@nocios/crudify-ui 3.0.4 → 3.0.10

package/dist/index.js

@@ -45,7 +45,7 @@ __export(index_exports, {
   SessionStatus: () => SessionStatus,
   TokenStorage: () => TokenStorage,
   UserProfileDisplay: () => UserProfileDisplay_default,
-  crudify: () => import_crudify_browser7.default,
+  crudify: () => import_crudify_browser6.default,
   decodeJwtSafely: () => decodeJwtSafely,
   getCookie: () => getCookie,
   getCurrentUserEmail: () => getCurrentUserEmail,
@@ -65,7 +65,7 @@ __export(index_exports, {
   useUserProfile: () => useUserProfile
 });
 module.exports = __toCommonJS(index_exports);
-var import_crudify_browser7 = __toESM(require("@nocios/crudify-browser"));
+var import_crudify_browser6 = __toESM(require("@nocios/crudify-browser"));
 __reExport(index_exports, require("@nocios/crudify-browser"), module.exports);
 
 // src/components/CrudifyLogin/index.tsx
@@ -733,7 +733,7 @@ function handleCrudifyError(error) {
 // src/components/CrudifyLogin/Forms/LoginForm.tsx
 var import_jsx_runtime4 = require("react/jsx-runtime");
 var LoginForm = ({ onScreenChange, onExternalNavigate, onLoginSuccess, onError, redirectUrl = "/" }) => {
-  const { crudify: crudify7 } = useCrudify();
+  const { crudify: crudify6 } = useCrudify();
   const { state, updateFormData, setFieldError, clearErrors, setLoading } = useLoginState();
   const { t } = useTranslation();
   const usernameInputRef = (0, import_react5.useRef)(null);
@@ -784,10 +784,10 @@ var LoginForm = ({ onScreenChange, onExternalNavigate, onLoginSuccess, onError,
     clearErrors();
     setLoading(true);
     try {
-      if (!crudify7) {
+      if (!crudify6) {
         throw new Error("Crudify not initialized");
       }
-      const response = await crudify7.login(state.formData.username, state.formData.password);
+      const response = await crudify6.login(state.formData.username, state.formData.password);
       setLoading(false);
       if (response.success) {
         console.log("\u{1F510} LoginForm - Login successful, calling onLoginSuccess");
@@ -942,7 +942,7 @@ var import_react6 = require("react");
 var import_material2 = require("@mui/material");
 var import_jsx_runtime5 = require("react/jsx-runtime");
 var ForgotPasswordForm = ({ onScreenChange, onError }) => {
-  const { crudify: crudify7 } = useCrudify();
+  const { crudify: crudify6 } = useCrudify();
   const [email, setEmail] = (0, import_react6.useState)("");
   const [loading, setLoading] = (0, import_react6.useState)(false);
   const [errors, setErrors] = (0, import_react6.useState)([]);
@@ -971,7 +971,7 @@ var ForgotPasswordForm = ({ onScreenChange, onError }) => {
     return emailRegex.test(email2);
   };
   const handleSubmit = async () => {
-    if (loading || !crudify7) return;
+    if (loading || !crudify6) return;
     setErrors([]);
     setHelperTextEmail(null);
     if (!email) {
@@ -985,7 +985,7 @@ var ForgotPasswordForm = ({ onScreenChange, onError }) => {
     setLoading(true);
     try {
       const data = [{ operation: "requestPasswordReset", data: { email } }];
-      const response = await crudify7.transaction(data);
+      const response = await crudify6.transaction(data);
       if (response.success) {
         if (response.data && response.data.existingCodeValid) {
           setCodeAlreadyExists(true);
@@ -1088,7 +1088,7 @@ var import_react7 = require("react");
 var import_material3 = require("@mui/material");
 var import_jsx_runtime6 = require("react/jsx-runtime");
 var ResetPasswordForm = ({ onScreenChange, onError, searchParams, onResetSuccess }) => {
-  const { crudify: crudify7 } = useCrudify();
+  const { crudify: crudify6 } = useCrudify();
   const [newPassword, setNewPassword] = (0, import_react7.useState)("");
   const [confirmPassword, setConfirmPassword] = (0, import_react7.useState)("");
   const [loading, setLoading] = (0, import_react7.useState)(false);
@@ -1168,9 +1168,9 @@ var ResetPasswordForm = ({ onScreenChange, onError, searchParams, onResetSuccess
     setErrors([t("resetPassword.invalidCode")]);
     setValidatingCode(false);
     setTimeout(() => onScreenChange?.("forgotPassword"), 3e3);
-  }, [searchParams, crudify7, t, onScreenChange]);
+  }, [searchParams, crudify6, t, onScreenChange]);
   (0, import_react7.useEffect)(() => {
-    if (crudify7 && pendingValidation && !isValidating) {
+    if (crudify6 && pendingValidation && !isValidating) {
       setIsValidating(true);
       const validateCode = async (emailToValidate, codeToValidate) => {
         try {
@@ -1180,7 +1180,7 @@ var ResetPasswordForm = ({ onScreenChange, onError, searchParams, onResetSuccess
               data: { email: emailToValidate, codePassword: codeToValidate }
             }
           ];
-          const response = await crudify7.transaction(data);
+          const response = await crudify6.transaction(data);
           if (response.data && Array.isArray(response.data)) {
             const validationResult = response.data[0];
             if (validationResult && validationResult.response && validationResult.response.status === "OK") {
@@ -1209,7 +1209,7 @@ var ResetPasswordForm = ({ onScreenChange, onError, searchParams, onResetSuccess
       };
       validateCode(pendingValidation.email, pendingValidation.code);
     }
-  }, [crudify7, pendingValidation, t, onScreenChange]);
+  }, [crudify6, pendingValidation, t, onScreenChange]);
   const validatePassword = (password) => {
     if (password.length < 8) {
       return t("resetPassword.passwordTooShort");
@@ -1217,7 +1217,7 @@ var ResetPasswordForm = ({ onScreenChange, onError, searchParams, onResetSuccess
     return null;
   };
   const handleSubmit = async () => {
-    if (loading || !crudify7) return;
+    if (loading || !crudify6) return;
     setErrors([]);
     setHelperTextNewPassword(null);
     setHelperTextConfirmPassword(null);
@@ -1248,7 +1248,7 @@ var ResetPasswordForm = ({ onScreenChange, onError, searchParams, onResetSuccess
           data: { email, codePassword: code, newPassword }
         }
       ];
-      const response = await crudify7.transaction(data);
+      const response = await crudify6.transaction(data);
       if (response.success) {
         setErrors([]);
         setTimeout(() => {
@@ -1359,7 +1359,7 @@ var import_react8 = require("react");
 var import_material4 = require("@mui/material");
 var import_jsx_runtime7 = require("react/jsx-runtime");
 var CheckCodeForm = ({ onScreenChange, onError, searchParams }) => {
-  const { crudify: crudify7 } = useCrudify();
+  const { crudify: crudify6 } = useCrudify();
   const [code, setCode] = (0, import_react8.useState)("");
   const [loading, setLoading] = (0, import_react8.useState)(false);
   const [errors, setErrors] = (0, import_react8.useState)([]);
@@ -1398,7 +1398,7 @@ var CheckCodeForm = ({ onScreenChange, onError, searchParams }) => {
     }
   }, [searchParams, onScreenChange]);
   const handleSubmit = async () => {
-    if (loading || !crudify7) return;
+    if (loading || !crudify6) return;
     setErrors([]);
     setHelperTextCode(null);
     if (!code) {
@@ -1417,7 +1417,7 @@ var CheckCodeForm = ({ onScreenChange, onError, searchParams }) => {
           data: { email, codePassword: code }
         }
       ];
-      const response = await crudify7.transaction(data);
+      const response = await crudify6.transaction(data);
       if (response.success) {
         onScreenChange?.("resetPassword", { email, code, fromCodeVerification: "true" });
       } else {
@@ -1540,1805 +1540,1831 @@ var CrudifyInitializer = ({ children, fallback }) => {
   return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(import_jsx_runtime8.Fragment, { children });
 };
 
-// src/components/CrudifyLogin/hooks/useCrudifyLogin.ts
+// src/providers/SessionProvider.tsx
+var import_react10 = require("react");
+
+// src/hooks/useSession.ts
 var import_react9 = require("react");
+
+// src/core/SessionManager.ts
 var import_crudify_browser2 = __toESM(require("@nocios/crudify-browser"));
-var useCrudifyLogin = (config, _options = {}) => {
-  console.log("\u{1F50D} useCrudifyLogin - Input config:", config);
-  const finalConfig = (0, import_react9.useMemo)(() => {
-    const publicApiKey = config.publicApiKey || import_crudify_browser2.default?.publicApiKey || import_crudify_browser2.default?.apiKey || getCookie("publicApiKey") || null;
-    const rawEnv = config.env || getCookie("environment") || "prod";
-    const env = ["dev", "stg", "prod"].includes(rawEnv) ? rawEnv : "prod";
-    const appName = config.appName || getCookie("appName") || "Crudia";
-    const loginActions = config.loginActions || (() => {
-      try {
-        const cookieValue = getCookie("loginActions");
-        return cookieValue ? cookieValue.split(",").map((action) => action.trim()).filter(Boolean) : [];
-      } catch {
-        return [];
-      }
-    })();
-    console.log("\u{1F50D} useCrudifyLogin - Resolved publicApiKey:", publicApiKey);
-    console.log(
-      "\u{1F50D} useCrudifyLogin - Sources - props:",
-      config.publicApiKey,
-      "crudify:",
-      import_crudify_browser2.default?.publicApiKey,
-      "cookie:",
-      getCookie("publicApiKey")
-    );
-    console.log("\u{1F50D} useCrudifyLogin - Final env:", env, "from rawEnv:", rawEnv);
-    const finalResult = {
-      publicApiKey,
-      env,
-      appName,
-      loginActions
-    };
-    console.log("\u{1F50D} useCrudifyLogin - Final config result:", finalResult);
-    return finalResult;
-  }, [config]);
-  return { config: finalConfig };
-};
 
-// src/components/CrudifyLogin/index.tsx
-var import_jsx_runtime9 = require("react/jsx-runtime");
-var CrudifyLoginInternal = ({
-  onScreenChange,
-  onExternalNavigate,
-  onLoginSuccess,
-  onError,
-  redirectUrl = "/"
-}) => {
-  const { t } = useTranslation();
-  const { state, setScreen } = useLoginState();
-  const handleScreenChange = (screen2, params) => {
-    let finalParams = params;
-    if (screen2 === "login") {
-      finalParams = {};
-    } else if (screen2 === "forgotPassword" && !params) {
-      finalParams = {};
-    }
-    setScreen(screen2, finalParams);
-    onScreenChange?.(screen2, finalParams);
-  };
-  const renderCurrentForm = () => {
-    const commonProps = {
-      onScreenChange: handleScreenChange,
-      onExternalNavigate,
-      onError,
-      redirectUrl
-    };
-    switch (state.currentScreen) {
-      case "forgotPassword":
-        return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(ForgotPasswordForm_default, { ...commonProps });
-      case "checkCode":
-        return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(CheckCodeForm_default, { ...commonProps, searchParams: state.searchParams });
-      case "resetPassword":
-        return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
-          ResetPasswordForm_default,
-          {
-            ...commonProps,
-            searchParams: state.searchParams,
-            onResetSuccess: () => {
-              handleScreenChange("login");
-            }
-          }
-        );
-      default:
-        return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(LoginForm_default, { ...commonProps, onLoginSuccess });
+// src/utils/tokenStorage.ts
+var import_crypto_js = __toESM(require("crypto-js"));
+var _TokenStorage = class _TokenStorage {
+  /**
+   * Configurar tipo de almacenamiento
+   */
+  static setStorageType(type) {
+    _TokenStorage.storageType = type;
+  }
+  /**
+   * Verificar si el storage está disponible
+   */
+  static isStorageAvailable(type) {
+    try {
+      const storage = window[type];
+      const testKey = "__storage_test__";
+      storage.setItem(testKey, "test");
+      storage.removeItem(testKey);
+      return true;
+    } catch {
+      return false;
     }
-  };
-  return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(CrudifyInitializer, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(import_material6.Box, { sx: { display: "flex", justifyContent: "center", mb: 3 }, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
-      "img",
-      {
-        src: state.config.logo || "/nocios-default.png",
-        alt: t("login.logoAlt"),
-        style: {
-          width: "100%",
-          maxWidth: "150px",
-          height: "auto"
-        },
-        onError: (e) => {
-          const target = e.target;
-          target.src = "/nocios-default.png";
-        }
-      }
-    ) }),
-    state.config.appName && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
-      import_material6.Typography,
-      {
-        variant: "h6",
-        component: "h1",
-        sx: {
-          textAlign: "center",
-          mb: 2,
-          color: state.config.colors?.primaryColor || "#1066BA"
-        },
-        children: state.config.appName
-      }
-    ),
-    renderCurrentForm()
-  ] });
-};
-var CrudifyLogin = ({
-  translations,
-  translationsUrl,
-  language = "en",
-  config = {},
-  initialScreen = "login",
-  autoReadFromCookies = true,
-  ...props
-}) => {
-  const { config: finalConfig } = useCrudifyLogin(config);
-  return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(I18nProvider, { translations, translationsUrl, language, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(CrudifyProvider, { config: finalConfig, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(LoginStateProvider, { config, initialScreen, autoReadFromCookies, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(CrudifyLoginInternal, { config, ...props }) }) }) });
-};
-var CrudifyLogin_default = CrudifyLogin;
-
-// src/components/UserProfile/UserProfileDisplay.tsx
-var import_material7 = require("@mui/material");
-var import_icons_material = require("@mui/icons-material");
-
-// src/hooks/useUserProfile.ts
-var import_react10 = require("react");
-var import_crudify_browser3 = __toESM(require("@nocios/crudify-browser"));
-
-// src/utils/jwtUtils.ts
-var decodeJwtSafely = (token) => {
-  try {
-    const parts = token.split(".");
-    if (parts.length !== 3) {
-      console.warn("Invalid JWT format: token must have 3 parts");
+  }
+  /**
+   * Obtener instancia de storage
+   */
+  static getStorage() {
+    if (_TokenStorage.storageType === "none") return null;
+    if (!_TokenStorage.isStorageAvailable(_TokenStorage.storageType)) {
+      console.warn(`Crudify: ${_TokenStorage.storageType} not available, tokens won't persist`);
       return null;
     }
-    const payload = parts[1];
-    const paddedPayload = payload + "=".repeat((4 - payload.length % 4) % 4);
-    const decodedPayload = JSON.parse(atob(paddedPayload));
-    return decodedPayload;
-  } catch (error) {
-    console.warn("Failed to decode JWT token:", error);
-    return null;
+    return window[_TokenStorage.storageType];
   }
-};
-var getCurrentUserEmail = () => {
-  try {
-    let token = null;
-    token = sessionStorage.getItem("authToken");
-    console.log("\u{1F50D} getCurrentUserEmail - authToken:", token ? `${token.substring(0, 20)}...` : null);
-    if (!token) {
-      token = sessionStorage.getItem("token");
-      console.log("\u{1F50D} getCurrentUserEmail - token:", token ? `${token.substring(0, 20)}...` : null);
+  /**
+   * Encriptar datos sensibles
+   */
+  static encrypt(data) {
+    try {
+      return import_crypto_js.default.AES.encrypt(data, _TokenStorage.ENCRYPTION_KEY).toString();
+    } catch (error) {
+      console.error("Crudify: Encryption failed", error);
+      return data;
     }
-    if (!token) {
-      token = localStorage.getItem("authToken") || localStorage.getItem("token");
-      console.log("\u{1F50D} getCurrentUserEmail - localStorage:", token ? `${token.substring(0, 20)}...` : null);
+  }
+  /**
+   * Desencriptar datos
+   */
+  static decrypt(encryptedData) {
+    try {
+      const bytes = import_crypto_js.default.AES.decrypt(encryptedData, _TokenStorage.ENCRYPTION_KEY);
+      const decrypted = bytes.toString(import_crypto_js.default.enc.Utf8);
+      return decrypted || encryptedData;
+    } catch (error) {
+      console.error("Crudify: Decryption failed", error);
+      return encryptedData;
     }
-    if (!token) {
-      console.warn("\u{1F50D} getCurrentUserEmail - No token found in any storage");
-      return null;
+  }
+  /**
+   * Guardar tokens de forma segura
+   */
+  static saveTokens(tokens) {
+    const storage = _TokenStorage.getStorage();
+    if (!storage) return;
+    try {
+      const tokenData = {
+        accessToken: tokens.accessToken,
+        refreshToken: tokens.refreshToken,
+        expiresAt: tokens.expiresAt,
+        refreshExpiresAt: tokens.refreshExpiresAt,
+        savedAt: Date.now()
+      };
+      const encrypted = _TokenStorage.encrypt(JSON.stringify(tokenData));
+      storage.setItem(_TokenStorage.TOKEN_KEY, encrypted);
+      console.debug("Crudify: Tokens saved successfully");
+    } catch (error) {
+      console.error("Crudify: Failed to save tokens", error);
     }
-    const payload = decodeJwtSafely(token);
-    if (!payload) {
-      console.warn("\u{1F50D} getCurrentUserEmail - Failed to decode token");
+  }
+  /**
+   * Obtener tokens guardados
+   */
+  static getTokens() {
+    const storage = _TokenStorage.getStorage();
+    if (!storage) return null;
+    try {
+      const encrypted = storage.getItem(_TokenStorage.TOKEN_KEY);
+      if (!encrypted) return null;
+      const decrypted = _TokenStorage.decrypt(encrypted);
+      const tokenData = JSON.parse(decrypted);
+      if (!tokenData.accessToken || !tokenData.refreshToken || !tokenData.expiresAt || !tokenData.refreshExpiresAt) {
+        console.warn("Crudify: Incomplete token data found, clearing storage");
+        _TokenStorage.clearTokens();
+        return null;
+      }
+      if (Date.now() >= tokenData.refreshExpiresAt) {
+        console.info("Crudify: Refresh token expired, clearing storage");
+        _TokenStorage.clearTokens();
+        return null;
+      }
+      return {
+        accessToken: tokenData.accessToken,
+        refreshToken: tokenData.refreshToken,
