.email,
+  console_user_id: baseUserCacheSchemas.console_user_id,
+  console_org_id: baseUserCacheSchemas.console_org_id,
+  console_access_token: baseUserCacheSchemas.console_access_token,
+  console_refresh_token: baseUserCacheSchemas.console_refresh_token,
+  console_token_expires_at: baseUserCacheSchemas.console_token_expires_at
 });
-var baseUserUpdateSchema = baseUserCreateSchema.partial();
-function getUserLabel(locale) {
-  return userI18n.label[locale] ?? userI18n.label["en"] ?? "User";
+var baseUserCacheUpdateSchema = baseUserCacheCreateSchema.partial();
+function getUserCacheLabel(locale) {
+  return userCacheI18n.label[locale] ?? userCacheI18n.label["en"] ?? "UserCache";
 }
-function getUserFieldLabel(field, locale) {
-  const fieldI18n = userI18n.fields[field];
+function getUserCacheFieldLabel(field, locale) {
+  const fieldI18n = userCacheI18n.fields[field];
   if (!fieldI18n) return field;
   return fieldI18n.label[locale] ?? fieldI18n.label["en"] ?? field;
 }
-function getUserFieldPlaceholder(field, locale) {
-  const fieldI18n = userI18n.fields[field];
+function getUserCacheFieldPlaceholder(field, locale) {
+  const fieldI18n = userCacheI18n.fields[field];
   if (!fieldI18n || !("placeholder" in fieldI18n)) return "";
   const placeholder = fieldI18n.placeholder;
   return placeholder[locale] ?? placeholder["en"] ?? "";
 }
 
-// src/schemas/User.ts
-var userSchemas = { ...baseUserSchemas };
-var userCreateSchema = baseUserCreateSchema;
-var userUpdateSchema = baseUserUpdateSchema;
+// src/schemas/UserCache.ts
+var userCacheSchemas = { ...baseUserCacheSchemas };
+var userCacheCreateSchema = baseUserCacheCreateSchema;
+var userCacheUpdateSchema = baseUserCacheUpdateSchema;
 
 // src/context/SsoContext.tsx
 import { createContext, useContext } from "react";
@@ -651,20 +715,360 @@ function SsoProvider({ children, config, onAuthChange }) {
   return /* @__PURE__ */ jsx(SsoContext.Provider, { value, children });
 }
 
+// src/context/BranchContext.tsx
+import { createContext as createContext2, useContext as useContext2 } from "react";
+var BranchContext = createContext2(null);
+function useBranchContext() {
+  const context = useContext2(BranchContext);
+  if (!context) {
+    throw new Error("useBranchContext must be used within a BranchProvider");
+  }
+  return context;
+}
+
+// src/context/BranchProvider.tsx
+import { useQuery, useQueryClient } from "@tanstack/react-query";
+import { useCallback as useCallback2, useEffect as useEffect2, useMemo as useMemo2, useState as useState2 } from "react";
+
+// src/queryKeys.ts
+var ssoQueryKeys = {
+  all: ["sso"],
+  // =========================================================================
+  // Auth (authService)
+  // =========================================================================
+  auth: {
+    all: () => [...ssoQueryKeys.all, "auth"],
+    user: () => [...ssoQueryKeys.auth.all(), "user"],
+    globalLogoutUrl: (redirectUri) => [...ssoQueryKeys.auth.all(), "global-logout-url", redirectUri]
+  },
+  // =========================================================================
+  // Tokens (tokenService)
+  // =========================================================================
+  tokens: {
+    all: () => [...ssoQueryKeys.all, "tokens"],
+    list: () => [...ssoQueryKeys.tokens.all(), "list"]
+  },
+  // =========================================================================
+  // Roles (roleService)
+  // =========================================================================
+  roles: {
+    all: () => [...ssoQueryKeys.all, "roles"],
+    list: () => [...ssoQueryKeys.roles.all(), "list"],
+    detail: (id) => [...ssoQueryKeys.roles.all(), "detail", id],
+    permissions: (id) => [...ssoQueryKeys.roles.all(), id, "permissions"]
+  },
+  // =========================================================================
+  // Permissions (permissionService)
+  // =========================================================================
+  permissions: {
+    all: () => [...ssoQueryKeys.all, "permissions"],
+    list: (params) => [...ssoQueryKeys.permissions.all(), "list", params],
+    detail: (id) => [...ssoQueryKeys.permissions.all(), "detail", id],
+    matrix: () => [...ssoQueryKeys.permissions.all(), "matrix"]
+  },
+  // =========================================================================
+  // Teams (teamService)
+  // =========================================================================
+  teams: {
+    all: () => [...ssoQueryKeys.all, "teams"],
+    list: () => [...ssoQueryKeys.teams.all(), "list"],
+    permissions: (teamId) => [...ssoQueryKeys.teams.all(), teamId, "permissions"],
+    orphaned: () => [...ssoQueryKeys.teams.all(), "orphaned"]
+  },
+  // =========================================================================
+  // User Roles (userRoleService) - Scoped Role Assignments
+  // =========================================================================
+  userRoles: {
+    all: () => [...ssoQueryKeys.all, "user-roles"],
+    list: (userId) => [...ssoQueryKeys.userRoles.all(), userId],
+    byBranch: (userId, orgId, branchId) => [...ssoQueryKeys.userRoles.all(), userId, orgId, branchId]
+  },
+  // =========================================================================
+  // Users (userService)
+  // =========================================================================
+  users: {
+    all: () => [...ssoQueryKeys.all, "users"],
+    list: (params) => [...ssoQueryKeys.users.all(), "list", params],
+    detail: (id) => [...ssoQueryKeys.users.all(), "detail", id]
+  },
+  // =========================================================================
+  // Branches (branchService)
+  // =========================================================================
+  branches: {
+    all: () => [...ssoQueryKeys.all, "branches"],
+    list: (orgSlug) => [...ssoQueryKeys.branches.all(), "list", orgSlug],
+    detail: (branchId) => [...ssoQueryKeys.branches.all(), "detail", branchId],
+    headquarters: (orgSlug) => [...ssoQueryKeys.branches.all(), "headquarters", orgSlug],
+    primary: (orgSlug) => [...ssoQueryKeys.branches.all(), "primary", orgSlug]
+  },
+  // =========================================================================
+  // Admin variants (with org context)
+  // =========================================================================
+  admin: {
+    users: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "users"],
+      list: (orgSlug, params) => [...ssoQueryKeys.admin.users.all(orgSlug), "list", params],
+      detail: (orgSlug, id) => [...ssoQueryKeys.admin.users.all(orgSlug), "detail", id]
+    },
+    roles: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "roles"],
+      list: (orgSlug) => [...ssoQueryKeys.admin.roles.all(orgSlug), "list"],
+      detail: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), "detail", id],
+      permissions: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), id, "permissions"]
+    },
+    permissions: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "permissions"],
+      list: (orgSlug, params) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "list", params],
+      detail: (orgSlug, id) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "detail", id],
+      matrix: (orgSlug) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "matrix"]
+    },
+    teams: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "teams"],
+      list: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "list"],
+      permissions: (orgSlug, teamId) => [...ssoQueryKeys.admin.teams.all(orgSlug), teamId, "permissions"],
+      orphaned: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "orphaned"]
+    },
+    userRoles: {
+      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "user-roles"],
+      list: (orgSlug, userId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId],
+      byBranch: (orgSlug, userId, orgId, branchId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId, orgId, branchId]
+    }
+  }
+};
+
+// src/services/utils.ts
+function getXsrfToken2() {
+  if (typeof document === "undefined") return void 0;
+  return document.cookie.split("; ").find((row) => row.startsWith("XSRF-TOKEN="))?.split("=")[1];
+}
+function buildHeaders(orgSlug) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json"
+  };
+  const xsrfToken = getXsrfToken2();
+  if (xsrfToken) {
+    headers["X-XSRF-TOKEN"] = decodeURIComponent(xsrfToken);
+  }
+  if (orgSlug) {
+    headers["X-Org-Id"] = orgSlug;
+  }
+  return headers;
+}
+async function csrf(apiUrl) {
+  await fetch(`${apiUrl}/sanctum/csrf-cookie`, {
+    credentials: "include"
+  });
+}
+async function request(apiUrl, path, options = {}) {
+  const response = await fetch(`${apiUrl}${path}`, {
+    ...options,
+    credentials: "include"
+  });
+  if (!response.ok) {
+    const error = await response.json().catch(() => ({}));
+    throw new Error(error.message || `HTTP ${response.status}`);
+  }
+  if (response.status === 204) {
+    return void 0;
+  }
+  return response.json();
+}
+
+// src/services/branchService.ts
+function createBranchService(config) {
+  const { apiUrl } = config;
+  return {
+    /**
+     * Get branches for current user in organization
+     * GET /api/sso/branches
+     */
+    list: async (orgSlug) => {
+      const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
+      return request(apiUrl, `/api/sso/branches${params}`, {
+        headers: buildHeaders()
+      });
+    },
+    /**
+     * Get a specific branch by ID
+     * GET /api/sso/branches/{id}
+     */
+    get: async (branchId) => {
+      const response = await request(
+        apiUrl,
+        `/api/sso/branches/${branchId}`,
+        { headers: buildHeaders() }
+      );
+      return "data" in response ? response.data : response;
+    },
+    /**
+     * Get headquarters branch for organization
+     */
+    getHeadquarters: async (orgSlug) => {
+      try {
+        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
+        const data = await request(
+          apiUrl,
+          `/api/sso/branches${params}`,
+          { headers: buildHeaders() }
+        );
