@skylabs-digital/react-identity-access 1.0.0

package/dist/index.es.js

@@ -0,0 +1,2609 @@
+import { jsx as i, Fragment as B, jsxs as g } from "react/jsx-runtime";
+import { createContext as te, useState as b, useCallback as X, useMemo as N, useEffect as K, useContext as re } from "react";
+import { useLocation as we, Navigate as ie } from "react-router";
+class W {
+  // SessionManager instance
+  constructor(e, t = 1e4) {
+    this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
+  }
+  setSessionManager(e) {
+    this.sessionManager = e;
+  }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  async request(e, t, r, s) {
+    return this.executeRequest(e, t, r, s, !1);
+  }
+  async executeRequest(e, t, r, s, o = !1) {
+    const T = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, M = (s == null ? void 0 : s.timeout) || this.timeout;
+    let S = {
+      "Content-Type": "application/json",
+      ...s == null ? void 0 : s.headers
+    };
+    if (!(s != null && s.skipAuth) && this.sessionManager)
+      try {
+        const p = await this.sessionManager.getAuthHeaders();
+        S = { ...S, ...p };
+      } catch (p) {
+        console.warn("Failed to inject auth headers:", p);
+      }
+    const E = new AbortController(), w = setTimeout(() => E.abort(), M);
+    try {
+      const p = await fetch(T, {
+        method: e,
+        headers: S,
+        body: r ? JSON.stringify(r) : void 0,
+        signal: E.signal
+      });
+      if (clearTimeout(w), p.status === 401 && !(s != null && s.skipRetry) && !o && this.sessionManager)
+        try {
+          const f = this.sessionManager.getTokens();
+          if (f != null && f.refreshToken)
+            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, r, s, !0);
+        } catch {
+          throw new Error(`HTTP ${p.status}: ${p.statusText}`);
+        }
+      if (!p.ok)
+        throw new Error(`HTTP ${p.status}: ${p.statusText}`);
+      const v = p.headers.get("content-type");
+      return !v || !v.includes("application/json") ? {} : await p.json();
+    } catch (p) {
+      throw clearTimeout(w), p instanceof Error && p.name === "AbortError" ? new Error(`Request timeout after ${M}ms`) : p;
+    }
+  }
+  async get(e, t) {
+    return this.request("GET", e, void 0, t);
+  }
+  async post(e, t, r) {
+    return this.request("POST", e, t, r);
+  }
+  async put(e, t, r) {
+    return this.request("PUT", e, t, r);
+  }
+  async delete(e, t) {
+    return this.request("DELETE", e, void 0, t);
+  }
+}
+class ne {
+  constructor(e, t, r) {
+    this.httpService = e, this.appId = t, this.sessionManager = r;
+  }
+  async createTenant(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post("/tenants/", e, {
+      headers: t
+    })).data;
+  }
+  async getTenants(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
+    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
+    const s = `/tenants/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+      headers: t
+    });
+    return {
+      tenants: o.data,
+      meta: o.meta
+    };
+  }
+  async getTenantById(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/tenants/${e}`, {
+      headers: t
+    })).data;
+  }
+  async updateTenant(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(`/tenants/${e}`, t, {
+      headers: r
+    })).data;
+  }
+  async adminUpdateTenant(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/tenants/${e}/admin-update`,
+      t,
+      {
+        headers: r
+      }
+    )).data;
+  }
+  // Public endpoint - no auth required
+  async getPublicTenantInfo(e) {
+    return (await this.httpService.get(
+      `/tenants/${this.appId}/${e}/public`
+    )).data;
+  }
+  // Settings endpoints
+  async getTenantSettings(e) {
+    return (await this.httpService.get(
+      `/tenants/${e}/settings`
+    )).data;
+  }
+  async updateTenantSettings(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/tenants/${e}/settings`,
+      t,
+      {
+        headers: r
+      }
+    )).data;
+  }
+}
+class ye {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createApp(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post("/apps/", e, {
+      headers: t
+    })).data;
+  }
+  async getApps(e) {
+    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
+    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
+    const s = `/apps/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+      headers: t
+    });
+    return {
+      apps: o.data,
+      meta: o.meta
+    };
+  }
+  async getAppById(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/apps/${e}`, {
+      headers: t
+    })).data;
+  }
+  async updateApp(e, t) {
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(`/apps/${e}`, t, {
+      headers: r
+    })).data;
+  }
+  async getPublicAppInfo(e) {
+    return (await this.httpService.get(`/apps/${e}/public`)).data;
+  }
+  async setDefaultSubscriptionPlan(e, t) {
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/apps/${e}/default-subscription-plan`,
+      { planId: t },
+      { headers: r }
+    )).data;
+  }
+  async updateSettingsSchema(e, t, r) {
+    const s = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/apps/${e}/settings-schema`,
+      { schema: t, defaultSettings: r },
+      { headers: s }
+    )).data;
+  }
+  async exportConfig(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/apps/${e}/export-config`, {
+      headers: t
+    })).data;
+  }
+}
+const ue = te(null), me = () => /* @__PURE__ */ i(
+  "div",
+  {
+    style: {
+      display: "flex",
+      justifyContent: "center",
+      alignItems: "center",
+      height: "100vh",
+      fontFamily: "system-ui, sans-serif"
+    },
+    children: /* @__PURE__ */ i("div", { children: "Loading application..." })
+  }
+), oe = ({ error: n, retry: e }) => /* @__PURE__ */ g(
+  "div",
+  {
+    style: {
+      display: "flex",
+      flexDirection: "column",
+      justifyContent: "center",
+      alignItems: "center",
+      height: "100vh",
+      fontFamily: "system-ui, sans-serif",
+      textAlign: "center",
+      padding: "20px"
+    },
+    children: [
+      /* @__PURE__ */ i("h2", { style: { color: "#dc3545", marginBottom: "16px" }, children: "Application Error" }),
+      /* @__PURE__ */ i("p", { style: { color: "#6c757d", marginBottom: "24px" }, children: n.message || "Unable to load application" }),
+      /* @__PURE__ */ i(
+        "button",
+        {
+          onClick: e,
+          style: {
+            padding: "8px 16px",
+            backgroundColor: "#007bff",
+            color: "white",
+            border: "none",
+            borderRadius: "4px",
+            cursor: "pointer"
+          },
+          children: "Retry"
+        }
+      )
+    ]
+  }
+);
+function _e({ config: n, children: e }) {
+  const [t, r] = b(n.initialTenant || null), [s, o] = b(!n.initialTenant), [T, M] = b(null), [S, E] = b(null), [w, p] = b(!0), [v, f] = b(null), y = X(() => {
+    const l = n.tenantMode || "fixed", a = "tenant";
+    if (l === "fixed")
+      return n.fixedTenantSlug || null;
+    if (typeof window > "u") return null;
+    if (l === "subdomain") {
+      const k = window.location.hostname.split(".");
+      if (k.length >= 3) {
+        const F = k[0];
+        return localStorage.setItem(a, F), F;
+      }
+      return localStorage.getItem(a);
+    } else {
+      const k = new URLSearchParams(window.location.search).get(n.selectorParam || "tenant");
+      return k ? (localStorage.setItem(a, k), k) : localStorage.getItem(a);
+    }
+  }, [n.tenantMode, n.fixedTenantSlug, n.selectorParam]), c = N(() => y(), [y]), C = N(() => {
+    const l = () => {
+      c && d(c);
+    }, a = () => {
+      x();
+    };
+    return {
+      appId: n.appId,
+      baseUrl: n.baseUrl,
+      // Tenant info
+      tenant: t,
+      tenantSlug: c,
+      isTenantLoading: s,
+      tenantError: T,
+      retryTenant: l,
+      // App info
+      appInfo: S,
+      isAppLoading: w,
+      appError: v,
+      retryApp: a
+    };
+  }, [n, t, c, s, T, S, w, v]), x = X(async () => {
+    try {
+      p(!0), f(null);
+      const l = new W(n.baseUrl), u = await new ye(l, {}).getPublicAppInfo(n.appId);
+      E(u);
+    } catch (l) {
+      const a = l instanceof Error ? l : new Error("Failed to load app information");
+      f(a), E(null);
+    } finally {
+      p(!1);
+    }
+  }, [n.baseUrl, n.appId]), d = X(
+    async (l) => {
+      try {
+        o(!0), M(null);
+        const a = new W(n.baseUrl), k = await new ne(a, n.appId).getPublicTenantInfo(l);
+        r(k);
+      } catch (a) {
+        const u = a instanceof Error ? a : new Error("Failed to load tenant information");
+        M(u), r(null);
+      } finally {
+        o(!1);
+      }
+    },
+    [n.baseUrl, n.appId]
+  );
+  if (K(() => {
+    x();
+  }, [x]), K(() => {
+    if (!n.initialTenant && c)
+      d(c);
+    else if (!n.initialTenant && !c && n.tenantMode !== "fixed") {
+      const l = n.tenantMode || "fixed";
+      M(
+        new Error(`No tenant ${l === "subdomain" ? "subdomain" : "parameter"} found`)
+      ), o(!1);
+    } else n.tenantMode === "fixed" && !n.fixedTenantSlug && (M(new Error("Fixed tenant mode requires fixedTenantSlug configuration")), o(!1));
+  }, [n.initialTenant, c, d, n.tenantMode, n.fixedTenantSlug]), s)
+    return /* @__PURE__ */ i(B, { children: n.loadingFallback || /* @__PURE__ */ i(me, {}) });
+  if (T) {
+    const l = typeof n.errorFallback == "function" ? n.errorFallback(T, () => d(c || "")) : n.errorFallback || /* @__PURE__ */ i(oe, { error: T, retry: () => d(c || "") });
+    return /* @__PURE__ */ i(B, { children: l });
