@hachej/boring-core 0.1.63 → 0.1.65

package/dist/{chunk-NC46VGXS.js → chunk-3B7LU76T.js}

@@ -142,6 +142,7 @@ var routes = {
   workspaceMembers: "/w/:id/members",
   workspaceInvites: "/w/:id/invites",
   workspaceSettings: "/w/:id/settings",
+  companyAdmin: "/w/:id/admin",
   inviteAccept: "/invites/:token"
 };
 function routeHref(name, params) {
@@ -301,8 +302,77 @@ function useTheme() {
   return ctx;
 }
 
+// src/front/CompanyAdminProvider.tsx
+import { createContext as createContext3, useContext as useContext3, useEffect as useEffect3, useMemo as useMemo2, useState as useState3 } from "react";
+import { jsx as jsx4 } from "react/jsx-runtime";
+var CompanyAdminContext = createContext3({
+  configured: false,
+  loading: false,
+  status: null,
+  error: null,
+  renderContent: null,
+  labels: {},
+  refresh: async () => {
+  }
+});
+function CompanyAdminProvider({ children, loadStatus, renderContent, labels, identityKey }) {
+  const [status, setStatus] = useState3(null);
+  const [loading, setLoading] = useState3(Boolean(loadStatus && identityKey !== null));
+  const [error, setError] = useState3(null);
+  async function refresh() {
+    if (!loadStatus) return;
+    setLoading(true);
+    setError(null);
+    try {
+      setStatus(await loadStatus());
+    } catch (err) {
+      setStatus(null);
+      setError(err instanceof Error ? err.message : String(err));
+    } finally {
+      setLoading(false);
+    }
+  }
+  useEffect3(() => {
+    let cancelled = false;
+    if (!loadStatus || identityKey === null) {
+      setStatus(null);
+      setError(null);
+      setLoading(false);
+      return;
+    }
+    setLoading(true);
+    setError(null);
+    loadStatus().then((next) => {
+      if (!cancelled) setStatus(next);
+    }).catch((err) => {
+      if (!cancelled) {
+        setStatus(null);
+        setError(err instanceof Error ? err.message : String(err));
+      }
+    }).finally(() => {
+      if (!cancelled) setLoading(false);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [identityKey, loadStatus]);
+  const value = useMemo2(() => ({
+    configured: Boolean(loadStatus && renderContent),
+    loading,
+    status,
+    error,
+    renderContent: renderContent ?? null,
+    labels: labels ?? {},
+    refresh
+  }), [error, labels, loadStatus, loading, renderContent, status]);
+  return /* @__PURE__ */ jsx4(CompanyAdminContext.Provider, { value, children });
+}
+function useCompanyAdminStatus() {
+  return useContext3(CompanyAdminContext);
+}
+
 // src/front/hooks/useKeyboardShortcuts.ts
-import { useEffect as useEffect3, useRef as useRef2 } from "react";
+import { useEffect as useEffect4, useRef as useRef2 } from "react";
 var MAC_PLATFORM_RE = /Mac|iPod|iPhone|iPad/;
 function normalizeKey(key) {
   const lowered = key.toLowerCase();
@@ -351,7 +421,7 @@ function matchesBinding(event, parsed, macPlatform) {
 function useKeyboardShortcuts(bindings) {
   const bindingsRef = useRef2(bindings);
   bindingsRef.current = bindings;
-  useEffect3(() => {
+  useEffect4(() => {
     if (typeof window === "undefined") return;
     const macPlatform = isMacPlatform();
     const parsedBindings = bindingsRef.current.map((binding) => ({
@@ -375,7 +445,7 @@ function useKeyboardShortcuts(bindings) {
 }
 
 // src/front/hooks/useViewportBreakpoint.ts
-import { useEffect as useEffect4, useState as useState3 } from "react";
+import { useEffect as useEffect5, useState as useState4 } from "react";
 function getBreakpoint() {
   if (typeof window === "undefined") return "sm";
   if (typeof window.matchMedia !== "function") return "sm";
@@ -386,8 +456,8 @@ function getBreakpoint() {
   return "sm";
 }
 function useViewportBreakpoint() {
-  const [breakpoint, setBreakpoint] = useState3(getBreakpoint);
-  useEffect4(() => {
+  const [breakpoint, setBreakpoint] = useState4(getBreakpoint);
+  useEffect5(() => {
     if (typeof window === "undefined") return;
     const update = () => {
       setBreakpoint(getBreakpoint());
@@ -402,7 +472,7 @@ function useViewportBreakpoint() {
 }
 
 // src/front/hooks/useReducedMotion.ts
-import { useEffect as useEffect5, useState as useState4 } from "react";
+import { useEffect as useEffect6, useState as useState5 } from "react";
 var QUERY = "(prefers-reduced-motion: reduce)";
 function prefersReducedMotion() {
   if (typeof window === "undefined") return false;
@@ -410,8 +480,8 @@ function prefersReducedMotion() {
   return window.matchMedia(QUERY).matches;
 }
 function useReducedMotion() {
-  const [reducedMotion, setReducedMotion] = useState4(prefersReducedMotion);
-  useEffect5(() => {
+  const [reducedMotion, setReducedMotion] = useState5(prefersReducedMotion);
+  useEffect6(() => {
     if (typeof window === "undefined" || typeof window.matchMedia !== "function") return;
     const media = window.matchMedia(QUERY);
     const update = (event) => {
@@ -431,10 +501,10 @@ function useReducedMotion() {
 }
 
 // src/front/hooks/useBlobUrl.ts
-import { useEffect as useEffect6, useState as useState5 } from "react";
+import { useEffect as useEffect7, useState as useState6 } from "react";
 function useBlobUrl(blob) {
-  const [blobUrl, setBlobUrl] = useState5(null);
-  useEffect6(() => {
+  const [blobUrl, setBlobUrl] = useState6(null);
+  useEffect7(() => {
     if (!blob) {
       setBlobUrl(null);
       return;
@@ -475,12 +545,12 @@ function useWorkspaceMembers(workspaceId) {
 }
 
 // src/front/WorkspaceAuthProvider.tsx
-import { createContext as createContext4, useContext as useContext4 } from "react";
+import { createContext as createContext5, useContext as useContext5 } from "react";
 import { useQuery as useQuery2, useQueryClient } from "@tanstack/react-query";
 import { matchPath, useLocation, useParams } from "react-router-dom";
 
 // src/front/auth/AuthProvider.tsx
-import { createContext as createContext3, useContext as useContext3, useCallback as useCallback2, useMemo as useMemo2 } from "react";
+import { createContext as createContext4, useContext as useContext4, useCallback as useCallback2, useMemo as useMemo3 } from "react";
 
 // src/front/auth/authClient.ts
 import { createAuthClient } from "better-auth/react";
@@ -503,8 +573,8 @@ function getAuthClient(baseURL) {
 }
 
 // src/front/auth/AuthProvider.tsx
-import { jsx as jsx4 } from "react/jsx-runtime";
-var AuthContext = createContext3(null);
+import { jsx as jsx5 } from "react/jsx-runtime";
+var AuthContext = createContext4(null);
 function toISOString(value) {
   if (!value) return "";
   if (value instanceof Date) return value.toISOString();
@@ -527,20 +597,20 @@ function AuthProvider({
   queryClient,
   navigate
 }) {
-  const client = useMemo2(() => getAuthClient(baseURL), [baseURL]);
+  const client = useMemo3(() => getAuthClient(baseURL), [baseURL]);
   const signOut = useCallback2(async () => {
     await client.signOut();
     queryClient?.clear();
     navigate?.(routes.signin);
   }, [client, queryClient, navigate]);
-  const value = useMemo2(
+  const value = useMemo3(
     () => ({ client, signOut }),
     [client, signOut]
   );
-  return /* @__PURE__ */ jsx4(AuthContext.Provider, { value, children });
+  return /* @__PURE__ */ jsx5(AuthContext.Provider, { value, children });
 }
 function useAuthContext() {
-  const ctx = useContext3(AuthContext);
+  const ctx = useContext4(AuthContext);
   if (!ctx) throw new Error("useSession/signIn/signOut must be used within an AuthProvider");
   return ctx;
 }
@@ -606,8 +676,8 @@ function useSignOut() {
 }
 
 // src/front/WorkspaceAuthProvider.tsx
-import { jsx as jsx5 } from "react/jsx-runtime";
-var WorkspaceContext = createContext4({
+import { jsx as jsx6 } from "react/jsx-runtime";
+var WorkspaceContext = createContext5({
   workspace: null,
   role: null,
   routeStatus: { status: "idle", workspaceId: null }
@@ -699,22 +769,22 @@ function WorkspaceAuthProvider({
     if (workspace?.id === routeWorkspaceId) return { status: "matched", workspaceId: routeWorkspaceId, workspace };
     return { status: "mismatched", workspaceId: routeWorkspaceId, currentWorkspaceId: workspace?.id ?? null };
   })();
-  return /* @__PURE__ */ jsx5(WorkspaceContext.Provider, { value: { workspace, role, routeStatus }, children });
+  return /* @__PURE__ */ jsx6(WorkspaceContext.Provider, { value: { workspace, role, routeStatus }, children });
 }
 function useCurrentWorkspace() {
-  return useContext4(WorkspaceContext).workspace;
+  return useContext5(WorkspaceContext).workspace;
 }
 function useWorkspaceRole() {
-  return useContext4(WorkspaceContext).role;
+  return useContext5(WorkspaceContext).role;
 }
 function useWorkspaceRouteStatus() {
-  return useContext4(WorkspaceContext).routeStatus;
+  return useContext5(WorkspaceContext).routeStatus;
 }
 
 // src/front/auth/UserIdentityProvider.tsx
-import { createContext as createContext5, useContext as useContext5, useEffect as useEffect7, useState as useState6, useRef as useRef3 } from "react";
-import { jsx as jsx6 } from "react/jsx-runtime";
-var UserContext = createContext5(null);
+import { createContext as createContext6, useContext as useContext6, useEffect as useEffect8, useState as useState7, useRef as useRef3 } from "react";
+import { jsx as jsx7 } from "react/jsx-runtime";
+var UserContext = createContext6(null);
 var STALE_MS = 6e4;
 function UserIdentityProvider({ children }) {
   const { data: session } = useSession();
@@ -723,10 +793,10 @@ function UserIdentityProvider({ children }) {
     session?.user,
     isRuntimeEmailVerificationEnabled(config)
   );
-  const [identity, setIdentity] = useState6(null);
+  const [identity, setIdentity] = useState7(null);
   const fetchedForRef = useRef3(null);
   const lastFetchRef = useRef3(0);
-  useEffect7(() => {
+  useEffect8(() => {
     if (!session?.user || !canFetchIdentity) {
       setIdentity(null);
       fetchedForRef.current = null;
@@ -751,23 +821,23 @@ function UserIdentityProvider({ children }) {
       cancelled = true;
     };
   }, [canFetchIdentity, session?.user?.id]);
-  return /* @__PURE__ */ jsx6(UserContext.Provider, { value: identity, children });
+  return /* @__PURE__ */ jsx7(UserContext.Provider, { value: identity, children });
 }
 function useUser() {
-  return useContext5(UserContext);
+  return useContext6(UserContext);
 }
 
 // src/front/auth/GoogleAuthButton.tsx
-import { useState as useState7 } from "react";
+import { useState as useState8 } from "react";
 import { Button as Button2 } from "@hachej/boring-ui-kit";
-import { jsx as jsx7 } from "react/jsx-runtime";
+import { jsx as jsx8 } from "react/jsx-runtime";
 function GoogleAuthButton({
   callbackURL = "/",
   errorCallbackURL = callbackURL,
   onError
 }) {
   const signIn = useSignIn();
-  const [isSubmitting, setIsSubmitting] = useState7(false);
+  const [isSubmitting, setIsSubmitting] = useState8(false);
   async function handleClick() {
     setIsSubmitting(true);
     try {
@@ -781,7 +851,7 @@ function GoogleAuthButton({
       setIsSubmitting(false);
     }
   }
-  return /* @__PURE__ */ jsx7(
+  return /* @__PURE__ */ jsx8(
     Button2,
     {
       type: "button",
@@ -795,12 +865,12 @@ function GoogleAuthButton({
 }
 
 // src/front/auth/SignInPage.tsx
-import { useState as useState8 } from "react";
+import { useState as useState9 } from "react";
 import { useForm } from "react-hook-form";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { z } from "zod";
 import { Button as Button3, Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Input, Label } from "@hachej/boring-ui-kit";
-import { Fragment, jsx as jsx8, jsxs } from "react/jsx-runtime";
+import { Fragment, jsx as jsx9, jsxs } from "react/jsx-runtime";
 var signInSchema = z.object({
   email: z.string().email("Please enter a valid email"),
   password: z.string().min(1, "Password is required")
@@ -814,9 +884,9 @@ function readGoogleAuthError() {
 function SignInPage() {
   const signIn = useSignIn();
   const config = useOptionalConfig();
-  const [serverError, setServerError] = useState8(null);
-  const [oauthError, setOauthError] = useState8(() => readGoogleAuthError());
-  const [isSubmitting, setIsSubmitting] = useState8(false);
+  const [serverError, setServerError] = useState9(null);
+  const [oauthError, setOauthError] = useState9(() => readGoogleAuthError());
+  const [isSubmitting, setIsSubmitting] = useState9(false);
   const showGoogleAuth = config?.features.googleOauth === true;
   const {
     register,
@@ -843,15 +913,15 @@ function SignInPage() {
       setIsSubmitting(false);
     }
   }
-  return /* @__PURE__ */ jsx8("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs(Card, { className: "w-full max-w-sm", children: [
+  return /* @__PURE__ */ jsx9("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs(Card, { className: "w-full max-w-sm", children: [
     /* @__PURE__ */ jsxs(CardHeader, { children: [
-      /* @__PURE__ */ jsx8(CardTitle, { children: "Sign in" }),
-      /* @__PURE__ */ jsx8(CardDescription, { children: "Enter your credentials to continue" })
+      /* @__PURE__ */ jsx9(CardTitle, { children: "Sign in" }),
+      /* @__PURE__ */ jsx9(CardDescription, { children: "Enter your credentials to continue" })
     ] }),
     /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
       /* @__PURE__ */ jsxs(CardContent, { className: "space-y-4", children: [
         showGoogleAuth && /* @__PURE__ */ jsxs(Fragment, { children: [
-          /* @__PURE__ */ jsx8(
+          /* @__PURE__ */ jsx9(
             GoogleAuthButton,
             {
               errorCallbackURL: routes.signin,
@@ -859,14 +929,14 @@ function SignInPage() {
             }
           ),
           /* @__PURE__ */ jsxs("div", { className: "relative", children: [
-            /* @__PURE__ */ jsx8("div", { className: "absolute inset-0 flex items-center", children: /* @__PURE__ */ jsx8("span", { className: "w-full border-t" }) }),
-            /* @__PURE__ */ jsx8("div", { className: "relative flex justify-center text-xs uppercase", children: /* @__PURE__ */ jsx8("span", { className: "bg-card px-2 text-muted-foreground", children: "Or continue with email" }) })
+            /* @__PURE__ */ jsx9("div", { className: "absolute inset-0 flex items-center", children: /* @__PURE__ */ jsx9("span", { className: "w-full border-t" }) }),
+            /* @__PURE__ */ jsx9("div", { className: "relative flex justify-center text-xs uppercase", children: /* @__PURE__ */ jsx9("span", { className: "bg-card px-2 text-muted-foreground", children: "Or continue with email" }) })
           ] })
         ] }),
-        (serverError ?? oauthError) && /* @__PURE__ */ jsx8("div", { role: "alert", className: "text-sm text-destructive", children: serverError ?? oauthError }),
+        (serverError ?? oauthError) && /* @__PURE__ */ jsx9("div", { role: "alert", className: "text-sm text-destructive", children: serverError ?? oauthError }),
         /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx8(Label, { htmlFor: "email", children: "Email" }),
-          /* @__PURE__ */ jsx8(
+          /* @__PURE__ */ jsx9(Label, { htmlFor: "email", children: "Email" }),
+          /* @__PURE__ */ jsx9(
             Input,
             {
               id: "email",
@@ -876,11 +946,11 @@ function SignInPage() {
               ...register("email")
             }
           ),
-          errors.email && /* @__PURE__ */ jsx8("p", { className: "text-sm text-destructive", children: errors.email.message })
+          errors.email && /* @__PURE__ */ jsx9("p", { className: "text-sm text-destructive", children: errors.email.message })
         ] }),
         /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx8(Label, { htmlFor: "password", children: "Password" }),
-          /* @__PURE__ */ jsx8(
+          /* @__PURE__ */ jsx9(Label, { htmlFor: "password", children: "Password" }),
+          /* @__PURE__ */ jsx9(
             Input,
             {
               id: "password",
@@ -889,14 +959,14 @@ function SignInPage() {
               ...register("password")
             }
           ),
-          errors.password && /* @__PURE__ */ jsx8("p", { className: "text-sm text-destructive", children: errors.password.message })
+          errors.password && /* @__PURE__ */ jsx9("p", { className: "text-sm text-destructive", children: errors.password.message })
         ] })
       ] }),
       /* @__PURE__ */ jsxs(CardFooter, { className: "flex flex-col gap-4", children: [
-        /* @__PURE__ */ jsx8(Button3, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Signing in\u2026" : "Sign in" }),
+        /* @__PURE__ */ jsx9(Button3, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Signing in\u2026" : "Sign in" }),
         /* @__PURE__ */ jsxs("div", { className: "flex justify-between text-sm w-full", children: [
-          /* @__PURE__ */ jsx8("a", { href: routes.forgotPassword, className: "text-muted-foreground hover:underline", children: "Forgot password?" }),
-          /* @__PURE__ */ jsx8("a", { href: routes.signup, className: "text-muted-foreground hover:underline", children: "Sign up" })
+          /* @__PURE__ */ jsx9("a", { href: routes.forgotPassword, className: "text-muted-foreground hover:underline", children: "Forgot password?" }),
+          /* @__PURE__ */ jsx9("a", { href: routes.signup, className: "text-muted-foreground hover:underline", children: "Sign up" })
         ] })
       ] })
     ] })
@@ -904,13 +974,13 @@ function SignInPage() {
 }
 
