@skylabs-digital/react-identity-access 2.12.0 → 2.14.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
-import { jsx as n, Fragment as j, jsxs as d } from "react/jsx-runtime";
-import { createContext as he, useMemo as te, useState as k, useCallback as ie, useEffect as re, useContext as se, useRef as Ue } from "react";
-import { useLocation as Te, Navigate as me } from "react-router-dom";
-class ne {
+import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
+import { createContext as ue, useMemo as Z, useState as A, useCallback as re, useEffect as X, useContext as oe, useRef as We } from "react";
+import { useLocation as be, Navigate as me, useNavigate as dt, useSearchParams as ut } from "react-router-dom";
+class ie {
   // SessionManager instance
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
@@ -12,60 +12,60 @@ class ne {
   getBaseUrl() {
     return this.baseUrl;
   }
-  async request(e, t, r, s) {
-    return this.executeRequest(e, t, r, s, !1);
+  async request(e, t, n, o) {
+    return this.executeRequest(e, t, n, o, !1);
   }
-  async executeRequest(e, t, r, s, o = !1) {
-    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, m = (s == null ? void 0 : s.timeout) || this.timeout;
-    let y = {
+  async executeRequest(e, t, n, o, i = !1) {
+    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, p = (o == null ? void 0 : o.timeout) || this.timeout;
+    let f = {
       "Content-Type": "application/json",
-      ...s == null ? void 0 : s.headers
+      ...o == null ? void 0 : o.headers
     };
-    if (!(s != null && s.skipAuth) && this.sessionManager)
+    if (!(o != null && o.skipAuth) && this.sessionManager)
       try {
-        const S = await this.sessionManager.getAuthHeaders();
-        y = { ...y, ...S };
-      } catch (S) {
-        console.warn("Failed to inject auth headers:", S);
+        const b = await this.sessionManager.getAuthHeaders();
+        f = { ...f, ...b };
+      } catch (b) {
+        console.warn("Failed to inject auth headers:", b);
       }
-    const b = new AbortController(), p = setTimeout(() => b.abort(), m);
+    const w = new AbortController(), u = setTimeout(() => w.abort(), p);
     try {
-      const S = await fetch(a, {
+      const b = await fetch(a, {
         method: e,
-        headers: y,
-        body: r ? JSON.stringify(r) : void 0,
-        signal: b.signal
+        headers: f,
+        body: n ? JSON.stringify(n) : void 0,
+        signal: w.signal
       });
-      if (clearTimeout(p), S.status === 401 && !(s != null && s.skipRetry) && !o && this.sessionManager)
+      if (clearTimeout(u), b.status === 401 && !(o != null && o.skipRetry) && !i && this.sessionManager)
         try {
           const T = this.sessionManager.getTokens();
           if (T != null && T.refreshToken)
-            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, r, s, !0);
+            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, n, o, !0);
         } catch {
-          throw new Error(`HTTP ${S.status}: ${S.statusText}`);
+          throw new Error(`HTTP ${b.status}: ${b.statusText}`);
         }
-      if (!S.ok)
-        throw new Error(`HTTP ${S.status}: ${S.statusText}`);
-      const f = S.headers.get("content-type");
-      return !f || !f.includes("application/json") ? {} : await S.json();
-    } catch (S) {
-      throw clearTimeout(p), S instanceof Error && S.name === "AbortError" ? new Error(`Request timeout after ${m}ms`) : S;
+      if (!b.ok)
+        throw new Error(`HTTP ${b.status}: ${b.statusText}`);
+      const g = b.headers.get("content-type");
+      return !g || !g.includes("application/json") ? {} : await b.json();
+    } catch (b) {
+      throw clearTimeout(u), b instanceof Error && b.name === "AbortError" ? new Error(`Request timeout after ${p}ms`) : b;
     }
   }
   async get(e, t) {
     return this.request("GET", e, void 0, t);
   }
-  async post(e, t, r) {
-    return this.request("POST", e, t, r);
+  async post(e, t, n) {
+    return this.request("POST", e, t, n);
   }
-  async put(e, t, r) {
-    return this.request("PUT", e, t, r);
+  async put(e, t, n) {
+    return this.request("PUT", e, t, n);
   }
   async delete(e, t) {
     return this.request("DELETE", e, void 0, t);
   }
 }
-class Fe {
+class $e {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -76,14 +76,14 @@ class Fe {
     })).data;
   }
   async getApps(e) {
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/apps/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const o = `/apps/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      apps: o.data,
-      meta: o.meta
+      apps: i.data,
+      meta: i.meta
     };
   }
   async getAppById(e) {
@@ -93,28 +93,28 @@ class Fe {
     })).data;
   }
   async updateApp(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/apps/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async getPublicAppInfo(e) {
     return (await this.httpService.get(`/apps/${e}/public`)).data;
   }
   async setDefaultSubscriptionPlan(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/apps/${e}/default-subscription-plan`,
       { planId: t },
-      { headers: r }
+      { headers: n }
     )).data;
   }
-  async updateSettingsSchema(e, t, r) {
-    const s = await this.sessionManager.getAuthHeaders();
+  async updateSettingsSchema(e, t, n) {
+    const o = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/apps/${e}/settings-schema`,
-      { schema: t, defaultSettings: r },
-      { headers: s }
+      { schema: t, defaultSettings: n },
+      { headers: o }
     )).data;
   }
   async exportConfig(e) {
@@ -124,102 +124,102 @@ class Fe {
     })).data;
   }
 }
-const xe = he(null);
-function Jt({ config: i, children: e }) {
-  const t = te(
+const Re = ue(null);
+function un({ config: r, children: e }) {
+  const t = Z(
     () => {
-      var f, T, I;
+      var g, T, I;
       return {
-        enabled: ((f = i.cache) == null ? void 0 : f.enabled) ?? !0,
-        ttl: ((T = i.cache) == null ? void 0 : T.ttl) ?? 3e5,
+        enabled: ((g = r.cache) == null ? void 0 : g.enabled) ?? !0,
+        ttl: ((T = r.cache) == null ? void 0 : T.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((I = i.cache) == null ? void 0 : I.storageKey) ?? `app_cache_${i.appId}`
+        storageKey: ((I = r.cache) == null ? void 0 : I.storageKey) ?? `app_cache_${r.appId}`
       };
     },
-    [i.cache, i.appId]
-  ), [r, s] = k(() => {
+    [r.cache, r.appId]
+  ), [n, o] = A(() => {
     if (!t.enabled) return null;
     try {
-      const f = localStorage.getItem(t.storageKey);
-      if (!f) return null;
-      const T = JSON.parse(f);
-      return Date.now() - T.timestamp < t.ttl && T.appId === i.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
+      const g = localStorage.getItem(t.storageKey);
+      if (!g) return null;
+      const T = JSON.parse(g);
+      return Date.now() - T.timestamp < t.ttl && T.appId === r.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = k(!r), [m, y] = k(null), b = te(() => {
-    const f = () => {
-      p();
+  }), [i, a] = A(!n), [p, f] = A(null), w = Z(() => {
+    const g = () => {
+      u();
     };
     return {
-      appId: i.appId,
-      baseUrl: i.baseUrl,
+      appId: r.appId,
+      baseUrl: r.baseUrl,
       // App info
-      appInfo: r,
-      isAppLoading: o,
-      appError: m,
-      retryApp: f
+      appInfo: n,
+      isAppLoading: i,
+      appError: p,
+      retryApp: g
     };
-  }, [i, r, o, m]), p = ie(
-    async (f = !1) => {
-      if (!(!f && t.enabled && r))
+  }, [r, n, i, p]), u = re(
+    async (g = !1) => {
+      if (!(!g && t.enabled && n))
         try {
-          a(!0), y(null);
-          const T = new ne(i.baseUrl), C = await new Fe(T, {}).getPublicAppInfo(i.appId);
-          if (s(C), t.enabled)
+          a(!0), f(null);
+          const T = new ie(r.baseUrl), N = await new $e(T, {}).getPublicAppInfo(r.appId);
+          if (o(N), t.enabled)
             try {
-              const R = {
-                data: C,
+              const M = {
+                data: N,
                 timestamp: Date.now(),
-                appId: i.appId
+                appId: r.appId
               };
-              localStorage.setItem(t.storageKey, JSON.stringify(R));
-            } catch (R) {
-              console.warn("Failed to cache app info:", R);
+              localStorage.setItem(t.storageKey, JSON.stringify(M));
+            } catch (M) {
+              console.warn("Failed to cache app info:", M);
             }
         } catch (T) {
           const I = T instanceof Error ? T : new Error("Failed to load app information");
-          y(I), s(null);
+          f(I), o(null);
         } finally {
           a(!1);
         }
     },
-    [i.baseUrl, i.appId, t, r]
-  ), S = ie(async () => {
-    if (!(!t.enabled || !r))
+    [r.baseUrl, r.appId, t, n]
+  ), b = re(async () => {
+    if (!(!t.enabled || !n))
       try {
-        const f = localStorage.getItem(t.storageKey);
-        if (!f) return;
-        const T = JSON.parse(f);
+        const g = localStorage.getItem(t.storageKey);
+        if (!g) return;
+        const T = JSON.parse(g);
         if (Date.now() - T.timestamp > t.ttl * 0.5) {
-          const C = new ne(i.baseUrl), x = await new Fe(C, {}).getPublicAppInfo(i.appId);
-          s(x);
-          const g = {
-            data: x,
+          const N = new ie(r.baseUrl), P = await new $e(N, {}).getPublicAppInfo(r.appId);
+          o(P);
+          const h = {
+            data: P,
             timestamp: Date.now(),
-            appId: i.appId
+            appId: r.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(g));
+          localStorage.setItem(t.storageKey, JSON.stringify(h));
         }
-      } catch (f) {
-        console.warn("Background app refresh failed:", f);
+      } catch (g) {
+        console.warn("Background app refresh failed:", g);
       }
-  }, [i, t, r]);
-  return re(() => {
-    r ? S() : p();
-  }, []), /* @__PURE__ */ n(xe.Provider, { value: b, children: e });
+  }, [r, t, n]);
+  return X(() => {
+    n ? b() : u();
+  }, []), /* @__PURE__ */ s(Re.Provider, { value: w, children: e });
 }
-function ge() {
-  const i = se(xe);
-  if (!i)
+function ye() {
+  const r = oe(Re);
+  if (!r)
     throw new Error("useApp must be used within an AppProvider");
-  return i;
+  return r;
 }
-function Be() {
-  return se(xe);
+function Ve() {
+  return oe(Re);
 }
-const Kt = ge;
-class ke {
+const hn = ye;
+class Ae {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey);
   }
@@ -256,13 +256,13 @@ class ke {
     this.tokenStorage.set(t);
   }
   getTokens() {
-    const { accessToken: e, refreshToken: t, expiresAt: r, expiresIn: s, tokenType: o } = this.tokenStorage.get() || {};
+    const { accessToken: e, refreshToken: t, expiresAt: n, expiresIn: o, tokenType: i } = this.tokenStorage.get() || {};
     return e ? {
       accessToken: e,
       refreshToken: t,
-      expiresAt: r,
-      expiresIn: s,
-      tokenType: o
+      expiresAt: n,
+      expiresIn: o,
+      tokenType: i
     } : null;
   }
   clearTokens() {
@@ -291,17 +291,17 @@ class ke {
     if (!e.refreshToken)
       return this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
     if (this.refreshPromise)
-      return new Promise((t, r) => {
-        this.refreshQueue.push({ resolve: t, reject: r });
+      return new Promise((t, n) => {
+        this.refreshQueue.push({ resolve: t, reject: n });
       });
     this.refreshPromise = this.performTokenRefresh(e.refreshToken);
     try {
       await this.refreshPromise;
-      const t = this.getTokens(), r = t != null && t.accessToken ? { Authorization: `Bearer ${t.accessToken}` } : {};
-      return this.refreshQueue.forEach(({ resolve: s }) => s(r)), this.refreshQueue = [], r;
+      const t = this.getTokens(), n = t != null && t.accessToken ? { Authorization: `Bearer ${t.accessToken}` } : {};
+      return this.refreshQueue.forEach(({ resolve: o }) => o(n)), this.refreshQueue = [], n;
     } catch (t) {
-      const r = t instanceof Error ? t : new Error("Token refresh failed");
-      return this.refreshQueue.forEach(({ reject: s }) => s(r)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
+      const n = t instanceof Error ? t : new Error("Token refresh failed");
+      return this.refreshQueue.forEach(({ reject: o }) => o(n)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
     } finally {
       this.refreshPromise = null;
     }
@@ -309,7 +309,7 @@ class ke {
   async performTokenRefresh(e) {
     if (!this.baseUrl)
       throw new Error("Base URL not configured for token refresh");
-    const t = `${this.baseUrl}/auth/refresh`, r = await fetch(t, {
+    const t = `${this.baseUrl}/auth/refresh`, n = await fetch(t, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
@@ -318,13 +318,13 @@ class ke {
         refreshToken: e
       })
     });
-    if (!r.ok)
-      throw new Error(`Token refresh failed: ${r.status} ${r.statusText}`);
-    const s = await r.json();
+    if (!n.ok)
+      throw new Error(`Token refresh failed: ${n.status} ${n.statusText}`);
+    const o = await n.json();
     this.setTokens({
-      accessToken: s.accessToken,
-      refreshToken: s.refreshToken || e,
-      expiresIn: s.expiresIn
+      accessToken: o.accessToken,
+      refreshToken: o.refreshToken || e,
+      expiresIn: o.expiresIn
     });
   }
   setUser(e) {
@@ -352,8 +352,8 @@ class ke {
       if (!(e != null && e.accessToken)) return null;
       const t = e.accessToken.split(".");
       if (t.length !== 3) return null;
-      const r = t[1], s = atob(r.replace(/-/g, "+").replace(/_/g, "/"));
-      return JSON.parse(s);
+      const n = t[1], o = atob(n.replace(/-/g, "+").replace(/_/g, "/"));
+      return JSON.parse(o);
     } catch {
       return null;
     }
@@ -372,7 +372,7 @@ class ke {
     return e !== null && !this.isTokenExpired(e);
   }
 }
-class rt {
+class ht {
   constructor(e) {
     this.httpService = e;
   }
@@ -428,7 +428,7 @@ class rt {
     });
   }
 }
-class Ce {
+class He {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -451,9 +451,9 @@ class Ce {
   async updateRole(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/roles/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async deleteRole(e) {
@@ -466,37 +466,37 @@ class Ce {
   }
   // Public endpoint - no auth required
   async getRolesByApp(e, t) {
-    const r = new URLSearchParams();
-    t != null && t.page && r.append("page", t.page.toString()), t != null && t.limit && r.append("limit", t.limit.toString()), t != null && t.sortBy && r.append("sortBy", t.sortBy), t != null && t.sortOrder && r.append("sortOrder", t.sortOrder);
-    const s = `/roles/app/${e}${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s);
+    const n = new URLSearchParams();
+    t != null && t.page && n.append("page", t.page.toString()), t != null && t.limit && n.append("limit", t.limit.toString()), t != null && t.sortBy && n.append("sortBy", t.sortBy), t != null && t.sortOrder && n.append("sortOrder", t.sortOrder);
+    const o = `/roles/app/${e}${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o);
     return {
-      roles: o.data,
-      meta: o.meta
+      roles: i.data,
+      meta: i.meta
     };
   }
   async assignRole(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     await this.httpService.post(`/roles/${e}/assign`, t, {
-      headers: r
+      headers: n
     });
   }
   async revokeRole(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     await this.httpService.post(`/roles/${e}/revoke`, t, {
-      headers: r
+      headers: n
     });
   }
   async getUserRoles(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders(), s = new URLSearchParams();
-    t != null && t.page && s.append("page", t.page.toString()), t != null && t.limit && s.append("limit", t.limit.toString()), t != null && t.sortBy && s.append("sortBy", t.sortBy), t != null && t.sortOrder && s.append("sortOrder", t.sortOrder);
-    const o = `/roles/user/${e}${s.toString() ? `?${s.toString()}` : ""}`, a = await this.httpService.get(o, {
-      headers: r
+    const n = await this.sessionManager.getAuthHeaders(), o = new URLSearchParams();
+    t != null && t.page && o.append("page", t.page.toString()), t != null && t.limit && o.append("limit", t.limit.toString()), t != null && t.sortBy && o.append("sortBy", t.sortBy), t != null && t.sortOrder && o.append("sortOrder", t.sortOrder);
+    const i = `/roles/user/${e}${o.toString() ? `?${o.toString()}` : ""}`, a = await this.httpService.get(i, {
+      headers: n
     });
     return {
       roles: a.data,
@@ -504,7 +504,7 @@ class Ce {
     };
   }
 }
-class nt {
+class gt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -515,14 +515,14 @@ class nt {
     })).data;
   }
   async getUsers(e) {
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/users/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const o = `/users/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      users: o.data,
-      meta: o.meta
+      users: i.data,
+      meta: i.meta
     };
   }
   async getUserById(e) {
@@ -532,9 +532,9 @@ class nt {
     })).data;
   }
   async updateUser(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/users/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async deleteUser(e) {
@@ -544,9 +544,9 @@ class nt {
     });
   }
 }
-class ue {
-  constructor(e, t, r) {
-    this.httpService = e, this.appId = t, this.sessionManager = r;
+class fe {
+  constructor(e, t, n) {
+    this.httpService = e, this.appId = t, this.sessionManager = n;
   }
   async createTenant(e) {
     if (!this.sessionManager)
@@ -559,14 +559,14 @@ class ue {
   async getTenants(e) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/tenants/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const o = `/tenants/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      tenants: o.data,
-      meta: o.meta
+      tenants: i.data,
+      meta: i.meta
     };
   }
   async getTenantById(e) {
@@ -580,20 +580,20 @@ class ue {
   async updateTenant(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(`/tenants/${e}`, t, {
-      headers: r
+      headers: n
     })).data;
   }
   async adminUpdateTenant(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/tenants/${e}/admin-update`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -612,72 +612,72 @@ class ue {
   async updateTenantSettings(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/tenants/${e}/settings`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
 }
-function st(i, e) {
-  if (i === "localhost" || i.startsWith("127.") || i.startsWith("192.168."))