+        return data.branches.find((b) => b.is_headquarters) ?? null;
+      } catch {
+        return null;
+      }
+    },
+    /**
+     * Get primary branch for current user
+     */
+    getPrimary: async (orgSlug) => {
+      try {
+        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
+        const data = await request(
+          apiUrl,
+          `/api/sso/branches${params}`,
+          { headers: buildHeaders() }
+        );
+        if (data.primary_branch_id) {
+          return data.branches.find((b) => b.id === data.primary_branch_id) ?? null;
+        }
+        return null;
+      } catch {
+        return null;
+      }
+    }
+  };
+}
+
+// src/context/BranchProvider.tsx
+import { jsx as jsx2 } from "react/jsx-runtime";
+var DEFAULT_STORAGE_KEY = "omnify_selected_branch";
+function BranchProvider({
+  children,
+  storage = "localStorage",
+  storageKey = DEFAULT_STORAGE_KEY,
+  onBranchChange
+}) {
+  const { config, currentOrg, isAuthenticated } = useSsoContext();
+  const queryClient = useQueryClient();
+  const branchService = useMemo2(
+    () => createBranchService({ apiUrl: config.apiUrl }),
+    [config.apiUrl]
+  );
+  const getSavedBranchId = useCallback2(() => {
+    if (typeof window === "undefined") return null;
+    const storageObj = storage === "localStorage" ? localStorage : sessionStorage;
+    const saved = storageObj.getItem(`${storageKey}_${currentOrg?.slug}`);
+    return saved ? parseInt(saved, 10) : null;
+  }, [storage, storageKey, currentOrg?.slug]);
+  const saveBranchId = useCallback2((branchId) => {
+    if (typeof window === "undefined" || !currentOrg?.slug) return;
+    const storageObj = storage === "localStorage" ? localStorage : sessionStorage;
+    if (branchId) {
+      storageObj.setItem(`${storageKey}_${currentOrg.slug}`, String(branchId));
+    } else {
+      storageObj.removeItem(`${storageKey}_${currentOrg.slug}`);
+    }
+  }, [storage, storageKey, currentOrg?.slug]);
+  const [selectedBranchId, setSelectedBranchId] = useState2(() => getSavedBranchId());
+  const {
+    data: branchesData,
+    isLoading,
+    error,
+    refetch
+  } = useQuery({
+    queryKey: ssoQueryKeys.branches.list(currentOrg?.slug),
+    queryFn: () => branchService.list(currentOrg?.slug),
+    enabled: isAuthenticated && !!currentOrg,
+    staleTime: 5 * 60 * 1e3
+    // 5 minutes
+  });
+  const branches = branchesData?.branches ?? [];
+  const allBranchesAccess = branchesData?.all_branches_access ?? false;
+  const primaryBranchId = branchesData?.primary_branch_id ?? null;
+  const hasMultipleBranches = branches.length > 1;
+  const currentBranch = useMemo2(() => {
+    if (!branches.length) return null;
+    if (branches.length === 1) {
+      return branches[0];
+    }
+    if (selectedBranchId) {
+      const found = branches.find((b) => b.id === selectedBranchId);
+      if (found) return found;
+    }
+    if (primaryBranchId) {
+      const primary = branches.find((b) => b.id === primaryBranchId);
+      if (primary) return primary;
+    }
+    const hq = branches.find((b) => b.is_headquarters);
+    if (hq) return hq;
+    return branches[0];
+  }, [branches, selectedBranchId, primaryBranchId]);
+  useEffect2(() => {
+    if (currentBranch && currentBranch.id !== selectedBranchId) {
+      setSelectedBranchId(currentBranch.id);
+      saveBranchId(currentBranch.id);
+      onBranchChange?.(currentBranch);
+    }
+  }, [currentBranch, selectedBranchId, saveBranchId, onBranchChange]);
+  useEffect2(() => {
+    const savedId = getSavedBranchId();
+    setSelectedBranchId(savedId);
+  }, [currentOrg?.slug, getSavedBranchId]);
+  const switchBranch = useCallback2((branchId) => {
+    const branch = branches.find((b) => b.id === branchId);
+    if (branch) {
+      setSelectedBranchId(branchId);
+      saveBranchId(branchId);
+      onBranchChange?.(branch);
+    }
+  }, [branches, saveBranchId, onBranchChange]);
+  const refreshBranches = useCallback2(async () => {
+    await queryClient.invalidateQueries({
+      queryKey: ssoQueryKeys.branches.list(currentOrg?.slug)
+    });
+    await refetch();
+  }, [queryClient, currentOrg?.slug, refetch]);
+  const contextValue = useMemo2(
+    () => ({
+      branches,
+      currentBranch,
+      allBranchesAccess,
+      primaryBranchId,
+      isLoading,
+      error,
+      hasMultipleBranches,
+      switchBranch,
+      refreshBranches
+    }),
+    [
+      branches,
+      currentBranch,
+      allBranchesAccess,
+      primaryBranchId,
+      isLoading,
+      error,
+      hasMultipleBranches,
+      switchBranch,
+      refreshBranches
+    ]
+  );
+  return /* @__PURE__ */ jsx2(BranchContext.Provider, { value: contextValue, children });
+}
+
 // src/hooks/useAuth.ts
-import { useCallback as useCallback2 } from "react";
+import { useCallback as useCallback3 } from "react";
 function useAuth() {
   const { user, isLoading, isAuthenticated, login, logout, globalLogout, refreshUser } = useSsoContext();
-  const handleLogin = useCallback2(
+  const handleLogin = useCallback3(
     (redirectTo) => {
       login(redirectTo);
     },
     [login]
   );
-  const handleLogout = useCallback2(async () => {
+  const handleLogout = useCallback3(async () => {
     await logout();
   }, [logout]);
-  const handleGlobalLogout = useCallback2(
+  const handleGlobalLogout = useCallback3(
     (redirectTo) => {
       globalLogout(redirectTo);
     },
@@ -682,7 +1086,7 @@ function useAuth() {
 }
 
 // src/hooks/useOrganization.ts
-import { useCallback as useCallback3, useMemo as useMemo2 } from "react";
+import { useCallback as useCallback4, useMemo as useMemo3 } from "react";
 var ROLE_LEVELS = {
   admin: 100,
   manager: 50,
@@ -692,7 +1096,7 @@ function useOrganization() {
   const { organizations, currentOrg, switchOrg } = useSsoContext();
   const hasMultipleOrgs = organizations.length > 1;
   const currentRole = currentOrg?.serviceRole ?? null;
-  const hasRole = useCallback3(
+  const hasRole = useCallback4(
     (role) => {
       if (!currentRole) return false;
       const requiredLevel = ROLE_LEVELS[role] ?? 0;
@@ -701,13 +1105,13 @@ function useOrganization() {
     },
     [currentRole]
   );
-  const handleSwitchOrg = useCallback3(
+  const handleSwitchOrg = useCallback4(
     (orgSlug) => {
       switchOrg(orgSlug);
     },
     [switchOrg]
   );
-  return useMemo2(
+  return useMemo3(
     () => ({
       organizations,
       currentOrg,
@@ -721,10 +1125,10 @@ function useOrganization() {
 }
 
 // src/hooks/useSso.ts
-import { useMemo as useMemo3 } from "react";
+import { useMemo as useMemo4 } from "react";
 function useSso() {
   const context = useSsoContext();
-  return useMemo3(
+  return useMemo4(
     () => ({
       // Auth
       user: context.user,
@@ -747,9 +1151,14 @@ function useSso() {
   );
 }
 
+// src/hooks/useBranch.ts
+function useBranch() {
+  return useBranchContext();
+}
+
 // src/components/SsoCallback.tsx
-import { useEffect as useEffect2, useRef, useState as useState2 } from "react";
-import { Fragment, jsx as jsx2, jsxs } from "react/jsx-runtime";
+import { useEffect as useEffect3, useRef, useState as useState3 } from "react";
+import { Fragment, jsx as jsx3, jsxs } from "react/jsx-runtime";
 function transformUser2(data) {
   return {
     id: data.id,
@@ -768,12 +1177,12 @@ function transformOrganizations2(data) {
   }));
 }
 function DefaultLoading() {
-  return /* @__PURE__ */ jsx2("div", { style: {
+  return /* @__PURE__ */ jsx3("div", { style: {
     display: "flex",
     justifyContent: "center",
     alignItems: "center",
     minHeight: "200px"
-  }, children: /* @__PURE__ */ jsx2("div", { children: "Authenticating..." }) });
+  }, children: /* @__PURE__ */ jsx3("div", { children: "Authenticating..." }) });
 }
 function DefaultError({ error }) {
   return /* @__PURE__ */ jsxs("div", { style: {
@@ -784,8 +1193,8 @@ function DefaultError({ error }) {
     minHeight: "200px",
     color: "red"
   }, children: [
-    /* @__PURE__ */ jsx2("div", { children: "Authentication Error" }),
-    /* @__PURE__ */ jsx2("div", { style: { fontSize: "0.875rem", marginTop: "0.5rem" }, children: error.message })
+    /* @__PURE__ */ jsx3("div", { children: "Authentication Error" }),
+    /* @__PURE__ */ jsx3("div", { style: { fontSize: "0.875rem", marginTop: "0.5rem" }, children: error.message })
   ] });
 }
 function SsoCallback({
@@ -796,10 +1205,10 @@ function SsoCallback({
   errorComponent
 }) {
   const { config, refreshUser } = useSsoContext();
-  const [error, setError] = useState2(null);
-  const [isProcessing, setIsProcessing] = useState2(true);
+  const [error, setError] = useState3(null);
+  const [isProcessing, setIsProcessing] = useState3(true);
   const isProcessingRef = useRef(false);
-  useEffect2(() => {
+  useEffect3(() => {
     if (isProcessingRef.current) {
       return;
     }
@@ -850,24 +1259,24 @@ function SsoCallback({
   }, []);
   if (error) {
     if (errorComponent) {
-      return /* @__PURE__ */ jsx2(Fragment, { children: errorComponent(error) });
+      return /* @__PURE__ */ jsx3(Fragment, { children: errorComponent(error) });
     }
-    return /* @__PURE__ */ jsx2(DefaultError, { error });
+    return /* @__PURE__ */ jsx3(DefaultError, { error });
   }
   if (isProcessing) {
     if (loadingComponent) {
-      return /* @__PURE__ */ jsx2(Fragment, { children: loadingComponent });
+      return /* @__PURE__ */ jsx3(Fragment, { children: loadingComponent });
     }
-    return /* @__PURE__ */ jsx2(DefaultLoading, {});
+    return /* @__PURE__ */ jsx3(DefaultLoading, {});
   }
   return null;
 }
 
 // src/components/OrganizationSwitcher.tsx
-import React3, { useCallback as useCallback4, useMemo as useMemo4 } from "react";
-import { Dropdown, Button, Space, Typography, Badge } from "antd";
 import { SwapOutlined, CheckOutlined } from "@ant-design/icons";
-import { jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
+import { Dropdown, Button, Space, Typography, Badge } from "antd";
+import React4, { useCallback as useCallback5, useMemo as useMemo5 } from "react";
+import { jsx as jsx4, jsxs as jsxs2 } from "react/jsx-runtime";