+  }
+  return !t && n.tenantMode !== "fixed" ? /* @__PURE__ */ i(
+    oe,
+    {
+      error: new Error("No tenant information available"),
+      retry: () => d(c || "")
+    }
+  ) : /* @__PURE__ */ i(ue.Provider, { value: C, children: e });
+}
+function G() {
+  const n = re(ue);
+  if (!n)
+    throw new Error("useApp must be used within an AppProvider");
+  return n;
+}
+const Ke = G;
+function Ye() {
+  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: s } = G();
+  return {
+    tenant: n,
+    tenantSlug: e,
+    isLoading: t,
+    error: r,
+    retry: s
+  };
+}
+class be {
+  constructor(e = {}) {
+    this.refreshPromise = null, this.refreshQueue = [], this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || {
+      get: () => {
+        try {
+          const t = localStorage.getItem(this.storageKey);
+          return t ? JSON.parse(t) : null;
+        } catch {
+          return null;
+        }
+      },
+      set: (t) => {
+        try {
+          localStorage.setItem(this.storageKey, JSON.stringify(t));
+        } catch {
+        }
+      },
+      clear: () => {
+        try {
+          localStorage.removeItem(this.storageKey);
+        } catch {
+        }
+      }
+    };
+  }
+  setTokens(e) {
+    const t = {
+      ...e,
+      expiresAt: e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0)
+    };
+    this.tokenStorage.set(t);
+  }
+  getTokens() {
+    return this.tokenStorage.get();
+  }
+  clearTokens() {
+    this.tokenStorage.clear();
+  }
+  isTokenExpired(e) {
+    const t = e || this.getTokens();
+    return t != null && t.expiresAt ? Date.now() >= t.expiresAt : !1;
+  }
+  shouldRefreshToken(e) {
+    const t = e || this.getTokens();
+    return !(t != null && t.expiresAt) || !this.autoRefresh ? !1 : Date.now() >= t.expiresAt - this.refreshThreshold;
+  }
+  getAccessToken() {
+    const e = this.getTokens();
+    return (e == null ? void 0 : e.accessToken) || null;
+  }
+  async getAuthHeaders() {
+    const e = this.getTokens();
+    if (!(e != null && e.accessToken))
+      return {};
+    if (!this.shouldRefreshToken(e))
+      return {
+        Authorization: `Bearer ${e.accessToken}`
+      };
+    if (!e.refreshToken)
+      return this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
+    if (this.refreshPromise)
+      return new Promise((t, r) => {
+        this.refreshQueue.push({ resolve: t, reject: r });
+      });
+    this.refreshPromise = this.performTokenRefresh(e.refreshToken);
+    try {
+      await this.refreshPromise;
+      const t = this.getTokens(), r = t != null && t.accessToken ? { Authorization: `Bearer ${t.accessToken}` } : {};
+      return this.refreshQueue.forEach(({ resolve: s }) => s(r)), this.refreshQueue = [], r;
+    } catch (t) {
+      const r = t instanceof Error ? t : new Error("Token refresh failed");
+      return this.refreshQueue.forEach(({ reject: s }) => s(r)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
+    } finally {
+      this.refreshPromise = null;
+    }
+  }
+  async performTokenRefresh(e) {
+    if (!this.baseUrl)
+      throw new Error("Base URL not configured for token refresh");
+    const t = `${this.baseUrl}/auth/refresh`, r = await fetch(t, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        refreshToken: e
+      })
+    });
+    if (!r.ok)
+      throw new Error(`Token refresh failed: ${r.status} ${r.statusText}`);
+    const s = await r.json();
+    this.setTokens({
+      accessToken: s.accessToken,
+      refreshToken: s.refreshToken || e,
+      expiresIn: s.expiresIn
+    });
+  }
+  setUser(e) {
+    const t = this.tokenStorage.get() || {};
+    this.tokenStorage.set({ ...t, user: e });
+  }
+  getUser() {
+    const e = this.tokenStorage.get();
+    return (e == null ? void 0 : e.user) || null;
+  }
+  clearUser() {
+    const e = this.tokenStorage.get() || {};
+    delete e.user, this.tokenStorage.set(e);
+  }
+  clearSession() {
+    this.clearTokens(), this.clearUser();
+  }
+  hasValidSession() {
+    const e = this.getTokens();
+    return e !== null && !this.isTokenExpired(e);
+  }
+}
+class Se {
+  constructor(e) {
+    this.httpService = e;
+  }
+  // Public endpoints - no auth required
+  async login(e) {
+    const t = await this.httpService.post("/auth/login", e);
+    return console.log(t), t;
+  }
+  async signup(e) {
+    return await this.httpService.post("/auth/signup", e);
+  }
+  async signupTenantAdmin(e) {
+    return await this.httpService.post(
+      "/auth/signup/tenant-admin",
+      e
+    );
+  }
+  async refreshToken(e) {
+    return await this.httpService.post("/auth/refresh", e);
+  }
+  async requestPasswordReset(e) {
+    await this.httpService.post("/auth/password-reset/request", e);
+  }
+  async confirmPasswordReset(e) {
+    await this.httpService.post("/auth/password-reset/confirm", e);
+  }
+  // Protected endpoints - auth required
+  async changePassword(e, t) {
+    await this.httpService.post("/auth/change-password", e, {
+      headers: t
+    });
+  }
+}
+class ae {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createRole(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post("/roles/", e, {
+      headers: t
+    })).data;
+  }
+  async getRoleById(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/roles/${e}`, {
+      headers: t
+    })).data;
+  }
+  async updateRole(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(`/roles/${e}`, t, {
+      headers: r
+    })).data;
+  }
+  async deleteRole(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    await this.httpService.delete(`/roles/${e}`, {
+      headers: t
+    });
+  }
+  // Public endpoint - no auth required
+  async getRolesByApp(e, t) {
+    const r = new URLSearchParams();
+    t != null && t.page && r.append("page", t.page.toString()), t != null && t.limit && r.append("limit", t.limit.toString()), t != null && t.sortBy && r.append("sortBy", t.sortBy), t != null && t.sortOrder && r.append("sortOrder", t.sortOrder);
+    const s = `/roles/app/${e}${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s);
+    return {
+      roles: o.data,
+      meta: o.meta
+    };
+  }
+  async assignRole(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    await this.httpService.post(`/roles/${e}/assign`, t, {
+      headers: r
+    });
+  }
+  async revokeRole(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    await this.httpService.post(`/roles/${e}/revoke`, t, {
+      headers: r
+    });
+  }
+  async getUserRoles(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders(), s = new URLSearchParams();
+    t != null && t.page && s.append("page", t.page.toString()), t != null && t.limit && s.append("limit", t.limit.toString()), t != null && t.sortBy && s.append("sortBy", t.sortBy), t != null && t.sortOrder && s.append("sortOrder", t.sortOrder);
+    const o = `/roles/user/${e}${s.toString() ? `?${s.toString()}` : ""}`, T = await this.httpService.get(o, {
+      headers: r
+    });
+    return {
+      roles: T.data,
+      meta: T.meta
+    };
+  }
+}
+class ve {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createUser(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post("/users/", e, {
+      headers: t
+    })).data;
+  }
+  async getUsers(e) {
+    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
+    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
+    const s = `/users/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+      headers: t
+    });
+    return {
+      users: o.data,
+      meta: o.meta
+    };
+  }
+  async getUserById(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/users/${e}`, {
+      headers: t
+    })).data;
+  }
+  async updateUser(e, t) {
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(`/users/${e}`, t, {
+      headers: r
+    })).data;
+  }
+  async deleteUser(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    await this.httpService.delete(`/users/${e}`, {
+      headers: t
+    });
+  }
+}
+const he = te(null);
+function Qe({ config: n = {}, children: e }) {
+  const { appId: t, tenantSlug: r, baseUrl: s } = G(), [o, T] = b(n.initialRoles || []), [M, S] = b(!n.initialRoles), [E, w] = b(null), [p, v] = b(!1), [f, y] = b(null), c = N(() => {
+    const m = r ? `auth_tokens_${r}` : "auth_tokens", R = {
+      get: () => {
+        try {
+          const U = localStorage.getItem(m);
+          return U ? JSON.parse(U) : null;
+        } catch {
+          return null;
+        }
+      },
+      set: (U) => {
+        try {
+          localStorage.setItem(m, JSON.stringify(U));
+        } catch {
+        }
+      },
+      clear: () => {
+        try {
+          localStorage.removeItem(m);
+        } catch {
+        }
+      }
+    };
+    return new be({
+      onRefreshFailed: n.onRefreshFailed,
+      tokenStorage: R,
+      baseUrl: s
+    });
+  }, [r, s, n.onRefreshFailed]), C = N(() => {
+    const m = new W(s);
+    return m.setSessionManager(c), m;
+  }, [s, c]), x = N(() => new Se(new W(s)), [s]), d = N(() => new ve(C, c), [C, c]), l = N(() => new ae(new W(s)), [s]), a = N(() => E || c.getUser(), [E, c]), u = N(() => a != null && a.roleId && o.find((m) => m.id === a.roleId) || null, [a, o]), k = N(() => (u == null ? void 0 : u.permissions) || [], [u]);
+  K(() => {
+    console.log("AuthProvider - userPermissions changed:", k);
+  }, [k]);
+  const F = N(() => {
+    const m = async () => {
+      try {
+        v(!0), y(null);
+        const A = c.getUser();
+        if (!(A != null && A.id))
+          throw new Error("No user ID available in session");
+        const $ = await d.getUserById(A.id);