+function pt(r, e) {
+  if (r === "localhost" || r.startsWith("127.") || r.startsWith("192.168."))
     return null;
   if (e) {
-    const s = e.toLowerCase(), o = i.toLowerCase();
-    if (o === s || o === `www.${s}`)
+    const o = e.toLowerCase(), i = r.toLowerCase();
+    if (i === o || i === `www.${o}`)
       return null;
-    if (o.endsWith(`.${s}`)) {
-      const a = o.slice(0, -(s.length + 1));
+    if (i.endsWith(`.${o}`)) {
+      const a = i.slice(0, -(o.length + 1));
       return a === "www" ? null : a;
     }
     return null;
   }
-  const r = i.split(".");
-  return r.length >= 3 && r[0] !== "www" ? r[0] : null;
+  const n = r.split(".");
+  return n.length >= 3 && n[0] !== "www" ? n[0] : null;
 }
-function it(i, e = "tenant", t) {
-  const s = new URLSearchParams(i).get(e);
-  return s ? (t && t.setItem("tenant", s), s) : t ? t.getItem("tenant") : null;
+function ft(r, e = "tenant", t) {
+  const o = new URLSearchParams(r).get(e);
+  return o ? (t && t.setItem("tenant", o), o) : t ? t.getItem("tenant") : null;
 }
-function ot(i, e, t) {
-  const { tenantMode: r, baseDomain: s, selectorParam: o } = i;
-  return r === "subdomain" ? st(e.hostname, s) : r === "selector" ? it(e.search, o, t) : null;
+function mt(r, e, t) {
+  const { tenantMode: n, baseDomain: o, selectorParam: i } = r;
+  return n === "subdomain" ? pt(e.hostname, o) : n === "selector" ? ft(e.search, i, t) : null;
 }
-function at(i, e, t) {
+function yt(r, e, t) {
   if (t)
-    return `${i}.${t}`;
-  const r = e.split(".");
-  return r.length === 2 ? `${i}.${e}` : r.length >= 3 ? (r[0] = i, r.join(".")) : null;
+    return `${r}.${t}`;
+  const n = e.split(".");
+  return n.length === 2 ? `${r}.${e}` : n.length >= 3 ? (n[0] = r, n.join(".")) : null;
 }
-const le = "_auth";
-function De(i) {
-  const e = JSON.stringify(i);
+const de = "_auth";
+function Be(r) {
+  const e = JSON.stringify(r);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function lt(i) {
+function wt(r) {
   try {
-    let e = i.replace(/-/g, "+").replace(/_/g, "/");
+    let e = r.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
       e += "=";
-    const t = atob(e), r = JSON.parse(t);
-    return typeof r.accessToken == "string" && typeof r.refreshToken == "string" && typeof r.expiresIn == "number" ? r : null;
+    const t = atob(e), n = JSON.parse(t);
+    return typeof n.accessToken == "string" && typeof n.refreshToken == "string" && typeof n.expiresIn == "number" ? n : null;
   } catch {
     return null;
   }
 }
-function ct() {
+function bt() {
   if (typeof window > "u")
     return console.log("[CrossDomainAuth] SSR environment, skipping URL token extraction"), null;
-  const e = new URLSearchParams(window.location.search).get(le);
+  const e = new URLSearchParams(window.location.search).get(de);
   if (console.log("[CrossDomainAuth] extractAuthTokensFromUrl called", {
     hasAuthParam: !!e,
     searchParams: window.location.search,
     encodedLength: e == null ? void 0 : e.length
   }), !e) return null;
-  const t = lt(e);
+  const t = wt(e);
   return console.log("[CrossDomainAuth] Token decode result:", {
     success: !!t,
     hasAccessToken: !!(t != null && t.accessToken),
@@ -685,135 +685,135 @@ function ct() {
     expiresIn: t == null ? void 0 : t.expiresIn
   }), t;
 }
-function dt() {
+function St() {
   if (typeof window > "u") return;
-  const i = new URL(window.location.href);
-  i.searchParams.delete(le), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
+  const r = new URL(window.location.href);
+  r.searchParams.delete(de), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
     oldUrl: window.location.href,
-    newUrl: i.toString()
-  }), window.history.replaceState({}, "", i.toString());
+    newUrl: r.toString()
+  }), window.history.replaceState({}, "", r.toString());
 }
-const Ae = he(null);
-function Yt({ config: i, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: s } = ge(), o = ie(() => typeof window > "u" ? null : ot(
+const Ie = ue(null);
+function gn({ config: r, children: e }) {
+  const { baseUrl: t, appInfo: n, appId: o } = ye(), i = re(() => typeof window > "u" ? null : mt(
     {
-      tenantMode: i.tenantMode || "selector",
-      baseDomain: i.baseDomain,
-      selectorParam: i.selectorParam
+      tenantMode: r.tenantMode || "selector",
+      baseDomain: r.baseDomain,
+      selectorParam: r.selectorParam
     },
     {
       hostname: window.location.hostname,
       search: window.location.search
     },
     window.localStorage
-  ), [i.tenantMode, i.baseDomain, i.selectorParam]), [a, m] = k(() => o()), y = te(
+  ), [r.tenantMode, r.baseDomain, r.selectorParam]), [a, p] = A(() => i()), f = Z(
     () => {
-      var l, H, M;
+      var c, H, F;
       return {
-        enabled: ((l = i.cache) == null ? void 0 : l.enabled) ?? !0,
-        ttl: ((H = i.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
+        enabled: ((c = r.cache) == null ? void 0 : c.enabled) ?? !0,
+        ttl: ((H = r.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((M = i.cache) == null ? void 0 : M.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((F = r.cache) == null ? void 0 : F.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
-    [i.cache, a]
-  ), [b, p] = k(() => {
-    if (i.initialTenant) return i.initialTenant;
-    if (!y.enabled || !a) return null;
+    [r.cache, a]
+  ), [w, u] = A(() => {
+    if (r.initialTenant) return r.initialTenant;
+    if (!f.enabled || !a) return null;
     try {
-      const l = localStorage.getItem(y.storageKey);
-      if (!l) return null;
-      const H = JSON.parse(l);
-      return Date.now() - H.timestamp < y.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(y.storageKey), null);
+      const c = localStorage.getItem(f.storageKey);
+      if (!c) return null;
+      const H = JSON.parse(c);
+      return Date.now() - H.timestamp < f.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(f.storageKey), null);
     } catch {
       return null;
     }
-  }), [S, f] = k(!b && !i.initialTenant), [T, I] = k(null), [C, R] = k(null), [x, g] = k(!1), [$, A] = k(null);
-  re(() => {
-    const l = o();
-    m(l);
-  }, [o]);
-  const E = (r == null ? void 0 : r.settingsSchema) || null, U = ie(
-    async (l, H = !1) => {
-      if (!(!H && y.enabled && b && b.domain === l))
+  }), [b, g] = A(!w && !r.initialTenant), [T, I] = A(null), [N, M] = A(null), [P, h] = A(!1), [x, S] = A(null);
+  X(() => {
+    const c = i();
+    p(c);
+  }, [i]);
+  const L = (n == null ? void 0 : n.settingsSchema) || null, E = re(
+    async (c, H = !1) => {
+      if (!(!H && f.enabled && w && w.domain === c))
         try {
-          f(!0), I(null);
-          const M = new ne(t), u = await new ue(M, s).getPublicTenantInfo(l);
-          if (p(u), y.enabled)
+          g(!0), I(null);
+          const F = new ie(t), m = await new fe(F, o).getPublicTenantInfo(c);
+          if (u(m), f.enabled)
             try {
-              const w = {
-                data: u,
+              const v = {
+                data: m,
                 timestamp: Date.now(),
-                tenantSlug: l
+                tenantSlug: c
               };
-              localStorage.setItem(y.storageKey, JSON.stringify(w));
-            } catch (w) {
-              console.warn("Failed to cache tenant info:", w);
+              localStorage.setItem(f.storageKey, JSON.stringify(v));
+            } catch (v) {
+              console.warn("Failed to cache tenant info:", v);
             }
-        } catch (M) {
-          const h = M instanceof Error ? M : new Error("Failed to load tenant information");
-          I(h), p(null);
+        } catch (F) {
+          const y = F instanceof Error ? F : new Error("Failed to load tenant information");
+          I(y), u(null);
         } finally {
-          f(!1);
+          g(!1);
         }
     },
-    [t, s, y, b]
-  ), D = ie(async () => {
-    if (!(!y.enabled || !b || !a))
+    [t, o, f, w]
+  ), C = re(async () => {
+    if (!(!f.enabled || !w || !a))
       try {
-        const l = localStorage.getItem(y.storageKey);
-        if (!l) return;
-        const H = JSON.parse(l);
-        if (Date.now() - H.timestamp > y.ttl * 0.5) {
-          const h = new ne(t), w = await new ue(h, s).getPublicTenantInfo(a);
-          p(w);
-          const _ = {
-            data: w,
+        const c = localStorage.getItem(f.storageKey);
+        if (!c) return;
+        const H = JSON.parse(c);
+        if (Date.now() - H.timestamp > f.ttl * 0.5) {
+          const y = new ie(t), v = await new fe(y, o).getPublicTenantInfo(a);
+          u(v);
+          const G = {
+            data: v,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(y.storageKey, JSON.stringify(_));
+          localStorage.setItem(f.storageKey, JSON.stringify(G));
         }
-      } catch (l) {
-        console.warn("Background tenant refresh failed:", l);
+      } catch (c) {
+        console.warn("Background tenant refresh failed:", c);
       }
-  }, [t, s, y, b, a]), P = ie(async () => {
-    if (b != null && b.id)
+  }, [t, o, f, w, a]), R = re(async () => {
+    if (w != null && w.id)
       try {
-        g(!0), A(null);
-        const l = new ne(t), M = await new ue(l, b.appId).getTenantSettings(b.id);
-        R(M);
-      } catch (l) {
-        const H = l instanceof Error ? l : new Error("Failed to load tenant settings");
-        A(H), R(null);
+        h(!0), S(null);
+        const c = new ie(t), F = await new fe(c, w.appId).getTenantSettings(w.id);
+        M(F);
+      } catch (c) {
+        const H = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        S(H), M(null);
       } finally {
-        g(!1);
+        h(!1);
       }
-  }, [t, b]), O = ie(() => {
-    P();
-  }, [P]), c = ie(
-    (l) => {
-      if (!E)
+  }, [t, w]), $ = re(() => {
+    R();
+  }, [R]), l = re(
+    (c) => {
+      if (!L)
         return { isValid: !0, errors: [] };
       const H = [];
       try {
-        return E.properties && Object.entries(E.properties).forEach(([M, h]) => {
-          var w;
-          const u = l[M];
-          if ((w = E.required) != null && w.includes(M) && u == null) {
-            H.push(`Field '${M}' is required`);
+        return L.properties && Object.entries(L.properties).forEach(([F, y]) => {
+          var v;
+          const m = c[F];
+          if ((v = L.required) != null && v.includes(F) && m == null) {
+            H.push(`Field '${F}' is required`);
             return;
           }
-          if (u != null) {
-            if (h.type) {
-              const _ = h.type, K = typeof u;
-              _ === "string" && K !== "string" ? H.push(`Field '${M}' must be a string`) : (_ === "number" || _ === "integer") && K !== "number" ? H.push(`Field '${M}' must be a number`) : _ === "boolean" && K !== "boolean" ? H.push(`Field '${M}' must be a boolean`) : _ === "array" && !Array.isArray(u) && H.push(`Field '${M}' must be an array`);
+          if (m != null) {
+            if (y.type) {
+              const G = y.type, J = typeof m;
+              G === "string" && J !== "string" ? H.push(`Field '${F}' must be a string`) : (G === "number" || G === "integer") && J !== "number" ? H.push(`Field '${F}' must be a number`) : G === "boolean" && J !== "boolean" ? H.push(`Field '${F}' must be a boolean`) : G === "array" && !Array.isArray(m) && H.push(`Field '${F}' must be an array`);
             }
-            h.minLength !== void 0 && typeof u == "string" && u.length < h.minLength && H.push(
-              `Field '${M}' must be at least ${h.minLength} characters long`
-            ), h.maxLength !== void 0 && typeof u == "string" && u.length > h.maxLength && H.push(
-              `Field '${M}' must be no more than ${h.maxLength} characters long`
-            ), h.minimum !== void 0 && typeof u == "number" && u < h.minimum && H.push(`Field '${M}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof u == "number" && u > h.maximum && H.push(`Field '${M}' must be no more than ${h.maximum}`), h.pattern && typeof u == "string" && (new RegExp(h.pattern).test(u) || H.push(`Field '${M}' does not match the required pattern`)), h.enum && !h.enum.includes(u) && H.push(`Field '${M}' must be one of: ${h.enum.join(", ")}`);
+            y.minLength !== void 0 && typeof m == "string" && m.length < y.minLength && H.push(
+              `Field '${F}' must be at least ${y.minLength} characters long`
+            ), y.maxLength !== void 0 && typeof m == "string" && m.length > y.maxLength && H.push(
+              `Field '${F}' must be no more than ${y.maxLength} characters long`
+            ), y.minimum !== void 0 && typeof m == "number" && m < y.minimum && H.push(`Field '${F}' must be at least ${y.minimum}`), y.maximum !== void 0 && typeof m == "number" && m > y.maximum && H.push(`Field '${F}' must be no more than ${y.maximum}`), y.pattern && typeof m == "string" && (new RegExp(y.pattern).test(m) || H.push(`Field '${F}' does not match the required pattern`)), y.enum && !y.enum.includes(m) && H.push(`Field '${F}' must be one of: ${y.enum.join(", ")}`);
           }
         }), {
           isValid: H.length === 0,
@@ -826,401 +826,401 @@ function Yt({ config: i, children: e }) {
         };
       }
     },
-    [E]
+    [L]
   );
-  re(() => {
-    !i.initialTenant && a ? b ? D() : U(a) : !i.initialTenant && !a && (p(null), I(null), f(!1));
-  }, [i.initialTenant, a, b, U, D]), re(() => {
-    b != null && b.id ? P() : (R(null), A(null), g(!1));
-  }, [b == null ? void 0 : b.id, P]);
-  const L = ie(
-    (l, H) => {
-      const { mode: M = "reload", tokens: h, redirectPath: u } = H || {}, w = i.tenantMode || "selector";
-      if (localStorage.setItem("tenant", l), w === "subdomain") {
-        const _ = window.location.hostname, K = at(
-          l,
-          _,
-          i.baseDomain
+  X(() => {
+    !r.initialTenant && a ? w ? C() : E(a) : !r.initialTenant && !a && (u(null), I(null), g(!1));
+  }, [r.initialTenant, a, w, E, C]), X(() => {
+    w != null && w.id ? R() : (M(null), S(null), h(!1));
+  }, [w == null ? void 0 : w.id, R]);
+  const D = re(
+    (c, H) => {
+      const { mode: F = "reload", tokens: y, redirectPath: m } = H || {}, v = r.tenantMode || "selector";
+      if (localStorage.setItem("tenant", c), v === "subdomain") {
+        const G = window.location.hostname, J = yt(
+          c,
+          G,
+          r.baseDomain
         );
-        if (!K) {
+        if (!J) {
           console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            _
+            G
           );
           return;
         }
-        const B = u || window.location.pathname, q = new URL(`${window.location.protocol}//${K}${B}`);
-        new URLSearchParams(window.location.search).forEach((v, J) => {
-          J !== le && q.searchParams.set(J, v);
-        }), h && q.searchParams.set(le, De(h)), window.location.href = q.toString();
-      } else if (w === "selector") {
-        const _ = u || window.location.pathname, K = new URLSearchParams(window.location.search);
-        if (K.set(i.selectorParam || "tenant", l), K.delete(le), h && K.set(le, De(h)), M === "reload") {
-          const B = `${_}?${K.toString()}${window.location.hash}`;
-          window.location.href = B;
+        const q = m || window.location.pathname, O = new URL(`${window.location.protocol}//${J}${q}`);
+        new URLSearchParams(window.location.search).forEach((k, K) => {
+          K !== de && O.searchParams.set(K, k);
+        }), y && O.searchParams.set(de, Be(y)), window.location.href = O.toString();
+      } else if (v === "selector") {
+        const G = m || window.location.pathname, J = new URLSearchParams(window.location.search);
+        if (J.set(r.selectorParam || "tenant", c), J.delete(de), y && J.set(de, Be(y)), F === "reload") {
+          const q = `${G}?${J.toString()}${window.location.hash}`;
+          window.location.href = q;
         } else {
-          const B = `${_}?${K.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", B), m(l), U(l);
+          const q = `${G}?${J.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", q), p(c), E(c);
         }
       }
     },
-    [i.tenantMode, i.selectorParam, i.baseDomain, U]
-  ), F = te(() => ({
+    [r.tenantMode, r.selectorParam, r.baseDomain, E]
+  ), U = Z(() => ({
     // Tenant info
-    tenant: b,
+    tenant: w,
     tenantSlug: a,
-    isTenantLoading: S,
+    isTenantLoading: b,
     tenantError: T,
     retryTenant: () => {
-      a && U(a);
+      a && E(a);
     },
     // Settings
-    settings: C,
-    settingsSchema: E,
-    isSettingsLoading: x,
-    settingsError: $,
+    settings: N,
+    settingsSchema: L,
+    isSettingsLoading: P,
+    settingsError: x,
     // Actions
-    refreshSettings: O,
-    switchTenant: L,
+    refreshSettings: $,
+    switchTenant: D,
     // Validation
-    validateSettings: c
+    validateSettings: l
   }), [
-    b,
+    w,
     a,
-    S,
+    b,
     T,
-    C,
-    E,
+    N,
+    L,
+    P,
     x,
     $,
-    O,
-    L,
-    c
+    D,
+    l
   ]);
-  return /* @__PURE__ */ n(Ae.Provider, { value: F, children: e });
+  return /* @__PURE__ */ s(Ie.Provider, { value: U, children: e });
 }
-function ye() {
-  const i = se(Ae);
-  if (!i)
+function he() {
+  const r = oe(Ie);
+  if (!r)
     throw new Error("useTenant must be used within a TenantProvider");