 var { Text } = Typography;
 function OrganizationSwitcher({
   className,
@@ -876,8 +1285,8 @@ function OrganizationSwitcher({
   onChange
 }) {
   const { organizations, currentOrg, hasMultipleOrgs, switchOrg } = useOrganization();
-  const [isOpen, setIsOpen] = React3.useState(false);
-  const handleSelect = useCallback4(
+  const [isOpen, setIsOpen] = React4.useState(false);
+  const handleSelect = useCallback5(
     (org) => {
       switchOrg(org.slug);
       setIsOpen(false);
@@ -885,23 +1294,23 @@ function OrganizationSwitcher({
     },
     [switchOrg, onChange]
   );
-  const menuItems = useMemo4(() => {
+  const menuItems = useMemo5(() => {
     return organizations.map((org) => {
       const isSelected = currentOrg?.slug === org.slug;
       if (renderOption) {
         return {
           key: org.slug,
-          label: /* @__PURE__ */ jsx3("div", { onClick: () => handleSelect(org), children: renderOption(org, isSelected) })
+          label: /* @__PURE__ */ jsx4("div", { onClick: () => handleSelect(org), children: renderOption(org, isSelected) })
         };
       }
       return {
         key: org.slug,
         label: /* @__PURE__ */ jsxs2(Space, { style: { width: "100%", justifyContent: "space-between" }, children: [
           /* @__PURE__ */ jsxs2(Space, { direction: "vertical", size: 0, children: [
-            /* @__PURE__ */ jsx3(Text, { strong: isSelected, children: org.name }),
-            org.serviceRole && /* @__PURE__ */ jsx3(Text, { type: "secondary", style: { fontSize: 12 }, children: org.serviceRole })
+            /* @__PURE__ */ jsx4(Text, { strong: isSelected, children: org.name }),
+            org.serviceRole && /* @__PURE__ */ jsx4(Text, { type: "secondary", style: { fontSize: 12 }, children: org.serviceRole })
           ] }),
-          isSelected && /* @__PURE__ */ jsx3(CheckOutlined, { style: { color: "#1890ff" } })
+          isSelected && /* @__PURE__ */ jsx4(CheckOutlined, { style: { color: "#1890ff" } })
         ] }),
         onClick: () => handleSelect(org)
       };
@@ -911,7 +1320,7 @@ function OrganizationSwitcher({
     return null;
   }
   if (renderTrigger) {
-    return /* @__PURE__ */ jsx3(
+    return /* @__PURE__ */ jsx4(
       Dropdown,
       {
         menu: { items: menuItems },
@@ -919,11 +1328,11 @@ function OrganizationSwitcher({
         open: isOpen,
         onOpenChange: setIsOpen,
         className,
-        children: /* @__PURE__ */ jsx3("div", { style: { cursor: "pointer" }, children: renderTrigger(currentOrg, isOpen) })
+        children: /* @__PURE__ */ jsx4("div", { style: { cursor: "pointer" }, children: renderTrigger(currentOrg, isOpen) })
       }
     );
   }
-  return /* @__PURE__ */ jsx3(
+  return /* @__PURE__ */ jsx4(
     Dropdown,
     {
       menu: { items: menuItems },
@@ -931,25 +1340,25 @@ function OrganizationSwitcher({
       open: isOpen,
       onOpenChange: setIsOpen,
       className,
-      children: /* @__PURE__ */ jsx3(Button, { children: /* @__PURE__ */ jsxs2(Space, { children: [
-        /* @__PURE__ */ jsx3(Badge, { status: "success" }),
-        /* @__PURE__ */ jsx3("span", { children: currentOrg?.name ?? "Select Organization" }),
-        /* @__PURE__ */ jsx3(SwapOutlined, {})
+      children: /* @__PURE__ */ jsx4(Button, { children: /* @__PURE__ */ jsxs2(Space, { children: [
+        /* @__PURE__ */ jsx4(Badge, { status: "success" }),
+        /* @__PURE__ */ jsx4("span", { children: currentOrg?.name ?? "Select Organization" }),
+        /* @__PURE__ */ jsx4(SwapOutlined, {})
       ] }) })
     }
   );
 }
 
 // src/components/ProtectedRoute.tsx
-import { useEffect as useEffect3 } from "react";
-import { Fragment as Fragment2, jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
+import { useEffect as useEffect4 } from "react";
+import { Fragment as Fragment2, jsx as jsx5, jsxs as jsxs3 } from "react/jsx-runtime";
 function DefaultLoading2() {
-  return /* @__PURE__ */ jsx4("div", { style: {
+  return /* @__PURE__ */ jsx5("div", { style: {
     display: "flex",
     justifyContent: "center",
     alignItems: "center",
     minHeight: "200px"
-  }, children: /* @__PURE__ */ jsx4("div", { children: "Loading..." }) });
+  }, children: /* @__PURE__ */ jsx5("div", { children: "Loading..." }) });
 }
 function DefaultLoginFallback({ login }) {
   return /* @__PURE__ */ jsxs3("div", { style: {
@@ -960,8 +1369,8 @@ function DefaultLoginFallback({ login }) {
     minHeight: "200px",
     gap: "1rem"
   }, children: [
-    /* @__PURE__ */ jsx4("div", { children: "Please log in to continue" }),
-    /* @__PURE__ */ jsx4(
+    /* @__PURE__ */ jsx5("div", { children: "Please log in to continue" }),
+    /* @__PURE__ */ jsx5(
       "button",
       {
         onClick: login,
@@ -987,85 +1396,1104 @@ function DefaultAccessDenied({ reason }) {
     minHeight: "200px",
     color: "#dc2626"
   }, children: [
-    /* @__PURE__ */ jsx4("div", { style: { fontSize: "1.5rem", fontWeight: 600 }, children: "Access Denied" }),
-    /* @__PURE__ */ jsx4("div", { style: { marginTop: "0.5rem" }, children: reason })
+    /* @__PURE__ */ jsx5("div", { style: { fontSize: "1.5rem", fontWeight: 600 }, children: "Access Denied" }),
+    /* @__PURE__ */ jsx5("div", { style: { marginTop: "0.5rem" }, children: reason })
   ] });
 }
-function ProtectedRoute({
-  children,
-  fallback,
-  loginFallback,
-  requiredRole,
-  requiredPermission,
-  onAccessDenied
+function ProtectedRoute({
+  children,
+  fallback,
+  loginFallback,
+  requiredRole,
+  requiredPermission,
+  onAccessDenied
+}) {
+  const { user, isLoading, isAuthenticated, login } = useAuth();
+  const { hasRole, currentOrg } = useOrganization();
+  useEffect4(() => {
+    if (isLoading) return;
+    if (!isAuthenticated) {
+      onAccessDenied?.("unauthenticated");
+    } else if (requiredRole && !hasRole(requiredRole)) {
+      onAccessDenied?.("insufficient_role");
+    }
+  }, [isLoading, isAuthenticated, requiredRole, hasRole, onAccessDenied]);
+  if (isLoading) {
+    return /* @__PURE__ */ jsx5(Fragment2, { children: fallback ?? /* @__PURE__ */ jsx5(DefaultLoading2, {}) });
+  }
+  if (!isAuthenticated) {
+    if (loginFallback) {
+      return /* @__PURE__ */ jsx5(Fragment2, { children: loginFallback });
+    }
+    return /* @__PURE__ */ jsx5(DefaultLoginFallback, { login: () => login() });
+  }
+  if (requiredRole && !hasRole(requiredRole)) {
+    return /* @__PURE__ */ jsx5(
+      DefaultAccessDenied,
+      {
+        reason: `This page requires ${requiredRole} role. Your role: ${currentOrg?.serviceRole ?? "none"}`
+      }
+    );
+  }
+  return /* @__PURE__ */ jsx5(Fragment2, { children });
+}
+
+// src/components/OrgBranchSelectorModal.tsx
+import { BankOutlined, ApartmentOutlined, CheckCircleFilled } from "@ant-design/icons";
+import { useQuery as useQuery2 } from "@tanstack/react-query";
+import { Modal, Select, Form, Space as Space2, Typography as Typography2, Spin, Alert, Badge as Badge2 } from "antd";
+import { useCallback as useCallback6, useEffect as useEffect5, useMemo as useMemo6, useState as useState4 } from "react";
+import { jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
+var { Text: Text2, Title } = Typography2;
+function OrgBranchSelectorModal({
+  open,
+  onClose,
+  onConfirm,
+  title = "Select Organization & Branch",
+  requireBranch = true,
+  loadingComponent
+}) {
+  const { config } = useSsoContext();
+  const { organizations, currentOrg, hasMultipleOrgs } = useOrganization();
+  const { currentBranch } = useBranch();
+  const [form] = Form.useForm();
+  const [selectedOrgSlug, setSelectedOrgSlug] = useState4(
+    currentOrg?.slug ?? null
+  );
+  const branchService = useMemo6(
+    () => createBranchService({ apiUrl: config.apiUrl }),
+    [config.apiUrl]
+  );
+  const {
+    data: branchesData,
+    isLoading: branchesLoading,
+    error: branchesError
+  } = useQuery2({
+    queryKey: ssoQueryKeys.branches.list(selectedOrgSlug ?? void 0),
+    queryFn: () => branchService.list(selectedOrgSlug ?? void 0),
+    enabled: open && !!selectedOrgSlug
+  });
+  const branches = branchesData?.branches ?? [];
+  const hasMultipleBranches = branches.length > 1;
+  const selectedOrg = useMemo6(
+    () => {
+      if (selectedOrgSlug) {
+        return organizations.find((o) => o.slug === selectedOrgSlug) ?? null;
+      }
+      if (organizations.length === 1) {
+        return organizations[0];
+      }
+      return null;
+    },
+    [organizations, selectedOrgSlug]
+  );
+  useEffect5(() => {
+    if (!open) return;
+    if (selectedOrgSlug && form.getFieldValue("organization_id")) return;
+    if (currentOrg) {
+      setSelectedOrgSlug(currentOrg.slug);
+      form.setFieldValue("organization_id", currentOrg.id);
+    } else if (organizations.length === 1) {
+      setSelectedOrgSlug(organizations[0].slug);
+      form.setFieldValue("organization_id", organizations[0].id);
+    }
+  }, [open, organizations, currentOrg, selectedOrgSlug, form]);
+  useEffect5(() => {
+    if (!open || branchesLoading) return;
+    if (branches.length === 1) {
+      form.setFieldValue("branch_id", branches[0].id);
+    } else if (branches.length > 0) {
+      if (currentBranch && branches.some((b) => b.id === currentBranch.id)) {
+        form.setFieldValue("branch_id", currentBranch.id);
+      } else {
+        const primaryId = branchesData?.primary_branch_id;
+        if (primaryId) {
+          form.setFieldValue("branch_id", primaryId);
+        } else {
+          const hq = branches.find((b) => b.is_headquarters);
+          if (hq) {
+            form.setFieldValue("branch_id", hq.id);
+          }
+        }
+      }
+    }
+  }, [open, branches, branchesLoading, branchesData, currentBranch, form]);
+  useEffect5(() => {
+    if (!open || branchesLoading) return;
+    const orgId = form.getFieldValue("organization_id");
+    const branchId = form.getFieldValue("branch_id");
+    if (orgId && branchId && !hasMultipleOrgs && !hasMultipleBranches) {
+      const timer = setTimeout(() => {
+        onConfirm(orgId, branchId);
+      }, 100);
+      return () => clearTimeout(timer);
+    }