+        w($), c.setUser($);
+      } catch (A) {
+        const $ = A instanceof Error ? A : new Error("Failed to load user data");
+        y($), console.error("Failed to load user data:", $);
+      } finally {
+        v(!1);
+      }
+    }, R = async () => {
+      await m();
+    }, U = async (A, $, J) => {
+      const V = await x.login({
+        email: A,
+        password: $,
+        tenantId: J
+      });
+      if (c.setTokens({
+        accessToken: V.accessToken,
+        refreshToken: V.refreshToken,
+        expiresIn: V.expiresIn
+      }), V.user) {
+        c.setUser(V.user), w(V.user);
+        try {
+          await m();
+        } catch (se) {
+          console.warn("Failed to load complete user data after login:", se);
+        }
+      }
+      return V;
+    }, I = async (A, $, J, V) => await x.signup({ email: A, name: $, password: J, tenantId: V }), h = async (A, $, J, V) => await x.signupTenantAdmin({
+      email: A,
+      name: $,
+      password: J,
+      tenantName: V,
+      appId: t
+    }), P = async (A, $) => {
+      const J = await c.getAuthHeaders();
+      await x.changePassword({ currentPassword: A, newPassword: $ }, J);
+    }, Y = async (A, $) => {
+      await x.requestPasswordReset({ email: A, tenantId: $ });
+    }, L = async (A, $) => {
+      await x.confirmPasswordReset({ token: A, newPassword: $ });
+    }, z = async () => {
+      const A = c.getTokens();
+      if (!(A != null && A.refreshToken))
+        throw new Error("No refresh token available");
+      const $ = await x.refreshToken({
+        refreshToken: A.refreshToken
+      });
+      c.setTokens({
+        accessToken: $.accessToken,
+        refreshToken: $.refreshToken || A.refreshToken,
+        expiresIn: $.expiresIn
+      });
+    }, _ = () => {
+      c.clearSession(), w(null), y(null);
+    }, H = (A) => {
+      c.setTokens(A);
+    }, q = () => c.hasValidSession(), Q = () => {
+      c.clearSession(), w(null), y(null);
+    }, D = async () => {
+      if (t)
+        try {
+          S(!0);
+          const { roles: A } = await l.getRolesByApp(t);
+          T(A);
+        } catch (A) {
+          console.error("Failed to fetch roles:", A);
+        } finally {
+          S(!1);
+        }
+    }, j = async () => {
+      await D();
+    }, O = (A) => {
+      if (!k || k.length === 0)
+        return !1;
+      if (typeof A == "string")
+        return k.includes(A);
+      const $ = `${A.resource}.${A.action}`;
+      return k.includes($);
+    };
+    return {
+      sessionManager: c,
+      authenticatedHttpService: C,
+      login: U,
+      signup: I,
+      signupTenantAdmin: h,
+      changePassword: P,
+      requestPasswordReset: Y,
+      confirmPasswordReset: L,
+      refreshToken: z,
+      logout: _,
+      setTokens: H,
+      hasValidSession: q,
+      clearSession: Q,
+      currentUser: E,
+      isUserLoading: p,
+      userError: f,
+      refreshUser: R,
+      userRole: u,
+      userPermissions: k,
+      availableRoles: o,
+      rolesLoading: M,
+      hasPermission: O,
+      hasAnyPermission: (A) => A.some(($) => O($)),
+      hasAllPermissions: (A) => A.every(($) => O($)),
+      getUserPermissionStrings: () => k || [],
+      refreshRoles: j
+    };
+  }, [
+    c,
+    C,
+    x,
+    d,
+    l,
+    t,
+    o,
+    E,
+    p,
+    f,
+    u,
+    k
+  ]);
+  return K(() => {
+    !n.initialRoles && t && (async () => {
+      try {
+        S(!0);
+        const R = new W(s), U = new ae(R), { roles: I } = await U.getRolesByApp(t);
+        T(I);
+      } catch (R) {
+        console.error("Failed to fetch roles:", R);
+      } finally {
+        S(!1);
+      }
+    })();
+  }, [t, s, n.initialRoles]), K(() => {
+    const m = c.getUser();
+    m && c.hasValidSession() && w(m);
+  }, [c]), /* @__PURE__ */ i(he.Provider, { value: F, children: e });
+}
+function ee() {
+  const n = re(he);
+  if (!n)
+    throw new Error("useAuth must be used within an AuthProvider");
+  return n;
+}
+class xe {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createFeatureFlag(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post(
+      "/feature-flags/",
+      e,
+      {
+        headers: t
+      }
+    )).data;
+  }
+  async getFeatureFlags(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
+    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
+    const s = `/feature-flags/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+      headers: t
+    });
+    return {
+      featureFlags: o.data,
+      meta: o.meta
+    };
+  }
+  async getFeatureFlagById(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/feature-flags/${e}`, {
+      headers: t
+    })).data;
+  }
+  async updateFeatureFlag(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/feature-flags/${e}`,
+      t,
+      {
+        headers: r
+      }
+    )).data;
+  }
+  async deleteFeatureFlag(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    await this.httpService.delete(`/feature-flags/${e}`, {
+      headers: t
+    });
+  }
+  // Public endpoint - no auth required
+  async getTenantFeatureFlags(e, t) {
+    if (!e || !t)
+      throw new Error("Tenant ID and App ID are required");
+    const r = new URLSearchParams();
+    r.append("tenantId", e), r.append("appId", t);
+    const s = `/tenant-feature-flags${r.toString() ? `?${r.toString()}` : ""}`;
+    return (await this.httpService.get(s, {
+      headers: { "X-Tenant-ID": e }
+    })).data;
+  }
+  // Public endpoint - no auth required
+  async getTenantFeatureFlag(e, t, r) {
+    if (!e || !t || !r)
+      throw new Error("Flag Key, Tenant ID and App ID are required");
+    const s = new URLSearchParams();
+    s.append("tenantId", t), s.append("appId", r);
+    const o = `/tenant-feature-flags/${e}${s.toString() ? `?${s.toString()}` : ""}`;
+    return (await this.httpService.get(o, {
+      headers: { "X-Tenant-ID": t }
+    })).data;
+  }
+}
+const ge = te(null);
+function Je({ config: n = {}, children: e }) {
+  const { tenant: t, baseUrl: r, appId: s } = G(), [o, T] = b([]), [M, S] = b(!1), [E, w] = b(null), p = N(() => {
+    const y = new W(r);
+    return new xe(y);
+  }, [r]), v = async () => {
+    if (!(t != null && t.id)) {
+      T([]);
+      return;
+    }
+    S(!0), w(null);
+    try {
+      const y = await p.getTenantFeatureFlags(t.id, s);
+      T(y);
+    } catch (y) {
+      const c = y instanceof Error ? y.message : "Failed to fetch feature flags";
+      w(c), n.onError && n.onError(y instanceof Error ? y : new Error(c));
+    } finally {
+      S(!1);
+    }
+  };
+  K(() => {
+    v();
+    const y = n.refreshInterval || 5 * 60 * 1e3, c = setInterval(v, y);
+    return () => clearInterval(c);
+  }, [t == null ? void 0 : t.id, n.refreshInterval]);
+  const f = N(() => ({
+    featureFlags: o,
+    loading: M,
+    error: E,
+    isEnabled: (d) => {
+      const l = o.find((a) => a.key === d);
+      return (l == null ? void 0 : l.value) === !0;
+    },
+    getFlag: (d) => o.find((l) => l.key === d),
+    getFlagState: (d) => {
+      const l = o.find((a) => a.key === d);
+      return l ? l.value ? "enabled" : "disabled" : "not_found";
+    },
+    refresh: async () => {
+      await v();
+    }
+  }), [o, M, E]);
+  return /* @__PURE__ */ i(ge.Provider, { value: f, children: e });
+}
+function Ae() {
+  const n = re(ge);
+  if (!n)
+    throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
+  return n;
+}
+class Pe {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createSubscription(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post(
+      "/subscriptions/",
+      e,
+      {
+        headers: t
+      }
+    )).data;
+  }
+  async getSubscriptionById(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(
+      `/subscriptions/subscriptions/${e}`,
+      {
+        headers: t
+      }
+    )).data;
+  }
+  async updateSubscription(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/subscriptions/${e}`,
+      t,
+      {
+        headers: r
+      }
+    )).data;
+  }
+  async changeSubscriptionPlan(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/subscriptions/${e}/plan`,
+      { planId: t },
+      { headers: r }
+    )).data;
+  }
+  // Public endpoint - no auth required
+  async getTenantSubscriptionFeatures(e) {
+    return (await this.httpService.get(
+      `/subscriptions/tenants/${e}/subscription-features`
+    )).data;
+  }
+  async processPayment(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post(
+      `/subscriptions/${e}/process-payment`,
+      t,
+      { headers: r }
+    )).data;
+  }
+}
+const pe = te(void 0);
+function Xe({ config: n = {}, children: e }) {
+  const { tenant: t, baseUrl: r } = G(), [s, o] = b(null), [T, M] = b(!1), [S, E] = b(null), w = N(() => {
+    const f = new W(r);
+    return new Pe(f);
+  }, [r]), p = async () => {
+    if (!(t != null && t.id)) {
+      o(null);
+      return;
+    }
+    M(!0), E(null);
+    try {
+      const f = await w.getTenantSubscriptionFeatures(t.id);
+      o(f);
+    } catch (f) {
+      const y = f instanceof Error ? f.message : "Failed to fetch subscription";
+      E(y), n.onError && n.onError(f instanceof Error ? f : new Error(y));
+    } finally {
+      M(!1);
+    }
+  };
+  K(() => {
+    if (p(), !n.refreshInterval) return;
+    const f = n.refreshInterval || 10 * 60 * 1e3, y = setInterval(p, f);
+    return () => clearInterval(y);
+  }, [t == null ? void 0 : t.id, n.refreshInterval]);
+  const v = N(() => {
+    const f = (s == null ? void 0 : s.features) || [];
+    return {
+      subscription: s,
+      features: f,
+      loading: T,