-  return i;
+  return r;
 }
-function we() {
-  return se(Ae);
+function Se() {
+  return oe(Ie);
 }
-const Qt = ye;
-function Xt() {
-  const { settings: i, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: s } = ye();
+const pn = he;
+function fn() {
+  const { settings: r, settingsSchema: e, isSettingsLoading: t, settingsError: n, validateSettings: o } = he();
   return {
-    settings: i,
+    settings: r,
     settingsSchema: e,
     isLoading: t,
-    error: r,
-    validateSettings: s
+    error: n,
+    validateSettings: o
   };
 }
-function ce() {
-  const { tenant: i, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: s } = ye();
+function ge() {
+  const { tenant: r, tenantSlug: e, isTenantLoading: t, tenantError: n, retryTenant: o } = he();
   return {
-    tenant: i,
+    tenant: r,
     tenantSlug: e,
     isLoading: t,
-    error: r,
-    retry: s
+    error: n,
+    retry: o
   };
 }
-const Pe = he(null);
-function Zt({ config: i = {}, children: e }) {
-  const { appId: t, baseUrl: r } = ge(), { tenant: s, tenantSlug: o, switchTenant: a } = ye(), [m, y] = k(i.initialRoles || []), [b, p] = k(!i.initialRoles), [S, f] = k(null), [T, I] = k(!1), [C, R] = k(null), [x, g] = k(0), [$, A] = k(() => {
+const Me = ue(null);
+function mn({ config: r = {}, children: e }) {
+  const { appId: t, baseUrl: n } = ye(), { tenant: o, tenantSlug: i, switchTenant: a } = he(), [p, f] = A(r.initialRoles || []), [w, u] = A(!r.initialRoles), [b, g] = A(null), [T, I] = A(!1), [N, M] = A(null), [P, h] = A(0), [x, S] = A(() => {
     try {
-      const v = localStorage.getItem("userTenants");
-      return v ? JSON.parse(v) : [];
+      const k = localStorage.getItem("userTenants");
+      return k ? JSON.parse(k) : [];
     } catch {
       return [];
     }
-  }), [E, U] = k(!1), D = Ue({ done: !1, urlTokens: null });
-  D.current.done || (D.current.done = !0, D.current.urlTokens = ct(), D.current.urlTokens && console.log(
+  }), [L, E] = A(!1), C = We({ done: !1, urlTokens: null });
+  C.current.done || (C.current.done = !0, C.current.urlTokens = bt(), C.current.urlTokens && console.log(
     "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
   ));
-  const [P, O] = k(() => {
-    const v = D.current.urlTokens !== null;
-    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", v), v;
-  }), c = te(() => {
-    const v = new ke({
-      tenantSlug: o,
-      onRefreshFailed: i.onRefreshFailed,
-      baseUrl: r
+  const [R, $] = A(() => {
+    const k = C.current.urlTokens !== null;
+    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", k), k;
+  }), l = Z(() => {
+    const k = new Ae({
+      tenantSlug: i,
+      onRefreshFailed: r.onRefreshFailed,
+      baseUrl: n
     });
-    return D.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), v.setTokens({
-      accessToken: D.current.urlTokens.accessToken,
-      refreshToken: D.current.urlTokens.refreshToken,
-      expiresIn: D.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", v.hasValidSession())), v;
-  }, [o, r, i.onRefreshFailed]), L = D.current.done && !P, F = te(() => {
-    const v = new ne(r);
-    return v.setSessionManager(c), v;
-  }, [r, c]), l = te(() => new rt(new ne(r)), [r]), H = te(() => new nt(F, c), [F, c]), M = te(() => new Ce(new ne(r)), [r]), h = te(() => S || c.getUser(), [S, c]), u = te(() => h != null && h.roleId && m.find((v) => v.id === h.roleId) || null, [h, m]), w = te(() => (u == null ? void 0 : u.permissions) || [], [u]), _ = te(() => c.hasValidSession() && S !== null, [c, S]), K = 5 * 60 * 1e3, B = te(() => {
-    const v = async (N = !1) => {
+    return C.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), k.setTokens({
+      accessToken: C.current.urlTokens.accessToken,
+      refreshToken: C.current.urlTokens.refreshToken,
+      expiresIn: C.current.urlTokens.expiresIn
+    }), console.log("[AuthProvider] SYNC: Session valid:", k.hasValidSession())), k;
+  }, [i, n, r.onRefreshFailed]), D = C.current.done && !R, U = Z(() => {
+    const k = new ie(n);
+    return k.setSessionManager(l), k;
+  }, [n, l]), c = Z(() => new ht(new ie(n)), [n]), H = Z(() => new gt(U, l), [U, l]), F = Z(() => new He(new ie(n)), [n]), y = Z(() => b || l.getUser(), [b, l]), m = Z(() => y != null && y.roleId && p.find((k) => k.id === y.roleId) || null, [y, p]), v = Z(() => (m == null ? void 0 : m.permissions) || [], [m]), G = Z(() => l.hasValidSession() && b !== null, [l, b]), J = 5 * 60 * 1e3, q = Z(() => {
+    const k = async (B = !1) => {
       try {
-        if (!c.hasValidSession())
+        if (!l.hasValidSession())
           return;
         const z = Date.now();
-        if (!N && z - x < K && S)
+        if (!B && z - P < J && b)
           return;
-        const W = c.getUserId();
+        const W = l.getUserId();
         if (!W) {
           console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        I(!0), R(null);
+        I(!0), M(null);
         const Q = await H.getUserById(W);
-        f(Q), c.setUser(Q), g(Date.now());
+        g(Q), l.setUser(Q), h(Date.now());
       } catch (z) {
         const Y = z instanceof Error ? z : new Error("Failed to load user data");
-        R(Y), console.error("[AuthProvider] Failed to load user data:", Y);
+        M(Y), console.error("[AuthProvider] Failed to load user data:", Y);
       } finally {
         I(!1);
       }
-    }, J = async () => {
-      await v();
-    }, ae = async (N) => {
-      var Le;
-      const { username: z, password: Y, tenantSlug: W, redirectPath: Q } = N;
-      let X = s == null ? void 0 : s.id, Z = o, ee = c;
-      W && (X = (await new ue(F, t).getPublicTenantInfo(W)).id, Z = W);
-      const G = await l.login({
+    }, K = async () => {
+      await k();
+    }, ce = async (B) => {
+      var Ce;
+      const { username: z, password: Y, tenantSlug: W, redirectPath: Q } = B;
+      let ee = o == null ? void 0 : o.id, te = i, ne = l;
+      W && (ee = (await new fe(U, t).getPublicTenantInfo(W)).id, te = W);
+      const j = await c.login({
         username: z,
         password: Y,
         appId: t,
-        tenantId: X
-      }), de = W && W !== o;
-      if (de && (ee = new ke({
-        tenantSlug: Z,
-        baseUrl: r
-      })), ee.setTokens({
-        accessToken: G.accessToken,
-        refreshToken: G.refreshToken,
-        expiresIn: G.expiresIn
-      }), G.user) {
-        ee.setUser(G.user), f(G.user);
+        tenantId: ee
+      }), pe = W && W !== i;
+      if (pe && (ne = new Ae({
+        tenantSlug: te,
+        baseUrl: n
+      })), ne.setTokens({
+        accessToken: j.accessToken,
+        refreshToken: j.refreshToken,
+        expiresIn: j.expiresIn
+      }), j.user) {
+        ne.setUser(j.user), g(j.user);
         try {
-          await v();
-        } catch (pe) {
-          console.warn("Failed to load complete user data after login:", pe);
+          await k();
+        } catch (we) {
+          console.warn("Failed to load complete user data after login:", we);
         }
       }
-      if (G.tenants && G.tenants.length > 0) {
-        A(G.tenants);
+      if (j.tenants && j.tenants.length > 0) {
+        S(j.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(G.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(j.tenants));
         } catch {
         }
       }
-      const ve = ((Le = G.user) == null ? void 0 : Le.tenantId) !== null;
-      if (U(ve), de && Z && Z !== o && a(Z, {
+      const ke = ((Ce = j.user) == null ? void 0 : Ce.tenantId) !== null;
+      if (E(ke), pe && te && te !== i && a(te, {
         tokens: {
-          accessToken: G.accessToken,
-          refreshToken: G.refreshToken,
-          expiresIn: G.expiresIn
+          accessToken: j.accessToken,
+          refreshToken: j.refreshToken,
+          expiresIn: j.expiresIn
         },
         redirectPath: Q
-      }), !ve && G.tenants && G.tenants.length > 0) {
-        const pe = N.autoSwitch !== !1 && i.autoSwitchSingleTenant !== !1;
-        if (G.tenants.length === 1 && pe) {
-          const Ee = G.tenants[0];
-          a(Ee.subdomain, {
+      }), !ke && j.tenants && j.tenants.length > 0) {
+        const we = B.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
+        if (j.tenants.length === 1 && we) {
+          const Ue = j.tenants[0];
+          a(Ue.subdomain, {
             tokens: {
-              accessToken: G.accessToken,
-              refreshToken: G.refreshToken,
-              expiresIn: G.expiresIn
+              accessToken: j.accessToken,
+              refreshToken: j.refreshToken,
+              expiresIn: j.expiresIn
             },
             redirectPath: Q
           });
-        } else G.tenants.length > 1 && i.onTenantSelectionRequired && i.onTenantSelectionRequired(G.tenants);
+        } else j.tenants.length > 1 && r.onTenantSelectionRequired && r.onTenantSelectionRequired(j.tenants);
       }
-      return G;
-    }, be = async (N) => {
-      const { email: z, phoneNumber: Y, name: W, password: Q, lastName: X, tenantId: Z } = N;
+      return j;
+    }, ve = async (B) => {
+      const { email: z, phoneNumber: Y, name: W, password: Q, lastName: ee, tenantId: te } = B;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!W || !Q)
         throw new Error("Name and password are required");
-      const ee = Z ?? (s == null ? void 0 : s.id);
-      return await l.signup({
+      const ne = te ?? (o == null ? void 0 : o.id);
+      return await c.signup({
         email: z,
         phoneNumber: Y,
         name: W,
         password: Q,
-        tenantId: ee,
-        lastName: X,
+        tenantId: ne,
+        lastName: ee,
         appId: t
       });
-    }, We = async (N) => {
-      const { email: z, phoneNumber: Y, name: W, password: Q, tenantName: X, lastName: Z } = N;
+    }, Ye = async (B) => {
+      const { email: z, phoneNumber: Y, name: W, password: Q, tenantName: ee, lastName: te } = B;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
-      if (!W || !Q || !X)
+      if (!W || !Q || !ee)
         throw new Error("Name, password, and tenantName are required");
-      return await l.signupTenantAdmin({
+      return await c.signupTenantAdmin({
         email: z,
         phoneNumber: Y,
         name: W,
         password: Q,
-        tenantName: X,
+        tenantName: ee,
         appId: t,
-        lastName: Z
+        lastName: te
       });
-    }, je = async (N) => {
-      const { currentPassword: z, newPassword: Y } = N, W = await c.getAuthHeaders();
-      await l.changePassword({ currentPassword: z, newPassword: Y }, W);
-    }, Ve = async (N) => {
-      const { email: z, tenantId: Y } = N, W = Y ?? (s == null ? void 0 : s.id);
+    }, Qe = async (B) => {
+      const { currentPassword: z, newPassword: Y } = B, W = await l.getAuthHeaders();
+      await c.changePassword({ currentPassword: z, newPassword: Y }, W);
+    }, Xe = async (B) => {
+      const { email: z, tenantId: Y } = B, W = Y ?? (o == null ? void 0 : o.id);
       if (!W)
         throw new Error("tenantId is required for password reset");
-      await l.requestPasswordReset({ email: z, tenantId: W });
-    }, Ge = async (N) => {
-      const { token: z, newPassword: Y } = N;
-      await l.confirmPasswordReset({ token: z, newPassword: Y });
-    }, _e = async (N) => {
-      const { email: z, frontendUrl: Y, name: W, lastName: Q, tenantId: X } = N, Z = X ?? (s == null ? void 0 : s.id);
-      if (!Z)
+      await c.requestPasswordReset({ email: z, tenantId: W });
+    }, et = async (B) => {
+      const { token: z, newPassword: Y } = B;
+      await c.confirmPasswordReset({ token: z, newPassword: Y });
+    }, tt = async (B) => {
+      const { email: z, frontendUrl: Y, name: W, lastName: Q, tenantId: ee } = B, te = ee ?? (o == null ? void 0 : o.id);
+      if (!te)
         throw new Error("tenantId is required for magic link authentication");
-      return await l.sendMagicLink({
+      return await c.sendMagicLink({
         email: z,
-        tenantId: Z,
+        tenantId: te,
         frontendUrl: Y,
         name: W,
         lastName: Q,
         appId: t
       });
-    }, Je = async (N) => {
-      const { token: z, email: Y, tenantSlug: W } = N;
-      let Q = s == null ? void 0 : s.id, X = o, Z = c;
-      W && (Q = (await new ue(F, t).getPublicTenantInfo(W)).id, X = W);
-      const ee = await l.verifyMagicLink({
+    }, nt = async (B) => {
+      const { token: z, email: Y, tenantSlug: W } = B;
+      let Q = o == null ? void 0 : o.id, ee = i, te = l;
+      W && (Q = (await new fe(U, t).getPublicTenantInfo(W)).id, ee = W);
+      const ne = await c.verifyMagicLink({
         token: z,
         email: Y,
         appId: t,
         tenantId: Q
-      }), G = W && W !== o;
-      if (G && (Z = new ke({
-        tenantSlug: X,
-        baseUrl: r
-      })), Z.setTokens({
-        accessToken: ee.accessToken,
-        refreshToken: ee.refreshToken,
-        expiresIn: ee.expiresIn
-      }), ee.user) {
-        Z.setUser(ee.user), f(ee.user);
+      }), j = W && W !== i;
+      if (j && (te = new Ae({
+        tenantSlug: ee,
+        baseUrl: n
+      })), te.setTokens({
+        accessToken: ne.accessToken,
+        refreshToken: ne.refreshToken,
+        expiresIn: ne.expiresIn
+      }), ne.user) {
+        te.setUser(ne.user), g(ne.user);
         try {
-          await v();
-        } catch (de) {
-          console.warn("Failed to load complete user data after magic link login:", de);
+          await k();
+        } catch (pe) {
+          console.warn("Failed to load complete user data after magic link login:", pe);
         }
       }
-      return G && X && X !== o && a(X, {
+      return j && ee && ee !== i && a(ee, {
         tokens: {
-          accessToken: ee.accessToken,
-          refreshToken: ee.refreshToken,
-          expiresIn: ee.expiresIn
+          accessToken: ne.accessToken,
+          refreshToken: ne.refreshToken,
+          expiresIn: ne.expiresIn
         }
-      }), ee;
-    }, Ke = async () => {
-      const N = c.getTokens();
-      if (!(N != null && N.refreshToken))
+      }), ne;
+    }, rt = async () => {
+      const B = l.getTokens();
+      if (!(B != null && B.refreshToken))
         throw new Error("No refresh token available");
-      const z = await l.refreshToken({
-        refreshToken: N.refreshToken
+      const z = await c.refreshToken({
+        refreshToken: B.refreshToken
       });
-      c.setTokens({
+      l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || N.refreshToken,
+        refreshToken: z.refreshToken || B.refreshToken,
         expiresIn: z.expiresIn
       });
-    }, Ye = () => {
-      c.clearSession(), f(null), R(null), A([]), U(!1);
+    }, st = () => {
+      l.clearSession(), g(null), M(null), S([]), E(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, Qe = (N) => {
-      c.setTokens(N);
-    }, Xe = () => c.hasValidSession(), Ze = () => {
-      c.clearSession(), f(null), R(null);
-    }, et = async () => {
+    }, ot = (B) => {
+      l.setTokens(B);
+    }, it = () => l.hasValidSession(), at = () => {
+      l.clearSession(), g(null), M(null);
+    }, lt = async () => {
       if (t)
         try {
-          p(!0);
-          const { roles: N } = await M.getRolesByApp(t);
-          y(N);
-        } catch (N) {
-          console.error("Failed to fetch roles:", N);
+          u(!0);
+          const { roles: B } = await F.getRolesByApp(t);
+          f(B);
+        } catch (B) {
+          console.error("Failed to fetch roles:", B);
         } finally {
-          p(!1);
+          u(!1);
         }
-    }, tt = async () => {
-      await et();
-    }, Se = (N) => {
-      if (!w || w.length === 0)
+    }, ct = async () => {
+      await lt();
+    }, Te = (B) => {
+      if (!v || v.length === 0)
         return !1;
-      if (typeof N == "string")
-        return w.includes(N);
-      const z = `${N.resource}.${N.action}`;
-      return w.includes(z);
+      if (typeof B == "string")
+        return v.includes(B);
+      const z = `${B.resource}.${B.action}`;
+      return v.includes(z);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: _,
-      sessionManager: c,
-      authenticatedHttpService: F,
-      login: ae,
-      signup: be,
-      signupTenantAdmin: We,
-      sendMagicLink: _e,
-      verifyMagicLink: Je,
-      changePassword: je,
-      requestPasswordReset: Ve,
-      confirmPasswordReset: Ge,
-      refreshToken: Ke,
-      logout: Ye,
-      setTokens: Qe,
-      hasValidSession: Xe,
-      clearSession: Ze,
-      currentUser: S,
+      isAuthenticated: G,
+      sessionManager: l,
+      authenticatedHttpService: U,
+      login: ce,
+      signup: ve,
+      signupTenantAdmin: Ye,
+      sendMagicLink: tt,
+      verifyMagicLink: nt,
+      changePassword: Qe,
+      requestPasswordReset: Xe,
+      confirmPasswordReset: et,
+      refreshToken: rt,
+      logout: st,
+      setTokens: ot,
+      hasValidSession: it,
+      clearSession: at,
+      currentUser: b,
       isUserLoading: T,
-      userError: C,
-      loadUserData: v,
-      refreshUser: J,
-      isAuthInitializing: !L,
-      isAuthReady: L,
-      userRole: u,
-      userPermissions: w,
-      availableRoles: m,
-      rolesLoading: b,
-      hasPermission: Se,
-      hasAnyPermission: (N) => N.some((z) => Se(z)),