+  }, [open, branchesLoading, hasMultipleOrgs, hasMultipleBranches, form, onConfirm]);
+  const handleOrgChange = useCallback6((orgId) => {
+    const org = organizations.find((o) => o.id === orgId);
+    if (org) {
+      setSelectedOrgSlug(org.slug);
+      form.setFieldValue("branch_id", void 0);
+    }
+  }, [organizations, form]);
+  const handleSubmit = useCallback6(() => {
+    form.validateFields().then((values) => {
+      onConfirm(values.organization_id, values.branch_id);
+    });
+  }, [form, onConfirm]);
+  const handleClose = useCallback6(() => {
+    form.resetFields();
+    setSelectedOrgSlug(currentOrg?.slug ?? null);
+    onClose();
+  }, [form, currentOrg, onClose]);
+  const isInitialLoading = open && (!organizations.length || selectedOrgSlug && branchesLoading && !branches.length);
+  const needsSelection = hasMultipleOrgs || hasMultipleBranches;
+  return /* @__PURE__ */ jsx6(
+    Modal,
+    {
+      title: /* @__PURE__ */ jsxs4(Space2, { children: [
+        /* @__PURE__ */ jsx6(BankOutlined, {}),
+        /* @__PURE__ */ jsx6("span", { children: title })
+      ] }),
+      open,
+      onCancel: handleClose,
+      onOk: handleSubmit,
+      okText: "Confirm",
+      cancelText: "Cancel",
+      destroyOnHidden: true,
+      width: 480,
+      children: isInitialLoading ? /* @__PURE__ */ jsxs4("div", { style: { textAlign: "center", padding: 40 }, children: [
+        loadingComponent ?? /* @__PURE__ */ jsx6(Spin, { size: "large" }),
+        /* @__PURE__ */ jsx6("div", { style: { marginTop: 16 }, children: /* @__PURE__ */ jsx6(Text2, { type: "secondary", children: "Loading..." }) })
+      ] }) : /* @__PURE__ */ jsxs4(
+        Form,
+        {
+          form,
+          layout: "vertical",
+          style: { marginTop: 16 },
+          children: [
+            branchesError && /* @__PURE__ */ jsx6(
+              Alert,
+              {
+                type: "error",
+                message: "Failed to load branches",
+                description: branchesError.message,
+                style: { marginBottom: 16 }
+              }
+            ),
+            /* @__PURE__ */ jsx6(
+              Form.Item,
+              {
+                name: "organization_id",
+                label: /* @__PURE__ */ jsxs4(Space2, { children: [
+                  /* @__PURE__ */ jsx6(BankOutlined, {}),
+                  /* @__PURE__ */ jsx6("span", { children: "Organization" }),
+                  !hasMultipleOrgs && selectedOrg && /* @__PURE__ */ jsx6(Badge2, { status: "success", text: "Auto-selected" })
+                ] }),
+                rules: [{ required: true, message: "Please select an organization" }],
+                children: hasMultipleOrgs ? /* @__PURE__ */ jsx6(
+                  Select,
+                  {
+                    placeholder: "Select organization",
+                    onChange: handleOrgChange,
+                    size: "large",
+                    optionLabelProp: "label",
+                    children: organizations.map((org) => /* @__PURE__ */ jsx6(
+                      Select.Option,
+                      {
+                        value: org.id,
+                        label: org.name,
+                        children: /* @__PURE__ */ jsxs4(Space2, { style: { width: "100%", justifyContent: "space-between" }, children: [
+                          /* @__PURE__ */ jsxs4("div", { children: [
+                            /* @__PURE__ */ jsx6(Text2, { strong: true, children: org.name }),
+                            org.serviceRole && /* @__PURE__ */ jsxs4(Text2, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: [
+                              "(",
+                              org.serviceRole,
+                              ")"
+                            ] })
+                          ] }),
+                          org.slug === currentOrg?.slug && /* @__PURE__ */ jsx6(CheckCircleFilled, { style: { color: "#52c41a" } })
+                        ] })
+                      },
+                      org.id
+                    ))
+                  }
+                ) : /* @__PURE__ */ jsx6(
+                  "div",
+                  {
+                    style: {
+                      padding: "8px 12px",
+                      background: "#f5f5f5",
+                      borderRadius: 6,
+                      border: "1px solid #d9d9d9"
+                    },
+                    children: /* @__PURE__ */ jsxs4(Space2, { children: [
+                      /* @__PURE__ */ jsx6(BankOutlined, { style: { color: "#1677ff" } }),
+                      /* @__PURE__ */ jsx6(Text2, { strong: true, children: selectedOrg?.name })
+                    ] })
+                  }
+                )
+              }
+            ),
+            selectedOrgSlug && /* @__PURE__ */ jsx6(
+              Form.Item,
+              {
+                name: "branch_id",
+                label: /* @__PURE__ */ jsxs4(Space2, { children: [
+                  /* @__PURE__ */ jsx6(ApartmentOutlined, {}),
+                  /* @__PURE__ */ jsx6("span", { children: "Branch" }),
+                  !hasMultipleBranches && branches.length === 1 && /* @__PURE__ */ jsx6(Badge2, { status: "success", text: "Auto-selected" })
+                ] }),
+                rules: requireBranch ? [{ required: true, message: "Please select a branch" }] : void 0,
+                children: branchesLoading ? /* @__PURE__ */ jsxs4("div", { style: { padding: "8px 12px", textAlign: "center" }, children: [
+                  /* @__PURE__ */ jsx6(Spin, { size: "small" }),
+                  /* @__PURE__ */ jsx6(Text2, { type: "secondary", style: { marginLeft: 8 }, children: "Loading branches..." })
+                ] }) : hasMultipleBranches ? /* @__PURE__ */ jsx6(
+                  Select,
+                  {
+                    placeholder: "Select branch",
+                    size: "large",
+                    optionLabelProp: "label",
+                    children: branches.map((branch) => /* @__PURE__ */ jsx6(
+                      Select.Option,
+                      {
+                        value: branch.id,
+                        label: branch.name,
+                        children: /* @__PURE__ */ jsxs4(Space2, { style: { width: "100%", justifyContent: "space-between" }, children: [
+                          /* @__PURE__ */ jsxs4("div", { children: [
+                            /* @__PURE__ */ jsx6(Text2, { strong: true, children: branch.name }),
+                            /* @__PURE__ */ jsx6(Text2, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: branch.code })
+                          ] }),
+                          /* @__PURE__ */ jsxs4(Space2, { size: 4, children: [
+                            branch.is_headquarters && /* @__PURE__ */ jsx6(Badge2, { color: "blue", text: "HQ" }),
+                            branch.is_primary && /* @__PURE__ */ jsx6(Badge2, { color: "green", text: "Primary" })
+                          ] })
+                        ] })
+                      },
+                      branch.id
+                    ))
+                  }
+                ) : branches.length === 1 ? /* @__PURE__ */ jsx6(
+                  "div",
+                  {
+                    style: {
+                      padding: "8px 12px",
+                      background: "#f5f5f5",
+                      borderRadius: 6,
+                      border: "1px solid #d9d9d9"
+                    },
+                    children: /* @__PURE__ */ jsxs4(Space2, { children: [
+                      /* @__PURE__ */ jsx6(ApartmentOutlined, { style: { color: "#1677ff" } }),
+                      /* @__PURE__ */ jsx6(Text2, { strong: true, children: branches[0].name }),
+                      /* @__PURE__ */ jsxs4(Text2, { type: "secondary", children: [
+                        "(",
+                        branches[0].code,
+                        ")"
+                      ] })
+                    ] })
+                  }
+                ) : /* @__PURE__ */ jsx6(
+                  Alert,
+                  {
+                    type: "warning",
+                    message: "No branches available",
+                    description: "You don't have access to any branches in this organization."
+                  }
+                )
+              }
+            ),
+            !needsSelection && selectedOrg && branches.length > 0 && /* @__PURE__ */ jsx6(
+              Alert,
+              {
+                type: "info",
+                message: "Auto-selected",
+                description: `Using ${selectedOrg.name} / ${branches[0]?.name ?? "Default"}`,
+                icon: /* @__PURE__ */ jsx6(CheckCircleFilled, {}),
+                showIcon: true
+              }
+            )
+          ]
+        }
+      )
+    }
+  );
+}
+
+// src/components/BranchGate.tsx
+import { BankOutlined as BankOutlined2, ApartmentOutlined as ApartmentOutlined2, CheckCircleFilled as CheckCircleFilled2 } from "@ant-design/icons";
+import { useQuery as useQuery3 } from "@tanstack/react-query";
+import { Select as Select2, Space as Space3, Typography as Typography3, Badge as Badge3, Spin as Spin2, Button as Button2, Alert as Alert2 } from "antd";
+import React7, { useEffect as useEffect6, useState as useState5 } from "react";
+import { Fragment as Fragment3, jsx as jsx7, jsxs as jsxs5 } from "react/jsx-runtime";
+var { Text: Text3, Title: Title2 } = Typography3;
+var DEFAULT_STORAGE_KEY2 = "omnify_branch_gate_selection";
+function BranchGate({
+  children,
+  onSelectionChange,
+  storageKey = DEFAULT_STORAGE_KEY2,
+  loadingComponent,
+  title,
+  description
+}) {
+  const { config, isAuthenticated } = useSsoContext();
+  const { organizations, currentOrg, hasMultipleOrgs } = useOrganization();
+  const [storedSelection, setStoredSelection] = useState5(null);
+  const [isInitialized, setIsInitialized] = useState5(false);
+  const [tempOrgId, setTempOrgId] = useState5(null);
+  const [tempBranchId, setTempBranchId] = useState5(null);
+  const branchService = React7.useMemo(
+    () => createBranchService({ apiUrl: config.apiUrl }),
+    [config.apiUrl]