+      error: S,
+      isFeatureEnabled: (l) => {
+        const a = f.find((u) => u.key === l);
+        return a ? a.type === "BOOLEAN" || a.type === "boolean" ? a.value === !0 : !!a.value : !1;
+      },
+      getFeature: (l) => f.find((a) => a.key === l),
+      getFeatureValue: (l, a) => {
+        const u = f.find((k) => k.key === l);
+        return u ? u.value : a;
+      },
+      hasAllowedPlan: (l) => !s || !s.isActive ? !1 : l.includes(s.planId),
+      refresh: async () => {
+        await p();
+      }
+    };
+  }, [s, T, S]);
+  return /* @__PURE__ */ i(pe.Provider, { value: v, children: e });
+}
+function Te() {
+  const n = re(pe);
+  if (n === void 0)
+    throw new Error("useSubscription must be used within a SubscriptionProvider");
+  return n;
+}
+const fe = te(null);
+function Ze({ children: n }) {
+  const { baseUrl: e, tenant: t, appInfo: r } = G(), { sessionManager: s } = ee(), [o, T] = b(null), [M, S] = b(!1), [E, w] = b(null), p = (r == null ? void 0 : r.settingsSchema) || null, v = X(async () => {
+    if (t != null && t.id)
+      try {
+        S(!0), w(null);
+        const x = new W(e), l = await new ne(x, t.appId).getTenantSettings(t.id);
+        T(l);
+      } catch (x) {
+        const d = x instanceof Error ? x : new Error("Failed to load tenant settings");
+        w(d), T(null);
+      } finally {
+        S(!1);
+      }
+  }, [e, t]), f = X(
+    async (x) => {
+      if (!(t != null && t.id) || !s)
+        throw new Error("Tenant ID and authentication required to update settings");
+      try {
+        S(!0), w(null);
+        const d = new W(e), l = new ne(d, t.appId, s), a = { settings: x }, u = await l.updateTenantSettings(t.id, a);
+        T(u);
+      } catch (d) {
+        const l = d instanceof Error ? d : new Error("Failed to update tenant settings");
+        throw w(l), l;
+      } finally {
+        S(!1);
+      }
+    },
+    [e, t, s]
+  ), y = X(() => {
+    v();
+  }, [v]), c = X(
+    (x) => {
+      if (!p)
+        return { isValid: !0, errors: [] };
+      const d = [];
+      try {
+        return p.properties && Object.entries(p.properties).forEach(([l, a]) => {
+          var k;
+          const u = x[l];
+          if ((k = p.required) != null && k.includes(l) && u == null) {
+            d.push(`Field '${l}' is required`);
+            return;
+          }
+          if (u != null) {
+            if (a.type) {
+              const F = a.type, m = typeof u;
+              F === "string" && m !== "string" ? d.push(`Field '${l}' must be a string`) : (F === "number" || F === "integer") && m !== "number" ? d.push(`Field '${l}' must be a number`) : F === "boolean" && m !== "boolean" ? d.push(`Field '${l}' must be a boolean`) : F === "array" && !Array.isArray(u) && d.push(`Field '${l}' must be an array`);
+            }
+            a.minLength !== void 0 && typeof u == "string" && u.length < a.minLength && d.push(
+              `Field '${l}' must be at least ${a.minLength} characters long`
+            ), a.maxLength !== void 0 && typeof u == "string" && u.length > a.maxLength && d.push(
+              `Field '${l}' must be no more than ${a.maxLength} characters long`
+            ), a.minimum !== void 0 && typeof u == "number" && u < a.minimum && d.push(`Field '${l}' must be at least ${a.minimum}`), a.maximum !== void 0 && typeof u == "number" && u > a.maximum && d.push(`Field '${l}' must be no more than ${a.maximum}`), a.pattern && typeof u == "string" && (new RegExp(a.pattern).test(u) || d.push(`Field '${l}' does not match the required pattern`)), a.enum && !a.enum.includes(u) && d.push(`Field '${l}' must be one of: ${a.enum.join(", ")}`);
+          }
+        }), {
+          isValid: d.length === 0,
+          errors: d
+        };
+      } catch {
+        return {
+          isValid: !1,
+          errors: ["Invalid settings schema or validation error"]
+        };
+      }
+    },
+    [p]
+  );
+  K(() => {
+    t != null && t.id ? v() : (T(null), w(null), S(!1));
+  }, [t == null ? void 0 : t.id, v]);
+  const C = N(
+    () => ({
+      // Settings
+      settings: o,
+      settingsSchema: p,
+      isSettingsLoading: M,
+      settingsError: E,
+      // Actions
+      updateSettings: f,
+      refreshSettings: y,
+      // Validation
+      validateSettings: c
+    }),
+    [
+      o,
+      p,
+      M,
+      E,
+      f,
+      y,
+      c
+    ]
+  );
+  return /* @__PURE__ */ i(fe.Provider, { value: C, children: n });
+}
+function ke() {
+  const n = re(fe);
+  if (!n)
+    throw new Error("useTenantSettings must be used within a TenantProvider");
+  return n;
+}
+function et() {
+  const {
+    settings: n,
+    settingsSchema: e,
+    isSettingsLoading: t,
+    settingsError: r,
+    updateSettings: s,
+    validateSettings: o
+  } = ke();
+  return {
+    settings: n,
+    settingsSchema: e,
+    isLoading: t,
+    error: r,
+    updateSettings: s,
+    validateSettings: o
+  };
+}
+var Z = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(Z || {});
+const le = () => /* @__PURE__ */ g(
+  "div",
+  {
+    style: {
+      display: "flex",
+      flexDirection: "column",
+      justifyContent: "center",
+      alignItems: "center",
+      padding: "20px",
+      backgroundColor: "#f8f9fa",
+      border: "1px solid #dee2e6",
+      borderRadius: "6px",
+      textAlign: "center",
+      margin: "20px 0"
+    },
+    children: [
+      /* @__PURE__ */ i("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "🔒" }),
+      /* @__PURE__ */ i("h3", { style: { color: "#495057", marginBottom: "10px" }, children: "Access Required" }),
+      /* @__PURE__ */ i("p", { style: { color: "#6c757d", fontSize: "14px", marginBottom: "15px" }, children: "You need to be signed in to view this content." }),
+      /* @__PURE__ */ i(
+        "button",
+        {
+          style: {
+            padding: "8px 16px",
+            backgroundColor: "#007bff",
+            color: "white",
+            border: "none",
+            borderRadius: "4px",
+            cursor: "pointer",
+            fontSize: "14px"
+          },
+          onClick: () => window.location.href = "/login",
+          children: "Sign In"
+        }
+      )
+    ]
+  }
+), ce = ({
+  userType: n,
+  minUserType: e,
+  missingPermissions: t
+}) => /* @__PURE__ */ g(
+  "div",
+  {
+    style: {
+      display: "flex",
+      flexDirection: "column",
+      justifyContent: "center",
+      alignItems: "center",
+      padding: "20px",
+      backgroundColor: "#fff3cd",
+      border: "1px solid #ffeaa7",
+      borderRadius: "6px",
+      textAlign: "center",
+      margin: "20px 0"
+    },
+    children: [
+      /* @__PURE__ */ i("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
+      /* @__PURE__ */ i("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
+      e && n ? /* @__PURE__ */ g(B, { children: [
+        /* @__PURE__ */ g("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+          "This content requires ",
+          /* @__PURE__ */ i("strong", { children: e }),
+          " access level or higher."
+        ] }),
+        /* @__PURE__ */ g("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+          "Your current access level: ",
+          /* @__PURE__ */ i("strong", { children: n })
+        ] })
+      ] }) : /* @__PURE__ */ g(B, { children: [
+        /* @__PURE__ */ i("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
+        t && t.length > 0 && /* @__PURE__ */ g("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+          "Required permissions: ",
+          /* @__PURE__ */ i("strong", { children: t.join(", ") })
+        ] })
+      ] })
+    ]
+  }
+), Me = (n, e) => {
+  const t = {
+    [Z.USER]: 1,
+    [Z.TENANT_ADMIN]: 2,
+    [Z.SUPERUSER]: 3
+  };
+  return t[n] >= t[e];
+};
+function tt({
+  children: n,
+  fallback: e,
+  minUserType: t,
+  requiredPermissions: r,
+  requireAllPermissions: s = !1
+}) {
+  const { hasValidSession: o, sessionManager: T, hasPermission: M, hasAnyPermission: S, hasAllPermissions: E } = ee();
+  if (!o())
+    return /* @__PURE__ */ i(B, { children: e || /* @__PURE__ */ i(le, {}) });
+  const w = T.getUser();
+  if (!w)
+    return /* @__PURE__ */ i(B, { children: e || /* @__PURE__ */ i(le, {}) });
+  if (t && !Me(w.userType, t))
+    return /* @__PURE__ */ i(ce, { userType: w.userType, minUserType: t });
+  if (r && r.length > 0 && !(s ? E(r) : S(r))) {
+    const v = r.filter((f) => !M(f)).map((f) => typeof f == "string" ? f : f.name);
+    return /* @__PURE__ */ i(ce, { missingPermissions: v });
+  }
+  return /* @__PURE__ */ i(B, { children: n });
+}
+const Ee = ({ redirectPath: n }) => /* @__PURE__ */ i(
+  "div",
+  {
+    style: {
+      display: "flex",
+      flexDirection: "column",
+      justifyContent: "center",
+      alignItems: "center",
+      minHeight: "100vh",
+      padding: "2rem",
+      backgroundColor: "#f9fafb",
+      textAlign: "center"
+    },
+    children: /* @__PURE__ */ g(
+      "div",
+      {
+        style: {
+          backgroundColor: "#ffffff",
+          padding: "2rem",
+          borderRadius: "8px",
+          boxShadow: "0 2px 10px rgba(0, 0, 0, 0.1)",
+          maxWidth: "400px"
+        },
+        children: [
+          /* @__PURE__ */ i("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
+          /* @__PURE__ */ i("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
+          /* @__PURE__ */ i("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
+          /* @__PURE__ */ g("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+            "Redirecting to ",
+            n,
+            "..."