+        expiresAt: tokenData.expiresAt,
+        refreshExpiresAt: tokenData.refreshExpiresAt
+      };
+    } catch (error) {
+      console.error("Crudify: Failed to retrieve tokens", error);
+      _TokenStorage.clearTokens();
       return null;
     }
-    const email = payload.email || payload["cognito:username"] || null;
-    console.log("\u{1F50D} getCurrentUserEmail - Extracted email:", email);
-    return email;
-  } catch (error) {
-    console.warn("Failed to get current user email:", error);
-    return null;
-  }
-};
-var isTokenExpired = (token) => {
-  try {
-    const payload = decodeJwtSafely(token);
-    if (!payload || !payload.exp) return true;
-    const currentTime = Math.floor(Date.now() / 1e3);
-    return payload.exp < currentTime;
-  } catch {
-    return true;
   }
-};
-
-// src/hooks/useUserProfile.ts
-var useUserProfile = (options = {}) => {
-  const { autoFetch = true, retryOnError = false, maxRetries = 3 } = options;
-  const [userProfile, setUserProfile] = (0, import_react10.useState)(null);
-  const [loading, setLoading] = (0, import_react10.useState)(false);
-  const [error, setError] = (0, import_react10.useState)(null);
-  const [extendedData, setExtendedData] = (0, import_react10.useState)({});
-  const abortControllerRef = (0, import_react10.useRef)(null);
-  const mountedRef = (0, import_react10.useRef)(true);
-  const requestIdRef = (0, import_react10.useRef)(0);
-  const retryCountRef = (0, import_react10.useRef)(0);
-  const clearProfile = (0, import_react10.useCallback)(() => {
-    setUserProfile(null);
-    setError(null);
-    setLoading(false);
-    setExtendedData({});
-  }, []);
-  const refreshProfile = (0, import_react10.useCallback)(async () => {
-    const userEmail = getCurrentUserEmail();
-    if (!userEmail) {
-      if (mountedRef.current) {
-        setError("No user email available");
-        setLoading(false);
-      }
-      return;
-    }
-    if (abortControllerRef.current) {
-      abortControllerRef.current.abort();
-    }
-    const abortController = new AbortController();
-    abortControllerRef.current = abortController;
-    const currentRequestId = ++requestIdRef.current;
+  /**
+   * Limpiar tokens almacenados
+   */
+  static clearTokens() {
+    const storage = _TokenStorage.getStorage();
+    if (!storage) return;
     try {
-      if (mountedRef.current) {
-        setLoading(true);
-        setError(null);
-      }
-      const response = await import_crudify_browser3.default.readItems("users", {
-        filter: { email: userEmail },
-        pagination: { limit: 1 }
-      });
-      if (currentRequestId === requestIdRef.current && mountedRef.current && !abortController.signal.aborted) {
-        if (response.success && response.data && response.data.length > 0) {
-          const userData = response.data[0];
-          setUserProfile(userData);
-          const additionalData = {
-            fullProfile: userData,
-            totalFields: Object.keys(userData).length,
-            displayData: {
-              id: userData.id,
-              email: userData.email,
-              username: userData.username,
-              firstName: userData.firstName,
-              lastName: userData.lastName,
-              fullName: userData.fullName || `${userData.firstName || ""} ${userData.lastName || ""}`.trim(),
-              role: userData.role,
-              permissions: userData.permissions || [],
-              isActive: userData.isActive,
-              lastLogin: userData.lastLogin,
-              createdAt: userData.createdAt,
-              updatedAt: userData.updatedAt,
-              // Include any custom fields
-              ...Object.keys(userData).filter(
-                (key) => ![
-                  "id",
-                  "email",
-                  "username",
-                  "firstName",
-                  "lastName",
-                  "fullName",
-                  "role",
-                  "permissions",
-                  "isActive",
-                  "lastLogin",
-                  "createdAt",
-                  "updatedAt"
-                ].includes(key)
-              ).reduce((acc, key) => ({ ...acc, [key]: userData[key] }), {})
-            }
-          };
-          setExtendedData(additionalData);
-          setError(null);
-          retryCountRef.current = 0;
-        } else {
-          setError("User profile not found");
-          setUserProfile(null);
-          setExtendedData({});
-        }
-      }
-    } catch (err) {
-      if (currentRequestId === requestIdRef.current && mountedRef.current) {
-        const error2 = err;
-        if (error2.name === "AbortError") {
-          return;
-        }
-        const shouldRetry = retryOnError && retryCountRef.current < maxRetries && (error2.message?.includes("Network Error") || error2.message?.includes("Failed to fetch"));
-        if (shouldRetry) {
-          retryCountRef.current++;
-          setTimeout(() => {
-            if (mountedRef.current) {
-              refreshProfile();
-            }
-          }, 1e3 * retryCountRef.current);
-        } else {
-          setError("Failed to load user profile");
-          setUserProfile(null);
-          setExtendedData({});
-        }
-      }
-    } finally {
-      if (currentRequestId === requestIdRef.current && mountedRef.current) {
-        setLoading(false);
-      }
-      if (abortControllerRef.current === abortController) {
-        abortControllerRef.current = null;
-      }
-    }
-  }, [retryOnError, maxRetries]);
-  (0, import_react10.useEffect)(() => {
-    if (autoFetch) {
-      refreshProfile();
+      storage.removeItem(_TokenStorage.TOKEN_KEY);
+      console.debug("Crudify: Tokens cleared from storage");
+    } catch (error) {
+      console.error("Crudify: Failed to clear tokens", error);
     }
-  }, [autoFetch, refreshProfile]);
-  (0, import_react10.useEffect)(() => {
-    mountedRef.current = true;
-    return () => {
-      mountedRef.current = false;
-      if (abortControllerRef.current) {
-        abortControllerRef.current.abort();
-        abortControllerRef.current = null;
-      }
+  }
+  /**
+   * Verificar si hay tokens válidos guardados
+   */
+  static hasValidTokens() {
+    const tokens = _TokenStorage.getTokens();
+    return tokens !== null;
+  }
+  /**
+   * Obtener información de expiración
+   */
+  static getExpirationInfo() {
+    const tokens = _TokenStorage.getTokens();
+    if (!tokens) return null;
+    const now = Date.now();
+    return {
+      accessExpired: now >= tokens.expiresAt,
+      refreshExpired: now >= tokens.refreshExpiresAt,
+      accessExpiresIn: Math.max(0, tokens.expiresAt - now),
+      refreshExpiresIn: Math.max(0, tokens.refreshExpiresAt - now)
     };
-  }, []);
-  return {
-    userProfile,
-    loading,
-    error,
-    extendedData,
-    refreshProfile,
-    clearProfile
-  };
+  }
+  /**
+   * Actualizar solo el access token (después de refresh)
+   */
+  static updateAccessToken(newAccessToken, newExpiresAt) {
+    const existingTokens = _TokenStorage.getTokens();
+    if (!existingTokens) {
+      console.warn("Crudify: Cannot update access token, no existing tokens found");
+      return;
+    }
+    _TokenStorage.saveTokens({
+      ...existingTokens,
+      accessToken: newAccessToken,
+      expiresAt: newExpiresAt
+    });
+  }
 };
+_TokenStorage.TOKEN_KEY = "crudify_tokens";
+_TokenStorage.ENCRYPTION_KEY = "crudify_secure_key_v1";
+_TokenStorage.storageType = "localStorage";
+var TokenStorage = _TokenStorage;
 
-// src/components/UserProfile/UserProfileDisplay.tsx
-var import_react11 = require("react");
-var import_jsx_runtime10 = require("react/jsx-runtime");
-var UserProfileDisplay = ({
-  showExtendedData = true,
-  showProfileCard = true,
-  autoRefresh = true
-}) => {
-  const { userProfile, loading, error, extendedData, refreshProfile } = useUserProfile({
-    autoFetch: autoRefresh,
-    retryOnError: true,
-    maxRetries: 3
-  });
-  const [showAllFields, setShowAllFields] = (0, import_react11.useState)(false);
-  if (loading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { display: "flex", justifyContent: "center", alignItems: "center", p: 3, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.CircularProgress, {}),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "body2", sx: { ml: 2 }, children: "Cargando perfil de usuario..." })
-    ] });
+// src/core/SessionManager.ts
+var SessionManager = class _SessionManager {
+  constructor() {
+    this.config = {};
+    this.initialized = false;
   }
-  if (error) {
-    return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
-      import_material7.Alert,
-      {
-        severity: "error",
-        action: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.IconButton, { color: "inherit", size: "small", onClick: refreshProfile, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "caption", children: "Reintentar" }) }),
-        children: [
-          "Error al cargar el perfil: ",
-          error
-        ]
-      }
-    );
+  static getInstance() {
+    if (!_SessionManager.instance) {
+      _SessionManager.instance = new _SessionManager();
+    }
+    return _SessionManager.instance;
   }
-  if (!userProfile) {
-    return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Alert, { severity: "warning", children: "No se encontr\xF3 informaci\xF3n del usuario" });
+  /**
+   * Inicializar el SessionManager
+   */
+  async initialize(config = {}) {
+    if (this.initialized) {
+      console.warn("SessionManager: Already initialized");
+      return;
+    }
+    this.config = {
+      storageType: "localStorage",
+      autoRestore: true,
+      enableLogging: false,
+      ...config
+    };
+    TokenStorage.setStorageType(this.config.storageType || "localStorage");
+    if (this.config.enableLogging) {
+    }
+    if (this.config.autoRestore) {
+      await this.restoreSession();
+    }
+    this.initialized = true;
+    this.log("SessionManager initialized successfully");
   }
-  const displayData = extendedData?.displayData || {};
-  const totalFields = extendedData?.totalFields || 0;
-  const formatDate = (dateString) => {
-    if (!dateString) return "No disponible";
+  /**
+   * Login con persistencia automática
+   */
+  async login(email, password) {
     try {
-      return new Date(dateString).toLocaleString("es-ES", {
-        year: "numeric",
-        month: "short",
-        day: "numeric",
-        hour: "2-digit",
-        minute: "2-digit"
-      });
-    } catch {
-      return dateString;
-    }
-  };
-  const renderFieldValue = (key, value) => {
-    if (value === null || value === void 0) return "No disponible";
-    if (typeof value === "boolean") return value ? "S\xED" : "No";
-    if (Array.isArray(value)) return value.length > 0 ? value.join(", ") : "Ninguno";
-    if (typeof value === "object") return JSON.stringify(value, null, 2);
-    return String(value);
-  };
-  const basicFields = [
-    { key: "id", label: "ID", icon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.Badge, {}) },
-    { key: "email", label: "Email", icon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.Email, {}) },
-    { key: "username", label: "Usuario", icon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.Person, {}) },
-    { key: "fullName", label: "Nombre completo", icon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.AccountCircle, {}) },
-    { key: "role", label: "Rol", icon: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.Security, {}) }
-  ];
-  const extendedFields = [
-    { key: "firstName", label: "Nombre" },
-    { key: "lastName", label: "Apellido" },
-    { key: "isActive", label: "Activo" },
-    { key: "lastLogin", label: "\xDAltimo login" },
-    { key: "createdAt", label: "Creado" },
-    { key: "updatedAt", label: "Actualizado" }
-  ];
-  const knownFields = [...basicFields.map((f) => f.key), ...extendedFields.map((f) => f.key), "permissions"];
-  const customFields = Object.keys(displayData).filter((key) => !knownFields.includes(key)).map((key) => ({ key, label: key }));
-  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { children: [
-    showProfileCard && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Card, { sx: { mb: 2 }, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.CardContent, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { display: "flex", alignItems: "center", mb: 2, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-          import_material7.Avatar,
-          {
-            src: displayData.avatar,
-            sx: { width: 56, height: 56, mr: 2 },
-            children: displayData.fullName?.[0] || displayData.username?.[0] || displayData.email?.[0]
+      this.log("Attempting login...");
+      const response = await import_crudify_browser2.default.login(email, password);
+      if (!response.success) {
+        this.log("Login failed:", response.errors);
+        return {
+          success: false,
+          error: this.formatError(response.errors)
+        };
+      }
+      const tokens = {
+        accessToken: response.data.token,
+        refreshToken: response.data.refreshToken,
+        expiresAt: response.data.expiresAt,
+        refreshExpiresAt: response.data.refreshExpiresAt
+      };
+      TokenStorage.saveTokens(tokens);
+      this.log("Login successful, tokens saved");
+      this.config.onLoginSuccess?.(tokens);
+      return {
+        success: true,
+        tokens
+      };
+    } catch (error) {
+      this.log("Login error:", error);
+      return {
+        success: false,
+        error: error instanceof Error ? error.message : "Unknown error"
+      };
+    }
+  }
+  /**
+   * Logout con limpieza de tokens
+   */
+  async logout() {
+    try {
+      this.log("Logging out...");
+      await import_crudify_browser2.default.logout();
+      TokenStorage.clearTokens();
+      this.log("Logout successful");
+      this.config.onLogout?.();
+    } catch (error) {
+      this.log("Logout error:", error);
+      TokenStorage.clearTokens();
+    }
+  }
+  /**
+   * Restaurar sesión desde storage
+   */
+  async restoreSession() {
+    try {
+      this.log("Attempting to restore session...");
+      const savedTokens = TokenStorage.getTokens();
+      if (!savedTokens) {
+        this.log("No valid tokens found in storage");
+        return false;
+      }
+      import_crudify_browser2.default.setTokens({
+        accessToken: savedTokens.accessToken,
+        refreshToken: savedTokens.refreshToken,
+        expiresAt: savedTokens.expiresAt,
+        refreshExpiresAt: savedTokens.refreshExpiresAt
+      });
+      this.log("Session restored successfully");
+      this.config.onSessionRestored?.(savedTokens);
+      return true;
+    } catch (error) {
+      this.log("Session restore error:", error);
+      TokenStorage.clearTokens();
+      return false;
+    }
+  }
+  /**
+   * Verificar si el usuario está autenticado
+   */
+  isAuthenticated() {
+    return import_crudify_browser2.default.isLogin() || TokenStorage.hasValidTokens();
+  }
+  /**
+   * Obtener información de tokens actuales
+   */
+  getTokenInfo() {
+    const crudifyTokens = import_crudify_browser2.default.getTokenData();
+    const storageInfo = TokenStorage.getExpirationInfo();
+    return {
+      isLoggedIn: this.isAuthenticated(),
+      crudifyTokens,
+      storageInfo,
+      hasValidTokens: TokenStorage.hasValidTokens()
+    };
+  }
+  /**
+   * Refrescar tokens manualmente
+   */
+  async refreshTokens() {
+    try {
+      this.log("Manually refreshing tokens...");
+      const response = await import_crudify_browser2.default.refreshAccessToken();
+      if (!response.success) {
+        this.log("Token refresh failed:", response.errors);
+        TokenStorage.clearTokens();
+        this.config.onSessionExpired?.();
+        return false;
+      }
+      const newTokens = {
+        accessToken: response.data.token,
+        refreshToken: response.data.refreshToken,
+        expiresAt: response.data.expiresAt,
+        refreshExpiresAt: response.data.refreshExpiresAt
+      };
+      TokenStorage.saveTokens(newTokens);
+      this.log("Tokens refreshed and saved successfully");
+      return true;
+    } catch (error) {
+      this.log("Token refresh error:", error);
+      TokenStorage.clearTokens();
+      this.config.onSessionExpired?.();
+      return false;
+    }
+  }
+  /**
+   * Configurar interceptor de respuesta para manejo automático de errores
+   */
+  setupResponseInterceptor() {
+    import_crudify_browser2.default.setResponseInterceptor(async (response) => {
+      if (response.errors) {
+        const hasAuthError = response.errors.some(
+          (error) => error.message?.includes("Unauthorized") || error.message?.includes("Token") || error.extensions?.code === "UNAUTHENTICATED"
+        );
+        if (hasAuthError && TokenStorage.hasValidTokens()) {
+          this.log("Auth error detected, attempting token refresh...");
+          const refreshSuccess = await this.refreshTokens();
+          if (!refreshSuccess) {
+            this.log("Session expired, triggering callback");
+            this.config.onSessionExpired?.();
           }
-        ),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "h6", children: displayData.fullName || displayData.username || displayData.email }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "body2", color: "text.secondary", children: displayData.role || "Usuario" }),
-          displayData.isActive !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-            import_material7.Chip,
-            {
-              label: displayData.isActive ? "Activo" : "Inactivo",
-              color: displayData.isActive ? "success" : "error",
-              size: "small",
-              sx: { mt: 0.5 }
-            }
-          )
-        ] })
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Box, { display: "grid", gridTemplateColumns: "repeat(auto-fit, minmax(250px, 1fr))", gap: 2, children: basicFields.map(