+  );
+  const activeOrgSlug = React7.useMemo(() => {
+    if (tempOrgId) {
+      return organizations.find((o) => String(o.id) === tempOrgId)?.slug;
+    }
+    return storedSelection?.orgSlug ?? currentOrg?.slug;
+  }, [tempOrgId, organizations, storedSelection, currentOrg]);
+  const { data: branchesData, isLoading: branchesLoading } = useQuery3({
+    queryKey: ssoQueryKeys.branches.list(activeOrgSlug),
+    queryFn: () => branchService.list(activeOrgSlug),
+    enabled: isAuthenticated && !!activeOrgSlug
+  });
+  const branches = branchesData?.branches ?? [];
+  const hasMultipleBranches = branches.length > 1;
+  useEffect6(() => {
+    if (typeof window === "undefined") return;
+    const saved = localStorage.getItem(storageKey);
+    if (saved) {
+      try {
+        const parsed = JSON.parse(saved);
+        setStoredSelection(parsed);
+        onSelectionChange?.(parsed);
+      } catch {
+        localStorage.removeItem(storageKey);
+      }
+    }
+    setIsInitialized(true);
+  }, [storageKey, onSelectionChange]);
+  useEffect6(() => {
+    if (!isAuthenticated || !isInitialized || storedSelection) return;
+    if (organizations.length === 1 && !tempOrgId) {
+      setTempOrgId(String(organizations[0].id));
+    }
+  }, [isAuthenticated, isInitialized, organizations, storedSelection, tempOrgId]);
+  useEffect6(() => {
+    if (!tempOrgId || branchesLoading || storedSelection) return;
+    if (branches.length === 1 && !tempBranchId) {
+      setTempBranchId(String(branches[0].id));
+    } else if (branches.length > 0 && !tempBranchId) {
+      const primaryId = branchesData?.primary_branch_id;
+      if (primaryId) {
+        setTempBranchId(String(primaryId));
+      } else {
+        const hq = branches.find((b) => b.is_headquarters);
+        if (hq) {
+          setTempBranchId(String(hq.id));
+        }
+      }
+    }
+  }, [tempOrgId, branches, branchesLoading, branchesData, storedSelection, tempBranchId]);
+  useEffect6(() => {
+    if (storedSelection || !isInitialized) return;
+    if (!tempOrgId || !tempBranchId || branchesLoading) return;
+    if (!hasMultipleOrgs && !hasMultipleBranches) {
+      confirmSelection();
+    }
+  }, [tempOrgId, tempBranchId, branchesLoading, hasMultipleOrgs, hasMultipleBranches, storedSelection, isInitialized]);
+  const confirmSelection = React7.useCallback(() => {
+    if (!tempOrgId || !tempBranchId) return;
+    const org = organizations.find((o) => String(o.id) === tempOrgId);
+    const branch = branches.find((b) => String(b.id) === tempBranchId);
+    if (!org || !branch) return;
+    const selection = {
+      orgId: String(org.id),
+      orgSlug: org.slug,
+      orgName: org.name,
+      branchId: String(branch.id),
+      branchName: branch.name,
+      branchCode: branch.code
+    };
+    localStorage.setItem(storageKey, JSON.stringify(selection));
+    setStoredSelection(selection);
+    onSelectionChange?.(selection);
+    setTempOrgId(null);
+    setTempBranchId(null);
+  }, [tempOrgId, tempBranchId, organizations, branches, storageKey, onSelectionChange]);
+  const clearSelection = React7.useCallback(() => {
+    localStorage.removeItem(storageKey);
+    setStoredSelection(null);
+    onSelectionChange?.(null);
+  }, [storageKey, onSelectionChange]);
+  const needsSelection = isAuthenticated && isInitialized && !storedSelection && (hasMultipleOrgs || hasMultipleBranches);
+  const isLoading = !isAuthenticated || !isInitialized || !!activeOrgSlug && branchesLoading && !storedSelection;
+  if (isLoading && !needsSelection) {
+    if (loadingComponent) {
+      return /* @__PURE__ */ jsx7(Fragment3, { children: loadingComponent });
+    }
+    return /* @__PURE__ */ jsx7("div", { style: {
+      display: "flex",
+      justifyContent: "center",
+      alignItems: "center",
+      minHeight: "100vh",
+      background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)"
+    }, children: /* @__PURE__ */ jsx7(Spin2, { size: "large" }) });
+  }
+  if (needsSelection) {
+    const canConfirm = tempOrgId && tempBranchId;
+    return /* @__PURE__ */ jsx7("div", { style: {
+      minHeight: "100vh",
+      background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)",
+      display: "flex",
+      alignItems: "center",
+      justifyContent: "center",
+      padding: 24
+    }, children: /* @__PURE__ */ jsxs5("div", { style: {
+      background: "#fff",
+      borderRadius: 16,
+      padding: 32,
+      maxWidth: 480,
+      width: "100%",
+      boxShadow: "0 20px 60px rgba(0,0,0,0.3)"
+    }, children: [
+      /* @__PURE__ */ jsxs5("div", { style: { textAlign: "center", marginBottom: 24 }, children: [
+        /* @__PURE__ */ jsx7("div", { style: {
+          width: 64,
+          height: 64,
+          borderRadius: "50%",
+          background: "linear-gradient(135deg, #667eea 0%, #764ba2 100%)",
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "center",
+          margin: "0 auto 16px"
+        }, children: /* @__PURE__ */ jsx7(BankOutlined2, { style: { fontSize: 28, color: "#fff" } }) }),
+        /* @__PURE__ */ jsx7(Title2, { level: 3, style: { margin: 0 }, children: title ?? "Select Organization" }),
+        /* @__PURE__ */ jsx7(Text3, { type: "secondary", children: description ?? "Please select your organization and branch to continue" })
+      ] }),
+      /* @__PURE__ */ jsxs5("div", { style: { marginBottom: 20 }, children: [
+        /* @__PURE__ */ jsx7(Text3, { strong: true, style: { display: "block", marginBottom: 8 }, children: /* @__PURE__ */ jsxs5(Space3, { children: [
+          /* @__PURE__ */ jsx7(BankOutlined2, {}),
+          /* @__PURE__ */ jsx7("span", { children: "Organization" }),
+          !hasMultipleOrgs && /* @__PURE__ */ jsx7(Badge3, { status: "success", text: "Auto-selected" })
+        ] }) }),
+        hasMultipleOrgs ? /* @__PURE__ */ jsx7(
+          Select2,
+          {
+            value: tempOrgId,
+            onChange: (value) => {
+              setTempOrgId(String(value));
+              setTempBranchId(null);
+            },
+            placeholder: "Select organization",
+            size: "large",
+            style: { width: "100%" },
+            optionLabelProp: "label",
+            children: organizations.map((org) => /* @__PURE__ */ jsx7(Select2.Option, { value: String(org.id), label: org.name, children: /* @__PURE__ */ jsx7(Space3, { style: { width: "100%", justifyContent: "space-between" }, children: /* @__PURE__ */ jsxs5("div", { children: [
+              /* @__PURE__ */ jsx7(Text3, { strong: true, children: org.name }),
+              org.serviceRole && /* @__PURE__ */ jsxs5(Text3, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: [
+                "(",
+                org.serviceRole,
+                ")"
+              ] })
+            ] }) }) }, org.id))
+          }
+        ) : /* @__PURE__ */ jsx7("div", { style: {
+          padding: "8px 12px",
+          background: "#f5f5f5",
+          borderRadius: 6,
+          border: "1px solid #d9d9d9"
+        }, children: /* @__PURE__ */ jsxs5(Space3, { children: [
+          /* @__PURE__ */ jsx7(BankOutlined2, { style: { color: "#1677ff" } }),
+          /* @__PURE__ */ jsx7(Text3, { strong: true, children: organizations[0]?.name })
+        ] }) })
+      ] }),
+      tempOrgId && /* @__PURE__ */ jsxs5("div", { style: { marginBottom: 24 }, children: [
+        /* @__PURE__ */ jsx7(Text3, { strong: true, style: { display: "block", marginBottom: 8 }, children: /* @__PURE__ */ jsxs5(Space3, { children: [
+          /* @__PURE__ */ jsx7(ApartmentOutlined2, {}),
+          /* @__PURE__ */ jsx7("span", { children: "Branch" }),
+          !hasMultipleBranches && branches.length === 1 && /* @__PURE__ */ jsx7(Badge3, { status: "success", text: "Auto-selected" })
+        ] }) }),
+        branchesLoading ? /* @__PURE__ */ jsxs5("div", { style: { padding: "12px", textAlign: "center" }, children: [
+          /* @__PURE__ */ jsx7(Spin2, { size: "small" }),
+          /* @__PURE__ */ jsx7(Text3, { type: "secondary", style: { marginLeft: 8 }, children: "Loading..." })
+        ] }) : hasMultipleBranches ? /* @__PURE__ */ jsx7(
+          Select2,
+          {
+            value: tempBranchId,
+            onChange: (value) => setTempBranchId(String(value)),
+            placeholder: "Select branch",
+            size: "large",
+            style: { width: "100%" },
+            optionLabelProp: "label",
+            children: branches.map((branch) => /* @__PURE__ */ jsx7(Select2.Option, { value: String(branch.id), label: branch.name, children: /* @__PURE__ */ jsxs5(Space3, { style: { width: "100%", justifyContent: "space-between" }, children: [
+              /* @__PURE__ */ jsxs5("div", { children: [
+                /* @__PURE__ */ jsx7(Text3, { strong: true, children: branch.name }),
+                /* @__PURE__ */ jsx7(Text3, { type: "secondary", style: { marginLeft: 8, fontSize: 12 }, children: branch.code })
+              ] }),
+              /* @__PURE__ */ jsxs5(Space3, { size: 4, children: [
+                branch.is_headquarters && /* @__PURE__ */ jsx7(Badge3, { color: "blue", text: "HQ" }),
+                branch.is_primary && /* @__PURE__ */ jsx7(Badge3, { color: "green", text: "Primary" })
+              ] })
+            ] }) }, branch.id))
+          }
+        ) : branches.length === 1 ? /* @__PURE__ */ jsx7("div", { style: {
+          padding: "8px 12px",
+          background: "#f5f5f5",
+          borderRadius: 6,
+          border: "1px solid #d9d9d9"
+        }, children: /* @__PURE__ */ jsxs5(Space3, { children: [
+          /* @__PURE__ */ jsx7(ApartmentOutlined2, { style: { color: "#1677ff" } }),
+          /* @__PURE__ */ jsx7(Text3, { strong: true, children: branches[0].name }),
+          /* @__PURE__ */ jsxs5(Text3, { type: "secondary", children: [
+            "(",
+            branches[0].code,
+            ")"
+          ] })
+        ] }) }) : /* @__PURE__ */ jsx7(
+          Alert2,
+          {
+            type: "warning",
+            message: "No branches available",
+            description: "You don't have access to any branches in this organization."