+          ] })
+        ]
+      }
+    )
+  }
+), de = ({
+  userType: n,
+  minUserType: e,
+  missingPermissions: t
+}) => /* @__PURE__ */ i(
+  "div",
+  {
+    style: {
+      display: "flex",
+      flexDirection: "column",
+      justifyContent: "center",
+      alignItems: "center",
+      minHeight: "100vh",
+      padding: "2rem",
+      backgroundColor: "#f9fafb",
+      textAlign: "center"
+    },
+    children: /* @__PURE__ */ g(
+      "div",
+      {
+        style: {
+          backgroundColor: "#ffffff",
+          padding: "2rem",
+          borderRadius: "8px",
+          boxShadow: "0 2px 10px rgba(0, 0, 0, 0.1)",
+          maxWidth: "400px"
+        },
+        children: [
+          /* @__PURE__ */ i("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
+          /* @__PURE__ */ i("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
+          e && n ? /* @__PURE__ */ g(B, { children: [
+            /* @__PURE__ */ g("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+              "This page requires ",
+              /* @__PURE__ */ i("strong", { children: e }),
+              " access level or higher."
+            ] }),
+            /* @__PURE__ */ g("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+              "Your current access level: ",
+              /* @__PURE__ */ i("strong", { children: n })
+            ] })
+          ] }) : /* @__PURE__ */ g(B, { children: [
+            /* @__PURE__ */ i("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
+            t && t.length > 0 && /* @__PURE__ */ g("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+              "Required permissions: ",
+              /* @__PURE__ */ i("strong", { children: t.join(", ") })
+            ] })
+          ] })
+        ]
+      }
+    )
+  }
+), Re = (n, e) => {
+  const t = {
+    [Z.USER]: 1,
+    [Z.TENANT_ADMIN]: 2,
+    [Z.SUPERUSER]: 3
+  };
+  return t[n] >= t[e];
+};
+function rt({
+  children: n,
+  redirectTo: e = "/login",
+  minUserType: t,
+  requiredPermissions: r,
+  requireAllPermissions: s = !1,
+  fallback: o
+}) {
+  const { hasValidSession: T, sessionManager: M, hasPermission: S, hasAnyPermission: E, hasAllPermissions: w } = ee(), p = we();
+  if (!T())
+    return o ? /* @__PURE__ */ i(B, { children: o }) : /* @__PURE__ */ g(B, { children: [
+      /* @__PURE__ */ i(Ee, { redirectPath: e }),
+      /* @__PURE__ */ i(ie, { to: e, state: { from: p.pathname }, replace: !0 })
+    ] });
+  const v = M.getUser();
+  if (!v)
+    return /* @__PURE__ */ i(ie, { to: e, state: { from: p.pathname }, replace: !0 });
+  if (t && !Re(v.userType, t))
+    return /* @__PURE__ */ i(de, { userType: v.userType, minUserType: t });
+  if (r && r.length > 0 && !(s ? w(r) : E(r))) {
+    const y = r.filter((c) => !S(c)).map((c) => typeof c == "string" ? c : c.name);
+    return /* @__PURE__ */ i(de, { missingPermissions: y });
+  }
+  return /* @__PURE__ */ i(B, { children: n });
+}
+const Fe = () => /* @__PURE__ */ g(
+  "div",
+  {
+    style: {
+      padding: "2rem",
+      textAlign: "center",
+      backgroundColor: "#fef2f2",
+      border: "1px solid #fecaca",
+      borderRadius: "8px",
+      color: "#dc2626"
+    },
+    children: [
+      /* @__PURE__ */ i("h3", { style: { margin: "0 0 1rem 0" }, children: "🔒 Subscription Required" }),
+      /* @__PURE__ */ i("p", { style: { margin: 0 }, children: "This feature requires a higher subscription plan. Please upgrade your plan to access this content." })
+    ]
+  }
+);
+function st({
+  children: n,
+  fallback: e = /* @__PURE__ */ i(Fe, {}),
+  allowedPlans: t,
+  requiredFeature: r
+}) {
+  const { subscription: s, hasAllowedPlan: o, isFeatureEnabled: T, loading: M } = Te();
+  return M ? /* @__PURE__ */ i(
+    "div",
+    {
+      style: {
+        padding: "2rem",
+        textAlign: "center",
+        color: "#6b7280"
+      },
+      children: "Loading subscription..."
+    }
+  ) : s ? s.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ i(B, { children: e }) : r && !T(r) ? /* @__PURE__ */ i(B, { children: e }) : /* @__PURE__ */ i(B, { children: n }) : /* @__PURE__ */ i(B, { children: e }) : /* @__PURE__ */ i(B, { children: e });
+}
+const Ie = ({ flagName: n }) => /* @__PURE__ */ g(
+  "div",
+  {
+    style: {
+      display: "flex",
+      flexDirection: "column",
+      justifyContent: "center",
+      alignItems: "center",
+      padding: "15px",
+      backgroundColor: "#f8f9fa",
+      border: "1px solid #dee2e6",
+      borderRadius: "6px",
+      textAlign: "center",
+      fontFamily: "system-ui, sans-serif",
+      color: "#6c757d"
+    },
+    children: [
+      /* @__PURE__ */ i("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
+      /* @__PURE__ */ i("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
+      /* @__PURE__ */ g("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+        'Feature flag "',
+        n,
+        '" is disabled'
+      ] })
+    ]
+  }
+);
+function nt({ name: n, children: e, fallback: t }) {
+  const { isEnabled: r, loading: s } = Ae();
+  return s ? /* @__PURE__ */ i(
+    "div",
+    {
+      style: {
+        display: "flex",
+        justifyContent: "center",
+        alignItems: "center",
+        padding: "10px",
+        color: "#6c757d",
+        fontSize: "14px"
+      },
+      children: "Loading feature flags..."
+    }
+  ) : (console.log(n, r(n)), r(n) ? /* @__PURE__ */ i(B, { children: e }) : /* @__PURE__ */ i(B, { children: t || /* @__PURE__ */ i(Ie, { flagName: n }) }));
+}
+const He = () => /* @__PURE__ */ g(
+  "svg",
+  {
+    width: "16",
+    height: "16",
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: "2",
+    strokeLinecap: "round",
+    strokeLinejoin: "round",
+    style: { flexShrink: 0 },
+    children: [
+      /* @__PURE__ */ i("path", { d: "M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" }),
+      /* @__PURE__ */ i("circle", { cx: "12", cy: "12", r: "3" })
+    ]
+  }
+), $e = () => /* @__PURE__ */ g(
+  "svg",
+  {
+    width: "16",
+    height: "16",
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: "2",
+    strokeLinecap: "round",
+    strokeLinejoin: "round",
+    style: { flexShrink: 0 },
+    children: [
+      /* @__PURE__ */ i("path", { d: "M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" }),
+      /* @__PURE__ */ i("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
+    ]
+  }
+), Ce = {
+  showPassword: /* @__PURE__ */ i(He, {}),
+  hidePassword: /* @__PURE__ */ i($e, {})
+}, Le = {
+  title: "Sign In",
+  emailLabel: "Email",
+  emailPlaceholder: "Enter your email",
+  passwordLabel: "Password",
+  passwordPlaceholder: "Enter your password",
+  submitButton: "Sign In",
+  forgotPasswordLink: "Forgot your password?",
+  signupLink: "Sign up here",
+  signupText: "Don't have an account?",
+  errorMessage: "Invalid email or password",
+  loadingText: "Signing in..."