 // src/front/auth/SignUpPage.tsx
-import { useState as useState9 } from "react";
+import { useState as useState10 } from "react";
 import { useForm as useForm2 } from "react-hook-form";
 import { useNavigate } from "react-router-dom";
 import { zodResolver as zodResolver2 } from "@hookform/resolvers/zod";
 import { z as z2 } from "zod";
 import { Button as Button4, Card as Card2, CardContent as CardContent2, CardDescription as CardDescription2, CardFooter as CardFooter2, CardHeader as CardHeader2, CardTitle as CardTitle2, Input as Input2, Label as Label2 } from "@hachej/boring-ui-kit";
-import { Fragment as Fragment2, jsx as jsx9, jsxs as jsxs2 } from "react/jsx-runtime";
+import { Fragment as Fragment2, jsx as jsx10, jsxs as jsxs2 } from "react/jsx-runtime";
 var signUpSchema = z2.object({
   name: z2.string().min(1, "Name is required"),
   email: z2.string().email("Please enter a valid email"),
@@ -926,10 +996,10 @@ function SignUpPage() {
   const signUp = useSignUp();
   const navigate = useNavigate();
   const config = useOptionalConfig();
-  const [serverError, setServerError] = useState9(null);
-  const [oauthError, setOauthError] = useState9(() => readGoogleAuthError2());
-  const [isSubmitting, setIsSubmitting] = useState9(false);
-  const [success, setSuccess] = useState9(false);
+  const [serverError, setServerError] = useState10(null);
+  const [oauthError, setOauthError] = useState10(() => readGoogleAuthError2());
+  const [isSubmitting, setIsSubmitting] = useState10(false);
+  const [success, setSuccess] = useState10(false);
   const inviteToken = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("invite_token") : null;
   const showGoogleAuth = config?.features.googleOauth === true && !inviteToken;
   const {
@@ -963,23 +1033,23 @@ function SignUpPage() {
     }
   }
   if (success) {
-    return /* @__PURE__ */ jsx9("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs2(Card2, { className: "w-full max-w-sm", children: [
+    return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs2(Card2, { className: "w-full max-w-sm", children: [
       /* @__PURE__ */ jsxs2(CardHeader2, { children: [
-        /* @__PURE__ */ jsx9(CardTitle2, { children: "Check your email" }),
-        /* @__PURE__ */ jsx9(CardDescription2, { children: "We sent a verification link to your email address. Please check your inbox to continue." })
+        /* @__PURE__ */ jsx10(CardTitle2, { children: "Check your email" }),
+        /* @__PURE__ */ jsx10(CardDescription2, { children: "We sent a verification link to your email address. Please check your inbox to continue." })
       ] }),
-      /* @__PURE__ */ jsx9(CardFooter2, { children: /* @__PURE__ */ jsx9("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+      /* @__PURE__ */ jsx10(CardFooter2, { children: /* @__PURE__ */ jsx10("a", { href: routes.signin, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
     ] }) });
   }
-  return /* @__PURE__ */ jsx9("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs2(Card2, { className: "w-full max-w-sm", children: [
+  return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs2(Card2, { className: "w-full max-w-sm", children: [
     /* @__PURE__ */ jsxs2(CardHeader2, { children: [
-      /* @__PURE__ */ jsx9(CardTitle2, { children: "Create an account" }),
-      /* @__PURE__ */ jsx9(CardDescription2, { children: "Enter your details to get started" })
+      /* @__PURE__ */ jsx10(CardTitle2, { children: "Create an account" }),
+      /* @__PURE__ */ jsx10(CardDescription2, { children: "Enter your details to get started" })
     ] }),
     /* @__PURE__ */ jsxs2("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
       /* @__PURE__ */ jsxs2(CardContent2, { className: "space-y-4", children: [
         showGoogleAuth && /* @__PURE__ */ jsxs2(Fragment2, { children: [
-          /* @__PURE__ */ jsx9(
+          /* @__PURE__ */ jsx10(
             GoogleAuthButton,
             {
               errorCallbackURL: routes.signup,
@@ -987,14 +1057,14 @@ function SignUpPage() {
             }
           ),
           /* @__PURE__ */ jsxs2("div", { className: "relative", children: [
-            /* @__PURE__ */ jsx9("div", { className: "absolute inset-0 flex items-center", children: /* @__PURE__ */ jsx9("span", { className: "w-full border-t" }) }),
-            /* @__PURE__ */ jsx9("div", { className: "relative flex justify-center text-xs uppercase", children: /* @__PURE__ */ jsx9("span", { className: "bg-card px-2 text-muted-foreground", children: "Or continue with email" }) })
+            /* @__PURE__ */ jsx10("div", { className: "absolute inset-0 flex items-center", children: /* @__PURE__ */ jsx10("span", { className: "w-full border-t" }) }),
+            /* @__PURE__ */ jsx10("div", { className: "relative flex justify-center text-xs uppercase", children: /* @__PURE__ */ jsx10("span", { className: "bg-card px-2 text-muted-foreground", children: "Or continue with email" }) })
           ] })
         ] }),
-        (serverError ?? oauthError) && /* @__PURE__ */ jsx9("div", { role: "alert", className: "text-sm text-destructive", children: serverError ?? oauthError }),
+        (serverError ?? oauthError) && /* @__PURE__ */ jsx10("div", { role: "alert", className: "text-sm text-destructive", children: serverError ?? oauthError }),
         /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx9(Label2, { htmlFor: "name", children: "Name" }),
-          /* @__PURE__ */ jsx9(
+          /* @__PURE__ */ jsx10(Label2, { htmlFor: "name", children: "Name" }),
+          /* @__PURE__ */ jsx10(
             Input2,
             {
               id: "name",
@@ -1004,11 +1074,11 @@ function SignUpPage() {
               ...register("name")
             }
           ),
-          errors.name && /* @__PURE__ */ jsx9("p", { className: "text-sm text-destructive", children: errors.name.message })
+          errors.name && /* @__PURE__ */ jsx10("p", { className: "text-sm text-destructive", children: errors.name.message })
         ] }),
         /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx9(Label2, { htmlFor: "email", children: "Email" }),
-          /* @__PURE__ */ jsx9(
+          /* @__PURE__ */ jsx10(Label2, { htmlFor: "email", children: "Email" }),
+          /* @__PURE__ */ jsx10(
             Input2,
             {
               id: "email",
@@ -1018,11 +1088,11 @@ function SignUpPage() {
               ...register("email")
             }
           ),
-          errors.email && /* @__PURE__ */ jsx9("p", { className: "text-sm text-destructive", children: errors.email.message })
+          errors.email && /* @__PURE__ */ jsx10("p", { className: "text-sm text-destructive", children: errors.email.message })
         ] }),
         /* @__PURE__ */ jsxs2("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx9(Label2, { htmlFor: "password", children: "Password" }),
-          /* @__PURE__ */ jsx9(
+          /* @__PURE__ */ jsx10(Label2, { htmlFor: "password", children: "Password" }),
+          /* @__PURE__ */ jsx10(
             Input2,
             {
               id: "password",
@@ -1032,14 +1102,14 @@ function SignUpPage() {
               ...register("password")
             }
           ),
-          errors.password && /* @__PURE__ */ jsx9("p", { className: "text-sm text-destructive", children: errors.password.message })
+          errors.password && /* @__PURE__ */ jsx10("p", { className: "text-sm text-destructive", children: errors.password.message })
         ] })
       ] }),
       /* @__PURE__ */ jsxs2(CardFooter2, { className: "flex flex-col gap-4", children: [
-        /* @__PURE__ */ jsx9(Button4, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Creating account\u2026" : "Sign up" }),
+        /* @__PURE__ */ jsx10(Button4, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Creating account\u2026" : "Sign up" }),
         /* @__PURE__ */ jsxs2("div", { className: "text-sm text-center", children: [
-          /* @__PURE__ */ jsx9("span", { className: "text-muted-foreground", children: "Already have an account? " }),
-          /* @__PURE__ */ jsx9("a", { href: routes.signin, className: "hover:underline", children: "Sign in" })
+          /* @__PURE__ */ jsx10("span", { className: "text-muted-foreground", children: "Already have an account? " }),
+          /* @__PURE__ */ jsx10("a", { href: routes.signin, className: "hover:underline", children: "Sign in" })
         ] })
       ] })
     ] })
@@ -1047,19 +1117,19 @@ function SignUpPage() {
 }
 
 // src/front/auth/ForgotPasswordPage.tsx
-import { useState as useState10 } from "react";
+import { useState as useState11 } from "react";
 import { useForm as useForm3 } from "react-hook-form";
 import { zodResolver as zodResolver3 } from "@hookform/resolvers/zod";
 import { z as z3 } from "zod";
 import { Button as Button5, Card as Card3, CardContent as CardContent3, CardDescription as CardDescription3, CardFooter as CardFooter3, CardHeader as CardHeader3, CardTitle as CardTitle3, Input as Input3, Label as Label3 } from "@hachej/boring-ui-kit";
-import { jsx as jsx10, jsxs as jsxs3 } from "react/jsx-runtime";
+import { jsx as jsx11, jsxs as jsxs3 } from "react/jsx-runtime";
 var forgotSchema = z3.object({
   email: z3.string().email("Please enter a valid email")
 });
 function ForgotPasswordPage() {
   const forgetPassword = useForgetPassword();
-  const [isSubmitting, setIsSubmitting] = useState10(false);
-  const [submitted, setSubmitted] = useState10(false);
+  const [isSubmitting, setIsSubmitting] = useState11(false);
+  const [submitted, setSubmitted] = useState11(false);
   const redirect = typeof window === "undefined" ? null : new URLSearchParams(window.location.search).get("redirect");
   const signinHref = redirect ? `${routes.signin}?redirect=${encodeURIComponent(redirect)}` : routes.signin;
   const {
@@ -1080,23 +1150,23 @@ function ForgotPasswordPage() {
     }
   }
   if (submitted) {
-    return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
+    return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
       /* @__PURE__ */ jsxs3(CardHeader3, { children: [
-        /* @__PURE__ */ jsx10(CardTitle3, { children: "Check your inbox" }),
-        /* @__PURE__ */ jsx10(CardDescription3, { children: "If an account exists with that email, we sent a password reset link. Check your inbox and follow the instructions." })
+        /* @__PURE__ */ jsx11(CardTitle3, { children: "Check your inbox" }),
+        /* @__PURE__ */ jsx11(CardDescription3, { children: "If an account exists with that email, we sent a password reset link. Check your inbox and follow the instructions." })
       ] }),
-      /* @__PURE__ */ jsx10(CardFooter3, { children: /* @__PURE__ */ jsx10("a", { href: signinHref, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
+      /* @__PURE__ */ jsx11(CardFooter3, { children: /* @__PURE__ */ jsx11("a", { href: signinHref, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" }) })
     ] }) });
   }
-  return /* @__PURE__ */ jsx10("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
+  return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs3(Card3, { className: "w-full max-w-sm", children: [
     /* @__PURE__ */ jsxs3(CardHeader3, { children: [
-      /* @__PURE__ */ jsx10(CardTitle3, { children: "Forgot password" }),
-      /* @__PURE__ */ jsx10(CardDescription3, { children: "Enter your email and we'll send you a reset link" })
+      /* @__PURE__ */ jsx11(CardTitle3, { children: "Forgot password" }),
+      /* @__PURE__ */ jsx11(CardDescription3, { children: "Enter your email and we'll send you a reset link" })
     ] }),
     /* @__PURE__ */ jsxs3("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
-      /* @__PURE__ */ jsx10(CardContent3, { className: "space-y-4", children: /* @__PURE__ */ jsxs3("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx10(Label3, { htmlFor: "email", children: "Email" }),
-        /* @__PURE__ */ jsx10(
+      /* @__PURE__ */ jsx11(CardContent3, { className: "space-y-4", children: /* @__PURE__ */ jsxs3("div", { className: "space-y-2", children: [
+        /* @__PURE__ */ jsx11(Label3, { htmlFor: "email", children: "Email" }),
+        /* @__PURE__ */ jsx11(
           Input3,
           {
             id: "email",
@@ -1106,23 +1176,23 @@ function ForgotPasswordPage() {
             ...register("email")
           }
         ),
-        errors.email && /* @__PURE__ */ jsx10("p", { className: "text-sm text-destructive", children: errors.email.message })
+        errors.email && /* @__PURE__ */ jsx11("p", { className: "text-sm text-destructive", children: errors.email.message })
       ] }) }),
       /* @__PURE__ */ jsxs3(CardFooter3, { className: "flex flex-col gap-4", children: [
-        /* @__PURE__ */ jsx10(Button5, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Sending\u2026" : "Send reset link" }),
-        /* @__PURE__ */ jsx10("a", { href: signinHref, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" })
+        /* @__PURE__ */ jsx11(Button5, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Sending\u2026" : "Send reset link" }),
+        /* @__PURE__ */ jsx11("a", { href: signinHref, className: "text-sm text-muted-foreground hover:underline", children: "Back to sign in" })
       ] })
     ] })
   ] }) });
 }
 
 // src/front/auth/ResetPasswordPage.tsx
-import { useState as useState11 } from "react";
+import { useState as useState12 } from "react";
 import { useForm as useForm4 } from "react-hook-form";
 import { zodResolver as zodResolver4 } from "@hookform/resolvers/zod";
 import { z as z4 } from "zod";
 import { Button as Button6, Card as Card4, CardContent as CardContent4, CardDescription as CardDescription4, CardFooter as CardFooter4, CardHeader as CardHeader4, CardTitle as CardTitle4, Input as Input4, Label as Label4 } from "@hachej/boring-ui-kit";
-import { jsx as jsx11, jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsx as jsx12, jsxs as jsxs4 } from "react/jsx-runtime";
 var resetSchema = z4.object({
   password: z4.string().min(8, "Password must be at least 8 characters"),
   confirmPassword: z4.string()
@@ -1132,9 +1202,9 @@ var resetSchema = z4.object({
 });
 function ResetPasswordPage() {
   const resetPassword = useResetPassword();
-  const [serverError, setServerError] = useState11(null);
-  const [isSubmitting, setIsSubmitting] = useState11(false);
-  const [expired, setExpired] = useState11(false);
+  const [serverError, setServerError] = useState12(null);
+  const [isSubmitting, setIsSubmitting] = useState12(false);
+  const [expired, setExpired] = useState12(false);
   const token = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("token") : null;
   const {
     register,
@@ -1172,25 +1242,25 @@ function ResetPasswordPage() {
     }
   }
   if (!token || expired) {
-    return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs4(Card4, { className: "w-full max-w-sm", children: [
+    return /* @__PURE__ */ jsx12("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs4(Card4, { className: "w-full max-w-sm", children: [
       /* @__PURE__ */ jsxs4(CardHeader4, { children: [
-        /* @__PURE__ */ jsx11(CardTitle4, { children: "Link expired" }),
-        /* @__PURE__ */ jsx11(CardDescription4, { children: "This reset link is no longer valid. Please request a new one." })
+        /* @__PURE__ */ jsx12(CardTitle4, { children: "Link expired" }),
+        /* @__PURE__ */ jsx12(CardDescription4, { children: "This reset link is no longer valid. Please request a new one." })
       ] }),
-      /* @__PURE__ */ jsx11(CardFooter4, { children: /* @__PURE__ */ jsx11("a", { href: routes.forgotPassword, children: /* @__PURE__ */ jsx11(Button6, { variant: "outline", children: "Request new link" }) }) })
+      /* @__PURE__ */ jsx12(CardFooter4, { children: /* @__PURE__ */ jsx12("a", { href: routes.forgotPassword, children: /* @__PURE__ */ jsx12(Button6, { variant: "outline", children: "Request new link" }) }) })
     ] }) });
   }
-  return /* @__PURE__ */ jsx11("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs4(Card4, { className: "w-full max-w-sm", children: [
+  return /* @__PURE__ */ jsx12("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs4(Card4, { className: "w-full max-w-sm", children: [
     /* @__PURE__ */ jsxs4(CardHeader4, { children: [
-      /* @__PURE__ */ jsx11(CardTitle4, { children: "Reset password" }),
-      /* @__PURE__ */ jsx11(CardDescription4, { children: "Enter your new password below" })
+      /* @__PURE__ */ jsx12(CardTitle4, { children: "Reset password" }),
+      /* @__PURE__ */ jsx12(CardDescription4, { children: "Enter your new password below" })
     ] }),
     /* @__PURE__ */ jsxs4("form", { onSubmit: handleSubmit(onSubmit), noValidate: true, children: [
       /* @__PURE__ */ jsxs4(CardContent4, { className: "space-y-4", children: [
-        serverError && /* @__PURE__ */ jsx11("div", { role: "alert", className: "text-sm text-destructive", children: serverError }),
+        serverError && /* @__PURE__ */ jsx12("div", { role: "alert", className: "text-sm text-destructive", children: serverError }),
         /* @__PURE__ */ jsxs4("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx11(Label4, { htmlFor: "password", children: "New password" }),
-          /* @__PURE__ */ jsx11(
+          /* @__PURE__ */ jsx12(Label4, { htmlFor: "password", children: "New password" }),
+          /* @__PURE__ */ jsx12(
             Input4,
             {
               id: "password",
@@ -1200,11 +1270,11 @@ function ResetPasswordPage() {
               ...register("password")
             }
           ),
-          errors.password && /* @__PURE__ */ jsx11("p", { className: "text-sm text-destructive", children: errors.password.message })
+          errors.password && /* @__PURE__ */ jsx12("p", { className: "text-sm text-destructive", children: errors.password.message })
         ] }),
         /* @__PURE__ */ jsxs4("div", { className: "space-y-2", children: [
-          /* @__PURE__ */ jsx11(Label4, { htmlFor: "confirmPassword", children: "Confirm password" }),
-          /* @__PURE__ */ jsx11(
+          /* @__PURE__ */ jsx12(Label4, { htmlFor: "confirmPassword", children: "Confirm password" }),
+          /* @__PURE__ */ jsx12(
             Input4,
             {
               id: "confirmPassword",
@@ -1213,18 +1283,18 @@ function ResetPasswordPage() {
               ...register("confirmPassword")
             }
           ),
-          errors.confirmPassword && /* @__PURE__ */ jsx11("p", { className: "text-sm text-destructive", children: errors.confirmPassword.message })
+          errors.confirmPassword && /* @__PURE__ */ jsx12("p", { className: "text-sm text-destructive", children: errors.confirmPassword.message })
         ] })
       ] }),
-      /* @__PURE__ */ jsx11(CardFooter4, { children: /* @__PURE__ */ jsx11(Button6, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Resetting\u2026" : "Reset password" }) })
+      /* @__PURE__ */ jsx12(CardFooter4, { children: /* @__PURE__ */ jsx12(Button6, { type: "submit", className: "w-full", disabled: isSubmitting, children: isSubmitting ? "Resetting\u2026" : "Reset password" }) })
     ] })
   ] }) });
 }
 
 // src/front/auth/VerifyEmailPage.tsx
-import { useCallback as useCallback3, useEffect as useEffect8, useRef as useRef4, useState as useState12 } from "react";
+import { useCallback as useCallback3, useEffect as useEffect9, useRef as useRef4, useState as useState13 } from "react";
 import { Button as Button7, Card as Card5, CardContent as CardContent5, CardDescription as CardDescription5, CardFooter as CardFooter5, CardHeader as CardHeader5, CardTitle as CardTitle5, Input as Input5, Label as Label5 } from "@hachej/boring-ui-kit";
-import { jsx as jsx12, jsxs as jsxs5 } from "react/jsx-runtime";
+import { jsx as jsx13, jsxs as jsxs5 } from "react/jsx-runtime";
 function getCookie(name) {
   const match = document.cookie.match(new RegExp(`(?:^|; )${name}=([^;]*)`));
   return match ? decodeURIComponent(match[1]) : null;
@@ -1243,22 +1313,22 @@ function VerifyEmailPage() {
   const sendVerificationEmail = useSendVerificationEmail();
   const signOut = useSignOut();
   const token = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("token") : null;
-  const [status, setStatus] = useState12(token ? "verifying" : "no-token");
-  const [inviteWarning, setInviteWarning] = useState12(null);
-  const [cooldown, setCooldown] = useState12(0);
-  const [resendEmail, setResendEmail] = useState12("");
-  const [resendSent, setResendSent] = useState12(false);
-  const [isSigningOut, setIsSigningOut] = useState12(false);
+  const [status, setStatus] = useState13(token ? "verifying" : "no-token");
+  const [inviteWarning, setInviteWarning] = useState13(null);
+  const [cooldown, setCooldown] = useState13(0);
+  const [resendEmail, setResendEmail] = useState13("");
+  const [resendSent, setResendSent] = useState13(false);
+  const [isSigningOut, setIsSigningOut] = useState13(false);
   const verifiedRef = useRef4(false);
   const sessionEmail = session.data?.user?.email ?? null;
-  useEffect8(() => {
+  useEffect9(() => {
     const cookie = getCookie("boring_invite_failed");
     if (cookie) {
       setInviteWarning(cookie || "Your invite link was invalid; you\u2019re signed in.");
       deleteCookie("boring_invite_failed");
     }
   }, []);
-  useEffect8(() => {
+  useEffect9(() => {
     if (!token || verifiedRef.current) return;
     verifiedRef.current = true;
     (async () => {
@@ -1280,7 +1350,7 @@ function VerifyEmailPage() {
       }
     })();
   }, [token, verifyEmail]);
-  useEffect8(() => {
+  useEffect9(() => {
     if (cooldown <= 0) return;
     const id = setInterval(() => {
       setCooldown((c) => {
@@ -1312,7 +1382,7 @@ function VerifyEmailPage() {
       navigateToSignIn();
     }
   }, [isSigningOut, signOut]);
-  const resendButton = /* @__PURE__ */ jsx12(
+  const resendButton = /* @__PURE__ */ jsx13(
     Button7,
     {
       variant: "outline",
@@ -1324,8 +1394,8 @@ function VerifyEmailPage() {
   );
   const resendSection = /* @__PURE__ */ jsxs5("div", { className: "space-y-3", children: [
     !sessionEmail && /* @__PURE__ */ jsxs5("div", { className: "space-y-2", children: [
-      /* @__PURE__ */ jsx12(Label5, { htmlFor: "resend-email", children: "Email" }),
-      /* @__PURE__ */ jsx12(
+      /* @__PURE__ */ jsx13(Label5, { htmlFor: "resend-email", children: "Email" }),
+      /* @__PURE__ */ jsx13(
         Input5,
         {
           id: "resend-email",
@@ -1337,33 +1407,33 @@ function VerifyEmailPage() {
       )
     ] }),
     resendButton,
-    resendSent && /* @__PURE__ */ jsx12("p", { className: "text-sm text-muted-foreground text-center", children: "If an account exists with that email, we sent a new verification link." })
+    resendSent && /* @__PURE__ */ jsx13("p", { className: "text-sm text-muted-foreground text-center", children: "If an account exists with that email, we sent a new verification link." })
   ] });
   if (status === "verifying") {
-    return /* @__PURE__ */ jsx12("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx12(Card5, { className: "w-full max-w-sm", children: /* @__PURE__ */ jsxs5(CardHeader5, { children: [
-      /* @__PURE__ */ jsx12(CardTitle5, { children: "Verifying your email" }),
-      /* @__PURE__ */ jsx12(CardDescription5, { children: "Please wait\u2026" })
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx13(Card5, { className: "w-full max-w-sm", children: /* @__PURE__ */ jsxs5(CardHeader5, { children: [
+      /* @__PURE__ */ jsx13(CardTitle5, { children: "Verifying your email" }),
+      /* @__PURE__ */ jsx13(CardDescription5, { children: "Please wait\u2026" })
     ] }) }) });
   }
   if (status === "verified") {
-    return /* @__PURE__ */ jsx12("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
-      inviteWarning && /* @__PURE__ */ jsx12("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx12("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
+      inviteWarning && /* @__PURE__ */ jsx13("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx13("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
       /* @__PURE__ */ jsxs5(CardHeader5, { children: [
-        /* @__PURE__ */ jsx12(CardTitle5, { children: "Email verified" }),
-        /* @__PURE__ */ jsx12(CardDescription5, { children: "Your email has been verified. You can now continue." })
+        /* @__PURE__ */ jsx13(CardTitle5, { children: "Email verified" }),
+        /* @__PURE__ */ jsx13(CardDescription5, { children: "Your email has been verified. You can now continue." })
       ] }),
-      /* @__PURE__ */ jsx12(CardFooter5, { children: /* @__PURE__ */ jsx12("a", { href: "/", className: "w-full", children: /* @__PURE__ */ jsx12(Button7, { className: "w-full", children: "Continue" }) }) })
+      /* @__PURE__ */ jsx13(CardFooter5, { children: /* @__PURE__ */ jsx13("a", { href: "/", className: "w-full", children: /* @__PURE__ */ jsx13(Button7, { className: "w-full", children: "Continue" }) }) })
     ] }) });
   }
   if (status === "expired") {
-    return /* @__PURE__ */ jsx12("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
-      inviteWarning && /* @__PURE__ */ jsx12("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx12("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
+    return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
+      inviteWarning && /* @__PURE__ */ jsx13("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx13("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
       /* @__PURE__ */ jsxs5(CardHeader5, { children: [
-        /* @__PURE__ */ jsx12(CardTitle5, { children: "Link expired" }),
-        /* @__PURE__ */ jsx12(CardDescription5, { children: "This verification link is no longer valid. Request a new one below." })
+        /* @__PURE__ */ jsx13(CardTitle5, { children: "Link expired" }),
+        /* @__PURE__ */ jsx13(CardDescription5, { children: "This verification link is no longer valid. Request a new one below." })
       ] }),
-      /* @__PURE__ */ jsx12(CardContent5, { children: resendSection }),
-      /* @__PURE__ */ jsx12(CardFooter5, { children: /* @__PURE__ */ jsx12(
+      /* @__PURE__ */ jsx13(CardContent5, { children: resendSection }),
+      /* @__PURE__ */ jsx13(CardFooter5, { children: /* @__PURE__ */ jsx13(
         Button7,
         {
           type: "button",
@@ -1377,14 +1447,14 @@ function VerifyEmailPage() {
     ] }) });
   }
   const isWaitingForEmailClick = status === "no-token" && Boolean(sessionEmail);
-  return /* @__PURE__ */ jsx12("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
-    inviteWarning && /* @__PURE__ */ jsx12("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx12("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
+  return /* @__PURE__ */ jsx13("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs5(Card5, { className: "w-full max-w-sm", children: [
+    inviteWarning && /* @__PURE__ */ jsx13("div", { role: "status", className: "px-6 pt-4", children: /* @__PURE__ */ jsx13("div", { className: "rounded-md bg-muted px-3 py-2 text-sm text-muted-foreground", children: inviteWarning }) }),
     /* @__PURE__ */ jsxs5(CardHeader5, { children: [
-      /* @__PURE__ */ jsx12(CardTitle5, { children: isWaitingForEmailClick ? "Check your email" : "Invalid verification link" }),
-      /* @__PURE__ */ jsx12(CardDescription5, { children: isWaitingForEmailClick ? "We sent a verification link to your email address. Please check your inbox to continue." : status === "no-token" ? "No verification token found. Check the link in your email." : "This verification link is invalid. Request a new one below." })
+      /* @__PURE__ */ jsx13(CardTitle5, { children: isWaitingForEmailClick ? "Check your email" : "Invalid verification link" }),
+      /* @__PURE__ */ jsx13(CardDescription5, { children: isWaitingForEmailClick ? "We sent a verification link to your email address. Please check your inbox to continue." : status === "no-token" ? "No verification token found. Check the link in your email." : "This verification link is invalid. Request a new one below." })
     ] }),
-    /* @__PURE__ */ jsx12(CardContent5, { children: resendSection }),
-    /* @__PURE__ */ jsx12(CardFooter5, { children: /* @__PURE__ */ jsx12(
+    /* @__PURE__ */ jsx13(CardContent5, { children: resendSection }),
+    /* @__PURE__ */ jsx13(CardFooter5, { children: /* @__PURE__ */ jsx13(
       Button7,
       {
         type: "button",
@@ -1399,7 +1469,7 @@ function VerifyEmailPage() {
 }
 