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsx7(
+        Button2,
+        {
+          type: "primary",
+          size: "large",
+          block: true,
+          disabled: !canConfirm,
+          onClick: confirmSelection,
+          icon: /* @__PURE__ */ jsx7(CheckCircleFilled2, {}),
+          style: {
+            height: 48,
+            fontSize: 16,
+            background: canConfirm ? "linear-gradient(135deg, #667eea 0%, #764ba2 100%)" : void 0,
+            border: "none"
+          },
+          children: "Confirm"
+        }
+      )
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx7(Fragment3, { children });
+}
+function useBranchGate(storageKey = DEFAULT_STORAGE_KEY2) {
+  const [selection, setSelection] = useState5(null);
+  useEffect6(() => {
+    if (typeof window === "undefined") return;
+    const saved = localStorage.getItem(storageKey);
+    if (saved) {
+      try {
+        setSelection(JSON.parse(saved));
+      } catch {
+      }
+    }
+    const handleStorage = (e) => {
+      if (e.key === storageKey) {
+        if (e.newValue) {
+          try {
+            setSelection(JSON.parse(e.newValue));
+          } catch {
+            setSelection(null);
+          }
+        } else {
+          setSelection(null);
+        }
+      }
+    };
+    window.addEventListener("storage", handleStorage);
+    return () => window.removeEventListener("storage", handleStorage);
+  }, [storageKey]);
+  const clearSelection = React7.useCallback(() => {
+    localStorage.removeItem(storageKey);
+    setSelection(null);
+  }, [storageKey]);
+  return {
+    selection,
+    selectedOrg: selection ? { id: selection.orgId, slug: selection.orgSlug, name: selection.orgName } : null,
+    selectedBranch: selection ? { id: selection.branchId, name: selection.branchName, code: selection.branchCode } : null,
+    clearSelection
+  };
+}
+
+// src/components/admin/UserTable.tsx
+import { EditOutlined, DeleteOutlined, SearchOutlined } from "@ant-design/icons";
+import { Table, Space as Space4, Button as Button3, Popconfirm, Tag, Input } from "antd";
+
+// src/i18n/translations.ts
+var ssoNamespace = "sso";
+var defaultTranslations = {
+  en: {
+    // Common
+    actions: "Actions",
+    save: "Save",
+    cancel: "Cancel",
+    delete: "Delete",
+    edit: "Edit",
+    search: "Search",
+    loading: "Loading...",
+    yes: "Yes",
+    no: "No",
+    confirmDelete: "Are you sure you want to delete?",
+    // Users
+    users: "Users",
+    user: "User",
+    name: "Name",
+    email: "Email",
+    ssoUser: "SSO User",
+    localUser: "Local User",
+    userList: "User List",
+    userDetails: "User Details",
+    editUser: "Edit User",
+    deleteUser: "Delete User",
+    searchUsers: "Search users...",
+    noUsersFound: "No users found",
+    userDeleted: "User deleted successfully",
+    userUpdated: "User updated successfully",
+    // Roles
+    roles: "Roles",
+    role: "Role",
+    roleName: "Role Name",
+    roleDescription: "Description",
+    permissions: "Permissions",
+    assignRole: "Assign Role",
+    removeRole: "Remove Role",
+    // Permissions
+    permission: "Permission",
+    permissionName: "Permission Name",
+    permissionDescription: "Description",
+    // Validation
+    required: "{{field}} is required",
+    maxLength: "{{field}} must be at most {{max}} characters",
+    invalidEmail: "Please enter a valid email address",
+    // Pagination
+    total: "Total {{count}} items",
+    page: "Page {{current}} of {{total}}"
+  },
+  ja: {
+    // Common
+    actions: "\u64CD\u4F5C",
+    save: "\u4FDD\u5B58",
+    cancel: "\u30AD\u30E3\u30F3\u30BB\u30EB",
+    delete: "\u524A\u9664",
+    edit: "\u7DE8\u96C6",
+    search: "\u691C\u7D22",
+    loading: "\u8AAD\u307F\u8FBC\u307F\u4E2D...",
+    yes: "\u306F\u3044",
+    no: "\u3044\u3044\u3048",
+    confirmDelete: "\u672C\u5F53\u306B\u524A\u9664\u3057\u307E\u3059\u304B\uFF1F",
+    // Users
+    users: "\u30E6\u30FC\u30B6\u30FC",
+    user: "\u30E6\u30FC\u30B6\u30FC",
+    name: "\u540D\u524D",
+    email: "\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9",
+    ssoUser: "SSO\u30E6\u30FC\u30B6\u30FC",
+    localUser: "\u30ED\u30FC\u30AB\u30EB\u30E6\u30FC\u30B6\u30FC",
+    userList: "\u30E6\u30FC\u30B6\u30FC\u4E00\u89A7",
+    userDetails: "\u30E6\u30FC\u30B6\u30FC\u8A73\u7D30",
+    editUser: "\u30E6\u30FC\u30B6\u30FC\u7DE8\u96C6",
+    deleteUser: "\u30E6\u30FC\u30B6\u30FC\u524A\u9664",
+    searchUsers: "\u30E6\u30FC\u30B6\u30FC\u3092\u691C\u7D22...",
+    noUsersFound: "\u30E6\u30FC\u30B6\u30FC\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093",
+    userDeleted: "\u30E6\u30FC\u30B6\u30FC\u3092\u524A\u9664\u3057\u307E\u3057\u305F",
+    userUpdated: "\u30E6\u30FC\u30B6\u30FC\u3092\u66F4\u65B0\u3057\u307E\u3057\u305F",
+    // Roles
+    roles: "\u30ED\u30FC\u30EB",
+    role: "\u30ED\u30FC\u30EB",
+    roleName: "\u30ED\u30FC\u30EB\u540D",
+    roleDescription: "\u8AAC\u660E",
+    permissions: "\u6A29\u9650",
+    assignRole: "\u30ED\u30FC\u30EB\u3092\u5272\u308A\u5F53\u3066",
+    removeRole: "\u30ED\u30FC\u30EB\u3092\u524A\u9664",
+    // Permissions
+    permission: "\u6A29\u9650",
+    permissionName: "\u6A29\u9650\u540D",
+    permissionDescription: "\u8AAC\u660E",
+    // Validation
+    required: "{{field}}\u306F\u5FC5\u9808\u3067\u3059",
+    maxLength: "{{field}}\u306F{{max}}\u6587\u5B57\u4EE5\u5185\u3067\u5165\u529B\u3057\u3066\u304F\u3060\u3055\u3044",
+    invalidEmail: "\u6709\u52B9\u306A\u30E1\u30FC\u30EB\u30A2\u30C9\u30EC\u30B9\u3092\u5165\u529B\u3057\u3066\u304F\u3060\u3055\u3044",
+    // Pagination
+    total: "\u5168{{count}}\u4EF6",
+    page: "{{total}}\u30DA\u30FC\u30B8\u4E2D{{current}}\u30DA\u30FC\u30B8"
+  },
+  vi: {
+    // Common
+    actions: "H\xE0nh \u0111\u1ED9ng",
+    save: "L\u01B0u",
+    cancel: "H\u1EE7y",
+    delete: "X\xF3a",
+    edit: "S\u1EEDa",
+    search: "T\xECm ki\u1EBFm",
+    loading: "\u0110ang t\u1EA3i...",
+    yes: "C\xF3",
+    no: "Kh\xF4ng",
+    confirmDelete: "B\u1EA1n c\xF3 ch\u1EAFc mu\u1ED1n x\xF3a?",
+    // Users
+    users: "Ng\u01B0\u1EDDi d\xF9ng",
+    user: "Ng\u01B0\u1EDDi d\xF9ng",
+    name: "T\xEAn",
+    email: "Email",
+    ssoUser: "Ng\u01B0\u1EDDi d\xF9ng SSO",
+    localUser: "Ng\u01B0\u1EDDi d\xF9ng n\u1ED9i b\u1ED9",
+    userList: "Danh s\xE1ch ng\u01B0\u1EDDi d\xF9ng",
+    userDetails: "Chi ti\u1EBFt ng\u01B0\u1EDDi d\xF9ng",
+    editUser: "S\u1EEDa ng\u01B0\u1EDDi d\xF9ng",
+    deleteUser: "X\xF3a ng\u01B0\u1EDDi d\xF9ng",
+    searchUsers: "T\xECm ng\u01B0\u1EDDi d\xF9ng...",
+    noUsersFound: "Kh\xF4ng t\xECm th\u1EA5y ng\u01B0\u1EDDi d\xF9ng",
+    userDeleted: "\u0110\xE3 x\xF3a ng\u01B0\u1EDDi d\xF9ng",
+    userUpdated: "\u0110\xE3 c\u1EADp nh\u1EADt ng\u01B0\u1EDDi d\xF9ng",
+    // Roles
+    roles: "Vai tr\xF2",
+    role: "Vai tr\xF2",
+    roleName: "T\xEAn vai tr\xF2",
+    roleDescription: "M\xF4 t\u1EA3",
+    permissions: "Quy\u1EC1n",
+    assignRole: "G\xE1n vai tr\xF2",
+    removeRole: "X\xF3a vai tr\xF2",
+    // Permissions
+    permission: "Quy\u1EC1n",
+    permissionName: "T\xEAn quy\u1EC1n",
+    permissionDescription: "M\xF4 t\u1EA3",
+    // Validation
+    required: "{{field}} l\xE0 b\u1EAFt bu\u1ED9c",
+    maxLength: "{{field}} t\u1ED1i \u0111a {{max}} k\xFD t\u1EF1",
+    invalidEmail: "Email kh\xF4ng h\u1EE3p l\u1EC7",
+    // Pagination
+    total: "T\u1ED5ng {{count}} m\u1EE5c",
+    page: "Trang {{current}}/{{total}}"
+  }
+};
+
+// src/i18n/useSsoTranslation.ts
+import { useCallback as useCallback7 } from "react";
+function useSsoTranslation() {
+  const t = useCallback7(
+    (key, options) => {
+      let value = defaultTranslations.en[key] || key;
+      if (options) {
+        Object.entries(options).forEach(([k, v]) => {
+          value = value.replace(new RegExp(`{{${k}}}`, "g"), String(v));
+        });
+      }
+      return value;
+    },
+    []
+  );
+  return { t };
+}
+
+// src/i18n/I18nProvider.tsx
+import i18n2 from "i18next";
+import LanguageDetector from "i18next-browser-languagedetector";
+import { useMemo as useMemo7 } from "react";
+import { I18nextProvider } from "react-i18next";
+import { initReactI18next } from "react-i18next";
+
+// src/i18n/config.ts
+import i18n from "i18next";
+var locales = ["ja", "en", "vi"];
+var defaultLocale2 = "ja";
+var localeNames = {
+  ja: "\u65E5\u672C\u8A9E",
+  en: "English",
+  vi: "Ti\u1EBFng Vi\u1EC7t"
+};
+var changeLanguage = (locale) => {
+  if (typeof window === "undefined") return;
+  i18n.changeLanguage(locale);
+  document.cookie = `locale=${locale};path=/;max-age=31536000`;
+};
+var getCurrentLocale = () => {
+  if (typeof window === "undefined") return defaultLocale2;
+  return i18n.language || defaultLocale2;
+};
+
+// src/i18n/I18nProvider.tsx
+import { jsx as jsx8 } from "react/jsx-runtime";
+var initialized = false;
+function getOrCreateI18n(appTranslations, fallbackLocale2) {
+  if (initialized) return i18n2;
+  const resources = {
+    en: {
+      translation: appTranslations?.en || {},
+      [ssoNamespace]: defaultTranslations.en
+    },
+    ja: {
+      translation: appTranslations?.ja || {},
+      [ssoNamespace]: defaultTranslations.ja
+    },
+    vi: {
+      translation: appTranslations?.vi || {},
+      [ssoNamespace]: defaultTranslations.vi
+    }
+  };
+  i18n2.use(LanguageDetector).use(initReactI18next).init({
+    resources,
+    fallbackLng: fallbackLocale2 || defaultLocale2,
+    supportedLngs: locales,
+    detection: {
+      order: ["cookie", "localStorage", "navigator"],
+      caches: ["cookie", "localStorage"],
+      lookupCookie: "locale",
+      lookupLocalStorage: "locale"
+    },
+    interpolation: {
+      escapeValue: false
+    },
+    defaultNS: "translation",
+    ns: ["translation", ssoNamespace],
+    react: {
+      useSuspense: false
+    }
+  });
+  initialized = true;
+  return i18n2;
+}
+function I18nProvider({ children, translations, fallbackLocale: fallbackLocale2 }) {
+  const i18nInstance = useMemo7(
+    () => getOrCreateI18n(translations, fallbackLocale2),
+    [translations, fallbackLocale2]
+  );
+  return /* @__PURE__ */ jsx8(I18nextProvider, { i18n: i18nInstance, children });
+}
+
+// src/i18n/useTranslations.ts
+import { useCallback as useCallback8 } from "react";
+import { useTranslation } from "react-i18next";
+function useTranslations(namespace) {
+  const { t: i18nT } = useTranslation();
+  const t = useCallback8(
+    (key, values) => {
+      const fullKey = namespace ? `${namespace}.${key}` : key;
+      return i18nT(fullKey, values);
+    },
+    [i18nT, namespace]
+  );
+  return t;
+}
+
+// src/i18n/useLocale.ts
+import { useTranslation as useTranslation2 } from "react-i18next";
+function useLocale() {
+  const { i18n: i18n3 } = useTranslation2();
+  return i18n3.language || defaultLocale2;
+}
+
+// src/components/admin/UserTable.tsx