+}, De = {
+  container: {
+    maxWidth: "400px",
+    width: "100%",
+    margin: "0 auto",
+    padding: "2rem",
+    backgroundColor: "#ffffff",
+    borderRadius: "8px",
+    boxShadow: "0 2px 10px rgba(0, 0, 0, 0.1)"
+  },
+  title: {
+    fontSize: "1.5rem",
+    fontWeight: "bold",
+    textAlign: "center",
+    marginBottom: "1.5rem",
+    color: "#333333"
+  },
+  form: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "1rem"
+  },
+  fieldGroup: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "0.5rem"
+  },
+  label: {
+    fontSize: "0.875rem",
+    fontWeight: "500",
+    color: "#374151"
+  },
+  input: {
+    padding: "0.75rem",
+    border: "1px solid #d1d5db",
+    borderRadius: "6px",
+    fontSize: "1rem",
+    transition: "border-color 0.15s ease-in-out",
+    outline: "none",
+    width: "100%"
+  },
+  inputError: {
+    borderColor: "#ef4444",
+    boxShadow: "0 0 0 3px rgba(239, 68, 68, 0.1)"
+  },
+  inputContainer: {
+    position: "relative",
+    display: "flex",
+    alignItems: "center"
+  },
+  passwordToggle: {
+    position: "absolute",
+    right: "0.75rem",
+    background: "none",
+    border: "none",
+    cursor: "pointer",
+    padding: "0.25rem",
+    color: "#6b7280",
+    display: "flex",
+    alignItems: "center",
+    justifyContent: "center",
+    width: "24px",
+    height: "24px",
+    borderRadius: "4px",
+    transition: "background-color 0.15s ease-in-out"
+  },
+  button: {
+    padding: "0.75rem 1rem",
+    backgroundColor: "#3b82f6",
+    color: "white",
+    border: "none",
+    borderRadius: "6px",
+    fontSize: "1rem",
+    fontWeight: "500",
+    cursor: "pointer",
+    transition: "background-color 0.15s ease-in-out",
+    marginTop: "0.5rem"
+  },
+  buttonDisabled: {
+    backgroundColor: "#9ca3af",
+    cursor: "not-allowed"
+  },
+  buttonLoading: {
+    backgroundColor: "#6b7280"
+  },
+  errorText: {
+    color: "#ef4444",
+    fontSize: "0.875rem",
+    textAlign: "center",
+    marginTop: "0.5rem"
+  },
+  linkContainer: {
+    textAlign: "center",
+    marginTop: "1rem"
+  },
+  link: {
+    color: "#3b82f6",
+    textDecoration: "none",
+    fontSize: "0.875rem",
+    cursor: "pointer"
+  },
+  divider: {
+    margin: "0.5rem 0",
+    color: "#6b7280",
+    fontSize: "0.875rem"
+  }
+};
+function it({
+  copy: n = {},
+  styles: e = {},
+  icons: t = {},
+  onSuccess: r,
+  onError: s,
+  onForgotPassword: o,
+  onSignupClick: T,
+  showForgotPassword: M = !0,
+  showSignupLink: S = !0,
+  className: E
+}) {
+  const [w, p] = b(""), [v, f] = b(""), [y, c] = b(!1), [C, x] = b(!1), [d, l] = b(""), [a, u] = b({}), { login: k } = ee(), { tenant: F } = G(), m = { ...Le, ...n }, R = { ...De, ...e }, U = { ...Ce, ...t }, I = () => {
+    const L = {};
+    return w.trim() || (L.email = !0), v.trim() || (L.password = !0), u(L), Object.keys(L).length === 0;
+  }, h = async (L) => {
+    if (L.preventDefault(), !!I()) {
+      if (!(F != null && F.id)) {
+        l("Tenant not found");
+        return;
+      }
+      x(!0), l("");
+      try {
+        const z = await k(w, v, F.id);
+        r == null || r(z);
+      } catch (z) {
+        const _ = z.message || m.errorMessage;
+        l(_), s == null || s(_);
+      } finally {
+        x(!1);
+      }
+    }
+  }, P = (L) => ({
+    ...R.input,
+    ...a[L] ? R.inputError : {}
+  }), Y = () => ({
+    ...R.button,
+    ...C ? R.buttonLoading : {},
+    ...!w || !v || C ? R.buttonDisabled : {}
+  });
+  return /* @__PURE__ */ g("div", { className: E, style: R.container, children: [
+    /* @__PURE__ */ i("h2", { style: R.title, children: m.title }),
+    /* @__PURE__ */ g("form", { onSubmit: h, style: R.form, children: [
+      /* @__PURE__ */ g("div", { style: R.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: R.label, children: m.emailLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            id: "email",
+            name: "email",
+            type: "email",
+            value: w,
+            onChange: (L) => {
+              p(L.target.value), a.email && u((z) => ({ ...z, email: !1 }));
+            },
+            placeholder: m.emailPlaceholder,
+            style: P("email"),
+            disabled: C
+          }
+        )
+      ] }),
+      /* @__PURE__ */ g("div", { style: R.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: R.label, children: m.passwordLabel }),
+        /* @__PURE__ */ g("div", { style: R.inputContainer, children: [
+          /* @__PURE__ */ i(
+            "input",
+            {
+              id: "password",
+              name: "password",
+              type: y ? "text" : "password",
+              value: v,
+              onChange: (L) => {
+                f(L.target.value), a.password && u((z) => ({ ...z, password: !1 }));
+              },
+              placeholder: m.passwordPlaceholder,
+              style: {
+                ...P("password"),
+                paddingRight: "2.5rem"
+                // Make room for the icon
+              },
+              disabled: C
+            }
+          ),
+          /* @__PURE__ */ i(
+            "button",
+            {
+              type: "button",
+              onClick: () => c(!y),
+              style: R.passwordToggle,
+              disabled: C,
+              "aria-label": y ? "Hide password" : "Show password",
+              children: y ? U.hidePassword : U.showPassword
+            }
+          )
+        ] })
+      ] }),
+      /* @__PURE__ */ i("button", { type: "submit", disabled: !w || !v || C, style: Y(), children: C ? m.loadingText : m.submitButton }),
+      d && /* @__PURE__ */ i("div", { style: R.errorText, children: d })
+    ] }),
+    (M || S) && /* @__PURE__ */ g("div", { style: R.linkContainer, children: [
+      M && /* @__PURE__ */ i("a", { onClick: o, style: R.link, children: m.forgotPasswordLink }),
+      M && S && /* @__PURE__ */ i("div", { style: R.divider, children: "•" }),
+      S && /* @__PURE__ */ g("div", { children: [
+        /* @__PURE__ */ g("span", { style: R.divider, children: [
+          m.signupText,
+          " "
+        ] }),
+        /* @__PURE__ */ i("a", { onClick: T, style: R.link, children: m.signupLink })
+      ] })
+    ] })
+  ] });
+}
+const Be = {
+  title: "Create Account",
+  nameLabel: "Full Name",
+  namePlaceholder: "Enter your full name",
+  emailLabel: "Email",
+  emailPlaceholder: "Enter your email",
+  passwordLabel: "Password",
+  passwordPlaceholder: "Enter your password",
+  confirmPasswordLabel: "Confirm Password",
+  confirmPasswordPlaceholder: "Confirm your password",
+  tenantNameLabel: "Organization Name",
+  tenantNamePlaceholder: "Enter your organization name",
+  submitButton: "Create Account",
+  loginLink: "Sign in here",
+  loginText: "Already have an account?",
+  errorMessage: "Failed to create account",
+  loadingText: "Creating account...",
+  passwordMismatchError: "Passwords do not match",
+  isAdminLabel: "Create new organization",
+  isAdminDescription: "Check this if you want to create a new organization"
+}, qe = {
+  container: {
+    maxWidth: "400px",
+    width: "100%",
+    margin: "0 auto",
+    padding: "2rem",
+    backgroundColor: "#ffffff",
+    borderRadius: "8px",
+    boxShadow: "0 2px 10px rgba(0, 0, 0, 0.1)"
+  },
+  title: {
+    fontSize: "1.5rem",
+    fontWeight: "bold",
+    textAlign: "center",
+    marginBottom: "1.5rem",
+    color: "#333333"
+  },
+  form: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "1rem"
+  },
+  fieldGroup: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "0.5rem"
+  },
+  label: {
+    fontSize: "0.875rem",
+    fontWeight: "500",
+    color: "#374151"
+  },
+  input: {
+    padding: "0.75rem",
+    border: "1px solid #d1d5db",
+    borderRadius: "6px",
+    fontSize: "1rem",
+    transition: "border-color 0.15s ease-in-out",
+    outline: "none"
+  },
+  inputError: {
+    borderColor: "#ef4444",
+    boxShadow: "0 0 0 3px rgba(239, 68, 68, 0.1)"
+  },
+  checkbox: {
+    marginRight: "0.5rem"
+  },
+  checkboxContainer: {
+    display: "flex",
+    alignItems: "flex-start",
+    gap: "0.5rem",
+    padding: "0.5rem 0"
+  },
+  checkboxLabel: {
+    fontSize: "0.875rem",
+    color: "#374151",
+    lineHeight: "1.4"
+  },
+  button: {
+    padding: "0.75rem 1rem",
+    backgroundColor: "#10b981",
+    color: "white",
+    border: "none",
+    borderRadius: "6px",
+    fontSize: "1rem",
+    fontWeight: "500",
+    cursor: "pointer",
+    transition: "background-color 0.15s ease-in-out",
+    marginTop: "0.5rem"
+  },
+  buttonDisabled: {
+    backgroundColor: "#9ca3af",
+    cursor: "not-allowed"
+  },
+  buttonLoading: {
+    backgroundColor: "#6b7280"
+  },
+  errorText: {
+    color: "#ef4444",
+    fontSize: "0.875rem",
+    textAlign: "center",
+    marginTop: "0.5rem"
+  },
+  linkContainer: {
+    textAlign: "center",
+    marginTop: "1rem"
+  },
+  link: {
+    color: "#3b82f6",
+    textDecoration: "none",
+    fontSize: "0.875rem",
+    cursor: "pointer"
+  },
+  divider: {
+    margin: "0.5rem 0",
+    color: "#6b7280",
+    fontSize: "0.875rem"
+  }
+};
+function ot({
+  copy: n = {},
+  styles: e = {},
+  signupType: t = "user",
+  onSuccess: r,
+  onError: s,
+  onLoginClick: o,
+  showLoginLink: T = !0,
+  className: M
+}) {
+  const [S, E] = b(""), [w, p] = b(""), [v, f] = b(""), [y, c] = b(""), [C, x] = b(""), [d, l] = b(!1), [a, u] = b(""), [k, F] = b({}), { signup: m, signupTenantAdmin: R } = ee(), { tenant: U } = G(), I = { ...Be, ...n }, h = { ...qe, ...e }, P = () => {
+    const H = {};
+    return S.trim() || (H.name = !0), w.trim() || (H.email = !0), v.trim() || (H.password = !0), y.trim() || (H.confirmPassword = !0), t === "tenant" && !C.trim() && (H.tenantName = !0), F(H), Object.keys(H).length === 0;
+  }, Y = async (H) => {
+    if (H.preventDefault(), !!P()) {
+      if (v !== y) {
+        u(I.passwordMismatchError), F({ confirmPassword: !0 });
+        return;
+      }
+      if (t === "user" && !(U != null && U.id)) {
+        u("Tenant not found");
+        return;
+      }
+      l(!0), u("");
+      try {
+        let q;
+        t === "tenant" ? q = await R(w, S, v, C) : q = await m(w, S, v, U.id), r == null || r(q);
+      } catch (q) {
+        const Q = q.message || I.errorMessage;
+        u(Q), s == null || s(Q);
+      } finally {
+        l(!1);
+      }
+    }
+  }, L = (H) => ({
+    ...h.input,
+    ...k[H] ? h.inputError : {}
+  }), z = () => ({
+    ...h.button,
+    ...d ? h.buttonLoading : {},
+    ...!S || !w || !v || !y || d || t === "tenant" && !C ? h.buttonDisabled : {}
+  }), _ = S && w && v && y && (t === "user" || C);
+  return /* @__PURE__ */ g("div", { className: M, style: h.container, children: [
+    /* @__PURE__ */ i("h2", { style: h.title, children: I.title }),
+    /* @__PURE__ */ g("form", { onSubmit: Y, style: h.form, children: [
+      /* @__PURE__ */ g("div", { style: h.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: h.label, children: I.nameLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            id: "name",
+            name: "name",
+            type: "text",
+            value: S,
+            onChange: (H) => {
+              E(H.target.value), k.name && F((q) => ({ ...q, name: !1 }));
+            },
+            placeholder: I.namePlaceholder,
+            style: L("name"),
+            disabled: d
+          }
+        )
+      ] }),
+      /* @__PURE__ */ g("div", { style: h.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: h.label, children: I.emailLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            id: "email",
+            name: "email",
+            type: "email",
+            value: w,
+            onChange: (H) => {
+              p(H.target.value), k.email && F((q) => ({ ...q, email: !1 }));
+            },
+            placeholder: I.emailPlaceholder,
+            style: L("email"),
+            disabled: d
+          }
+        )
+      ] }),
+      /* @__PURE__ */ g("div", { style: h.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: h.label, children: I.passwordLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            id: "password",
+            name: "password",
+            type: "password",
+            value: v,
+            onChange: (H) => {
+              f(H.target.value), k.password && F((q) => ({ ...q, password: !1 }));
+            },
+            placeholder: I.passwordPlaceholder,
+            style: L("password"),
+            disabled: d
+          }
+        )
+      ] }),
+      /* @__PURE__ */ g("div", { style: h.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: h.label, children: I.confirmPasswordLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            id: "confirmPassword",
+            name: "confirmPassword",
+            type: "password",
+            value: y,
+            onChange: (H) => {
+              c(H.target.value), k.confirmPassword && F((q) => ({ ...q, confirmPassword: !1 })), a === I.passwordMismatchError && u("");
+            },
+            placeholder: I.confirmPasswordPlaceholder,
+            style: L("confirmPassword"),
+            disabled: d
+          }
+        )
+      ] }),
+      t === "tenant" && /* @__PURE__ */ g("div", { style: h.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: h.label, children: I.tenantNameLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            id: "tenantName",
+            name: "tenantName",
+            type: "text",
+            value: C,
+            onChange: (H) => {
+              x(H.target.value), k.tenantName && F((q) => ({ ...q, tenantName: !1 }));
+            },
+            placeholder: I.tenantNamePlaceholder,
+            style: L("tenantName"),
+            disabled: d
+          }
+        )
+      ] }),
+      /* @__PURE__ */ i("button", { type: "submit", disabled: !_ || d, style: z(), children: d ? I.loadingText : I.submitButton }),
+      a && /* @__PURE__ */ i("div", { style: h.errorText, children: a })
+    ] }),
+    T && /* @__PURE__ */ g("div", { style: h.linkContainer, children: [
+      /* @__PURE__ */ g("span", { style: h.divider, children: [
+        I.loginText,
+        " "
+      ] }),
+      /* @__PURE__ */ i("a", { onClick: o, style: h.link, children: I.loginLink })
+    ] })
+  ] });
+}
+const Ue = {
+  title: "Reset Password",
+  subtitle: "Enter your email address and we'll send you a link to reset your password.",
+  emailLabel: "Email",
+  emailPlaceholder: "Enter your email",
+  submitButton: "Send Reset Link",
+  backToLoginLink: "Back to Sign In",
+  successMessage: "Password reset link sent! Check your email.",
+  errorMessage: "Failed to send reset link",
+  loadingText: "Sending...",
+  resetTitle: "Set New Password",
+  resetSubtitle: "Enter your reset token and new password.",
+  tokenLabel: "Reset Token",
+  tokenPlaceholder: "Enter reset token from email",
+  newPasswordLabel: "New Password",
+  newPasswordPlaceholder: "Enter new password",
+  confirmPasswordLabel: "Confirm Password",
+  confirmPasswordPlaceholder: "Confirm new password",
+  resetSubmitButton: "Reset Password",
+  resetLoadingText: "Resetting...",
+  resetSuccessMessage: "Password reset successfully!",
+  passwordMismatchError: "Passwords do not match"
+}, Ne = {
+  container: {
+    maxWidth: "400px",
+    margin: "0 auto",
+    padding: "2rem",
+    backgroundColor: "#ffffff",
+    borderRadius: "8px",
+    boxShadow: "0 2px 10px rgba(0, 0, 0, 0.1)"
+  },
+  title: {
+    fontSize: "1.5rem",
+    fontWeight: "bold",
+    textAlign: "center",
+    marginBottom: "0.5rem",
+    color: "#333333"
+  },
+  subtitle: {
+    fontSize: "0.875rem",
+    textAlign: "center",
+    marginBottom: "1.5rem",
+    color: "#6b7280",
+    lineHeight: "1.4"
+  },
+  form: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "1rem"
+  },
+  fieldGroup: {
+    display: "flex",
+    flexDirection: "column",
+    gap: "0.5rem"
+  },
+  label: {
+    fontSize: "0.875rem",
+    fontWeight: "500",
+    color: "#374151"
+  },
+  input: {
+    padding: "0.75rem",
+    border: "1px solid #d1d5db",
+    borderRadius: "6px",
+    fontSize: "1rem",
+    transition: "border-color 0.15s ease-in-out",
+    outline: "none"
+  },
+  inputError: {
+    borderColor: "#ef4444",
+    boxShadow: "0 0 0 3px rgba(239, 68, 68, 0.1)"
+  },
+  button: {
+    padding: "0.75rem 1rem",
+    backgroundColor: "#f59e0b",
+    color: "white",
+    border: "none",
+    borderRadius: "6px",
+    fontSize: "1rem",
+    fontWeight: "500",
+    cursor: "pointer",
+    transition: "background-color 0.15s ease-in-out",
+    marginTop: "0.5rem"
+  },
+  buttonDisabled: {
+    backgroundColor: "#9ca3af",
+    cursor: "not-allowed"
+  },
+  buttonLoading: {
+    backgroundColor: "#6b7280"
+  },
+  errorText: {
+    color: "#ef4444",
+    fontSize: "0.875rem",
+    textAlign: "center",
+    marginTop: "0.5rem"
+  },
+  successText: {
+    color: "#10b981",
+    fontSize: "0.875rem",
+    textAlign: "center",
+    marginTop: "0.5rem"
+  },
+  linkContainer: {
+    textAlign: "center",
+    marginTop: "1rem"
+  },
+  link: {
+    color: "#3b82f6",
+    textDecoration: "none",
+    fontSize: "0.875rem",
+    cursor: "pointer"
+  }
+};
+function at({
+  copy: n = {},
+  styles: e = {},
+  mode: t = "request",
+  token: r = "",
+  onSuccess: s,
+  onError: o,
+  onBackToLogin: T,
+  onModeChange: M,
+  className: S
+}) {
+  const [E, w] = b(""), [p, v] = b(r), [f, y] = b(""), [c, C] = b(""), [x, d] = b(!1), [l, a] = b(""), [u, k] = b(""), [F, m] = b({}), { requestPasswordReset: R, confirmPasswordReset: U } = ee(), { tenant: I } = G(), h = { ...Ue, ...n }, P = { ...Ne, ...e }, Y = () => {
+    const D = {};
+    return E.trim() || (D.email = !0), m(D), Object.keys(D).length === 0;
+  }, L = () => {
+    const D = {};
+    return p.trim() || (D.token = !0), f.trim() || (D.newPassword = !0), c.trim() || (D.confirmPassword = !0), m(D), Object.keys(D).length === 0;
+  }, z = async (D) => {
+    if (D.preventDefault(), !!Y()) {
+      if (!(I != null && I.id)) {
+        a("Tenant not found");
+        return;
+      }
+      d(!0), a(""), k("");
+      try {
+        await R(E, I.id), k(h.successMessage), s == null || s();
+      } catch (j) {
+        const O = j.message || h.errorMessage;
+        a(O), o == null || o(O);
+      } finally {
+        d(!1);
+      }
+    }
+  }, _ = async (D) => {
+    if (D.preventDefault(), !!L()) {
+      if (f !== c) {
+        a(h.passwordMismatchError), m({ confirmPassword: !0 });
+        return;
+      }
+      d(!0), a(""), k("");
+      try {
+        await U(p, f), k(h.resetSuccessMessage), s == null || s();
+      } catch (j) {
+        const O = j.message || h.errorMessage;
+        a(O), o == null || o(O);
+      } finally {
+        d(!1);
+      }
+    }
+  }, H = (D) => ({
+    ...P.input,
+    ...F[D] ? P.inputError : {}
+  }), q = () => ({
+    ...P.button,
+    ...x ? P.buttonLoading : {}
+  });
+  if (t === "reset") {
+    const D = p && f && c;
+    return /* @__PURE__ */ g("div", { className: S, style: P.container, children: [
+      /* @__PURE__ */ i("h2", { style: P.title, children: h.resetTitle }),
+      /* @__PURE__ */ i("p", { style: P.subtitle, children: h.resetSubtitle }),
+      /* @__PURE__ */ g("form", { onSubmit: _, style: P.form, children: [
+        /* @__PURE__ */ g("div", { style: P.fieldGroup, children: [
+          /* @__PURE__ */ i("label", { style: P.label, children: h.tokenLabel }),
+          /* @__PURE__ */ i(
+            "input",
+            {
+              type: "text",
+              value: p,
+              onChange: (j) => {
+                v(j.target.value), F.token && m((O) => ({ ...O, token: !1 }));
+              },
+              placeholder: h.tokenPlaceholder,
+              style: H("token"),
+              disabled: x
+            }
+          )
+        ] }),
+        /* @__PURE__ */ g("div", { style: P.fieldGroup, children: [
+          /* @__PURE__ */ i("label", { style: P.label, children: h.newPasswordLabel }),
+          /* @__PURE__ */ i(
+            "input",
+            {
+              type: "password",
+              value: f,
+              onChange: (j) => {
+                y(j.target.value), F.newPassword && m((O) => ({ ...O, newPassword: !1 }));
+              },
+              placeholder: h.newPasswordPlaceholder,
+              style: H("newPassword"),
+              disabled: x
+            }
+          )
+        ] }),
+        /* @__PURE__ */ g("div", { style: P.fieldGroup, children: [
+          /* @__PURE__ */ i("label", { style: P.label, children: h.confirmPasswordLabel }),
+          /* @__PURE__ */ i(
+            "input",
+            {
+              type: "password",
+              value: c,
+              onChange: (j) => {
+                C(j.target.value), F.confirmPassword && m((O) => ({ ...O, confirmPassword: !1 })), l === h.passwordMismatchError && a("");
+              },
+              placeholder: h.confirmPasswordPlaceholder,
+              style: H("confirmPassword"),
+              disabled: x
+            }
+          )
+        ] }),
+        /* @__PURE__ */ i(
+          "button",
+          {
+            type: "submit",
+            disabled: !D || x,
+            style: {
+              ...q(),
+              ...!D || x ? P.buttonDisabled : {}
+            },
+            children: x ? h.resetLoadingText : h.resetSubmitButton
+          }
+        ),
+        l && /* @__PURE__ */ i("div", { style: P.errorText, children: l }),
+        u && /* @__PURE__ */ i("div", { style: P.successText, children: u })
+      ] }),
+      /* @__PURE__ */ g("div", { style: P.linkContainer, children: [
+        /* @__PURE__ */ i("a", { onClick: T, style: P.link, children: h.backToLoginLink }),
+        M && /* @__PURE__ */ g(B, { children: [
+          /* @__PURE__ */ i("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
+          /* @__PURE__ */ i("a", { onClick: () => M("request"), style: P.link, children: "Request New Link" })
+        ] })
+      ] })
+    ] });
+  }
+  const Q = E;
+  return /* @__PURE__ */ g("div", { className: S, style: P.container, children: [
+    /* @__PURE__ */ i("h2", { style: P.title, children: h.title }),
+    /* @__PURE__ */ i("p", { style: P.subtitle, children: h.subtitle }),
+    /* @__PURE__ */ g("form", { onSubmit: z, style: P.form, children: [
+      /* @__PURE__ */ g("div", { style: P.fieldGroup, children: [
+        /* @__PURE__ */ i("label", { style: P.label, children: h.emailLabel }),
+        /* @__PURE__ */ i(
+          "input",
+          {
+            type: "email",
+            value: E,
+            onChange: (D) => {
+              w(D.target.value), F.email && m((j) => ({ ...j, email: !1 }));
+            },
+            placeholder: h.emailPlaceholder,
+            style: H("email"),
+            disabled: x
+          }
+        )
+      ] }),
+      /* @__PURE__ */ i(
+        "button",
+        {
+          type: "submit",
+          disabled: !Q || x,
+          style: {
+            ...q(),
+            ...!Q || x ? P.buttonDisabled : {}
+          },
+          children: x ? h.loadingText : h.submitButton
+        }
+      ),
+      l && /* @__PURE__ */ i("div", { style: P.errorText, children: l }),
+      u && /* @__PURE__ */ i("div", { style: P.successText, children: u })
+    ] }),
+    /* @__PURE__ */ g("div", { style: P.linkContainer, children: [
+      /* @__PURE__ */ i("a", { onClick: T, style: P.link, children: h.backToLoginLink }),
+      M && /* @__PURE__ */ g(B, { children: [
+        /* @__PURE__ */ i("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
+        /* @__PURE__ */ i("a", { onClick: () => M("reset"), style: P.link, children: "I have a token" })
+      ] })
+    ] })
+  ] });
+}
+class lt {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createPermission(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post(
+      "/permissions/",
+      e,
+      {
+        headers: t
+      }
+    )).data;
+  }
+  async getPermissions(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
+    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
+    const s = `/permissions/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+      headers: t
+    });
+    return {
+      permissions: o.data,
+      meta: o.meta
+    };
+  }
+  async getPermissionById(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(`/permissions/${e}`, {
+      headers: t
+    })).data;
+  }
+  async updatePermission(e, t) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/permissions/${e}`,
+      t,
+      {
+        headers: r
+      }
+    )).data;
+  }
+  async deletePermission(e) {
+    if (!this.sessionManager)
+      throw new Error("SessionManager is required for private endpoints");
+    const t = await this.sessionManager.getAuthHeaders();
+    await this.httpService.delete(`/permissions/${e}`, {
+      headers: t
+    });
+  }
+  // Public endpoint - no auth required
+  async getAppPermissions(e, t) {
+    const r = new URLSearchParams();
+    t != null && t.page && r.append("page", t.page.toString()), t != null && t.limit && r.append("limit", t.limit.toString()), t != null && t.sortBy && r.append("sortBy", t.sortBy), t != null && t.sortOrder && r.append("sortOrder", t.sortOrder);
+    const s = `/permissions/apps/${e}${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s);
+    return {
+      permissions: o.data,
+      meta: o.meta
+    };
+  }
+}
+class ct {
+  constructor(e, t) {
+    this.httpService = e, this.sessionManager = t;
+  }
+  async createSubscriptionPlan(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.post(
+      "/subscription-plans/",
+      e,
+      {
+        headers: t
+      }
+    )).data;
+  }
+  async getSubscriptionPlans(e) {
+    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
+    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder), e != null && e.appId && r.append("appId", e.appId);
+    const s = `/subscription-plans/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+      headers: t
+    });
+    return {
+      plans: o.data,
+      meta: o.meta
+    };
+  }
+  async getSubscriptionPlanById(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.get(
+      `/subscription-plans/${e}`,
+      {
+        headers: t
+      }
+    )).data;
+  }
+  async updateSubscriptionPlan(e, t) {
+    const r = await this.sessionManager.getAuthHeaders();
+    return (await this.httpService.put(
+      `/subscription-plans/${e}`,
+      t,
+      {
+        headers: r
+      }
+    )).data;
+  }
+  async deleteSubscriptionPlan(e) {
+    const t = await this.sessionManager.getAuthHeaders();
+    await this.httpService.delete(`/subscription-plans/${e}`, {
+      headers: t
+    });
+  }
+}
+class dt {
+  constructor(e) {
+    this.httpService = e;
+  }
+  // Public endpoint - no auth required
+  async checkHealth() {
+    return await this.httpService.get("/health");
+  }
+}
+class ut {
+  // Date string to Date object
+  static toDate(e) {
+    return new Date(e);
+  }
+  // Date object to ISO string
+  static toISOString(e) {
+    return e.toISOString();
+  }
+  // Transform API response pagination meta
+  static transformPaginationMeta(e) {
+    return {
+      total: e.total || 0,
+      page: e.page || 1,
+      limit: e.limit || 100,
+      totalPages: e.totalPages || 1,
+      hasNext: e.hasNext || !1,
+      hasPrev: e.hasPrev || !1
+    };
+  }
+  // Transform user data for display
+  static transformUser(e) {
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      displayName: e.name,
+      isActiveUser: e.isActive
+    };
+  }
+  // Transform role data for display
+  static transformRole(e) {
+    var t;
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      permissionCount: ((t = e.permissions) == null ? void 0 : t.length) || 0
+    };
+  }
+  // Transform tenant data for display
+  static transformTenant(e) {
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      displayName: e.name,
+      hasCustomDomain: !!e.domain
+    };
+  }
+  // Transform subscription data for display
+  static transformSubscription(e) {
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      startDate: this.toDate(e.startDate),
+      endDate: e.endDate ? this.toDate(e.endDate) : null,
+      isActive: e.status === "ACTIVE",
+      isExpired: e.endDate ? new Date(e.endDate) < /* @__PURE__ */ new Date() : !1
+    };
+  }
+  // Transform app data for display
+  static transformApp(e) {
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      isAdminLevel: e.securityLevel === "ADMIN",
+      hasDefaultPlan: !!e.defaultSubscriptionPlanId
+    };
+  }
+  // Transform feature flag data for display
+  static transformFeatureFlag(e) {
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      isEnabled: e.isActive
+    };
+  }
+  // Transform permission data for display
+  static transformPermission(e) {
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      fullName: `${e.resource}:${e.action}`,
+      isSystemLevel: !e.appId
+    };
+  }
+  // Transform subscription plan data for display
+  static transformSubscriptionPlan(e) {
+    var t;
+    return {
+      ...e,
+      createdAt: this.toDate(e.createdAt),
+      updatedAt: this.toDate(e.updatedAt),
+      displayPrice: `${e.currency} ${e.price}`,
+      isMonthly: e.billingCycle === "MONTHLY",
+      featureCount: ((t = e.features) == null ? void 0 : t.length) || 0
+    };
+  }
+  // Transform error response
+  static transformError(e) {
+    var t;
+    return {
+      code: ((t = e.error) == null ? void 0 : t.code) || "UNKNOWN_ERROR",
+      message: e.message || "An unexpected error occurred",
+      type: e.type || "SYSTEM",
+      isAuthError: e.type === "AUTH",
+      isValidationError: e.type === "VALIDATION"
+    };
+  }
+  // Transform query parameters for API calls
+  static transformQueryParams(e) {
+    const t = new URLSearchParams();
+    return Object.entries(e).forEach(([r, s]) => {
+      s != null && s !== "" && t.append(r, String(s));
+    }), t;
+  }
+}
+export {
+  ut as ApiMappers,
+  ye as AppApiService,
+  _e as AppProvider,
+  Se as AuthApiService,
+  Qe as AuthProvider,
+  nt as FeatureFlag,
+  xe as FeatureFlagApiService,
+  Je as FeatureFlagProvider,
+  dt as HealthApiService,
+  W as HttpService,
+  it as LoginForm,
+  at as PasswordRecoveryForm,
+  lt as PermissionApiService,
+  tt as Protected,
+  rt as ProtectedRoute,
+  ae as RoleApiService,
+  be as SessionManager,
+  ot as SignupForm,
+  Pe as SubscriptionApiService,
+  st as SubscriptionGuard,
+  ct as SubscriptionPlanApiService,
+  Xe as SubscriptionProvider,
+  ne as TenantApiService,
+  Ze as TenantProvider,
+  ve as UserApiService,
+  Z as UserType,
+  Ke as useApi,
+  G as useApp,
+  ee as useAuth,
+  Ae as useFeatureFlags,
+  et as useSettings,
+  Te as useSubscription,
+  Ye as useTenant,
+  ke as useTenantSettings
+};
+//# sourceMappingURL=index.es.js.map