 // src/front/auth/UserSettingsPage.tsx
-import { useCallback as useCallback4, useState as useState13 } from "react";
+import { useCallback as useCallback4, useState as useState14 } from "react";
 import { useForm as useForm5 } from "react-hook-form";
 import { zodResolver as zodResolver5 } from "@hookform/resolvers/zod";
 import { z as z5 } from "zod";
@@ -1431,7 +1501,7 @@ import {
   Trash2,
   UserRound
 } from "lucide-react";
-import { jsx as jsx13, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx14, jsxs as jsxs6 } from "react/jsx-runtime";
 var changePasswordSchema = z5.object({
   currentPassword: z5.string().min(1, "Current password is required"),
   newPassword: z5.string().min(8, "Password must be at least 8 characters"),
@@ -1457,7 +1527,7 @@ function SettingsTopBar() {
   const config = useOptionalConfig();
   const appTitle = config?.appName ?? "Boring UI";
   const appInitial = (appTitle.trim().charAt(0) || "B").toUpperCase();
-  return /* @__PURE__ */ jsx13(
+  return /* @__PURE__ */ jsx14(
     "header",
     {
       className: "relative flex h-[52px] items-center justify-between gap-3 border-b border-border/40 bg-background px-4",
@@ -1470,7 +1540,7 @@ function SettingsTopBar() {
             "aria-label": `${appTitle} home`,
             className: "flex min-w-0 items-center gap-2.5 rounded-md outline-none transition-opacity hover:opacity-80 focus-visible:ring-2 focus-visible:ring-ring",
             children: [
-              /* @__PURE__ */ jsx13(
+              /* @__PURE__ */ jsx14(
                 "div",
                 {
                   "aria-hidden": "true",
@@ -1478,12 +1548,12 @@ function SettingsTopBar() {
                   children: appInitial
                 }
               ),
-              /* @__PURE__ */ jsx13("span", { className: "truncate text-[13px] font-medium tracking-tight text-foreground", children: appTitle })
+              /* @__PURE__ */ jsx14("span", { className: "truncate text-[13px] font-medium tracking-tight text-foreground", children: appTitle })
             ]
           }
         ),
-        /* @__PURE__ */ jsx13("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
-        /* @__PURE__ */ jsx13("span", { className: "truncate text-[13px] text-muted-foreground", children: "Account settings" })
+        /* @__PURE__ */ jsx14("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+        /* @__PURE__ */ jsx14("span", { className: "truncate text-[13px] text-muted-foreground", children: "Account settings" })
       ] })
     }
   );
@@ -1495,7 +1565,7 @@ function SettingsPageHeader({
 }) {
   return /* @__PURE__ */ jsxs6("header", { className: "boring-settings-page-header", children: [
     /* @__PURE__ */ jsxs6("div", { className: "boring-settings-context", children: [
-      /* @__PURE__ */ jsx13("div", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: initials }),
+      /* @__PURE__ */ jsx14("div", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: initials }),
       /* @__PURE__ */ jsxs6("div", { className: "min-w-0", children: [
         /* @__PURE__ */ jsxs6("p", { className: "truncate text-[13px] font-medium text-foreground", children: [
           "Signed in as ",
@@ -1508,9 +1578,9 @@ function SettingsPageHeader({
       ] })
     ] }),
     /* @__PURE__ */ jsxs6("div", { className: "max-w-2xl", children: [
-      /* @__PURE__ */ jsx13("p", { className: "text-[11px] font-medium uppercase leading-4 text-muted-foreground", children: "Account" }),
-      /* @__PURE__ */ jsx13("h1", { className: "mt-1 text-[20px] font-semibold leading-7 tracking-tight text-foreground", children: "Account settings" }),
-      /* @__PURE__ */ jsx13("p", { className: "mt-2 text-[13px] leading-5 text-muted-foreground", children: "Review your profile, change your password, and manage account-level actions." })
+      /* @__PURE__ */ jsx14("p", { className: "text-[11px] font-medium uppercase leading-4 text-muted-foreground", children: "Account" }),
+      /* @__PURE__ */ jsx14("h1", { className: "mt-1 text-[20px] font-semibold leading-7 tracking-tight text-foreground", children: "Account settings" }),
+      /* @__PURE__ */ jsx14("p", { className: "mt-2 text-[13px] leading-5 text-muted-foreground", children: "Review your profile, change your password, and manage account-level actions." })
     ] })
   ] });
 }
@@ -1525,13 +1595,13 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
   const signOut = useSignOut();
   const changePassword = useChangePassword();
   const user = identity?.user ?? session.data?.user ?? null;
-  const [passwordError, setPasswordError] = useState13(null);
-  const [passwordSuccess, setPasswordSuccess] = useState13(false);
-  const [isChangingPassword, setIsChangingPassword] = useState13(false);
-  const [deleteConfirm, setDeleteConfirm] = useState13("");
-  const [deleteError, setDeleteError] = useState13(null);
-  const [isDeleting, setIsDeleting] = useState13(false);
-  const [deleteDialogOpen, setDeleteDialogOpen] = useState13(false);
+  const [passwordError, setPasswordError] = useState14(null);
+  const [passwordSuccess, setPasswordSuccess] = useState14(false);
+  const [isChangingPassword, setIsChangingPassword] = useState14(false);
+  const [deleteConfirm, setDeleteConfirm] = useState14("");
+  const [deleteError, setDeleteError] = useState14(null);
+  const [isDeleting, setIsDeleting] = useState14(false);
+  const [deleteDialogOpen, setDeleteDialogOpen] = useState14(false);
   const {
     register,
     handleSubmit,
@@ -1589,21 +1659,21 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
       setIsDeleting(false);
     }
   }, [user?.email, signOut]);
-  const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx13(SettingsTopBar, {}) : topBar;
+  const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx14(SettingsTopBar, {}) : topBar;
   if (!user) {
     return /* @__PURE__ */ jsxs6("main", { className: "boring-settings-shell", children: [
       topBarNode,
-      /* @__PURE__ */ jsx13("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsx13("div", { className: "mx-auto flex min-h-full w-full max-w-5xl items-center justify-center px-4", children: /* @__PURE__ */ jsxs6("div", { className: "w-full max-w-sm rounded-lg border border-border/60 bg-background p-4", children: [
-        /* @__PURE__ */ jsx13("h1", { className: "text-[13px] font-medium", children: "Account settings" }),
-        /* @__PURE__ */ jsx13("p", { className: "mt-1 text-[12px] text-muted-foreground", children: "Loading your account..." })
+      /* @__PURE__ */ jsx14("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsx14("div", { className: "mx-auto flex min-h-full w-full max-w-5xl items-center justify-center px-4", children: /* @__PURE__ */ jsxs6("div", { className: "w-full max-w-sm rounded-lg border border-border/60 bg-background p-4", children: [
+        /* @__PURE__ */ jsx14("h1", { className: "text-[13px] font-medium", children: "Account settings" }),
+        /* @__PURE__ */ jsx14("p", { className: "mt-1 text-[12px] text-muted-foreground", children: "Loading your account..." })
       ] }) }) })
     ] });
   }
   const initials = initialsFor(user.name, user.email);
   return /* @__PURE__ */ jsxs6("main", { className: "boring-settings-shell", children: [
     topBarNode,
-    /* @__PURE__ */ jsx13("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs6("div", { className: "boring-settings-layout", children: [
-      /* @__PURE__ */ jsx13("aside", { className: "boring-settings-sidebar", children: /* @__PURE__ */ jsx13(
+    /* @__PURE__ */ jsx14("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs6("div", { className: "boring-settings-layout", children: [
+      /* @__PURE__ */ jsx14("aside", { className: "boring-settings-sidebar", children: /* @__PURE__ */ jsx14(
         UiSettingsNav,
         {
           label: "Account settings",
@@ -1615,7 +1685,7 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
         }
       ) }),
       /* @__PURE__ */ jsxs6("div", { className: "boring-settings-content space-y-4", children: [
-        /* @__PURE__ */ jsx13(
+        /* @__PURE__ */ jsx14(
           SettingsPageHeader,
           {
             initials,
@@ -1623,65 +1693,65 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
             email: user.email
           }
         ),
-        /* @__PURE__ */ jsx13(
+        /* @__PURE__ */ jsx14(
           UiSettingsPanel,
           {
             id: "profile",
-            icon: /* @__PURE__ */ jsx13(UserRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx14(UserRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "Profile",
             description: "The identity shown inside this app.",
             children: /* @__PURE__ */ jsxs6(DetailList, { children: [
-              /* @__PURE__ */ jsx13(
+              /* @__PURE__ */ jsx14(
                 UiDetailLine,
                 {
-                  icon: /* @__PURE__ */ jsx13(Mail, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  icon: /* @__PURE__ */ jsx14(Mail, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
                   label: "Email",
-                  children: /* @__PURE__ */ jsx13("p", { className: "truncate", children: user.email })
+                  children: /* @__PURE__ */ jsx14("p", { className: "truncate", children: user.email })
                 }
               ),
-              /* @__PURE__ */ jsx13(
+              /* @__PURE__ */ jsx14(
                 UiDetailLine,
                 {
-                  icon: /* @__PURE__ */ jsx13(UserRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  icon: /* @__PURE__ */ jsx14(UserRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
                   label: "Name",
-                  children: /* @__PURE__ */ jsx13("p", { className: "truncate", children: user.name ?? "Not set" })
+                  children: /* @__PURE__ */ jsx14("p", { className: "truncate", children: user.name ?? "Not set" })
                 }
               ),
-              /* @__PURE__ */ jsx13(
+              /* @__PURE__ */ jsx14(
                 UiDetailLine,
                 {
-                  icon: /* @__PURE__ */ jsx13(CalendarDays, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  icon: /* @__PURE__ */ jsx14(CalendarDays, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
                   label: "Member since",
-                  children: /* @__PURE__ */ jsx13("p", { children: formatMemberSince(user.createdAt) })
+                  children: /* @__PURE__ */ jsx14("p", { children: formatMemberSince(user.createdAt) })
                 }
               ),
-              /* @__PURE__ */ jsx13(
+              /* @__PURE__ */ jsx14(
                 UiDetailLine,
                 {
-                  icon: /* @__PURE__ */ jsx13(CheckCircle2, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+                  icon: /* @__PURE__ */ jsx14(CheckCircle2, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
                   label: "Email status",
-                  children: /* @__PURE__ */ jsx13("p", { children: user.emailVerified ? "Verified" : "Not verified" })
+                  children: /* @__PURE__ */ jsx14("p", { children: user.emailVerified ? "Verified" : "Not verified" })
                 }
               )
             ] })
           }
         ),
-        extraSections.map((section) => /* @__PURE__ */ jsx13("div", { children: section.content }, section.id)),
-        /* @__PURE__ */ jsx13("form", { onSubmit: handleSubmit(onChangePassword), noValidate: true, children: /* @__PURE__ */ jsx13(
+        extraSections.map((section) => /* @__PURE__ */ jsx14("div", { children: section.content }, section.id)),
+        /* @__PURE__ */ jsx14("form", { onSubmit: handleSubmit(onChangePassword), noValidate: true, children: /* @__PURE__ */ jsx14(
           UiSettingsPanel,
           {
             id: "password",
-            icon: /* @__PURE__ */ jsx13(KeyRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx14(KeyRound, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "Change password",
             description: "Update the password used for email sign-in.",
-            footer: /* @__PURE__ */ jsx13(Button8, { type: "submit", size: "sm", disabled: isChangingPassword, children: isChangingPassword ? "Changing..." : "Change password" }),
+            footer: /* @__PURE__ */ jsx14(Button8, { type: "submit", size: "sm", disabled: isChangingPassword, children: isChangingPassword ? "Changing..." : "Change password" }),
             children: /* @__PURE__ */ jsxs6("div", { className: "space-y-4", children: [
-              passwordError && /* @__PURE__ */ jsx13(Notice, { role: "alert", tone: "error", description: passwordError }),
-              passwordSuccess && /* @__PURE__ */ jsx13(Notice, { role: "status", tone: "success", description: "Password changed successfully." }),
+              passwordError && /* @__PURE__ */ jsx14(Notice, { role: "alert", tone: "error", description: passwordError }),
+              passwordSuccess && /* @__PURE__ */ jsx14(Notice, { role: "status", tone: "success", description: "Password changed successfully." }),
               /* @__PURE__ */ jsxs6("div", { className: "grid gap-3 sm:grid-cols-2", children: [
                 /* @__PURE__ */ jsxs6("div", { className: "space-y-2 sm:col-span-2", children: [
-                  /* @__PURE__ */ jsx13(Label6, { htmlFor: "currentPassword", className: "text-[12px]", children: "Current password" }),
-                  /* @__PURE__ */ jsx13(
+                  /* @__PURE__ */ jsx14(Label6, { htmlFor: "currentPassword", className: "text-[12px]", children: "Current password" }),
+                  /* @__PURE__ */ jsx14(
                     Input6,
                     {
                       id: "currentPassword",
@@ -1692,11 +1762,11 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
                       ...register("currentPassword")
                     }
                   ),
-                  errors.currentPassword && /* @__PURE__ */ jsx13("p", { className: "text-[12px] text-destructive", children: errors.currentPassword.message })
+                  errors.currentPassword && /* @__PURE__ */ jsx14("p", { className: "text-[12px] text-destructive", children: errors.currentPassword.message })
                 ] }),
                 /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
-                  /* @__PURE__ */ jsx13(Label6, { htmlFor: "newPassword", className: "text-[12px]", children: "New password" }),
-                  /* @__PURE__ */ jsx13(
+                  /* @__PURE__ */ jsx14(Label6, { htmlFor: "newPassword", className: "text-[12px]", children: "New password" }),
+                  /* @__PURE__ */ jsx14(
                     Input6,
                     {
                       id: "newPassword",
@@ -1708,11 +1778,11 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
                       ...register("newPassword")
                     }
                   ),
-                  errors.newPassword && /* @__PURE__ */ jsx13("p", { className: "text-[12px] text-destructive", children: errors.newPassword.message })
+                  errors.newPassword && /* @__PURE__ */ jsx14("p", { className: "text-[12px] text-destructive", children: errors.newPassword.message })
                 ] }),
                 /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
-                  /* @__PURE__ */ jsx13(Label6, { htmlFor: "confirmPassword", className: "text-[12px]", children: "Confirm new password" }),
-                  /* @__PURE__ */ jsx13(
+                  /* @__PURE__ */ jsx14(Label6, { htmlFor: "confirmPassword", className: "text-[12px]", children: "Confirm new password" }),
+                  /* @__PURE__ */ jsx14(
                     Input6,
                     {
                       id: "confirmPassword",
@@ -1723,44 +1793,44 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
                       ...register("confirmPassword")
                     }
                   ),
-                  errors.confirmPassword && /* @__PURE__ */ jsx13("p", { className: "text-[12px] text-destructive", children: errors.confirmPassword.message })
+                  errors.confirmPassword && /* @__PURE__ */ jsx14("p", { className: "text-[12px] text-destructive", children: errors.confirmPassword.message })
                 ] })
               ] })
             ] })
           }
         ) }),
-        /* @__PURE__ */ jsx13(
+        /* @__PURE__ */ jsx14(
           UiSettingsPanel,
           {
             id: "danger-zone",
-            icon: /* @__PURE__ */ jsx13(ShieldAlert, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx14(ShieldAlert, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "Danger zone",
             description: "Permanently delete this account and remove its workspace access.",
             danger: true,
-            children: /* @__PURE__ */ jsx13(
+            children: /* @__PURE__ */ jsx14(
               UiSettingsActionRow,
               {
                 title: "Delete account",
                 description: "Delete your account, user settings, and workspace memberships after confirmation.",
                 action: /* @__PURE__ */ jsxs6(AlertDialog, { open: deleteDialogOpen, onOpenChange: setDeleteDialogOpen, children: [
-                  /* @__PURE__ */ jsx13(AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsxs6(Button8, { variant: "destructive", size: "sm", children: [
-                    /* @__PURE__ */ jsx13(Trash2, { className: "h-4 w-4", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsx14(AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsxs6(Button8, { variant: "destructive", size: "sm", children: [
+                    /* @__PURE__ */ jsx14(Trash2, { className: "h-4 w-4", "aria-hidden": "true" }),
                     "Delete account"
                   ] }) }),
                   /* @__PURE__ */ jsxs6(AlertDialogContent, { children: [
                     /* @__PURE__ */ jsxs6(AlertDialogHeader, { children: [
-                      /* @__PURE__ */ jsx13(AlertDialogTitle, { children: "Delete your account?" }),
-                      /* @__PURE__ */ jsx13(AlertDialogDescription, { children: "This action cannot be undone. All your data, workspaces, and settings will be permanently deleted." })
+                      /* @__PURE__ */ jsx14(AlertDialogTitle, { children: "Delete your account?" }),
+                      /* @__PURE__ */ jsx14(AlertDialogDescription, { children: "This action cannot be undone. All your data, workspaces, and settings will be permanently deleted." })
                     ] }),
                     /* @__PURE__ */ jsxs6("div", { className: "space-y-3 py-2", children: [
-                      deleteError && /* @__PURE__ */ jsx13(Notice, { role: "alert", tone: "error", description: deleteError }),
+                      deleteError && /* @__PURE__ */ jsx14(Notice, { role: "alert", tone: "error", description: deleteError }),
                       /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
                         /* @__PURE__ */ jsxs6(Label6, { htmlFor: "delete-confirm", children: [
                           "Type ",
-                          /* @__PURE__ */ jsx13("span", { className: "font-mono font-bold", children: "DELETE" }),
+                          /* @__PURE__ */ jsx14("span", { className: "font-mono font-bold", children: "DELETE" }),
                           " to confirm"
                         ] }),
-                        /* @__PURE__ */ jsx13(
+                        /* @__PURE__ */ jsx14(
                           Input6,
                           {
                             id: "delete-confirm",
@@ -1774,7 +1844,7 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
                       ] })
                     ] }),
                     /* @__PURE__ */ jsxs6(AlertDialogFooter, { children: [
-                      /* @__PURE__ */ jsx13(
+                      /* @__PURE__ */ jsx14(
                         AlertDialogCancel,
                         {
                           onClick: () => {
@@ -1784,7 +1854,7 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
                           children: "Cancel"
                         }
                       ),
-                      /* @__PURE__ */ jsx13(
+                      /* @__PURE__ */ jsx14(
                         Button8,
                         {
                           variant: "destructive",
@@ -1807,7 +1877,7 @@ function UserSettingsPage({ topBar, extraSections = [] } = {}) {
 }
 
 // src/front/auth/InviteAcceptPage.tsx
-import { useCallback as useCallback5, useState as useState14 } from "react";
+import { useCallback as useCallback5, useState as useState15 } from "react";
 import { useParams as useParams2, useNavigate as useNavigate2 } from "react-router-dom";
 import { useQuery as useQuery3, useMutation, useQueryClient as useQueryClient2 } from "@tanstack/react-query";
 import {
@@ -1821,13 +1891,13 @@ import {
   LoadingState,
   Notice as Notice2
 } from "@hachej/boring-ui-kit";
-import { jsx as jsx14, jsxs as jsxs7 } from "react/jsx-runtime";
+import { jsx as jsx15, jsxs as jsxs7 } from "react/jsx-runtime";
 function InviteAcceptPage() {
   const { token } = useParams2();
   const session = useSession();
   const navigate = useNavigate2();
   const queryClient = useQueryClient2();
-  const [acceptError, setAcceptError] = useState14(null);
+  const [acceptError, setAcceptError] = useState15(null);
   const isSignedIn = Boolean(session.data);
   const isSessionPending = session.isPending;
   const resolveQuery = useQuery3({
@@ -1871,20 +1941,20 @@ function InviteAcceptPage() {
     navigate("/");
   }, [navigate]);
   if (isSessionPending) {
-    return /* @__PURE__ */ jsx14("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx14(Card6, { className: "w-full max-w-md", children: /* @__PURE__ */ jsx14(CardContent6, { className: "py-8 text-center", children: /* @__PURE__ */ jsx14(LoadingState, { "data-testid": "loading", className: "justify-center" }) }) }) });
+    return /* @__PURE__ */ jsx15("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx15(Card6, { className: "w-full max-w-md", children: /* @__PURE__ */ jsx15(CardContent6, { className: "py-8 text-center", children: /* @__PURE__ */ jsx15(LoadingState, { "data-testid": "loading", className: "justify-center" }) }) }) });
   }
   if (!isSignedIn) {
     const signinUrl = `${routes.signin}?redirect=${encodeURIComponent(`/invites/${token}`)}`;
-    return /* @__PURE__ */ jsx14("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
+    return /* @__PURE__ */ jsx15("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
       /* @__PURE__ */ jsxs7(CardHeader6, { children: [
-        /* @__PURE__ */ jsx14(CardTitle6, { children: "Sign in to accept this invite" }),
-        /* @__PURE__ */ jsx14(CardDescription6, { children: "You need to sign in before you can accept a workspace invite." })
+        /* @__PURE__ */ jsx15(CardTitle6, { children: "Sign in to accept this invite" }),
+        /* @__PURE__ */ jsx15(CardDescription6, { children: "You need to sign in before you can accept a workspace invite." })
       ] }),
-      /* @__PURE__ */ jsx14(CardFooter6, { children: /* @__PURE__ */ jsx14(Button9, { className: "w-full", onClick: () => navigate(signinUrl), "data-testid": "signin-redirect", children: "Sign in" }) })
+      /* @__PURE__ */ jsx15(CardFooter6, { children: /* @__PURE__ */ jsx15(Button9, { className: "w-full", onClick: () => navigate(signinUrl), "data-testid": "signin-redirect", children: "Sign in" }) })
     ] }) });
   }
   if (resolveQuery.isLoading) {
-    return /* @__PURE__ */ jsx14("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx14(Card6, { className: "w-full max-w-md", children: /* @__PURE__ */ jsx14(CardContent6, { className: "py-8 text-center", children: /* @__PURE__ */ jsx14(LoadingState, { "data-testid": "loading", className: "justify-center" }) }) }) });
+    return /* @__PURE__ */ jsx15("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx15(Card6, { className: "w-full max-w-md", children: /* @__PURE__ */ jsx15(CardContent6, { className: "py-8 text-center", children: /* @__PURE__ */ jsx15(LoadingState, { "data-testid": "loading", className: "justify-center" }) }) }) });
   }
   if (resolveQuery.error) {
     const detail = getHttpErrorDetail(resolveQuery.error);
@@ -1898,26 +1968,26 @@ function InviteAcceptPage() {
     } else {
       message = detail.message;
     }
-    return /* @__PURE__ */ jsx14("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
-      /* @__PURE__ */ jsx14(CardHeader6, { children: /* @__PURE__ */ jsx14(CardTitle6, { children: "Invite unavailable" }) }),
-      /* @__PURE__ */ jsx14(CardContent6, { children: /* @__PURE__ */ jsx14(Notice2, { "data-testid": "resolve-error", tone: "error", description: message }) }),
-      /* @__PURE__ */ jsx14(CardFooter6, { children: /* @__PURE__ */ jsx14(Button9, { variant: "outline", className: "w-full", onClick: () => navigate("/"), children: "Go home" }) })
+    return /* @__PURE__ */ jsx15("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
+      /* @__PURE__ */ jsx15(CardHeader6, { children: /* @__PURE__ */ jsx15(CardTitle6, { children: "Invite unavailable" }) }),
+      /* @__PURE__ */ jsx15(CardContent6, { children: /* @__PURE__ */ jsx15(Notice2, { "data-testid": "resolve-error", tone: "error", description: message }) }),
+      /* @__PURE__ */ jsx15(CardFooter6, { children: /* @__PURE__ */ jsx15(Button9, { variant: "outline", className: "w-full", onClick: () => navigate("/"), children: "Go home" }) })
     ] }) });
   }
   const preview = resolveQuery.data;
   if (!preview) return null;
-  return /* @__PURE__ */ jsx14("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
+  return /* @__PURE__ */ jsx15("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs7(Card6, { className: "w-full max-w-md", children: [
     /* @__PURE__ */ jsxs7(CardHeader6, { children: [
-      /* @__PURE__ */ jsx14(CardTitle6, { children: "You've been invited" }),
+      /* @__PURE__ */ jsx15(CardTitle6, { children: "You've been invited" }),
       /* @__PURE__ */ jsxs7(CardDescription6, { children: [
         "Join ",
-        /* @__PURE__ */ jsx14("strong", { children: preview.workspaceName }),
+        /* @__PURE__ */ jsx15("strong", { children: preview.workspaceName }),
         " as ",
-        /* @__PURE__ */ jsx14("strong", { children: preview.role })
+        /* @__PURE__ */ jsx15("strong", { children: preview.role })
       ] })
     ] }),
     /* @__PURE__ */ jsxs7(CardContent6, { className: "space-y-3", children: [
-      acceptError && /* @__PURE__ */ jsx14(Notice2, { role: "alert", "data-testid": "accept-error", tone: "error", description: acceptError }),
+      acceptError && /* @__PURE__ */ jsx15(Notice2, { role: "alert", "data-testid": "accept-error", tone: "error", description: acceptError }),
       /* @__PURE__ */ jsxs7("div", { className: "text-sm text-muted-foreground", children: [
         "This invite expires on",
         " ",
@@ -1929,7 +1999,7 @@ function InviteAcceptPage() {
       ] })
     ] }),
     /* @__PURE__ */ jsxs7(CardFooter6, { className: "flex gap-3", children: [
-      /* @__PURE__ */ jsx14(
+      /* @__PURE__ */ jsx15(
         Button9,
         {
           variant: "outline",
@@ -1939,7 +2009,7 @@ function InviteAcceptPage() {
           children: "Decline"
         }
       ),
-      /* @__PURE__ */ jsx14(
+      /* @__PURE__ */ jsx15(
         Button9,
         {
           className: "flex-1",
@@ -1954,9 +2024,9 @@ function InviteAcceptPage() {
 }
 
 // src/front/AuthGate.tsx
-import { useEffect as useEffect9, useMemo as useMemo3, useRef as useRef5 } from "react";
+import { useEffect as useEffect10, useMemo as useMemo4, useRef as useRef5 } from "react";
 import { matchPath as matchPath2 } from "react-router-dom";
-import { Fragment as Fragment3, jsx as jsx15 } from "react/jsx-runtime";
+import { Fragment as Fragment3, jsx as jsx16 } from "react/jsx-runtime";
 var DEFAULT_GRACE_MS = 3e4;
 var UNSAFE_REDIRECT_RE = /[\0\r\n<>"'`]/;
 var UNVERIFIED_ALLOWED_PATHS = /* @__PURE__ */ new Set([
@@ -2039,19 +2109,19 @@ function AuthGate({
   const readNow = now ?? Date.now;
   const currentLocation = location ?? defaultLocation();
   const goTo = navigate ?? defaultNavigate;
-  const normalizedPublicPaths = useMemo3(
+  const normalizedPublicPaths = useMemo4(
     () => publicPaths.map(normalizePublicPath),
     [publicPaths]
   );
   const isEmailVerified = session.data?.user?.emailVerified ?? false;
-  useEffect9(() => {
+  useEffect10(() => {
     return () => {
       if (!redirectTimerRef.current) return;
       clearTimeout(redirectTimerRef.current);
       redirectTimerRef.current = null;
     };
   }, []);
-  useEffect9(() => {
+  useEffect10(() => {
     if (redirectTimerRef.current) {
       clearTimeout(redirectTimerRef.current);
       redirectTimerRef.current = null;
@@ -2098,17 +2168,17 @@ function AuthGate({
   const pathname = normalizePath(currentLocation.pathname);
   if (shouldBlockUnverifiedUser(pathname, Boolean(session.data), requireEmailVerification, isEmailVerified)) return null;
   if (session.isPending && !isPublicPath(pathname, normalizedPublicPaths)) return null;
-  return /* @__PURE__ */ jsx15(Fragment3, { children });
+  return /* @__PURE__ */ jsx16(Fragment3, { children });
 }
 
 // src/front/CoreFront.tsx
-import { Suspense, useCallback as useCallback9, useMemo as useMemo7 } from "react";
+import { Suspense, useCallback as useCallback9, useEffect as useEffect12, useMemo as useMemo8 } from "react";
 import { BrowserRouter, Routes, Route, useLocation as useLocation2, useNavigate as useNavigate6 } from "react-router-dom";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { Helmet, HelmetProvider } from "react-helmet-async";
 
 // src/front/components/UserMenu.tsx
-import { useMemo as useMemo4, useState as useState15 } from "react";
+import { useMemo as useMemo5, useState as useState16 } from "react";
 import {
   Button as Button10,
   DropdownMenu,
@@ -2126,10 +2196,11 @@ import {
   Monitor,
   Moon,
   Settings,
+  ShieldCheck,
   Sun
 } from "lucide-react";
 import { useNavigate as useNavigate3 } from "react-router-dom";
-import { jsx as jsx16, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx17, jsxs as jsxs8 } from "react/jsx-runtime";
 var THEME_ORDER = ["light", "dark", "system"];
 function labelForTheme(preference) {
   if (preference === "light") return "Light";
@@ -2152,11 +2223,17 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
   const signOut = useSignOut();
   const navigate = useNavigate3();
   const { preference, setTheme } = useTheme();
-  const [isSigningOut, setIsSigningOut] = useState15(false);
+  const workspace = useCurrentWorkspace();
+  const companyAdmin = useCompanyAdminStatus();
+  const [isSigningOut, setIsSigningOut] = useState16(false);
   const user = identity?.user;
+  const adminMenuLabel = companyAdmin.labels.menuLabel ?? "Admin";
+  const companyAdminStatusPending = companyAdmin.configured && companyAdmin.loading && !companyAdmin.status;
+  const canOpenCompanyAdmin = companyAdmin.configured && (companyAdminStatusPending || Boolean(companyAdmin.error) || companyAdmin.status?.enabled === true && companyAdmin.status.admin === true);
+  const companyAdminWorkspaceId = canOpenCompanyAdmin ? workspace?.id ?? null : null;
   const userName = user?.name ?? "Unknown user";
   const userEmail = user?.email ?? "unknown@example.com";
-  const initials = useMemo4(() => initialsFor2(user?.name ?? null, userEmail), [user?.name, userEmail]);
+  const initials = useMemo5(() => initialsFor2(user?.name ?? null, userEmail), [user?.name, userEmail]);
   async function handleSignOut() {
     if (isSigningOut) return;
     setIsSigningOut(true);
@@ -2168,7 +2245,7 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
     }
   }
   return /* @__PURE__ */ jsxs8(DropdownMenu, { children: [
-    /* @__PURE__ */ jsx16(DropdownMenuTrigger, { asChild: true, children: variant === "bar" ? /* @__PURE__ */ jsxs8(
+    /* @__PURE__ */ jsx17(DropdownMenuTrigger, { asChild: true, children: variant === "bar" ? /* @__PURE__ */ jsxs8(
       Button10,
       {
         type: "button",
@@ -2176,12 +2253,12 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
         "aria-label": "Account menu",
         className: "h-10 w-full justify-start gap-2.5 rounded-lg border border-transparent bg-transparent px-2 text-left text-foreground shadow-none hover:bg-foreground/[0.06] focus-visible:ring-1 focus-visible:ring-ring",
         children: [
-          /* @__PURE__ */ jsx16("span", { className: "inline-flex h-6 w-6 shrink-0 items-center justify-center rounded-full border border-border/60 bg-foreground/[0.12] text-[10px] font-semibold text-foreground", children: initials }),
+          /* @__PURE__ */ jsx17("span", { className: "inline-flex h-6 w-6 shrink-0 items-center justify-center rounded-full border border-border/60 bg-foreground/[0.12] text-[10px] font-semibold text-foreground", children: initials }),
           /* @__PURE__ */ jsxs8("span", { className: "flex min-w-0 flex-1 flex-col gap-0.5 leading-snug", children: [
-            /* @__PURE__ */ jsx16("span", { className: "truncate text-[13px] font-medium text-foreground", children: userName }),
-            /* @__PURE__ */ jsx16("span", { className: "truncate text-[11px] text-muted-foreground/80", children: userEmail })
+            /* @__PURE__ */ jsx17("span", { className: "truncate text-[13px] font-medium text-foreground", children: userName }),
+            /* @__PURE__ */ jsx17("span", { className: "truncate text-[11px] text-muted-foreground/80", children: userEmail })
           ] }),
-          /* @__PURE__ */ jsx16(ChevronsUpDown, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/55", "aria-hidden": "true" })
+          /* @__PURE__ */ jsx17(ChevronsUpDown, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/55", "aria-hidden": "true" })
         ]
       }
     ) : /* @__PURE__ */ jsxs8(
@@ -2192,8 +2269,8 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
         "aria-label": "User menu",
         className: "h-8 rounded-md border border-transparent bg-transparent px-1 pr-1.5 text-foreground shadow-none hover:bg-foreground/5 focus-visible:ring-1 focus-visible:ring-ring",
         children: [
-          /* @__PURE__ */ jsx16("span", { className: "inline-flex h-7 w-7 items-center justify-center rounded-md bg-foreground text-[11px] font-semibold text-background", children: initials }),
-          /* @__PURE__ */ jsx16(ChevronDown, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" })
+          /* @__PURE__ */ jsx17("span", { className: "inline-flex h-7 w-7 items-center justify-center rounded-md bg-foreground text-[11px] font-semibold text-background", children: initials }),
+          /* @__PURE__ */ jsx17(ChevronDown, { className: "h-3.5 w-3.5 text-muted-foreground", "aria-hidden": "true" })
         ]
       }
     ) }),
@@ -2205,15 +2282,15 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
         sideOffset: 8,
         className: "w-80 rounded-lg border-border/70 bg-[color:var(--surface-workbench-left)] p-2 shadow-2xl",
         children: [
-          /* @__PURE__ */ jsx16(DropdownMenuLabel, { className: "p-2", children: /* @__PURE__ */ jsxs8("div", { className: "flex items-center gap-3", children: [
-            /* @__PURE__ */ jsx16("span", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: initials }),
+          /* @__PURE__ */ jsx17(DropdownMenuLabel, { className: "p-2", children: /* @__PURE__ */ jsxs8("div", { className: "flex items-center gap-3", children: [
+            /* @__PURE__ */ jsx17("span", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: initials }),
             /* @__PURE__ */ jsxs8("span", { className: "min-w-0 space-y-1", children: [
-              /* @__PURE__ */ jsx16("span", { className: "block truncate text-sm font-medium leading-none", children: userName }),
-              /* @__PURE__ */ jsx16("span", { className: "block truncate text-xs font-normal text-muted-foreground", children: userEmail })
+              /* @__PURE__ */ jsx17("span", { className: "block truncate text-sm font-medium leading-none", children: userName }),
+              /* @__PURE__ */ jsx17("span", { className: "block truncate text-xs font-normal text-muted-foreground", children: userEmail })
             ] })
           ] }) }),
-          /* @__PURE__ */ jsx16(DropdownMenuSeparator, { className: "-mx-2" }),
-          /* @__PURE__ */ jsx16(DropdownMenuLabel, { className: "px-2 pb-1 pt-2 text-[11px] font-medium text-muted-foreground", children: "Theme" }),
+          /* @__PURE__ */ jsx17(DropdownMenuSeparator, { className: "-mx-2" }),
+          /* @__PURE__ */ jsx17(DropdownMenuLabel, { className: "px-2 pb-1 pt-2 text-[11px] font-medium text-muted-foreground", children: "Theme" }),
           THEME_ORDER.map((theme) => {
             const Icon = iconForTheme(theme);
             const selected = preference === theme;
@@ -2228,15 +2305,15 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
                 },
                 className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
                 children: [
-                  /* @__PURE__ */ jsx16(Icon, { className: "h-4 w-4 text-muted-foreground", "aria-hidden": "true" }),
-                  /* @__PURE__ */ jsx16("span", { className: "flex-1", children: labelForTheme(theme) }),
-                  selected ? /* @__PURE__ */ jsx16(Check, { className: "h-4 w-4 text-foreground", "aria-hidden": "true" }) : null
+                  /* @__PURE__ */ jsx17(Icon, { className: "h-4 w-4 text-muted-foreground", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsx17("span", { className: "flex-1", children: labelForTheme(theme) }),
+                  selected ? /* @__PURE__ */ jsx17(Check, { className: "h-4 w-4 text-foreground", "aria-hidden": "true" }) : null
                 ]
               },
               theme
             );
           }),
-          /* @__PURE__ */ jsx16(DropdownMenuSeparator, { className: "-mx-2" }),
+          /* @__PURE__ */ jsx17(DropdownMenuSeparator, { className: "-mx-2" }),
           /* @__PURE__ */ jsxs8(
             DropdownMenuItem,
             {
@@ -2244,15 +2321,30 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
               onSelect: () => navigate(routes.me),
               className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
               children: [
-                /* @__PURE__ */ jsx16(Settings, { className: "h-4 w-4", "aria-hidden": "true" }),
+                /* @__PURE__ */ jsx17(Settings, { className: "h-4 w-4", "aria-hidden": "true" }),
                 /* @__PURE__ */ jsxs8("span", { className: "flex min-w-0 flex-col", children: [
-                  /* @__PURE__ */ jsx16("span", { children: "User settings" }),
-                  /* @__PURE__ */ jsx16("span", { className: "text-xs text-muted-foreground", children: "Password and account controls" })
+                  /* @__PURE__ */ jsx17("span", { children: "User settings" }),
+                  /* @__PURE__ */ jsx17("span", { className: "text-xs text-muted-foreground", children: "Password and account controls" })
                 ] })
               ]
             }
           ),
-          /* @__PURE__ */ jsx16(DropdownMenuSeparator, { className: "-mx-2" }),
+          companyAdminWorkspaceId ? /* @__PURE__ */ jsxs8(
+            DropdownMenuItem,
+            {
+              "aria-label": adminMenuLabel,
+              onSelect: () => navigate(routeHref("companyAdmin", { id: companyAdminWorkspaceId })),
+              className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
+              children: [
+                /* @__PURE__ */ jsx17(ShieldCheck, { className: "h-4 w-4", "aria-hidden": "true" }),
+                /* @__PURE__ */ jsxs8("span", { className: "flex min-w-0 flex-col", children: [
+                  /* @__PURE__ */ jsx17("span", { children: adminMenuLabel }),
+                  /* @__PURE__ */ jsx17("span", { className: "text-xs text-muted-foreground", children: "Admin controls" })
+                ] })
+              ]
+            }
+          ) : null,
+          /* @__PURE__ */ jsx17(DropdownMenuSeparator, { className: "-mx-2" }),
           /* @__PURE__ */ jsxs8(
             DropdownMenuItem,
             {
@@ -2264,7 +2356,7 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
               disabled: isSigningOut,
               className: "gap-3 rounded-md py-2 text-[13px]",
               children: [
-                /* @__PURE__ */ jsx16(LogOut, { className: "h-4 w-4", "aria-hidden": "true" }),
+                /* @__PURE__ */ jsx17(LogOut, { className: "h-4 w-4", "aria-hidden": "true" }),
                 isSigningOut ? "Signing out..." : "Sign out"
               ]
             }
@@ -2276,7 +2368,7 @@ function UserMenu({ contentSide = "bottom", contentAlign = "end", variant = "com
 }
 