+import { jsx as jsx9, jsxs as jsxs6 } from "react/jsx-runtime";
+function UserTable({
+  users,
+  loading = false,
+  pagination,
+  sortField,
+  sortOrder,
+  onPageChange,
+  onSortChange,
+  onSearch,
+  onEdit,
+  onDelete,
+  deleteLoading = false,
+  showSearch = true,
+  showActions = true
 }) {
-  const { user, isLoading, isAuthenticated, login } = useAuth();
-  const { hasRole, currentOrg } = useOrganization();
-  useEffect3(() => {
-    if (isLoading) return;
-    if (!isAuthenticated) {
-      onAccessDenied?.("unauthenticated");
-    } else if (requiredRole && !hasRole(requiredRole)) {
-      onAccessDenied?.("insufficient_role");
+  const { t } = useSsoTranslation();
+  const columns = [
+    {
+      title: t("email"),
+      dataIndex: "email",
+      key: "email",
+      sorter: true,
+      sortOrder: sortField === "email" ? sortOrder === "asc" ? "ascend" : "descend" : void 0
+    },
+    {
+      title: t("name"),
+      dataIndex: "name",
+      key: "name",
+      sorter: true,
+      sortOrder: sortField === "name" ? sortOrder === "asc" ? "ascend" : "descend" : void 0
+    },
+    {
+      title: "SSO",
+      dataIndex: "console_user_id",
+      key: "sso",
+      width: 100,
+      render: (value) => value ? /* @__PURE__ */ jsx9(Tag, { color: "green", children: t("ssoUser") }) : /* @__PURE__ */ jsx9(Tag, { color: "default", children: t("localUser") })
     }
-  }, [isLoading, isAuthenticated, requiredRole, hasRole, onAccessDenied]);
-  if (isLoading) {
-    return /* @__PURE__ */ jsx4(Fragment2, { children: fallback ?? /* @__PURE__ */ jsx4(DefaultLoading2, {}) });
+  ];
+  if (showActions && (onEdit || onDelete)) {
+    columns.push({
+      title: t("actions"),
+      key: "actions",
+      width: 120,
+      render: (_, record) => /* @__PURE__ */ jsxs6(Space4, { children: [
+        onEdit && /* @__PURE__ */ jsx9(
+          Button3,
+          {
+            type: "text",
+            icon: /* @__PURE__ */ jsx9(EditOutlined, {}),
+            size: "small",
+            onClick: () => onEdit(record)
+          }
+        ),
+        onDelete && /* @__PURE__ */ jsx9(
+          Popconfirm,
+          {
+            title: t("confirmDelete"),
+            onConfirm: () => onDelete(record),
+            okText: t("yes"),
+            cancelText: t("no"),
+            children: /* @__PURE__ */ jsx9(
+              Button3,
+              {
+                type: "text",
+                danger: true,
+                icon: /* @__PURE__ */ jsx9(DeleteOutlined, {}),
+                size: "small",
+                loading: deleteLoading
+              }
+            )
+          }
+        )
+      ] })
+    });
   }
-  if (!isAuthenticated) {
-    if (loginFallback) {
-      return /* @__PURE__ */ jsx4(Fragment2, { children: loginFallback });
+  const handleTableChange = (paginationConfig, _filters, sorter) => {
+    if (onPageChange && paginationConfig.current && paginationConfig.pageSize) {
+      onPageChange(paginationConfig.current, paginationConfig.pageSize);
     }
-    return /* @__PURE__ */ jsx4(DefaultLoginFallback, { login: () => login() });
-  }
-  if (requiredRole && !hasRole(requiredRole)) {
-    return /* @__PURE__ */ jsx4(
-      DefaultAccessDenied,
+    if (onSortChange) {
+      const singleSorter = Array.isArray(sorter) ? sorter[0] : sorter;
+      if (singleSorter?.field) {
+        onSortChange(
+          singleSorter.field,
+          singleSorter.order === "ascend" ? "asc" : "desc"
+        );
+      } else {
+        onSortChange(void 0, void 0);
+      }
+    }
+  };
+  return /* @__PURE__ */ jsxs6("div", { children: [
+    showSearch && onSearch && /* @__PURE__ */ jsx9("div", { style: { marginBottom: 16 }, children: /* @__PURE__ */ jsx9(
+      Input,
       {
-        reason: `This page requires ${requiredRole} role. Your role: ${currentOrg?.serviceRole ?? "none"}`
+        placeholder: t("searchUsers"),
+        prefix: /* @__PURE__ */ jsx9(SearchOutlined, {}),
+        onChange: (e) => onSearch(e.target.value),
+        style: { width: 300 },
+        allowClear: true
       }
-    );
-  }
-  return /* @__PURE__ */ jsx4(Fragment2, { children });
+    ) }),
+    /* @__PURE__ */ jsx9(
+      Table,
+      {
+        columns,
+        dataSource: users,
+        loading,
+        rowKey: "id",
+        onChange: handleTableChange,
+        pagination: pagination ? {
+          current: pagination.current_page,
+          pageSize: pagination.per_page,
+          total: pagination.total,
+          showSizeChanger: true,
+          showTotal: (total) => t("total", { count: total })
+        } : false
+      }
+    )
+  ] });
 }
 
-// src/services/utils.ts
-function getXsrfToken2() {
-  if (typeof document === "undefined") return void 0;
-  return document.cookie.split("; ").find((row) => row.startsWith("XSRF-TOKEN="))?.split("=")[1];
-}
-function buildHeaders(orgSlug) {
-  const headers = {
-    "Content-Type": "application/json",
-    Accept: "application/json"
+// src/components/admin/UserForm.tsx
+import { Form as Form2, Input as Input2, Button as Button4, Space as Space5 } from "antd";
+import { jsx as jsx10, jsxs as jsxs7 } from "react/jsx-runtime";
+function UserForm({
+  initialValues,
+  onSubmit,
+  onCancel,
+  loading = false,
+  submitText
+}) {
+  const { t } = useSsoTranslation();
+  const [form] = Form2.useForm();
+  const handleFinish = (values) => {
+    onSubmit(values);
   };
-  const xsrfToken = getXsrfToken2();
-  if (xsrfToken) {
-    headers["X-XSRF-TOKEN"] = decodeURIComponent(xsrfToken);
-  }
-  if (orgSlug) {
-    headers["X-Org-Slug"] = orgSlug;
-  }
-  return headers;
+  return /* @__PURE__ */ jsxs7(
+    Form2,
+    {
+      form,
+      layout: "vertical",
+      initialValues,
+      onFinish: handleFinish,
+      style: { maxWidth: 600 },
+      children: [
+        /* @__PURE__ */ jsx10(
+          Form2.Item,
+          {
+            label: t("name"),
+            name: "name",
+            rules: [
+              { required: true, message: t("required", { field: t("name") }) },
+              { max: 255, message: t("maxLength", { field: t("name"), max: 255 }) }
+            ],
+            children: /* @__PURE__ */ jsx10(Input2, {})
+          }
+        ),
+        /* @__PURE__ */ jsx10(
+          Form2.Item,
+          {
+            label: t("email"),
+            name: "email",
+            rules: [
+              { required: true, message: t("required", { field: t("email") }) },
+              { type: "email", message: t("invalidEmail") }
+            ],
+            children: /* @__PURE__ */ jsx10(Input2, { type: "email" })
+          }
+        ),
+        /* @__PURE__ */ jsx10(Form2.Item, { children: /* @__PURE__ */ jsxs7(Space5, { children: [
+          /* @__PURE__ */ jsx10(Button4, { type: "primary", htmlType: "submit", loading, children: submitText || t("save") }),
+          onCancel && /* @__PURE__ */ jsx10(Button4, { onClick: onCancel, children: t("cancel") })
+        ] }) })
+      ]
+    }
+  );
 }
-async function csrf(apiUrl) {
-  await fetch(`${apiUrl}/sanctum/csrf-cookie`, {
-    credentials: "include"
-  });
+
+// src/utils/branchHeaders.ts
+var BRANCH_HEADERS = {
+  BRANCH_ID: "X-Branch-Id",
+  ORG_ID: "X-Org-Id",
+  BRANCH_NAME: "X-Branch-Name",
+  BRANCH_CODE: "X-Branch-Code"
+};
+function createBranchHeaderSetter(axiosInstance) {
+  return (selection) => {
+    if (selection) {
+      axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_ID] = selection.branchId;
+      axiosInstance.defaults.headers.common[BRANCH_HEADERS.ORG_ID] = selection.orgId;
+      if (selection.branchName) {
+        axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_NAME] = selection.branchName;
+      }
+      if (selection.branchCode) {
+        axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_CODE] = selection.branchCode;
+      }
+    } else {
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_ID];
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.ORG_ID];
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_NAME];
+      delete axiosInstance.defaults.headers.common[BRANCH_HEADERS.BRANCH_CODE];
+    }
+  };
 }
-async function request(apiUrl, path, options = {}) {
-  const response = await fetch(`${apiUrl}${path}`, {
-    ...options,
-    credentials: "include"
-  });
-  if (!response.ok) {
-    const error = await response.json().catch(() => ({}));
-    throw new Error(error.message || `HTTP ${response.status}`);
-  }
-  if (response.status === 204) {
-    return void 0;
-  }
-  return response.json();
+function setBranchHeaders(axiosInstance, selection) {
+  createBranchHeaderSetter(axiosInstance)(selection);
 }
 
 // src/services/authService.ts
@@ -1184,8 +2612,13 @@ function createRoleService(config) {
      * List all roles (admin)
      * GET /api/admin/sso/roles
      */
-    adminList: async (orgSlug) => {
-      return request(apiUrl, "/api/admin/sso/roles", {
+    adminList: async (orgSlug, params) => {
+      const searchParams = new URLSearchParams();
+      if (params?.["filter[scope]"]) searchParams.set("filter[scope]", params["filter[scope]"]);
+      if (params?.["filter[org_id]"]) searchParams.set("filter[org_id]", params["filter[org_id]"]);
+      const query = searchParams.toString();
+      const path = query ? `/api/admin/sso/roles?${query}` : "/api/admin/sso/roles";
+      return request(apiUrl, path, {
         headers: buildHeaders(orgSlug)
       });
     },
@@ -1539,66 +2972,87 @@ var getEffectivePermissions = (roleAssignments, allRoles, orgId, branchId) => {
   return Array.from(permissions);
 };
 
-// src/services/branchService.ts
-function createBranchService(config) {
+// src/services/userService.ts
+function createUserService(config) {
   const { apiUrl } = config;
+  const basePath = "/api/admin/sso/users";
   return {
     /**
-     * Get branches for current user in organization
-     * GET /api/sso/branches
+     * List users with pagination and filtering
+     */
+    async list(params, orgSlug) {
+      const searchParams = new URLSearchParams();
+      if (params?.page) searchParams.set("page", String(params.page));
+      if (params?.per_page) searchParams.set("per_page", String(params.per_page));
+      if (params?.["filter[search]"]) searchParams.set("filter[search]", params["filter[search]"]);
+      if (params?.["filter[org_id]"]) searchParams.set("filter[org_id]", params["filter[org_id]"]);
+      if (params?.sort) searchParams.set("sort", params.sort);
+      const query = searchParams.toString();
+      const path = query ? `${basePath}?${query}` : basePath;
+      return request(apiUrl, path, {
+        method: "GET",
+        headers: buildHeaders(orgSlug)
+      });
+    },
+    /**
+     * Get user by ID
      */
-    list: async (orgSlug) => {
-      const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
-      return request(apiUrl, `/api/sso/branches${params}`, {