-      hasAllPermissions: (N) => N.every((z) => Se(z)),
-      getUserPermissionStrings: () => w || [],
-      refreshRoles: tt,
+      userError: N,
+      loadUserData: k,
+      refreshUser: K,
+      isAuthInitializing: !D,
+      isAuthReady: D,
+      userRole: m,
+      userPermissions: v,
+      availableRoles: p,
+      rolesLoading: w,
+      hasPermission: Te,
+      hasAnyPermission: (B) => B.some((z) => Te(z)),
+      hasAllPermissions: (B) => B.every((z) => Te(z)),
+      getUserPermissionStrings: () => v || [],
+      refreshRoles: ct,
       // RFC-004: Multi-tenant user membership
-      userTenants: $,
-      hasTenantContext: E,
-      switchToTenant: async (N, z) => {
-        const { redirectPath: Y } = z || {}, W = c.getTokens();
+      userTenants: x,
+      hasTenantContext: L,
+      switchToTenant: async (B, z) => {
+        const { redirectPath: Y } = z || {}, W = l.getTokens();
         if (!(W != null && W.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const Q = await l.switchTenant({
+        const Q = await c.switchTenant({
           refreshToken: W.refreshToken,
-          tenantId: N
+          tenantId: B
         });
-        c.setTokens({
+        l.setTokens({
           accessToken: Q.accessToken,
           refreshToken: W.refreshToken,
           // Keep the same refresh token
           expiresIn: Q.expiresIn
-        }), f(Q.user), c.setUser(Q.user), U(!0);
-        const X = $.find((Z) => Z.id === N);
-        X && a(X.subdomain, {
+        }), g(Q.user), l.setUser(Q.user), E(!0);
+        const ee = x.find((te) => te.id === B);
+        ee && a(ee.subdomain, {
           tokens: {
             accessToken: Q.accessToken,
             refreshToken: W.refreshToken,
@@ -1230,8 +1230,8 @@ function Zt({ config: i = {}, children: e }) {
         });
       },
       refreshUserTenants: async () => {
-        const N = await c.getAuthHeaders(), z = await l.getUserTenants(N);
-        A(z);
+        const B = await l.getAuthHeaders(), z = await c.getUserTenants(B);
+        S(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
         } catch {
@@ -1240,74 +1240,74 @@ function Zt({ config: i = {}, children: e }) {
       }
     };
   }, [
-    _,
-    c,
-    F,
+    G,
     l,
+    U,
+    c,
     H,
-    M,
+    F,
     t,
-    s,
     o,
+    i,
     a,
-    m,
-    S,
+    p,
+    b,
     T,
-    C,
-    $,
-    E,
-    L,
-    u,
-    w,
+    N,
     x,
-    K
+    L,
+    D,
+    m,
+    v,
+    P,
+    J
   ]);
-  re(() => {
-    !i.initialRoles && t && (async () => {
+  X(() => {
+    !r.initialRoles && t && (async () => {
       try {
-        p(!0);
-        const J = new ne(r), ae = new Ce(J), { roles: be } = await ae.getRolesByApp(t);
-        y(be);
-      } catch (J) {
-        console.error("Failed to fetch roles:", J);
+        u(!0);
+        const K = new ie(n), ce = new He(K), { roles: ve } = await ce.getRolesByApp(t);
+        f(ve);
+      } catch (K) {
+        console.error("Failed to fetch roles:", K);
       } finally {
-        p(!1);
+        u(!1);
       }
     })();
-  }, [t, r, i.initialRoles]);
-  const [q, V] = k(!1);
-  return re(() => {
-    q || (V(!0), D.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), dt(), O(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), B.loadUserData().catch((v) => {
-      console.error("[AuthProvider] Failed to load user data:", v);
+  }, [t, n, r.initialRoles]);
+  const [O, V] = A(!1);
+  return X(() => {
+    O || (V(!0), C.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), St(), $(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), q.loadUserData().catch((k) => {
+      console.error("[AuthProvider] Failed to load user data:", k);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), O(!1);
+      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), $(!1);
     })));
-  }, [B, q]), re(() => {
-    const v = c.getUser();
-    v && c.hasValidSession() && f(v);
-  }, [c]), re(() => {
-    q && (D.current.urlTokens || !S && !T && c.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), B.loadUserData().catch(() => {
+  }, [q, O]), X(() => {
+    const k = l.getUser();
+    k && l.hasValidSession() && g(k);
+  }, [l]), X(() => {
+    O && (C.current.urlTokens || !b && !T && l.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), q.loadUserData().catch(() => {
     })));
-  }, [S, T, B, c, q]), re(() => {
-    if (!c.hasValidSession() || !S)
+  }, [b, T, q, l, O]), X(() => {
+    if (!l.hasValidSession() || !b)
       return;
-    const v = setInterval(() => {
-      B.loadUserData().catch(() => {
+    const k = setInterval(() => {
+      q.loadUserData().catch(() => {
       });
-    }, K);
-    return () => clearInterval(v);
-  }, [c, S, B, K]), /* @__PURE__ */ n(Pe.Provider, { value: B, children: e });
+    }, J);
+    return () => clearInterval(k);
+  }, [l, b, q, J]), /* @__PURE__ */ s(Me.Provider, { value: q, children: e });
 }
-function oe() {
-  const i = se(Pe);
-  if (!i)
+function le() {
+  const r = oe(Me);
+  if (!r)
     throw new Error("useAuth must be used within an AuthProvider");
-  return i;
+  return r;
 }
-function Me() {
-  return se(Pe);
+function Le() {
+  return oe(Me);
 }
-class ut {
+class vt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1326,14 +1326,14 @@ class ut {
   async getFeatureFlags(e) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/feature-flags/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const o = `/feature-flags/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      featureFlags: o.data,
-      meta: o.meta
+      featureFlags: i.data,
+      meta: i.meta
     };
   }
   async getFeatureFlagById(e) {
@@ -1347,12 +1347,12 @@ class ut {
   async updateFeatureFlag(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/feature-flags/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -1368,85 +1368,85 @@ class ut {
   async getTenantFeatureFlags(e, t) {
     if (!e || !t)
       throw new Error("Tenant ID and App ID are required");
-    const r = new URLSearchParams();
-    r.append("tenantId", e), r.append("appId", t);
-    const s = `/tenant-feature-flags${r.toString() ? `?${r.toString()}` : ""}`;
-    return (await this.httpService.get(s, {
+    const n = new URLSearchParams();
+    n.append("tenantId", e), n.append("appId", t);
+    const o = `/tenant-feature-flags${n.toString() ? `?${n.toString()}` : ""}`;
+    return (await this.httpService.get(o, {
       headers: { "X-Tenant-ID": e }
     })).data;
   }
   // Public endpoint - no auth required
-  async getTenantFeatureFlag(e, t, r) {
-    if (!e || !t || !r)
+  async getTenantFeatureFlag(e, t, n) {
+    if (!e || !t || !n)
       throw new Error("Flag Key, Tenant ID and App ID are required");
-    const s = new URLSearchParams();
-    s.append("tenantId", t), s.append("appId", r);
-    const o = `/tenant-feature-flags/${e}${s.toString() ? `?${s.toString()}` : ""}`;
-    return (await this.httpService.get(o, {
+    const o = new URLSearchParams();
+    o.append("tenantId", t), o.append("appId", n);
+    const i = `/tenant-feature-flags/${e}${o.toString() ? `?${o.toString()}` : ""}`;
+    return (await this.httpService.get(i, {
       headers: { "X-Tenant-ID": t }
     })).data;
   }
 }
-const Ie = he(null);
-function er({ config: i = {}, children: e }) {
-  const t = Be(), r = we(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [m, y] = k([]), [b, p] = k(!1), [S, f] = k(null), [T, I] = k(!1), C = te(() => {
-    const g = new ne(s);
-    return new ut(g);
-  }, [s]), R = async () => {
+const Ee = ue(null);
+function yn({ config: r = {}, children: e }) {
+  const t = Ve(), n = Se(), o = (t == null ? void 0 : t.baseUrl) ?? "", i = (t == null ? void 0 : t.appId) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [p, f] = A([]), [w, u] = A(!1), [b, g] = A(null), [T, I] = A(!1), N = Z(() => {
+    const h = new ie(o);
+    return new vt(h);
+  }, [o]), M = async () => {
     if (!(a != null && a.id)) {
-      y([]);
+      f([]);
       return;
     }
-    p(!0), f(null);
+    u(!0), g(null);
     try {
-      const g = await C.getTenantFeatureFlags(a.id, o);
-      y(g);
-    } catch (g) {
-      const $ = g instanceof Error ? g.message : "Failed to fetch feature flags";
-      f($), i.onError && i.onError(g instanceof Error ? g : new Error($));
+      const h = await N.getTenantFeatureFlags(a.id, i);
+      f(h);
+    } catch (h) {
+      const x = h instanceof Error ? h.message : "Failed to fetch feature flags";
+      g(x), r.onError && r.onError(h instanceof Error ? h : new Error(x));
     } finally {
-      p(!1);
+      u(!1);
     }
   };
-  re(() => {
-    if (!s || !o) return;
-    R().finally(() => I(!0));
-    const g = i.refreshInterval || 5 * 60 * 1e3, $ = setInterval(R, g);
-    return () => clearInterval($);
-  }, [a == null ? void 0 : a.id, s, o, i.refreshInterval]);
-  const x = te(() => {
-    const g = (D) => {
-      const P = m.find((O) => O.key === D);
-      return (P == null ? void 0 : P.value) === !0;
-    }, $ = (D) => m.find((P) => P.key === D), A = (D) => {
-      const P = m.find((O) => O.key === D);
-      return P ? P.value ? "enabled" : "disabled" : "not_found";
-    }, E = async () => {
-      await R();
-    }, U = !!(s && o) && (T || !(a != null && a.id));
+  X(() => {
+    if (!o || !i) return;
+    M().finally(() => I(!0));
+    const h = r.refreshInterval || 5 * 60 * 1e3, x = setInterval(M, h);
+    return () => clearInterval(x);
+  }, [a == null ? void 0 : a.id, o, i, r.refreshInterval]);
+  const P = Z(() => {
+    const h = (C) => {
+      const R = p.find(($) => $.key === C);
+      return (R == null ? void 0 : R.value) === !0;
+    }, x = (C) => p.find((R) => R.key === C), S = (C) => {
+      const R = p.find(($) => $.key === C);
+      return R ? R.value ? "enabled" : "disabled" : "not_found";
+    }, L = async () => {
+      await M();
+    }, E = !!(o && i) && (T || !(a != null && a.id));
     return {
-      featureFlags: m,
-      loading: b,
-      error: S,
-      isReady: U,
-      isEnabled: g,
-      getFlag: $,
-      getFlagState: A,
-      refresh: E
+      featureFlags: p,
+      loading: w,
+      error: b,
+      isReady: E,
+      isEnabled: h,
+      getFlag: x,
+      getFlagState: S,
+      refresh: L
     };
-  }, [m, b, S, s, o, a == null ? void 0 : a.id, T]);
-  return /* @__PURE__ */ n(Ie.Provider, { value: x, children: e });
+  }, [p, w, b, o, i, a == null ? void 0 : a.id, T]);
+  return /* @__PURE__ */ s(Ee.Provider, { value: P, children: e });
 }
-function ht() {
-  const i = se(Ie);
-  if (!i)
+function Tt() {
+  const r = oe(Ee);
+  if (!r)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
-  return i;
+  return r;
 }
-function qe() {
-  return se(Ie);
+function je() {
+  return oe(Ee);
 }
-class gt {
+class kt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1476,23 +1476,23 @@ class gt {
   async updateSubscription(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/subscriptions/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
   async changeSubscriptionPlan(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/subscriptions/${e}/plan`,
       { planId: t },
-      { headers: r }
+      { headers: n }
     )).data;
   }
   // Public endpoint - no auth required
@@ -1504,76 +1504,141 @@ class gt {
   async processPayment(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.post(
       `/subscriptions/${e}/process-payment`,
       t,
-      { headers: r }
+      { headers: n }
     )).data;
   }
 }
-const Re = he(void 0);
-function tr({ config: i = {}, children: e }) {
-  const t = Be(), r = we(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, m] = k(null), [y, b] = k(!1), [p, S] = k(null), [f, T] = k(!1), I = te(() => {
-    const x = new ne(s);
-    return new gt(x);
-  }, [s]), C = async () => {
-    if (!(o != null && o.id)) {
-      m(null);
+const Fe = ue(void 0);
+function wn({ config: r = {}, children: e }) {
+  const t = Ve(), n = Se(), o = (t == null ? void 0 : t.baseUrl) ?? "", i = (n == null ? void 0 : n.tenant) ?? null, [a, p] = A(null), [f, w] = A(!1), [u, b] = A(null), [g, T] = A(!1), I = Z(() => {
+    const P = new ie(o);
+    return new kt(P);
+  }, [o]), N = async () => {
+    if (!(i != null && i.id)) {
+      p(null);
       return;
     }
-    b(!0), S(null);
+    w(!0), b(null);
     try {
-      const x = await I.getTenantSubscriptionFeatures(o.id);
-      m(x);
-    } catch (x) {
-      const g = x instanceof Error ? x.message : "Failed to fetch subscription";
-      S(g), i.onError && i.onError(x instanceof Error ? x : new Error(g));
+      const P = await I.getTenantSubscriptionFeatures(i.id);
+      p(P);
+    } catch (P) {
+      const h = P instanceof Error ? P.message : "Failed to fetch subscription";
+      b(h), r.onError && r.onError(P instanceof Error ? P : new Error(h));
     } finally {
-      b(!1);
+      w(!1);
     }
   };
-  re(() => {
-    if (!s || (C().finally(() => T(!0)), !i.refreshInterval)) return;
-    const x = i.refreshInterval || 10 * 60 * 1e3, g = setInterval(C, x);
-    return () => clearInterval(g);
-  }, [o == null ? void 0 : o.id, s, i.refreshInterval]);
-  const R = te(() => {
-    const x = (a == null ? void 0 : a.features) || [], g = (P) => {
-      const O = x.find((c) => c.key === P);
-      return O ? O.type === "BOOLEAN" || O.type === "boolean" ? O.value === !0 : !!O.value : !1;
-    }, $ = (P) => x.find((O) => O.key === P), A = (P, O) => {
-      const c = x.find((L) => L.key === P);
-      return c ? c.value : O;
-    }, E = (P) => !a || !a.isActive ? !1 : P.includes(a.planId), U = async () => {
-      await C();
-    }, D = !!s && (f || !(o != null && o.id));
+  X(() => {
+    if (!o || (N().finally(() => T(!0)), !r.refreshInterval)) return;
+    const P = r.refreshInterval || 10 * 60 * 1e3, h = setInterval(N, P);
+    return () => clearInterval(h);
+  }, [i == null ? void 0 : i.id, o, r.refreshInterval]);
+  const M = Z(() => {
+    const P = (a == null ? void 0 : a.features) || [], h = (R) => {
+      const $ = P.find((l) => l.key === R);
+      return $ ? $.type === "BOOLEAN" || $.type === "boolean" ? $.value === !0 : !!$.value : !1;
+    }, x = (R) => P.find(($) => $.key === R), S = (R, $) => {
+      const l = P.find((D) => D.key === R);
+      return l ? l.value : $;
+    }, L = (R) => !a || !a.isActive ? !1 : R.includes(a.planId), E = async () => {
+      await N();
+    }, C = !!o && (g || !(i != null && i.id));
     return {
       subscription: a,
-      features: x,
-      loading: y,
-      error: p,
-      isReady: D,
-      isFeatureEnabled: g,
-      getFeature: $,
-      getFeatureValue: A,
-      hasAllowedPlan: E,
-      refresh: U
+      features: P,
+      loading: f,
+      error: u,
+      isReady: C,
+      isFeatureEnabled: h,
+      getFeature: x,
+      getFeatureValue: S,
+      hasAllowedPlan: L,
+      refresh: E
     };
-  }, [a, y, p, s, o == null ? void 0 : o.id, f]);
-  return /* @__PURE__ */ n(Re.Provider, { value: R, children: e });
+  }, [a, f, u, o, i == null ? void 0 : i.id, g]);
+  return /* @__PURE__ */ s(Fe.Provider, { value: M, children: e });
 }
-function pt() {
-  const i = se(Re);
-  if (i === void 0)
+function At() {
+  const r = oe(Fe);
+  if (r === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
-  return i;
+  return r;
+}
+function Ge() {
+  return oe(Fe) ?? null;
+}
+var se = /* @__PURE__ */ ((r) => (r.SUPERUSER = "SUPERUSER", r.TENANT_ADMIN = "TENANT_ADMIN", r.USER = "USER", r))(se || {});
+const Ne = {
+  publicGuest: "/",
+  publicUser: "/account",
+  publicAdmin: "/admin",
+  tenantGuest: "/login",
+  tenantUser: "/dashboard",
+  tenantAdmin: "/admin/dashboard",
+  default: "/"
+}, Ze = {
+  // Public/Landing zones
+  landing: { tenant: "forbidden", auth: "optional" },
+  publicOnly: { tenant: "forbidden", auth: "forbidden" },
+  // Auth zones
+  login: { tenant: "required", auth: "forbidden" },
+  guest: { auth: "forbidden" },
+  authenticated: { auth: "required" },
+  // Tenant zones
+  tenant: { tenant: "required" },
+  tenantOpen: { tenant: "required", auth: "optional" },
+  tenantAuth: { tenant: "required", auth: "required" },
+  // User type zones
+  user: { tenant: "required", auth: "required", userType: se.USER },
+  admin: { tenant: "required", auth: "required", userType: se.TENANT_ADMIN },
+  // Fully open
+  open: { tenant: "optional", auth: "optional" }
+}, De = ue(null);
+function bn({ config: r = {}, children: e }) {
+  const t = Z(() => {
+    const n = {
+      ...Ne,
+      ...r.zoneRoots
+    }, o = {
+      ...Ze,
+      ...r.presets
+    };
+    return {
+      zoneRoots: n,
+      presets: o,
+      loadingFallback: r.loadingFallback ?? null,
+      accessDeniedFallback: r.accessDeniedFallback ?? null,
+      onAccessDenied: r.onAccessDenied,
+      returnToParam: r.returnToParam ?? "returnTo",
+      returnToStorage: r.returnToStorage ?? "url"
+    };
+  }, [r]);
+  return /* @__PURE__ */ s(De.Provider, { value: t, children: e });
 }
-function ze() {
-  return se(Re) ?? null;
+function Sn() {
+  const r = oe(De);
+  if (!r)
+    throw new Error("useRouting must be used within a RoutingProvider");
+  return r;
 }
-var fe = /* @__PURE__ */ ((i) => (i.SUPERUSER = "SUPERUSER", i.TENANT_ADMIN = "TENANT_ADMIN", i.USER = "USER", i))(fe || {});
-const $e = () => /* @__PURE__ */ d(
+function xt() {
+  const r = oe(De);
+  return r || {