 // src/front/components/WorkspaceSwitcher.tsx
-import { useMemo as useMemo5, useState as useState16 } from "react";
+import { useMemo as useMemo6, useState as useState17 } from "react";
 import { useQuery as useQuery4, useQueryClient as useQueryClient3 } from "@tanstack/react-query";
 import {
   Button as Button11,
@@ -2299,7 +2391,7 @@ import {
 import { ChevronsUpDown as ChevronsUpDown2, LayoutGrid, Plus, Settings as Settings2 } from "lucide-react";
 import { useNavigate as useNavigate4 } from "react-router-dom";
 import { z as z6 } from "zod";
-import { Fragment as Fragment4, jsx as jsx17, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx18, jsxs as jsxs9 } from "react/jsx-runtime";
 var workspaceNameSchema = z6.object({
   name: z6.string().trim().min(1, "Workspace name is required").max(100, "Workspace name must be 100 characters or fewer")
 });
@@ -2337,9 +2429,9 @@ function workspaceInitial(name) {
 }
 function OpenInNewTabIcon({ className }) {
   return /* @__PURE__ */ jsxs9("svg", { className, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [
-    /* @__PURE__ */ jsx17("path", { d: "M15 3h6v6" }),
-    /* @__PURE__ */ jsx17("path", { d: "M10 14 21 3" }),
-    /* @__PURE__ */ jsx17("path", { d: "M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6" })
+    /* @__PURE__ */ jsx18("path", { d: "M15 3h6v6" }),
+    /* @__PURE__ */ jsx18("path", { d: "M10 14 21 3" }),
+    /* @__PURE__ */ jsx18("path", { d: "M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6" })
   ] });
 }
 function WorkspaceSwitcher({
@@ -2355,12 +2447,12 @@ function WorkspaceSwitcher({
   const currentWorkspace = useCurrentWorkspace();
   const workspacesQuery = useWorkspaces();
   const workspaces = workspacesQuery.data ?? [];
-  const [isModalOpen, setIsModalOpen] = useState16(false);
-  const [name, setName] = useState16("");
-  const [attemptedSubmit, setAttemptedSubmit] = useState16(false);
-  const [isSubmitting, setIsSubmitting] = useState16(false);
-  const [serverError, setServerError] = useState16(null);
-  const nameValidation = useMemo5(() => validateWorkspaceName(name), [name]);
+  const [isModalOpen, setIsModalOpen] = useState17(false);
+  const [name, setName] = useState17("");
+  const [attemptedSubmit, setAttemptedSubmit] = useState17(false);
+  const [isSubmitting, setIsSubmitting] = useState17(false);
+  const [serverError, setServerError] = useState17(null);
+  const nameValidation = useMemo6(() => validateWorkspaceName(name), [name]);
   const shouldShowNameError = name.length > 100 || attemptedSubmit && nameValidation.message !== null;
   const nameError = shouldShowNameError ? nameValidation.message : null;
   function openCreateWorkspace() {
@@ -2431,7 +2523,7 @@ function WorkspaceSwitcher({
         onClick: openCreateWorkspace,
         className: "-ml-1 h-8 gap-2 rounded-md px-1 pr-2.5 hover:bg-foreground/5 focus-visible:ring-1 focus-visible:ring-ring",
         children: [
-          /* @__PURE__ */ jsx17(
+          /* @__PURE__ */ jsx18(
             "span",
             {
               "aria-hidden": "true",
@@ -2439,11 +2531,11 @@ function WorkspaceSwitcher({
               children: resolvedAppTitle.charAt(0).toUpperCase()
             }
           ),
-          /* @__PURE__ */ jsx17("span", { className: "text-[13px] font-medium text-foreground", children: "Create your first workspace" })
+          /* @__PURE__ */ jsx18("span", { className: "text-[13px] font-medium text-foreground", children: "Create your first workspace" })
         ]
       }
     ) : /* @__PURE__ */ jsxs9(DropdownMenu2, { children: [
-      /* @__PURE__ */ jsx17(DropdownMenuTrigger2, { asChild: true, children: displayMode === "workspace" ? /* @__PURE__ */ jsxs9(
+      /* @__PURE__ */ jsx18(DropdownMenuTrigger2, { asChild: true, children: displayMode === "workspace" ? /* @__PURE__ */ jsxs9(
         Button11,
         {
           type: "button",
@@ -2451,8 +2543,8 @@ function WorkspaceSwitcher({
           "aria-label": `Workspace menu: ${switcherLabel}`,
           className: "h-8 w-full min-w-0 justify-start gap-1.5 rounded-lg border border-transparent px-2 text-left hover:bg-foreground/[0.06] focus-visible:ring-1 focus-visible:ring-ring",
           children: [
-            /* @__PURE__ */ jsx17("span", { className: "min-w-0 flex-1 truncate text-[13px] font-medium text-foreground/85", children: switcherLabel }),
-            /* @__PURE__ */ jsx17(ChevronsUpDown2, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/50", "aria-hidden": "true" })
+            /* @__PURE__ */ jsx18("span", { className: "min-w-0 flex-1 truncate text-[13px] font-medium text-foreground/85", children: switcherLabel }),
+            /* @__PURE__ */ jsx18(ChevronsUpDown2, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/50", "aria-hidden": "true" })
           ]
         }
       ) : /* @__PURE__ */ jsxs9(
@@ -2463,7 +2555,7 @@ function WorkspaceSwitcher({
           "aria-label": `Workspace menu: ${switcherLabel}`,
           className: "-ml-1 h-8 min-w-0 justify-start gap-2.5 border border-transparent px-1 py-1 text-left",
           children: [
-            /* @__PURE__ */ jsx17(
+            /* @__PURE__ */ jsx18(
               "span",
               {
                 "aria-hidden": "true",
@@ -2471,8 +2563,8 @@ function WorkspaceSwitcher({
                 children: workspaceInitial(switcherLabel)
               }
             ),
-            /* @__PURE__ */ jsx17("span", { className: "min-w-0 truncate text-[13px] font-medium text-foreground", children: switcherLabel }),
-            /* @__PURE__ */ jsx17(ChevronsUpDown2, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/55", "aria-hidden": "true" })
+            /* @__PURE__ */ jsx18("span", { className: "min-w-0 truncate text-[13px] font-medium text-foreground", children: switcherLabel }),
+            /* @__PURE__ */ jsx18(ChevronsUpDown2, { className: "h-3.5 w-3.5 shrink-0 text-muted-foreground/55", "aria-hidden": "true" })
           ]
         }
       ) }),
@@ -2483,11 +2575,11 @@ function WorkspaceSwitcher({
           sideOffset: 8,
           className: "w-80 rounded-lg border-border/70 bg-[color:var(--surface-workbench-left)] p-2 shadow-2xl",
           children: [
-            /* @__PURE__ */ jsx17(DropdownMenuLabel2, { className: "px-2 pb-2 pt-1", children: /* @__PURE__ */ jsxs9("span", { className: "flex items-center gap-2 text-xs font-medium text-muted-foreground", children: [
-              /* @__PURE__ */ jsx17(LayoutGrid, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            /* @__PURE__ */ jsx18(DropdownMenuLabel2, { className: "px-2 pb-2 pt-1", children: /* @__PURE__ */ jsxs9("span", { className: "flex items-center gap-2 text-xs font-medium text-muted-foreground", children: [
+              /* @__PURE__ */ jsx18(LayoutGrid, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
               "Workspaces"
             ] }) }),
-            /* @__PURE__ */ jsx17("div", { className: "max-h-72 overflow-y-auto pr-1", children: workspaces.map((workspace) => {
+            /* @__PURE__ */ jsx18("div", { className: "max-h-72 overflow-y-auto pr-1", children: workspaces.map((workspace) => {
               const isCurrent = currentWorkspace?.id === workspace.id;
               return /* @__PURE__ */ jsxs9("div", { className: "group relative w-full", children: [
                 /* @__PURE__ */ jsxs9(
@@ -2499,12 +2591,12 @@ function WorkspaceSwitcher({
                     style: { paddingRight: 72 },
                     className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
                     children: [
-                      /* @__PURE__ */ jsx17("span", { className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md border border-border/60 bg-background text-xs font-semibold text-muted-foreground", children: workspaceInitial(workspace.name) }),
-                      /* @__PURE__ */ jsx17("span", { className: "min-w-0 flex-1 truncate text-sm", children: workspace.name })
+                      /* @__PURE__ */ jsx18("span", { className: "flex h-7 w-7 shrink-0 items-center justify-center rounded-md border border-border/60 bg-background text-xs font-semibold text-muted-foreground", children: workspaceInitial(workspace.name) }),
+                      /* @__PURE__ */ jsx18("span", { className: "min-w-0 flex-1 truncate text-sm", children: workspace.name })
                     ]
                   }
                 ),
-                /* @__PURE__ */ jsx17(
+                /* @__PURE__ */ jsx18(
                   "button",
                   {
                     type: "button",
@@ -2522,12 +2614,12 @@ function WorkspaceSwitcher({
                     },
                     style: { right: 4, top: "50%", transform: "translateY(-50%)" },
                     className: "absolute z-10 flex h-7 w-7 items-center justify-center rounded-md text-muted-foreground opacity-0 transition hover:bg-foreground/10 hover:text-foreground focus:opacity-100 focus:outline-none focus-visible:ring-1 focus-visible:ring-ring group-hover:opacity-100 group-focus-within:opacity-100",
-                    children: /* @__PURE__ */ jsx17(OpenInNewTabIcon, { className: "h-3.5 w-3.5" })
+                    children: /* @__PURE__ */ jsx18(OpenInNewTabIcon, { className: "h-3.5 w-3.5" })
                   }
                 )
               ] }, workspace.id);
             }) }),
-            /* @__PURE__ */ jsx17(DropdownMenuSeparator2, { className: "-mx-2" }),
+            /* @__PURE__ */ jsx18(DropdownMenuSeparator2, { className: "-mx-2" }),
             /* @__PURE__ */ jsxs9(
               DropdownMenuItem2,
               {
@@ -2538,10 +2630,10 @@ function WorkspaceSwitcher({
                 },
                 className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
                 children: [
-                  /* @__PURE__ */ jsx17(Plus, { className: "h-4 w-4", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsx18(Plus, { className: "h-4 w-4", "aria-hidden": "true" }),
                   /* @__PURE__ */ jsxs9("span", { className: "flex min-w-0 flex-col", children: [
-                    /* @__PURE__ */ jsx17("span", { children: "Create workspace" }),
-                    /* @__PURE__ */ jsx17("span", { className: "text-xs text-muted-foreground", children: "Start a clean project space" })
+                    /* @__PURE__ */ jsx18("span", { children: "Create workspace" }),
+                    /* @__PURE__ */ jsx18("span", { className: "text-xs text-muted-foreground", children: "Start a clean project space" })
                   ] })
                 ]
               }
@@ -2553,10 +2645,10 @@ function WorkspaceSwitcher({
                 onSelect: () => navigate(hrefForWorkspace(workspacePathPrefix, currentWorkspace.id, "/settings")),
                 className: "gap-3 rounded-md py-2 text-[13px] focus:bg-foreground/[0.06] focus:text-foreground",
                 children: [
-                  /* @__PURE__ */ jsx17(Settings2, { className: "h-4 w-4", "aria-hidden": "true" }),
+                  /* @__PURE__ */ jsx18(Settings2, { className: "h-4 w-4", "aria-hidden": "true" }),
                   /* @__PURE__ */ jsxs9("span", { className: "flex min-w-0 flex-col", children: [
-                    /* @__PURE__ */ jsx17("span", { children: "Workspace settings" }),
-                    /* @__PURE__ */ jsx17("span", { className: "text-xs text-muted-foreground", children: "Rename, runtime, deletion" })
+                    /* @__PURE__ */ jsx18("span", { children: "Workspace settings" }),
+                    /* @__PURE__ */ jsx18("span", { className: "text-xs text-muted-foreground", children: "Rename, runtime, deletion" })
                   ] })
                 ]
               }
@@ -2565,21 +2657,21 @@ function WorkspaceSwitcher({
         }
       )
     ] }),
-    /* @__PURE__ */ jsx17(Dialog, { open: isModalOpen, onOpenChange: onModalChange, children: /* @__PURE__ */ jsxs9(DialogContent, { children: [
+    /* @__PURE__ */ jsx18(Dialog, { open: isModalOpen, onOpenChange: onModalChange, children: /* @__PURE__ */ jsxs9(DialogContent, { children: [
       /* @__PURE__ */ jsxs9(DialogHeader, { children: [
-        /* @__PURE__ */ jsx17(DialogTitle, { children: "Create workspace" }),
-        /* @__PURE__ */ jsx17(DialogDescription, { children: "Choose a name for your new workspace." })
+        /* @__PURE__ */ jsx18(DialogTitle, { children: "Create workspace" }),
+        /* @__PURE__ */ jsx18(DialogDescription, { children: "Choose a name for your new workspace." })
       ] }),
       /* @__PURE__ */ jsxs9("form", { onSubmit: (event) => void handleCreateWorkspace(event), className: "space-y-4", children: [
         /* @__PURE__ */ jsxs9("div", { className: "space-y-2", children: [
           /* @__PURE__ */ jsxs9("div", { className: "flex items-center justify-between gap-3", children: [
-            /* @__PURE__ */ jsx17(Label7, { htmlFor: "workspace-name", children: "Name" }),
+            /* @__PURE__ */ jsx18(Label7, { htmlFor: "workspace-name", children: "Name" }),
             /* @__PURE__ */ jsxs9("span", { className: "text-xs text-muted-foreground", children: [
               name.length,
               "/100"
             ] })
           ] }),
-          /* @__PURE__ */ jsx17(
+          /* @__PURE__ */ jsx18(
             Input7,
             {
               id: "workspace-name",
@@ -2595,11 +2687,11 @@ function WorkspaceSwitcher({
               autoFocus: true
             }
           ),
-          nameError ? /* @__PURE__ */ jsx17("p", { role: "alert", className: "text-sm text-destructive", children: nameError }) : null,
-          serverError ? /* @__PURE__ */ jsx17("p", { role: "alert", className: "text-sm text-destructive", children: serverError }) : null
+          nameError ? /* @__PURE__ */ jsx18("p", { role: "alert", className: "text-sm text-destructive", children: nameError }) : null,
+          serverError ? /* @__PURE__ */ jsx18("p", { role: "alert", className: "text-sm text-destructive", children: serverError }) : null
         ] }),
         /* @__PURE__ */ jsxs9(DialogFooter, { children: [
-          /* @__PURE__ */ jsx17(
+          /* @__PURE__ */ jsx18(
             Button11,
             {
               type: "button",
@@ -2609,7 +2701,7 @@ function WorkspaceSwitcher({
               children: "Cancel"
             }
           ),
-          /* @__PURE__ */ jsx17(
+          /* @__PURE__ */ jsx18(
             Button11,
             {
               type: "submit",
@@ -2624,7 +2716,7 @@ function WorkspaceSwitcher({
 }
 
 // src/front/components/CreateWorkspaceDialog.tsx
-import { useMemo as useMemo6, useState as useState17 } from "react";
+import { useMemo as useMemo7, useState as useState18 } from "react";
 import { useQueryClient as useQueryClient4 } from "@tanstack/react-query";
 import {
   Button as Button12,
@@ -2639,7 +2731,7 @@ import {
   useToast as useToast2
 } from "@hachej/boring-ui-kit";
 import { z as z7 } from "zod";
-import { jsx as jsx18, jsxs as jsxs10 } from "react/jsx-runtime";
+import { jsx as jsx19, jsxs as jsxs10 } from "react/jsx-runtime";
 var workspaceNameSchema2 = z7.object({
   name: z7.string().trim().min(1, "Workspace name is required").max(100, "Workspace name must be 100 characters or fewer")
 });
@@ -2653,11 +2745,11 @@ function CreateWorkspaceDialog({
 }) {
   const queryClient = useQueryClient4();
   const { toast } = useToast2();
-  const [name, setName] = useState17("");
-  const [attemptedSubmit, setAttemptedSubmit] = useState17(false);
-  const [isSubmitting, setIsSubmitting] = useState17(false);
-  const [serverError, setServerError] = useState17(null);
-  const validation = useMemo6(() => workspaceNameSchema2.safeParse({ name }), [name]);
+  const [name, setName] = useState18("");
+  const [attemptedSubmit, setAttemptedSubmit] = useState18(false);
+  const [isSubmitting, setIsSubmitting] = useState18(false);
+  const [serverError, setServerError] = useState18(null);
+  const validation = useMemo7(() => workspaceNameSchema2.safeParse({ name }), [name]);
   const shouldShowNameError = name.length > 100 || attemptedSubmit && !validation.success;
   const nameError = shouldShowNameError && !validation.success ? validation.error.issues[0]?.message ?? "Invalid workspace name" : null;
   function reset() {
@@ -2707,21 +2799,21 @@ function CreateWorkspaceDialog({
       setIsSubmitting(false);
     }
   }
-  return /* @__PURE__ */ jsx18(Dialog2, { open, onOpenChange: handleOpenChange, children: /* @__PURE__ */ jsxs10(DialogContent2, { children: [
+  return /* @__PURE__ */ jsx19(Dialog2, { open, onOpenChange: handleOpenChange, children: /* @__PURE__ */ jsxs10(DialogContent2, { children: [
     /* @__PURE__ */ jsxs10(DialogHeader2, { children: [
-      /* @__PURE__ */ jsx18(DialogTitle2, { children: title }),
-      /* @__PURE__ */ jsx18(DialogDescription2, { children: description })
+      /* @__PURE__ */ jsx19(DialogTitle2, { children: title }),
+      /* @__PURE__ */ jsx19(DialogDescription2, { children: description })
     ] }),
     /* @__PURE__ */ jsxs10("form", { onSubmit: (event) => void handleSubmit(event), className: "space-y-4", children: [
       /* @__PURE__ */ jsxs10("div", { className: "space-y-2", children: [
         /* @__PURE__ */ jsxs10("div", { className: "flex items-center justify-between gap-3", children: [
-          /* @__PURE__ */ jsx18(Label8, { htmlFor: "create-workspace-name", children: "Name" }),
+          /* @__PURE__ */ jsx19(Label8, { htmlFor: "create-workspace-name", children: "Name" }),
           /* @__PURE__ */ jsxs10("span", { className: "text-xs text-muted-foreground", children: [
             name.length,
             "/100"
           ] })
         ] }),
-        /* @__PURE__ */ jsx18(
+        /* @__PURE__ */ jsx19(
           Input8,
           {
             id: "create-workspace-name",
@@ -2737,12 +2829,12 @@ function CreateWorkspaceDialog({
             autoFocus: true
           }
         ),
-        nameError ? /* @__PURE__ */ jsx18("p", { role: "alert", className: "text-sm text-destructive", children: nameError }) : null,
-        serverError ? /* @__PURE__ */ jsx18("p", { role: "alert", className: "text-sm text-destructive", children: serverError }) : null
+        nameError ? /* @__PURE__ */ jsx19("p", { role: "alert", className: "text-sm text-destructive", children: nameError }) : null,
+        serverError ? /* @__PURE__ */ jsx19("p", { role: "alert", className: "text-sm text-destructive", children: serverError }) : null
       ] }),
       /* @__PURE__ */ jsxs10(DialogFooter2, { children: [
-        /* @__PURE__ */ jsx18(Button12, { type: "button", variant: "ghost", onClick: () => handleOpenChange(false), disabled: isSubmitting, children: "Cancel" }),
-        /* @__PURE__ */ jsx18(Button12, { type: "submit", disabled: isSubmitting || !validation.success, children: isSubmitting ? "Creating..." : title })
+        /* @__PURE__ */ jsx19(Button12, { type: "button", variant: "ghost", onClick: () => handleOpenChange(false), disabled: isSubmitting, children: "Cancel" }),
+        /* @__PURE__ */ jsx19(Button12, { type: "submit", disabled: isSubmitting || !validation.success, children: isSubmitting ? "Creating..." : title })
       ] })
     ] })
   ] }) });
@@ -2782,31 +2874,31 @@ function ThemeToggle() {
 