-        ({ key, label, icon }) => displayData[key] ? /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { display: "flex", alignItems: "center", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Box, { sx: { mr: 1, color: "text.secondary" }, children: icon }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "caption", color: "text.secondary", children: label }),
-            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "body2", children: renderFieldValue(key, displayData[key]) })
-          ] })
-        ] }, key) : null
-      ) }),
-      displayData.permissions && Array.isArray(displayData.permissions) && displayData.permissions.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { mt: 2, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "caption", color: "text.secondary", display: "block", children: "Permisos" }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { display: "flex", flexWrap: "wrap", gap: 0.5, mt: 0.5, children: [
-          displayData.permissions.slice(0, 5).map((permission, index) => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Chip, { label: permission, size: "small", variant: "outlined" }, index)),
-          displayData.permissions.length > 5 && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Chip, { label: `+${displayData.permissions.length - 5} m\xE1s`, size: "small" })
-        ] })
-      ] })
-    ] }) }),
-    showExtendedData && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Card, { children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.CardContent, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", mb: 2, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Typography, { variant: "h6", display: "flex", alignItems: "center", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.Info, { sx: { mr: 1 } }),
-          "Informaci\xF3n Detallada"
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Chip, { label: `${totalFields} campos totales`, size: "small" })
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.List, { dense: true, children: [
-        extendedFields.map(({ key, label }) => displayData[key] !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.ListItem, { divider: true, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.ListItemIcon, { children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.Schedule, { fontSize: "small" }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-            import_material7.ListItemText,
-            {
-              primary: label,
-              secondary: key.includes("At") || key.includes("Login") ? formatDate(displayData[key]) : renderFieldValue(key, displayData[key])
-            }
-          )
-        ] }, key)),
-        customFields.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Divider, { sx: { my: 1 } }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.ListItem, { children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-            import_material7.ListItemText,
-            {
-              primary: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", children: [
-                /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Typography, { variant: "subtitle2", children: [
-                  "Campos Personalizados (",
-                  customFields.length,
-                  ")"
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.IconButton, { size: "small", onClick: () => setShowAllFields(!showAllFields), children: showAllFields ? /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.ExpandLess, {}) : /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_icons_material.ExpandMore, {}) })
-              ] })
-            }
-          ) }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Collapse, { in: showAllFields, children: customFields.map(({ key, label }) => /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.ListItem, { sx: { pl: 4 }, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
-            import_material7.ListItemText,
-            {
-              primary: label,
-              secondary: renderFieldValue(key, displayData[key])
-            }
-          ) }, key)) })
-        ] })
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Box, { mt: 2, display: "flex", justifyContent: "space-between", alignItems: "center", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_material7.Typography, { variant: "caption", color: "text.secondary", children: [
-          "\xDAltima actualizaci\xF3n: ",
-          formatDate(displayData.updatedAt)
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.IconButton, { size: "small", onClick: refreshProfile, disabled: loading, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material7.Typography, { variant: "caption", children: "Actualizar" }) })
-      ] })
-    ] }) })
-  ] });
-};
-var UserProfileDisplay_default = UserProfileDisplay;
-
-// src/components/PublicPolicies/Policies.tsx
-var import_react14 = require("react");
-var import_react_i18next3 = require("react-i18next");
-var import_material10 = require("@mui/material");
-var import_icons_material4 = require("@mui/icons-material");
-
-// src/components/PublicPolicies/PolicyItem/PolicyItem.tsx
-var import_react13 = require("react");
-var import_react_i18next2 = require("react-i18next");
-var import_material9 = require("@mui/material");
-var import_icons_material3 = require("@mui/icons-material");
-
-// src/components/PublicPolicies/FieldSelector/FieldSelector.tsx
-var import_react12 = require("react");
-var import_react_i18next = require("react-i18next");
-var import_material8 = require("@mui/material");
-var import_icons_material2 = require("@mui/icons-material");
-var import_jsx_runtime11 = require("react/jsx-runtime");
-var FieldSelector = ({
-  value,
-  onChange,
-  availableFields,
-  error,
-  disabled = false
-}) => {
-  const { t } = (0, import_react_i18next.useTranslation)();
-  const [mode, setMode] = (0, import_react12.useState)("custom");
-  const isUpdatingRef = (0, import_react12.useRef)(false);
-  (0, import_react12.useEffect)(() => {
-    const current = value || { allow: [], owner_allow: [], deny: [] };
-    const all = new Set(availableFields);
-    const allow = (current.allow || []).filter((f) => all.has(f));
-    const owner = (current.owner_allow || []).filter((f) => all.has(f));
-    const deny = (current.deny || []).filter((f) => all.has(f));
-    availableFields.forEach((f) => {
-      if (!allow.includes(f) && !owner.includes(f) && !deny.includes(f)) deny.push(f);
+        }
+      }
+      return response;
     });
-    const normalized = { allow, owner_allow: owner, deny };
-    if (JSON.stringify(normalized) !== JSON.stringify(current)) {
-      onChange(normalized);
+    this.log("Response interceptor configured");
+  }
+  /**
+   * Limpiar sesión completamente
+   */
+  clearSession() {
+    TokenStorage.clearTokens();
+    import_crudify_browser2.default.logout();
+    this.log("Session cleared completely");
+  }
+  // Métodos privados
+  log(message, ...args) {
+    if (this.config.enableLogging) {
+      console.log(`[SessionManager] ${message}`, ...args);
     }
-    if (allow.length === availableFields.length) setMode("all");
-    else if (deny.length === availableFields.length) setMode("none");
-    else setMode("custom");
-  }, [availableFields, value]);
-  const setAllAllow = () => {
-    isUpdatingRef.current = true;
-    onChange({ allow: [...availableFields], owner_allow: [], deny: [] });
-    setMode("all");
-    setTimeout(() => {
-      isUpdatingRef.current = false;
-    }, 0);
-  };
-  const setAllDeny = () => {
-    isUpdatingRef.current = true;
-    onChange({ allow: [], owner_allow: [], deny: [...availableFields] });
-    setMode("none");
-    setTimeout(() => {
-      isUpdatingRef.current = false;
-    }, 0);
-  };
-  const getFieldState = (fieldName) => {
-    if (value?.allow?.includes(fieldName)) return "allow";
-    if (value?.owner_allow?.includes(fieldName)) return "owner_allow";
-    return "deny";
-  };
-  const setFieldState = (fieldName, state) => {
-    isUpdatingRef.current = true;
-    const allow = new Set(value?.allow || []);
-    const owner = new Set(value?.owner_allow || []);
-    const deny = new Set(value?.deny || []);
-    allow.delete(fieldName);
-    owner.delete(fieldName);
-    deny.delete(fieldName);
-    if (state === "allow") allow.add(fieldName);
-    if (state === "owner_allow") owner.add(fieldName);
-    if (state === "deny") deny.add(fieldName);
-    onChange({ allow: Array.from(allow), owner_allow: Array.from(owner), deny: Array.from(deny) });
-    setMode("custom");
-    setTimeout(() => {
-      isUpdatingRef.current = false;
-    }, 0);
-  };
-  if (availableFields.length === 0) {
-    return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material8.Box, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 1 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { fontStyle: "italic" }, children: t("modules.form.publicPolicies.fields.conditions.noFieldsAvailable") }),
-      error && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.FormHelperText, { error: true, sx: { mt: 1 }, children: error })
-    ] });
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material8.Box, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material8.Stack, { direction: "row", spacing: 1, sx: { mb: 3 }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-        import_material8.Button,
-        {
-          variant: mode === "all" ? "contained" : "outlined",
-          startIcon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material2.SelectAll, {}),
-          onClick: setAllAllow,
-          disabled,
-          size: "small",
-          sx: {
-            minWidth: 120,
-            ...mode === "all" && {
-              backgroundColor: "#16a34a",
-              "&:hover": { backgroundColor: "#15803d" }
-            }
-          },
-          children: t("modules.form.publicPolicies.fields.conditions.allFields")
-        }
-      ),
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-        import_material8.Button,
-        {
-          variant: mode === "none" ? "contained" : "outlined",
-          startIcon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material2.ClearAll, {}),
-          onClick: setAllDeny,
-          disabled,
-          size: "small",
-          sx: {
-            minWidth: 120,
-            ...mode === "none" && {
-              backgroundColor: "#cf222e",
-              "&:hover": { backgroundColor: "#bc1f2c" }
-            }
-          },
-          children: t("modules.form.publicPolicies.fields.conditions.noFields")
-        }
-      )
-    ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material8.Box, { sx: { p: 2, border: "1px solid #d1d9e0", borderRadius: 1, backgroundColor: "#f6f8fa" }, children: [
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.help") }),
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.Stack, { spacing: 1, children: availableFields.map((fieldName) => {
-        const fieldState = getFieldState(fieldName);
-        return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material8.Stack, { direction: "row", spacing: 1, alignItems: "center", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.Typography, { variant: "body2", sx: { minWidth: 100, fontFamily: "monospace" }, children: fieldName }),
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material8.ToggleButtonGroup, { value: fieldState, exclusive: true, size: "small", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-              import_material8.ToggleButton,
-              {
-                value: "allow",
-                onClick: () => setFieldState(fieldName, "allow"),
-                disabled,
-                sx: {
-                  px: 2,
-                  color: fieldState === "allow" ? "#ffffff" : "#6b7280",
-                  backgroundColor: fieldState === "allow" ? "#16a34a" : "#f3f4f6",
-                  borderColor: fieldState === "allow" ? "#16a34a" : "#d1d5db",
-                  "&:hover": {
-                    backgroundColor: fieldState === "allow" ? "#15803d" : "#e5e7eb",
-                    borderColor: fieldState === "allow" ? "#15803d" : "#9ca3af"
-                  },
-                  "&.Mui-selected": {
-                    backgroundColor: "#16a34a",
-                    color: "#ffffff",
-                    "&:hover": {
-                      backgroundColor: "#15803d"
-                    }
-                  }
-                },
-                children: [
-                  /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material2.CheckCircle, { sx: { fontSize: 16, mr: 0.5 } }),
-                  t("modules.form.publicPolicies.fields.conditions.states.allow")
-                ]
-              }
-            ),
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-              import_material8.ToggleButton,
-              {
-                value: "owner_allow",
-                onClick: () => setFieldState(fieldName, "owner_allow"),
-                disabled,
-                sx: {
-                  px: 2,
-                  color: fieldState === "owner_allow" ? "#ffffff" : "#6b7280",
-                  backgroundColor: fieldState === "owner_allow" ? "#0ea5e9" : "#f3f4f6",
-                  borderColor: fieldState === "owner_allow" ? "#0ea5e9" : "#d1d5db",
-                  "&:hover": {
-                    backgroundColor: fieldState === "owner_allow" ? "#0284c7" : "#e5e7eb",
-                    borderColor: fieldState === "owner_allow" ? "#0284c7" : "#9ca3af"
-                  },
-                  "&.Mui-selected": {
-                    backgroundColor: "#0ea5e9",
-                    color: "#ffffff",
-                    "&:hover": {
-                      backgroundColor: "#0284c7"
-                    }
-                  }
-                },
-                children: t("modules.form.publicPolicies.fields.conditions.states.ownerAllow")
-              }
-            ),
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-              import_material8.ToggleButton,
-              {
-                value: "deny",
-                onClick: () => setFieldState(fieldName, "deny"),
-                disabled,
-                sx: {
-                  px: 2,
-                  color: fieldState === "deny" ? "#ffffff" : "#6b7280",
-                  backgroundColor: fieldState === "deny" ? "#dc2626" : "#f3f4f6",
-                  borderColor: fieldState === "deny" ? "#dc2626" : "#d1d5db",
-                  "&:hover": {
-                    backgroundColor: fieldState === "deny" ? "#b91c1c" : "#e5e7eb",
-                    borderColor: fieldState === "deny" ? "#b91c1c" : "#9ca3af"
-                  },
-                  "&.Mui-selected": {
-                    backgroundColor: "#dc2626",
-                    color: "#ffffff",
-                    "&:hover": {
-                      backgroundColor: "#b91c1c"
-                    }
-                  }
-                },
-                children: [
-                  /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material2.Cancel, { sx: { fontSize: 16, mr: 0.5 } }),
-                  t("modules.form.publicPolicies.fields.conditions.states.deny")
-                ]
-              }
-            )
-          ] })
-        ] }, fieldName);
-      }) })
-    ] }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material8.FormHelperText, { error: true, sx: { mt: 1 }, children: error })
-  ] });
+  formatError(errors) {
+    if (!errors) return "Unknown error";
+    if (typeof errors === "string") return errors;
+    if (typeof errors === "object") {
+      const errorMessages = Object.values(errors).flat();
+      return errorMessages.join(", ");
+    }
+    return "Authentication failed";
+  }
 };
-var FieldSelector_default = FieldSelector;
-
-// src/components/PublicPolicies/constants.ts
-var POLICY_ACTIONS = ["create", "read", "update", "delete"];
-var PREFERRED_POLICY_ORDER = [
-  "create",
-  "read",
-  "update",
-  "delete"
-];
 
-// src/components/PublicPolicies/PolicyItem/PolicyItem.tsx
-var import_jsx_runtime12 = require("react/jsx-runtime");
-var PolicyItem = (0, import_react13.forwardRef)(({
-  policy,
-  onChange,
-  onRemove,
-  availableFields,
-  isSubmitting = false,
-  usedActions,
-  error
-}, ref) => {
-  const { t } = (0, import_react_i18next2.useTranslation)();
-  const takenActions = new Set(Array.from(usedActions || []));
-  takenActions.delete(policy.action);
-  const actionOptions = POLICY_ACTIONS.map((a) => ({
-    value: a,
-    label: t(`modules.form.publicPolicies.fields.action.options.${a}`)
-  }));
-  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
-    import_material9.Paper,
-    {
-      ref,
-      sx: {
-        p: 3,
-        border: "1px solid #d1d9e0",
-        borderRadius: 2,
-        position: "relative",
-        backgroundColor: "#ffffff"
-      },
-      children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Box, { sx: { display: "flex", justifyContent: "space-between", alignItems: "flex-start", mb: 3 }, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-            import_material9.Typography,
-            {
-              variant: "subtitle1",
-              sx: {
-                fontWeight: 600,
-                color: "#111418",
-                fontSize: "1rem"
-              },
-              children: t("modules.form.publicPolicies.policyTitle")
-            }
-          ),
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-            import_material9.IconButton,
-            {
-              onClick: onRemove,
-              size: "small",
-              disabled: isSubmitting,
-              "aria-label": t("modules.form.publicPolicies.removePolicy"),
-              sx: {
-                color: "#656d76",
-                "&:hover": {
-                  color: "#cf222e",
-                  backgroundColor: "rgba(207, 34, 46, 0.1)"
-                }
-              },