+    zoneRoots: Ne,
+    presets: Ze,
+    loadingFallback: null,
+    accessDeniedFallback: null,
+    onAccessDenied: void 0,
+    returnToParam: "returnTo",
+    returnToStorage: "url"
+  };
+}
+const qe = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1589,10 +1654,10 @@ const $e = () => /* @__PURE__ */ d(
       margin: "20px 0"
     },
     children: [
-      /* @__PURE__ */ n("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "🔒" }),
-      /* @__PURE__ */ n("h3", { style: { color: "#495057", marginBottom: "10px" }, children: "Access Required" }),
-      /* @__PURE__ */ n("p", { style: { color: "#6c757d", fontSize: "14px", marginBottom: "15px" }, children: "You need to be signed in to view this content." }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "🔒" }),
+      /* @__PURE__ */ s("h3", { style: { color: "#495057", marginBottom: "10px" }, children: "Access Required" }),
+      /* @__PURE__ */ s("p", { style: { color: "#6c757d", fontSize: "14px", marginBottom: "15px" }, children: "You need to be signed in to view this content." }),
+      /* @__PURE__ */ s(
         "button",
         {
           style: {
@@ -1610,8 +1675,8 @@ const $e = () => /* @__PURE__ */ d(
       )
     ]
   }
-), He = ({
-  userType: i,
+), Oe = ({
+  userType: r,
   minUserType: e,
   missingPermissions: t
 }) => /* @__PURE__ */ d(
@@ -1630,57 +1695,57 @@ const $e = () => /* @__PURE__ */ d(
       margin: "20px 0"
     },
     children: [
-      /* @__PURE__ */ n("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
-      /* @__PURE__ */ n("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && i ? /* @__PURE__ */ d(j, { children: [
+      /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
+      /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
+      e && r ? /* @__PURE__ */ d(_, { children: [
         /* @__PURE__ */ d("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
-          /* @__PURE__ */ n("strong", { children: e }),
+          /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
         /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
-          /* @__PURE__ */ n("strong", { children: i })
+          /* @__PURE__ */ s("strong", { children: r })
         ] })
-      ] }) : /* @__PURE__ */ d(j, { children: [
-        /* @__PURE__ */ n("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
+      ] }) : /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
         t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
-          /* @__PURE__ */ n("strong", { children: t.join(", ") })
+          /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
       ] })
     ]
   }
-), ft = (i, e) => {
+), Pt = (r, e) => {
   const t = {
-    [fe.USER]: 1,
-    [fe.TENANT_ADMIN]: 2,
-    [fe.SUPERUSER]: 3
+    [se.USER]: 1,
+    [se.TENANT_ADMIN]: 2,
+    [se.SUPERUSER]: 3
   };
-  return t[i] >= t[e];
+  return t[r] >= t[e];
 };
-function rr({
-  children: i,
+function vn({
+  children: r,
   fallback: e,
   minUserType: t,
-  requiredPermissions: r,
-  requireAllPermissions: s = !1
+  requiredPermissions: n,
+  requireAllPermissions: o = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: m, hasAnyPermission: y, hasAllPermissions: b } = oe();
-  if (!o())
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n($e, {}) });
-  const p = a.getUser();
-  if (!p)
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n($e, {}) });
-  if (t && !ft(p.userType, t))
-    return /* @__PURE__ */ n(He, { userType: p.userType, minUserType: t });
-  if (r && r.length > 0 && !(s ? b(r) : y(r))) {
-    const f = r.filter((T) => !m(T)).map((T) => typeof T == "string" ? T : T.name);
-    return /* @__PURE__ */ n(He, { missingPermissions: f });
-  }
-  return /* @__PURE__ */ n(j, { children: i });
+  const { hasValidSession: i, sessionManager: a, hasPermission: p, hasAnyPermission: f, hasAllPermissions: w } = le();
+  if (!i())
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(qe, {}) });
+  const u = a.getUser();
+  if (!u)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(qe, {}) });
+  if (t && !Pt(u.userType, t))
+    return /* @__PURE__ */ s(Oe, { userType: u.userType, minUserType: t });
+  if (n && n.length > 0 && !(o ? w(n) : f(n))) {
+    const g = n.filter((T) => !p(T)).map((T) => typeof T == "string" ? T : T.name);
+    return /* @__PURE__ */ s(Oe, { missingPermissions: g });
+  }
+  return /* @__PURE__ */ s(_, { children: r });
 }
-const mt = ({ redirectPath: i }) => /* @__PURE__ */ n(
+const Rt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1704,23 +1769,23 @@ const mt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
-          /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
+          /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
           /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
-            i,
+            r,
             "..."
           ] })
         ]
       }
     )
   }
-), Ne = ({
-  userType: i,
+), ze = ({
+  userType: r,
   requiredUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ n(
+}) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1744,62 +1809,66 @@ const mt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && i ? /* @__PURE__ */ d(j, { children: [
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
+          e && r ? /* @__PURE__ */ d(_, { children: [
             /* @__PURE__ */ d("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
-              /* @__PURE__ */ n("strong", { children: e }),
+              /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
             /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
-              /* @__PURE__ */ n("strong", { children: i })
+              /* @__PURE__ */ s("strong", { children: r })
             ] })
-          ] }) : /* @__PURE__ */ d(j, { children: [
-            /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
+          ] }) : /* @__PURE__ */ d(_, { children: [
+            /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
             t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
-              /* @__PURE__ */ n("strong", { children: t.join(", ") })
+              /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
           ] })
         ]
       }
     )
   }
-), yt = (i, e) => i === e;
-function nr({
-  children: i,
+), It = (r, e) => r === e;
+function Tn({
+  children: r,
   redirectTo: e = "/login",
   requiredUserType: t,
-  requiredPermissions: r,
-  requireAllPermissions: s = !1,
-  fallback: o
+  requiredPermissions: n,
+  requireAllPermissions: o = !1,
+  fallback: i
 }) {
-  const { hasValidSession: a, sessionManager: m, hasPermission: y, hasAnyPermission: b, hasAllPermissions: p } = oe(), S = Te();
-  if (!a())
-    return o ? /* @__PURE__ */ n(j, { children: o }) : /* @__PURE__ */ d(j, { children: [
-      /* @__PURE__ */ n(mt, { redirectPath: e }),
-      /* @__PURE__ */ n(me, { to: e, state: { from: S.pathname }, replace: !0 })
+  const { hasValidSession: a, sessionManager: p, hasPermission: f, hasAnyPermission: w, hasAllPermissions: u } = le(), b = be();
+  if (X(() => {
+    process.env.NODE_ENV === "development" && console.warn(
+      "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
+    );
+  }, []), !a())
+    return i ? /* @__PURE__ */ s(_, { children: i }) : /* @__PURE__ */ d(_, { children: [
+      /* @__PURE__ */ s(Rt, { redirectPath: e }),
+      /* @__PURE__ */ s(me, { to: e, state: { from: b.pathname }, replace: !0 })
     ] });
-  const f = m.getUser();
-  if (!f)
-    return /* @__PURE__ */ n(me, { to: e, state: { from: S.pathname }, replace: !0 });
-  if (t && !yt(f.userType, t))
-    return /* @__PURE__ */ n(
-      Ne,
+  const g = p.getUser();
+  if (!g)
+    return /* @__PURE__ */ s(me, { to: e, state: { from: b.pathname }, replace: !0 });
+  if (t && !It(g.userType, t))
+    return /* @__PURE__ */ s(
+      ze,
       {
-        userType: f.userType,
+        userType: g.userType,
         requiredUserType: t
       }
     );
-  if (r && r.length > 0 && !(s ? p(r) : b(r))) {
-    const I = r.filter((C) => !y(C)).map((C) => typeof C == "string" ? C : C.name);
-    return /* @__PURE__ */ n(Ne, { missingPermissions: I });
+  if (n && n.length > 0 && !(o ? u(n) : w(n))) {
+    const I = n.filter((N) => !f(N)).map((N) => typeof N == "string" ? N : N.name);
+    return /* @__PURE__ */ s(ze, { missingPermissions: I });
   }
-  return /* @__PURE__ */ n(j, { children: i });
+  return /* @__PURE__ */ s(_, { children: r });
 }
-const wt = ({ redirectPath: i }) => /* @__PURE__ */ n(
+const Mt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1823,12 +1892,12 @@ const wt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
-          /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
+          /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
           /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
-            i,
+            r,
             "..."
           ] })
         ]
@@ -1836,14 +1905,18 @@ const wt = ({ redirectPath: i }) => /* @__PURE__ */ n(
     )
   }
 );
-function sr({ children: i, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = ce(), a = Te();
-  return s || o ? null : r ? /* @__PURE__ */ n(j, { children: i }) : t ? /* @__PURE__ */ n(j, { children: t }) : /* @__PURE__ */ d(j, { children: [
-    /* @__PURE__ */ n(wt, { redirectPath: e }),
-    /* @__PURE__ */ n(me, { to: e, state: { from: a.pathname }, replace: !0 })
+function kn({ children: r, redirectTo: e = "/", fallback: t }) {
+  const { tenant: n, isLoading: o, error: i } = ge(), a = be();
+  return X(() => {
+    process.env.NODE_ENV === "development" && console.warn(
+      "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
+    );
+  }, []), o || i ? null : n ? /* @__PURE__ */ s(_, { children: r }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Mt, { redirectPath: e }),
+    /* @__PURE__ */ s(me, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const bt = ({ redirectPath: i }) => /* @__PURE__ */ n(
+const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1867,12 +1940,12 @@ const bt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           maxWidth: "400px"
         },
         children: [
-          /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
-          /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
-          /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
+          /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
+          /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
+          /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
           /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
-            i,
+            r,
             "..."
           ] })
         ]
@@ -1880,14 +1953,125 @@ const bt = ({ redirectPath: i }) => /* @__PURE__ */ n(
     )
   }
 );
-function ir({ children: i, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = ce(), a = Te();
-  return s || o ? null : r ? t ? /* @__PURE__ */ n(j, { children: t }) : /* @__PURE__ */ d(j, { children: [
-    /* @__PURE__ */ n(bt, { redirectPath: e }),
-    /* @__PURE__ */ n(me, { to: e, state: { from: a.pathname }, replace: !0 })
-  ] }) : /* @__PURE__ */ n(j, { children: i });
+function An({ children: r, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: n, isLoading: o, error: i } = ge(), a = be();
+  return X(() => {
+    process.env.NODE_ENV === "development" && console.warn(
+      "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
+    );
+  }, []), o || i ? null : n ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Lt, { redirectPath: e }),
+    /* @__PURE__ */ s(me, { to: e, state: { from: a.pathname }, replace: !0 })
+  ] }) : /* @__PURE__ */ s(_, { children: r });
+}
+function Et(r, e) {
+  return e ? r ? Array.isArray(e) ? e.includes(r) : r === e : !1 : !0;
 }
-const St = () => /* @__PURE__ */ d(
+function _e(r, e) {
+  return !r || r === "optional" ? "skip" : r === "required" ? e ? "pass" : "fail" : r === "forbidden" ? e ? "fail" : "pass" : "skip";
+}
+function Ft(r, e) {
+  return _e(r.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : _e(r.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : r.userType && e.isAuthenticated && !Et(e.userType, r.userType) ? "wrong_user_type" : r.permissions && r.permissions.length > 0 && !(r.requireAllPermissions !== !1 ? (i) => i.every((a) => e.permissions.includes(a)) : (i) => i.some((a) => e.permissions.includes(a)))(r.permissions) ? "missing_permissions" : null;
+}
+function Nt(r, e) {
+  return r.hasTenant ? r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
+}
+function Dt(r, e, t, n, o) {
+  if (!e || o !== "url")
+    return r;
+  const i = typeof e == "string" ? e : t, a = r.includes("?") ? "&" : "?";
+  return `${r}${a}${n}=${encodeURIComponent(i)}`;
+}
+function Ct(r, e, t) {
+  if (!r || t === "url") return;
+  const n = typeof r == "string" ? r : e, o = "zone_return_to";
+  t === "session" ? sessionStorage.setItem(o, n) : t === "local" && localStorage.setItem(o, n);
+}
+const ae = ({
+  children: r,
+  preset: e,
+  tenant: t,
+  auth: n,
+  userType: o,
+  requiredPermissions: i,
+  requireAllPermissions: a = !0,
+  returnTo: p,
+  onAccessDenied: f,
+  redirectTo: w,
+  loadingFallback: u,
+  accessDeniedFallback: b
+}) => {
+  const g = be(), { isAuthenticated: T, isAuthInitializing: I, currentUser: N, userPermissions: M } = le(), { tenant: P, isTenantLoading: h } = he(), x = xt(), S = Z(() => {
+    if (e)
+      return x.presets[e];
+  }, [e, x.presets]), L = Z(
+    () => ({
+      tenant: t ?? (S == null ? void 0 : S.tenant),
+      auth: n ?? (S == null ? void 0 : S.auth),
+      userType: o ?? (S == null ? void 0 : S.userType),
+      permissions: i ?? (S == null ? void 0 : S.requiredPermissions),
+      requireAllPermissions: a
+    }),
+    [t, n, o, i, S, a]
+  ), E = Z(
+    () => ({
+      hasTenant: !!P,
+      isAuthenticated: T,
+      userType: N == null ? void 0 : N.userType,
+      permissions: M,
+      isLoading: I || h
+    }),
+    [
+      P,
+      T,
+      N == null ? void 0 : N.userType,
+      M,
+      I,
+      h
+    ]
+  ), C = Z(() => E.isLoading ? null : Ft(L, E), [L, E]), R = Z(() => C ? w || Nt(E, x.zoneRoots) : null, [C, w, E, x.zoneRoots]), $ = Z(() => !C || !R ? null : {
+    type: C,
+    required: {
+      tenant: L.tenant,
+      auth: L.auth,
+      userType: L.userType,
+      permissions: L.permissions
+    },
+    current: {
+      hasTenant: E.hasTenant,
+      isAuthenticated: E.isAuthenticated,
+      userType: E.userType,
+      permissions: E.permissions
+    },
+    redirectTo: R
+  }, [C, R, L, E]);
+  if (X(() => {
+    $ && (f ? f($) : x.onAccessDenied && x.onAccessDenied($));
+  }, [$, f, x]), X(() => {
+    $ && p && Ct(p, g.pathname + g.search, x.returnToStorage);
+  }, [
+    $,
+    p,
+    g.pathname,
+    g.search,
+    x.returnToStorage
+  ]), E.isLoading)
+    return /* @__PURE__ */ s(_, { children: u ?? x.loadingFallback ?? null });
+  if ($ && R) {
+    const l = b ?? x.accessDeniedFallback;
+    if (l)
+      return /* @__PURE__ */ s(_, { children: l });
+    const D = Dt(
+      R,
+      p,
+      g.pathname + g.search,
+      x.returnToParam,
+      x.returnToStorage
+    );
+    return /* @__PURE__ */ s(me, { to: D, replace: !0 });
+  }
+  return /* @__PURE__ */ s(_, { children: r });
+}, xn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", ...r }), Pn = (r) => /* @__PURE__ */ s(ae, { tenant: "forbidden", ...r }), Rn = (r) => /* @__PURE__ */ s(ae, { auth: "required", ...r }), In = (r) => /* @__PURE__ */ s(ae, { auth: "forbidden", ...r }), Mn = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.TENANT_ADMIN, ...r }), Ln = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.USER, ...r }), En = (r) => /* @__PURE__ */ s(ae, { tenant: "optional", auth: "optional", ...r }), Fn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "required", ...r }), Nn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "optional", ...r }), Dn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "forbidden", ...r }), Ut = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1899,19 +2083,19 @@ const St = () => /* @__PURE__ */ d(
       color: "#dc2626"
     },
     children: [
-      /* @__PURE__ */ n("h3", { style: { margin: "0 0 1rem 0" }, children: "🔒 Subscription Required" }),
-      /* @__PURE__ */ n("p", { style: { margin: 0 }, children: "This feature requires a higher subscription plan. Please upgrade your plan to access this content." })
+      /* @__PURE__ */ s("h3", { style: { margin: "0 0 1rem 0" }, children: "🔒 Subscription Required" }),
+      /* @__PURE__ */ s("p", { style: { margin: 0 }, children: "This feature requires a higher subscription plan. Please upgrade your plan to access this content." })
     ]
   }
 );
-function or({
-  children: i,
-  fallback: e = /* @__PURE__ */ n(St, {}),
+function Cn({
+  children: r,
+  fallback: e = /* @__PURE__ */ s(Ut, {}),
   allowedPlans: t,
-  requiredFeature: r
+  requiredFeature: n
 }) {
-  const { subscription: s, hasAllowedPlan: o, isFeatureEnabled: a, loading: m } = pt();
-  return m ? /* @__PURE__ */ n(
+  const { subscription: o, hasAllowedPlan: i, isFeatureEnabled: a, loading: p } = At();
+  return p ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -1921,9 +2105,9 @@ function or({
       },
       children: "Loading subscription..."
     }
-  ) : s ? s.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ n(j, { children: e }) : r && !a(r) ? /* @__PURE__ */ n(j, { children: e }) : /* @__PURE__ */ n(j, { children: i }) : /* @__PURE__ */ n(j, { children: e }) : /* @__PURE__ */ n(j, { children: e });
+  ) : o ? o.isActive ? t && t.length > 0 && !i(t) ? /* @__PURE__ */ s(_, { children: e }) : n && !a(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: r }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const vt = ({ flagName: i }) => /* @__PURE__ */ d(
+const $t = ({ flagName: r }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1940,19 +2124,19 @@ const vt = ({ flagName: i }) => /* @__PURE__ */ d(
       color: "#6c757d"
     },
     children: [
-      /* @__PURE__ */ n("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
-      /* @__PURE__ */ n("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
+      /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
+      /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
       /* @__PURE__ */ d("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
-        i,
+        r,
         '" is disabled'
       ] })
     ]
   }
 );
-function ar({ name: i, children: e, fallback: t }) {
-  const { isEnabled: r, loading: s } = ht();
-  return s ? /* @__PURE__ */ n(
+function Un({ name: r, children: e, fallback: t }) {
+  const { isEnabled: n, loading: o } = Tt();
+  return o ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -1965,9 +2149,9 @@ function ar({ name: i, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : r(i) ? /* @__PURE__ */ n(j, { children: e }) : /* @__PURE__ */ n(j, { children: t || /* @__PURE__ */ n(vt, { flagName: i }) });
+  ) : n(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s($t, { flagName: r }) });
 }
-const kt = () => /* @__PURE__ */ d(
+const Ht = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -1980,11 +2164,11 @@ const kt = () => /* @__PURE__ */ d(
     strokeLinejoin: "round",
     style: { flexShrink: 0 },
     children: [
-      /* @__PURE__ */ n("path", { d: "M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" }),
-      /* @__PURE__ */ n("circle", { cx: "12", cy: "12", r: "3" })
+      /* @__PURE__ */ s("path", { d: "M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" }),
+      /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Tt = () => /* @__PURE__ */ d(
+), Bt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -1997,14 +2181,14 @@ const kt = () => /* @__PURE__ */ d(
     strokeLinejoin: "round",
     style: { flexShrink: 0 },
     children: [
-      /* @__PURE__ */ n("path", { d: "M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" }),
-      /* @__PURE__ */ n("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
+      /* @__PURE__ */ s("path", { d: "M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" }),
+      /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), xt = {
-  showPassword: /* @__PURE__ */ n(kt, {}),
-  hidePassword: /* @__PURE__ */ n(Tt, {})
-}, At = {
+), qt = {
+  showPassword: /* @__PURE__ */ s(Ht, {}),
+  hidePassword: /* @__PURE__ */ s(Bt, {})
+}, Ot = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2018,7 +2202,7 @@ const kt = () => /* @__PURE__ */ d(
   magicLinkLink: "Use Magic Link",
   errorMessage: "Invalid credentials",
   loadingText: "Signing in..."
-}, Pt = {
+}, zt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2125,133 +2309,133 @@ const kt = () => /* @__PURE__ */ d(
     fontSize: "0.875rem"
   }
 };
-function lr({
-  copy: i = {},
+function $n({
+  copy: r = {},
   styles: e = {},
   icons: t = {},
-  onSuccess: r,
-  onError: s,
-  onForgotPassword: o,
+  onSuccess: n,
+  onError: o,
+  onForgotPassword: i,
   onSignupClick: a,
-  onMagicLinkClick: m,
-  showForgotPassword: y = !0,
-  showSignupLink: b = !0,
-  showMagicLinkOption: p = !0,
-  className: S
+  onMagicLinkClick: p,
+  showForgotPassword: f = !0,
+  showSignupLink: w = !0,
+  showMagicLinkOption: u = !0,
+  className: b
 }) {
-  const [f, T] = k(""), [I, C] = k(""), [R, x] = k(!1), [g, $] = k(!1), [A, E] = k(""), [U, D] = k({}), { login: P } = oe(), { tenant: O } = ce(), c = { ...At, ...i }, L = { ...Pt, ...e }, F = { ...xt, ...t }, l = () => {
-    const u = {};
-    return f.trim() || (u.username = !0), I.trim() || (u.password = !0), D(u), Object.keys(u).length === 0;
-  }, H = async (u) => {
-    if (u.preventDefault(), !!l()) {
-      if (!(O != null && O.id)) {
-        E("Tenant not found");
+  const [g, T] = A(""), [I, N] = A(""), [M, P] = A(!1), [h, x] = A(!1), [S, L] = A(""), [E, C] = A({}), { login: R } = le(), { tenant: $ } = ge(), l = { ...Ot, ...r }, D = { ...zt, ...e }, U = { ...qt, ...t }, c = () => {
+    const m = {};
+    return g.trim() || (m.username = !0), I.trim() || (m.password = !0), C(m), Object.keys(m).length === 0;
+  }, H = async (m) => {
+    if (m.preventDefault(), !!c()) {
+      if (!($ != null && $.id)) {
+        L("Tenant not found");
         return;
       }
-      $(!0), E("");
+      x(!0), L("");
       try {
-        const w = await P({
-          username: f,
+        const v = await R({
+          username: g,
           password: I
           // tenantId inferred from context automatically
         });
-        r == null || r(w);
-      } catch (w) {
-        const _ = w.message || c.errorMessage;
-        E(_), s == null || s(_);
+        n == null || n(v);
+      } catch (v) {
+        const G = v.message || l.errorMessage;
+        L(G), o == null || o(G);
       } finally {
-        $(!1);
+        x(!1);
       }
     }
-  }, M = (u) => ({
-    ...L.input,
-    ...U[u] ? L.inputError : {}
-  }), h = () => ({
-    ...L.button,
-    ...g ? L.buttonLoading : {},
-    ...!f || !I || g ? L.buttonDisabled : {}
+  }, F = (m) => ({
+    ...D.input,
+    ...E[m] ? D.inputError : {}
+  }), y = () => ({
+    ...D.button,
+    ...h ? D.buttonLoading : {},
+    ...!g || !I || h ? D.buttonDisabled : {}
   });
-  return /* @__PURE__ */ d("div", { className: S, style: L.container, children: [
-    /* @__PURE__ */ n("h2", { style: L.title, children: c.title }),
-    /* @__PURE__ */ d("form", { onSubmit: H, style: L.form, children: [
-      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: L.label, children: c.usernameLabel }),
-        /* @__PURE__ */ n(
+  return /* @__PURE__ */ d("div", { className: b, style: D.container, children: [
+    /* @__PURE__ */ s("h2", { style: D.title, children: l.title }),
+    /* @__PURE__ */ d("form", { onSubmit: H, style: D.form, children: [
+      /* @__PURE__ */ d("div", { style: D.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: D.label, children: l.usernameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "username",
             name: "username",
             type: "text",
-            value: f,
-            onChange: (u) => {
-              T(u.target.value), U.username && D((w) => ({ ...w, username: !1 }));
+            value: g,
+            onChange: (m) => {
+              T(m.target.value), E.username && C((v) => ({ ...v, username: !1 }));
             },
-            placeholder: c.usernamePlaceholder,
-            style: M("username"),
-            disabled: g
+            placeholder: l.usernamePlaceholder,
+            style: F("username"),
+            disabled: h
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: L.label, children: c.passwordLabel }),
-        /* @__PURE__ */ d("div", { style: L.inputContainer, children: [
-          /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: D.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: D.label, children: l.passwordLabel }),
+        /* @__PURE__ */ d("div", { style: D.inputContainer, children: [
+          /* @__PURE__ */ s(
             "input",
             {
               id: "password",
               name: "password",
-              type: R ? "text" : "password",
+              type: M ? "text" : "password",
               value: I,
-              onChange: (u) => {
-                C(u.target.value), U.password && D((w) => ({ ...w, password: !1 }));
+              onChange: (m) => {
+                N(m.target.value), E.password && C((v) => ({ ...v, password: !1 }));
               },
-              placeholder: c.passwordPlaceholder,
+              placeholder: l.passwordPlaceholder,
               style: {
-                ...M("password"),
+                ...F("password"),
                 paddingRight: "2.5rem"
                 // Make room for the icon
               },
-              disabled: g
+              disabled: h
             }
           ),
-          /* @__PURE__ */ n(
+          /* @__PURE__ */ s(
             "button",
             {
               type: "button",
-              onClick: () => x(!R),
-              style: L.passwordToggle,
-              disabled: g,
-              "aria-label": R ? "Hide password" : "Show password",
-              children: R ? F.hidePassword : F.showPassword
+              onClick: () => P(!M),
+              style: D.passwordToggle,
+              disabled: h,
+              "aria-label": M ? "Hide password" : "Show password",
+              children: M ? U.hidePassword : U.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !f || !I || g, style: h(), children: g ? c.loadingText : c.submitButton }),
-      A && /* @__PURE__ */ n("div", { style: L.errorText, children: A })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !I || h, style: y(), children: h ? l.loadingText : l.submitButton }),
+      S && /* @__PURE__ */ s("div", { style: D.errorText, children: S })
     ] }),
-    (y || b || p) && /* @__PURE__ */ d("div", { style: L.linkContainer, children: [
-      p && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: L.divider, children: [
-          c.magicLinkText,
+    (f || w || u) && /* @__PURE__ */ d("div", { style: D.linkContainer, children: [
+      u && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: D.divider, children: [
+          l.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: m, style: L.link, children: c.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: p, style: D.link, children: l.magicLinkLink })
       ] }),
-      p && (y || b) && /* @__PURE__ */ n("div", { style: L.divider, children: "•" }),
-      y && /* @__PURE__ */ n("a", { onClick: o, style: L.link, children: c.forgotPasswordLink }),
-      y && b && /* @__PURE__ */ n("div", { style: L.divider, children: "•" }),
-      b && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: L.divider, children: [
-          c.signupText,
+      u && (f || w) && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
+      f && /* @__PURE__ */ s("a", { onClick: i, style: D.link, children: l.forgotPasswordLink }),
+      f && w && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
+      w && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: D.divider, children: [
+          l.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: a, style: L.link, children: c.signupLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: D.link, children: l.signupLink })
       ] })
     ] })
   ] });
 }
-const Mt = {
+const _t = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2277,7 +2461,7 @@ const Mt = {
   passwordMismatchError: "Passwords do not match",
   isAdminLabel: "Create new organization",
   isAdminDescription: "Check this if you want to create a new organization"
-}, It = {
+}, Wt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2376,138 +2560,138 @@ const Mt = {
     fontSize: "0.875rem"
   }
 };
-function cr({
-  copy: i = {},
+function Hn({
+  copy: r = {},
   styles: e = {},
   signupType: t = "user",
-  onSuccess: r,
-  onError: s,
-  onLoginClick: o,
+  onSuccess: n,
+  onError: o,
+  onLoginClick: i,
   onMagicLinkClick: a,
-  showLoginLink: m = !0,
-  showMagicLinkOption: y = !0,
-  className: b
+  showLoginLink: p = !0,
+  showMagicLinkOption: f = !0,
+  className: w
 }) {
-  const [p, S] = k(""), [f, T] = k(""), [I, C] = k(""), [R, x] = k(""), [g, $] = k(""), [A, E] = k(""), [U, D] = k(""), [P, O] = k(!1), [c, L] = k(""), [F, l] = k({}), { signup: H, signupTenantAdmin: M } = oe(), { tenant: h } = ce(), u = { ...Mt, ...i }, w = { ...It, ...e }, _ = () => {
-    const v = {};
-    return p.trim() || (v.name = !0), !I.trim() && !R.trim() && (v.email = !0, v.phoneNumber = !0), g.trim() || (v.password = !0), A.trim() || (v.confirmPassword = !0), t === "tenant" && !U.trim() && (v.tenantName = !0), l(v), Object.keys(v).length === 0;
-  }, K = async (v) => {
-    if (v.preventDefault(), !!_()) {
-      if (g !== A) {
-        L(u.passwordMismatchError), l({ confirmPassword: !0 });
+  const [u, b] = A(""), [g, T] = A(""), [I, N] = A(""), [M, P] = A(""), [h, x] = A(""), [S, L] = A(""), [E, C] = A(""), [R, $] = A(!1), [l, D] = A(""), [U, c] = A({}), { signup: H, signupTenantAdmin: F } = le(), { tenant: y } = ge(), m = { ..._t, ...r }, v = { ...Wt, ...e }, G = () => {
+    const k = {};
+    return u.trim() || (k.name = !0), !I.trim() && !M.trim() && (k.email = !0, k.phoneNumber = !0), h.trim() || (k.password = !0), S.trim() || (k.confirmPassword = !0), t === "tenant" && !E.trim() && (k.tenantName = !0), c(k), Object.keys(k).length === 0;
+  }, J = async (k) => {
+    if (k.preventDefault(), !!G()) {
+      if (h !== S) {
+        D(m.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(h != null && h.id)) {
-        L("Tenant not found");
+      if (t === "user" && !(y != null && y.id)) {
+        D("Tenant not found");
         return;
       }
-      O(!0), L("");
+      $(!0), D("");
       try {
-        let J;
-        t === "tenant" ? J = await M({
+        let K;
+        t === "tenant" ? K = await F({
           email: I || void 0,
-          phoneNumber: R || void 0,
-          name: p,
-          password: g,
-          tenantName: U,
-          lastName: f || void 0
-        }) : J = await H({
+          phoneNumber: M || void 0,
+          name: u,
+          password: h,
+          tenantName: E,
+          lastName: g || void 0
+        }) : K = await H({
           email: I || void 0,
-          phoneNumber: R || void 0,
-          name: p,
-          password: g,
-          tenantId: h.id,
-          lastName: f || void 0
-        }), r == null || r(J);
-      } catch (J) {
-        const ae = J.message || u.errorMessage;
-        L(ae), s == null || s(ae);
+          phoneNumber: M || void 0,
+          name: u,
+          password: h,
+          tenantId: y.id,
+          lastName: g || void 0
+        }), n == null || n(K);
+      } catch (K) {
+        const ce = K.message || m.errorMessage;
+        D(ce), o == null || o(ce);
       } finally {
-        O(!1);
+        $(!1);
       }
     }
-  }, B = (v) => ({
-    ...w.input,
-    ...F[v] ? w.inputError : {}
-  }), q = () => ({
-    ...w.button,
-    ...P ? w.buttonLoading : {},
-    ...!p || !I && !R || !g || !A || P || t === "tenant" && !U ? w.buttonDisabled : {}
-  }), V = p && (I || R) && g && A && (t === "user" || U);
-  return /* @__PURE__ */ d("div", { className: b, style: w.container, children: [
-    /* @__PURE__ */ n("h2", { style: w.title, children: u.title }),
-    /* @__PURE__ */ d("form", { onSubmit: K, style: w.form, children: [
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.nameLabel }),
-        /* @__PURE__ */ n(
+  }, q = (k) => ({
+    ...v.input,
+    ...U[k] ? v.inputError : {}
+  }), O = () => ({
+    ...v.button,
+    ...R ? v.buttonLoading : {},
+    ...!u || !I && !M || !h || !S || R || t === "tenant" && !E ? v.buttonDisabled : {}
+  }), V = u && (I || M) && h && S && (t === "user" || E);
+  return /* @__PURE__ */ d("div", { className: w, style: v.container, children: [
+    /* @__PURE__ */ s("h2", { style: v.title, children: m.title }),
+    /* @__PURE__ */ d("form", { onSubmit: J, style: v.form, children: [
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.nameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "name",
             name: "name",
             type: "text",
-            value: p,
-            onChange: (v) => {
-              S(v.target.value), F.name && l((J) => ({ ...J, name: !1 }));
+            value: u,
+            onChange: (k) => {
+              b(k.target.value), U.name && c((K) => ({ ...K, name: !1 }));
             },
-            placeholder: u.namePlaceholder,
-            style: B("name"),
-            disabled: P
+            placeholder: m.namePlaceholder,
+            style: q("name"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.lastNameLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.lastNameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: f,
-            onChange: (v) => T(v.target.value),
-            placeholder: u.lastNamePlaceholder,
-            style: w.input,
-            disabled: P
+            value: g,
+            onChange: (k) => T(k.target.value),
+            placeholder: m.lastNamePlaceholder,
+            style: v.input,
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.emailLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.emailLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
             value: I,
-            onChange: (v) => {
-              C(v.target.value), F.email && l((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+            onChange: (k) => {
+              N(k.target.value), U.email && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
             },
-            placeholder: u.emailPlaceholder,
-            style: B("email"),
-            disabled: P
+            placeholder: m.emailPlaceholder,
+            style: q("email"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.phoneNumberLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.phoneNumberLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "phoneNumber",
             name: "phoneNumber",
             type: "tel",
-            value: R,
-            onChange: (v) => {
-              x(v.target.value), F.phoneNumber && l((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+            value: M,
+            onChange: (k) => {
+              P(k.target.value), U.phoneNumber && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
             },
-            placeholder: u.phoneNumberPlaceholder,
-            style: B("phoneNumber"),
-            disabled: P
+            placeholder: m.phoneNumberPlaceholder,
+            style: q("phoneNumber"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s(
         "div",
         {
           style: {
@@ -2519,83 +2703,83 @@ function cr({
           children: "At least one contact method (email or phone) is required"
         }
       ),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.passwordLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.passwordLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "password",
             name: "password",
             type: "password",
-            value: g,
-            onChange: (v) => {
-              $(v.target.value), F.password && l((J) => ({ ...J, password: !1 }));
+            value: h,
+            onChange: (k) => {
+              x(k.target.value), U.password && c((K) => ({ ...K, password: !1 }));
             },
-            placeholder: u.passwordPlaceholder,
-            style: B("password"),
-            disabled: P
+            placeholder: m.passwordPlaceholder,
+            style: q("password"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.confirmPasswordLabel }),
-        /* @__PURE__ */ n(
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.confirmPasswordLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: A,
-            onChange: (v) => {
-              E(v.target.value), F.confirmPassword && l((J) => ({ ...J, confirmPassword: !1 })), c === u.passwordMismatchError && L("");
+            value: S,
+            onChange: (k) => {
+              L(k.target.value), U.confirmPassword && c((K) => ({ ...K, confirmPassword: !1 })), l === m.passwordMismatchError && D("");
             },
-            placeholder: u.confirmPasswordPlaceholder,
-            style: B("confirmPassword"),
-            disabled: P
+            placeholder: m.confirmPasswordPlaceholder,
+            style: q("confirmPassword"),
+            disabled: R
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ d("div", { style: w.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: w.label, children: u.tenantNameLabel }),
-        /* @__PURE__ */ n(
+      t === "tenant" && /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.tenantNameLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
-            value: U,
-            onChange: (v) => {
-              D(v.target.value), F.tenantName && l((J) => ({ ...J, tenantName: !1 }));
+            value: E,
+            onChange: (k) => {
+              C(k.target.value), U.tenantName && c((K) => ({ ...K, tenantName: !1 }));
             },
-            placeholder: u.tenantNamePlaceholder,
-            style: B("tenantName"),
-            disabled: P
+            placeholder: m.tenantNamePlaceholder,
+            style: q("tenantName"),
+            disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !V || P, style: q(), children: P ? u.loadingText : u.submitButton }),
-      c && /* @__PURE__ */ n("div", { style: w.errorText, children: c })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !V || R, style: O(), children: R ? m.loadingText : m.submitButton }),
+      l && /* @__PURE__ */ s("div", { style: v.errorText, children: l })
     ] }),
-    (m || y) && /* @__PURE__ */ d("div", { style: w.linkContainer, children: [
-      y && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: w.divider, children: [
-          u.magicLinkText,
+    (p || f) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
+      f && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: v.divider, children: [
+          m.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: a, style: w.link, children: u.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: m.magicLinkLink })
       ] }),
-      y && m && /* @__PURE__ */ n("div", { style: w.divider, children: "•" }),
-      m && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: w.divider, children: [
-          u.loginText,
+      f && p && /* @__PURE__ */ s("div", { style: v.divider, children: "•" }),
+      p && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: v.divider, children: [
+          m.loginText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: o, style: w.link, children: u.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: v.link, children: m.loginLink })
       ] })
     ] })
   ] });
 }
-const Rt = {
+const Vt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -2613,7 +2797,7 @@ const Rt = {
   loadingText: "Sending magic link...",
   verifyingText: "Verifying magic link...",
   description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you."
-}, Lt = {
+}, jt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2716,105 +2900,105 @@ const Rt = {
     fontSize: "0.875rem"
   }
 };
-function dr({
-  copy: i = {},
+function Bn({
+  copy: r = {},
   styles: e = {},
   onSuccess: t,
-  onError: r,
-  onLoginClick: s,
-  onSignupClick: o,
+  onError: n,
+  onLoginClick: o,
+  onSignupClick: i,
   showTraditionalLinks: a = !0,
-  className: m,
-  verifyToken: y,
-  frontendUrl: b
+  className: p,
+  verifyToken: f,
+  frontendUrl: w
 }) {
-  const [p, S] = k(""), [f, T] = k(""), [I, C] = k(""), [R, x] = k(!1), [g, $] = k(!1), [A, E] = k(""), [U, D] = k(""), [P, O] = k({}), [c, L] = k(!1), { sendMagicLink: F, verifyMagicLink: l } = oe(), { tenant: H } = ce(), M = { ...Rt, ...i }, h = { ...Lt, ...e };
-  re(() => {
-    y && u(y);
-  }, [y]);
-  const u = async (q) => {
-    if (!H || !p) {
-      E("Missing tenant or email");
+  const [u, b] = A(""), [g, T] = A(""), [I, N] = A(""), [M, P] = A(!1), [h, x] = A(!1), [S, L] = A(""), [E, C] = A(""), [R, $] = A({}), [l, D] = A(!1), { sendMagicLink: U, verifyMagicLink: c } = le(), { tenant: H } = ge(), F = { ...Vt, ...r }, y = { ...jt, ...e };
+  X(() => {
+    f && m(f);
+  }, [f]);
+  const m = async (O) => {
+    if (!H || !u) {
+      L("Missing tenant or email");
       return;
     }
-    $(!0), E("");
+    x(!0), L("");
     try {
-      const V = await l({
-        token: q,
-        email: p
+      const V = await c({
+        token: O,
+        email: u
         // tenantId inferred from context automatically
       });
       t == null || t(V);
     } catch (V) {
-      const v = V.message || "Failed to verify magic link";
-      E(v), r == null || r(v);
+      const k = V.message || "Failed to verify magic link";
+      L(k), n == null || n(k);
     } finally {
-      $(!1);
+      x(!1);
     }
-  }, w = () => {
-    const q = {};
-    return p.trim() || (q.email = !0), c && !f.trim() && (q.name = !0), O(q), Object.keys(q).length === 0;
-  }, _ = async (q) => {
-    if (q.preventDefault(), !!w()) {
+  }, v = () => {
+    const O = {};
+    return u.trim() || (O.email = !0), l && !g.trim() && (O.name = !0), $(O), Object.keys(O).length === 0;
+  }, G = async (O) => {
+    if (O.preventDefault(), !!v()) {
       if (!(H != null && H.id)) {
-        E("Tenant not found");
+        L("Tenant not found");
         return;
       }
-      x(!0), E(""), D("");
+      P(!0), L(""), C("");
       try {
-        const V = b || (typeof window < "u" ? window.location.origin : ""), v = await F({
-          email: p,
+        const V = w || (typeof window < "u" ? window.location.origin : ""), k = await U({
+          email: u,
           tenantId: H.id,
           frontendUrl: V,
-          name: c ? f : void 0,
-          lastName: c ? I : void 0
+          name: l ? g : void 0,
+          lastName: l ? I : void 0
         });
-        D(M.successMessage), t == null || t(v);
+        C(F.successMessage), t == null || t(k);
       } catch (V) {
-        const v = V.message || M.errorMessage;
-        E(v), r == null || r(v);
+        const k = V.message || F.errorMessage;
+        L(k), n == null || n(k);
       } finally {
-        x(!1);
+        P(!1);
       }
     }
-  }, K = (q) => ({
-    ...h.input,
-    ...P[q] ? h.inputError : {}
-  }), B = () => ({
-    ...h.button,
-    ...R || g ? h.buttonLoading : {},
-    ...!p || R || g ? h.buttonDisabled : {}
+  }, J = (O) => ({
+    ...y.input,
+    ...R[O] ? y.inputError : {}
+  }), q = () => ({
+    ...y.button,
+    ...M || h ? y.buttonLoading : {},
+    ...!u || M || h ? y.buttonDisabled : {}
   });
-  return g ? /* @__PURE__ */ d("div", { className: m, style: h.container, children: [
-    /* @__PURE__ */ n("h2", { style: h.title, children: M.verifyingText }),
-    /* @__PURE__ */ n("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ n("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ d("div", { className: m, style: h.container, children: [
-    /* @__PURE__ */ n("h2", { style: h.title, children: M.title }),
-    /* @__PURE__ */ n("p", { style: h.description, children: M.description }),
-    /* @__PURE__ */ d("form", { onSubmit: _, style: h.form, children: [
-      /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: h.label, children: M.emailLabel }),
-        /* @__PURE__ */ n(
+  return h ? /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
+    /* @__PURE__ */ s("h2", { style: y.title, children: F.verifyingText }),
+    /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
+  ] }) : /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
+    /* @__PURE__ */ s("h2", { style: y.title, children: F.title }),
+    /* @__PURE__ */ s("p", { style: y.description, children: F.description }),
+    /* @__PURE__ */ d("form", { onSubmit: G, style: y.form, children: [
+      /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: y.label, children: F.emailLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: p,
-            onChange: (q) => {
-              S(q.target.value), P.email && O((V) => ({ ...V, email: !1 }));
+            value: u,
+            onChange: (O) => {
+              b(O.target.value), R.email && $((V) => ({ ...V, email: !1 }));
             },
-            placeholder: M.emailPlaceholder,
-            style: K("email"),
-            disabled: R || g
+            placeholder: F.emailPlaceholder,
+            style: J("email"),
+            disabled: M || h
           }
         )
       ] }),
-      !c && /* @__PURE__ */ n("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ n(
+      !l && /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
         "button",
         {
           type: "button",
-          onClick: () => L(!0),
+          onClick: () => D(!0),
           style: {
             background: "none",
             border: "none",
@@ -2826,47 +3010,47 @@ function dr({
           children: "New user? Add your name"
         }
       ) }),
-      c && /* @__PURE__ */ d(j, { children: [
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: h.label, children: M.nameLabel }),
-          /* @__PURE__ */ n(
+      l && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: y.label, children: F.nameLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: f,
-              onChange: (q) => {
-                T(q.target.value), P.name && O((V) => ({ ...V, name: !1 }));
+              value: g,
+              onChange: (O) => {
+                T(O.target.value), R.name && $((V) => ({ ...V, name: !1 }));
               },
-              placeholder: M.namePlaceholder,
-              style: K("name"),
-              disabled: R || g
+              placeholder: F.namePlaceholder,
+              style: J("name"),
+              disabled: M || h
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: h.label, children: M.lastNameLabel }),
-          /* @__PURE__ */ n(
+        /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: y.label, children: F.lastNameLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               id: "lastName",
               name: "lastName",
               type: "text",
               value: I,
-              onChange: (q) => C(q.target.value),
-              placeholder: M.lastNamePlaceholder,
-              style: h.input,
-              disabled: R || g
+              onChange: (O) => N(O.target.value),
+              placeholder: F.lastNamePlaceholder,
+              style: y.input,
+              disabled: M || h
             }
           )
         ] }),
-        /* @__PURE__ */ n("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ n(
+        /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
           "button",
           {
             type: "button",
             onClick: () => {
-              L(!1), T(""), C("");
+              D(!1), T(""), N("");
             },
             style: {
               background: "none",
@@ -2880,30 +3064,30 @@ function dr({
           }
         ) })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !p || R || g, style: B(), children: R ? M.loadingText : M.submitButton }),
-      A && /* @__PURE__ */ n("div", { style: h.errorText, children: A }),
-      U && /* @__PURE__ */ n("div", { style: h.successText, children: U })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !u || M || h, style: q(), children: M ? F.loadingText : F.submitButton }),
+      S && /* @__PURE__ */ s("div", { style: y.errorText, children: S }),
+      E && /* @__PURE__ */ s("div", { style: y.successText, children: E })
     ] }),
-    a && /* @__PURE__ */ d("div", { style: h.linkContainer, children: [
+    a && /* @__PURE__ */ d("div", { style: y.linkContainer, children: [
       /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: h.divider, children: [
-          M.loginText,
+        /* @__PURE__ */ d("span", { style: y.divider, children: [
+          F.loginText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: s, style: h.link, children: M.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: y.link, children: F.loginLink })
       ] }),
-      /* @__PURE__ */ n("div", { style: h.divider, children: "•" }),
+      /* @__PURE__ */ s("div", { style: y.divider, children: "•" }),
       /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: h.divider, children: [
-          M.signupText,
+        /* @__PURE__ */ d("span", { style: y.divider, children: [
+          F.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: o, style: h.link, children: M.signupLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: y.link, children: F.signupLink })
       ] })
     ] })
   ] });
 }
-const Et = {
+const Gt = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
@@ -2911,7 +3095,7 @@ const Et = {
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
   backToLoginButton: "Back to Login"
-}, Oe = {
+}, Ke = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2998,7 +3182,7 @@ const Et = {
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
   }
-}, Ft = () => /* @__PURE__ */ n("div", { style: Oe.spinner }), Ct = () => /* @__PURE__ */ d(
+}, Zt = () => /* @__PURE__ */ s("div", { style: Ke.spinner }), Kt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3011,11 +3195,11 @@ const Et = {
     strokeLinejoin: "round",
     style: { margin: "0 auto 1rem auto", display: "block" },
     children: [
-      /* @__PURE__ */ n("path", { d: "M22 11.08V12a10 10 0 1 1-5.93-9.14" }),
-      /* @__PURE__ */ n("polyline", { points: "22,4 12,14.01 9,11.01" })
+      /* @__PURE__ */ s("path", { d: "M22 11.08V12a10 10 0 1 1-5.93-9.14" }),
+      /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), Dt = () => /* @__PURE__ */ d(
+), Jt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3028,114 +3212,114 @@ const Et = {
     strokeLinejoin: "round",
     style: { margin: "0 auto 1rem auto", display: "block" },
     children: [
-      /* @__PURE__ */ n("circle", { cx: "12", cy: "12", r: "10" }),
-      /* @__PURE__ */ n("line", { x1: "15", y1: "9", x2: "9", y2: "15" }),
-      /* @__PURE__ */ n("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
+      /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "10" }),
+      /* @__PURE__ */ s("line", { x1: "15", y1: "9", x2: "9", y2: "15" }),
+      /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), $t = {
-  loading: /* @__PURE__ */ n(Ft, {}),
-  success: /* @__PURE__ */ n(Ct, {}),
-  error: /* @__PURE__ */ n(Dt, {})
+), Yt = {
+  loading: /* @__PURE__ */ s(Zt, {}),
+  success: /* @__PURE__ */ s(Kt, {}),
+  error: /* @__PURE__ */ s(Jt, {})
 };
-function ur({
-  copy: i = {},
+function qn({
+  copy: r = {},
   styles: e = {},
   icons: t = {},
-  onSuccess: r,
-  onError: s,
-  onRetry: o,
+  onSuccess: n,
+  onError: o,
+  onRetry: i,
   onBackToLogin: a,
-  className: m,
-  token: y,
-  email: b,
-  appId: p,
-  tenantSlug: S,
-  autoRedirectDelay: f = 3e3
+  className: p,
+  token: f,
+  email: w,
+  appId: u,
+  tenantSlug: b,
+  autoRedirectDelay: g = 3e3
 }) {
-  const [T, I] = k("verifying"), [C, R] = k(""), { verifyMagicLink: x } = oe(), g = { ...Et, ...i }, $ = { ...Oe, ...e }, A = { ...$t, ...t }, E = () => {
+  const [T, I] = A("verifying"), [N, M] = A(""), { verifyMagicLink: P } = le(), h = { ...Gt, ...r }, x = { ...Ke, ...e }, S = { ...Yt, ...t }, L = () => {
     if (typeof window > "u") return {};
-    const c = new URLSearchParams(window.location.search);
+    const l = new URLSearchParams(window.location.search);
     return {
-      token: y || c.get("token") || "",
-      email: b || c.get("email") || "",
-      appId: p || c.get("appId") || "",
-      tenantSlug: S || c.get("tenantSlug") || void 0
+      token: f || l.get("token") || "",
+      email: w || l.get("email") || "",
+      appId: u || l.get("appId") || "",
+      tenantSlug: b || l.get("tenantSlug") || void 0
     };
-  }, U = async () => {
-    I("verifying"), R("");
+  }, E = async () => {
+    I("verifying"), M("");
     try {
-      const c = E();
-      if (!c.token || !c.email)
+      const l = L();
+      if (!l.token || !l.email)
         throw new Error("Missing required parameters: token or email");
-      const L = await x({
-        token: c.token,
-        email: c.email,
-        tenantSlug: c.tenantSlug
+      const D = await P({
+        token: l.token,
+        email: l.email,
+        tenantSlug: l.tenantSlug
       });
-      I("success"), r == null || r(L), f > 0 && setTimeout(() => {
+      I("success"), n == null || n(D), g > 0 && setTimeout(() => {
         I("redirecting");
-      }, f);
-    } catch (c) {
-      const L = c.message || g.errorMessage;
-      R(L), I("error"), s == null || s(L);
+      }, g);
+    } catch (l) {
+      const D = l.message || h.errorMessage;
+      M(D), I("error"), o == null || o(D);
     }
-  }, D = () => {
-    o == null || o(), U();
-  }, P = () => {
+  }, C = () => {
+    i == null || i(), E();
+  }, R = () => {
     a == null || a();
   };
-  re(() => {
-    U();
+  X(() => {
+    E();
   }, []);
-  const O = () => {
+  const $ = () => {
     switch (T) {
       case "verifying":
-        return /* @__PURE__ */ d("div", { style: $.message, children: [
-          A.loading,
-          g.verifyingMessage
+        return /* @__PURE__ */ d("div", { style: x.message, children: [
+          S.loading,
+          h.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ d(j, { children: [
-          A.success,
-          /* @__PURE__ */ n("div", { style: $.successMessage, children: g.successMessage })
+        return /* @__PURE__ */ d(_, { children: [
+          S.success,
+          /* @__PURE__ */ s("div", { style: x.successMessage, children: h.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ d(j, { children: [
-          A.loading,
-          /* @__PURE__ */ n("div", { style: $.message, children: g.redirectingMessage })
+        return /* @__PURE__ */ d(_, { children: [
+          S.loading,
+          /* @__PURE__ */ s("div", { style: x.message, children: h.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ d(j, { children: [
-          A.error,
-          /* @__PURE__ */ n("div", { style: $.errorMessage, children: C || g.errorMessage }),
-          /* @__PURE__ */ d("div", { style: $.buttonContainer, children: [
-            /* @__PURE__ */ n(
+        return /* @__PURE__ */ d(_, { children: [
+          S.error,
+          /* @__PURE__ */ s("div", { style: x.errorMessage, children: N || h.errorMessage }),
+          /* @__PURE__ */ d("div", { style: x.buttonContainer, children: [
+            /* @__PURE__ */ s(
               "button",
               {
-                onClick: D,
-                style: $.retryButton,
-                onMouseOver: (c) => {
-                  c.currentTarget.style.backgroundColor = "#2563eb";
+                onClick: C,
+                style: x.retryButton,
+                onMouseOver: (l) => {
+                  l.currentTarget.style.backgroundColor = "#2563eb";
                 },
-                onMouseOut: (c) => {
-                  c.currentTarget.style.backgroundColor = "#3b82f6";
+                onMouseOut: (l) => {
+                  l.currentTarget.style.backgroundColor = "#3b82f6";
                 },
-                children: g.retryButton
+                children: h.retryButton
               }
             ),
-            /* @__PURE__ */ n(
+            /* @__PURE__ */ s(
               "button",
               {
-                onClick: P,
-                style: $.backButton,
-                onMouseOver: (c) => {
-                  c.currentTarget.style.backgroundColor = "#e5e7eb";
+                onClick: R,
+                style: x.backButton,
+                onMouseOver: (l) => {
+                  l.currentTarget.style.backgroundColor = "#e5e7eb";
                 },
-                onMouseOut: (c) => {
-                  c.currentTarget.style.backgroundColor = "#f3f4f6";
+                onMouseOut: (l) => {
+                  l.currentTarget.style.backgroundColor = "#f3f4f6";
                 },
-                children: g.backToLoginButton
+                children: h.backToLoginButton
               }
             )
           ] })
@@ -3144,18 +3328,18 @@ function ur({
         return null;
     }
   };
-  return /* @__PURE__ */ d("div", { style: $.container, className: m, children: [
-    /* @__PURE__ */ n("style", { children: `
+  return /* @__PURE__ */ d("div", { style: x.container, className: p, children: [
+    /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ n("h1", { style: $.title, children: g.title }),
-    O()
+    /* @__PURE__ */ s("h1", { style: x.title, children: h.title }),
+    $()
   ] });
 }
-const Ht = {
+const Qt = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3177,7 +3361,7 @@ const Ht = {
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
   passwordMismatchError: "Passwords do not match"
-}, Nt = {
+}, Xt = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3269,186 +3453,186 @@ const Ht = {
     cursor: "pointer"
   }
 };
-function hr({
-  copy: i = {},
+function On({
+  copy: r = {},
   styles: e = {},
   mode: t = "request",
-  token: r = "",
-  onSuccess: s,
-  onError: o,
+  token: n = "",
+  onSuccess: o,
+  onError: i,
   onBackToLogin: a,
-  onModeChange: m,
-  className: y
+  onModeChange: p,
+  className: f
 }) {
-  const [b, p] = k(""), [S, f] = k(r), [T, I] = k(""), [C, R] = k(""), [x, g] = k(!1), [$, A] = k(""), [E, U] = k(""), [D, P] = k({}), { requestPasswordReset: O, confirmPasswordReset: c } = oe(), { tenant: L } = ce(), F = { ...Ht, ...i }, l = { ...Nt, ...e }, H = () => {
-    const B = {};
-    return b.trim() || (B.email = !0), P(B), Object.keys(B).length === 0;
-  }, M = () => {
-    const B = {};
-    return S.trim() || (B.token = !0), T.trim() || (B.newPassword = !0), C.trim() || (B.confirmPassword = !0), P(B), Object.keys(B).length === 0;
-  }, h = async (B) => {
-    if (B.preventDefault(), !!H()) {
-      if (!(L != null && L.id)) {
-        A("Tenant not found");
+  const [w, u] = A(""), [b, g] = A(n), [T, I] = A(""), [N, M] = A(""), [P, h] = A(!1), [x, S] = A(""), [L, E] = A(""), [C, R] = A({}), { requestPasswordReset: $, confirmPasswordReset: l } = le(), { tenant: D } = ge(), U = { ...Qt, ...r }, c = { ...Xt, ...e }, H = () => {
+    const q = {};
+    return w.trim() || (q.email = !0), R(q), Object.keys(q).length === 0;
+  }, F = () => {
+    const q = {};
+    return b.trim() || (q.token = !0), T.trim() || (q.newPassword = !0), N.trim() || (q.confirmPassword = !0), R(q), Object.keys(q).length === 0;
+  }, y = async (q) => {
+    if (q.preventDefault(), !!H()) {
+      if (!(D != null && D.id)) {
+        S("Tenant not found");
         return;
       }
-      g(!0), A(""), U("");
+      h(!0), S(""), E("");
       try {
-        await O({ email: b, tenantId: L.id }), U(F.successMessage), s == null || s();
-      } catch (q) {
-        const V = q.message || F.errorMessage;
-        A(V), o == null || o(V);
+        await $({ email: w, tenantId: D.id }), E(U.successMessage), o == null || o();
+      } catch (O) {
+        const V = O.message || U.errorMessage;
+        S(V), i == null || i(V);
       } finally {
-        g(!1);
+        h(!1);
       }
     }
-  }, u = async (B) => {
-    if (B.preventDefault(), !!M()) {
-      if (T !== C) {
-        A(F.passwordMismatchError), P({ confirmPassword: !0 });
+  }, m = async (q) => {
+    if (q.preventDefault(), !!F()) {
+      if (T !== N) {
+        S(U.passwordMismatchError), R({ confirmPassword: !0 });
         return;
       }
-      g(!0), A(""), U("");
+      h(!0), S(""), E("");
       try {
-        await c({ token: S, newPassword: T }), U(F.resetSuccessMessage), s == null || s();
-      } catch (q) {
-        const V = q.message || F.errorMessage;
-        A(V), o == null || o(V);
+        await l({ token: b, newPassword: T }), E(U.resetSuccessMessage), o == null || o();
+      } catch (O) {
+        const V = O.message || U.errorMessage;
+        S(V), i == null || i(V);
       } finally {
-        g(!1);
+        h(!1);
       }
     }
-  }, w = (B) => ({
-    ...l.input,
-    ...D[B] ? l.inputError : {}
-  }), _ = () => ({
-    ...l.button,
-    ...x ? l.buttonLoading : {}
+  }, v = (q) => ({
+    ...c.input,
+    ...C[q] ? c.inputError : {}
+  }), G = () => ({
+    ...c.button,
+    ...P ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const B = S && T && C;
-    return /* @__PURE__ */ d("div", { className: y, style: l.container, children: [
-      /* @__PURE__ */ n("h2", { style: l.title, children: F.resetTitle }),
-      /* @__PURE__ */ n("p", { style: l.subtitle, children: F.resetSubtitle }),
-      /* @__PURE__ */ d("form", { onSubmit: u, style: l.form, children: [
-        /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: F.tokenLabel }),
-          /* @__PURE__ */ n(
+    const q = b && T && N;
+    return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
+      /* @__PURE__ */ s("h2", { style: c.title, children: U.resetTitle }),
+      /* @__PURE__ */ s("p", { style: c.subtitle, children: U.resetSubtitle }),
+      /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: U.tokenLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: S,
-              onChange: (q) => {
-                f(q.target.value), D.token && P((V) => ({ ...V, token: !1 }));
+              value: b,
+              onChange: (O) => {
+                g(O.target.value), C.token && R((V) => ({ ...V, token: !1 }));
               },
-              placeholder: F.tokenPlaceholder,
-              style: w("token"),
-              disabled: x
+              placeholder: U.tokenPlaceholder,
+              style: v("token"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: F.newPasswordLabel }),
-          /* @__PURE__ */ n(
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: U.newPasswordLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               type: "password",
               value: T,
-              onChange: (q) => {
-                I(q.target.value), D.newPassword && P((V) => ({ ...V, newPassword: !1 }));
+              onChange: (O) => {
+                I(O.target.value), C.newPassword && R((V) => ({ ...V, newPassword: !1 }));
               },
-              placeholder: F.newPasswordPlaceholder,
-              style: w("newPassword"),
-              disabled: x
+              placeholder: U.newPasswordPlaceholder,
+              style: v("newPassword"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: F.confirmPasswordLabel }),
-          /* @__PURE__ */ n(
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: U.confirmPasswordLabel }),
+          /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: C,
-              onChange: (q) => {
-                R(q.target.value), D.confirmPassword && P((V) => ({ ...V, confirmPassword: !1 })), $ === F.passwordMismatchError && A("");
+              value: N,
+              onChange: (O) => {
+                M(O.target.value), C.confirmPassword && R((V) => ({ ...V, confirmPassword: !1 })), x === U.passwordMismatchError && S("");
               },
-              placeholder: F.confirmPasswordPlaceholder,
-              style: w("confirmPassword"),
-              disabled: x
+              placeholder: U.confirmPasswordPlaceholder,
+              style: v("confirmPassword"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ n(
+        /* @__PURE__ */ s(
           "button",
           {
             type: "submit",
-            disabled: !B || x,
+            disabled: !q || P,
             style: {
-              ..._(),
-              ...!B || x ? l.buttonDisabled : {}
+              ...G(),
+              ...!q || P ? c.buttonDisabled : {}
             },
-            children: x ? F.resetLoadingText : F.resetSubmitButton
+            children: P ? U.resetLoadingText : U.resetSubmitButton
           }
         ),
-        $ && /* @__PURE__ */ n("div", { style: l.errorText, children: $ }),
-        E && /* @__PURE__ */ n("div", { style: l.successText, children: E })
+        x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
+        L && /* @__PURE__ */ s("div", { style: c.successText, children: L })
       ] }),
-      /* @__PURE__ */ d("div", { style: l.linkContainer, children: [
-        /* @__PURE__ */ n("a", { onClick: a, style: l.link, children: F.backToLoginLink }),
-        m && /* @__PURE__ */ d(j, { children: [
-          /* @__PURE__ */ n("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ n("a", { onClick: () => m("request"), style: l.link, children: "Request New Link" })
+      /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: U.backToLoginLink }),
+        p && /* @__PURE__ */ d(_, { children: [
+          /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
+          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: "Request New Link" })
         ] })
       ] })
     ] });
   }
-  const K = b;
-  return /* @__PURE__ */ d("div", { className: y, style: l.container, children: [
-    /* @__PURE__ */ n("h2", { style: l.title, children: F.title }),
-    /* @__PURE__ */ n("p", { style: l.subtitle, children: F.subtitle }),
-    /* @__PURE__ */ d("form", { onSubmit: h, style: l.form, children: [
-      /* @__PURE__ */ d("div", { style: l.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: l.label, children: F.emailLabel }),
-        /* @__PURE__ */ n(
+  const J = w;
+  return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
+    /* @__PURE__ */ s("h2", { style: c.title, children: U.title }),
+    /* @__PURE__ */ s("p", { style: c.subtitle, children: U.subtitle }),
+    /* @__PURE__ */ d("form", { onSubmit: y, style: c.form, children: [
+      /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: c.label, children: U.emailLabel }),
+        /* @__PURE__ */ s(
           "input",
           {
             type: "email",
-            value: b,
-            onChange: (B) => {
-              p(B.target.value), D.email && P((q) => ({ ...q, email: !1 }));
+            value: w,
+            onChange: (q) => {
+              u(q.target.value), C.email && R((O) => ({ ...O, email: !1 }));
             },
-            placeholder: F.emailPlaceholder,
-            style: w("email"),
-            disabled: x
+            placeholder: U.emailPlaceholder,
+            style: v("email"),
+            disabled: P
           }
         )
       ] }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s(
         "button",
         {
           type: "submit",
-          disabled: !K || x,
+          disabled: !J || P,
           style: {
-            ..._(),
-            ...!K || x ? l.buttonDisabled : {}
+            ...G(),
+            ...!J || P ? c.buttonDisabled : {}
           },
-          children: x ? F.loadingText : F.submitButton
+          children: P ? U.loadingText : U.submitButton
         }
       ),
-      $ && /* @__PURE__ */ n("div", { style: l.errorText, children: $ }),
-      E && /* @__PURE__ */ n("div", { style: l.successText, children: E })
+      x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
+      L && /* @__PURE__ */ s("div", { style: c.successText, children: L })
     ] }),
-    /* @__PURE__ */ d("div", { style: l.linkContainer, children: [
-      /* @__PURE__ */ n("a", { onClick: a, style: l.link, children: F.backToLoginLink }),
-      m && /* @__PURE__ */ d(j, { children: [
-        /* @__PURE__ */ n("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ n("a", { onClick: () => m("reset"), style: l.link, children: "I have a token" })
+    /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: U.backToLoginLink }),
+      p && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
+        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: "I have a token" })
       ] })
     ] })
   ] });
 }
-const Ut = () => /* @__PURE__ */ n(
+const en = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3458,9 +3642,9 @@ const Ut = () => /* @__PURE__ */ n(
       height: "100vh",
       fontFamily: "system-ui, sans-serif"
     },
-    children: /* @__PURE__ */ n("div", { children: "Loading..." })
+    children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), Bt = ({ error: i, retry: e }) => /* @__PURE__ */ d(
+), tn = ({ error: r, retry: e }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -3474,9 +3658,9 @@ const Ut = () => /* @__PURE__ */ n(
       padding: "20px"
     },
     children: [
-      /* @__PURE__ */ n("h2", { style: { color: "#dc3545", marginBottom: "16px" }, children: "Error" }),
-      /* @__PURE__ */ n("p", { style: { color: "#6c757d", marginBottom: "24px" }, children: i.message || "Unable to load application" }),
-      /* @__PURE__ */ n(
+      /* @__PURE__ */ s("h2", { style: { color: "#dc3545", marginBottom: "16px" }, children: "Error" }),
+      /* @__PURE__ */ s("p", { style: { color: "#6c757d", marginBottom: "24px" }, children: r.message || "Unable to load application" }),
+      /* @__PURE__ */ s(
         "button",
         {
           onClick: e,
@@ -3494,98 +3678,98 @@ const Ut = () => /* @__PURE__ */ n(
     ]
   }
 );
-function gr({
-  children: i,
+function zn({
+  children: r,
   loadingFallback: e,
   errorFallback: t,
-  requireTenant: r = !0
+  requireTenant: n = !0
 }) {
-  const { isAppLoading: s, appError: o, retryApp: a } = ge(), m = we(), y = Me(), b = qe(), p = ze(), S = (m == null ? void 0 : m.isTenantLoading) ?? !1, f = (m == null ? void 0 : m.tenantError) ?? null, T = (m == null ? void 0 : m.tenantSlug) ?? null, I = (m == null ? void 0 : m.retryTenant) ?? (() => {
-  }), C = (y == null ? void 0 : y.isAuthReady) ?? !0, R = (b == null ? void 0 : b.isReady) ?? !0, x = (p == null ? void 0 : p.isReady) ?? !0, g = r && m && T, U = s || g && S || y && !C || b && !R || p && !x, D = o || (g ? f : null), P = () => {
-    o && a(), f && m && I();
+  const { isAppLoading: o, appError: i, retryApp: a } = ye(), p = Se(), f = Le(), w = je(), u = Ge(), b = (p == null ? void 0 : p.isTenantLoading) ?? !1, g = (p == null ? void 0 : p.tenantError) ?? null, T = (p == null ? void 0 : p.tenantSlug) ?? null, I = (p == null ? void 0 : p.retryTenant) ?? (() => {
+  }), N = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (w == null ? void 0 : w.isReady) ?? !0, P = (u == null ? void 0 : u.isReady) ?? !0, h = n && p && T, E = o || h && b || f && !N || w && !M || u && !P, C = i || (h ? g : null), R = () => {
+    i && a(), g && p && I();
   };
-  if (U)
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Ut, {}) });
-  if (D) {
-    const O = typeof t == "function" ? t(D, P) : t || /* @__PURE__ */ n(Bt, { error: D, retry: P });
-    return /* @__PURE__ */ n(j, { children: O });
+  if (E)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(en, {}) });
+  if (C) {
+    const $ = typeof t == "function" ? t(C, R) : t || /* @__PURE__ */ s(tn, { error: C, retry: R });
+    return /* @__PURE__ */ s(_, { children: $ });
   }
-  return /* @__PURE__ */ n(j, { children: i });
+  return /* @__PURE__ */ s(_, { children: r });
 }
-function pr(i = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: s } = ge(), o = we(), a = Me(), m = qe(), y = ze(), b = (o == null ? void 0 : o.isTenantLoading) ?? !1, p = (o == null ? void 0 : o.tenantError) ?? null, S = (o == null ? void 0 : o.tenant) ?? null, f = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, C = (m == null ? void 0 : m.isReady) ?? !0, R = (y == null ? void 0 : y.isReady) ?? !0, x = i && o && f, E = e || x && b || a && !I || m && !C || y && !R, U = t || (x ? p : null);
+function _n(r = !0) {
+  const { isAppLoading: e, appError: t, retryApp: n, appInfo: o } = ye(), i = Se(), a = Le(), p = je(), f = Ge(), w = (i == null ? void 0 : i.isTenantLoading) ?? !1, u = (i == null ? void 0 : i.tenantError) ?? null, b = (i == null ? void 0 : i.tenant) ?? null, g = (i == null ? void 0 : i.tenantSlug) ?? null, T = (i == null ? void 0 : i.retryTenant) ?? (() => {
+  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, N = (p == null ? void 0 : p.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = r && i && g, L = e || P && w || a && !I || p && !N || f && !M, E = t || (P ? u : null);
   return {
-    isLoading: E,
-    error: U,
-    isReady: !E && !U && s !== null && (!x || S !== null),
+    isLoading: L,
+    error: E,
+    isReady: !L && !E && o !== null && (!P || b !== null),
     retry: () => {
-      t && r(), p && o && T();
+      t && n(), u && i && T();
     },
     // Individual states
-    app: { isLoading: e, error: t, data: s },
-    tenant: o ? { isLoading: b, error: p, data: S } : null,
+    app: { isLoading: e, error: t, data: o },
+    tenant: i ? { isLoading: w, error: u, data: b } : null,
     auth: a ? { isReady: I } : null,
-    featureFlags: m ? { isReady: C } : null,
-    subscription: y ? { isReady: R } : null
+    featureFlags: p ? { isReady: N } : null,
+    subscription: f ? { isReady: M } : null
   };
 }
-function fr({
-  tenants: i,
+function Wn({
+  tenants: r,
   currentTenantId: e,
   onSelect: t,
-  className: r = "",
-  dropdownClassName: s = "",
-  itemClassName: o = "",
+  className: n = "",
+  dropdownClassName: o = "",
+  itemClassName: i = "",
   renderItem: a,
-  placeholder: m = "Select tenant",
-  disabled: y = !1,
-  showCurrentTenant: b = !0
+  placeholder: p = "Select tenant",
+  disabled: f = !1,
+  showCurrentTenant: w = !0
 }) {
-  var $;
-  const p = Me(), [S, f] = k(!1), T = