@skylabs-digital/react-identity-access 2.12.0 → 2.13.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
-import { jsx as n, Fragment as j, jsxs as d } from "react/jsx-runtime";
-import { createContext as he, useMemo as te, useState as k, useCallback as ie, useEffect as re, useContext as se, useRef as Ue } from "react";
-import { useLocation as Te, Navigate as me } from "react-router-dom";
-class ne {
+import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
+import { createContext as me, useMemo as K, useState as A, useCallback as re, useEffect as X, useContext as oe, useRef as ze } from "react";
+import { useLocation as be, Navigate as fe, useNavigate as lt, useSearchParams as ct } from "react-router-dom";
+class ie {
   // SessionManager instance
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
@@ -12,60 +12,60 @@ class ne {
   getBaseUrl() {
     return this.baseUrl;
   }
-  async request(e, t, r, s) {
-    return this.executeRequest(e, t, r, s, !1);
+  async request(e, t, n, i) {
+    return this.executeRequest(e, t, n, i, !1);
   }
-  async executeRequest(e, t, r, s, o = !1) {
-    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, m = (s == null ? void 0 : s.timeout) || this.timeout;
-    let y = {
+  async executeRequest(e, t, n, i, o = !1) {
+    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, p = (i == null ? void 0 : i.timeout) || this.timeout;
+    let f = {
       "Content-Type": "application/json",
-      ...s == null ? void 0 : s.headers
+      ...i == null ? void 0 : i.headers
     };
-    if (!(s != null && s.skipAuth) && this.sessionManager)
+    if (!(i != null && i.skipAuth) && this.sessionManager)
       try {
-        const S = await this.sessionManager.getAuthHeaders();
-        y = { ...y, ...S };
-      } catch (S) {
-        console.warn("Failed to inject auth headers:", S);
+        const w = await this.sessionManager.getAuthHeaders();
+        f = { ...f, ...w };
+      } catch (w) {
+        console.warn("Failed to inject auth headers:", w);
       }
-    const b = new AbortController(), p = setTimeout(() => b.abort(), m);
+    const b = new AbortController(), u = setTimeout(() => b.abort(), p);
     try {
-      const S = await fetch(a, {
+      const w = await fetch(a, {
         method: e,
-        headers: y,
-        body: r ? JSON.stringify(r) : void 0,
+        headers: f,
+        body: n ? JSON.stringify(n) : void 0,
         signal: b.signal
       });
-      if (clearTimeout(p), S.status === 401 && !(s != null && s.skipRetry) && !o && this.sessionManager)
+      if (clearTimeout(u), w.status === 401 && !(i != null && i.skipRetry) && !o && this.sessionManager)
         try {
-          const T = this.sessionManager.getTokens();
-          if (T != null && T.refreshToken)
-            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, r, s, !0);
+          const v = this.sessionManager.getTokens();
+          if (v != null && v.refreshToken)
+            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, n, i, !0);
         } catch {
-          throw new Error(`HTTP ${S.status}: ${S.statusText}`);
+          throw new Error(`HTTP ${w.status}: ${w.statusText}`);
         }
-      if (!S.ok)
-        throw new Error(`HTTP ${S.status}: ${S.statusText}`);
-      const f = S.headers.get("content-type");
-      return !f || !f.includes("application/json") ? {} : await S.json();
-    } catch (S) {
-      throw clearTimeout(p), S instanceof Error && S.name === "AbortError" ? new Error(`Request timeout after ${m}ms`) : S;
+      if (!w.ok)
+        throw new Error(`HTTP ${w.status}: ${w.statusText}`);
+      const g = w.headers.get("content-type");
+      return !g || !g.includes("application/json") ? {} : await w.json();
+    } catch (w) {
+      throw clearTimeout(u), w instanceof Error && w.name === "AbortError" ? new Error(`Request timeout after ${p}ms`) : w;
     }
   }
   async get(e, t) {
     return this.request("GET", e, void 0, t);
   }
-  async post(e, t, r) {
-    return this.request("POST", e, t, r);
+  async post(e, t, n) {
+    return this.request("POST", e, t, n);
   }
-  async put(e, t, r) {
-    return this.request("PUT", e, t, r);
+  async put(e, t, n) {
+    return this.request("PUT", e, t, n);
   }
   async delete(e, t) {
     return this.request("DELETE", e, void 0, t);
   }
 }
-class Fe {
+class Ce {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -76,9 +76,9 @@ class Fe {
     })).data;
   }
   async getApps(e) {
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/apps/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const i = `/apps/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
       headers: t
     });
     return {
@@ -93,28 +93,28 @@ class Fe {
     })).data;
   }
   async updateApp(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/apps/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async getPublicAppInfo(e) {
     return (await this.httpService.get(`/apps/${e}/public`)).data;
   }
   async setDefaultSubscriptionPlan(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/apps/${e}/default-subscription-plan`,
       { planId: t },
-      { headers: r }
+      { headers: n }
     )).data;
   }
-  async updateSettingsSchema(e, t, r) {
-    const s = await this.sessionManager.getAuthHeaders();
+  async updateSettingsSchema(e, t, n) {
+    const i = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/apps/${e}/settings-schema`,
-      { schema: t, defaultSettings: r },
-      { headers: s }
+      { schema: t, defaultSettings: n },
+      { headers: i }
     )).data;
   }
   async exportConfig(e) {
@@ -124,102 +124,102 @@ class Fe {
     })).data;
   }
 }
-const xe = he(null);
-function Jt({ config: i, children: e }) {
-  const t = te(
+const Re = me(null);
+function dn({ config: r, children: e }) {
+  const t = K(
     () => {
-      var f, T, I;
+      var g, v, M;
       return {
-        enabled: ((f = i.cache) == null ? void 0 : f.enabled) ?? !0,
-        ttl: ((T = i.cache) == null ? void 0 : T.ttl) ?? 3e5,
+        enabled: ((g = r.cache) == null ? void 0 : g.enabled) ?? !0,
+        ttl: ((v = r.cache) == null ? void 0 : v.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((I = i.cache) == null ? void 0 : I.storageKey) ?? `app_cache_${i.appId}`
+        storageKey: ((M = r.cache) == null ? void 0 : M.storageKey) ?? `app_cache_${r.appId}`
       };
     },
-    [i.cache, i.appId]
-  ), [r, s] = k(() => {
+    [r.cache, r.appId]
+  ), [n, i] = A(() => {
     if (!t.enabled) return null;
     try {
-      const f = localStorage.getItem(t.storageKey);
-      if (!f) return null;
-      const T = JSON.parse(f);
-      return Date.now() - T.timestamp < t.ttl && T.appId === i.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
+      const g = localStorage.getItem(t.storageKey);
+      if (!g) return null;
+      const v = JSON.parse(g);
+      return Date.now() - v.timestamp < t.ttl && v.appId === r.appId ? v.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = k(!r), [m, y] = k(null), b = te(() => {
-    const f = () => {
-      p();
+  }), [o, a] = A(!n), [p, f] = A(null), b = K(() => {
+    const g = () => {
+      u();
     };
     return {
-      appId: i.appId,
-      baseUrl: i.baseUrl,
+      appId: r.appId,
+      baseUrl: r.baseUrl,
       // App info
-      appInfo: r,
+      appInfo: n,
       isAppLoading: o,
-      appError: m,
-      retryApp: f
+      appError: p,
+      retryApp: g
     };
-  }, [i, r, o, m]), p = ie(
-    async (f = !1) => {
-      if (!(!f && t.enabled && r))
+  }, [r, n, o, p]), u = re(
+    async (g = !1) => {
+      if (!(!g && t.enabled && n))
         try {
-          a(!0), y(null);
-          const T = new ne(i.baseUrl), C = await new Fe(T, {}).getPublicAppInfo(i.appId);
-          if (s(C), t.enabled)
+          a(!0), f(null);
+          const v = new ie(r.baseUrl), F = await new Ce(v, {}).getPublicAppInfo(r.appId);
+          if (i(F), t.enabled)
             try {
-              const R = {
-                data: C,
+              const L = {
+                data: F,
                 timestamp: Date.now(),
-                appId: i.appId
+                appId: r.appId
               };
-              localStorage.setItem(t.storageKey, JSON.stringify(R));
-            } catch (R) {
-              console.warn("Failed to cache app info:", R);
+              localStorage.setItem(t.storageKey, JSON.stringify(L));
+            } catch (L) {
+              console.warn("Failed to cache app info:", L);
             }
-        } catch (T) {
-          const I = T instanceof Error ? T : new Error("Failed to load app information");
-          y(I), s(null);
+        } catch (v) {
+          const M = v instanceof Error ? v : new Error("Failed to load app information");
+          f(M), i(null);
         } finally {
           a(!1);
         }
     },
-    [i.baseUrl, i.appId, t, r]
-  ), S = ie(async () => {
-    if (!(!t.enabled || !r))
+    [r.baseUrl, r.appId, t, n]
+  ), w = re(async () => {
+    if (!(!t.enabled || !n))
       try {
-        const f = localStorage.getItem(t.storageKey);
-        if (!f) return;
-        const T = JSON.parse(f);
-        if (Date.now() - T.timestamp > t.ttl * 0.5) {
-          const C = new ne(i.baseUrl), x = await new Fe(C, {}).getPublicAppInfo(i.appId);
-          s(x);
-          const g = {
-            data: x,
+        const g = localStorage.getItem(t.storageKey);
+        if (!g) return;
+        const v = JSON.parse(g);
+        if (Date.now() - v.timestamp > t.ttl * 0.5) {
+          const F = new ie(r.baseUrl), P = await new Ce(F, {}).getPublicAppInfo(r.appId);
+          i(P);
+          const h = {
+            data: P,
             timestamp: Date.now(),
-            appId: i.appId
+            appId: r.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(g));
+          localStorage.setItem(t.storageKey, JSON.stringify(h));
         }
-      } catch (f) {
-        console.warn("Background app refresh failed:", f);
+      } catch (g) {
+        console.warn("Background app refresh failed:", g);
       }
-  }, [i, t, r]);
-  return re(() => {
-    r ? S() : p();
-  }, []), /* @__PURE__ */ n(xe.Provider, { value: b, children: e });
+  }, [r, t, n]);
+  return X(() => {
+    n ? w() : u();
+  }, []), /* @__PURE__ */ s(Re.Provider, { value: b, children: e });
 }
-function ge() {
-  const i = se(xe);
-  if (!i)
+function ye() {
+  const r = oe(Re);
+  if (!r)
     throw new Error("useApp must be used within an AppProvider");
-  return i;
+  return r;
 }
-function Be() {
-  return se(xe);
+function _e() {
+  return oe(Re);
 }
-const Kt = ge;
-class ke {
+const un = ye;
+class Ae {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey);
   }
@@ -256,12 +256,12 @@ class ke {
     this.tokenStorage.set(t);
   }
   getTokens() {
-    const { accessToken: e, refreshToken: t, expiresAt: r, expiresIn: s, tokenType: o } = this.tokenStorage.get() || {};
+    const { accessToken: e, refreshToken: t, expiresAt: n, expiresIn: i, tokenType: o } = this.tokenStorage.get() || {};
     return e ? {
       accessToken: e,
       refreshToken: t,
-      expiresAt: r,
-      expiresIn: s,
+      expiresAt: n,
+      expiresIn: i,
       tokenType: o
     } : null;
   }
@@ -291,17 +291,17 @@ class ke {
     if (!e.refreshToken)
       return this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
     if (this.refreshPromise)
-      return new Promise((t, r) => {
-        this.refreshQueue.push({ resolve: t, reject: r });
+      return new Promise((t, n) => {
+        this.refreshQueue.push({ resolve: t, reject: n });
       });
     this.refreshPromise = this.performTokenRefresh(e.refreshToken);
     try {
       await this.refreshPromise;
-      const t = this.getTokens(), r = t != null && t.accessToken ? { Authorization: `Bearer ${t.accessToken}` } : {};
-      return this.refreshQueue.forEach(({ resolve: s }) => s(r)), this.refreshQueue = [], r;
+      const t = this.getTokens(), n = t != null && t.accessToken ? { Authorization: `Bearer ${t.accessToken}` } : {};
+      return this.refreshQueue.forEach(({ resolve: i }) => i(n)), this.refreshQueue = [], n;
     } catch (t) {
-      const r = t instanceof Error ? t : new Error("Token refresh failed");
-      return this.refreshQueue.forEach(({ reject: s }) => s(r)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
+      const n = t instanceof Error ? t : new Error("Token refresh failed");
+      return this.refreshQueue.forEach(({ reject: i }) => i(n)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
     } finally {
       this.refreshPromise = null;
     }
@@ -309,7 +309,7 @@ class ke {
   async performTokenRefresh(e) {
     if (!this.baseUrl)
       throw new Error("Base URL not configured for token refresh");
-    const t = `${this.baseUrl}/auth/refresh`, r = await fetch(t, {
+    const t = `${this.baseUrl}/auth/refresh`, n = await fetch(t, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
@@ -318,13 +318,13 @@ class ke {
         refreshToken: e
       })
     });
-    if (!r.ok)
-      throw new Error(`Token refresh failed: ${r.status} ${r.statusText}`);
-    const s = await r.json();
+    if (!n.ok)
+      throw new Error(`Token refresh failed: ${n.status} ${n.statusText}`);
+    const i = await n.json();
     this.setTokens({
-      accessToken: s.accessToken,
-      refreshToken: s.refreshToken || e,
-      expiresIn: s.expiresIn
+      accessToken: i.accessToken,
+      refreshToken: i.refreshToken || e,
+      expiresIn: i.expiresIn
     });
   }
   setUser(e) {
@@ -352,8 +352,8 @@ class ke {
       if (!(e != null && e.accessToken)) return null;
       const t = e.accessToken.split(".");
       if (t.length !== 3) return null;
-      const r = t[1], s = atob(r.replace(/-/g, "+").replace(/_/g, "/"));
-      return JSON.parse(s);
+      const n = t[1], i = atob(n.replace(/-/g, "+").replace(/_/g, "/"));
+      return JSON.parse(i);
     } catch {
       return null;
     }
@@ -372,7 +372,7 @@ class ke {
     return e !== null && !this.isTokenExpired(e);
   }
 }
-class rt {
+class dt {
   constructor(e) {
     this.httpService = e;
   }
@@ -428,7 +428,7 @@ class rt {
     });
   }
 }
-class Ce {
+class De {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -451,9 +451,9 @@ class Ce {
   async updateRole(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/roles/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async deleteRole(e) {
@@ -466,9 +466,9 @@ class Ce {
   }
   // Public endpoint - no auth required
   async getRolesByApp(e, t) {
-    const r = new URLSearchParams();
-    t != null && t.page && r.append("page", t.page.toString()), t != null && t.limit && r.append("limit", t.limit.toString()), t != null && t.sortBy && r.append("sortBy", t.sortBy), t != null && t.sortOrder && r.append("sortOrder", t.sortOrder);
-    const s = `/roles/app/${e}${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s);
+    const n = new URLSearchParams();
+    t != null && t.page && n.append("page", t.page.toString()), t != null && t.limit && n.append("limit", t.limit.toString()), t != null && t.sortBy && n.append("sortBy", t.sortBy), t != null && t.sortOrder && n.append("sortOrder", t.sortOrder);
+    const i = `/roles/app/${e}${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i);
     return {
       roles: o.data,
       meta: o.meta
@@ -477,26 +477,26 @@ class Ce {
   async assignRole(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     await this.httpService.post(`/roles/${e}/assign`, t, {
-      headers: r
+      headers: n
     });
   }
   async revokeRole(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     await this.httpService.post(`/roles/${e}/revoke`, t, {
-      headers: r
+      headers: n
     });
   }
   async getUserRoles(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders(), s = new URLSearchParams();
-    t != null && t.page && s.append("page", t.page.toString()), t != null && t.limit && s.append("limit", t.limit.toString()), t != null && t.sortBy && s.append("sortBy", t.sortBy), t != null && t.sortOrder && s.append("sortOrder", t.sortOrder);
-    const o = `/roles/user/${e}${s.toString() ? `?${s.toString()}` : ""}`, a = await this.httpService.get(o, {
-      headers: r
+    const n = await this.sessionManager.getAuthHeaders(), i = new URLSearchParams();
+    t != null && t.page && i.append("page", t.page.toString()), t != null && t.limit && i.append("limit", t.limit.toString()), t != null && t.sortBy && i.append("sortBy", t.sortBy), t != null && t.sortOrder && i.append("sortOrder", t.sortOrder);
+    const o = `/roles/user/${e}${i.toString() ? `?${i.toString()}` : ""}`, a = await this.httpService.get(o, {
+      headers: n
     });
     return {
       roles: a.data,
@@ -504,7 +504,7 @@ class Ce {
     };
   }
 }
-class nt {
+class ut {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -515,9 +515,9 @@ class nt {
     })).data;
   }
   async getUsers(e) {
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/users/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const i = `/users/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
       headers: t
     });
     return {
@@ -532,9 +532,9 @@ class nt {
     })).data;
   }
   async updateUser(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/users/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async deleteUser(e) {
@@ -544,9 +544,9 @@ class nt {
     });
   }
 }
-class ue {
-  constructor(e, t, r) {
-    this.httpService = e, this.appId = t, this.sessionManager = r;
+class pe {
+  constructor(e, t, n) {
+    this.httpService = e, this.appId = t, this.sessionManager = n;
   }
   async createTenant(e) {
     if (!this.sessionManager)
@@ -559,9 +559,9 @@ class ue {
   async getTenants(e) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/tenants/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const i = `/tenants/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
       headers: t
     });
     return {
@@ -580,20 +580,20 @@ class ue {
   async updateTenant(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/tenants/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async adminUpdateTenant(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/tenants/${e}/admin-update`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -612,72 +612,72 @@ class ue {
   async updateTenantSettings(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/tenants/${e}/settings`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
 }
-function st(i, e) {
-  if (i === "localhost" || i.startsWith("127.") || i.startsWith("192.168."))