-              children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material3.Delete, {})
-            }
-          )
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Stack, { spacing: 3, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.Stack, { direction: { xs: "column", md: "row" }, spacing: 2, children: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.Box, { sx: { flex: 1, minWidth: 200 }, children: /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.FormControl, { fullWidth: true, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.InputLabel, { children: t("modules.form.publicPolicies.fields.action.label") }),
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-              import_material9.Select,
-              {
-                value: policy.action,
-                label: t("modules.form.publicPolicies.fields.action.label"),
-                disabled: isSubmitting,
-                onChange: (e) => {
-                  const newAction = e.target.value;
-                  const next = { ...policy, action: newAction };
-                  if (newAction === "delete") {
-                    next.permission = "deny";
-                    delete next.fields;
-                  } else {
-                    next.fields = { allow: [], owner_allow: [], deny: availableFields };
-                    delete next.permission;
-                  }
-                  onChange(next);
-                },
-                sx: {
-                  backgroundColor: "#ffffff",
-                  "&:hover .MuiOutlinedInput-notchedOutline": {
-                    borderColor: "#8c959f"
-                  },
-                  "&.Mui-focused .MuiOutlinedInput-notchedOutline": {
-                    borderColor: "#0969da",
-                    borderWidth: 2
-                  }
-                },
-                children: actionOptions.map((option) => {
-                  const disabledOption = takenActions.has(option.value);
-                  return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.MenuItem, { value: option.value, disabled: disabledOption, children: option.label }, option.value);
-                })
-              }
-            ),
-            error && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.FormHelperText, { error: true, children: error })
-          ] }) }) }),
-          policy.action === "delete" ? /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Box, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Stack, { direction: "row", spacing: 1, sx: { mb: 3 }, children: [
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-                import_material9.Button,
-                {
-                  variant: policy.permission === "*" ? "contained" : "outlined",
-                  startIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material3.SelectAll, {}),
-                  onClick: () => onChange({ ...policy, permission: "*" }),
-                  disabled: isSubmitting,
-                  size: "small",
-                  sx: {
-                    minWidth: 140,
-                    whiteSpace: "nowrap",
-                    ...policy.permission === "*" && {
-                      backgroundColor: "#16a34a",
-                      "&:hover": { backgroundColor: "#15803d" }
-                    }
-                  },
-                  children: t("modules.form.publicPolicies.fields.conditions.allFields")
-                }
-              ),
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-                import_material9.Button,
-                {
-                  variant: policy.permission === "owner" ? "contained" : "outlined",
-                  onClick: () => onChange({ ...policy, permission: "owner" }),
-                  disabled: isSubmitting,
-                  size: "small",
-                  sx: {
-                    minWidth: 140,
-                    whiteSpace: "nowrap",
-                    ...policy.permission === "owner" && {
-                      backgroundColor: "#0ea5e9",
-                      "&:hover": { backgroundColor: "#0284c7" }
-                    }
-                  },
-                  children: t("modules.form.publicPolicies.fields.conditions.states.ownerAllow")
-                }
-              ),
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-                import_material9.Button,
-                {
-                  variant: policy.permission === "deny" ? "contained" : "outlined",
-                  startIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material3.ClearAll, {}),
-                  onClick: () => onChange({ ...policy, permission: "deny" }),
-                  disabled: isSubmitting,
-                  size: "small",
-                  sx: {
-                    minWidth: 140,
-                    whiteSpace: "nowrap",
-                    ...policy.permission === "deny" && {
-                      backgroundColor: "#cf222e",
-                      "&:hover": { backgroundColor: "#bc1f2c" }
-                    }
-                  },
-                  children: t("modules.form.publicPolicies.fields.conditions.noFields")
-                }
-              )
-            ] })
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-            FieldSelector_default,
-            {
-              value: policy.fields || { allow: [], owner_allow: [], deny: [] },
-              onChange: (nextFields) => onChange({ ...policy, fields: nextFields }),
-              availableFields,
-              disabled: isSubmitting
-            }
-          ),
-          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.Paper, { variant: "outlined", sx: { p: 2, backgroundColor: "#f9fafb" }, children: policy.action === "delete" ? /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Box, { component: "span", sx: {
-              color: policy.permission === "*" ? "#16a34a" : policy.permission === "owner" ? "#0ea5e9" : "#dc2626"
-            }, children: [
-              t("modules.form.publicPolicies.fields.conditions.states.allow"),
-              ":"
-            ] }),
-            " ",
-            policy.permission || "-"
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Stack, { spacing: 0.5, divider: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material9.Divider, { sx: { borderColor: "#e5e7eb" } }), children: [
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Box, { component: "span", sx: { color: "#16a34a" }, children: [
-                t("modules.form.publicPolicies.fields.conditions.states.allow"),
-                ":"
-              ] }),
-              " ",
-              (policy?.fields?.allow || []).join(", ") || "-"
-            ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Box, { component: "span", sx: { color: "#0ea5e9" }, children: [
-                t("modules.form.publicPolicies.fields.conditions.states.ownerAllow"),
-                ":"
-              ] }),
-              " ",
-              (policy?.fields?.owner_allow || []).join(", ") || "-"
-            ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
-              /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material9.Box, { component: "span", sx: { color: "#dc2626" }, children: [
-                t("modules.form.publicPolicies.fields.conditions.states.deny"),
-                ":"
-              ] }),
-              " ",
-              (policy?.fields?.deny || []).join(", ") || "-"
-            ] })
-          ] }) })
-        ] })
-      ]
-    }
-  );
-});
-var PolicyItem_default = PolicyItem;
-
-// src/components/PublicPolicies/Policies.tsx
-var import_jsx_runtime13 = require("react/jsx-runtime");
-var generateId = () => {
-  const c = globalThis?.crypto;
-  if (c && typeof c.randomUUID === "function") return c.randomUUID();
-  return `${Date.now()}-${Math.random().toString(16).slice(2)}`;
-};
-var Policies = ({
-  policies,
-  onChange,
-  availableFields,
-  errors,
-  isSubmitting = false
-}) => {
-  const { t } = (0, import_react_i18next3.useTranslation)();
-  const policyRefs = (0, import_react14.useRef)({});
-  const takenActions = new Set((policies || []).map((p) => p.action).filter(Boolean));
-  const remainingActions = PREFERRED_POLICY_ORDER.filter((a) => !takenActions.has(a));
-  const canAddPolicy = remainingActions.length > 0;
-  const addPolicy = () => {
-    const defaultAction = remainingActions[0] || "create";
-    const newPolicy = {
-      id: generateId(),
-      action: defaultAction
-    };
-    if (defaultAction === "delete") {
-      newPolicy.permission = "deny";
-    } else {
-      newPolicy.fields = {
-        allow: [],
-        owner_allow: [],
-        deny: availableFields
+// src/hooks/useSession.ts
+function useSession(options = {}) {
+  const [state, setState] = (0, import_react9.useState)({
+    isAuthenticated: false,
+    isLoading: true,
+    isInitialized: false,
+    tokens: null,
+    error: null
+  });
+  const sessionManager = SessionManager.getInstance();
+  const initialize = (0, import_react9.useCallback)(async () => {
+    try {
+      setState((prev) => ({ ...prev, isLoading: true, error: null }));
+      const config = {
+        autoRestore: options.autoRestore ?? true,
+        enableLogging: options.enableLogging ?? false,
+        onSessionExpired: () => {
+          setState((prev) => ({
+            ...prev,
+            isAuthenticated: false,
+            tokens: null,
+            error: "Session expired"
+          }));
+          options.onSessionExpired?.();
+        },
+        onSessionRestored: (tokens) => {
+          setState((prev) => ({
+            ...prev,
+            isAuthenticated: true,
+            tokens,
+            error: null
+          }));
+          options.onSessionRestored?.(tokens);
+        },
+        onLoginSuccess: (tokens) => {
+          setState((prev) => ({
+            ...prev,
+            isAuthenticated: true,
+            tokens,
+            error: null
+          }));
+        },
+        onLogout: () => {
+          setState((prev) => ({
+            ...prev,
+            isAuthenticated: false,
+            tokens: null,
+            error: null
+          }));
+        }
       };
+      await sessionManager.initialize(config);
+      sessionManager.setupResponseInterceptor();
+      const isAuth = sessionManager.isAuthenticated();
+      const tokenInfo = sessionManager.getTokenInfo();
+      setState((prev) => ({
+        ...prev,
+        isAuthenticated: isAuth,
+        isInitialized: true,
+        isLoading: false,
+        tokens: tokenInfo.crudifyTokens.accessToken ? {
+          accessToken: tokenInfo.crudifyTokens.accessToken,
+          refreshToken: tokenInfo.crudifyTokens.refreshToken,
+          expiresAt: tokenInfo.crudifyTokens.expiresAt,
+          refreshExpiresAt: tokenInfo.crudifyTokens.refreshExpiresAt
+        } : null
+      }));
+    } catch (error) {
+      setState((prev) => ({
+        ...prev,
+        isLoading: false,
+        isInitialized: true,
+        error: error instanceof Error ? error.message : "Initialization failed"
+      }));
     }
-    const next = [...policies || [], newPolicy];
-    onChange(next);
-    setTimeout(() => {
-      const newIndex = next.length - 1;
-      const el = policyRefs.current[newIndex];
-      if (el) {
-        el.scrollIntoView({ behavior: "smooth", block: "center" });
+  }, [options.autoRestore, options.enableLogging, options.onSessionExpired, options.onSessionRestored]);
+  const login = (0, import_react9.useCallback)(async (email, password) => {
+    setState((prev) => ({ ...prev, isLoading: true, error: null }));
+    try {
+      const result = await sessionManager.login(email, password);
+      if (result.success && result.tokens) {
+        setState((prev) => ({
+          ...prev,
+          isAuthenticated: true,
+          tokens: result.tokens,
+          isLoading: false,
+          error: null
+        }));
+      } else {
+        setState((prev) => ({
+          ...prev,
+          isAuthenticated: false,
+          tokens: null,
+          isLoading: false,
+          error: result.error || "Login failed"
+        }));
       }
-    }, 100);
-  };
-  const removePolicy = (index) => {
-    const next = [...policies];
-    next.splice(index, 1);
-    onChange(next);
-  };
-  const arrayError = (() => {
-    if (!errors) return null;
-    if (typeof errors === "string") return errors;
-    const msg = errors._error;
-    return typeof msg === "string" ? msg : null;
-  })();
-  const usedActions = new Set((policies || []).map((p) => p.action));
-  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_jsx_runtime13.Fragment, { children: [
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material10.Divider, { sx: { borderColor: "#e0e4e7" } }),
-    /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material10.Box, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material10.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", mb: 3, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material10.Box, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-          import_material10.Typography,
-          {
-            variant: "h6",
-            sx: {
-              fontWeight: 600,
-              color: "#111418",
-              mb: 1
-            },
-            children: t("modules.form.publicPolicies.title")
-          }
-        ),
-        /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-          import_material10.Typography,
-          {
-            variant: "body2",
-            color: "text.secondary",
-            sx: { fontSize: "0.875rem" },
-            children: t("modules.form.publicPolicies.description")
-          }
-        )
-      ] }) }),
-      arrayError && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material10.Alert, { severity: "error", sx: { mb: 3 }, children: arrayError }),
-      /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material10.Stack, { spacing: 3, children: [
-        (policies || []).length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material10.Alert, { severity: "info", children: t("modules.form.publicPolicies.noPolicies") }) : policies.map((policy, index) => /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-          PolicyItem_default,
-          {
-            ref: (el) => {
-              policyRefs.current[index] = el;
-            },
-            policy,
-            onChange: (nextPolicy) => {
-              const next = [...policies];
-              next[index] = nextPolicy;
-              onChange(next);
-            },
-            onRemove: () => removePolicy(index),
-            availableFields,
-            isSubmitting,
-            usedActions,
-            error: typeof errors === "object" && errors && policy.id in errors ? errors[policy.id] : void 0
-          },
-          policy.id
-        )),
-        canAddPolicy && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material10.Box, { children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-          import_material10.Button,
-          {
-            type: "button",
-            variant: "outlined",
-            startIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material4.Add, {}),
-            onClick: addPolicy,
-            disabled: isSubmitting,
-            sx: {
-              borderColor: "#d0d7de",
-              color: "#656d76",
-              "&:hover": {
-                borderColor: "#8c959f",
-                backgroundColor: "transparent"
-              }
-            },
-            children: t("modules.form.publicPolicies.addPolicy")
-          }
-        ) })
-      ] })
-    ] })
-  ] });
-};
-var Policies_default = Policies;
-
-// src/core/SessionManager.ts
-var import_crudify_browser4 = __toESM(require("@nocios/crudify-browser"));
-
-// src/utils/tokenStorage.ts
-var import_crypto_js = __toESM(require("crypto-js"));
-var _TokenStorage = class _TokenStorage {
-  /**
-   * Configurar tipo de almacenamiento
-   */
-  static setStorageType(type) {
-    _TokenStorage.storageType = type;
-  }
-  /**
-   * Verificar si el storage está disponible
-   */
-  static isStorageAvailable(type) {
-    try {
-      const storage = window[type];
-      const testKey = "__storage_test__";
-      storage.setItem(testKey, "test");
-      storage.removeItem(testKey);
-      return true;
-    } catch {
-      return false;
-    }
-  }
-  /**
-   * Obtener instancia de storage
-   */
-  static getStorage() {
-    if (_TokenStorage.storageType === "none") return null;
-    if (!_TokenStorage.isStorageAvailable(_TokenStorage.storageType)) {
-      console.warn(`Crudify: ${_TokenStorage.storageType} not available, tokens won't persist`);
-      return null;
-    }
-    return window[_TokenStorage.storageType];
-  }
-  /**
-   * Encriptar datos sensibles
-   */
-  static encrypt(data) {
-    try {
-      return import_crypto_js.default.AES.encrypt(data, _TokenStorage.ENCRYPTION_KEY).toString();
-    } catch (error) {
-      console.error("Crudify: Encryption failed", error);
-      return data;
-    }
-  }
-  /**
-   * Desencriptar datos
-   */
-  static decrypt(encryptedData) {
-    try {
-      const bytes = import_crypto_js.default.AES.decrypt(encryptedData, _TokenStorage.ENCRYPTION_KEY);
-      const decrypted = bytes.toString(import_crypto_js.default.enc.Utf8);
-      return decrypted || encryptedData;
+      return result;
     } catch (error) {
-      console.error("Crudify: Decryption failed", error);
-      return encryptedData;
+      const errorMsg = error instanceof Error ? error.message : "Login failed";
+      setState((prev) => ({
+        ...prev,
+        isAuthenticated: false,
+        tokens: null,
+        isLoading: false,
+        error: errorMsg
+      }));
+      return {
+        success: false,
+        error: errorMsg
+      };
     }
-  }
-  /**
-   * Guardar tokens de forma segura
-   */
-  static saveTokens(tokens) {
-    const storage = _TokenStorage.getStorage();
-    if (!storage) return;