 // src/front/auth/AuthErrorPage.tsx
 import { Card as Card7, CardContent as CardContent7, CardDescription as CardDescription7, CardFooter as CardFooter7, CardHeader as CardHeader7, CardTitle as CardTitle7 } from "@hachej/boring-ui-kit";
-import { jsx as jsx19, jsxs as jsxs12 } from "react/jsx-runtime";
+import { jsx as jsx20, jsxs as jsxs12 } from "react/jsx-runtime";
 function readAuthErrorCode() {
   if (typeof window === "undefined") return null;
   return new URLSearchParams(window.location.search).get("error");
 }
 function AuthErrorPage() {
   const errorCode = readAuthErrorCode();
-  return /* @__PURE__ */ jsx19("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs12(Card7, { className: "w-full max-w-sm", children: [
+  return /* @__PURE__ */ jsx20("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs12(Card7, { className: "w-full max-w-sm", children: [
     /* @__PURE__ */ jsxs12(CardHeader7, { children: [
-      /* @__PURE__ */ jsx19(CardTitle7, { children: "Authentication error" }),
-      /* @__PURE__ */ jsx19(CardDescription7, { children: "We could not complete that authentication flow. Please try again." })
+      /* @__PURE__ */ jsx20(CardTitle7, { children: "Authentication error" }),
+      /* @__PURE__ */ jsx20(CardDescription7, { children: "We could not complete that authentication flow. Please try again." })
     ] }),
-    errorCode && /* @__PURE__ */ jsx19(CardContent7, { children: /* @__PURE__ */ jsxs12("p", { className: "text-sm text-muted-foreground break-all", children: [
+    errorCode && /* @__PURE__ */ jsx20(CardContent7, { children: /* @__PURE__ */ jsxs12("p", { className: "text-sm text-muted-foreground break-all", children: [
       "Error: ",
       errorCode
     ] }) }),
     /* @__PURE__ */ jsxs12(CardFooter7, { className: "flex justify-between gap-4 text-sm", children: [
-      /* @__PURE__ */ jsx19("a", { href: routes.signin, className: "text-muted-foreground hover:underline", children: "Back to sign in" }),
-      /* @__PURE__ */ jsx19("a", { href: routes.signup, className: "text-muted-foreground hover:underline", children: "Create account" })
+      /* @__PURE__ */ jsx20("a", { href: routes.signin, className: "text-muted-foreground hover:underline", children: "Back to sign in" }),
+      /* @__PURE__ */ jsx20("a", { href: routes.signup, className: "text-muted-foreground hover:underline", children: "Create account" })
     ] })
   ] }) });
 }
 
 // src/front/workspace/InvitesPage.tsx
-import { useCallback as useCallback6, useState as useState18 } from "react";
+import { useCallback as useCallback6, useState as useState19 } from "react";
 import { useQuery as useQuery5, useMutation as useMutation2, useQueryClient as useQueryClient5 } from "@tanstack/react-query";
 import {
   Button as Button14,
@@ -2827,7 +2919,7 @@ import {
   SelectValue,
   StatusBadge
 } from "@hachej/boring-ui-kit";
-import { jsx as jsx20, jsxs as jsxs13 } from "react/jsx-runtime";
+import { jsx as jsx21, jsxs as jsxs13 } from "react/jsx-runtime";
 function invitesQueryKey(workspaceId) {
   return ["invites", workspaceId];
 }
@@ -2848,10 +2940,10 @@ function InvitesPage() {
   const workspace = useCurrentWorkspace();
   const role = useWorkspaceRole();
   const queryClient = useQueryClient5();
-  const [email, setEmail] = useState18("");
-  const [inviteRole, setInviteRole] = useState18("editor");
-  const [formError, setFormError] = useState18(null);
-  const [successMessage, setSuccessMessage] = useState18(null);
+  const [email, setEmail] = useState19("");
+  const [inviteRole, setInviteRole] = useState19("editor");
+  const [formError, setFormError] = useState19(null);
+  const [successMessage, setSuccessMessage] = useState19(null);
   const workspaceId = workspace?.id ?? "";
   const encodedWorkspaceId = encodeURIComponent(workspaceId);
   const invitesQuery = useQuery5({
@@ -2887,7 +2979,7 @@ function InvitesPage() {
       setFormError(detail.message);
     }
   });
-  const [revokeError, setRevokeError] = useState18(null);
+  const [revokeError, setRevokeError] = useState19(null);
   const revokeMutation = useMutation2({
     mutationFn: async (inviteId) => {
       await apiFetch(
@@ -2919,15 +3011,15 @@ function InvitesPage() {
     [email, inviteRole, createMutation]
   );
   if (role !== "owner") {
-    return /* @__PURE__ */ jsx20("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx20(Card8, { className: "w-full max-w-md", children: /* @__PURE__ */ jsxs13(CardHeader8, { children: [
-      /* @__PURE__ */ jsx20(CardTitle8, { children: "Access denied" }),
-      /* @__PURE__ */ jsx20(CardDescription8, { children: "Only workspace owners can manage invites." })
+    return /* @__PURE__ */ jsx21("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsx21(Card8, { className: "w-full max-w-md", children: /* @__PURE__ */ jsxs13(CardHeader8, { children: [
+      /* @__PURE__ */ jsx21(CardTitle8, { children: "Access denied" }),
+      /* @__PURE__ */ jsx21(CardDescription8, { children: "Only workspace owners can manage invites." })
     ] }) }) });
   }
-  return /* @__PURE__ */ jsx20("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs13("div", { className: "w-full max-w-2xl space-y-6", children: [
+  return /* @__PURE__ */ jsx21("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs13("div", { className: "w-full max-w-2xl space-y-6", children: [
     /* @__PURE__ */ jsxs13(Card8, { children: [
       /* @__PURE__ */ jsxs13(CardHeader8, { children: [
-        /* @__PURE__ */ jsx20(CardTitle8, { children: "Invite a member" }),
+        /* @__PURE__ */ jsx21(CardTitle8, { children: "Invite a member" }),
         /* @__PURE__ */ jsxs13(CardDescription8, { children: [
           "Send an invite to join ",
           workspace?.name ?? "this workspace",
@@ -2936,11 +3028,11 @@ function InvitesPage() {
       ] }),
       /* @__PURE__ */ jsxs13("form", { onSubmit: handleSubmit, "data-testid": "invite-form", children: [
         /* @__PURE__ */ jsxs13(CardContent8, { className: "space-y-4", children: [
-          formError && /* @__PURE__ */ jsx20(Notice3, { role: "alert", tone: "error", description: formError }),
-          successMessage && /* @__PURE__ */ jsx20(Notice3, { role: "status", tone: "success", description: successMessage }),
+          formError && /* @__PURE__ */ jsx21(Notice3, { role: "alert", tone: "error", description: formError }),
+          successMessage && /* @__PURE__ */ jsx21(Notice3, { role: "status", tone: "success", description: successMessage }),
           /* @__PURE__ */ jsxs13("div", { className: "space-y-2", children: [
-            /* @__PURE__ */ jsx20(Label9, { htmlFor: "invite-email", children: "Email address" }),
-            /* @__PURE__ */ jsx20(
+            /* @__PURE__ */ jsx21(Label9, { htmlFor: "invite-email", children: "Email address" }),
+            /* @__PURE__ */ jsx21(
               Input9,
               {
                 id: "invite-email",
@@ -2953,18 +3045,18 @@ function InvitesPage() {
             )
           ] }),
           /* @__PURE__ */ jsxs13("div", { className: "space-y-2", children: [
-            /* @__PURE__ */ jsx20(Label9, { htmlFor: "invite-role", children: "Role" }),
+            /* @__PURE__ */ jsx21(Label9, { htmlFor: "invite-role", children: "Role" }),
             /* @__PURE__ */ jsxs13(Select, { value: inviteRole, onValueChange: (value) => setInviteRole(value), children: [
-              /* @__PURE__ */ jsx20(SelectTrigger, { id: "invite-role", "data-testid": "invite-role-select", children: /* @__PURE__ */ jsx20(SelectValue, { placeholder: "Select role" }) }),
+              /* @__PURE__ */ jsx21(SelectTrigger, { id: "invite-role", "data-testid": "invite-role-select", children: /* @__PURE__ */ jsx21(SelectValue, { placeholder: "Select role" }) }),
               /* @__PURE__ */ jsxs13(SelectContent, { children: [
-                /* @__PURE__ */ jsx20(SelectItem, { value: "editor", children: "Editor" }),
-                /* @__PURE__ */ jsx20(SelectItem, { value: "viewer", children: "Viewer" }),
-                /* @__PURE__ */ jsx20(SelectItem, { value: "owner", children: "Owner" })
+                /* @__PURE__ */ jsx21(SelectItem, { value: "editor", children: "Editor" }),
+                /* @__PURE__ */ jsx21(SelectItem, { value: "viewer", children: "Viewer" }),
+                /* @__PURE__ */ jsx21(SelectItem, { value: "owner", children: "Owner" })
               ] })
             ] })
           ] })
         ] }),
-        /* @__PURE__ */ jsx20(CardFooter8, { children: /* @__PURE__ */ jsx20(
+        /* @__PURE__ */ jsx21(CardFooter8, { children: /* @__PURE__ */ jsx21(
           Button14,
           {
             type: "submit",
@@ -2977,14 +3069,14 @@ function InvitesPage() {
     ] }),
     /* @__PURE__ */ jsxs13(Card8, { children: [
       /* @__PURE__ */ jsxs13(CardHeader8, { children: [
-        /* @__PURE__ */ jsx20(CardTitle8, { children: "Pending invites" }),
-        /* @__PURE__ */ jsx20(CardDescription8, { children: invitesQuery.data?.length ? `${invitesQuery.data.length} invite${invitesQuery.data.length === 1 ? "" : "s"}` : "No invites yet" })
+        /* @__PURE__ */ jsx21(CardTitle8, { children: "Pending invites" }),
+        /* @__PURE__ */ jsx21(CardDescription8, { children: invitesQuery.data?.length ? `${invitesQuery.data.length} invite${invitesQuery.data.length === 1 ? "" : "s"}` : "No invites yet" })
       ] }),
       /* @__PURE__ */ jsxs13(CardContent8, { children: [
-        revokeError && /* @__PURE__ */ jsx20(Notice3, { role: "alert", tone: "error", className: "mb-4", description: revokeError }),
-        invitesQuery.isLoading && /* @__PURE__ */ jsx20(LoadingState2, {}),
-        invitesQuery.isError && /* @__PURE__ */ jsx20(Notice3, { tone: "error", description: "Failed to load invites." }),
-        invitesQuery.data && invitesQuery.data.length > 0 && /* @__PURE__ */ jsx20("div", { className: "divide-y", "data-testid": "invites-list", children: invitesQuery.data.map((invite) => {
+        revokeError && /* @__PURE__ */ jsx21(Notice3, { role: "alert", tone: "error", className: "mb-4", description: revokeError }),
+        invitesQuery.isLoading && /* @__PURE__ */ jsx21(LoadingState2, {}),
+        invitesQuery.isError && /* @__PURE__ */ jsx21(Notice3, { tone: "error", description: "Failed to load invites." }),
+        invitesQuery.data && invitesQuery.data.length > 0 && /* @__PURE__ */ jsx21("div", { className: "divide-y", "data-testid": "invites-list", children: invitesQuery.data.map((invite) => {
           const status = getInviteStatus(invite);
           return /* @__PURE__ */ jsxs13(
             "div",
@@ -2993,10 +3085,10 @@ function InvitesPage() {
               "data-testid": `invite-row-${invite.id}`,
               children: [
                 /* @__PURE__ */ jsxs13("div", { className: "space-y-1", children: [
-                  /* @__PURE__ */ jsx20("p", { className: "text-sm font-medium", children: invite.email }),
+                  /* @__PURE__ */ jsx21("p", { className: "text-sm font-medium", children: invite.email }),
                   /* @__PURE__ */ jsxs13("div", { className: "flex items-center gap-2 text-xs text-muted-foreground", children: [
-                    /* @__PURE__ */ jsx20("span", { children: invite.role }),
-                    /* @__PURE__ */ jsx20(StatusBadge, { "data-testid": `status-${status}`, tone: STATUS_TONES[status] ?? "neutral", children: status }),
+                    /* @__PURE__ */ jsx21("span", { children: invite.role }),
+                    /* @__PURE__ */ jsx21(StatusBadge, { "data-testid": `status-${status}`, tone: STATUS_TONES[status] ?? "neutral", children: status }),
                     /* @__PURE__ */ jsxs13("span", { children: [
                       "expires",
                       " ",
@@ -3004,7 +3096,7 @@ function InvitesPage() {
                     ] })
                   ] })
                 ] }),
-                status === "pending" && /* @__PURE__ */ jsx20(
+                status === "pending" && /* @__PURE__ */ jsx21(
                   Button14,
                   {
                     variant: "destructive",
@@ -3026,7 +3118,7 @@ function InvitesPage() {
 }
 
 // src/front/workspace/MembersPage.tsx
-import { useCallback as useCallback7, useState as useState19 } from "react";
+import { useCallback as useCallback7, useState as useState20 } from "react";
 import { useMutation as useMutation3, useQueryClient as useQueryClient6 } from "@tanstack/react-query";
 import {
   AlertDialog as AlertDialog2,
@@ -3051,7 +3143,7 @@ import {
   LoadingState as LoadingState3,
   Notice as Notice4
 } from "@hachej/boring-ui-kit";
-import { jsx as jsx21, jsxs as jsxs14 } from "react/jsx-runtime";
+import { jsx as jsx22, jsxs as jsxs14 } from "react/jsx-runtime";
 var ROLE_OPTIONS = ["owner", "editor", "viewer"];
 function MembersPage() {
   const workspace = useCurrentWorkspace();
@@ -3062,8 +3154,8 @@ function MembersPage() {
   const currentUserId = session.data?.user?.id ?? "";
   const encodedWorkspaceId = encodeURIComponent(workspaceId);
   const membersQuery = useWorkspaceMembers(workspaceId);
-  const [toast, setToast] = useState19(null);
-  const [confirmTarget, setConfirmTarget] = useState19(null);
+  const [toast, setToast] = useState20(null);
+  const [confirmTarget, setConfirmTarget] = useState20(null);
   const showToast = useCallback7((msg) => {
     setToast(msg);
     setTimeout(() => setToast(null), 4e3);
@@ -3124,10 +3216,10 @@ function MembersPage() {
     removeMutation.mutate(confirmTarget.userId);
   }, [confirmTarget, removeMutation]);
   const isOwner = myRole === "owner";
-  return /* @__PURE__ */ jsx21("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs14("div", { className: "w-full max-w-2xl space-y-6", children: [
+  return /* @__PURE__ */ jsx22("div", { className: "flex min-h-screen items-center justify-center p-4", children: /* @__PURE__ */ jsxs14("div", { className: "w-full max-w-2xl space-y-6", children: [
     /* @__PURE__ */ jsxs14(Card9, { children: [
       /* @__PURE__ */ jsxs14(CardHeader9, { children: [
-        /* @__PURE__ */ jsx21(CardTitle9, { children: "Members" }),
+        /* @__PURE__ */ jsx22(CardTitle9, { children: "Members" }),
         /* @__PURE__ */ jsxs14(CardDescription9, { children: [
           workspace?.name ?? "Workspace",
           " \xB7",
@@ -3138,10 +3230,10 @@ function MembersPage() {
         ] })
       ] }),
       /* @__PURE__ */ jsxs14(CardContent9, { children: [
-        toast && /* @__PURE__ */ jsx21(Notice4, { role: "alert", "data-testid": "toast", tone: "error", className: "mb-4", description: toast }),
-        membersQuery.isLoading && /* @__PURE__ */ jsx21(LoadingState3, {}),
-        membersQuery.isError && /* @__PURE__ */ jsx21(Notice4, { tone: "error", description: "Failed to load members." }),
-        membersQuery.data && membersQuery.data.length > 0 && /* @__PURE__ */ jsx21("div", { className: "divide-y", "data-testid": "members-list", children: membersQuery.data.map((member) => {
+        toast && /* @__PURE__ */ jsx22(Notice4, { role: "alert", "data-testid": "toast", tone: "error", className: "mb-4", description: toast }),
+        membersQuery.isLoading && /* @__PURE__ */ jsx22(LoadingState3, {}),
+        membersQuery.isError && /* @__PURE__ */ jsx22(Notice4, { tone: "error", description: "Failed to load members." }),
+        membersQuery.data && membersQuery.data.length > 0 && /* @__PURE__ */ jsx22("div", { className: "divide-y", "data-testid": "members-list", children: membersQuery.data.map((member) => {
           const isSelf = member.userId === currentUserId;
           const canChangeRole = isOwner && !isSelf;
           const canRemove = isOwner || isSelf;
@@ -3152,13 +3244,13 @@ function MembersPage() {
               "data-testid": `member-row-${member.userId}`,
               children: [
                 /* @__PURE__ */ jsxs14("div", { className: "flex items-center gap-3", children: [
-                  /* @__PURE__ */ jsx21(InitialsAvatar, { initials: (member.user.name?.[0] ?? member.user.email[0]).toUpperCase() }),
+                  /* @__PURE__ */ jsx22(InitialsAvatar, { initials: (member.user.name?.[0] ?? member.user.email[0]).toUpperCase() }),
                   /* @__PURE__ */ jsxs14("div", { children: [
                     /* @__PURE__ */ jsxs14("p", { className: "text-sm font-medium", children: [
                       member.user.name ?? member.user.email,
-                      isSelf && /* @__PURE__ */ jsx21("span", { className: "ml-1 text-xs text-muted-foreground", children: "(you)" })
+                      isSelf && /* @__PURE__ */ jsx22("span", { className: "ml-1 text-xs text-muted-foreground", children: "(you)" })
                     ] }),
-                    /* @__PURE__ */ jsx21("p", { className: "text-xs text-muted-foreground", children: member.user.email })
+                    /* @__PURE__ */ jsx22("p", { className: "text-xs text-muted-foreground", children: member.user.email })
                   ] })
                 ] }),
                 /* @__PURE__ */ jsxs14("div", { className: "flex items-center gap-2", children: [
@@ -3169,12 +3261,12 @@ function MembersPage() {
                       disabled: !canChangeRole,
                       onValueChange: (value) => handleRoleChange(member.userId, value),
                       children: [
-                        /* @__PURE__ */ jsx21(SelectTrigger2, { "data-testid": `role-select-${member.userId}`, className: "h-8 w-28 text-xs", children: /* @__PURE__ */ jsx21(SelectValue2, { placeholder: "Role" }) }),
-                        /* @__PURE__ */ jsx21(SelectContent2, { children: ROLE_OPTIONS.map((r) => /* @__PURE__ */ jsx21(SelectItem2, { value: r, children: r }, r)) })
+                        /* @__PURE__ */ jsx22(SelectTrigger2, { "data-testid": `role-select-${member.userId}`, className: "h-8 w-28 text-xs", children: /* @__PURE__ */ jsx22(SelectValue2, { placeholder: "Role" }) }),
+                        /* @__PURE__ */ jsx22(SelectContent2, { children: ROLE_OPTIONS.map((r) => /* @__PURE__ */ jsx22(SelectItem2, { value: r, children: r }, r)) })
                       ]
                     }
                   ),
-                  canRemove && /* @__PURE__ */ jsx21(
+                  canRemove && /* @__PURE__ */ jsx22(
                     Button15,
                     {
                       variant: "destructive",
@@ -3192,7 +3284,7 @@ function MembersPage() {
         }) })
       ] })
     ] }),
-    /* @__PURE__ */ jsx21(
+    /* @__PURE__ */ jsx22(
       AlertDialog2,
       {
         open: confirmTarget !== null,
@@ -3201,12 +3293,12 @@ function MembersPage() {
         },
         children: /* @__PURE__ */ jsxs14(AlertDialogContent2, { children: [
           /* @__PURE__ */ jsxs14(AlertDialogHeader2, { children: [
-            /* @__PURE__ */ jsx21(AlertDialogTitle2, { children: confirmTarget?.userId === currentUserId ? "Leave workspace?" : `Remove ${confirmTarget?.user.name ?? confirmTarget?.user.email}?` }),
-            /* @__PURE__ */ jsx21(AlertDialogDescription2, { children: confirmTarget?.userId === currentUserId ? "You will lose access to this workspace." : "This member will lose access to the workspace." })
+            /* @__PURE__ */ jsx22(AlertDialogTitle2, { children: confirmTarget?.userId === currentUserId ? "Leave workspace?" : `Remove ${confirmTarget?.user.name ?? confirmTarget?.user.email}?` }),
+            /* @__PURE__ */ jsx22(AlertDialogDescription2, { children: confirmTarget?.userId === currentUserId ? "You will lose access to this workspace." : "This member will lose access to the workspace." })
           ] }),
           /* @__PURE__ */ jsxs14(AlertDialogFooter2, { children: [
-            /* @__PURE__ */ jsx21(AlertDialogCancel2, { children: "Cancel" }),
-            /* @__PURE__ */ jsx21(
+            /* @__PURE__ */ jsx22(AlertDialogCancel2, { children: "Cancel" }),
+            /* @__PURE__ */ jsx22(
               Button15,
               {
                 variant: "destructive",
@@ -3224,7 +3316,7 @@ function MembersPage() {
 }
 
 // src/front/workspace/WorkspaceSettingsPage.tsx
-import { useCallback as useCallback8, useEffect as useEffect10, useState as useState20 } from "react";
+import { useCallback as useCallback8, useEffect as useEffect11, useState as useState21 } from "react";
 import { useQuery as useQuery6, useMutation as useMutation4, useQueryClient as useQueryClient7 } from "@tanstack/react-query";
 import { useNavigate as useNavigate5 } from "react-router-dom";
 import {
@@ -3254,7 +3346,7 @@ import {
   ShieldAlert as ShieldAlert2,
   Trash2 as Trash22
 } from "lucide-react";
-import { Fragment as Fragment5, jsx as jsx22, jsxs as jsxs15 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx23, jsxs as jsxs15 } from "react/jsx-runtime";
 var STATE_TONES = {
   pending: "info",
   ready: "success",
@@ -3266,13 +3358,13 @@ function SettingsTopBar2({ workspaceId, workspaceName }) {
   const appInitial = (appTitle.trim().charAt(0) || "B").toUpperCase();
   const navigate = useNavigate5();
   const workspaceHref = workspaceId ? `/workspace/${encodeURIComponent(workspaceId)}` : "/";
-  return /* @__PURE__ */ jsx22(
+  return /* @__PURE__ */ jsx23(
     "header",
     {
       className: "relative flex h-[52px] items-center justify-between gap-3 border-b border-border/40 bg-background px-4",
       "aria-label": "App top bar",
       children: /* @__PURE__ */ jsxs15("div", { className: "flex min-w-0 flex-1 items-center gap-2.5", children: [
-        /* @__PURE__ */ jsx22(
+        /* @__PURE__ */ jsx23(
           IconButton,
           {
             type: "button",
@@ -3285,11 +3377,11 @@ function SettingsTopBar2({ workspaceId, workspaceName }) {
             children: appInitial
           }
         ),
-        /* @__PURE__ */ jsx22("span", { className: "truncate text-[13px] font-medium tracking-tight text-foreground", children: appTitle }),
-        /* @__PURE__ */ jsx22("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
-        /* @__PURE__ */ jsx22("span", { className: "truncate text-[13px] text-muted-foreground", children: workspaceName }),
-        /* @__PURE__ */ jsx22("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
-        /* @__PURE__ */ jsx22("span", { className: "truncate text-[13px] text-muted-foreground", children: "Settings" })
+        /* @__PURE__ */ jsx23("span", { className: "truncate text-[13px] font-medium tracking-tight text-foreground", children: appTitle }),
+        /* @__PURE__ */ jsx23("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+        /* @__PURE__ */ jsx23("span", { className: "truncate text-[13px] text-muted-foreground", children: workspaceName }),
+        /* @__PURE__ */ jsx23("span", { "aria-hidden": "true", className: "text-muted-foreground/30", children: "/" }),
+        /* @__PURE__ */ jsx23("span", { className: "truncate text-[13px] text-muted-foreground", children: "Settings" })
       ] })
     }
   );
@@ -3302,24 +3394,24 @@ function SettingsPageHeader2({
 }) {
   return /* @__PURE__ */ jsxs15("header", { className: "boring-settings-page-header", children: [
     /* @__PURE__ */ jsxs15("div", { className: "boring-settings-context", children: [
-      /* @__PURE__ */ jsx22("div", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: workspaceInitial2 }),
+      /* @__PURE__ */ jsx23("div", { className: "flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-foreground text-[12px] font-semibold text-background", children: workspaceInitial2 }),
       /* @__PURE__ */ jsxs15("div", { className: "min-w-0 flex-1", children: [
-        /* @__PURE__ */ jsx22("p", { className: "truncate text-[13px] font-medium text-foreground", children: workspaceName }),
+        /* @__PURE__ */ jsx23("p", { className: "truncate text-[13px] font-medium text-foreground", children: workspaceName }),
         /* @__PURE__ */ jsxs15("div", { className: "mt-1 flex flex-wrap items-center gap-1.5", children: [
-          /* @__PURE__ */ jsx22("span", { className: "inline-flex h-5 items-center rounded border border-border/60 px-1.5 text-[11px] text-muted-foreground", children: roleLabel(role) }),
-          isDefault ? /* @__PURE__ */ jsx22("span", { className: "inline-flex h-5 items-center rounded border border-border/60 px-1.5 text-[11px] text-muted-foreground", children: "Default" }) : null
+          /* @__PURE__ */ jsx23("span", { className: "inline-flex h-5 items-center rounded border border-border/60 px-1.5 text-[11px] text-muted-foreground", children: roleLabel(role) }),
+          isDefault ? /* @__PURE__ */ jsx23("span", { className: "inline-flex h-5 items-center rounded border border-border/60 px-1.5 text-[11px] text-muted-foreground", children: "Default" }) : null
         ] })
       ] })
     ] }),
     /* @__PURE__ */ jsxs15("div", { className: "max-w-2xl", children: [
-      /* @__PURE__ */ jsx22("p", { className: "text-[11px] font-medium uppercase leading-4 text-muted-foreground", children: "Workspace" }),
-      /* @__PURE__ */ jsx22("h1", { className: "mt-1 text-[20px] font-semibold leading-7 tracking-tight text-foreground", children: "Workspace settings" }),
-      /* @__PURE__ */ jsx22("p", { className: "mt-2 text-[13px] leading-5 text-muted-foreground", children: "Manage workspace identity, runtime recovery, and irreversible workspace actions." })
+      /* @__PURE__ */ jsx23("p", { className: "text-[11px] font-medium uppercase leading-4 text-muted-foreground", children: "Workspace" }),
+      /* @__PURE__ */ jsx23("h1", { className: "mt-1 text-[20px] font-semibold leading-7 tracking-tight text-foreground", children: "Workspace settings" }),
+      /* @__PURE__ */ jsx23("p", { className: "mt-2 text-[13px] leading-5 text-muted-foreground", children: "Manage workspace identity, runtime recovery, and irreversible workspace actions." })
     ] })
   ] });
 }
 function FieldNote({ children }) {
-  return /* @__PURE__ */ jsx22("p", { className: "text-[12px] leading-5 text-muted-foreground", children });
+  return /* @__PURE__ */ jsx23("p", { className: "text-[12px] leading-5 text-muted-foreground", children });
 }
 function roleLabel(role) {
   if (!role) return "Loading role";
@@ -3337,14 +3429,14 @@ function WorkspaceSettingsPage({ topBar } = {}) {
   const queryClient = useQueryClient7();
   const navigate = useNavigate5();
   const workspaceId = workspace?.id ?? "";
-  const [nameValue, setNameValue] = useState20(null);
-  const [nameError, setNameError] = useState20(null);
-  const [retryError, setRetryError] = useState20(null);
-  const [deleteConfirmName, setDeleteConfirmName] = useState20("");
-  const [deleteDialogOpen, setDeleteDialogOpen] = useState20(false);
-  const [deleteError, setDeleteError] = useState20(null);
-  const [imageUploadDirValue, setImageUploadDirValue] = useState20(null);
-  const [fileSettingsError, setFileSettingsError] = useState20(null);
+  const [nameValue, setNameValue] = useState21(null);
+  const [nameError, setNameError] = useState21(null);
+  const [retryError, setRetryError] = useState21(null);
+  const [deleteConfirmName, setDeleteConfirmName] = useState21("");
+  const [deleteDialogOpen, setDeleteDialogOpen] = useState21(false);
+  const [deleteError, setDeleteError] = useState21(null);
+  const [imageUploadDirValue, setImageUploadDirValue] = useState21(null);
+  const [fileSettingsError, setFileSettingsError] = useState21(null);
   const displayName = nameValue ?? workspace?.name ?? "";
   const encodedWorkspaceId = encodeURIComponent(workspaceId);
   const requestHeaders = workspaceId ? { "x-boring-workspace-id": workspaceId } : void 0;
@@ -3382,7 +3474,7 @@ function WorkspaceSettingsPage({ topBar } = {}) {
     enabled: workspaceId.length > 0,
     retry: false
   });
-  useEffect10(() => {
+  useEffect11(() => {
     const next = fileSettingsQuery.data?.markdown?.imageUploadDir;
     if (typeof next === "string") setImageUploadDirValue(next);
   }, [fileSettingsQuery.data?.markdown?.imageUploadDir]);
@@ -3490,7 +3582,7 @@ function WorkspaceSettingsPage({ topBar } = {}) {
   const canDeleteWorkspace = role === "owner" || role === null;
   const workspaceName = workspace?.name ?? "Workspace";
   const workspaceInitial2 = (workspace?.name?.trim()?.[0] ?? "W").toUpperCase();
-  const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx22(SettingsTopBar2, { workspaceId, workspaceName }) : topBar;
+  const topBarNode = topBar === void 0 ? /* @__PURE__ */ jsx23(SettingsTopBar2, { workspaceId, workspaceName }) : topBar;
   const navItems = WORKSPACE_NAV_ITEMS.filter((item) => {
     if (item.href === "#runtime") return hasRuntime;
     if (item.href === "#files") return hasFileSettings;
@@ -3498,10 +3590,10 @@ function WorkspaceSettingsPage({ topBar } = {}) {
   });
   return /* @__PURE__ */ jsxs15("main", { className: "boring-settings-shell", children: [
     topBarNode,
-    /* @__PURE__ */ jsx22("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs15("div", { className: "boring-settings-layout", children: [
-      /* @__PURE__ */ jsx22("aside", { className: "boring-settings-sidebar", children: /* @__PURE__ */ jsx22(UiSettingsNav2, { label: "Workspace settings", items: navItems }) }),
+    /* @__PURE__ */ jsx23("div", { className: "boring-settings-scroll", children: /* @__PURE__ */ jsxs15("div", { className: "boring-settings-layout", children: [
+      /* @__PURE__ */ jsx23("aside", { className: "boring-settings-sidebar", children: /* @__PURE__ */ jsx23(UiSettingsNav2, { label: "Workspace settings", items: navItems }) }),
       /* @__PURE__ */ jsxs15("div", { className: "boring-settings-content space-y-4", children: [
-        /* @__PURE__ */ jsx22(
+        /* @__PURE__ */ jsx23(
           SettingsPageHeader2,
           {
             workspaceName,
@@ -3510,15 +3602,15 @@ function WorkspaceSettingsPage({ topBar } = {}) {
             isDefault: Boolean(workspace?.isDefault)
           }
         ),
-        /* @__PURE__ */ jsx22(
+        /* @__PURE__ */ jsx23(
           UiSettingsPanel2,
           {
             id: "general",
-            icon: /* @__PURE__ */ jsx22(Settings22, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx23(Settings22, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "General",
             description: "Keep the workspace name clear enough to scan in menus.",
             footer: /* @__PURE__ */ jsxs15(Fragment5, { children: [
-              nameChanged ? /* @__PURE__ */ jsx22(
+              nameChanged ? /* @__PURE__ */ jsx23(
                 Button16,
                 {
                   type: "button",
@@ -3532,7 +3624,7 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                   children: "Reset"
                 }
               ) : null,
-              /* @__PURE__ */ jsx22(
+              /* @__PURE__ */ jsx23(
                 Button16,
                 {
                   "data-testid": "save-name",
@@ -3544,10 +3636,10 @@ function WorkspaceSettingsPage({ topBar } = {}) {
               )
             ] }),
             children: /* @__PURE__ */ jsxs15("div", { className: "space-y-4", children: [
-              nameError && /* @__PURE__ */ jsx22(Notice5, { "data-testid": "name-error", role: "alert", tone: "error", description: nameError }),
+              nameError && /* @__PURE__ */ jsx23(Notice5, { "data-testid": "name-error", role: "alert", tone: "error", description: nameError }),
               /* @__PURE__ */ jsxs15("div", { className: "space-y-2", children: [
-                /* @__PURE__ */ jsx22(Label10, { htmlFor: "workspace-name", className: "text-[12px]", children: "Workspace name" }),
-                /* @__PURE__ */ jsx22(
+                /* @__PURE__ */ jsx23(Label10, { htmlFor: "workspace-name", className: "text-[12px]", children: "Workspace name" }),
+                /* @__PURE__ */ jsx23(
                   Input10,
                   {
                     id: "workspace-name",
@@ -3559,23 +3651,23 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                     "aria-invalid": nameError ? "true" : "false"
                   }
                 ),
-                /* @__PURE__ */ jsx22(FieldNote, { children: canEditName ? "Editors and owners can rename a workspace." : "Viewers can inspect settings, but cannot rename this workspace." })
+                /* @__PURE__ */ jsx23(FieldNote, { children: canEditName ? "Editors and owners can rename a workspace." : "Viewers can inspect settings, but cannot rename this workspace." })
               ] })
             ] })
           }
         ),
-        hasRuntime && /* @__PURE__ */ jsx22(
+        hasRuntime && /* @__PURE__ */ jsx23(
           UiSettingsPanel2,
           {
             id: "runtime",
             testId: "runtime-card",
-            icon: /* @__PURE__ */ jsx22(HardDrive, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx23(HardDrive, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "Runtime",
             description: "Provisioning status for this workspace.",
             children: /* @__PURE__ */ jsxs15("div", { className: "space-y-3", children: [
               /* @__PURE__ */ jsxs15("div", { className: "flex min-h-10 flex-wrap items-center justify-between gap-3 rounded-md border border-border/50 bg-muted/10 px-3 py-2", children: [
-                /* @__PURE__ */ jsx22("span", { className: "text-[13px] font-medium", children: "State" }),
-                /* @__PURE__ */ jsx22(StatusBadge2, { "data-testid": `runtime-state-${runtime.state}`, tone: STATE_TONES[runtime.state] ?? "neutral", children: runtime.state })
+                /* @__PURE__ */ jsx23("span", { className: "text-[13px] font-medium", children: "State" }),
+                /* @__PURE__ */ jsx23(StatusBadge2, { "data-testid": `runtime-state-${runtime.state}`, tone: STATE_TONES[runtime.state] ?? "neutral", children: runtime.state })
               ] }),
               runtime.state === "ready" && runtime.volumePath && /* @__PURE__ */ jsxs15(
                 "div",
@@ -3583,8 +3675,8 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                   "data-testid": "volume-path",
                   className: "space-y-1 rounded-md border border-border/50 bg-muted/10 px-3 py-2",
                   children: [
-                    /* @__PURE__ */ jsx22("p", { className: "text-[13px] font-medium", children: "Volume" }),
-                    /* @__PURE__ */ jsx22("code", { className: "block overflow-x-auto whitespace-nowrap text-[12px] text-muted-foreground", children: runtime.volumePath })
+                    /* @__PURE__ */ jsx23("p", { className: "text-[13px] font-medium", children: "Volume" }),
+                    /* @__PURE__ */ jsx23("code", { className: "block overflow-x-auto whitespace-nowrap text-[12px] text-muted-foreground", children: runtime.volumePath })
                   ]
                 }
               ),
@@ -3595,7 +3687,7 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                   role: "alert",
                   className: "flex gap-2 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-[13px] leading-5 text-destructive",
                   children: [
-                    /* @__PURE__ */ jsx22(AlertCircle, { className: "mt-0.5 h-4 w-4 shrink-0", "aria-hidden": "true" }),
+                    /* @__PURE__ */ jsx23(AlertCircle, { className: "mt-0.5 h-4 w-4 shrink-0", "aria-hidden": "true" }),
                     runtime.lastError
                   ]
                 }
@@ -3610,14 +3702,14 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                     disabled: retryMutation.isPending,
                     onClick: () => retryMutation.mutate(),
                     children: [
-                      /* @__PURE__ */ jsx22(RefreshCw, { className: "h-4 w-4", "aria-hidden": "true" }),
+                      /* @__PURE__ */ jsx23(RefreshCw, { className: "h-4 w-4", "aria-hidden": "true" }),
                       retryMutation.isPending ? "Retrying..." : "Retry provisioning"
                     ]
                   }
                 ),
-                retryError && /* @__PURE__ */ jsx22(Notice5, { "data-testid": "retry-error", role: "alert", tone: "error", description: retryError })
+                retryError && /* @__PURE__ */ jsx23(Notice5, { "data-testid": "retry-error", role: "alert", tone: "error", description: retryError })
               ] }),
-              runtime.state === "error" && runtime.lastErrorOp === "destroy" && /* @__PURE__ */ jsx22(
+              runtime.state === "error" && runtime.lastErrorOp === "destroy" && /* @__PURE__ */ jsx23(
                 "p",
                 {
                   "data-testid": "destroy-guidance",
@@ -3628,15 +3720,15 @@ function WorkspaceSettingsPage({ topBar } = {}) {
             ] })
           }
         ),
-        hasFileSettings && /* @__PURE__ */ jsx22(
+        hasFileSettings && /* @__PURE__ */ jsx23(
           UiSettingsPanel2,
           {
             id: "files",
             testId: "file-settings-card",
-            icon: /* @__PURE__ */ jsx22(FileImage, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx23(FileImage, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "Files",
             description: "Configure where markdown editor image uploads are stored. Direct/local workspaces can also edit .boring/settings.",
-            footer: /* @__PURE__ */ jsx22(
+            footer: /* @__PURE__ */ jsx23(
               Button16,
               {
                 "data-testid": "save-file-settings",
@@ -3647,10 +3739,10 @@ function WorkspaceSettingsPage({ topBar } = {}) {
               }
             ),
             children: /* @__PURE__ */ jsxs15("div", { className: "space-y-4", children: [
-              fileSettingsError && /* @__PURE__ */ jsx22(Notice5, { "data-testid": "file-settings-error", role: "alert", tone: "error", description: fileSettingsError }),
+              fileSettingsError && /* @__PURE__ */ jsx23(Notice5, { "data-testid": "file-settings-error", role: "alert", tone: "error", description: fileSettingsError }),
               /* @__PURE__ */ jsxs15("div", { className: "space-y-2", children: [
-                /* @__PURE__ */ jsx22(Label10, { htmlFor: "markdown-image-upload-dir", className: "text-[12px]", children: "Markdown image upload path" }),
-                /* @__PURE__ */ jsx22(
+                /* @__PURE__ */ jsx23(Label10, { htmlFor: "markdown-image-upload-dir", className: "text-[12px]", children: "Markdown image upload path" }),
+                /* @__PURE__ */ jsx23(
                   Input10,
                   {
                     id: "markdown-image-upload-dir",
@@ -3663,26 +3755,26 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                 ),
                 /* @__PURE__ */ jsxs15(FieldNote, { children: [
                   "Relative workspace path used by markdown image uploads. Stored in ",
-                  /* @__PURE__ */ jsx22("code", { children: ".boring/settings" }),
+                  /* @__PURE__ */ jsx23("code", { children: ".boring/settings" }),
                   "."
                 ] })
               ] })
             ] })
           }
         ),
-        /* @__PURE__ */ jsx22(
+        /* @__PURE__ */ jsx23(
           UiSettingsPanel2,
           {
             id: "danger-zone",
             testId: "danger-zone",
-            icon: /* @__PURE__ */ jsx22(ShieldAlert2, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
+            icon: /* @__PURE__ */ jsx23(ShieldAlert2, { className: "h-3.5 w-3.5", "aria-hidden": "true" }),
             title: "Danger zone",
             description: "Permanently delete this workspace and all provisioned data.",
             danger: true,
             children: /* @__PURE__ */ jsxs15("div", { className: "space-y-4", children: [
-              deleteError && /* @__PURE__ */ jsx22(Notice5, { "data-testid": "delete-error", role: "alert", tone: "error", description: deleteError }),
-              !canDeleteWorkspace ? /* @__PURE__ */ jsx22("div", { className: "rounded-md border border-border/50 bg-muted/10 px-3 py-2 text-[13px] leading-5 text-muted-foreground", children: "Only workspace owners can delete this workspace." }) : null,
-              /* @__PURE__ */ jsx22(
+              deleteError && /* @__PURE__ */ jsx23(Notice5, { "data-testid": "delete-error", role: "alert", tone: "error", description: deleteError }),
+              !canDeleteWorkspace ? /* @__PURE__ */ jsx23("div", { className: "rounded-md border border-border/50 bg-muted/10 px-3 py-2 text-[13px] leading-5 text-muted-foreground", children: "Only workspace owners can delete this workspace." }) : null,
+              /* @__PURE__ */ jsx23(
                 UiSettingsActionRow2,
                 {
                   title: "Delete workspace",
@@ -3700,21 +3792,21 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                           setDeleteConfirmName("");
                         },
                         children: [
-                          /* @__PURE__ */ jsx22(Trash22, { className: "h-4 w-4", "aria-hidden": "true" }),
+                          /* @__PURE__ */ jsx23(Trash22, { className: "h-4 w-4", "aria-hidden": "true" }),
                           "Delete workspace"
                         ]
                       }
                     ),
                     /* @__PURE__ */ jsxs15(AlertDialogContent3, { children: [
                       /* @__PURE__ */ jsxs15(AlertDialogHeader3, { children: [
-                        /* @__PURE__ */ jsx22(AlertDialogTitle3, { children: "Delete workspace?" }),
+                        /* @__PURE__ */ jsx23(AlertDialogTitle3, { children: "Delete workspace?" }),
                         /* @__PURE__ */ jsxs15(AlertDialogDescription3, { children: [
                           "This action cannot be undone. Type ",
-                          /* @__PURE__ */ jsx22("strong", { children: workspace?.name }),
+                          /* @__PURE__ */ jsx23("strong", { children: workspace?.name }),
                           " to confirm."
                         ] })
                       ] }),
-                      /* @__PURE__ */ jsx22("div", { className: "px-6 pb-2", children: /* @__PURE__ */ jsx22(
+                      /* @__PURE__ */ jsx23("div", { className: "px-6 pb-2", children: /* @__PURE__ */ jsx23(
                         Input10,
                         {
                           "data-testid": "delete-confirm-input",
@@ -3726,8 +3818,8 @@ function WorkspaceSettingsPage({ topBar } = {}) {
                         }
                       ) }),
                       /* @__PURE__ */ jsxs15(AlertDialogFooter3, { children: [
-                        /* @__PURE__ */ jsx22(AlertDialogCancel3, { children: "Cancel" }),
-                        /* @__PURE__ */ jsx22(
+                        /* @__PURE__ */ jsx23(AlertDialogCancel3, { children: "Cancel" }),
+                        /* @__PURE__ */ jsx23(
                           Button16,
                           {
                             variant: "destructive",
@@ -3751,11 +3843,65 @@ function WorkspaceSettingsPage({ topBar } = {}) {
   ] });
 }
 