+function ht(r, e) {
+  if (r === "localhost" || r.startsWith("127.") || r.startsWith("192.168."))
     return null;
   if (e) {
-    const s = e.toLowerCase(), o = i.toLowerCase();
-    if (o === s || o === `www.${s}`)
+    const i = e.toLowerCase(), o = r.toLowerCase();
+    if (o === i || o === `www.${i}`)
       return null;
-    if (o.endsWith(`.${s}`)) {
-      const a = o.slice(0, -(s.length + 1));
+    if (o.endsWith(`.${i}`)) {
+      const a = o.slice(0, -(i.length + 1));
       return a === "www" ? null : a;
     }
     return null;
   }
-  const r = i.split(".");
-  return r.length >= 3 && r[0] !== "www" ? r[0] : null;
+  const n = r.split(".");
+  return n.length >= 3 && n[0] !== "www" ? n[0] : null;
 }
-function it(i, e = "tenant", t) {
-  const s = new URLSearchParams(i).get(e);
-  return s ? (t && t.setItem("tenant", s), s) : t ? t.getItem("tenant") : null;
+function gt(r, e = "tenant", t) {
+  const i = new URLSearchParams(r).get(e);
+  return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
 }
-function ot(i, e, t) {
-  const { tenantMode: r, baseDomain: s, selectorParam: o } = i;
-  return r === "subdomain" ? st(e.hostname, s) : r === "selector" ? it(e.search, o, t) : null;
+function pt(r, e, t) {
+  const { tenantMode: n, baseDomain: i, selectorParam: o } = r;
+  return n === "subdomain" ? ht(e.hostname, i) : n === "selector" ? gt(e.search, o, t) : null;
 }
-function at(i, e, t) {
+function ft(r, e, t) {
   if (t)
-    return `${i}.${t}`;
-  const r = e.split(".");
-  return r.length === 2 ? `${i}.${e}` : r.length >= 3 ? (r[0] = i, r.join(".")) : null;
+    return `${r}.${t}`;
+  const n = e.split(".");
+  return n.length === 2 ? `${r}.${e}` : n.length >= 3 ? (n[0] = r, n.join(".")) : null;
 }
-const le = "_auth";
-function De(i) {
-  const e = JSON.stringify(i);
+const de = "_auth";
+function $e(r) {
+  const e = JSON.stringify(r);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function lt(i) {
+function mt(r) {
   try {
-    let e = i.replace(/-/g, "+").replace(/_/g, "/");
+    let e = r.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
       e += "=";
-    const t = atob(e), r = JSON.parse(t);
-    return typeof r.accessToken == "string" && typeof r.refreshToken == "string" && typeof r.expiresIn == "number" ? r : null;
+    const t = atob(e), n = JSON.parse(t);
+    return typeof n.accessToken == "string" && typeof n.refreshToken == "string" && typeof n.expiresIn == "number" ? n : null;
   } catch {
     return null;
   }
 }
-function ct() {
+function yt() {
   if (typeof window > "u")
     return console.log("[CrossDomainAuth] SSR environment, skipping URL token extraction"), null;
-  const e = new URLSearchParams(window.location.search).get(le);
+  const e = new URLSearchParams(window.location.search).get(de);
   if (console.log("[CrossDomainAuth] extractAuthTokensFromUrl called", {
     hasAuthParam: !!e,
     searchParams: window.location.search,
     encodedLength: e == null ? void 0 : e.length
   }), !e) return null;
-  const t = lt(e);
+  const t = mt(e);
   return console.log("[CrossDomainAuth] Token decode result:", {
     success: !!t,
     hasAccessToken: !!(t != null && t.accessToken),
@@ -685,139 +685,139 @@ function ct() {
     expiresIn: t == null ? void 0 : t.expiresIn
   }), t;
 }
-function dt() {
+function wt() {
   if (typeof window > "u") return;
-  const i = new URL(window.location.href);
-  i.searchParams.delete(le), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
+  const r = new URL(window.location.href);
+  r.searchParams.delete(de), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
     oldUrl: window.location.href,
-    newUrl: i.toString()
-  }), window.history.replaceState({}, "", i.toString());
+    newUrl: r.toString()
+  }), window.history.replaceState({}, "", r.toString());
 }
-const Ae = he(null);
-function Yt({ config: i, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: s } = ge(), o = ie(() => typeof window > "u" ? null : ot(
+const Ie = me(null);
+function hn({ config: r, children: e }) {
+  const { baseUrl: t, appInfo: n, appId: i } = ye(), o = re(() => typeof window > "u" ? null : pt(
     {
-      tenantMode: i.tenantMode || "selector",
-      baseDomain: i.baseDomain,
-      selectorParam: i.selectorParam
+      tenantMode: r.tenantMode || "selector",
+      baseDomain: r.baseDomain,
+      selectorParam: r.selectorParam
     },
     {
       hostname: window.location.hostname,
       search: window.location.search
     },
     window.localStorage
-  ), [i.tenantMode, i.baseDomain, i.selectorParam]), [a, m] = k(() => o()), y = te(
+  ), [r.tenantMode, r.baseDomain, r.selectorParam]), [a, p] = A(() => o()), f = K(
     () => {
-      var l, H, M;
+      var c, $, E;
       return {
-        enabled: ((l = i.cache) == null ? void 0 : l.enabled) ?? !0,
-        ttl: ((H = i.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
+        enabled: ((c = r.cache) == null ? void 0 : c.enabled) ?? !0,
+        ttl: (($ = r.cache) == null ? void 0 : $.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((M = i.cache) == null ? void 0 : M.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((E = r.cache) == null ? void 0 : E.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
-    [i.cache, a]
-  ), [b, p] = k(() => {
-    if (i.initialTenant) return i.initialTenant;
-    if (!y.enabled || !a) return null;
+    [r.cache, a]
+  ), [b, u] = A(() => {
+    if (r.initialTenant) return r.initialTenant;
+    if (!f.enabled || !a) return null;
     try {
-      const l = localStorage.getItem(y.storageKey);
-      if (!l) return null;
-      const H = JSON.parse(l);
-      return Date.now() - H.timestamp < y.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(y.storageKey), null);
+      const c = localStorage.getItem(f.storageKey);
+      if (!c) return null;
+      const $ = JSON.parse(c);
+      return Date.now() - $.timestamp < f.ttl && $.tenantSlug === a ? $.data : (localStorage.removeItem(f.storageKey), null);
     } catch {
       return null;
     }
-  }), [S, f] = k(!b && !i.initialTenant), [T, I] = k(null), [C, R] = k(null), [x, g] = k(!1), [$, A] = k(null);
-  re(() => {
-    const l = o();
-    m(l);
+  }), [w, g] = A(!b && !r.initialTenant), [v, M] = A(null), [F, L] = A(null), [P, h] = A(!1), [x, k] = A(null);
+  X(() => {
+    const c = o();
+    p(c);
   }, [o]);
-  const E = (r == null ? void 0 : r.settingsSchema) || null, U = ie(
-    async (l, H = !1) => {
-      if (!(!H && y.enabled && b && b.domain === l))
+  const I = (n == null ? void 0 : n.settingsSchema) || null, U = re(
+    async (c, $ = !1) => {
+      if (!(!$ && f.enabled && b && b.domain === c))
         try {
-          f(!0), I(null);
-          const M = new ne(t), u = await new ue(M, s).getPublicTenantInfo(l);
-          if (p(u), y.enabled)
+          g(!0), M(null);
+          const E = new ie(t), m = await new pe(E, i).getPublicTenantInfo(c);
+          if (u(m), f.enabled)
             try {
-              const w = {
-                data: u,
+              const S = {
+                data: m,
                 timestamp: Date.now(),
-                tenantSlug: l
+                tenantSlug: c
               };
-              localStorage.setItem(y.storageKey, JSON.stringify(w));
-            } catch (w) {
-              console.warn("Failed to cache tenant info:", w);
+              localStorage.setItem(f.storageKey, JSON.stringify(S));
+            } catch (S) {
+              console.warn("Failed to cache tenant info:", S);
             }
-        } catch (M) {
-          const h = M instanceof Error ? M : new Error("Failed to load tenant information");
-          I(h), p(null);
+        } catch (E) {
+          const y = E instanceof Error ? E : new Error("Failed to load tenant information");
+          M(y), u(null);
         } finally {
-          f(!1);
+          g(!1);
         }
     },
-    [t, s, y, b]
-  ), D = ie(async () => {
-    if (!(!y.enabled || !b || !a))
+    [t, i, f, b]
+  ), C = re(async () => {
+    if (!(!f.enabled || !b || !a))
       try {
-        const l = localStorage.getItem(y.storageKey);
-        if (!l) return;
-        const H = JSON.parse(l);
-        if (Date.now() - H.timestamp > y.ttl * 0.5) {
-          const h = new ne(t), w = await new ue(h, s).getPublicTenantInfo(a);
-          p(w);
-          const _ = {
-            data: w,
+        const c = localStorage.getItem(f.storageKey);
+        if (!c) return;
+        const $ = JSON.parse(c);
+        if (Date.now() - $.timestamp > f.ttl * 0.5) {
+          const y = new ie(t), S = await new pe(y, i).getPublicTenantInfo(a);
+          u(S);
+          const G = {
+            data: S,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(y.storageKey, JSON.stringify(_));
+          localStorage.setItem(f.storageKey, JSON.stringify(G));
         }
-      } catch (l) {
-        console.warn("Background tenant refresh failed:", l);
+      } catch (c) {
+        console.warn("Background tenant refresh failed:", c);
       }
-  }, [t, s, y, b, a]), P = ie(async () => {
+  }, [t, i, f, b, a]), R = re(async () => {
     if (b != null && b.id)
       try {
-        g(!0), A(null);
-        const l = new ne(t), M = await new ue(l, b.appId).getTenantSettings(b.id);
-        R(M);
-      } catch (l) {
-        const H = l instanceof Error ? l : new Error("Failed to load tenant settings");
-        A(H), R(null);
+        h(!0), k(null);
+        const c = new ie(t), E = await new pe(c, b.appId).getTenantSettings(b.id);
+        L(E);
+      } catch (c) {
+        const $ = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        k($), L(null);
       } finally {
-        g(!1);
+        h(!1);
       }
-  }, [t, b]), O = ie(() => {
-    P();
-  }, [P]), c = ie(
-    (l) => {
-      if (!E)
+  }, [t, b]), B = re(() => {
+    R();
+  }, [R]), l = re(
+    (c) => {
+      if (!I)
         return { isValid: !0, errors: [] };
-      const H = [];
+      const $ = [];
       try {
-        return E.properties && Object.entries(E.properties).forEach(([M, h]) => {
-          var w;
-          const u = l[M];
-          if ((w = E.required) != null && w.includes(M) && u == null) {
-            H.push(`Field '${M}' is required`);
+        return I.properties && Object.entries(I.properties).forEach(([E, y]) => {
+          var S;
+          const m = c[E];
+          if ((S = I.required) != null && S.includes(E) && m == null) {
+            $.push(`Field '${E}' is required`);
             return;
           }
-          if (u != null) {
-            if (h.type) {
-              const _ = h.type, K = typeof u;
-              _ === "string" && K !== "string" ? H.push(`Field '${M}' must be a string`) : (_ === "number" || _ === "integer") && K !== "number" ? H.push(`Field '${M}' must be a number`) : _ === "boolean" && K !== "boolean" ? H.push(`Field '${M}' must be a boolean`) : _ === "array" && !Array.isArray(u) && H.push(`Field '${M}' must be an array`);
+          if (m != null) {
+            if (y.type) {
+              const G = y.type, J = typeof m;
+              G === "string" && J !== "string" ? $.push(`Field '${E}' must be a string`) : (G === "number" || G === "integer") && J !== "number" ? $.push(`Field '${E}' must be a number`) : G === "boolean" && J !== "boolean" ? $.push(`Field '${E}' must be a boolean`) : G === "array" && !Array.isArray(m) && $.push(`Field '${E}' must be an array`);
             }
-            h.minLength !== void 0 && typeof u == "string" && u.length < h.minLength && H.push(
-              `Field '${M}' must be at least ${h.minLength} characters long`
-            ), h.maxLength !== void 0 && typeof u == "string" && u.length > h.maxLength && H.push(
-              `Field '${M}' must be no more than ${h.maxLength} characters long`
-            ), h.minimum !== void 0 && typeof u == "number" && u < h.minimum && H.push(`Field '${M}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof u == "number" && u > h.maximum && H.push(`Field '${M}' must be no more than ${h.maximum}`), h.pattern && typeof u == "string" && (new RegExp(h.pattern).test(u) || H.push(`Field '${M}' does not match the required pattern`)), h.enum && !h.enum.includes(u) && H.push(`Field '${M}' must be one of: ${h.enum.join(", ")}`);
+            y.minLength !== void 0 && typeof m == "string" && m.length < y.minLength && $.push(
+              `Field '${E}' must be at least ${y.minLength} characters long`
+            ), y.maxLength !== void 0 && typeof m == "string" && m.length > y.maxLength && $.push(
+              `Field '${E}' must be no more than ${y.maxLength} characters long`
+            ), y.minimum !== void 0 && typeof m == "number" && m < y.minimum && $.push(`Field '${E}' must be at least ${y.minimum}`), y.maximum !== void 0 && typeof m == "number" && m > y.maximum && $.push(`Field '${E}' must be no more than ${y.maximum}`), y.pattern && typeof m == "string" && (new RegExp(y.pattern).test(m) || $.push(`Field '${E}' does not match the required pattern`)), y.enum && !y.enum.includes(m) && $.push(`Field '${E}' must be one of: ${y.enum.join(", ")}`);
           }
         }), {
-          isValid: H.length === 0,
-          errors: H
+          isValid: $.length === 0,
+          errors: $
         };
       } catch {
         return {
@@ -826,401 +826,401 @@ function Yt({ config: i, children: e }) {
         };
       }
     },
-    [E]
+    [I]
   );
-  re(() => {
-    !i.initialTenant && a ? b ? D() : U(a) : !i.initialTenant && !a && (p(null), I(null), f(!1));
-  }, [i.initialTenant, a, b, U, D]), re(() => {
-    b != null && b.id ? P() : (R(null), A(null), g(!1));
-  }, [b == null ? void 0 : b.id, P]);
-  const L = ie(
-    (l, H) => {
-      const { mode: M = "reload", tokens: h, redirectPath: u } = H || {}, w = i.tenantMode || "selector";
-      if (localStorage.setItem("tenant", l), w === "subdomain") {
-        const _ = window.location.hostname, K = at(
-          l,
-          _,
-          i.baseDomain
+  X(() => {
+    !r.initialTenant && a ? b ? C() : U(a) : !r.initialTenant && !a && (u(null), M(null), g(!1));
+  }, [r.initialTenant, a, b, U, C]), X(() => {
+    b != null && b.id ? R() : (L(null), k(null), h(!1));
+  }, [b == null ? void 0 : b.id, R]);
+  const N = re(
+    (c, $) => {
+      const { mode: E = "reload", tokens: y, redirectPath: m } = $ || {}, S = r.tenantMode || "selector";
+      if (localStorage.setItem("tenant", c), S === "subdomain") {
+        const G = window.location.hostname, J = ft(
+          c,
+          G,
+          r.baseDomain
         );
-        if (!K) {
+        if (!J) {
           console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            _
+            G
           );
           return;
         }
-        const B = u || window.location.pathname, q = new URL(`${window.location.protocol}//${K}${B}`);
-        new URLSearchParams(window.location.search).forEach((v, J) => {
-          J !== le && q.searchParams.set(J, v);
-        }), h && q.searchParams.set(le, De(h)), window.location.href = q.toString();
-      } else if (w === "selector") {
-        const _ = u || window.location.pathname, K = new URLSearchParams(window.location.search);
-        if (K.set(i.selectorParam || "tenant", l), K.delete(le), h && K.set(le, De(h)), M === "reload") {
-          const B = `${_}?${K.toString()}${window.location.hash}`;
-          window.location.href = B;
+        const q = m || window.location.pathname, O = new URL(`${window.location.protocol}//${J}${q}`);
+        new URLSearchParams(window.location.search).forEach((T, Z) => {
+          Z !== de && O.searchParams.set(Z, T);
+        }), y && O.searchParams.set(de, $e(y)), window.location.href = O.toString();
+      } else if (S === "selector") {
+        const G = m || window.location.pathname, J = new URLSearchParams(window.location.search);
+        if (J.set(r.selectorParam || "tenant", c), J.delete(de), y && J.set(de, $e(y)), E === "reload") {
+          const q = `${G}?${J.toString()}${window.location.hash}`;
+          window.location.href = q;
         } else {
-          const B = `${_}?${K.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", B), m(l), U(l);
+          const q = `${G}?${J.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", q), p(c), U(c);
         }
       }
     },
-    [i.tenantMode, i.selectorParam, i.baseDomain, U]
-  ), F = te(() => ({
+    [r.tenantMode, r.selectorParam, r.baseDomain, U]
+  ), D = K(() => ({
     // Tenant info
     tenant: b,
     tenantSlug: a,
-    isTenantLoading: S,
-    tenantError: T,
+    isTenantLoading: w,
+    tenantError: v,
     retryTenant: () => {
       a && U(a);
     },
     // Settings
-    settings: C,
-    settingsSchema: E,
-    isSettingsLoading: x,
-    settingsError: $,
+    settings: F,
+    settingsSchema: I,
+    isSettingsLoading: P,
+    settingsError: x,
     // Actions
-    refreshSettings: O,
-    switchTenant: L,
+    refreshSettings: B,
+    switchTenant: N,
     // Validation
-    validateSettings: c
+    validateSettings: l
   }), [
     b,
     a,
-    S,
-    T,
-    C,
-    E,
+    w,
+    v,
+    F,
+    I,
+    P,
     x,
-    $,
-    O,
-    L,
-    c
+    B,
+    N,
+    l
   ]);
-  return /* @__PURE__ */ n(Ae.Provider, { value: F, children: e });
+  return /* @__PURE__ */ s(Ie.Provider, { value: D, children: e });
 }
-function ye() {
-  const i = se(Ae);
-  if (!i)
+function ue() {
+  const r = oe(Ie);
+  if (!r)
     throw new Error("useTenant must be used within a TenantProvider");
-  return i;
+  return r;
 }
-function we() {
-  return se(Ae);
+function Se() {
+  return oe(Ie);
 }
-const Qt = ye;
-function Xt() {
-  const { settings: i, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: s } = ye();
+const gn = ue;
+function pn() {
+  const { settings: r, settingsSchema: e, isSettingsLoading: t, settingsError: n, validateSettings: i } = ue();
   return {
-    settings: i,
+    settings: r,
     settingsSchema: e,
     isLoading: t,
-    error: r,
-    validateSettings: s
+    error: n,
+    validateSettings: i
   };
 }
-function ce() {
-  const { tenant: i, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: s } = ye();
+function he() {
+  const { tenant: r, tenantSlug: e, isTenantLoading: t, tenantError: n, retryTenant: i } = ue();
   return {
-    tenant: i,
+    tenant: r,
     tenantSlug: e,
     isLoading: t,
-    error: r,
-    retry: s
+    error: n,
+    retry: i
   };
 }
-const Pe = he(null);
-function Zt({ config: i = {}, children: e }) {
-  const { appId: t, baseUrl: r } = ge(), { tenant: s, tenantSlug: o, switchTenant: a } = ye(), [m, y] = k(i.initialRoles || []), [b, p] = k(!i.initialRoles), [S, f] = k(null), [T, I] = k(!1), [C, R] = k(null), [x, g] = k(0), [$, A] = k(() => {
+const Me = me(null);
+function fn({ config: r = {}, children: e }) {
+  const { appId: t, baseUrl: n } = ye(), { tenant: i, tenantSlug: o, switchTenant: a } = ue(), [p, f] = A(r.initialRoles || []), [b, u] = A(!r.initialRoles), [w, g] = A(null), [v, M] = A(!1), [F, L] = A(null), [P, h] = A(0), [x, k] = A(() => {
     try {
-      const v = localStorage.getItem("userTenants");
-      return v ? JSON.parse(v) : [];
+      const T = localStorage.getItem("userTenants");
+      return T ? JSON.parse(T) : [];
     } catch {
       return [];
     }
-  }), [E, U] = k(!1), D = Ue({ done: !1, urlTokens: null });
-  D.current.done || (D.current.done = !0, D.current.urlTokens = ct(), D.current.urlTokens && console.log(
+  }), [I, U] = A(!1), C = ze({ done: !1, urlTokens: null });
+  C.current.done || (C.current.done = !0, C.current.urlTokens = yt(), C.current.urlTokens && console.log(
     "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
   ));
-  const [P, O] = k(() => {
-    const v = D.current.urlTokens !== null;
-    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", v), v;
-  }), c = te(() => {
-    const v = new ke({
+  const [R, B] = A(() => {
+    const T = C.current.urlTokens !== null;
+    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", T), T;
+  }), l = K(() => {
+    const T = new Ae({
       tenantSlug: o,
-      onRefreshFailed: i.onRefreshFailed,
-      baseUrl: r
+      onRefreshFailed: r.onRefreshFailed,
+      baseUrl: n
     });
-    return D.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), v.setTokens({
-      accessToken: D.current.urlTokens.accessToken,
-      refreshToken: D.current.urlTokens.refreshToken,
-      expiresIn: D.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", v.hasValidSession())), v;
-  }, [o, r, i.onRefreshFailed]), L = D.current.done && !P, F = te(() => {
-    const v = new ne(r);
-    return v.setSessionManager(c), v;
-  }, [r, c]), l = te(() => new rt(new ne(r)), [r]), H = te(() => new nt(F, c), [F, c]), M = te(() => new Ce(new ne(r)), [r]), h = te(() => S || c.getUser(), [S, c]), u = te(() => h != null && h.roleId && m.find((v) => v.id === h.roleId) || null, [h, m]), w = te(() => (u == null ? void 0 : u.permissions) || [], [u]), _ = te(() => c.hasValidSession() && S !== null, [c, S]), K = 5 * 60 * 1e3, B = te(() => {
-    const v = async (N = !1) => {
+    return C.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), T.setTokens({
+      accessToken: C.current.urlTokens.accessToken,
+      refreshToken: C.current.urlTokens.refreshToken,
+      expiresIn: C.current.urlTokens.expiresIn
+    }), console.log("[AuthProvider] SYNC: Session valid:", T.hasValidSession())), T;
+  }, [o, n, r.onRefreshFailed]), N = C.current.done && !R, D = K(() => {
+    const T = new ie(n);
+    return T.setSessionManager(l), T;
+  }, [n, l]), c = K(() => new dt(new ie(n)), [n]), $ = K(() => new ut(D, l), [D, l]), E = K(() => new De(new ie(n)), [n]), y = K(() => w || l.getUser(), [w, l]), m = K(() => y != null && y.roleId && p.find((T) => T.id === y.roleId) || null, [y, p]), S = K(() => (m == null ? void 0 : m.permissions) || [], [m]), G = K(() => l.hasValidSession() && w !== null, [l, w]), J = 5 * 60 * 1e3, q = K(() => {
+    const T = async (H = !1) => {
       try {
-        if (!c.hasValidSession())
+        if (!l.hasValidSession())
           return;
         const z = Date.now();
-        if (!N && z - x < K && S)
+        if (!H && z - P < J && w)
           return;
-        const W = c.getUserId();
+        const W = l.getUserId();
         if (!W) {
           console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        I(!0), R(null);
-        const Q = await H.getUserById(W);
-        f(Q), c.setUser(Q), g(Date.now());
+        M(!0), L(null);
+        const Q = await $.getUserById(W);
+        g(Q), l.setUser(Q), h(Date.now());
       } catch (z) {
         const Y = z instanceof Error ? z : new Error("Failed to load user data");
-        R(Y), console.error("[AuthProvider] Failed to load user data:", Y);
+        L(Y), console.error("[AuthProvider] Failed to load user data:", Y);
       } finally {
-        I(!1);
+        M(!1);
       }
-    }, J = async () => {
-      await v();
-    }, ae = async (N) => {
-      var Le;
-      const { username: z, password: Y, tenantSlug: W, redirectPath: Q } = N;
-      let X = s == null ? void 0 : s.id, Z = o, ee = c;
-      W && (X = (await new ue(F, t).getPublicTenantInfo(W)).id, Z = W);
-      const G = await l.login({
+    }, Z = async () => {
+      await T();
+    }, ce = async (H) => {
+      var Ne;
+      const { username: z, password: Y, tenantSlug: W, redirectPath: Q } = H;
+      let ee = i == null ? void 0 : i.id, te = o, ne = l;
+      W && (ee = (await new pe(D, t).getPublicTenantInfo(W)).id, te = W);
+      const j = await c.login({
         username: z,
         password: Y,
         appId: t,
-        tenantId: X
-      }), de = W && W !== o;
-      if (de && (ee = new ke({
-        tenantSlug: Z,
-        baseUrl: r
-      })), ee.setTokens({
-        accessToken: G.accessToken,
-        refreshToken: G.refreshToken,
-        expiresIn: G.expiresIn
-      }), G.user) {
-        ee.setUser(G.user), f(G.user);
+        tenantId: ee
+      }), ge = W && W !== o;
+      if (ge && (ne = new Ae({
+        tenantSlug: te,
+        baseUrl: n
+      })), ne.setTokens({
+        accessToken: j.accessToken,
+        refreshToken: j.refreshToken,
+        expiresIn: j.expiresIn
+      }), j.user) {
+        ne.setUser(j.user), g(j.user);
         try {
-          await v();
-        } catch (pe) {
-          console.warn("Failed to load complete user data after login:", pe);
+          await T();
+        } catch (we) {
+          console.warn("Failed to load complete user data after login:", we);
         }
       }
-      if (G.tenants && G.tenants.length > 0) {
-        A(G.tenants);
+      if (j.tenants && j.tenants.length > 0) {
+        k(j.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(G.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(j.tenants));
         } catch {
         }
       }
-      const ve = ((Le = G.user) == null ? void 0 : Le.tenantId) !== null;
-      if (U(ve), de && Z && Z !== o && a(Z, {
+      const ke = ((Ne = j.user) == null ? void 0 : Ne.tenantId) !== null;
+      if (U(ke), ge && te && te !== o && a(te, {
         tokens: {
-          accessToken: G.accessToken,
-          refreshToken: G.refreshToken,
-          expiresIn: G.expiresIn
+          accessToken: j.accessToken,
+          refreshToken: j.refreshToken,
+          expiresIn: j.expiresIn
         },
         redirectPath: Q
-      }), !ve && G.tenants && G.tenants.length > 0) {
-        const pe = N.autoSwitch !== !1 && i.autoSwitchSingleTenant !== !1;
-        if (G.tenants.length === 1 && pe) {
-          const Ee = G.tenants[0];
-          a(Ee.subdomain, {
+      }), !ke && j.tenants && j.tenants.length > 0) {
+        const we = H.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
+        if (j.tenants.length === 1 && we) {
+          const Ue = j.tenants[0];
+          a(Ue.subdomain, {
             tokens: {
-              accessToken: G.accessToken,
-              refreshToken: G.refreshToken,
-              expiresIn: G.expiresIn
+              accessToken: j.accessToken,
+              refreshToken: j.refreshToken,
+              expiresIn: j.expiresIn
             },
             redirectPath: Q
           });
-        } else G.tenants.length > 1 && i.onTenantSelectionRequired && i.onTenantSelectionRequired(G.tenants);
+        } else j.tenants.length > 1 && r.onTenantSelectionRequired && r.onTenantSelectionRequired(j.tenants);
       }
-      return G;
-    }, be = async (N) => {
-      const { email: z, phoneNumber: Y, name: W, password: Q, lastName: X, tenantId: Z } = N;
+      return j;
+    }, ve = async (H) => {
+      const { email: z, phoneNumber: Y, name: W, password: Q, lastName: ee, tenantId: te } = H;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!W || !Q)
         throw new Error("Name and password are required");
-      const ee = Z ?? (s == null ? void 0 : s.id);
-      return await l.signup({
+      const ne = te ?? (i == null ? void 0 : i.id);
+      return await c.signup({
         email: z,
         phoneNumber: Y,
         name: W,
         password: Q,
-        tenantId: ee,
-        lastName: X,
+        tenantId: ne,
+        lastName: ee,
         appId: t
       });
-    }, We = async (N) => {
-      const { email: z, phoneNumber: Y, name: W, password: Q, tenantName: X, lastName: Z } = N;
+    }, Ke = async (H) => {
+      const { email: z, phoneNumber: Y, name: W, password: Q, tenantName: ee, lastName: te } = H;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
-      if (!W || !Q || !X)
+      if (!W || !Q || !ee)
         throw new Error("Name, password, and tenantName are required");
-      return await l.signupTenantAdmin({
+      return await c.signupTenantAdmin({
         email: z,
         phoneNumber: Y,
         name: W,
         password: Q,
-        tenantName: X,
+        tenantName: ee,
         appId: t,
-        lastName: Z
+        lastName: te
       });
-    }, je = async (N) => {
-      const { currentPassword: z, newPassword: Y } = N, W = await c.getAuthHeaders();
-      await l.changePassword({ currentPassword: z, newPassword: Y }, W);
-    }, Ve = async (N) => {
-      const { email: z, tenantId: Y } = N, W = Y ?? (s == null ? void 0 : s.id);
+    }, Je = async (H) => {
+      const { currentPassword: z, newPassword: Y } = H, W = await l.getAuthHeaders();
+      await c.changePassword({ currentPassword: z, newPassword: Y }, W);
+    }, Ye = async (H) => {
+      const { email: z, tenantId: Y } = H, W = Y ?? (i == null ? void 0 : i.id);
       if (!W)
         throw new Error("tenantId is required for password reset");
-      await l.requestPasswordReset({ email: z, tenantId: W });
-    }, Ge = async (N) => {
-      const { token: z, newPassword: Y } = N;
-      await l.confirmPasswordReset({ token: z, newPassword: Y });
-    }, _e = async (N) => {
-      const { email: z, frontendUrl: Y, name: W, lastName: Q, tenantId: X } = N, Z = X ?? (s == null ? void 0 : s.id);
-      if (!Z)
+      await c.requestPasswordReset({ email: z, tenantId: W });
+    }, Qe = async (H) => {
+      const { token: z, newPassword: Y } = H;
+      await c.confirmPasswordReset({ token: z, newPassword: Y });
+    }, Xe = async (H) => {
+      const { email: z, frontendUrl: Y, name: W, lastName: Q, tenantId: ee } = H, te = ee ?? (i == null ? void 0 : i.id);
+      if (!te)
         throw new Error("tenantId is required for magic link authentication");
-      return await l.sendMagicLink({
+      return await c.sendMagicLink({
         email: z,
-        tenantId: Z,
+        tenantId: te,
         frontendUrl: Y,
         name: W,
         lastName: Q,
         appId: t
       });
-    }, Je = async (N) => {
-      const { token: z, email: Y, tenantSlug: W } = N;
-      let Q = s == null ? void 0 : s.id, X = o, Z = c;
-      W && (Q = (await new ue(F, t).getPublicTenantInfo(W)).id, X = W);
-      const ee = await l.verifyMagicLink({
+    }, et = async (H) => {
+      const { token: z, email: Y, tenantSlug: W } = H;
+      let Q = i == null ? void 0 : i.id, ee = o, te = l;
+      W && (Q = (await new pe(D, t).getPublicTenantInfo(W)).id, ee = W);
+      const ne = await c.verifyMagicLink({
         token: z,
         email: Y,
         appId: t,
         tenantId: Q
-      }), G = W && W !== o;
-      if (G && (Z = new ke({
-        tenantSlug: X,
-        baseUrl: r
-      })), Z.setTokens({
-        accessToken: ee.accessToken,
-        refreshToken: ee.refreshToken,
-        expiresIn: ee.expiresIn
-      }), ee.user) {
-        Z.setUser(ee.user), f(ee.user);
+      }), j = W && W !== o;
+      if (j && (te = new Ae({
+        tenantSlug: ee,
+        baseUrl: n
+      })), te.setTokens({
+        accessToken: ne.accessToken,
+        refreshToken: ne.refreshToken,
+        expiresIn: ne.expiresIn
+      }), ne.user) {
+        te.setUser(ne.user), g(ne.user);
         try {
-          await v();
-        } catch (de) {
-          console.warn("Failed to load complete user data after magic link login:", de);
+          await T();
+        } catch (ge) {
+          console.warn("Failed to load complete user data after magic link login:", ge);
         }
       }
-      return G && X && X !== o && a(X, {
+      return j && ee && ee !== o && a(ee, {
         tokens: {
-          accessToken: ee.accessToken,
-          refreshToken: ee.refreshToken,
-          expiresIn: ee.expiresIn
+          accessToken: ne.accessToken,
+          refreshToken: ne.refreshToken,
+          expiresIn: ne.expiresIn
         }
-      }), ee;
-    }, Ke = async () => {
-      const N = c.getTokens();
-      if (!(N != null && N.refreshToken))
+      }), ne;
+    }, tt = async () => {
+      const H = l.getTokens();
+      if (!(H != null && H.refreshToken))
         throw new Error("No refresh token available");
-      const z = await l.refreshToken({
-        refreshToken: N.refreshToken
+      const z = await c.refreshToken({
+        refreshToken: H.refreshToken
       });
-      c.setTokens({
+      l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || N.refreshToken,
+        refreshToken: z.refreshToken || H.refreshToken,
         expiresIn: z.expiresIn
       });
-    }, Ye = () => {
-      c.clearSession(), f(null), R(null), A([]), U(!1);
+    }, nt = () => {
+      l.clearSession(), g(null), L(null), k([]), U(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, Qe = (N) => {
-      c.setTokens(N);
-    }, Xe = () => c.hasValidSession(), Ze = () => {
-      c.clearSession(), f(null), R(null);
-    }, et = async () => {
+    }, rt = (H) => {
+      l.setTokens(H);
+    }, st = () => l.hasValidSession(), it = () => {
+      l.clearSession(), g(null), L(null);
+    }, ot = async () => {
       if (t)
         try {
-          p(!0);
-          const { roles: N } = await M.getRolesByApp(t);
-          y(N);
-        } catch (N) {
-          console.error("Failed to fetch roles:", N);
+          u(!0);
+          const { roles: H } = await E.getRolesByApp(t);
+          f(H);
+        } catch (H) {
+          console.error("Failed to fetch roles:", H);
         } finally {
-          p(!1);
+          u(!1);
         }
-    }, tt = async () => {
-      await et();
-    }, Se = (N) => {
-      if (!w || w.length === 0)
+    }, at = async () => {
+      await ot();
+    }, Te = (H) => {
+      if (!S || S.length === 0)
         return !1;
-      if (typeof N == "string")
-        return w.includes(N);
-      const z = `${N.resource}.${N.action}`;
-      return w.includes(z);
+      if (typeof H == "string")
+        return S.includes(H);
+      const z = `${H.resource}.${H.action}`;
+      return S.includes(z);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: _,
-      sessionManager: c,
-      authenticatedHttpService: F,
-      login: ae,
-      signup: be,
-      signupTenantAdmin: We,
-      sendMagicLink: _e,
-      verifyMagicLink: Je,
-      changePassword: je,
-      requestPasswordReset: Ve,
-      confirmPasswordReset: Ge,
-      refreshToken: Ke,
-      logout: Ye,
-      setTokens: Qe,
-      hasValidSession: Xe,
-      clearSession: Ze,
-      currentUser: S,
-      isUserLoading: T,
-      userError: C,
-      loadUserData: v,
-      refreshUser: J,
-      isAuthInitializing: !L,
-      isAuthReady: L,
-      userRole: u,
-      userPermissions: w,
-      availableRoles: m,
+      isAuthenticated: G,
+      sessionManager: l,
+      authenticatedHttpService: D,
+      login: ce,
+      signup: ve,
+      signupTenantAdmin: Ke,
+      sendMagicLink: Xe,
+      verifyMagicLink: et,
+      changePassword: Je,
+      requestPasswordReset: Ye,
+      confirmPasswordReset: Qe,
+      refreshToken: tt,
+      logout: nt,
+      setTokens: rt,
+      hasValidSession: st,
+      clearSession: it,
+      currentUser: w,
+      isUserLoading: v,
+      userError: F,
+      loadUserData: T,
+      refreshUser: Z,
+      isAuthInitializing: !N,
+      isAuthReady: N,
+      userRole: m,
+      userPermissions: S,
+      availableRoles: p,
       rolesLoading: b,
-      hasPermission: Se,
-      hasAnyPermission: (N) => N.some((z) => Se(z)),
-      hasAllPermissions: (N) => N.every((z) => Se(z)),
-      getUserPermissionStrings: () => w || [],
-      refreshRoles: tt,
+      hasPermission: Te,
+      hasAnyPermission: (H) => H.some((z) => Te(z)),
+      hasAllPermissions: (H) => H.every((z) => Te(z)),
+      getUserPermissionStrings: () => S || [],
+      refreshRoles: at,
       // RFC-004: Multi-tenant user membership
-      userTenants: $,
-      hasTenantContext: E,
-      switchToTenant: async (N, z) => {
-        const { redirectPath: Y } = z || {}, W = c.getTokens();
+      userTenants: x,
+      hasTenantContext: I,
+      switchToTenant: async (H, z) => {
+        const { redirectPath: Y } = z || {}, W = l.getTokens();
         if (!(W != null && W.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const Q = await l.switchTenant({
+        const Q = await c.switchTenant({
           refreshToken: W.refreshToken,
-          tenantId: N
+          tenantId: H
         });
-        c.setTokens({
+        l.setTokens({
           accessToken: Q.accessToken,
           refreshToken: W.refreshToken,
           // Keep the same refresh token
           expiresIn: Q.expiresIn
-        }), f(Q.user), c.setUser(Q.user), U(!0);
-        const X = $.find((Z) => Z.id === N);
-        X && a(X.subdomain, {
+        }), g(Q.user), l.setUser(Q.user), U(!0);
+        const ee = x.find((te) => te.id === H);
+        ee && a(ee.subdomain, {
           tokens: {
             accessToken: Q.accessToken,