+  }, [sessionManager]);
+  const logout = (0, import_react9.useCallback)(async () => {
+    setState((prev) => ({ ...prev, isLoading: true }));
     try {
-      const tokenData = {
-        accessToken: tokens.accessToken,
-        refreshToken: tokens.refreshToken,
-        expiresAt: tokens.expiresAt,
-        refreshExpiresAt: tokens.refreshExpiresAt,
-        savedAt: Date.now()
-      };
-      const encrypted = _TokenStorage.encrypt(JSON.stringify(tokenData));
-      storage.setItem(_TokenStorage.TOKEN_KEY, encrypted);
-      console.debug("Crudify: Tokens saved successfully");
+      await sessionManager.logout();
+      setState((prev) => ({
+        ...prev,
+        isAuthenticated: false,
+        tokens: null,
+        isLoading: false,
+        error: null
+      }));
     } catch (error) {
-      console.error("Crudify: Failed to save tokens", error);
+      setState((prev) => ({
+        ...prev,
+        isAuthenticated: false,
+        tokens: null,
+        isLoading: false,
+        error: error instanceof Error ? error.message : "Logout error"
+      }));
     }
-  }
-  /**
-   * Obtener tokens guardados
-   */
-  static getTokens() {
-    const storage = _TokenStorage.getStorage();
-    if (!storage) return null;
+  }, [sessionManager]);
+  const refreshTokens = (0, import_react9.useCallback)(async () => {
     try {
-      const encrypted = storage.getItem(_TokenStorage.TOKEN_KEY);
-      if (!encrypted) return null;
-      const decrypted = _TokenStorage.decrypt(encrypted);
-      const tokenData = JSON.parse(decrypted);
-      if (!tokenData.accessToken || !tokenData.refreshToken || !tokenData.expiresAt || !tokenData.refreshExpiresAt) {
-        console.warn("Crudify: Incomplete token data found, clearing storage");
-        _TokenStorage.clearTokens();
-        return null;
-      }
-      if (Date.now() >= tokenData.refreshExpiresAt) {
-        console.info("Crudify: Refresh token expired, clearing storage");
-        _TokenStorage.clearTokens();
-        return null;
+      const success = await sessionManager.refreshTokens();
+      if (success) {
+        const tokenInfo = sessionManager.getTokenInfo();
+        setState((prev) => ({
+          ...prev,
+          tokens: tokenInfo.crudifyTokens.accessToken ? {
+            accessToken: tokenInfo.crudifyTokens.accessToken,
+            refreshToken: tokenInfo.crudifyTokens.refreshToken,
+            expiresAt: tokenInfo.crudifyTokens.expiresAt,
+            refreshExpiresAt: tokenInfo.crudifyTokens.refreshExpiresAt
+          } : null,
+          error: null
+        }));
+      } else {
+        setState((prev) => ({
+          ...prev,
+          isAuthenticated: false,
+          tokens: null,
+          error: "Token refresh failed"
+        }));
       }
-      return {
-        accessToken: tokenData.accessToken,
-        refreshToken: tokenData.refreshToken,
-        expiresAt: tokenData.expiresAt,
-        refreshExpiresAt: tokenData.refreshExpiresAt
-      };
+      return success;
     } catch (error) {
-      console.error("Crudify: Failed to retrieve tokens", error);
-      _TokenStorage.clearTokens();
+      setState((prev) => ({
+        ...prev,
+        isAuthenticated: false,
+        tokens: null,
+        error: error instanceof Error ? error.message : "Token refresh failed"
+      }));
+      return false;
+    }
+  }, [sessionManager]);
+  const clearError = (0, import_react9.useCallback)(() => {
+    setState((prev) => ({ ...prev, error: null }));
+  }, []);
+  const getTokenInfo = (0, import_react9.useCallback)(() => {
+    return sessionManager.getTokenInfo();
+  }, [sessionManager]);
+  (0, import_react9.useEffect)(() => {
+    initialize();
+  }, [initialize]);
+  return {
+    // Estado
+    ...state,
+    // Acciones
+    login,
+    logout,
+    refreshTokens,
+    clearError,
+    getTokenInfo,
+    // Utilidades
+    isExpiringSoon: state.tokens ? state.tokens.expiresAt - Date.now() < 5 * 60 * 1e3 : false,
+    // 5 minutos
+    expiresIn: state.tokens ? Math.max(0, state.tokens.expiresAt - Date.now()) : 0,
+    refreshExpiresIn: state.tokens ? Math.max(0, state.tokens.refreshExpiresAt - Date.now()) : 0
+  };
+}
+
+// src/utils/jwtUtils.ts
+var decodeJwtSafely = (token) => {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+      console.warn("Invalid JWT format: token must have 3 parts");
       return null;
     }
+    const payload = parts[1];
+    const paddedPayload = payload + "=".repeat((4 - payload.length % 4) % 4);
+    const decodedPayload = JSON.parse(atob(paddedPayload));
+    return decodedPayload;
+  } catch (error) {
+    console.warn("Failed to decode JWT token:", error);
+    return null;
   }
-  /**
-   * Limpiar tokens almacenados
-   */
-  static clearTokens() {
-    const storage = _TokenStorage.getStorage();
-    if (!storage) return;
-    try {
-      storage.removeItem(_TokenStorage.TOKEN_KEY);
-      console.debug("Crudify: Tokens cleared from storage");
-    } catch (error) {
-      console.error("Crudify: Failed to clear tokens", error);
+};
+var getCurrentUserEmail = () => {
+  try {
+    let token = null;
+    token = sessionStorage.getItem("authToken");
+    console.log("\u{1F50D} getCurrentUserEmail - authToken:", token ? `${token.substring(0, 20)}...` : null);
+    if (!token) {
+      token = sessionStorage.getItem("token");
+      console.log("\u{1F50D} getCurrentUserEmail - token:", token ? `${token.substring(0, 20)}...` : null);
     }
-  }
-  /**
-   * Verificar si hay tokens válidos guardados
-   */
-  static hasValidTokens() {
-    const tokens = _TokenStorage.getTokens();
-    return tokens !== null;
-  }
-  /**
-   * Obtener información de expiración
-   */
-  static getExpirationInfo() {
-    const tokens = _TokenStorage.getTokens();
-    if (!tokens) return null;
-    const now = Date.now();
-    return {
-      accessExpired: now >= tokens.expiresAt,
-      refreshExpired: now >= tokens.refreshExpiresAt,
-      accessExpiresIn: Math.max(0, tokens.expiresAt - now),
-      refreshExpiresIn: Math.max(0, tokens.refreshExpiresAt - now)
-    };
-  }
-  /**
-   * Actualizar solo el access token (después de refresh)
-   */
-  static updateAccessToken(newAccessToken, newExpiresAt) {
-    const existingTokens = _TokenStorage.getTokens();
-    if (!existingTokens) {
-      console.warn("Crudify: Cannot update access token, no existing tokens found");
-      return;
+    if (!token) {
+      token = localStorage.getItem("authToken") || localStorage.getItem("token");
+      console.log("\u{1F50D} getCurrentUserEmail - localStorage:", token ? `${token.substring(0, 20)}...` : null);
     }
-    _TokenStorage.saveTokens({
-      ...existingTokens,
-      accessToken: newAccessToken,
-      expiresAt: newExpiresAt
-    });
+    if (!token) {
+      console.warn("\u{1F50D} getCurrentUserEmail - No token found in any storage");
+      return null;
+    }
+    const payload = decodeJwtSafely(token);
+    if (!payload) {
+      console.warn("\u{1F50D} getCurrentUserEmail - Failed to decode token");
+      return null;
+    }
+    const email = payload.email || payload["cognito:username"] || null;
+    console.log("\u{1F50D} getCurrentUserEmail - Extracted email:", email);
+    return email;
+  } catch (error) {
+    console.warn("Failed to get current user email:", error);
+    return null;
   }
 };
-_TokenStorage.TOKEN_KEY = "crudify_tokens";
-_TokenStorage.ENCRYPTION_KEY = "crudify_secure_key_v1";
-_TokenStorage.storageType = "localStorage";
-var TokenStorage = _TokenStorage;
-
-// src/core/SessionManager.ts
-var SessionManager = class _SessionManager {
-  constructor() {
-    this.config = {};
-    this.initialized = false;
-  }
-  static getInstance() {
-    if (!_SessionManager.instance) {
-      _SessionManager.instance = new _SessionManager();
-    }
-    return _SessionManager.instance;
+var isTokenExpired = (token) => {
+  try {
+    const payload = decodeJwtSafely(token);
+    if (!payload || !payload.exp) return true;
+    const currentTime = Math.floor(Date.now() / 1e3);
+    return payload.exp < currentTime;
+  } catch {
+    return true;
   }
-  /**
-   * Inicializar el SessionManager
-   */
-  async initialize(config = {}) {
-    if (this.initialized) {
-      console.warn("SessionManager: Already initialized");
-      return;
-    }
-    this.config = {
-      storageType: "localStorage",
-      autoRestore: true,
-      enableLogging: false,
-      ...config
+};
+
+// src/providers/SessionProvider.tsx
+var import_jsx_runtime9 = require("react/jsx-runtime");
+var SessionContext = (0, import_react10.createContext)(void 0);
+function SessionProvider({ children, options = {}, config: propConfig }) {
+  const sessionHook = useSession(options);
+  const resolvedConfig = (0, import_react10.useMemo)(() => {
+    let publicApiKey;
+    let env;
+    let appName;
+    let loginActions;
+    let logo;
+    let colors;
+    let configSource = "unknown";
+    if (propConfig?.publicApiKey) {
+      publicApiKey = propConfig.publicApiKey;
+      configSource = "props";
+    }
+    if (propConfig?.env) {
+      env = propConfig.env;
+    }
+    if (propConfig?.appName) {
+      appName = propConfig.appName;
+    }
+    if (propConfig?.loginActions) {
+      loginActions = propConfig.loginActions;
+    }
+    if (propConfig?.logo) {
+      logo = propConfig.logo;
+    }
+    if (propConfig?.colors) {
+      colors = propConfig.colors;
+    }
+    if (!publicApiKey) {
+      const cookieApiKey = getCookie("publicApiKey");
+      const cookieEnv = getCookie("environment");
+      const cookieAppName = getCookie("appName");
+      const cookieLoginActions = getCookie("loginActions");
+      if (cookieApiKey) {
+        publicApiKey = cookieApiKey;
+        configSource = "cookies";
+      }
+      if (cookieEnv && ["dev", "stg", "prod"].includes(cookieEnv)) {
+        env = cookieEnv;
+      }
+      if (cookieAppName) {
+        appName = cookieAppName;
+      }
+      if (cookieLoginActions) {
+        loginActions = cookieLoginActions.split(",").map((s) => s.trim()).filter(Boolean);
+      }
+    }
+    console.log("\u{1F50D} SessionProvider - Configuration Detection:");
+    console.log("   - Config source:", configSource);
+    console.log("   - PublicApiKey:", publicApiKey ? publicApiKey.substring(0, 15) + "..." : "undefined");
+    console.log("   - Environment:", env);
+    console.log("   - App name:", appName);
+    console.log("   - Login actions:", loginActions);
+    return {
+      publicApiKey,
+      env,
+      appName,
+      loginActions,
+      logo,
+      colors
     };
-    TokenStorage.setStorageType(this.config.storageType || "localStorage");
-    if (this.config.enableLogging) {
-    }
-    if (this.config.autoRestore) {
-      await this.restoreSession();
+  }, [propConfig]);
+  const sessionData = (0, import_react10.useMemo)(() => {
+    if (!sessionHook.tokens?.accessToken || !sessionHook.isAuthenticated) {
+      return null;
     }
-    this.initialized = true;
-    this.log("SessionManager initialized successfully");
-  }
-  /**
-   * Login con persistencia automática
-   */
-  async login(email, password) {
     try {
-      this.log("Attempting login...");
-      const response = await import_crudify_browser4.default.login(email, password);
-      if (!response.success) {
-        this.log("Login failed:", response.errors);
-        return {
-          success: false,
-          error: this.formatError(response.errors)
+      const decoded = decodeJwtSafely(sessionHook.tokens.accessToken);
+      if (decoded && decoded.sub && decoded.email && decoded.subscriber) {
+        const result = {
+          _id: decoded.sub,
+          email: decoded.email,
+          subscriberKey: decoded.subscriber
         };
+        Object.keys(decoded).forEach((key) => {
+          if (!["sub", "email", "subscriber"].includes(key)) {
+            result[key] = decoded[key];
+          }
+        });
+        return result;
       }
-      const tokens = {
-        accessToken: response.data.token,
-        refreshToken: response.data.refreshToken,
-        expiresAt: response.data.expiresAt,
-        refreshExpiresAt: response.data.refreshExpiresAt
-      };
-      TokenStorage.saveTokens(tokens);
-      this.log("Login successful, tokens saved");
-      this.config.onLoginSuccess?.(tokens);
-      return {
-        success: true,
-        tokens
-      };
     } catch (error) {
-      this.log("Login error:", error);
-      return {
-        success: false,
-        error: error instanceof Error ? error.message : "Unknown error"
-      };
+      console.error("Error decoding JWT token for sessionData:", error);
     }
+    return null;
+  }, [sessionHook.tokens?.accessToken, sessionHook.isAuthenticated]);
+  const contextValue = {
+    ...sessionHook,
+    sessionData,
+    config: resolvedConfig
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(SessionContext.Provider, { value: contextValue, children });
+}
+function useSessionContext() {
+  const context = (0, import_react10.useContext)(SessionContext);
+  if (context === void 0) {
+    throw new Error("useSessionContext must be used within a SessionProvider");
   }
-  /**
-   * Logout con limpieza de tokens
-   */
-  async logout() {
-    try {
-      this.log("Logging out...");
-      await import_crudify_browser4.default.logout();
-      TokenStorage.clearTokens();
-      this.log("Logout successful");
-      this.config.onLogout?.();
-    } catch (error) {
-      this.log("Logout error:", error);
-      TokenStorage.clearTokens();
-    }
+  return context;
+}
+function ProtectedRoute({ children, fallback = /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { children: "Please log in to access this content" }), redirectTo }) {
+  const { isAuthenticated, isLoading, isInitialized } = useSessionContext();
+  if (!isInitialized || isLoading) {
+    return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { children: "Loading..." });
   }
-  /**
-   * Restaurar sesión desde storage
-   */
-  async restoreSession() {
-    try {
-      this.log("Attempting to restore session...");
-      const savedTokens = TokenStorage.getTokens();
-      if (!savedTokens) {
-        this.log("No valid tokens found in storage");
-        return false;
-      }
-      import_crudify_browser4.default.setTokens({
-        accessToken: savedTokens.accessToken,
-        refreshToken: savedTokens.refreshToken,
-        expiresAt: savedTokens.expiresAt,
-        refreshExpiresAt: savedTokens.refreshExpiresAt
-      });
-      this.log("Session restored successfully");
-      this.config.onSessionRestored?.(savedTokens);
-      return true;
-    } catch (error) {
-      this.log("Session restore error:", error);
-      TokenStorage.clearTokens();
-      return false;
+  if (!isAuthenticated) {
+    if (redirectTo) {
+      redirectTo();
+      return null;
     }
+    return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(import_jsx_runtime9.Fragment, { children: fallback });
   }
-  /**
-   * Verificar si el usuario está autenticado
-   */
-  isAuthenticated() {
-    return import_crudify_browser4.default.isLogin() || TokenStorage.hasValidTokens();
-  }
-  /**
-   * Obtener información de tokens actuales
-   */
-  getTokenInfo() {
-    const crudifyTokens = import_crudify_browser4.default.getTokenData();
-    const storageInfo = TokenStorage.getExpirationInfo();
-    return {
-      isLoggedIn: this.isAuthenticated(),
-      crudifyTokens,
-      storageInfo,
-      hasValidTokens: TokenStorage.hasValidTokens()
-    };
+  return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(import_jsx_runtime9.Fragment, { children });
+}
+function SessionDebugInfo() {
+  const session = useSessionContext();
+  if (!session.isInitialized) {
+    return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("div", { children: "Session not initialized" });
   }
-  /**
-   * Refrescar tokens manualmente
-   */
-  async refreshTokens() {
-    try {
-      this.log("Manually refreshing tokens...");
-      const response = await import_crudify_browser4.default.refreshAccessToken();
-      if (!response.success) {
-        this.log("Token refresh failed:", response.errors);
-        TokenStorage.clearTokens();
-        this.config.onSessionExpired?.();
-        return false;
-      }
-      const newTokens = {
-        accessToken: response.data.token,
-        refreshToken: response.data.refreshToken,
-        expiresAt: response.data.expiresAt,
-        refreshExpiresAt: response.data.refreshExpiresAt
-      };
-      TokenStorage.saveTokens(newTokens);
-      this.log("Tokens refreshed and saved successfully");
-      return true;
-    } catch (error) {
-      this.log("Token refresh error:", error);
-      TokenStorage.clearTokens();
-      this.config.onSessionExpired?.();
-      return false;
+  return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(
+    "div",
+    {
+      style: {
+        padding: "10px",
+        margin: "10px",
+        border: "1px solid #ccc",
+        borderRadius: "4px",
+        fontSize: "12px",
+        fontFamily: "monospace"
+      },
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("h4", { children: "Session Debug Info" }),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Authenticated:" }),
+          " ",
+          session.isAuthenticated ? "Yes" : "No"
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Loading:" }),
+          " ",
+          session.isLoading ? "Yes" : "No"
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Error:" }),
+          " ",
+          session.error || "None"
+        ] }),
+        session.tokens && /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Access Token:" }),
+            " ",
+            session.tokens.accessToken.substring(0, 20),
+            "..."
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Refresh Token:" }),
+            " ",
+            session.tokens.refreshToken.substring(0, 20),
+            "..."
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Access Expires In:" }),
+            " ",
+            Math.round(session.expiresIn / 1e3 / 60),
+            " minutes"
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Refresh Expires In:" }),
+            " ",
+            Math.round(session.refreshExpiresIn / 1e3 / 60 / 60),
+            " hours"
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)("div", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)("strong", { children: "Expiring Soon:" }),
+            " ",
+            session.isExpiringSoon ? "Yes" : "No"
+          ] })
+        ] })
+      ]
     }
-  }
-  /**
-   * Configurar interceptor de respuesta para manejo automático de errores
-   */
-  setupResponseInterceptor() {
-    import_crudify_browser4.default.setResponseInterceptor(async (response) => {
-      if (response.errors) {
-        const hasAuthError = response.errors.some(
-          (error) => error.message?.includes("Unauthorized") || error.message?.includes("Token") || error.extensions?.code === "UNAUTHENTICATED"
-        );
-        if (hasAuthError && TokenStorage.hasValidTokens()) {
-          this.log("Auth error detected, attempting token refresh...");
-          const refreshSuccess = await this.refreshTokens();
-          if (!refreshSuccess) {
-            this.log("Session expired, triggering callback");
-            this.config.onSessionExpired?.();
+  );
+}
+
+// src/components/CrudifyLogin/index.tsx
+var import_jsx_runtime10 = require("react/jsx-runtime");
+var CrudifyLoginInternal = ({
+  onScreenChange,
+  onExternalNavigate,
+  onLoginSuccess,
+  onError,
+  redirectUrl = "/"
+}) => {
+  const { t } = useTranslation();
+  const { state, setScreen } = useLoginState();
+  const { config } = useSessionContext();
+  const handleScreenChange = (screen2, params) => {
+    let finalParams = params;
+    if (screen2 === "login") {
+      finalParams = {};
+    } else if (screen2 === "forgotPassword" && !params) {
+      finalParams = {};
+    }
+    setScreen(screen2, finalParams);
+    onScreenChange?.(screen2, finalParams);
+  };
+  const renderCurrentForm = () => {
+    const commonProps = {
+      onScreenChange: handleScreenChange,
+      onExternalNavigate,
+      onError,
+      redirectUrl
+    };
+    switch (state.currentScreen) {
+      case "forgotPassword":
+        return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(ForgotPasswordForm_default, { ...commonProps });
+      case "checkCode":
+        return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CheckCodeForm_default, { ...commonProps, searchParams: state.searchParams });
+      case "resetPassword":
+        return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+          ResetPasswordForm_default,
+          {
+            ...commonProps,
+            searchParams: state.searchParams,
+            onResetSuccess: () => {
+              handleScreenChange("login");
+            }
           }
+        );
+      default:
+        return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(LoginForm_default, { ...commonProps, onLoginSuccess });
+    }
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(CrudifyInitializer, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_material6.Box, { sx: { display: "flex", justifyContent: "center", mb: 3 }, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+      "img",
+      {
+        src: config.logo || "/nocios-default.png",
+        alt: t("login.logoAlt"),
+        style: {
+          width: "100%",
+          maxWidth: "150px",
+          height: "auto"
+        },
+        onError: (e) => {
+          const target = e.target;
+          target.src = "/nocios-default.png";
         }
       }
-      return response;
-    });
-    this.log("Response interceptor configured");
-  }
-  /**
-   * Limpiar sesión completamente
-   */
-  clearSession() {
-    TokenStorage.clearTokens();
-    import_crudify_browser4.default.logout();
-    this.log("Session cleared completely");
-  }
-  // Métodos privados
-  log(message, ...args) {
-    if (this.config.enableLogging) {
-      console.log(`[SessionManager] ${message}`, ...args);
-    }
-  }
-  formatError(errors) {
-    if (!errors) return "Unknown error";
-    if (typeof errors === "string") return errors;
-    if (typeof errors === "object") {
-      const errorMessages = Object.values(errors).flat();
-      return errorMessages.join(", ");
-    }
-    return "Authentication failed";
-  }
+    ) }),
+    config.appName && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+      import_material6.Typography,
+      {
+        variant: "h6",
+        component: "h1",
+        sx: {
+          textAlign: "center",
+          mb: 2,
+          color: config.colors?.primaryColor || "#1066BA"
+        },
+        children: config.appName
+      }
+    ),
+    renderCurrentForm()
+  ] });
+};
+var CrudifyLogin = ({
+  translations,
+  translationsUrl,
+  language = "en",
+  initialScreen = "login",
+  autoReadFromCookies = true,
+  ...props
+}) => {
+  const { config } = useSessionContext();
+  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(I18nProvider, { translations, translationsUrl, language, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CrudifyProvider, { config, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(LoginStateProvider, { config, initialScreen, autoReadFromCookies, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(CrudifyLoginInternal, { ...props }) }) }) });
 };
+var CrudifyLogin_default = CrudifyLogin;
 
-// src/hooks/useSession.ts
-var import_react15 = require("react");
-function useSession(options = {}) {
-  const [state, setState] = (0, import_react15.useState)({
-    isAuthenticated: false,
-    isLoading: true,
-    isInitialized: false,
-    tokens: null,
-    error: null
-  });
-  const sessionManager = SessionManager.getInstance();
-  const initialize = (0, import_react15.useCallback)(async () => {
-    try {
-      setState((prev) => ({ ...prev, isLoading: true, error: null }));
-      const config = {
-        autoRestore: options.autoRestore ?? true,
-        enableLogging: options.enableLogging ?? false,
-        onSessionExpired: () => {
-          setState((prev) => ({
-            ...prev,
-            isAuthenticated: false,
-            tokens: null,
-            error: "Session expired"
-          }));
-          options.onSessionExpired?.();
-        },
-        onSessionRestored: (tokens) => {
-          setState((prev) => ({
-            ...prev,
-            isAuthenticated: true,
-            tokens,
-            error: null
-          }));
-          options.onSessionRestored?.(tokens);
-        },
-        onLoginSuccess: (tokens) => {
-          setState((prev) => ({
-            ...prev,
-            isAuthenticated: true,
-            tokens,
-            error: null
-          }));
-        },
-        onLogout: () => {
-          setState((prev) => ({
-            ...prev,
-            isAuthenticated: false,
-            tokens: null,
-            error: null
-          }));
-        }
-      };
-      await sessionManager.initialize(config);
-      sessionManager.setupResponseInterceptor();
-      const isAuth = sessionManager.isAuthenticated();
-      const tokenInfo = sessionManager.getTokenInfo();
-      setState((prev) => ({
-        ...prev,
-        isAuthenticated: isAuth,
-        isInitialized: true,
-        isLoading: false,
-        tokens: tokenInfo.crudifyTokens.accessToken ? {
-          accessToken: tokenInfo.crudifyTokens.accessToken,
-          refreshToken: tokenInfo.crudifyTokens.refreshToken,
-          expiresAt: tokenInfo.crudifyTokens.expiresAt,
-          refreshExpiresAt: tokenInfo.crudifyTokens.refreshExpiresAt
-        } : null
-      }));
-    } catch (error) {
-      setState((prev) => ({
-        ...prev,
-        isLoading: false,
-        isInitialized: true,
-        error: error instanceof Error ? error.message : "Initialization failed"
-      }));
+// src/components/UserProfile/UserProfileDisplay.tsx
+var import_material7 = require("@mui/material");
+var import_icons_material = require("@mui/icons-material");
+
+// src/hooks/useUserProfile.ts
+var import_react11 = require("react");
+var import_crudify_browser3 = __toESM(require("@nocios/crudify-browser"));
+var useUserProfile = (options = {}) => {
+  const { autoFetch = true, retryOnError = false, maxRetries = 3 } = options;
+  const [userProfile, setUserProfile] = (0, import_react11.useState)(null);
+  const [loading, setLoading] = (0, import_react11.useState)(false);
+  const [error, setError] = (0, import_react11.useState)(null);
+  const [extendedData, setExtendedData] = (0, import_react11.useState)({});
+  const abortControllerRef = (0, import_react11.useRef)(null);
+  const mountedRef = (0, import_react11.useRef)(true);
+  const requestIdRef = (0, import_react11.useRef)(0);
+  const retryCountRef = (0, import_react11.useRef)(0);
+  const clearProfile = (0, import_react11.useCallback)(() => {
+    setUserProfile(null);
+    setError(null);
+    setLoading(false);
+    setExtendedData({});
+  }, []);
+  const refreshProfile = (0, import_react11.useCallback)(async () => {
+    const userEmail = getCurrentUserEmail();
+    if (!userEmail) {
+      if (mountedRef.current) {
+        setError("No user email available");
+        setLoading(false);
+      }
+      return;
     }
-  }, [options.autoRestore, options.enableLogging, options.onSessionExpired, options.onSessionRestored]);
-  const login = (0, import_react15.useCallback)(async (email, password) => {
-    setState((prev) => ({ ...prev, isLoading: true, error: null }));
+    if (abortControllerRef.current) {
+      abortControllerRef.current.abort();
+    }
+    const abortController = new AbortController();
+    abortControllerRef.current = abortController;
+    const currentRequestId = ++requestIdRef.current;
     try {
-      const result = await sessionManager.login(email, password);
-      if (result.success && result.tokens) {
-        setState((prev) => ({
-          ...prev,
-          isAuthenticated: true,
-          tokens: result.tokens,
-          isLoading: false,
-          error: null
-        }));
-      } else {
-        setState((prev) => ({
-          ...prev,
-          isAuthenticated: false,
-          tokens: null,
-          isLoading: false,
-          error: result.error || "Login failed"
-        }));
+      if (mountedRef.current) {
+        setLoading(true);
+        setError(null);
+      }
+      const response = await import_crudify_browser3.default.readItems("users", {
+        filter: { email: userEmail },
+        pagination: { limit: 1 }
+      });
+      if (currentRequestId === requestIdRef.current && mountedRef.current && !abortController.signal.aborted) {
+        if (response.success && response.data && response.data.length > 0) {
+          const userData = response.data[0];
+          setUserProfile(userData);
+          const additionalData = {
+            fullProfile: userData,
+            totalFields: Object.keys(userData).length,
+            displayData: {
+              id: userData.id,
+              email: userData.email,
+              username: userData.username,
+              firstName: userData.firstName,
+              lastName: userData.lastName,
+              fullName: userData.fullName || `${userData.firstName || ""} ${userData.lastName || ""}`.trim(),
+              role: userData.role,
+              permissions: userData.permissions || [],
+              isActive: userData.isActive,
+              lastLogin: userData.lastLogin,
+              createdAt: userData.createdAt,
+              updatedAt: userData.updatedAt,
+              // Include any custom fields
+              ...Object.keys(userData).filter(
+                (key) => ![
+                  "id",
+                  "email",
+                  "username",
+                  "firstName",
+                  "lastName",
+                  "fullName",
+                  "role",
+                  "permissions",
+                  "isActive",
+                  "lastLogin",
+                  "createdAt",
+                  "updatedAt"
+                ].includes(key)
+              ).reduce((acc, key) => ({ ...acc, [key]: userData[key] }), {})
+            }
+          };
+          setExtendedData(additionalData);
+          setError(null);
+          retryCountRef.current = 0;
+        } else {
+          setError("User profile not found");
+          setUserProfile(null);
+          setExtendedData({});
+        }
+      }
+    } catch (err) {
+      if (currentRequestId === requestIdRef.current && mountedRef.current) {
+        const error2 = err;
+        if (error2.name === "AbortError") {
+          return;
+        }
+        const shouldRetry = retryOnError && retryCountRef.current < maxRetries && (error2.message?.includes("Network Error") || error2.message?.includes("Failed to fetch"));
+        if (shouldRetry) {
+          retryCountRef.current++;
+          setTimeout(() => {
+            if (mountedRef.current) {
+              refreshProfile();
+            }
+          }, 1e3 * retryCountRef.current);
+        } else {
+          setError("Failed to load user profile");
+          setUserProfile(null);
+          setExtendedData({});
+        }
+      }
+    } finally {
+      if (currentRequestId === requestIdRef.current && mountedRef.current) {
+        setLoading(false);
+      }
+      if (abortControllerRef.current === abortController) {
+        abortControllerRef.current = null;
       }
-      return result;
-    } catch (error) {
-      const errorMsg = error instanceof Error ? error.message : "Login failed";
-      setState((prev) => ({
-        ...prev,
-        isAuthenticated: false,
-        tokens: null,
-        isLoading: false,
-        error: errorMsg
-      }));
-      return {
-        success: false,
-        error: errorMsg
-      };
     }
-  }, [sessionManager]);
-  const logout = (0, import_react15.useCallback)(async () => {
-    setState((prev) => ({ ...prev, isLoading: true }));
-    try {
-      await sessionManager.logout();
-      setState((prev) => ({
-        ...prev,
-        isAuthenticated: false,
-        tokens: null,
-        isLoading: false,
-        error: null
-      }));
-    } catch (error) {
-      setState((prev) => ({
-        ...prev,
-        isAuthenticated: false,
-        tokens: null,
-        isLoading: false,
-        error: error instanceof Error ? error.message : "Logout error"
-      }));
+  }, [retryOnError, maxRetries]);
+  (0, import_react11.useEffect)(() => {
+    if (autoFetch) {
+      refreshProfile();
     }
-  }, [sessionManager]);
-  const refreshTokens = (0, import_react15.useCallback)(async () => {
-    try {
-      const success = await sessionManager.refreshTokens();
-      if (success) {
-        const tokenInfo = sessionManager.getTokenInfo();
-        setState((prev) => ({
-          ...prev,
-          tokens: tokenInfo.crudifyTokens.accessToken ? {
-            accessToken: tokenInfo.crudifyTokens.accessToken,
-            refreshToken: tokenInfo.crudifyTokens.refreshToken,
-            expiresAt: tokenInfo.crudifyTokens.expiresAt,
-            refreshExpiresAt: tokenInfo.crudifyTokens.refreshExpiresAt
-          } : null,
-          error: null
-        }));
-      } else {
-        setState((prev) => ({
-          ...prev,
-          isAuthenticated: false,
-          tokens: null,
-          error: "Token refresh failed"
-        }));
+  }, [autoFetch, refreshProfile]);
+  (0, import_react11.useEffect)(() => {
+    mountedRef.current = true;
+    return () => {
+      mountedRef.current = false;
+      if (abortControllerRef.current) {
+        abortControllerRef.current.abort();
+        abortControllerRef.current = null;
       }
-      return success;
-    } catch (error) {
-      setState((prev) => ({
-        ...prev,
-        isAuthenticated: false,
-        tokens: null,
-        error: error instanceof Error ? error.message : "Token refresh failed"
-      }));
-      return false;
+    };
+  }, []);
+  return {
+    userProfile,
+    loading,
+    error,
+    extendedData,
+    refreshProfile,
+    clearProfile
+  };
+};
+
+// src/components/UserProfile/UserProfileDisplay.tsx
+var import_react12 = require("react");
+var import_jsx_runtime11 = require("react/jsx-runtime");
+var UserProfileDisplay = ({
+  showExtendedData = true,
+  showProfileCard = true,
+  autoRefresh = true
+}) => {
+  const { userProfile, loading, error, extendedData, refreshProfile } = useUserProfile({
+    autoFetch: autoRefresh,
+    retryOnError: true,
+    maxRetries: 3
+  });
+  const [showAllFields, setShowAllFields] = (0, import_react12.useState)(false);
+  if (loading) {
+    return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { display: "flex", justifyContent: "center", alignItems: "center", p: 3, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.CircularProgress, {}),
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "body2", sx: { ml: 2 }, children: "Cargando perfil de usuario..." })
+    ] });
+  }
+  if (error) {
+    return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
+      import_material7.Alert,
+      {
+        severity: "error",
+        action: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.IconButton, { color: "inherit", size: "small", onClick: refreshProfile, children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "caption", children: "Reintentar" }) }),
+        children: [
+          "Error al cargar el perfil: ",
+          error
+        ]
+      }
+    );
+  }
+  if (!userProfile) {
+    return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Alert, { severity: "warning", children: "No se encontr\xF3 informaci\xF3n del usuario" });
+  }
+  const displayData = extendedData?.displayData || {};
+  const totalFields = extendedData?.totalFields || 0;
+  const formatDate = (dateString) => {
+    if (!dateString) return "No disponible";
+    try {
+      return new Date(dateString).toLocaleString("es-ES", {
+        year: "numeric",
+        month: "short",
+        day: "numeric",
+        hour: "2-digit",
+        minute: "2-digit"
+      });
+    } catch {
+      return dateString;
+    }
+  };
+  const renderFieldValue = (key, value) => {
+    if (value === null || value === void 0) return "No disponible";
+    if (typeof value === "boolean") return value ? "S\xED" : "No";
+    if (Array.isArray(value)) return value.length > 0 ? value.join(", ") : "Ninguno";
+    if (typeof value === "object") return JSON.stringify(value, null, 2);
+    return String(value);
+  };
+  const basicFields = [
+    { key: "id", label: "ID", icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.Badge, {}) },
+    { key: "email", label: "Email", icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.Email, {}) },
+    { key: "username", label: "Usuario", icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.Person, {}) },
+    { key: "fullName", label: "Nombre completo", icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.AccountCircle, {}) },
+    { key: "role", label: "Rol", icon: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.Security, {}) }
+  ];
+  const extendedFields = [
+    { key: "firstName", label: "Nombre" },
+    { key: "lastName", label: "Apellido" },
+    { key: "isActive", label: "Activo" },
+    { key: "lastLogin", label: "\xDAltimo login" },
+    { key: "createdAt", label: "Creado" },
+    { key: "updatedAt", label: "Actualizado" }
+  ];
+  const knownFields = [...basicFields.map((f) => f.key), ...extendedFields.map((f) => f.key), "permissions"];
+  const customFields = Object.keys(displayData).filter((key) => !knownFields.includes(key)).map((key) => ({ key, label: key }));
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { children: [
+    showProfileCard && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Card, { sx: { mb: 2 }, children: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.CardContent, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { display: "flex", alignItems: "center", mb: 2, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+          import_material7.Avatar,
+          {
+            src: displayData.avatar,
+            sx: { width: 56, height: 56, mr: 2 },
+            children: displayData.fullName?.[0] || displayData.username?.[0] || displayData.email?.[0]
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "h6", children: displayData.fullName || displayData.username || displayData.email }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "body2", color: "text.secondary", children: displayData.role || "Usuario" }),
+          displayData.isActive !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+            import_material7.Chip,
+            {
+              label: displayData.isActive ? "Activo" : "Inactivo",
+              color: displayData.isActive ? "success" : "error",
+              size: "small",
+              sx: { mt: 0.5 }
+            }
+          )
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Box, { display: "grid", gridTemplateColumns: "repeat(auto-fit, minmax(250px, 1fr))", gap: 2, children: basicFields.map(