-        headers: buildHeaders()
+    async get(id, orgSlug) {
+      const response = await request(apiUrl, `${basePath}/${id}`, {
+        method: "GET",
+        headers: buildHeaders(orgSlug)
       });
+      return response.data;
     },
     /**
-     * Get a specific branch by ID
-     * GET /api/sso/branches/{id}
+     * Update a user
      */
-    get: async (branchId) => {
-      const response = await request(
-        apiUrl,
-        `/api/sso/branches/${branchId}`,
-        { headers: buildHeaders() }
-      );
-      return "data" in response ? response.data : response;
+    async update(id, input, orgSlug) {
+      const response = await request(apiUrl, `${basePath}/${id}`, {
+        method: "PUT",
+        headers: buildHeaders(orgSlug),
+        body: JSON.stringify(input)
+      });
+      return response.data;
     },
     /**
-     * Get headquarters branch for organization
+     * Delete a user
      */
-    getHeadquarters: async (orgSlug) => {
-      try {
-        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
-        const data = await request(
-          apiUrl,
-          `/api/sso/branches${params}`,
-          { headers: buildHeaders() }
-        );
-        return data.branches.find((b) => b.is_headquarters) ?? null;
-      } catch {
-        return null;
-      }
+    async delete(id, orgSlug) {
+      await request(apiUrl, `${basePath}/${id}`, {
+        method: "DELETE",
+        headers: buildHeaders(orgSlug)
+      });
     },
     /**
-     * Get primary branch for current user
+     * Search users by email (autocomplete)
      */
-    getPrimary: async (orgSlug) => {
-      try {
-        const params = orgSlug ? `?organization_slug=${orgSlug}` : "";
-        const data = await request(
-          apiUrl,
-          `/api/sso/branches${params}`,
-          { headers: buildHeaders() }
-        );
-        if (data.primary_branch_id) {
-          return data.branches.find((b) => b.id === data.primary_branch_id) ?? null;
+    async search(email, orgSlug) {
+      if (email.length < 2) return [];
+      const response = await request(
+        apiUrl,
+        `${basePath}/search?email=${encodeURIComponent(email)}`,
+        {
+          method: "GET",
+          headers: buildHeaders(orgSlug)
         }
-        return null;
-      } catch {
-        return null;
-      }
+      );
+      return response.data;
+    },
+    /**
+     * Get user permissions breakdown
+     * Shows roles, teams, and aggregated permissions for a user in context
+     */
+    async getPermissions(userId, orgId, branchId, orgSlug) {
+      const params = new URLSearchParams();
+      if (orgId) params.set("org_id", orgId);
+      if (branchId) params.set("branch_id", branchId);
+      const query = params.toString();
+      const path = query ? `${basePath}/${userId}/permissions?${query}` : `${basePath}/${userId}/permissions`;
+      return request(apiUrl, path, {
+        method: "GET",
+        headers: buildHeaders(orgSlug)
+      });
     }
   };
 }
@@ -1618,7 +3072,7 @@ function buildHeaders2(orgSlug) {
     headers["X-XSRF-TOKEN"] = decodeURIComponent(xsrfToken);
   }
   if (orgSlug) {
-    headers["X-Org-Slug"] = orgSlug;
+    headers["X-Org-Id"] = orgSlug;
   }
   return headers;
 }
@@ -1980,110 +3434,27 @@ function createSsoService(config) {
     }
   };
 }
-
-// src/queryKeys.ts
-var ssoQueryKeys = {
-  all: ["sso"],
-  // =========================================================================
-  // Auth (authService)
-  // =========================================================================
-  auth: {
-    all: () => [...ssoQueryKeys.all, "auth"],
-    user: () => [...ssoQueryKeys.auth.all(), "user"],
-    globalLogoutUrl: (redirectUri) => [...ssoQueryKeys.auth.all(), "global-logout-url", redirectUri]
-  },
-  // =========================================================================
-  // Tokens (tokenService)
-  // =========================================================================
-  tokens: {
-    all: () => [...ssoQueryKeys.all, "tokens"],
-    list: () => [...ssoQueryKeys.tokens.all(), "list"]
-  },
-  // =========================================================================
-  // Roles (roleService)
-  // =========================================================================
-  roles: {
-    all: () => [...ssoQueryKeys.all, "roles"],
-    list: () => [...ssoQueryKeys.roles.all(), "list"],
-    detail: (id) => [...ssoQueryKeys.roles.all(), "detail", id],
-    permissions: (id) => [...ssoQueryKeys.roles.all(), id, "permissions"]
-  },
-  // =========================================================================
-  // Permissions (permissionService)
-  // =========================================================================
-  permissions: {
-    all: () => [...ssoQueryKeys.all, "permissions"],
-    list: (params) => [...ssoQueryKeys.permissions.all(), "list", params],
-    detail: (id) => [...ssoQueryKeys.permissions.all(), "detail", id],
-    matrix: () => [...ssoQueryKeys.permissions.all(), "matrix"]
-  },
-  // =========================================================================
-  // Teams (teamService)
-  // =========================================================================
-  teams: {
-    all: () => [...ssoQueryKeys.all, "teams"],
-    list: () => [...ssoQueryKeys.teams.all(), "list"],
-    permissions: (teamId) => [...ssoQueryKeys.teams.all(), teamId, "permissions"],
-    orphaned: () => [...ssoQueryKeys.teams.all(), "orphaned"]
-  },
-  // =========================================================================
-  // User Roles (userRoleService) - Scoped Role Assignments
-  // =========================================================================
-  userRoles: {
-    all: () => [...ssoQueryKeys.all, "user-roles"],
-    list: (userId) => [...ssoQueryKeys.userRoles.all(), userId],
-    byBranch: (userId, orgId, branchId) => [...ssoQueryKeys.userRoles.all(), userId, orgId, branchId]
-  },
-  // =========================================================================
-  // Branches (branchService)
-  // =========================================================================
-  branches: {
-    all: () => [...ssoQueryKeys.all, "branches"],
-    list: (orgSlug) => [...ssoQueryKeys.branches.all(), "list", orgSlug],
-    detail: (branchId) => [...ssoQueryKeys.branches.all(), "detail", branchId],
-    headquarters: (orgSlug) => [...ssoQueryKeys.branches.all(), "headquarters", orgSlug],
-    primary: (orgSlug) => [...ssoQueryKeys.branches.all(), "primary", orgSlug]
-  },
-  // =========================================================================
-  // Admin variants (with org context)
-  // =========================================================================
-  admin: {
-    roles: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "roles"],
-      list: (orgSlug) => [...ssoQueryKeys.admin.roles.all(orgSlug), "list"],
-      detail: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), "detail", id],
-      permissions: (orgSlug, id) => [...ssoQueryKeys.admin.roles.all(orgSlug), id, "permissions"]
-    },
-    permissions: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "permissions"],
-      list: (orgSlug, params) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "list", params],
-      detail: (orgSlug, id) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "detail", id],
-      matrix: (orgSlug) => [...ssoQueryKeys.admin.permissions.all(orgSlug), "matrix"]
-    },
-    teams: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "teams"],
-      list: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "list"],
-      permissions: (orgSlug, teamId) => [...ssoQueryKeys.admin.teams.all(orgSlug), teamId, "permissions"],
-      orphaned: (orgSlug) => [...ssoQueryKeys.admin.teams.all(orgSlug), "orphaned"]
-    },
-    userRoles: {
-      all: (orgSlug) => [...ssoQueryKeys.all, "admin", orgSlug, "user-roles"],
-      list: (orgSlug, userId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId],
-      byBranch: (orgSlug, userId, orgId, branchId) => [...ssoQueryKeys.admin.userRoles.all(orgSlug), userId, orgId, branchId]
-    }
-  }
-};
 export {
+  BRANCH_HEADERS,
+  BranchContext,
+  BranchGate,
+  BranchProvider,
+  I18nProvider,
+  OrgBranchSelectorModal,
   OrganizationSwitcher,
   ProtectedRoute,
   SsoCallback,
   SsoContext,
   SsoProvider,
-  branchCreateSchema,
-  branchI18n,
-  branchSchemas,
-  branchUpdateSchema,
+  UserForm,
+  UserTable,
+  branchCacheCreateSchema,
+  branchCacheI18n,
+  branchCacheSchemas,
+  branchCacheUpdateSchema,
+  changeLanguage,
   createAuthService,
+  createBranchHeaderSetter,
   createBranchService,
   createPermissionService,
   createRoleService,
@@ -2091,14 +3462,20 @@ export {
   createTeamService,
   createTokenService,
   createUserRoleService,
-  defaultLocale,
+  createUserService,
+  defaultLocale2 as defaultLocale,
+  defaultTranslations,
   fallbackLocale,
-  getBranchFieldLabel,
-  getBranchFieldPlaceholder,
-  getBranchLabel,
+  getBranchCacheFieldLabel,
+  getBranchCacheFieldPlaceholder,
+  getBranchCacheLabel,
+  getCurrentLocale,
   getEffectivePermissions,
   getMessage,
   getMessages,
+  getOrganizationCacheFieldLabel,
+  getOrganizationCacheFieldPlaceholder,
+  getOrganizationCacheLabel,
   getPermissionFieldLabel,
   getPermissionFieldPlaceholder,
   getPermissionLabel,
@@ -2109,15 +3486,21 @@ export {
   getRolePermissionFieldPlaceholder,
   getRolePermissionLabel,
   getScopeLabel,
-  getTeamFieldLabel,
-  getTeamFieldPlaceholder,
-  getTeamLabel,
+  getTeamCacheFieldLabel,
+  getTeamCacheFieldPlaceholder,
+  getTeamCacheLabel,
   getTeamPermissionFieldLabel,
   getTeamPermissionFieldPlaceholder,
   getTeamPermissionLabel,
-  getUserFieldLabel,
-  getUserFieldPlaceholder,
-  getUserLabel,
+  getUserCacheFieldLabel,
+  getUserCacheFieldPlaceholder,
+  getUserCacheLabel,
+  localeNames,
+  locales,
+  organizationCacheCreateSchema,
+  organizationCacheI18n,
+  organizationCacheSchemas,
+  organizationCacheUpdateSchema,
   permissionCreateSchema,
   permissionI18n,
   permissionSchemas,
@@ -2130,23 +3513,30 @@ export {
   rolePermissionUpdateSchema,
   roleSchemas,
   roleUpdateSchema,
+  setBranchHeaders,
+  ssoNamespace,
   ssoQueryKeys,
   supportedLocales,
-  teamCreateSchema,
-  teamI18n,
+  teamCacheCreateSchema,
+  teamCacheI18n,
+  teamCacheSchemas,
+  teamCacheUpdateSchema,
   teamPermissionCreateSchema,
   teamPermissionI18n,
   teamPermissionSchemas,
   teamPermissionUpdateSchema,
-  teamSchemas,
-  teamUpdateSchema,
   useAuth,
+  useBranch,
+  useBranchGate,
+  useLocale,
   useOrganization,
   useSso,
-  userCreateSchema,
-  userI18n,
-  userSchemas,
-  userUpdateSchema,
+  useSsoTranslation,
+  useTranslations,
+  userCacheCreateSchema,
+  userCacheI18n,
+  userCacheSchemas,
+  userCacheUpdateSchema,
   validationMessages
 };
 //# sourceMappingURL=index.js.map