             refreshToken: W.refreshToken,
@@ -1230,8 +1230,8 @@ function Zt({ config: i = {}, children: e }) {
         });
       },
       refreshUserTenants: async () => {
-        const N = await c.getAuthHeaders(), z = await l.getUserTenants(N);
-        A(z);
+        const H = await l.getAuthHeaders(), z = await c.getUserTenants(H);
+        k(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
         } catch {
@@ -1240,74 +1240,74 @@ function Zt({ config: i = {}, children: e }) {
       }
     };
   }, [
-    _,
-    c,
-    F,
+    G,
     l,
-    H,
-    M,
+    D,
+    c,
+    $,
+    E,
     t,
-    s,
+    i,
     o,
     a,
-    m,
-    S,
-    T,
-    C,
-    $,
-    E,
-    L,
-    u,
+    p,
     w,
+    v,
+    F,
     x,
-    K
+    I,
+    N,
+    m,
+    S,
+    P,
+    J
   ]);
-  re(() => {
-    !i.initialRoles && t && (async () => {
+  X(() => {
+    !r.initialRoles && t && (async () => {
       try {
-        p(!0);
-        const J = new ne(r), ae = new Ce(J), { roles: be } = await ae.getRolesByApp(t);
-        y(be);
-      } catch (J) {
-        console.error("Failed to fetch roles:", J);
+        u(!0);
+        const Z = new ie(n), ce = new De(Z), { roles: ve } = await ce.getRolesByApp(t);
+        f(ve);
+      } catch (Z) {
+        console.error("Failed to fetch roles:", Z);
       } finally {
-        p(!1);
+        u(!1);
       }
     })();
-  }, [t, r, i.initialRoles]);
-  const [q, V] = k(!1);
-  return re(() => {
-    q || (V(!0), D.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), dt(), O(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), B.loadUserData().catch((v) => {
-      console.error("[AuthProvider] Failed to load user data:", v);
+  }, [t, n, r.initialRoles]);
+  const [O, V] = A(!1);
+  return X(() => {
+    O || (V(!0), C.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), wt(), B(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), q.loadUserData().catch((T) => {
+      console.error("[AuthProvider] Failed to load user data:", T);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), O(!1);
+      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), B(!1);
     })));
-  }, [B, q]), re(() => {
-    const v = c.getUser();
-    v && c.hasValidSession() && f(v);
-  }, [c]), re(() => {
-    q && (D.current.urlTokens || !S && !T && c.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), B.loadUserData().catch(() => {
+  }, [q, O]), X(() => {
+    const T = l.getUser();
+    T && l.hasValidSession() && g(T);
+  }, [l]), X(() => {
+    O && (C.current.urlTokens || !w && !v && l.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), q.loadUserData().catch(() => {
     })));
-  }, [S, T, B, c, q]), re(() => {
-    if (!c.hasValidSession() || !S)
+  }, [w, v, q, l, O]), X(() => {
+    if (!l.hasValidSession() || !w)
       return;
-    const v = setInterval(() => {
-      B.loadUserData().catch(() => {
+    const T = setInterval(() => {
+      q.loadUserData().catch(() => {
       });
-    }, K);
-    return () => clearInterval(v);
-  }, [c, S, B, K]), /* @__PURE__ */ n(Pe.Provider, { value: B, children: e });
+    }, J);
+    return () => clearInterval(T);
+  }, [l, w, q, J]), /* @__PURE__ */ s(Me.Provider, { value: q, children: e });
 }
-function oe() {
-  const i = se(Pe);
-  if (!i)
+function le() {
+  const r = oe(Me);
+  if (!r)
     throw new Error("useAuth must be used within an AuthProvider");
-  return i;
+  return r;
 }
-function Me() {
-  return se(Pe);
+function Le() {
+  return oe(Me);
 }
-class ut {
+class bt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1326,9 +1326,9 @@ class ut {
   async getFeatureFlags(e) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/feature-flags/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const i = `/feature-flags/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
       headers: t
     });
     return {
@@ -1347,12 +1347,12 @@ class ut {
   async updateFeatureFlag(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/feature-flags/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -1368,85 +1368,85 @@ class ut {
   async getTenantFeatureFlags(e, t) {
     if (!e || !t)
       throw new Error("Tenant ID and App ID are required");
-    const r = new URLSearchParams();
-    r.append("tenantId", e), r.append("appId", t);
-    const s = `/tenant-feature-flags${r.toString() ? `?${r.toString()}` : ""}`;
-    return (await this.httpService.get(s, {
+    const n = new URLSearchParams();
+    n.append("tenantId", e), n.append("appId", t);
+    const i = `/tenant-feature-flags${n.toString() ? `?${n.toString()}` : ""}`;
+    return (await this.httpService.get(i, {
       headers: { "X-Tenant-ID": e }
     })).data;
   }
   // Public endpoint - no auth required
-  async getTenantFeatureFlag(e, t, r) {
-    if (!e || !t || !r)
+  async getTenantFeatureFlag(e, t, n) {
+    if (!e || !t || !n)
       throw new Error("Flag Key, Tenant ID and App ID are required");
-    const s = new URLSearchParams();
-    s.append("tenantId", t), s.append("appId", r);
-    const o = `/tenant-feature-flags/${e}${s.toString() ? `?${s.toString()}` : ""}`;
+    const i = new URLSearchParams();
+    i.append("tenantId", t), i.append("appId", n);
+    const o = `/tenant-feature-flags/${e}${i.toString() ? `?${i.toString()}` : ""}`;
     return (await this.httpService.get(o, {
       headers: { "X-Tenant-ID": t }
     })).data;
   }
 }
-const Ie = he(null);
-function er({ config: i = {}, children: e }) {
-  const t = Be(), r = we(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [m, y] = k([]), [b, p] = k(!1), [S, f] = k(null), [T, I] = k(!1), C = te(() => {
-    const g = new ne(s);
-    return new ut(g);
-  }, [s]), R = async () => {
+const Ee = me(null);
+function mn({ config: r = {}, children: e }) {
+  const t = _e(), n = Se(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [p, f] = A([]), [b, u] = A(!1), [w, g] = A(null), [v, M] = A(!1), F = K(() => {
+    const h = new ie(i);
+    return new bt(h);
+  }, [i]), L = async () => {
     if (!(a != null && a.id)) {
-      y([]);
+      f([]);
       return;
     }
-    p(!0), f(null);
+    u(!0), g(null);
     try {
-      const g = await C.getTenantFeatureFlags(a.id, o);
-      y(g);
-    } catch (g) {
-      const $ = g instanceof Error ? g.message : "Failed to fetch feature flags";
-      f($), i.onError && i.onError(g instanceof Error ? g : new Error($));
+      const h = await F.getTenantFeatureFlags(a.id, o);
+      f(h);
+    } catch (h) {
+      const x = h instanceof Error ? h.message : "Failed to fetch feature flags";
+      g(x), r.onError && r.onError(h instanceof Error ? h : new Error(x));
     } finally {
-      p(!1);
+      u(!1);
     }
   };
-  re(() => {
-    if (!s || !o) return;
-    R().finally(() => I(!0));
-    const g = i.refreshInterval || 5 * 60 * 1e3, $ = setInterval(R, g);
-    return () => clearInterval($);
-  }, [a == null ? void 0 : a.id, s, o, i.refreshInterval]);
-  const x = te(() => {
-    const g = (D) => {
-      const P = m.find((O) => O.key === D);
-      return (P == null ? void 0 : P.value) === !0;
-    }, $ = (D) => m.find((P) => P.key === D), A = (D) => {
-      const P = m.find((O) => O.key === D);
-      return P ? P.value ? "enabled" : "disabled" : "not_found";
-    }, E = async () => {
-      await R();
-    }, U = !!(s && o) && (T || !(a != null && a.id));
+  X(() => {
+    if (!i || !o) return;
+    L().finally(() => M(!0));
+    const h = r.refreshInterval || 5 * 60 * 1e3, x = setInterval(L, h);
+    return () => clearInterval(x);
+  }, [a == null ? void 0 : a.id, i, o, r.refreshInterval]);
+  const P = K(() => {
+    const h = (C) => {
+      const R = p.find((B) => B.key === C);
+      return (R == null ? void 0 : R.value) === !0;
+    }, x = (C) => p.find((R) => R.key === C), k = (C) => {
+      const R = p.find((B) => B.key === C);
+      return R ? R.value ? "enabled" : "disabled" : "not_found";
+    }, I = async () => {
+      await L();
+    }, U = !!(i && o) && (v || !(a != null && a.id));
     return {
-      featureFlags: m,
+      featureFlags: p,
       loading: b,
-      error: S,
+      error: w,
       isReady: U,
-      isEnabled: g,
-      getFlag: $,
-      getFlagState: A,
-      refresh: E
+      isEnabled: h,
+      getFlag: x,
+      getFlagState: k,
+      refresh: I
     };
-  }, [m, b, S, s, o, a == null ? void 0 : a.id, T]);
-  return /* @__PURE__ */ n(Ie.Provider, { value: x, children: e });
+  }, [p, b, w, i, o, a == null ? void 0 : a.id, v]);
+  return /* @__PURE__ */ s(Ee.Provider, { value: P, children: e });
 }
-function ht() {
-  const i = se(Ie);
-  if (!i)
+function St() {
+  const r = oe(Ee);
+  if (!r)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
-  return i;
+  return r;
 }
-function qe() {
-  return se(Ie);
+function We() {
+  return oe(Ee);
 }
-class gt {
+class vt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1476,23 +1476,23 @@ class gt {
   async updateSubscription(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/subscriptions/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
   async changeSubscriptionPlan(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/subscriptions/${e}/plan`,
       { planId: t },
-      { headers: r }
+      { headers: n }
     )).data;
   }
   // Public endpoint - no auth required
@@ -1504,76 +1504,76 @@ class gt {
   async processPayment(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.post(
       `/subscriptions/${e}/process-payment`,
       t,
-      { headers: r }
+      { headers: n }
     )).data;
   }
 }
-const Re = he(void 0);
-function tr({ config: i = {}, children: e }) {
-  const t = Be(), r = we(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, m] = k(null), [y, b] = k(!1), [p, S] = k(null), [f, T] = k(!1), I = te(() => {
-    const x = new ne(s);
-    return new gt(x);
-  }, [s]), C = async () => {
+const Fe = me(void 0);
+function yn({ config: r = {}, children: e }) {
+  const t = _e(), n = Se(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (n == null ? void 0 : n.tenant) ?? null, [a, p] = A(null), [f, b] = A(!1), [u, w] = A(null), [g, v] = A(!1), M = K(() => {
+    const P = new ie(i);
+    return new vt(P);
+  }, [i]), F = async () => {
     if (!(o != null && o.id)) {
-      m(null);
+      p(null);
       return;
     }
-    b(!0), S(null);
+    b(!0), w(null);
     try {
-      const x = await I.getTenantSubscriptionFeatures(o.id);
-      m(x);
-    } catch (x) {
-      const g = x instanceof Error ? x.message : "Failed to fetch subscription";
-      S(g), i.onError && i.onError(x instanceof Error ? x : new Error(g));
+      const P = await M.getTenantSubscriptionFeatures(o.id);
+      p(P);
+    } catch (P) {
+      const h = P instanceof Error ? P.message : "Failed to fetch subscription";
+      w(h), r.onError && r.onError(P instanceof Error ? P : new Error(h));
     } finally {
       b(!1);
     }
   };
-  re(() => {
-    if (!s || (C().finally(() => T(!0)), !i.refreshInterval)) return;
-    const x = i.refreshInterval || 10 * 60 * 1e3, g = setInterval(C, x);
-    return () => clearInterval(g);
-  }, [o == null ? void 0 : o.id, s, i.refreshInterval]);
-  const R = te(() => {
-    const x = (a == null ? void 0 : a.features) || [], g = (P) => {
-      const O = x.find((c) => c.key === P);
-      return O ? O.type === "BOOLEAN" || O.type === "boolean" ? O.value === !0 : !!O.value : !1;
-    }, $ = (P) => x.find((O) => O.key === P), A = (P, O) => {
-      const c = x.find((L) => L.key === P);
-      return c ? c.value : O;
-    }, E = (P) => !a || !a.isActive ? !1 : P.includes(a.planId), U = async () => {
-      await C();
-    }, D = !!s && (f || !(o != null && o.id));
+  X(() => {
+    if (!i || (F().finally(() => v(!0)), !r.refreshInterval)) return;
+    const P = r.refreshInterval || 10 * 60 * 1e3, h = setInterval(F, P);
+    return () => clearInterval(h);
+  }, [o == null ? void 0 : o.id, i, r.refreshInterval]);
+  const L = K(() => {
+    const P = (a == null ? void 0 : a.features) || [], h = (R) => {
+      const B = P.find((l) => l.key === R);
+      return B ? B.type === "BOOLEAN" || B.type === "boolean" ? B.value === !0 : !!B.value : !1;
+    }, x = (R) => P.find((B) => B.key === R), k = (R, B) => {
+      const l = P.find((N) => N.key === R);
+      return l ? l.value : B;
+    }, I = (R) => !a || !a.isActive ? !1 : R.includes(a.planId), U = async () => {
+      await F();
+    }, C = !!i && (g || !(o != null && o.id));
     return {
       subscription: a,
-      features: x,
-      loading: y,
-      error: p,
-      isReady: D,
-      isFeatureEnabled: g,
-      getFeature: $,
-      getFeatureValue: A,
-      hasAllowedPlan: E,
+      features: P,
+      loading: f,
+      error: u,
+      isReady: C,
+      isFeatureEnabled: h,
+      getFeature: x,
+      getFeatureValue: k,
+      hasAllowedPlan: I,
       refresh: U
     };
-  }, [a, y, p, s, o == null ? void 0 : o.id, f]);
-  return /* @__PURE__ */ n(Re.Provider, { value: R, children: e });
+  }, [a, f, u, i, o == null ? void 0 : o.id, g]);
+  return /* @__PURE__ */ s(Fe.Provider, { value: L, children: e });
 }
-function pt() {
-  const i = se(Re);
-  if (i === void 0)
+function Tt() {
+  const r = oe(Fe);
+  if (r === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
-  return i;
+  return r;
 }
-function ze() {
-  return se(Re) ?? null;
+function Ve() {
+  return oe(Fe) ?? null;
 }
-var fe = /* @__PURE__ */ ((i) => (i.SUPERUSER = "SUPERUSER", i.TENANT_ADMIN = "TENANT_ADMIN", i.USER = "USER", i))(fe || {});
-const $e = () => /* @__PURE__ */ d(
+var se = /* @__PURE__ */ ((r) => (r.SUPERUSER = "SUPERUSER", r.TENANT_ADMIN = "TENANT_ADMIN", r.USER = "USER", r))(se || {});
+const He = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1589,10 +1589,10 @@ const $e = () => /* @__PURE__ */ d(
       margin: "20px 0"
     },
     children: [
-      /* @__PURE__ */ n("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "🔒" }),
-      /* @__PURE__ */ n("h3", { style: { color: "#495057", marginBottom: "10px" }, children: "Access Required" }),
-      /* @__PURE__ */ n("p", { style: { color: "#6c757d", fontSize: "14px", marginBottom: "15px" }, children: "You need to be signed in to view this content." }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "🔒" }),
+      /* @__PURE__ */ s("h3", { style: { color: "#495057", marginBottom: "10px" }, children: "Access Required" }),
+      /* @__PURE__ */ s("p", { style: { color: "#6c757d", fontSize: "14px", marginBottom: "15px" }, children: "You need to be signed in to view this content." }),
+      /* @__PURE__ */ s(
         "button",
         {
           style: {
@@ -1610,8 +1610,8 @@ const $e = () => /* @__PURE__ */ d(
       )
     ]
   }
-), He = ({
-  userType: i,
+), Be = ({
+  userType: r,
   minUserType: e,
   missingPermissions: t
 }) => /* @__PURE__ */ d(
@@ -1630,57 +1630,57 @@ const $e = () => /* @__PURE__ */ d(
       margin: "20px 0"
     },
     children: [
-      /* @__PURE__ */ n("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
-      /* @__PURE__ */ n("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && i ? /* @__PURE__ */ d(j, { children: [
+      /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
+      /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
+      e && r ? /* @__PURE__ */ d(_, { children: [
         /* @__PURE__ */ d("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
-          /* @__PURE__ */ n("strong", { children: e }),
+          /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
         /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
-          /* @__PURE__ */ n("strong", { children: i })
+          /* @__PURE__ */ s("strong", { children: r })
         ] })
-      ] }) : /* @__PURE__ */ d(j, { children: [
-        /* @__PURE__ */ n("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
+      ] }) : /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
         t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
-          /* @__PURE__ */ n("strong", { children: t.join(", ") })
+          /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
       ] })
     ]
   }
-), ft = (i, e) => {
+), kt = (r, e) => {
   const t = {
-    [fe.USER]: 1,
-    [fe.TENANT_ADMIN]: 2,
-    [fe.SUPERUSER]: 3
+    [se.USER]: 1,
+    [se.TENANT_ADMIN]: 2,
+    [se.SUPERUSER]: 3
   };
-  return t[i] >= t[e];
+  return t[r] >= t[e];
 };
-function rr({
-  children: i,
+function wn({
+  children: r,
   fallback: e,
   minUserType: t,
-  requiredPermissions: r,
-  requireAllPermissions: s = !1
+  requiredPermissions: n,
+  requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: m, hasAnyPermission: y, hasAllPermissions: b } = oe();
+  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: f, hasAllPermissions: b } = le();
   if (!o())
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n($e, {}) });
-  const p = a.getUser();
-  if (!p)
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n($e, {}) });
-  if (t && !ft(p.userType, t))
-    return /* @__PURE__ */ n(He, { userType: p.userType, minUserType: t });
-  if (r && r.length > 0 && !(s ? b(r) : y(r))) {
-    const f = r.filter((T) => !m(T)).map((T) => typeof T == "string" ? T : T.name);
-    return /* @__PURE__ */ n(He, { missingPermissions: f });
-  }
-  return /* @__PURE__ */ n(j, { children: i });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(He, {}) });
+  const u = a.getUser();
+  if (!u)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(He, {}) });
+  if (t && !kt(u.userType, t))
+    return /* @__PURE__ */ s(Be, { userType: u.userType, minUserType: t });
+  if (n && n.length > 0 && !(i ? b(n) : f(n))) {
+    const g = n.filter((v) => !p(v)).map((v) => typeof v == "string" ? v : v.name);
+    return /* @__PURE__ */ s(Be, { missingPermissions: g });
+  }
+  return /* @__PURE__ */ s(_, { children: r });
 }
-const mt = ({ redirectPath: i }) => /* @__PURE__ */ n(
+const At = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1704,23 +1704,23 @@ const mt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
-          /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
+          /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
           /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
-            i,
+            r,
             "..."
           ] })
         ]
       }
     )
   }
-), Ne = ({
-  userType: i,
+), qe = ({
+  userType: r,
   requiredUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ n(
+}) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1744,62 +1744,66 @@ const mt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && i ? /* @__PURE__ */ d(j, { children: [
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
+          e && r ? /* @__PURE__ */ d(_, { children: [
             /* @__PURE__ */ d("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
-              /* @__PURE__ */ n("strong", { children: e }),
+              /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
             /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
-              /* @__PURE__ */ n("strong", { children: i })
+              /* @__PURE__ */ s("strong", { children: r })
             ] })
-          ] }) : /* @__PURE__ */ d(j, { children: [
-            /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
+          ] }) : /* @__PURE__ */ d(_, { children: [
+            /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
             t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
-              /* @__PURE__ */ n("strong", { children: t.join(", ") })
+              /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
           ] })
         ]
       }
     )
   }
-), yt = (i, e) => i === e;
-function nr({
-  children: i,
+), xt = (r, e) => r === e;
+function bn({
+  children: r,
   redirectTo: e = "/login",
   requiredUserType: t,
-  requiredPermissions: r,
-  requireAllPermissions: s = !1,
+  requiredPermissions: n,
+  requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: m, hasPermission: y, hasAnyPermission: b, hasAllPermissions: p } = oe(), S = Te();
-  if (!a())
-    return o ? /* @__PURE__ */ n(j, { children: o }) : /* @__PURE__ */ d(j, { children: [
-      /* @__PURE__ */ n(mt, { redirectPath: e }),
-      /* @__PURE__ */ n(me, { to: e, state: { from: S.pathname }, replace: !0 })
+  const { hasValidSession: a, sessionManager: p, hasPermission: f, hasAnyPermission: b, hasAllPermissions: u } = le(), w = be();
+  if (X(() => {
+    process.env.NODE_ENV === "development" && console.warn(
+      "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
+    );
+  }, []), !a())
+    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ d(_, { children: [
+      /* @__PURE__ */ s(At, { redirectPath: e }),
+      /* @__PURE__ */ s(fe, { to: e, state: { from: w.pathname }, replace: !0 })
     ] });
-  const f = m.getUser();
-  if (!f)
-    return /* @__PURE__ */ n(me, { to: e, state: { from: S.pathname }, replace: !0 });
-  if (t && !yt(f.userType, t))
-    return /* @__PURE__ */ n(
-      Ne,
+  const g = p.getUser();
+  if (!g)
+    return /* @__PURE__ */ s(fe, { to: e, state: { from: w.pathname }, replace: !0 });
+  if (t && !xt(g.userType, t))
+    return /* @__PURE__ */ s(
+      qe,
       {
-        userType: f.userType,
+        userType: g.userType,
         requiredUserType: t
       }
     );
-  if (r && r.length > 0 && !(s ? p(r) : b(r))) {
-    const I = r.filter((C) => !y(C)).map((C) => typeof C == "string" ? C : C.name);
-    return /* @__PURE__ */ n(Ne, { missingPermissions: I });
+  if (n && n.length > 0 && !(i ? u(n) : b(n))) {
+    const M = n.filter((F) => !f(F)).map((F) => typeof F == "string" ? F : F.name);
+    return /* @__PURE__ */ s(qe, { missingPermissions: M });
   }
-  return /* @__PURE__ */ n(j, { children: i });
+  return /* @__PURE__ */ s(_, { children: r });
 }
-const wt = ({ redirectPath: i }) => /* @__PURE__ */ n(
+const Pt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1823,12 +1827,12 @@ const wt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
-          /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
+          /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
           /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
-            i,
+            r,
             "..."
           ] })
         ]
@@ -1836,14 +1840,18 @@ const wt = ({ redirectPath: i }) => /* @__PURE__ */ n(
     )
   }
 );
-function sr({ children: i, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = ce(), a = Te();
-  return s || o ? null : r ? /* @__PURE__ */ n(j, { children: i }) : t ? /* @__PURE__ */ n(j, { children: t }) : /* @__PURE__ */ d(j, { children: [
-    /* @__PURE__ */ n(wt, { redirectPath: e }),
-    /* @__PURE__ */ n(me, { to: e, state: { from: a.pathname }, replace: !0 })
+function Sn({ children: r, redirectTo: e = "/", fallback: t }) {
+  const { tenant: n, isLoading: i, error: o } = he(), a = be();
+  return X(() => {
+    process.env.NODE_ENV === "development" && console.warn(
+      "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
+    );
+  }, []), i || o ? null : n ? /* @__PURE__ */ s(_, { children: r }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Pt, { redirectPath: e }),
+    /* @__PURE__ */ s(fe, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const bt = ({ redirectPath: i }) => /* @__PURE__ */ n(
+const Rt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1867,12 +1875,12 @@ const bt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
-          /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
+          /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
           /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
-            i,
+            r,
             "..."
           ] })
         ]
@@ -1880,14 +1888,144 @@ const bt = ({ redirectPath: i }) => /* @__PURE__ */ n(
     )
   }
 );
-function ir({ children: i, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = ce(), a = Te();
-  return s || o ? null : r ? t ? /* @__PURE__ */ n(j, { children: t }) : /* @__PURE__ */ d(j, { children: [
-    /* @__PURE__ */ n(bt, { redirectPath: e }),
-    /* @__PURE__ */ n(me, { to: e, state: { from: a.pathname }, replace: !0 })
-  ] }) : /* @__PURE__ */ n(j, { children: i });
+function vn({ children: r, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: n, isLoading: i, error: o } = he(), a = be();
+  return X(() => {
+    process.env.NODE_ENV === "development" && console.warn(
+      "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
+    );
+  }, []), i || o ? null : n ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Rt, { redirectPath: e }),
+    /* @__PURE__ */ s(fe, { to: e, state: { from: a.pathname }, replace: !0 })
+  ] }) : /* @__PURE__ */ s(_, { children: r });
 }
-const St = () => /* @__PURE__ */ d(
+const je = {
+  publicGuest: "/",
+  publicUser: "/account",
+  publicAdmin: "/admin",
+  tenantGuest: "/login",
+  tenantUser: "/dashboard",
+  tenantAdmin: "/admin/dashboard",
+  default: "/"
+}, It = {
+  // Public/Landing zones
+  landing: { tenant: "forbidden", auth: "optional" },
+  publicOnly: { tenant: "forbidden", auth: "forbidden" },
+  // Auth zones
+  login: { tenant: "required", auth: "forbidden" },
+  guest: { auth: "forbidden" },
+  authenticated: { auth: "required" },
+  // Tenant zones
+  tenant: { tenant: "required" },
+  tenantOpen: { tenant: "required", auth: "optional" },
+  tenantAuth: { tenant: "required", auth: "required" },
+  // User type zones
+  user: { tenant: "required", auth: "required", userType: se.USER },
+  admin: { tenant: "required", auth: "required", userType: se.TENANT_ADMIN },
+  // Fully open
+  open: { tenant: "optional", auth: "optional" }
+}, Mt = "returnTo";
+function Lt(r, e) {
+  return e ? r ? Array.isArray(e) ? e.includes(r) : r === e : !1 : !0;
+}
+function Oe(r, e) {
+  return !r || r === "optional" ? "skip" : r === "required" ? e ? "pass" : "fail" : r === "forbidden" ? e ? "fail" : "pass" : "skip";
+}
+function Et(r, e) {
+  return Oe(r.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Oe(r.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : r.userType && e.isAuthenticated && !Lt(e.userType, r.userType) ? "wrong_user_type" : r.permissions && r.permissions.length > 0 && !(r.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(r.permissions) ? "missing_permissions" : null;
+}
+function Ft(r, e) {
+  return r.hasTenant ? r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
+}
+function Nt(r, e, t, n, i) {
+  if (!e || i !== "url")
+    return r;
+  const o = typeof e == "string" ? e : t, a = r.includes("?") ? "&" : "?";
+  return `${r}${a}${n}=${encodeURIComponent(o)}`;
+}
+function Ut(r, e, t) {
+  if (!r || t === "url") return;
+  const n = typeof r == "string" ? r : e;
+  sessionStorage.setItem("zone_return_to", n);
+}
+const ae = ({
+  children: r,
+  preset: e,
+  tenant: t,
+  auth: n,
+  userType: i,
+  requiredPermissions: o,
+  requireAllPermissions: a = !0,
+  returnTo: p,
+  onAccessDenied: f,
+  redirectTo: b,
+  loadingFallback: u,
+  accessDeniedFallback: w
+}) => {
+  const g = be(), { isAuthenticated: v, isAuthInitializing: M, currentUser: F, userPermissions: L } = le(), { tenant: P, isTenantLoading: h } = ue(), x = K(() => {
+    if (e)
+      return It[e];
+  }, [e]), k = K(
+    () => ({
+      tenant: t ?? (x == null ? void 0 : x.tenant),
+      auth: n ?? (x == null ? void 0 : x.auth),
+      userType: i ?? (x == null ? void 0 : x.userType),
+      permissions: o ?? (x == null ? void 0 : x.requiredPermissions),
+      requireAllPermissions: a
+    }),
+    [t, n, i, o, x, a]
+  ), I = K(
+    () => ({
+      hasTenant: !!P,
+      isAuthenticated: v,
+      userType: F == null ? void 0 : F.userType,
+      permissions: L,
+      isLoading: M || h
+    }),
+    [
+      P,
+      v,
+      F == null ? void 0 : F.userType,
+      L,
+      M,
+      h
+    ]
+  ), U = K(() => I.isLoading ? null : Et(k, I), [k, I]), C = je, R = K(() => U ? b || Ft(I, C) : null, [U, b, I, C]), B = K(() => !U || !R ? null : {
+    type: U,
+    required: {
+      tenant: k.tenant,
+      auth: k.auth,
+      userType: k.userType,
+      permissions: k.permissions
+    },
+    current: {
+      hasTenant: I.hasTenant,
+      isAuthenticated: I.isAuthenticated,
+      userType: I.userType,
+      permissions: I.permissions
+    },
+    redirectTo: R
+  }, [U, R, k, I]);
+  if (X(() => {
+    B && f && f(B);
+  }, [B, f]), X(() => {
+    B && p && Ut(p, g.pathname + g.search, "session");
+  }, [B, p, g.pathname, g.search]), I.isLoading)
+    return /* @__PURE__ */ s(_, { children: u || null });
+  if (B && R) {
+    if (w)
+      return /* @__PURE__ */ s(_, { children: w });
+    const l = Nt(
+      R,
+      p,
+      g.pathname + g.search,
+      Mt,
+      "url"
+    );
+    return /* @__PURE__ */ s(fe, { to: l, replace: !0 });
+  }
+  return /* @__PURE__ */ s(_, { children: r });
+}, Tn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", ...r }), kn = (r) => /* @__PURE__ */ s(ae, { tenant: "forbidden", ...r }), An = (r) => /* @__PURE__ */ s(ae, { auth: "required", ...r }), xn = (r) => /* @__PURE__ */ s(ae, { auth: "forbidden", ...r }), Pn = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.TENANT_ADMIN, ...r }), Rn = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.USER, ...r }), In = (r) => /* @__PURE__ */ s(ae, { tenant: "optional", auth: "optional", ...r }), Mn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "required", ...r }), Ln = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "optional", ...r }), En = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "forbidden", ...r }), Ct = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1899,19 +2037,19 @@ const St = () => /* @__PURE__ */ d(
       color: "#dc2626"
     },
     children: [
-      /* @__PURE__ */ n("h3", { style: { margin: "0 0 1rem 0" }, children: "🔒 Subscription Required" }),
-      /* @__PURE__ */ n("p", { style: { margin: 0 }, children: "This feature requires a higher subscription plan. Please upgrade your plan to access this content." })
+      /* @__PURE__ */ s("h3", { style: { margin: "0 0 1rem 0" }, children: "🔒 Subscription Required" }),
+      /* @__PURE__ */ s("p", { style: { margin: 0 }, children: "This feature requires a higher subscription plan. Please upgrade your plan to access this content." })
     ]
   }
 );
-function or({
-  children: i,
-  fallback: e = /* @__PURE__ */ n(St, {}),
+function Fn({
+  children: r,
+  fallback: e = /* @__PURE__ */ s(Ct, {}),
   allowedPlans: t,
-  requiredFeature: r
+  requiredFeature: n
 }) {
-  const { subscription: s, hasAllowedPlan: o, isFeatureEnabled: a, loading: m } = pt();
-  return m ? /* @__PURE__ */ n(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = Tt();
+  return p ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -1921,9 +2059,9 @@ function or({
       },
       children: "Loading subscription..."
     }
-  ) : s ? s.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ n(j, { children: e }) : r && !a(r) ? /* @__PURE__ */ n(j, { children: e }) : /* @__PURE__ */ n(j, { children: i }) : /* @__PURE__ */ n(j, { children: e }) : /* @__PURE__ */ n(j, { children: e });
+  ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : n && !a(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: r }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const vt = ({ flagName: i }) => /* @__PURE__ */ d(
+const Dt = ({ flagName: r }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1940,19 +2078,19 @@ const vt = ({ flagName: i }) => /* @__PURE__ */ d(
       color: "#6c757d"
     },
     children: [
-      /* @__PURE__ */ n("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
-      /* @__PURE__ */ n("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
+      /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
+      /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
       /* @__PURE__ */ d("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
-        i,
+        r,
         '" is disabled'
       ] })
     ]
   }
 );
-function ar({ name: i, children: e, fallback: t }) {
-  const { isEnabled: r, loading: s } = ht();
-  return s ? /* @__PURE__ */ n(
+function Nn({ name: r, children: e, fallback: t }) {
+  const { isEnabled: n, loading: i } = St();
+  return i ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -1965,9 +2103,9 @@ function ar({ name: i, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : r(i) ? /* @__PURE__ */ n(j, { children: e }) : /* @__PURE__ */ n(j, { children: t || /* @__PURE__ */ n(vt, { flagName: i }) });
+  ) : n(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Dt, { flagName: r }) });
 }
-const kt = () => /* @__PURE__ */ d(
+const $t = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -1980,11 +2118,11 @@ const kt = () => /* @__PURE__ */ d(
     strokeLinejoin: "round",
     style: { flexShrink: 0 },
     children: [
-      /* @__PURE__ */ n("path", { d: "M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" }),
-      /* @__PURE__ */ n("circle", { cx: "12", cy: "12", r: "3" })
+      /* @__PURE__ */ s("path", { d: "M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" }),
+      /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Tt = () => /* @__PURE__ */ d(
+), Ht = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -1997,14 +2135,14 @@ const kt = () => /* @__PURE__ */ d(
     strokeLinejoin: "round",
     style: { flexShrink: 0 },
     children: [
-      /* @__PURE__ */ n("path", { d: "M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" }),
-      /* @__PURE__ */ n("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
+      /* @__PURE__ */ s("path", { d: "M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" }),
+      /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), xt = {
-  showPassword: /* @__PURE__ */ n(kt, {}),
-  hidePassword: /* @__PURE__ */ n(Tt, {})
-}, At = {
+), Bt = {
+  showPassword: /* @__PURE__ */ s($t, {}),
+  hidePassword: /* @__PURE__ */ s(Ht, {})
+}, qt = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2018,7 +2156,7 @@ const kt = () => /* @__PURE__ */ d(
   magicLinkLink: "Use Magic Link",
   errorMessage: "Invalid credentials",
   loadingText: "Signing in..."
-}, Pt = {
+}, Ot = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2125,133 +2263,133 @@ const kt = () => /* @__PURE__ */ d(
     fontSize: "0.875rem"
   }
 };
-function lr({
-  copy: i = {},
+function Un({
+  copy: r = {},
   styles: e = {},
   icons: t = {},
-  onSuccess: r,
-  onError: s,
+  onSuccess: n,
+  onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: m,
-  showForgotPassword: y = !0,
+  onMagicLinkClick: p,
+  showForgotPassword: f = !0,
   showSignupLink: b = !0,
-  showMagicLinkOption: p = !0,
-  className: S
+  showMagicLinkOption: u = !0,
+  className: w
 }) {
-  const [f, T] = k(""), [I, C] = k(""), [R, x] = k(!1), [g, $] = k(!1), [A, E] = k(""), [U, D] = k({}), { login: P } = oe(), { tenant: O } = ce(), c = { ...At, ...i }, L = { ...Pt, ...e }, F = { ...xt, ...t }, l = () => {
-    const u = {};
-    return f.trim() || (u.username = !0), I.trim() || (u.password = !0), D(u), Object.keys(u).length === 0;
-  }, H = async (u) => {
-    if (u.preventDefault(), !!l()) {
-      if (!(O != null && O.id)) {
-        E("Tenant not found");
+  const [g, v] = A(""), [M, F] = A(""), [L, P] = A(!1), [h, x] = A(!1), [k, I] = A(""), [U, C] = A({}), { login: R } = le(), { tenant: B } = he(), l = { ...qt, ...r }, N = { ...Ot, ...e }, D = { ...Bt, ...t }, c = () => {
+    const m = {};
+    return g.trim() || (m.username = !0), M.trim() || (m.password = !0), C(m), Object.keys(m).length === 0;
+  }, $ = async (m) => {
+    if (m.preventDefault(), !!c()) {
+      if (!(B != null && B.id)) {
+        I("Tenant not found");
         return;
       }
-      $(!0), E("");
+      x(!0), I("");
       try {
-        const w = await P({
-          username: f,
-          password: I
+        const S = await R({
+          username: g,
+          password: M
           // tenantId inferred from context automatically
         });
-        r == null || r(w);
-      } catch (w) {
-        const _ = w.message || c.errorMessage;
-        E(_), s == null || s(_);
+        n == null || n(S);
+      } catch (S) {
+        const G = S.message || l.errorMessage;
+        I(G), i == null || i(G);
       } finally {
-        $(!1);
+        x(!1);
       }
     }
-  }, M = (u) => ({
-    ...L.input,
-    ...U[u] ? L.inputError : {}
-  }), h = () => ({
-    ...L.button,
-    ...g ? L.buttonLoading : {},
-    ...!f || !I || g ? L.buttonDisabled : {}
+  }, E = (m) => ({
+    ...N.input,
+    ...U[m] ? N.inputError : {}
+  }), y = () => ({
+    ...N.button,
+    ...h ? N.buttonLoading : {},
+    ...!g || !M || h ? N.buttonDisabled : {}
   });
-  return /* @__PURE__ */ d("div", { className: S, style: L.container, children: [
-    /* @__PURE__ */ n("h2", { style: L.title, children: c.title }),
-    /* @__PURE__ */ d("form", { onSubmit: H, style: L.form, children: [
-      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: L.label, children: c.usernameLabel }),
-        /* @__PURE__ */ n(
+  return /* @__PURE__ */ d("div", { className: w, style: N.container, children: [
+    /* @__PURE__ */ s("h2", { style: N.title, children: l.title }),
+    /* @__PURE__ */ d("form", { onSubmit: $, style: N.form, children: [
+      /* @__PURE__ */ d("div", { style: N.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: N.label, children: l.usernameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "username",
             name: "username",
             type: "text",
-            value: f,
-            onChange: (u) => {
-              T(u.target.value), U.username && D((w) => ({ ...w, username: !1 }));
+            value: g,
+            onChange: (m) => {
+              v(m.target.value), U.username && C((S) => ({ ...S, username: !1 }));
             },
-            placeholder: c.usernamePlaceholder,
-            style: M("username"),
-            disabled: g
+            placeholder: l.usernamePlaceholder,
+            style: E("username"),
+            disabled: h
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: L.label, children: c.passwordLabel }),
-        /* @__PURE__ */ d("div", { style: L.inputContainer, children: [
-          /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: N.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: N.label, children: l.passwordLabel }),
+        /* @__PURE__ */ d("div", { style: N.inputContainer, children: [
+          /* @__PURE__ */ s(
             "input",
             {
               id: "password",
               name: "password",
-              type: R ? "text" : "password",
-              value: I,
-              onChange: (u) => {
-                C(u.target.value), U.password && D((w) => ({ ...w, password: !1 }));
+              type: L ? "text" : "password",
+              value: M,
+              onChange: (m) => {
+                F(m.target.value), U.password && C((S) => ({ ...S, password: !1 }));
               },
-              placeholder: c.passwordPlaceholder,
+              placeholder: l.passwordPlaceholder,
               style: {
-                ...M("password"),
+                ...E("password"),
                 paddingRight: "2.5rem"
                 // Make room for the icon
               },
-              disabled: g
+              disabled: h
             }
           ),
-          /* @__PURE__ */ n(
+          /* @__PURE__ */ s(
             "button",
             {
               type: "button",
-              onClick: () => x(!R),
-              style: L.passwordToggle,
-              disabled: g,
-              "aria-label": R ? "Hide password" : "Show password",
-              children: R ? F.hidePassword : F.showPassword
+              onClick: () => P(!L),
+              style: N.passwordToggle,
+              disabled: h,
+              "aria-label": L ? "Hide password" : "Show password",
+              children: L ? D.hidePassword : D.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !f || !I || g, style: h(), children: g ? c.loadingText : c.submitButton }),
-      A && /* @__PURE__ */ n("div", { style: L.errorText, children: A })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !M || h, style: y(), children: h ? l.loadingText : l.submitButton }),
+      k && /* @__PURE__ */ s("div", { style: N.errorText, children: k })
     ] }),
-    (y || b || p) && /* @__PURE__ */ d("div", { style: L.linkContainer, children: [
-      p && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: L.divider, children: [
-          c.magicLinkText,
+    (f || b || u) && /* @__PURE__ */ d("div", { style: N.linkContainer, children: [
+      u && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: N.divider, children: [
+          l.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: m, style: L.link, children: c.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: p, style: N.link, children: l.magicLinkLink })
       ] }),
-      p && (y || b) && /* @__PURE__ */ n("div", { style: L.divider, children: "•" }),
-      y && /* @__PURE__ */ n("a", { onClick: o, style: L.link, children: c.forgotPasswordLink }),
-      y && b && /* @__PURE__ */ n("div", { style: L.divider, children: "•" }),
+      u && (f || b) && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
+      f && /* @__PURE__ */ s("a", { onClick: o, style: N.link, children: l.forgotPasswordLink }),
+      f && b && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
       b && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: L.divider, children: [
-          c.signupText,
+        /* @__PURE__ */ d("span", { style: N.divider, children: [
+          l.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: a, style: L.link, children: c.signupLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: N.link, children: l.signupLink })
       ] })
     ] })
   ] });
 }
-const Mt = {
+const zt = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2277,7 +2415,7 @@ const Mt = {
   passwordMismatchError: "Passwords do not match",
   isAdminLabel: "Create new organization",
   isAdminDescription: "Check this if you want to create a new organization"
-}, It = {
+}, _t = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2376,138 +2514,138 @@ const Mt = {
     fontSize: "0.875rem"
   }
 };
-function cr({
-  copy: i = {},
+function Cn({
+  copy: r = {},
   styles: e = {},
   signupType: t = "user",
-  onSuccess: r,
-  onError: s,
+  onSuccess: n,
+  onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: m = !0,
-  showMagicLinkOption: y = !0,
+  showLoginLink: p = !0,
+  showMagicLinkOption: f = !0,
   className: b
 }) {
-  const [p, S] = k(""), [f, T] = k(""), [I, C] = k(""), [R, x] = k(""), [g, $] = k(""), [A, E] = k(""), [U, D] = k(""), [P, O] = k(!1), [c, L] = k(""), [F, l] = k({}), { signup: H, signupTenantAdmin: M } = oe(), { tenant: h } = ce(), u = { ...Mt, ...i }, w = { ...It, ...e }, _ = () => {
-    const v = {};
-    return p.trim() || (v.name = !0), !I.trim() && !R.trim() && (v.email = !0, v.phoneNumber = !0), g.trim() || (v.password = !0), A.trim() || (v.confirmPassword = !0), t === "tenant" && !U.trim() && (v.tenantName = !0), l(v), Object.keys(v).length === 0;
-  }, K = async (v) => {
-    if (v.preventDefault(), !!_()) {
-      if (g !== A) {
-        L(u.passwordMismatchError), l({ confirmPassword: !0 });
+  const [u, w] = A(""), [g, v] = A(""), [M, F] = A(""), [L, P] = A(""), [h, x] = A(""), [k, I] = A(""), [U, C] = A(""), [R, B] = A(!1), [l, N] = A(""), [D, c] = A({}), { signup: $, signupTenantAdmin: E } = le(), { tenant: y } = he(), m = { ...zt, ...r }, S = { ..._t, ...e }, G = () => {
+    const T = {};
+    return u.trim() || (T.name = !0), !M.trim() && !L.trim() && (T.email = !0, T.phoneNumber = !0), h.trim() || (T.password = !0), k.trim() || (T.confirmPassword = !0), t === "tenant" && !U.trim() && (T.tenantName = !0), c(T), Object.keys(T).length === 0;
+  }, J = async (T) => {
+    if (T.preventDefault(), !!G()) {
+      if (h !== k) {
+        N(m.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(h != null && h.id)) {
-        L("Tenant not found");
+      if (t === "user" && !(y != null && y.id)) {
+        N("Tenant not found");
         return;
       }
-      O(!0), L("");
+      B(!0), N("");
       try {
-        let J;
-        t === "tenant" ? J = await M({
-          email: I || void 0,
-          phoneNumber: R || void 0,
-          name: p,
-          password: g,
+        let Z;
+        t === "tenant" ? Z = await E({
+          email: M || void 0,
+          phoneNumber: L || void 0,
+          name: u,
+          password: h,
           tenantName: U,
-          lastName: f || void 0
-        }) : J = await H({
-          email: I || void 0,
-          phoneNumber: R || void 0,
-          name: p,
-          password: g,
-          tenantId: h.id,
-          lastName: f || void 0
-        }), r == null || r(J);
-      } catch (J) {
-        const ae = J.message || u.errorMessage;
-        L(ae), s == null || s(ae);
+          lastName: g || void 0
+        }) : Z = await $({
+          email: M || void 0,
+          phoneNumber: L || void 0,
+          name: u,
+          password: h,
+          tenantId: y.id,
+          lastName: g || void 0
+        }), n == null || n(Z);
+      } catch (Z) {
+        const ce = Z.message || m.errorMessage;
+        N(ce), i == null || i(ce);
       } finally {
-        O(!1);
+        B(!1);
       }
     }
-  }, B = (v) => ({
-    ...w.input,
-    ...F[v] ? w.inputError : {}
-  }), q = () => ({
-    ...w.button,
-    ...P ? w.buttonLoading : {},
-    ...!p || !I && !R || !g || !A || P || t === "tenant" && !U ? w.buttonDisabled : {}
-  }), V = p && (I || R) && g && A && (t === "user" || U);
-  return /* @__PURE__ */ d("div", { className: b, style: w.container, children: [
-    /* @__PURE__ */ n("h2", { style: w.title, children: u.title }),
-    /* @__PURE__ */ d("form", { onSubmit: K, style: w.form, children: [
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.nameLabel }),
-        /* @__PURE__ */ n(
+  }, q = (T) => ({
+    ...S.input,
+    ...D[T] ? S.inputError : {}
+  }), O = () => ({
+    ...S.button,
+    ...R ? S.buttonLoading : {},
+    ...!u || !M && !L || !h || !k || R || t === "tenant" && !U ? S.buttonDisabled : {}
+  }), V = u && (M || L) && h && k && (t === "user" || U);
+  return /* @__PURE__ */ d("div", { className: b, style: S.container, children: [
+    /* @__PURE__ */ s("h2", { style: S.title, children: m.title }),
+    /* @__PURE__ */ d("form", { onSubmit: J, style: S.form, children: [
+      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.nameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "name",
             name: "name",
             type: "text",
-            value: p,
-            onChange: (v) => {
-              S(v.target.value), F.name && l((J) => ({ ...J, name: !1 }));
+            value: u,
+            onChange: (T) => {
+              w(T.target.value), D.name && c((Z) => ({ ...Z, name: !1 }));
             },
-            placeholder: u.namePlaceholder,
-            style: B("name"),
-            disabled: P
+            placeholder: m.namePlaceholder,
+            style: q("name"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.lastNameLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.lastNameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: f,
-            onChange: (v) => T(v.target.value),
-            placeholder: u.lastNamePlaceholder,
-            style: w.input,
-            disabled: P
+            value: g,
+            onChange: (T) => v(T.target.value),
+            placeholder: m.lastNamePlaceholder,
+            style: S.input,
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.emailLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.emailLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: I,
-            onChange: (v) => {
-              C(v.target.value), F.email && l((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+            value: M,
+            onChange: (T) => {
+              F(T.target.value), D.email && c((Z) => ({ ...Z, email: !1, phoneNumber: !1 }));
             },
-            placeholder: u.emailPlaceholder,
-            style: B("email"),
-            disabled: P
+            placeholder: m.emailPlaceholder,
+            style: q("email"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.phoneNumberLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.phoneNumberLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "phoneNumber",
             name: "phoneNumber",
             type: "tel",
-            value: R,
-            onChange: (v) => {
-              x(v.target.value), F.phoneNumber && l((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+            value: L,
+            onChange: (T) => {
+              P(T.target.value), D.phoneNumber && c((Z) => ({ ...Z, email: !1, phoneNumber: !1 }));
             },
-            placeholder: u.phoneNumberPlaceholder,
-            style: B("phoneNumber"),
-            disabled: P
+            placeholder: m.phoneNumberPlaceholder,
+            style: q("phoneNumber"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s(
         "div",
         {
           style: {
@@ -2519,83 +2657,83 @@ function cr({
           children: "At least one contact method (email or phone) is required"
         }
       ),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.passwordLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.passwordLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "password",
             name: "password",
             type: "password",
-            value: g,
-            onChange: (v) => {
-              $(v.target.value), F.password && l((J) => ({ ...J, password: !1 }));
+            value: h,
+            onChange: (T) => {
+              x(T.target.value), D.password && c((Z) => ({ ...Z, password: !1 }));
             },
-            placeholder: u.passwordPlaceholder,
-            style: B("password"),
-            disabled: P
+            placeholder: m.passwordPlaceholder,
+            style: q("password"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.confirmPasswordLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.confirmPasswordLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: A,
-            onChange: (v) => {
-              E(v.target.value), F.confirmPassword && l((J) => ({ ...J, confirmPassword: !1 })), c === u.passwordMismatchError && L("");
+            value: k,
+            onChange: (T) => {
+              I(T.target.value), D.confirmPassword && c((Z) => ({ ...Z, confirmPassword: !1 })), l === m.passwordMismatchError && N("");
             },
-            placeholder: u.confirmPasswordPlaceholder,
-            style: B("confirmPassword"),
-            disabled: P
+            placeholder: m.confirmPasswordPlaceholder,
+            style: q("confirmPassword"),
+            disabled: R
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.tenantNameLabel }),
-        /* @__PURE__ */ n(
+      t === "tenant" && /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: m.tenantNameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
             value: U,
-            onChange: (v) => {
-              D(v.target.value), F.tenantName && l((J) => ({ ...J, tenantName: !1 }));
+            onChange: (T) => {
+              C(T.target.value), D.tenantName && c((Z) => ({ ...Z, tenantName: !1 }));
             },
-            placeholder: u.tenantNamePlaceholder,
-            style: B("tenantName"),
-            disabled: P
+            placeholder: m.tenantNamePlaceholder,
+            style: q("tenantName"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !V || P, style: q(), children: P ? u.loadingText : u.submitButton }),
-      c && /* @__PURE__ */ n("div", { style: w.errorText, children: c })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !V || R, style: O(), children: R ? m.loadingText : m.submitButton }),
+      l && /* @__PURE__ */ s("div", { style: S.errorText, children: l })
     ] }),
-    (m || y) && /* @__PURE__ */ d("div", { style: w.linkContainer, children: [
-      y && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: w.divider, children: [
-          u.magicLinkText,
+    (p || f) && /* @__PURE__ */ d("div", { style: S.linkContainer, children: [
+      f && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: S.divider, children: [
+          m.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: a, style: w.link, children: u.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: S.link, children: m.magicLinkLink })
       ] }),
-      y && m && /* @__PURE__ */ n("div", { style: w.divider, children: "•" }),
-      m && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: w.divider, children: [
-          u.loginText,
+      f && p && /* @__PURE__ */ s("div", { style: S.divider, children: "•" }),
+      p && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: S.divider, children: [
+          m.loginText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: o, style: w.link, children: u.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: S.link, children: m.loginLink })
       ] })
     ] })
   ] });
 }
-const Rt = {
+const Wt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -2613,7 +2751,7 @@ const Rt = {
   loadingText: "Sending magic link...",
   verifyingText: "Verifying magic link...",
   description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you."
-}, Lt = {
+}, Vt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2716,105 +2854,105 @@ const Rt = {
     fontSize: "0.875rem"
   }
 };
-function dr({
-  copy: i = {},
+function Dn({
+  copy: r = {},
   styles: e = {},
   onSuccess: t,
-  onError: r,
-  onLoginClick: s,
+  onError: n,
+  onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: m,
-  verifyToken: y,
+  className: p,
+  verifyToken: f,
   frontendUrl: b
 }) {
-  const [p, S] = k(""), [f, T] = k(""), [I, C] = k(""), [R, x] = k(!1), [g, $] = k(!1), [A, E] = k(""), [U, D] = k(""), [P, O] = k({}), [c, L] = k(!1), { sendMagicLink: F, verifyMagicLink: l } = oe(), { tenant: H } = ce(), M = { ...Rt, ...i }, h = { ...Lt, ...e };
-  re(() => {
-    y && u(y);
-  }, [y]);
-  const u = async (q) => {
-    if (!H || !p) {
-      E("Missing tenant or email");
+  const [u, w] = A(""), [g, v] = A(""), [M, F] = A(""), [L, P] = A(!1), [h, x] = A(!1), [k, I] = A(""), [U, C] = A(""), [R, B] = A({}), [l, N] = A(!1), { sendMagicLink: D, verifyMagicLink: c } = le(), { tenant: $ } = he(), E = { ...Wt, ...r }, y = { ...Vt, ...e };
+  X(() => {
+    f && m(f);
+  }, [f]);
+  const m = async (O) => {
+    if (!$ || !u) {
+      I("Missing tenant or email");
       return;
     }
-    $(!0), E("");
+    x(!0), I("");
     try {
-      const V = await l({
-        token: q,
-        email: p
+      const V = await c({
+        token: O,
+        email: u
         // tenantId inferred from context automatically
       });
       t == null || t(V);
     } catch (V) {
-      const v = V.message || "Failed to verify magic link";
-      E(v), r == null || r(v);
+      const T = V.message || "Failed to verify magic link";
+      I(T), n == null || n(T);
     } finally {
-      $(!1);
+      x(!1);
     }
-  }, w = () => {
-    const q = {};
-    return p.trim() || (q.email = !0), c && !f.trim() && (q.name = !0), O(q), Object.keys(q).length === 0;
-  }, _ = async (q) => {
-    if (q.preventDefault(), !!w()) {
-      if (!(H != null && H.id)) {
-        E("Tenant not found");
+  }, S = () => {
+    const O = {};
+    return u.trim() || (O.email = !0), l && !g.trim() && (O.name = !0), B(O), Object.keys(O).length === 0;
+  }, G = async (O) => {
+    if (O.preventDefault(), !!S()) {
+      if (!($ != null && $.id)) {
+        I("Tenant not found");
         return;
       }
-      x(!0), E(""), D("");
+      P(!0), I(""), C("");
       try {
-        const V = b || (typeof window < "u" ? window.location.origin : ""), v = await F({
-          email: p,
-          tenantId: H.id,
+        const V = b || (typeof window < "u" ? window.location.origin : ""), T = await D({
+          email: u,
+          tenantId: $.id,
           frontendUrl: V,
-          name: c ? f : void 0,
-          lastName: c ? I : void 0
+          name: l ? g : void 0,
+          lastName: l ? M : void 0
         });
-        D(M.successMessage), t == null || t(v);
+        C(E.successMessage), t == null || t(T);
       } catch (V) {
-        const v = V.message || M.errorMessage;
-        E(v), r == null || r(v);
+        const T = V.message || E.errorMessage;
+        I(T), n == null || n(T);
       } finally {
-        x(!1);
+        P(!1);
       }
     }
-  }, K = (q) => ({
-    ...h.input,
-    ...P[q] ? h.inputError : {}
-  }), B = () => ({
-    ...h.button,
-    ...R || g ? h.buttonLoading : {},
-    ...!p || R || g ? h.buttonDisabled : {}
+  }, J = (O) => ({
+    ...y.input,
+    ...R[O] ? y.inputError : {}
+  }), q = () => ({
+    ...y.button,
+    ...L || h ? y.buttonLoading : {},
+    ...!u || L || h ? y.buttonDisabled : {}
   });
-  return g ? /* @__PURE__ */ d("div", { className: m, style: h.container, children: [
-    /* @__PURE__ */ n("h2", { style: h.title, children: M.verifyingText }),
-    /* @__PURE__ */ n("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ n("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ d("div", { className: m, style: h.container, children: [
-    /* @__PURE__ */ n("h2", { style: h.title, children: M.title }),
-    /* @__PURE__ */ n("p", { style: h.description, children: M.description }),
-    /* @__PURE__ */ d("form", { onSubmit: _, style: h.form, children: [
-      /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: h.label, children: M.emailLabel }),
-        /* @__PURE__ */ n(
+  return h ? /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
+    /* @__PURE__ */ s("h2", { style: y.title, children: E.verifyingText }),
+    /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
+  ] }) : /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
+    /* @__PURE__ */ s("h2", { style: y.title, children: E.title }),
+    /* @__PURE__ */ s("p", { style: y.description, children: E.description }),
+    /* @__PURE__ */ d("form", { onSubmit: G, style: y.form, children: [
+      /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: y.label, children: E.emailLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: p,
-            onChange: (q) => {
-              S(q.target.value), P.email && O((V) => ({ ...V, email: !1 }));
+            value: u,
+            onChange: (O) => {
+              w(O.target.value), R.email && B((V) => ({ ...V, email: !1 }));
             },
-            placeholder: M.emailPlaceholder,
-            style: K("email"),
-            disabled: R || g
+            placeholder: E.emailPlaceholder,
+            style: J("email"),
+            disabled: L || h
           }
         )
       ] }),
-      !c && /* @__PURE__ */ n("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ n(
+      !l && /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
         "button",
         {
           type: "button",
-          onClick: () => L(!0),
+          onClick: () => N(!0),
           style: {
             background: "none",
             border: "none",
@@ -2826,47 +2964,47 @@ function dr({
           children: "New user? Add your name"
         }
       ) }),
-      c && /* @__PURE__ */ d(j, { children: [
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: h.label, children: M.nameLabel }),
-          /* @__PURE__ */ n(
+      l && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: y.label, children: E.nameLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: f,
-              onChange: (q) => {
-                T(q.target.value), P.name && O((V) => ({ ...V, name: !1 }));
+              value: g,
+              onChange: (O) => {
+                v(O.target.value), R.name && B((V) => ({ ...V, name: !1 }));
               },
-              placeholder: M.namePlaceholder,
-              style: K("name"),
-              disabled: R || g
+              placeholder: E.namePlaceholder,
+              style: J("name"),
+              disabled: L || h
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: h.label, children: M.lastNameLabel }),
-          /* @__PURE__ */ n(
+        /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: y.label, children: E.lastNameLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               id: "lastName",
               name: "lastName",
               type: "text",
-              value: I,
-              onChange: (q) => C(q.target.value),
-              placeholder: M.lastNamePlaceholder,
-              style: h.input,
-              disabled: R || g
+              value: M,
+              onChange: (O) => F(O.target.value),
+              placeholder: E.lastNamePlaceholder,
+              style: y.input,
+              disabled: L || h
             }
           )
         ] }),
-        /* @__PURE__ */ n("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ n(
+        /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
           "button",
           {
             type: "button",
             onClick: () => {
-              L(!1), T(""), C("");
+              N(!1), v(""), F("");
             },
             style: {
               background: "none",
@@ -2880,30 +3018,30 @@ function dr({
           }
         ) })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !p || R || g, style: B(), children: R ? M.loadingText : M.submitButton }),
-      A && /* @__PURE__ */ n("div", { style: h.errorText, children: A }),
-      U && /* @__PURE__ */ n("div", { style: h.successText, children: U })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !u || L || h, style: q(), children: L ? E.loadingText : E.submitButton }),
+      k && /* @__PURE__ */ s("div", { style: y.errorText, children: k }),
+      U && /* @__PURE__ */ s("div", { style: y.successText, children: U })
     ] }),
-    a && /* @__PURE__ */ d("div", { style: h.linkContainer, children: [
+    a && /* @__PURE__ */ d("div", { style: y.linkContainer, children: [
       /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: h.divider, children: [
-          M.loginText,
+        /* @__PURE__ */ d("span", { style: y.divider, children: [
+          E.loginText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: s, style: h.link, children: M.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: y.link, children: E.loginLink })
       ] }),
-      /* @__PURE__ */ n("div", { style: h.divider, children: "•" }),
+      /* @__PURE__ */ s("div", { style: y.divider, children: "•" }),
       /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: h.divider, children: [
-          M.signupText,
+        /* @__PURE__ */ d("span", { style: y.divider, children: [
+          E.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: o, style: h.link, children: M.signupLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: y.link, children: E.signupLink })
       ] })
     ] })
   ] });
 }
-const Et = {
+const jt = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
@@ -2911,7 +3049,7 @@ const Et = {
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
   backToLoginButton: "Back to Login"
-}, Oe = {
+}, Ge = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2998,7 +3136,7 @@ const Et = {
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
   }
-}, Ft = () => /* @__PURE__ */ n("div", { style: Oe.spinner }), Ct = () => /* @__PURE__ */ d(
+}, Gt = () => /* @__PURE__ */ s("div", { style: Ge.spinner }), Zt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3011,11 +3149,11 @@ const Et = {
     strokeLinejoin: "round",
     style: { margin: "0 auto 1rem auto", display: "block" },
     children: [
-      /* @__PURE__ */ n("path", { d: "M22 11.08V12a10 10 0 1 1-5.93-9.14" }),
-      /* @__PURE__ */ n("polyline", { points: "22,4 12,14.01 9,11.01" })
+      /* @__PURE__ */ s("path", { d: "M22 11.08V12a10 10 0 1 1-5.93-9.14" }),
+      /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), Dt = () => /* @__PURE__ */ d(
+), Kt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3028,114 +3166,114 @@ const Et = {
     strokeLinejoin: "round",
     style: { margin: "0 auto 1rem auto", display: "block" },
     children: [
-      /* @__PURE__ */ n("circle", { cx: "12", cy: "12", r: "10" }),
-      /* @__PURE__ */ n("line", { x1: "15", y1: "9", x2: "9", y2: "15" }),
-      /* @__PURE__ */ n("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
+      /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "10" }),
+      /* @__PURE__ */ s("line", { x1: "15", y1: "9", x2: "9", y2: "15" }),
+      /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), $t = {
-  loading: /* @__PURE__ */ n(Ft, {}),
-  success: /* @__PURE__ */ n(Ct, {}),
-  error: /* @__PURE__ */ n(Dt, {})
+), Jt = {
+  loading: /* @__PURE__ */ s(Gt, {}),
+  success: /* @__PURE__ */ s(Zt, {}),
+  error: /* @__PURE__ */ s(Kt, {})
 };
-function ur({
-  copy: i = {},
+function $n({
+  copy: r = {},
   styles: e = {},
   icons: t = {},
-  onSuccess: r,
-  onError: s,
+  onSuccess: n,
+  onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: m,
-  token: y,
+  className: p,
+  token: f,
   email: b,
-  appId: p,
-  tenantSlug: S,
-  autoRedirectDelay: f = 3e3
+  appId: u,
+  tenantSlug: w,
+  autoRedirectDelay: g = 3e3
 }) {
-  const [T, I] = k("verifying"), [C, R] = k(""), { verifyMagicLink: x } = oe(), g = { ...Et, ...i }, $ = { ...Oe, ...e }, A = { ...$t, ...t }, E = () => {
+  const [v, M] = A("verifying"), [F, L] = A(""), { verifyMagicLink: P } = le(), h = { ...jt, ...r }, x = { ...Ge, ...e }, k = { ...Jt, ...t }, I = () => {
     if (typeof window > "u") return {};
-    const c = new URLSearchParams(window.location.search);
+    const l = new URLSearchParams(window.location.search);
     return {
-      token: y || c.get("token") || "",
-      email: b || c.get("email") || "",
-      appId: p || c.get("appId") || "",
-      tenantSlug: S || c.get("tenantSlug") || void 0
+      token: f || l.get("token") || "",
+      email: b || l.get("email") || "",
+      appId: u || l.get("appId") || "",
+      tenantSlug: w || l.get("tenantSlug") || void 0
     };
   }, U = async () => {
-    I("verifying"), R("");
+    M("verifying"), L("");
     try {
-      const c = E();
-      if (!c.token || !c.email)
+      const l = I();
+      if (!l.token || !l.email)
         throw new Error("Missing required parameters: token or email");
-      const L = await x({
-        token: c.token,
-        email: c.email,
-        tenantSlug: c.tenantSlug
+      const N = await P({
+        token: l.token,
+        email: l.email,
+        tenantSlug: l.tenantSlug
       });
-      I("success"), r == null || r(L), f > 0 && setTimeout(() => {
-        I("redirecting");
-      }, f);
-    } catch (c) {
-      const L = c.message || g.errorMessage;
-      R(L), I("error"), s == null || s(L);
+      M("success"), n == null || n(N), g > 0 && setTimeout(() => {
+        M("redirecting");
+      }, g);
+    } catch (l) {
+      const N = l.message || h.errorMessage;
+      L(N), M("error"), i == null || i(N);
     }
-  }, D = () => {
+  }, C = () => {
     o == null || o(), U();
-  }, P = () => {
+  }, R = () => {
     a == null || a();
   };
-  re(() => {
+  X(() => {
     U();
   }, []);
-  const O = () => {
-    switch (T) {
+  const B = () => {
+    switch (v) {
       case "verifying":
-        return /* @__PURE__ */ d("div", { style: $.message, children: [
-          A.loading,
-          g.verifyingMessage
+        return /* @__PURE__ */ d("div", { style: x.message, children: [
+          k.loading,
+          h.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ d(j, { children: [
-          A.success,
-          /* @__PURE__ */ n("div", { style: $.successMessage, children: g.successMessage })
+        return /* @__PURE__ */ d(_, { children: [
+          k.success,
+          /* @__PURE__ */ s("div", { style: x.successMessage, children: h.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ d(j, { children: [
-          A.loading,
-          /* @__PURE__ */ n("div", { style: $.message, children: g.redirectingMessage })
+        return /* @__PURE__ */ d(_, { children: [
+          k.loading,
+          /* @__PURE__ */ s("div", { style: x.message, children: h.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ d(j, { children: [
-          A.error,
-          /* @__PURE__ */ n("div", { style: $.errorMessage, children: C || g.errorMessage }),
-          /* @__PURE__ */ d("div", { style: $.buttonContainer, children: [
-            /* @__PURE__ */ n(
+        return /* @__PURE__ */ d(_, { children: [
+          k.error,
+          /* @__PURE__ */ s("div", { style: x.errorMessage, children: F || h.errorMessage }),
+          /* @__PURE__ */ d("div", { style: x.buttonContainer, children: [
+            /* @__PURE__ */ s(
               "button",
               {
-                onClick: D,
-                style: $.retryButton,
-                onMouseOver: (c) => {
-                  c.currentTarget.style.backgroundColor = "#2563eb";
+                onClick: C,
+                style: x.retryButton,
+                onMouseOver: (l) => {
+                  l.currentTarget.style.backgroundColor = "#2563eb";
                 },
-                onMouseOut: (c) => {
-                  c.currentTarget.style.backgroundColor = "#3b82f6";
+                onMouseOut: (l) => {
+                  l.currentTarget.style.backgroundColor = "#3b82f6";
                 },
-                children: g.retryButton
+                children: h.retryButton
               }
             ),
-            /* @__PURE__ */ n(
+            /* @__PURE__ */ s(
               "button",
               {
-                onClick: P,
-                style: $.backButton,
-                onMouseOver: (c) => {
-                  c.currentTarget.style.backgroundColor = "#e5e7eb";
+                onClick: R,
+                style: x.backButton,
+                onMouseOver: (l) => {
+                  l.currentTarget.style.backgroundColor = "#e5e7eb";
                 },
-                onMouseOut: (c) => {
-                  c.currentTarget.style.backgroundColor = "#f3f4f6";
+                onMouseOut: (l) => {
+                  l.currentTarget.style.backgroundColor = "#f3f4f6";
                 },
-                children: g.backToLoginButton
+                children: h.backToLoginButton
               }
             )
           ] })
@@ -3144,18 +3282,18 @@ function ur({
         return null;
     }
   };
-  return /* @__PURE__ */ d("div", { style: $.container, className: m, children: [
-    /* @__PURE__ */ n("style", { children: `
+  return /* @__PURE__ */ d("div", { style: x.container, className: p, children: [
+    /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ n("h1", { style: $.title, children: g.title }),
-    O()
+    /* @__PURE__ */ s("h1", { style: x.title, children: h.title }),
+    B()
   ] });
 }
-const Ht = {
+const Yt = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3177,7 +3315,7 @@ const Ht = {
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
   passwordMismatchError: "Passwords do not match"
-}, Nt = {
+}, Qt = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3269,186 +3407,186 @@ const Ht = {
     cursor: "pointer"
   }
 };
-function hr({
-  copy: i = {},
+function Hn({
+  copy: r = {},
   styles: e = {},
   mode: t = "request",
-  token: r = "",
-  onSuccess: s,
+  token: n = "",
+  onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: m,
-  className: y
+  onModeChange: p,
+  className: f
 }) {
-  const [b, p] = k(""), [S, f] = k(r), [T, I] = k(""), [C, R] = k(""), [x, g] = k(!1), [$, A] = k(""), [E, U] = k(""), [D, P] = k({}), { requestPasswordReset: O, confirmPasswordReset: c } = oe(), { tenant: L } = ce(), F = { ...Ht, ...i }, l = { ...Nt, ...e }, H = () => {
-    const B = {};
-    return b.trim() || (B.email = !0), P(B), Object.keys(B).length === 0;
-  }, M = () => {
-    const B = {};
-    return S.trim() || (B.token = !0), T.trim() || (B.newPassword = !0), C.trim() || (B.confirmPassword = !0), P(B), Object.keys(B).length === 0;
-  }, h = async (B) => {
-    if (B.preventDefault(), !!H()) {
-      if (!(L != null && L.id)) {
-        A("Tenant not found");
+  const [b, u] = A(""), [w, g] = A(n), [v, M] = A(""), [F, L] = A(""), [P, h] = A(!1), [x, k] = A(""), [I, U] = A(""), [C, R] = A({}), { requestPasswordReset: B, confirmPasswordReset: l } = le(), { tenant: N } = he(), D = { ...Yt, ...r }, c = { ...Qt, ...e }, $ = () => {
+    const q = {};
+    return b.trim() || (q.email = !0), R(q), Object.keys(q).length === 0;
+  }, E = () => {
+    const q = {};
+    return w.trim() || (q.token = !0), v.trim() || (q.newPassword = !0), F.trim() || (q.confirmPassword = !0), R(q), Object.keys(q).length === 0;
+  }, y = async (q) => {
+    if (q.preventDefault(), !!$()) {
+      if (!(N != null && N.id)) {
+        k("Tenant not found");
         return;
       }
-      g(!0), A(""), U("");
+      h(!0), k(""), U("");
       try {
-        await O({ email: b, tenantId: L.id }), U(F.successMessage), s == null || s();
-      } catch (q) {
-        const V = q.message || F.errorMessage;
-        A(V), o == null || o(V);
+        await B({ email: b, tenantId: N.id }), U(D.successMessage), i == null || i();
+      } catch (O) {
+        const V = O.message || D.errorMessage;
+        k(V), o == null || o(V);
       } finally {
-        g(!1);
+        h(!1);
       }
     }
-  }, u = async (B) => {
-    if (B.preventDefault(), !!M()) {
-      if (T !== C) {
-        A(F.passwordMismatchError), P({ confirmPassword: !0 });
+  }, m = async (q) => {
+    if (q.preventDefault(), !!E()) {
+      if (v !== F) {
+        k(D.passwordMismatchError), R({ confirmPassword: !0 });
         return;
       }
-      g(!0), A(""), U("");
+      h(!0), k(""), U("");
       try {
-        await c({ token: S, newPassword: T }), U(F.resetSuccessMessage), s == null || s();
-      } catch (q) {
-        const V = q.message || F.errorMessage;
-        A(V), o == null || o(V);
+        await l({ token: w, newPassword: v }), U(D.resetSuccessMessage), i == null || i();
+      } catch (O) {
+        const V = O.message || D.errorMessage;
+        k(V), o == null || o(V);
       } finally {
-        g(!1);
+        h(!1);
       }
     }
-  }, w = (B) => ({
-    ...l.input,
-    ...D[B] ? l.inputError : {}
-  }), _ = () => ({
-    ...l.button,
-    ...x ? l.buttonLoading : {}
+  }, S = (q) => ({
+    ...c.input,
+    ...C[q] ? c.inputError : {}
+  }), G = () => ({
+    ...c.button,
+    ...P ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const B = S && T && C;
-    return /* @__PURE__ */ d("div", { className: y, style: l.container, children: [
-      /* @__PURE__ */ n("h2", { style: l.title, children: F.resetTitle }),
-      /* @__PURE__ */ n("p", { style: l.subtitle, children: F.resetSubtitle }),
-      /* @__PURE__ */ d("form", { onSubmit: u, style: l.form, children: [
-        /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: F.tokenLabel }),
-          /* @__PURE__ */ n(
+    const q = w && v && F;
+    return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
+      /* @__PURE__ */ s("h2", { style: c.title, children: D.resetTitle }),
+      /* @__PURE__ */ s("p", { style: c.subtitle, children: D.resetSubtitle }),
+      /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: D.tokenLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: S,
-              onChange: (q) => {
-                f(q.target.value), D.token && P((V) => ({ ...V, token: !1 }));
+              value: w,
+              onChange: (O) => {
+                g(O.target.value), C.token && R((V) => ({ ...V, token: !1 }));
               },
-              placeholder: F.tokenPlaceholder,
-              style: w("token"),
-              disabled: x
+              placeholder: D.tokenPlaceholder,
+              style: S("token"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: F.newPasswordLabel }),
-          /* @__PURE__ */ n(
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: D.newPasswordLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: T,
-              onChange: (q) => {
-                I(q.target.value), D.newPassword && P((V) => ({ ...V, newPassword: !1 }));
+              value: v,
+              onChange: (O) => {
+                M(O.target.value), C.newPassword && R((V) => ({ ...V, newPassword: !1 }));
               },
-              placeholder: F.newPasswordPlaceholder,
-              style: w("newPassword"),
-              disabled: x
+              placeholder: D.newPasswordPlaceholder,
+              style: S("newPassword"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: F.confirmPasswordLabel }),
-          /* @__PURE__ */ n(
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: D.confirmPasswordLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: C,
-              onChange: (q) => {
-                R(q.target.value), D.confirmPassword && P((V) => ({ ...V, confirmPassword: !1 })), $ === F.passwordMismatchError && A("");
+              value: F,
+              onChange: (O) => {
+                L(O.target.value), C.confirmPassword && R((V) => ({ ...V, confirmPassword: !1 })), x === D.passwordMismatchError && k("");
               },
-              placeholder: F.confirmPasswordPlaceholder,
-              style: w("confirmPassword"),
-              disabled: x
+              placeholder: D.confirmPasswordPlaceholder,
+              style: S("confirmPassword"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ n(
+        /* @__PURE__ */ s(
           "button",
           {
             type: "submit",
-            disabled: !B || x,
+            disabled: !q || P,
             style: {
-              ..._(),
-              ...!B || x ? l.buttonDisabled : {}
+              ...G(),
+              ...!q || P ? c.buttonDisabled : {}
             },
-            children: x ? F.resetLoadingText : F.resetSubmitButton
+            children: P ? D.resetLoadingText : D.resetSubmitButton
           }
         ),
-        $ && /* @__PURE__ */ n("div", { style: l.errorText, children: $ }),
-        E && /* @__PURE__ */ n("div", { style: l.successText, children: E })
+        x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
+        I && /* @__PURE__ */ s("div", { style: c.successText, children: I })
       ] }),
-      /* @__PURE__ */ d("div", { style: l.linkContainer, children: [
-        /* @__PURE__ */ n("a", { onClick: a, style: l.link, children: F.backToLoginLink }),
-        m && /* @__PURE__ */ d(j, { children: [
-          /* @__PURE__ */ n("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ n("a", { onClick: () => m("request"), style: l.link, children: "Request New Link" })
+      /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: D.backToLoginLink }),
+        p && /* @__PURE__ */ d(_, { children: [
+          /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
+          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: "Request New Link" })
         ] })
       ] })
     ] });
   }
-  const K = b;
-  return /* @__PURE__ */ d("div", { className: y, style: l.container, children: [
-    /* @__PURE__ */ n("h2", { style: l.title, children: F.title }),
-    /* @__PURE__ */ n("p", { style: l.subtitle, children: F.subtitle }),
-    /* @__PURE__ */ d("form", { onSubmit: h, style: l.form, children: [
-      /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: l.label, children: F.emailLabel }),
-        /* @__PURE__ */ n(
+  const J = b;
+  return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
+    /* @__PURE__ */ s("h2", { style: c.title, children: D.title }),
+    /* @__PURE__ */ s("p", { style: c.subtitle, children: D.subtitle }),
+    /* @__PURE__ */ d("form", { onSubmit: y, style: c.form, children: [
+      /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: c.label, children: D.emailLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             type: "email",
             value: b,
-            onChange: (B) => {
-              p(B.target.value), D.email && P((q) => ({ ...q, email: !1 }));
+            onChange: (q) => {
+              u(q.target.value), C.email && R((O) => ({ ...O, email: !1 }));
             },
-            placeholder: F.emailPlaceholder,
-            style: w("email"),
-            disabled: x
+            placeholder: D.emailPlaceholder,
+            style: S("email"),
+            disabled: P
           }
         )
       ] }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s(
         "button",
         {
           type: "submit",
-          disabled: !K || x,
+          disabled: !J || P,
           style: {
-            ..._(),
-            ...!K || x ? l.buttonDisabled : {}
+            ...G(),
+            ...!J || P ? c.buttonDisabled : {}
           },
-          children: x ? F.loadingText : F.submitButton
+          children: P ? D.loadingText : D.submitButton
         }
       ),
-      $ && /* @__PURE__ */ n("div", { style: l.errorText, children: $ }),
-      E && /* @__PURE__ */ n("div", { style: l.successText, children: E })
+      x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
+      I && /* @__PURE__ */ s("div", { style: c.successText, children: I })
     ] }),
-    /* @__PURE__ */ d("div", { style: l.linkContainer, children: [
-      /* @__PURE__ */ n("a", { onClick: a, style: l.link, children: F.backToLoginLink }),
-      m && /* @__PURE__ */ d(j, { children: [
-        /* @__PURE__ */ n("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ n("a", { onClick: () => m("reset"), style: l.link, children: "I have a token" })
+    /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: D.backToLoginLink }),
+      p && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
+        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: "I have a token" })
       ] })
     ] })
   ] });
 }
-const Ut = () => /* @__PURE__ */ n(
+const Xt = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3458,9 +3596,9 @@ const Ut = () => /* @__PURE__ */ n(
       height: "100vh",
       fontFamily: "system-ui, sans-serif"
     },
-    children: /* @__PURE__ */ n("div", { children: "Loading..." })
+    children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), Bt = ({ error: i, retry: e }) => /* @__PURE__ */ d(
+), en = ({ error: r, retry: e }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -3474,9 +3612,9 @@ const Ut = () => /* @__PURE__ */ n(
       padding: "20px"
     },
     children: [
-      /* @__PURE__ */ n("h2", { style: { color: "#dc3545", marginBottom: "16px" }, children: "Error" }),
-      /* @__PURE__ */ n("p", { style: { color: "#6c757d", marginBottom: "24px" }, children: i.message || "Unable to load application" }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s("h2", { style: { color: "#dc3545", marginBottom: "16px" }, children: "Error" }),
+      /* @__PURE__ */ s("p", { style: { color: "#6c757d", marginBottom: "24px" }, children: r.message || "Unable to load application" }),
+      /* @__PURE__ */ s(
         "button",
         {
           onClick: e,
@@ -3494,98 +3632,98 @@ const Ut = () => /* @__PURE__ */ n(
     ]
   }
 );
-function gr({
-  children: i,
+function Bn({
+  children: r,
   loadingFallback: e,
   errorFallback: t,
-  requireTenant: r = !0
+  requireTenant: n = !0
 }) {
-  const { isAppLoading: s, appError: o, retryApp: a } = ge(), m = we(), y = Me(), b = qe(), p = ze(), S = (m == null ? void 0 : m.isTenantLoading) ?? !1, f = (m == null ? void 0 : m.tenantError) ?? null, T = (m == null ? void 0 : m.tenantSlug) ?? null, I = (m == null ? void 0 : m.retryTenant) ?? (() => {
-  }), C = (y == null ? void 0 : y.isAuthReady) ?? !0, R = (b == null ? void 0 : b.isReady) ?? !0, x = (p == null ? void 0 : p.isReady) ?? !0, g = r && m && T, U = s || g && S || y && !C || b && !R || p && !x, D = o || (g ? f : null), P = () => {
-    o && a(), f && m && I();
+  const { isAppLoading: i, appError: o, retryApp: a } = ye(), p = Se(), f = Le(), b = We(), u = Ve(), w = (p == null ? void 0 : p.isTenantLoading) ?? !1, g = (p == null ? void 0 : p.tenantError) ?? null, v = (p == null ? void 0 : p.tenantSlug) ?? null, M = (p == null ? void 0 : p.retryTenant) ?? (() => {
+  }), F = (f == null ? void 0 : f.isAuthReady) ?? !0, L = (b == null ? void 0 : b.isReady) ?? !0, P = (u == null ? void 0 : u.isReady) ?? !0, h = n && p && v, U = i || h && w || f && !F || b && !L || u && !P, C = o || (h ? g : null), R = () => {
+    o && a(), g && p && M();
   };
   if (U)
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Ut, {}) });
-  if (D) {
-    const O = typeof t == "function" ? t(D, P) : t || /* @__PURE__ */ n(Bt, { error: D, retry: P });
-    return /* @__PURE__ */ n(j, { children: O });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Xt, {}) });
+  if (C) {
+    const B = typeof t == "function" ? t(C, R) : t || /* @__PURE__ */ s(en, { error: C, retry: R });
+    return /* @__PURE__ */ s(_, { children: B });
   }
-  return /* @__PURE__ */ n(j, { children: i });
+  return /* @__PURE__ */ s(_, { children: r });
 }
-function pr(i = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: s } = ge(), o = we(), a = Me(), m = qe(), y = ze(), b = (o == null ? void 0 : o.isTenantLoading) ?? !1, p = (o == null ? void 0 : o.tenantError) ?? null, S = (o == null ? void 0 : o.tenant) ?? null, f = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, C = (m == null ? void 0 : m.isReady) ?? !0, R = (y == null ? void 0 : y.isReady) ?? !0, x = i && o && f, E = e || x && b || a && !I || m && !C || y && !R, U = t || (x ? p : null);
+function qn(r = !0) {
+  const { isAppLoading: e, appError: t, retryApp: n, appInfo: i } = ye(), o = Se(), a = Le(), p = We(), f = Ve(), b = (o == null ? void 0 : o.isTenantLoading) ?? !1, u = (o == null ? void 0 : o.tenantError) ?? null, w = (o == null ? void 0 : o.tenant) ?? null, g = (o == null ? void 0 : o.tenantSlug) ?? null, v = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), M = (a == null ? void 0 : a.isAuthReady) ?? !0, F = (p == null ? void 0 : p.isReady) ?? !0, L = (f == null ? void 0 : f.isReady) ?? !0, P = r && o && g, I = e || P && b || a && !M || p && !F || f && !L, U = t || (P ? u : null);
   return {
-    isLoading: E,
+    isLoading: I,
     error: U,
-    isReady: !E && !U && s !== null && (!x || S !== null),
+    isReady: !I && !U && i !== null && (!P || w !== null),
     retry: () => {
-      t && r(), p && o && T();
+      t && n(), u && o && v();
     },
     // Individual states
-    app: { isLoading: e, error: t, data: s },
-    tenant: o ? { isLoading: b, error: p, data: S } : null,
-    auth: a ? { isReady: I } : null,
-    featureFlags: m ? { isReady: C } : null,
-    subscription: y ? { isReady: R } : null
+    app: { isLoading: e, error: t, data: i },
+    tenant: o ? { isLoading: b, error: u, data: w } : null,
+    auth: a ? { isReady: M } : null,
+    featureFlags: p ? { isReady: F } : null,
+    subscription: f ? { isReady: L } : null
   };
 }
-function fr({
-  tenants: i,
+function On({
+  tenants: r,
   currentTenantId: e,
   onSelect: t,
-  className: r = "",
-  dropdownClassName: s = "",
+  className: n = "",
+  dropdownClassName: i = "",
   itemClassName: o = "",
   renderItem: a,
-  placeholder: m = "Select tenant",
-  disabled: y = !1,
+  placeholder: p = "Select tenant",
+  disabled: f = !1,
   showCurrentTenant: b = !0
 }) {
-  var $;
-  const p = Me(), [S, f] = k(!1), T = Ue(null), I = i ?? (p == null ? void 0 : p.userTenants) ?? [], C = e ?? (($ = p == null ? void 0 : p.currentUser) == null ? void 0 : $.tenantId) ?? null, R = async (A) => {
-    f(!1), t ? t(A) : p != null && p.switchToTenant && await p.switchToTenant(A);
+  var x;
+  const u = Le(), [w, g] = A(!1), v = ze(null), M = r ?? (u == null ? void 0 : u.userTenants) ?? [], F = e ?? ((x = u == null ? void 0 : u.currentUser) == null ? void 0 : x.tenantId) ?? null, L = async (k) => {
+    g(!1), t ? t(k) : u != null && u.switchToTenant && await u.switchToTenant(k);
   };
-  re(() => {
-    const A = (E) => {
-      T.current && !T.current.contains(E.target) && f(!1);
+  X(() => {
+    const k = (I) => {
+      v.current && !v.current.contains(I.target) && g(!1);
     };
-    return document.addEventListener("mousedown", A), () => document.removeEventListener("mousedown", A);
+    return document.addEventListener("mousedown", k), () => document.removeEventListener("mousedown", k);
   }, []);
-  const x = I.find((A) => A.id === C);
-  if (I.length === 0)
+  const P = M.find((k) => k.id === F);
+  if (M.length === 0)
     return null;
-  if (I.length === 1 && b)
-    return /* @__PURE__ */ n("div", { className: r, children: /* @__PURE__ */ n("span", { children: I[0].name }) });
-  const g = (A, E) => /* @__PURE__ */ d("span", { style: { fontWeight: E ? "bold" : "normal" }, children: [
-    A.name,
-    A.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
+  if (M.length === 1 && b)
+    return /* @__PURE__ */ s("div", { className: n, children: /* @__PURE__ */ s("span", { children: M[0].name }) });
+  const h = (k, I) => /* @__PURE__ */ d("span", { style: { fontWeight: I ? "bold" : "normal" }, children: [
+    k.name,
+    k.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
       "(",
-      A.role,
+      k.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ d("div", { ref: T, className: r, style: { position: "relative" }, children: [
+  return /* @__PURE__ */ d("div", { ref: v, className: n, style: { position: "relative" }, children: [
     /* @__PURE__ */ d(
       "button",
       {
         type: "button",
-        onClick: () => !y && f(!S),
-        disabled: y,
+        onClick: () => !f && g(!w),
+        disabled: f,
         style: {
-          cursor: y ? "not-allowed" : "pointer",
-          opacity: y ? 0.6 : 1
+          cursor: f ? "not-allowed" : "pointer",
+          opacity: f ? 0.6 : 1
         },
         children: [
-          x ? x.name : m,
-          /* @__PURE__ */ n("span", { style: { marginLeft: 8 }, children: S ? "▲" : "▼" })
+          P ? P.name : p,
+          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: w ? "▲" : "▼" })
         ]
       }
     ),
-    S && /* @__PURE__ */ n(
+    w && /* @__PURE__ */ s(
       "div",
       {
-        className: s,
+        className: i,
         style: {
           position: "absolute",
           top: "100%",
@@ -3599,34 +3737,34 @@ function fr({
           maxHeight: 300,
           overflowY: "auto"
         },
-        children: I.map((A) => {
-          const E = A.id === C;
-          return /* @__PURE__ */ n(
+        children: M.map((k) => {
+          const I = k.id === F;
+          return /* @__PURE__ */ s(
             "div",
             {
               className: o,
-              onClick: () => R(A.id),
+              onClick: () => L(k.id),
               style: {
                 padding: "8px 12px",
                 cursor: "pointer",
-                backgroundColor: E ? "#f0f0f0" : "transparent"
+                backgroundColor: I ? "#f0f0f0" : "transparent"
               },
               onMouseEnter: (U) => {
-                E || (U.target.style.backgroundColor = "#f5f5f5");
+                I || (U.target.style.backgroundColor = "#f5f5f5");
               },
               onMouseLeave: (U) => {
-                E || (U.target.style.backgroundColor = "transparent");
+                I || (U.target.style.backgroundColor = "transparent");
               },
-              children: a ? a(A, E) : g(A, E)
+              children: a ? a(k, I) : h(k, I)
             },
-            A.id
+            k.id
           );
         })
       }
     )
   ] });
 }
-class mr {
+class zn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3645,9 +3783,9 @@ class mr {
   async getPermissions(e) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/permissions/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const i = `/permissions/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
       headers: t
     });
     return {
@@ -3666,12 +3804,12 @@ class mr {
   async updatePermission(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/permissions/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -3685,16 +3823,16 @@ class mr {
   }
   // Public endpoint - no auth required
   async getAppPermissions(e, t) {
-    const r = new URLSearchParams();
-    t != null && t.page && r.append("page", t.page.toString()), t != null && t.limit && r.append("limit", t.limit.toString()), t != null && t.sortBy && r.append("sortBy", t.sortBy), t != null && t.sortOrder && r.append("sortOrder", t.sortOrder);
-    const s = `/permissions/apps/${e}${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s);
+    const n = new URLSearchParams();
+    t != null && t.page && n.append("page", t.page.toString()), t != null && t.limit && n.append("limit", t.limit.toString()), t != null && t.sortBy && n.append("sortBy", t.sortBy), t != null && t.sortOrder && n.append("sortOrder", t.sortOrder);
+    const i = `/permissions/apps/${e}${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i);
     return {
       permissions: o.data,
       meta: o.meta
     };
   }
 }
-class yr {
+class _n {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3709,9 +3847,9 @@ class yr {
     )).data;
   }
   async getSubscriptionPlans(e) {
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder), e != null && e.appId && r.append("appId", e.appId);
-    const s = `/subscription-plans/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder), e != null && e.appId && n.append("appId", e.appId);
+    const i = `/subscription-plans/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
       headers: t
     });
     return {
@@ -3729,12 +3867,12 @@ class yr {
     )).data;
   }
   async updateSubscriptionPlan(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/subscription-plans/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -3745,7 +3883,7 @@ class yr {
     });
   }
 }
-class wr {
+class Wn {
   constructor(e) {
     this.httpService = e;
   }
@@ -3754,7 +3892,7 @@ class wr {
     return await this.httpService.get("/health");
   }
 }
-class br {
+class Vn {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -3871,54 +4009,138 @@ class br {
   // Transform query parameters for API calls
   static transformQueryParams(e) {
     const t = new URLSearchParams();
-    return Object.entries(e).forEach(([r, s]) => {
-      s != null && s !== "" && t.append(r, String(s));
+    return Object.entries(e).forEach(([n, i]) => {
+      i != null && i !== "" && t.append(n, String(i));
     }), t;
   }
 }
+const Ze = "returnTo", xe = "zone_return_to", Pe = "zone_return_to";
+function jn(r = {}) {
+  const {
+    zoneRoots: e = {},
+    returnToParam: t = Ze,
+    returnToStorage: n = "url"
+  } = r, i = lt(), [o, a] = ct(), { isAuthenticated: p, currentUser: f } = le(), { tenant: b } = ue(), u = K(() => ({ ...je, ...e }), [e]), w = !!b, g = f == null ? void 0 : f.userType, v = K(() => {
+    switch (n) {
+      case "url":
+        return o.get(t);
+      case "session":
+        return sessionStorage.getItem(xe);
+      case "local":
+        return localStorage.getItem(Pe);
+      default:
+        return null;
+    }
+  }, [n, o, t]), M = re(() => {
+    switch (n) {
+      case "url": {
+        const h = new URLSearchParams(o);
+        h.delete(t), a(h, { replace: !0 });
+        break;
+      }
+      case "session":
+        sessionStorage.removeItem(xe);
+        break;
+      case "local":
+        localStorage.removeItem(Pe);
+        break;
+    }
+  }, [n, o, t, a]), F = re(
+    (h) => {
+      switch (n) {
+        case "url": {
+          const x = new URLSearchParams(o);
+          x.set(t, h), a(x, { replace: !0 });
+          break;
+        }
+        case "session":
+          sessionStorage.setItem(xe, h);
+          break;
+        case "local":
+          localStorage.setItem(Pe, h);
+          break;
+      }
+    },
+    [n, o, t, a]
+  ), L = re(
+    (h) => {
+      const x = u[h] || u.default;
+      i(x);
+    },
+    [i, u]
+  ), P = re(() => w ? p ? g === se.TENANT_ADMIN ? u.tenantAdmin : u.tenantUser : u.tenantGuest : p ? g === se.TENANT_ADMIN ? u.publicAdmin : u.publicUser : u.publicGuest, [w, p, g, u]);
+  return {
+    returnToUrl: v,
+    clearReturnTo: M,
+    setReturnTo: F,
+    navigateToZone: L,
+    getSmartRedirect: P
+  };
+}
+function Gn(r, e, t = Ze, n = "url") {
+  if (!e || n !== "url")
+    return r;
+  const i = new URL(r, window.location.origin);
+  return i.searchParams.set(t, e), i.pathname + i.search;
+}
 export {
-  br as ApiMappers,
-  Fe as AppApiService,
-  gr as AppLoader,
-  Jt as AppProvider,
-  rt as AuthApiService,
-  Zt as AuthProvider,
-  ar as FeatureFlag,
-  ut as FeatureFlagApiService,
-  er as FeatureFlagProvider,
-  wr as HealthApiService,
-  ne as HttpService,
-  ir as LandingRoute,
-  lr as LoginForm,
-  dr as MagicLinkForm,
-  ur as MagicLinkVerify,
-  hr as PasswordRecoveryForm,
-  mr as PermissionApiService,
-  rr as Protected,
-  nr as ProtectedRoute,
-  Ce as RoleApiService,
-  ke as SessionManager,
-  cr as SignupForm,
-  gt as SubscriptionApiService,
-  or as SubscriptionGuard,
-  yr as SubscriptionPlanApiService,
-  tr as SubscriptionProvider,
-  ue as TenantApiService,
-  Yt as TenantProvider,
-  sr as TenantRoute,
-  fr as TenantSelector,
-  nt as UserApiService,
-  fe as UserType,
-  Kt as useApi,
-  ge as useApp,
-  pr as useAppLoaderState,
-  oe as useAuth,
-  ht as useFeatureFlags,
-  Xt as useSettings,
-  pt as useSubscription,
-  ye as useTenant,
-  ce as useTenantInfo,
-  we as useTenantOptional,
-  Qt as useTenantSettings
+  Pn as AdminZone,
+  Vn as ApiMappers,
+  Ce as AppApiService,
+  Bn as AppLoader,
+  dn as AppProvider,
+  dt as AuthApiService,
+  fn as AuthProvider,
+  An as AuthenticatedZone,
+  It as DEFAULT_ZONE_PRESETS,
+  je as DEFAULT_ZONE_ROOTS,
+  Nn as FeatureFlag,
+  bt as FeatureFlagApiService,
+  mn as FeatureFlagProvider,
+  xn as GuestZone,
+  Wn as HealthApiService,
+  ie as HttpService,
+  vn as LandingRoute,
+  Un as LoginForm,
+  Dn as MagicLinkForm,
+  $n as MagicLinkVerify,
+  In as OpenZone,
+  Hn as PasswordRecoveryForm,
+  zn as PermissionApiService,
+  wn as Protected,
+  bn as ProtectedRoute,
+  kn as PublicZone,
+  De as RoleApiService,
+  Ae as SessionManager,
+  Cn as SignupForm,
+  vt as SubscriptionApiService,
+  Fn as SubscriptionGuard,
+  _n as SubscriptionPlanApiService,
+  yn as SubscriptionProvider,
+  pe as TenantApiService,
+  Mn as TenantAuthenticatedZone,
+  En as TenantGuestZone,
+  Ln as TenantOpenZone,
+  hn as TenantProvider,
+  Sn as TenantRoute,
+  On as TenantSelector,
+  Tn as TenantZone,
+  ut as UserApiService,
+  se as UserType,
+  Rn as UserZone,
+  ae as ZoneRoute,
+  Gn as buildRedirectUrl,
+  un as useApi,
+  ye as useApp,
+  qn as useAppLoaderState,
+  le as useAuth,
+  St as useFeatureFlags,
+  pn as useSettings,
+  Tt as useSubscription,
+  ue as useTenant,
+  he as useTenantInfo,
+  Se as useTenantOptional,
+  gn as useTenantSettings,
+  jn as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map