+        ({ key, label, icon }) => displayData[key] ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { display: "flex", alignItems: "center", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Box, { sx: { mr: 1, color: "text.secondary" }, children: icon }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "caption", color: "text.secondary", children: label }),
+            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "body2", children: renderFieldValue(key, displayData[key]) })
+          ] })
+        ] }, key) : null
+      ) }),
+      displayData.permissions && Array.isArray(displayData.permissions) && displayData.permissions.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { mt: 2, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "caption", color: "text.secondary", display: "block", children: "Permisos" }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { display: "flex", flexWrap: "wrap", gap: 0.5, mt: 0.5, children: [
+          displayData.permissions.slice(0, 5).map((permission, index) => /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Chip, { label: permission, size: "small", variant: "outlined" }, index)),
+          displayData.permissions.length > 5 && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Chip, { label: `+${displayData.permissions.length - 5} m\xE1s`, size: "small" })
+        ] })
+      ] })
+    ] }) }),
+    showExtendedData && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Card, { children: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.CardContent, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", mb: 2, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Typography, { variant: "h6", display: "flex", alignItems: "center", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.Info, { sx: { mr: 1 } }),
+          "Informaci\xF3n Detallada"
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Chip, { label: `${totalFields} campos totales`, size: "small" })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.List, { dense: true, children: [
+        extendedFields.map(({ key, label }) => displayData[key] !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.ListItem, { divider: true, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.ListItemIcon, { children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.Schedule, { fontSize: "small" }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+            import_material7.ListItemText,
+            {
+              primary: label,
+              secondary: key.includes("At") || key.includes("Login") ? formatDate(displayData[key]) : renderFieldValue(key, displayData[key])
+            }
+          )
+        ] }, key)),
+        customFields.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_jsx_runtime11.Fragment, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Divider, { sx: { my: 1 } }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.ListItem, { children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+            import_material7.ListItemText,
+            {
+              primary: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", children: [
+                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Typography, { variant: "subtitle2", children: [
+                  "Campos Personalizados (",
+                  customFields.length,
+                  ")"
+                ] }),
+                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.IconButton, { size: "small", onClick: () => setShowAllFields(!showAllFields), children: showAllFields ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.ExpandLess, {}) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_icons_material.ExpandMore, {}) })
+              ] })
+            }
+          ) }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Collapse, { in: showAllFields, children: customFields.map(({ key, label }) => /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.ListItem, { sx: { pl: 4 }, children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+            import_material7.ListItemText,
+            {
+              primary: label,
+              secondary: renderFieldValue(key, displayData[key])
+            }
+          ) }, key)) })
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Box, { mt: 2, display: "flex", justifyContent: "space-between", alignItems: "center", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_material7.Typography, { variant: "caption", color: "text.secondary", children: [
+          "\xDAltima actualizaci\xF3n: ",
+          formatDate(displayData.updatedAt)
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.IconButton, { size: "small", onClick: refreshProfile, disabled: loading, children: /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(import_material7.Typography, { variant: "caption", children: "Actualizar" }) })
+      ] })
+    ] }) })
+  ] });
+};
+var UserProfileDisplay_default = UserProfileDisplay;
+
+// src/components/PublicPolicies/Policies.tsx
+var import_react15 = require("react");
+var import_react_i18next3 = require("react-i18next");
+var import_material10 = require("@mui/material");
+var import_icons_material4 = require("@mui/icons-material");
+
+// src/components/PublicPolicies/PolicyItem/PolicyItem.tsx
+var import_react14 = require("react");
+var import_react_i18next2 = require("react-i18next");
+var import_material9 = require("@mui/material");
+var import_icons_material3 = require("@mui/icons-material");
+
+// src/components/PublicPolicies/FieldSelector/FieldSelector.tsx
+var import_react13 = require("react");
+var import_react_i18next = require("react-i18next");
+var import_material8 = require("@mui/material");
+var import_icons_material2 = require("@mui/icons-material");
+var import_jsx_runtime12 = require("react/jsx-runtime");
+var FieldSelector = ({
+  value,
+  onChange,
+  availableFields,
+  error,
+  disabled = false
+}) => {
+  const { t } = (0, import_react_i18next.useTranslation)();
+  const [mode, setMode] = (0, import_react13.useState)("custom");
+  const isUpdatingRef = (0, import_react13.useRef)(false);
+  (0, import_react13.useEffect)(() => {
+    const current = value || { allow: [], owner_allow: [], deny: [] };
+    const all = new Set(availableFields);
+    const allow = (current.allow || []).filter((f) => all.has(f));
+    const owner = (current.owner_allow || []).filter((f) => all.has(f));
+    const deny = (current.deny || []).filter((f) => all.has(f));
+    availableFields.forEach((f) => {
+      if (!allow.includes(f) && !owner.includes(f) && !deny.includes(f)) deny.push(f);
+    });
+    const normalized = { allow, owner_allow: owner, deny };
+    if (JSON.stringify(normalized) !== JSON.stringify(current)) {
+      onChange(normalized);
+    }
+    if (allow.length === availableFields.length) setMode("all");
+    else if (deny.length === availableFields.length) setMode("none");
+    else setMode("custom");
+  }, [availableFields, value]);
+  const setAllAllow = () => {
+    isUpdatingRef.current = true;
+    onChange({ allow: [...availableFields], owner_allow: [], deny: [] });
+    setMode("all");
+    setTimeout(() => {
+      isUpdatingRef.current = false;
+    }, 0);
+  };
+  const setAllDeny = () => {
+    isUpdatingRef.current = true;
+    onChange({ allow: [], owner_allow: [], deny: [...availableFields] });
+    setMode("none");
+    setTimeout(() => {
+      isUpdatingRef.current = false;
+    }, 0);
+  };
+  const getFieldState = (fieldName) => {
+    if (value?.allow?.includes(fieldName)) return "allow";
+    if (value?.owner_allow?.includes(fieldName)) return "owner_allow";
+    return "deny";
+  };
+  const setFieldState = (fieldName, state) => {
+    isUpdatingRef.current = true;
+    const allow = new Set(value?.allow || []);
+    const owner = new Set(value?.owner_allow || []);
+    const deny = new Set(value?.deny || []);
+    allow.delete(fieldName);
+    owner.delete(fieldName);
+    deny.delete(fieldName);
+    if (state === "allow") allow.add(fieldName);
+    if (state === "owner_allow") owner.add(fieldName);
+    if (state === "deny") deny.add(fieldName);
+    onChange({ allow: Array.from(allow), owner_allow: Array.from(owner), deny: Array.from(deny) });
+    setMode("custom");
+    setTimeout(() => {
+      isUpdatingRef.current = false;
+    }, 0);
+  };
+  if (availableFields.length === 0) {
+    return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Box, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 1 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { fontStyle: "italic" }, children: t("modules.form.publicPolicies.fields.conditions.noFieldsAvailable") }),
+      error && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.FormHelperText, { error: true, sx: { mt: 1 }, children: error })
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Box, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Stack, { direction: "row", spacing: 1, sx: { mb: 3 }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        import_material8.Button,
+        {
+          variant: mode === "all" ? "contained" : "outlined",
+          startIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.SelectAll, {}),
+          onClick: setAllAllow,
+          disabled,
+          size: "small",
+          sx: {
+            minWidth: 120,
+            ...mode === "all" && {
+              backgroundColor: "#16a34a",
+              "&:hover": { backgroundColor: "#15803d" }
+            }
+          },
+          children: t("modules.form.publicPolicies.fields.conditions.allFields")
+        }
+      ),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+        import_material8.Button,
+        {
+          variant: mode === "none" ? "contained" : "outlined",
+          startIcon: /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.ClearAll, {}),
+          onClick: setAllDeny,
+          disabled,
+          size: "small",
+          sx: {
+            minWidth: 120,
+            ...mode === "none" && {
+              backgroundColor: "#cf222e",
+              "&:hover": { backgroundColor: "#bc1f2c" }
+            }
+          },
+          children: t("modules.form.publicPolicies.fields.conditions.noFields")
+        }
+      )
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Box, { sx: { p: 2, border: "1px solid #d1d9e0", borderRadius: 1, backgroundColor: "#f6f8fa" }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.help") }),
+      /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Stack, { spacing: 1, children: availableFields.map((fieldName) => {
+        const fieldState = getFieldState(fieldName);
+        return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.Stack, { direction: "row", spacing: 1, alignItems: "center", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.Typography, { variant: "body2", sx: { minWidth: 100, fontFamily: "monospace" }, children: fieldName }),
+          /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_material8.ToggleButtonGroup, { value: fieldState, exclusive: true, size: "small", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+              import_material8.ToggleButton,
+              {
+                value: "allow",
+                onClick: () => setFieldState(fieldName, "allow"),
+                disabled,
+                sx: {
+                  px: 2,
+                  color: fieldState === "allow" ? "#ffffff" : "#6b7280",
+                  backgroundColor: fieldState === "allow" ? "#16a34a" : "#f3f4f6",
+                  borderColor: fieldState === "allow" ? "#16a34a" : "#d1d5db",
+                  "&:hover": {
+                    backgroundColor: fieldState === "allow" ? "#15803d" : "#e5e7eb",
+                    borderColor: fieldState === "allow" ? "#15803d" : "#9ca3af"
+                  },
+                  "&.Mui-selected": {
+                    backgroundColor: "#16a34a",
+                    color: "#ffffff",
+                    "&:hover": {
+                      backgroundColor: "#15803d"
+                    }
+                  }
+                },
+                children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.CheckCircle, { sx: { fontSize: 16, mr: 0.5 } }),
+                  t("modules.form.publicPolicies.fields.conditions.states.allow")
+                ]
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              import_material8.ToggleButton,
+              {
+                value: "owner_allow",
+                onClick: () => setFieldState(fieldName, "owner_allow"),
+                disabled,
+                sx: {
+                  px: 2,
+                  color: fieldState === "owner_allow" ? "#ffffff" : "#6b7280",
+                  backgroundColor: fieldState === "owner_allow" ? "#0ea5e9" : "#f3f4f6",
+                  borderColor: fieldState === "owner_allow" ? "#0ea5e9" : "#d1d5db",
+                  "&:hover": {
+                    backgroundColor: fieldState === "owner_allow" ? "#0284c7" : "#e5e7eb",
+                    borderColor: fieldState === "owner_allow" ? "#0284c7" : "#9ca3af"
+                  },
+                  "&.Mui-selected": {
+                    backgroundColor: "#0ea5e9",
+                    color: "#ffffff",
+                    "&:hover": {
+                      backgroundColor: "#0284c7"
+                    }
+                  }
+                },
+                children: t("modules.form.publicPolicies.fields.conditions.states.ownerAllow")
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(
+              import_material8.ToggleButton,
+              {
+                value: "deny",
+                onClick: () => setFieldState(fieldName, "deny"),
+                disabled,
+                sx: {
+                  px: 2,
+                  color: fieldState === "deny" ? "#ffffff" : "#6b7280",
+                  backgroundColor: fieldState === "deny" ? "#dc2626" : "#f3f4f6",
+                  borderColor: fieldState === "deny" ? "#dc2626" : "#d1d5db",
+                  "&:hover": {
+                    backgroundColor: fieldState === "deny" ? "#b91c1c" : "#e5e7eb",
+                    borderColor: fieldState === "deny" ? "#b91c1c" : "#9ca3af"
+                  },
+                  "&.Mui-selected": {
+                    backgroundColor: "#dc2626",
+                    color: "#ffffff",
+                    "&:hover": {
+                      backgroundColor: "#b91c1c"
+                    }
+                  }
+                },
+                children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_icons_material2.Cancel, { sx: { fontSize: 16, mr: 0.5 } }),
+                  t("modules.form.publicPolicies.fields.conditions.states.deny")
+                ]
+              }
+            )
+          ] })
+        ] }, fieldName);
+      }) })
+    ] }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(import_material8.FormHelperText, { error: true, sx: { mt: 1 }, children: error })
+  ] });
+};
+var FieldSelector_default = FieldSelector;
+
+// src/components/PublicPolicies/constants.ts
+var POLICY_ACTIONS = ["create", "read", "update", "delete"];
+var PREFERRED_POLICY_ORDER = [
+  "create",
+  "read",
+  "update",
+  "delete"
+];
+
+// src/components/PublicPolicies/PolicyItem/PolicyItem.tsx
+var import_jsx_runtime13 = require("react/jsx-runtime");
+var PolicyItem = (0, import_react14.forwardRef)(({
+  policy,
+  onChange,
+  onRemove,
+  availableFields,
+  isSubmitting = false,
+  usedActions,
+  error
+}, ref) => {
+  const { t } = (0, import_react_i18next2.useTranslation)();
+  const takenActions = new Set(Array.from(usedActions || []));
+  takenActions.delete(policy.action);
+  const actionOptions = POLICY_ACTIONS.map((a) => ({
+    value: a,
+    label: t(`modules.form.publicPolicies.fields.action.options.${a}`)
+  }));
+  return /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(
+    import_material9.Paper,
+    {
+      ref,
+      sx: {
+        p: 3,
+        border: "1px solid #d1d9e0",
+        borderRadius: 2,
+        position: "relative",
+        backgroundColor: "#ffffff"
+      },
+      children: [
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { sx: { display: "flex", justifyContent: "space-between", alignItems: "flex-start", mb: 3 }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+            import_material9.Typography,
+            {
+              variant: "subtitle1",
+              sx: {
+                fontWeight: 600,
+                color: "#111418",
+                fontSize: "1rem"
+              },
+              children: t("modules.form.publicPolicies.policyTitle")
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+            import_material9.IconButton,
+            {
+              onClick: onRemove,
+              size: "small",
+              disabled: isSubmitting,
+              "aria-label": t("modules.form.publicPolicies.removePolicy"),
+              sx: {
+                color: "#656d76",
+                "&:hover": {
+                  color: "#cf222e",
+                  backgroundColor: "rgba(207, 34, 46, 0.1)"
+                }
+              },
+              children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material3.Delete, {})
+            }
+          )
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Stack, { spacing: 3, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Stack, { direction: { xs: "column", md: "row" }, spacing: 2, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Box, { sx: { flex: 1, minWidth: 200 }, children: /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.FormControl, { fullWidth: true, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.InputLabel, { children: t("modules.form.publicPolicies.fields.action.label") }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+              import_material9.Select,
+              {
+                value: policy.action,
+                label: t("modules.form.publicPolicies.fields.action.label"),
+                disabled: isSubmitting,
+                onChange: (e) => {
+                  const newAction = e.target.value;
+                  const next = { ...policy, action: newAction };
+                  if (newAction === "delete") {
+                    next.permission = "deny";
+                    delete next.fields;
+                  } else {
+                    next.fields = { allow: [], owner_allow: [], deny: availableFields };
+                    delete next.permission;
+                  }
+                  onChange(next);
+                },
+                sx: {
+                  backgroundColor: "#ffffff",
+                  "&:hover .MuiOutlinedInput-notchedOutline": {
+                    borderColor: "#8c959f"
+                  },
+                  "&.Mui-focused .MuiOutlinedInput-notchedOutline": {
+                    borderColor: "#0969da",
+                    borderWidth: 2
+                  }
+                },
+                children: actionOptions.map((option) => {
+                  const disabledOption = takenActions.has(option.value);
+                  return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.MenuItem, { value: option.value, disabled: disabledOption, children: option.label }, option.value);
+                })
+              }
+            ),
+            error && /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.FormHelperText, { error: true, children: error })
+          ] }) }) }),
+          policy.action === "delete" ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: t("modules.form.publicPolicies.fields.conditions.label") }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Stack, { direction: "row", spacing: 1, sx: { mb: 3 }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+                import_material9.Button,
+                {
+                  variant: policy.permission === "*" ? "contained" : "outlined",
+                  startIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material3.SelectAll, {}),
+                  onClick: () => onChange({ ...policy, permission: "*" }),
+                  disabled: isSubmitting,
+                  size: "small",
+                  sx: {
+                    minWidth: 140,
+                    whiteSpace: "nowrap",
+                    ...policy.permission === "*" && {
+                      backgroundColor: "#16a34a",
+                      "&:hover": { backgroundColor: "#15803d" }
+                    }
+                  },
+                  children: t("modules.form.publicPolicies.fields.conditions.allFields")
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+                import_material9.Button,
+                {
+                  variant: policy.permission === "owner" ? "contained" : "outlined",
+                  onClick: () => onChange({ ...policy, permission: "owner" }),
+                  disabled: isSubmitting,
+                  size: "small",
+                  sx: {
+                    minWidth: 140,
+                    whiteSpace: "nowrap",
+                    ...policy.permission === "owner" && {
+                      backgroundColor: "#0ea5e9",
+                      "&:hover": { backgroundColor: "#0284c7" }
+                    }
+                  },
+                  children: t("modules.form.publicPolicies.fields.conditions.states.ownerAllow")
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+                import_material9.Button,
+                {
+                  variant: policy.permission === "deny" ? "contained" : "outlined",
+                  startIcon: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_icons_material3.ClearAll, {}),
+                  onClick: () => onChange({ ...policy, permission: "deny" }),
+                  disabled: isSubmitting,
+                  size: "small",
+                  sx: {
+                    minWidth: 140,
+                    whiteSpace: "nowrap",
+                    ...policy.permission === "deny" && {
+                      backgroundColor: "#cf222e",
+                      "&:hover": { backgroundColor: "#bc1f2c" }
+                    }
+                  },
+                  children: t("modules.form.publicPolicies.fields.conditions.noFields")
+                }
+              )
+            ] })
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
+            FieldSelector_default,
+            {
+              value: policy.fields || { allow: [], owner_allow: [], deny: [] },
+              onChange: (nextFields) => onChange({ ...policy, fields: nextFields }),
+              availableFields,
+              disabled: isSubmitting
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Paper, { variant: "outlined", sx: { p: 2, backgroundColor: "#f9fafb" }, children: policy.action === "delete" ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: {
+              color: policy.permission === "*" ? "#16a34a" : policy.permission === "owner" ? "#0ea5e9" : "#dc2626"
+            }, children: [
+              t("modules.form.publicPolicies.fields.conditions.states.allow"),
+              ":"
+            ] }),
+            " ",
+            policy.permission || "-"
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Stack, { spacing: 0.5, divider: /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(import_material9.Divider, { sx: { borderColor: "#e5e7eb" } }), children: [
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: { color: "#16a34a" }, children: [
+                t("modules.form.publicPolicies.fields.conditions.states.allow"),
+                ":"
+              ] }),
+              " ",
+              (policy?.fields?.allow || []).join(", ") || "-"
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: { color: "#0ea5e9" }, children: [
+                t("modules.form.publicPolicies.fields.conditions.states.ownerAllow"),
+                ":"
+              ] }),
+              " ",
+              (policy?.fields?.owner_allow || []).join(", ") || "-"
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Typography, { variant: "body2", sx: { fontFamily: "monospace", color: "text.secondary" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_material9.Box, { component: "span", sx: { color: "#dc2626" }, children: [
+                t("modules.form.publicPolicies.fields.conditions.states.deny"),
+                ":"
+              ] }),
+              " ",
+              (policy?.fields?.deny || []).join(", ") || "-"
+            ] })
+          ] }) })
+        ] })
+      ]
     }
-  }, [sessionManager]);
-  const clearError = (0, import_react15.useCallback)(() => {
-    setState((prev) => ({ ...prev, error: null }));
-  }, []);
-  const getTokenInfo = (0, import_react15.useCallback)(() => {
-    return sessionManager.getTokenInfo();
-  }, [sessionManager]);
-  (0, import_react15.useEffect)(() => {
-    initialize();
-  }, [initialize]);
-  return {
-    // Estado
-    ...state,
-    // Acciones
-    login,
-    logout,
-    refreshTokens,
-    clearError,
-    getTokenInfo,
-    // Utilidades
-    isExpiringSoon: state.tokens ? state.tokens.expiresAt - Date.now() < 5 * 60 * 1e3 : false,
-    // 5 minutos
-    expiresIn: state.tokens ? Math.max(0, state.tokens.expiresAt - Date.now()) : 0,
-    refreshExpiresIn: state.tokens ? Math.max(0, state.tokens.refreshExpiresAt - Date.now()) : 0
-  };
-}
+  );
+});
+var PolicyItem_default = PolicyItem;
 
-// src/providers/SessionProvider.tsx
-var import_react16 = require("react");
+// src/components/PublicPolicies/Policies.tsx
 var import_jsx_runtime14 = require("react/jsx-runtime");
-var SessionContext = (0, import_react16.createContext)(void 0);
-function SessionProvider({ children, options = {} }) {
-  const sessionHook = useSession(options);
-  const sessionData = (0, import_react16.useMemo)(() => {
-    if (!sessionHook.tokens?.accessToken || !sessionHook.isAuthenticated) {
-      return null;
+var generateId = () => {
+  const c = globalThis?.crypto;
+  if (c && typeof c.randomUUID === "function") return c.randomUUID();
+  return `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+};
+var Policies = ({
+  policies,
+  onChange,
+  availableFields,
+  errors,
+  isSubmitting = false
+}) => {
+  const { t } = (0, import_react_i18next3.useTranslation)();
+  const policyRefs = (0, import_react15.useRef)({});
+  const takenActions = new Set((policies || []).map((p) => p.action).filter(Boolean));
+  const remainingActions = PREFERRED_POLICY_ORDER.filter((a) => !takenActions.has(a));
+  const canAddPolicy = remainingActions.length > 0;
+  const addPolicy = () => {
+    const defaultAction = remainingActions[0] || "create";
+    const newPolicy = {
+      id: generateId(),
+      action: defaultAction
+    };
+    if (defaultAction === "delete") {
+      newPolicy.permission = "deny";
+    } else {
+      newPolicy.fields = {
+        allow: [],
+        owner_allow: [],
+        deny: availableFields
+      };
     }
-    try {
-      const decoded = decodeJwtSafely(sessionHook.tokens.accessToken);
-      if (decoded && decoded.sub && decoded.email && decoded.subscriber) {
-        const result = {
-          _id: decoded.sub,
-          email: decoded.email,
-          subscriberKey: decoded.subscriber
-        };
-        Object.keys(decoded).forEach((key) => {
-          if (!["sub", "email", "subscriber"].includes(key)) {
-            result[key] = decoded[key];
-          }
-        });
-        return result;
+    const next = [...policies || [], newPolicy];
+    onChange(next);
+    setTimeout(() => {
+      const newIndex = next.length - 1;
+      const el = policyRefs.current[newIndex];
+      if (el) {
+        el.scrollIntoView({ behavior: "smooth", block: "center" });
       }
-    } catch (error) {
-      console.error("Error decoding JWT token for sessionData:", error);
-    }
-    return null;
-  }, [sessionHook.tokens?.accessToken, sessionHook.isAuthenticated]);
-  const contextValue = {
-    ...sessionHook,
-    sessionData
+    }, 100);
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(SessionContext.Provider, { value: contextValue, children });
-}
-function useSessionContext() {
-  const context = (0, import_react16.useContext)(SessionContext);
-  if (context === void 0) {
-    throw new Error("useSessionContext must be used within a SessionProvider");
-  }
-  return context;
-}
-function ProtectedRoute({
-  children,
-  fallback = /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { children: "Please log in to access this content" }),
-  redirectTo
-}) {
-  const { isAuthenticated, isLoading, isInitialized } = useSessionContext();
-  if (!isInitialized || isLoading) {
-    return /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { children: "Loading..." });
-  }
-  if (!isAuthenticated) {
-    if (redirectTo) {
-      redirectTo();
-      return null;
-    }
-    return /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_jsx_runtime14.Fragment, { children: fallback });
-  }
-  return /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_jsx_runtime14.Fragment, { children });
-}
-function SessionDebugInfo() {
-  const session = useSessionContext();
-  if (!session.isInitialized) {
-    return /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("div", { children: "Session not initialized" });
-  }
-  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { style: {
-    padding: "10px",
-    margin: "10px",
-    border: "1px solid #ccc",
-    borderRadius: "4px",
-    fontSize: "12px",
-    fontFamily: "monospace"
-  }, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("h4", { children: "Session Debug Info" }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Authenticated:" }),
-      " ",
-      session.isAuthenticated ? "Yes" : "No"
-    ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Loading:" }),
-      " ",
-      session.isLoading ? "Yes" : "No"
-    ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Error:" }),
-      " ",
-      session.error || "None"
-    ] }),
-    session.tokens && /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_jsx_runtime14.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Access Token:" }),
-        " ",
-        session.tokens.accessToken.substring(0, 20),
-        "..."
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Refresh Token:" }),
-        " ",
-        session.tokens.refreshToken.substring(0, 20),
-        "..."
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Access Expires In:" }),
-        " ",
-        Math.round(session.expiresIn / 1e3 / 60),
-        " minutes"
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Refresh Expires In:" }),
-        " ",
-        Math.round(session.refreshExpiresIn / 1e3 / 60 / 60),
-        " hours"
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)("strong", { children: "Expiring Soon:" }),
-        " ",
-        session.isExpiringSoon ? "Yes" : "No"
+  const removePolicy = (index) => {
+    const next = [...policies];
+    next.splice(index, 1);
+    onChange(next);
+  };
+  const arrayError = (() => {
+    if (!errors) return null;
+    if (typeof errors === "string") return errors;
+    const msg = errors._error;
+    return typeof msg === "string" ? msg : null;
+  })();
+  const usedActions = new Set((policies || []).map((p) => p.action));
+  return /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_jsx_runtime14.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Divider, { sx: { borderColor: "#e0e4e7" } }),
+    /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_material10.Box, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Box, { display: "flex", justifyContent: "space-between", alignItems: "center", mb: 3, children: /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_material10.Box, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          import_material10.Typography,
+          {
+            variant: "h6",
+            sx: {
+              fontWeight: 600,
+              color: "#111418",
+              mb: 1
+            },
+            children: t("modules.form.publicPolicies.title")
+          }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          import_material10.Typography,
+          {
+            variant: "body2",
+            color: "text.secondary",
+            sx: { fontSize: "0.875rem" },
+            children: t("modules.form.publicPolicies.description")
+          }
+        )
+      ] }) }),
+      arrayError && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Alert, { severity: "error", sx: { mb: 3 }, children: arrayError }),
+      /* @__PURE__ */ (0, import_jsx_runtime14.jsxs)(import_material10.Stack, { spacing: 3, children: [
+        (policies || []).length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Alert, { severity: "info", children: t("modules.form.publicPolicies.noPolicies") }) : policies.map((policy, index) => /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          PolicyItem_default,
+          {
+            ref: (el) => {
+              policyRefs.current[index] = el;
+            },
+            policy,
+            onChange: (nextPolicy) => {
+              const next = [...policies];
+              next[index] = nextPolicy;
+              onChange(next);
+            },
+            onRemove: () => removePolicy(index),
+            availableFields,
+            isSubmitting,
+            usedActions,
+            error: typeof errors === "object" && errors && policy.id in errors ? errors[policy.id] : void 0
+          },
+          policy.id
+        )),
+        canAddPolicy && /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_material10.Box, { children: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(
+          import_material10.Button,
+          {
+            type: "button",
+            variant: "outlined",
+            startIcon: /* @__PURE__ */ (0, import_jsx_runtime14.jsx)(import_icons_material4.Add, {}),
+            onClick: addPolicy,
+            disabled: isSubmitting,
+            sx: {
+              borderColor: "#d0d7de",
+              color: "#656d76",
+              "&:hover": {
+                borderColor: "#8c959f",
+                backgroundColor: "transparent"
+              }
+            },
+            children: t("modules.form.publicPolicies.addPolicy")
+          }
+        ) })
       ] })
     ] })
   ] });
-}
+};
+var Policies_default = Policies;
 
 // src/components/LoginComponent.tsx
-var import_react17 = require("react");
+var import_react16 = require("react");
 var import_material11 = require("@mui/material");
 var import_jsx_runtime15 = require("react/jsx-runtime");
 function LoginComponent() {
-  const [email, setEmail] = (0, import_react17.useState)("");
-  const [password, setPassword] = (0, import_react17.useState)("");
-  const [showForm, setShowForm] = (0, import_react17.useState)(false);
+  const [email, setEmail] = (0, import_react16.useState)("");
+  const [password, setPassword] = (0, import_react16.useState)("");
+  const [showForm, setShowForm] = (0, import_react16.useState)(false);
   const {
     isAuthenticated,
     isLoading,
@@ -3485,29 +3511,29 @@ function SessionStatus() {
 }
 
 // src/hooks/useUserData.ts
-var import_react18 = require("react");
-var import_crudify_browser5 = __toESM(require("@nocios/crudify-browser"));
+var import_react17 = require("react");
+var import_crudify_browser4 = __toESM(require("@nocios/crudify-browser"));
 var useUserData = (options = {}) => {
   const { autoFetch = true, retryOnError = false, maxRetries = 3 } = options;
   const { isAuthenticated, isInitialized, sessionData, tokens } = useSessionContext();
-  const [userData, setUserData] = (0, import_react18.useState)(null);
-  const [loading, setLoading] = (0, import_react18.useState)(false);
-  const [error, setError] = (0, import_react18.useState)(null);
-  const abortControllerRef = (0, import_react18.useRef)(null);
-  const mountedRef = (0, import_react18.useRef)(true);
-  const requestIdRef = (0, import_react18.useRef)(0);
-  const retryCountRef = (0, import_react18.useRef)(0);
-  const getUserEmail = (0, import_react18.useCallback)(() => {
+  const [userData, setUserData] = (0, import_react17.useState)(null);
+  const [loading, setLoading] = (0, import_react17.useState)(false);
+  const [error, setError] = (0, import_react17.useState)(null);
+  const abortControllerRef = (0, import_react17.useRef)(null);
+  const mountedRef = (0, import_react17.useRef)(true);
+  const requestIdRef = (0, import_react17.useRef)(0);
+  const retryCountRef = (0, import_react17.useRef)(0);
+  const getUserEmail = (0, import_react17.useCallback)(() => {
     if (!sessionData) return null;
     return sessionData.email || sessionData["cognito:username"] || null;
   }, [sessionData]);
-  const clearProfile = (0, import_react18.useCallback)(() => {
+  const clearProfile = (0, import_react17.useCallback)(() => {
     setUserData(null);
     setError(null);
     setLoading(false);
     retryCountRef.current = 0;
   }, []);
-  const refreshProfile = (0, import_react18.useCallback)(async () => {
+  const refreshProfile = (0, import_react17.useCallback)(async () => {
     const userEmail = getUserEmail();
     console.log("\u{1F464} useUserData - Refreshing profile for:", userEmail);
     if (!userEmail) {
@@ -3536,7 +3562,7 @@ var useUserData = (options = {}) => {
         setError(null);
       }
       console.log("\u{1F464} useUserData - Fetching profile data from database");
-      const response = await import_crudify_browser5.default.readItems("users", {
+      const response = await import_crudify_browser4.default.readItems("users", {
         filter: { email: userEmail },
         pagination: { limit: 1 }
       });
@@ -3639,14 +3665,14 @@ var useUserData = (options = {}) => {
       }
     }
   }, [isInitialized, getUserEmail, retryOnError, maxRetries]);
-  (0, import_react18.useEffect)(() => {
+  (0, import_react17.useEffect)(() => {
     if (autoFetch && isAuthenticated && isInitialized) {
       refreshProfile();
     } else if (!isAuthenticated) {
       clearProfile();
     }
   }, [autoFetch, isAuthenticated, isInitialized, refreshProfile, clearProfile]);
-  (0, import_react18.useEffect)(() => {
+  (0, import_react17.useEffect)(() => {
     mountedRef.current = true;
     return () => {
       mountedRef.current = false;
@@ -3672,7 +3698,7 @@ var useUserData = (options = {}) => {
 };
 
 // src/hooks/useAuth.ts
-var import_react19 = require("react");
+var import_react18 = require("react");
 var useAuth = () => {
   const {
     isAuthenticated,
@@ -3690,7 +3716,7 @@ var useAuth = () => {
     expiresIn,
     refreshExpiresIn
   } = useSessionContext();
-  const setToken = (0, import_react19.useCallback)((token) => {
+  const setToken = (0, import_react18.useCallback)((token) => {
     if (token) {
       console.warn("useAuth.setToken() is deprecated. Use login() method instead for better security.");
     } else {
@@ -3725,8 +3751,8 @@ var useAuth = () => {
 };
 
 // src/hooks/useData.ts
-var import_react20 = require("react");
-var import_crudify_browser6 = __toESM(require("@nocios/crudify-browser"));
+var import_react19 = require("react");
+var import_crudify_browser5 = __toESM(require("@nocios/crudify-browser"));
 var useData = () => {
   const {
     isInitialized,
@@ -3735,10 +3761,10 @@ var useData = () => {
     isAuthenticated,
     login: sessionLogin
   } = useSessionContext();
-  const isReady = (0, import_react20.useCallback)(() => {
+  const isReady = (0, import_react19.useCallback)(() => {
     return isInitialized && !isLoading && !error;
   }, [isInitialized, isLoading, error]);
-  const waitForReady = (0, import_react20.useCallback)(async () => {
+  const waitForReady = (0, import_react19.useCallback)(async () => {
     return new Promise((resolve, reject) => {
       const checkReady = () => {
         if (isReady()) {
@@ -3752,36 +3778,36 @@ var useData = () => {
       checkReady();
     });
   }, [isReady, error]);
-  const ensureReady = (0, import_react20.useCallback)(async () => {
+  const ensureReady = (0, import_react19.useCallback)(async () => {
     if (!isReady()) {
       throw new Error("System not ready. Check isInitialized, isLoading, and error states.");
     }
   }, [isReady]);
-  const readItems = (0, import_react20.useCallback)(async (moduleKey, filter, options) => {
+  const readItems = (0, import_react19.useCallback)(async (moduleKey, filter, options) => {
     await ensureReady();
-    return await import_crudify_browser6.default.readItems(moduleKey, filter || {}, options);
+    return await import_crudify_browser5.default.readItems(moduleKey, filter || {}, options);
   }, [ensureReady]);
-  const readItem = (0, import_react20.useCallback)(async (moduleKey, filter, options) => {
+  const readItem = (0, import_react19.useCallback)(async (moduleKey, filter, options) => {
     await ensureReady();
-    return await import_crudify_browser6.default.readItem(moduleKey, filter, options);
+    return await import_crudify_browser5.default.readItem(moduleKey, filter, options);
   }, [ensureReady]);
-  const createItem = (0, import_react20.useCallback)(async (moduleKey, data, options) => {
+  const createItem = (0, import_react19.useCallback)(async (moduleKey, data, options) => {
     await ensureReady();
-    return await import_crudify_browser6.default.createItem(moduleKey, data, options);
+    return await import_crudify_browser5.default.createItem(moduleKey, data, options);
   }, [ensureReady]);
-  const updateItem = (0, import_react20.useCallback)(async (moduleKey, data, options) => {
+  const updateItem = (0, import_react19.useCallback)(async (moduleKey, data, options) => {
     await ensureReady();
-    return await import_crudify_browser6.default.updateItem(moduleKey, data, options);
+    return await import_crudify_browser5.default.updateItem(moduleKey, data, options);
   }, [ensureReady]);
-  const deleteItem = (0, import_react20.useCallback)(async (moduleKey, id, options) => {
+  const deleteItem = (0, import_react19.useCallback)(async (moduleKey, id, options) => {
     await ensureReady();
-    return await import_crudify_browser6.default.deleteItem(moduleKey, id, options);
+    return await import_crudify_browser5.default.deleteItem(moduleKey, id, options);
   }, [ensureReady]);
-  const transaction = (0, import_react20.useCallback)(async (operations, options) => {
+  const transaction = (0, import_react19.useCallback)(async (operations, options) => {
     await ensureReady();
-    return await import_crudify_browser6.default.transaction(operations, options);
+    return await import_crudify_browser5.default.transaction(operations, options);
   }, [ensureReady]);
-  const login = (0, import_react20.useCallback)(async (email, password) => {
+  const login = (0, import_react19.useCallback)(async (email, password) => {
     try {
       const result = await sessionLogin(email, password);
       if (result.success) {