+// src/front/workspace/CompanyAdminPage.tsx
+import { Navigate } from "react-router-dom";
+import { Button as Button17 } from "@hachej/boring-ui-kit";
+import { Fragment as Fragment6, jsx as jsx24, jsxs as jsxs16 } from "react/jsx-runtime";
+var DEFAULT_PAGE_TITLE = "Admin";
+var DEFAULT_DENIED_MESSAGE = "You do not have access to this page.";
+function CompanyAdminPage() {
+  const currentWorkspace = useCurrentWorkspace();
+  const routeStatus = useWorkspaceRouteStatus();
+  const companyAdmin = useCompanyAdminStatus();
+  const pageTitle = companyAdmin.labels.pageTitle ?? DEFAULT_PAGE_TITLE;
+  const deniedMessage = companyAdmin.labels.deniedMessage ?? DEFAULT_DENIED_MESSAGE;
+  if (!companyAdmin.configured) return /* @__PURE__ */ jsx24(Navigate, { to: "/", replace: true });
+  if (routeStatus.status === "loading") {
+    return /* @__PURE__ */ jsx24("main", { className: "mx-auto flex min-h-screen max-w-3xl flex-col justify-center px-6 py-12", children: /* @__PURE__ */ jsx24("section", { className: "rounded-xl border border-border bg-card p-6 shadow-sm", "aria-busy": "true", children: /* @__PURE__ */ jsx24("p", { className: "text-sm text-muted-foreground", children: "Loading admin\u2026" }) }) });
+  }
+  if (companyAdmin.configured && companyAdmin.loading && !companyAdmin.status) {
+    return /* @__PURE__ */ jsx24("main", { className: "mx-auto flex min-h-screen max-w-3xl flex-col justify-center px-6 py-12", children: /* @__PURE__ */ jsx24("section", { className: "rounded-xl border border-border bg-card p-6 shadow-sm", "aria-busy": "true", children: /* @__PURE__ */ jsx24("p", { className: "text-sm text-muted-foreground", children: "Loading admin status\u2026" }) }) });
+  }
+  if (companyAdmin.error) {
+    const workspace2 = routeStatus.status === "matched" ? routeStatus.workspace : currentWorkspace;
+    const workspaceId2 = routeStatus.workspaceId ?? workspace2?.id ?? null;
+    return /* @__PURE__ */ jsx24("main", { className: "mx-auto flex min-h-screen max-w-3xl flex-col justify-center px-6 py-12", children: /* @__PURE__ */ jsxs16("section", { className: "rounded-xl border border-border bg-card p-6 shadow-sm", children: [
+      /* @__PURE__ */ jsx24("p", { className: "text-sm font-medium text-destructive", children: "Admin unavailable" }),
+      /* @__PURE__ */ jsx24("h1", { className: "mt-2 text-2xl font-semibold tracking-tight text-foreground", children: pageTitle }),
+      /* @__PURE__ */ jsx24("p", { className: "mt-2 text-sm text-muted-foreground", children: companyAdmin.error }),
+      workspaceId2 ? /* @__PURE__ */ jsx24(Button17, { asChild: true, className: "mt-5", children: /* @__PURE__ */ jsx24("a", { href: routeHref("workspaceSettings", { id: workspaceId2 }), children: "Back to workspace settings" }) }) : /* @__PURE__ */ jsx24(Button17, { asChild: true, className: "mt-5", children: /* @__PURE__ */ jsx24("a", { href: "/", children: "Back to workspace" }) })
+    ] }) });
+  }
+  if (!companyAdmin.status || companyAdmin.status.enabled !== true) return /* @__PURE__ */ jsx24(Navigate, { to: "/", replace: true });
+  if (routeStatus.status === "not-found" || routeStatus.status === "switch-failed" || routeStatus.status === "mismatched") {
+    const message = routeStatus.status === "mismatched" ? "The requested workspace could not be loaded." : routeStatus.message;
+    return /* @__PURE__ */ jsx24("main", { className: "mx-auto flex min-h-screen max-w-3xl flex-col justify-center px-6 py-12", children: /* @__PURE__ */ jsxs16("section", { className: "rounded-xl border border-border bg-card p-6 shadow-sm", children: [
+      /* @__PURE__ */ jsx24("p", { className: "text-sm font-medium text-destructive", children: "Workspace unavailable" }),
+      /* @__PURE__ */ jsx24("h1", { className: "mt-2 text-2xl font-semibold tracking-tight text-foreground", children: pageTitle }),
+      /* @__PURE__ */ jsx24("p", { className: "mt-2 text-sm text-muted-foreground", children: message }),
+      /* @__PURE__ */ jsx24(Button17, { asChild: true, className: "mt-5", children: /* @__PURE__ */ jsx24("a", { href: "/", children: "Back to workspace" }) })
+    ] }) });
+  }
+  const workspace = routeStatus.status === "matched" ? routeStatus.workspace : currentWorkspace;
+  const workspaceId = routeStatus.workspaceId ?? workspace?.id ?? null;
+  if (!workspaceId) return /* @__PURE__ */ jsx24(Navigate, { to: "/", replace: true });
+  if (routeStatus.status === "forbidden" || companyAdmin.status.admin !== true) {
+    return /* @__PURE__ */ jsx24("main", { className: "mx-auto flex min-h-screen max-w-3xl flex-col justify-center px-6 py-12", children: /* @__PURE__ */ jsxs16("section", { className: "rounded-xl border border-border bg-card p-6 shadow-sm", children: [
+      /* @__PURE__ */ jsx24("p", { className: "text-sm font-medium text-destructive", children: "Access required" }),
+      /* @__PURE__ */ jsx24("h1", { className: "mt-2 text-2xl font-semibold tracking-tight text-foreground", children: pageTitle }),
+      /* @__PURE__ */ jsx24("p", { className: "mt-2 text-sm text-muted-foreground", children: deniedMessage }),
+      /* @__PURE__ */ jsx24(Button17, { asChild: true, className: "mt-5", children: /* @__PURE__ */ jsx24("a", { href: routeHref("workspaceSettings", { id: workspaceId }), children: "Back to workspace settings" }) })
+    ] }) });
+  }
+  const renderedAppContent = companyAdmin.renderContent ? companyAdmin.renderContent(companyAdmin.status) : null;
+  return renderedAppContent ? /* @__PURE__ */ jsx24(Fragment6, { children: renderedAppContent }) : null;
+}
+
 // src/front/CoreFront.tsx
-import { Fragment as Fragment6, jsx as jsx23, jsxs as jsxs16 } from "react/jsx-runtime";
+import { jsx as jsx25, jsxs as jsxs17 } from "react/jsx-runtime";
 var CSP_NONCE_META_NAME = "boring-csp-nonce";
 function PlaceholderPage({ name }) {
-  return /* @__PURE__ */ jsxs16("div", { "data-testid": `placeholder-${name}`, children: [
+  return /* @__PURE__ */ jsxs17("div", { "data-testid": `placeholder-${name}`, children: [
     name,
     " (not yet implemented)"
   ] });
@@ -3766,6 +3912,22 @@ function readCspNonceFromDom() {
   const value = meta?.getAttribute("content")?.trim();
   return value ? value : void 0;
 }
+function CspNonceScript({ nonce }) {
+  useEffect12(() => {
+    const selector = 'script[data-boring-csp-nonce="true"]';
+    const existing = document.head.querySelector(selector);
+    const script = existing ?? document.createElement("script");
+    script.type = "application/json";
+    script.setAttribute("nonce", nonce);
+    script.dataset.boringCspNonce = "true";
+    script.textContent = JSON.stringify({ nonce });
+    if (!existing) document.head.appendChild(script);
+    return () => {
+      script.remove();
+    };
+  }, [nonce]);
+  return null;
+}
 function createDefaultQueryClient() {
   return new QueryClient({
     defaultOptions: {
@@ -3776,11 +3938,25 @@ function createDefaultQueryClient() {
     }
   });
 }
+function CompanyAdminScopedProvider({ children, companyAdmin }) {
+  const session = useSession();
+  const identityKey = session.data?.user?.id ?? null;
+  return /* @__PURE__ */ jsx25(
+    CompanyAdminProvider,
+    {
+      loadStatus: companyAdmin?.loadStatus,
+      renderContent: companyAdmin?.renderContent,
+      labels: companyAdmin?.labels,
+      identityKey,
+      children
+    }
+  );
+}
 function RouterAuthGate({ children, publicPaths }) {
   const config = useConfig();
   const location = useLocation2();
   const navigate = useNavigate6();
-  const authLocation = useMemo7(
+  const authLocation = useMemo8(
     () => ({ pathname: location.pathname, search: location.search, hash: location.hash }),
     [location.hash, location.pathname, location.search]
   );
@@ -3790,7 +3966,7 @@ function RouterAuthGate({ children, publicPaths }) {
     },
     [navigate]
   );
-  return /* @__PURE__ */ jsx23(
+  return /* @__PURE__ */ jsx25(
     AuthGate,
     {
       location: authLocation,
@@ -3801,9 +3977,9 @@ function RouterAuthGate({ children, publicPaths }) {
     }
   );
 }
-function CoreFront({ children, authPages, cspNonce, workspaceRoute, workspaceIdParam, publicPaths }) {
-  const queryClient = useMemo7(createDefaultQueryClient, []);
-  const resolvedCspNonce = useMemo7(
+function CoreFront({ children, authPages, cspNonce, workspaceRoute, workspaceIdParam, publicPaths, companyAdmin }) {
+  const queryClient = useMemo8(createDefaultQueryClient, []);
+  const resolvedCspNonce = useMemo8(
     () => cspNonce ?? readCspNonceFromDom(),
     [cspNonce]
   );
@@ -3814,43 +3990,35 @@ function CoreFront({ children, authPages, cspNonce, workspaceRoute, workspaceIdP
   const VerifyEmailPage2 = authPages?.verifyEmail ?? VerifyEmailPage;
   const AuthErrorPage2 = authPages?.authError ?? AuthErrorPage;
   const UserSettingsPage2 = authPages?.userSettings ?? UserSettingsPage;
-  return /* @__PURE__ */ jsx23(HelmetProvider, { children: /* @__PURE__ */ jsx23(AppErrorBoundary, { children: /* @__PURE__ */ jsx23(QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ jsx23(ConfigProvider, { children: /* @__PURE__ */ jsx23(ThemeProvider, { children: /* @__PURE__ */ jsx23(AuthProvider, { queryClient, children: /* @__PURE__ */ jsx23(UserIdentityProvider, { children: /* @__PURE__ */ jsx23(BrowserRouter, { children: /* @__PURE__ */ jsx23(WorkspaceAuthProvider, { workspaceRoute, workspaceIdParam, children: /* @__PURE__ */ jsxs16(TopBarSlotProvider, { slot: /* @__PURE__ */ jsx23(UserMenu, {}), children: [
-    /* @__PURE__ */ jsx23(Helmet, { children: resolvedCspNonce ? /* @__PURE__ */ jsxs16(Fragment6, { children: [
-      /* @__PURE__ */ jsx23("meta", { name: CSP_NONCE_META_NAME, content: resolvedCspNonce }),
-      /* @__PURE__ */ jsx23(
-        "script",
-        {
-          type: "application/json",
-          nonce: resolvedCspNonce,
-          "data-boring-csp-nonce": "true",
-          children: JSON.stringify({ nonce: resolvedCspNonce })
-        }
-      )
-    ] }) : null }),
-    /* @__PURE__ */ jsx23(RouterAuthGate, { publicPaths: ["/invites", ...publicPaths ?? []], children: /* @__PURE__ */ jsx23(Suspense, { fallback: null, children: /* @__PURE__ */ jsxs16(Routes, { children: [
-      /* @__PURE__ */ jsx23(Route, { path: routes.signin, element: /* @__PURE__ */ jsx23(SignInPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.signup, element: /* @__PURE__ */ jsx23(SignUpPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.forgotPassword, element: /* @__PURE__ */ jsx23(ForgotPasswordPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.resetPassword, element: /* @__PURE__ */ jsx23(ResetPasswordPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.verifyEmail, element: /* @__PURE__ */ jsx23(VerifyEmailPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.authError, element: /* @__PURE__ */ jsx23(AuthErrorPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.callbackGithub, element: /* @__PURE__ */ jsx23(PlaceholderPage, { name: "github-callback" }) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.callbackGoogle, element: /* @__PURE__ */ jsx23(PlaceholderPage, { name: "google-callback" }) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.me, element: /* @__PURE__ */ jsx23(UserSettingsPage2, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.workspaceMembers, element: /* @__PURE__ */ jsx23(MembersPage, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: "/workspace/:id/members", element: /* @__PURE__ */ jsx23(MembersPage, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.workspaceInvites, element: /* @__PURE__ */ jsx23(InvitesPage, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: "/workspace/:id/invites", element: /* @__PURE__ */ jsx23(InvitesPage, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.workspaceSettings, element: /* @__PURE__ */ jsx23(WorkspaceSettingsPage, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: "/workspace/:id/settings", element: /* @__PURE__ */ jsx23(WorkspaceSettingsPage, {}) }),
-      /* @__PURE__ */ jsx23(Route, { path: routes.inviteAccept, element: /* @__PURE__ */ jsx23(InviteAcceptPage, {}) }),
+  return /* @__PURE__ */ jsx25(HelmetProvider, { children: /* @__PURE__ */ jsx25(AppErrorBoundary, { children: /* @__PURE__ */ jsx25(QueryClientProvider, { client: queryClient, children: /* @__PURE__ */ jsx25(ConfigProvider, { children: /* @__PURE__ */ jsx25(ThemeProvider, { children: /* @__PURE__ */ jsx25(AuthProvider, { queryClient, children: /* @__PURE__ */ jsx25(UserIdentityProvider, { children: /* @__PURE__ */ jsx25(BrowserRouter, { children: /* @__PURE__ */ jsx25(CompanyAdminScopedProvider, { companyAdmin, children: /* @__PURE__ */ jsx25(WorkspaceAuthProvider, { workspaceRoute, workspaceIdParam, children: /* @__PURE__ */ jsxs17(TopBarSlotProvider, { slot: /* @__PURE__ */ jsx25(UserMenu, {}), children: [
+    /* @__PURE__ */ jsx25(Helmet, { children: resolvedCspNonce ? /* @__PURE__ */ jsx25("meta", { name: CSP_NONCE_META_NAME, content: resolvedCspNonce }) : null }),
+    resolvedCspNonce ? /* @__PURE__ */ jsx25(CspNonceScript, { nonce: resolvedCspNonce }) : null,
+    /* @__PURE__ */ jsx25(RouterAuthGate, { publicPaths: ["/invites", ...publicPaths ?? []], children: /* @__PURE__ */ jsx25(Suspense, { fallback: null, children: /* @__PURE__ */ jsxs17(Routes, { children: [
+      /* @__PURE__ */ jsx25(Route, { path: routes.signin, element: /* @__PURE__ */ jsx25(SignInPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.signup, element: /* @__PURE__ */ jsx25(SignUpPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.forgotPassword, element: /* @__PURE__ */ jsx25(ForgotPasswordPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.resetPassword, element: /* @__PURE__ */ jsx25(ResetPasswordPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.verifyEmail, element: /* @__PURE__ */ jsx25(VerifyEmailPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.authError, element: /* @__PURE__ */ jsx25(AuthErrorPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.callbackGithub, element: /* @__PURE__ */ jsx25(PlaceholderPage, { name: "github-callback" }) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.callbackGoogle, element: /* @__PURE__ */ jsx25(PlaceholderPage, { name: "google-callback" }) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.me, element: /* @__PURE__ */ jsx25(UserSettingsPage2, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.workspaceMembers, element: /* @__PURE__ */ jsx25(MembersPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: "/workspace/:id/members", element: /* @__PURE__ */ jsx25(MembersPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.workspaceInvites, element: /* @__PURE__ */ jsx25(InvitesPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: "/workspace/:id/invites", element: /* @__PURE__ */ jsx25(InvitesPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.workspaceSettings, element: /* @__PURE__ */ jsx25(WorkspaceSettingsPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: "/workspace/:id/settings", element: /* @__PURE__ */ jsx25(WorkspaceSettingsPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.companyAdmin, element: /* @__PURE__ */ jsx25(CompanyAdminPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: "/workspace/:id/admin", element: /* @__PURE__ */ jsx25(CompanyAdminPage, {}) }),
+      /* @__PURE__ */ jsx25(Route, { path: routes.inviteAccept, element: /* @__PURE__ */ jsx25(InviteAcceptPage, {}) }),
       children
     ] }) }) })
-  ] }) }) }) }) }) }) }) }) }) });
+  ] }) }) }) }) }) }) }) }) }) }) });
 }
 
 // src/front/commands/CoreCommandContributions.tsx
-import { useMemo as useMemo8, useState as useState21 } from "react";
+import { useMemo as useMemo9, useState as useState22 } from "react";
 import { useNavigate as useNavigate7 } from "react-router-dom";
 
 // src/front/workspace/commands.ts
@@ -3892,8 +4060,8 @@ function useCoreCommands() {
   const navigate = useNavigate7();
   const signOut = useSignOut();
   const workspace = useCurrentWorkspace();
-  const [isSigningOut, setIsSigningOut] = useState21(false);
-  return useMemo8(() => {
+  const [isSigningOut, setIsSigningOut] = useState22(false);
+  return useMemo9(() => {
     const result = [
       {
         id: "user:settings",
@@ -4007,6 +4175,8 @@ export {
   useConfigLoaded,
   ThemeProvider,
   useTheme,
+  CompanyAdminProvider,
+  useCompanyAdminStatus,
   useKeyboardShortcuts,
   useViewportBreakpoint,
   useReducedMotion,
@@ -4044,6 +4214,7 @@ export {
   InvitesPage,
   MembersPage,
   WorkspaceSettingsPage,
+  CompanyAdminPage,
   CoreFront,
   getWorkspaceCommands,
   useCoreCommands,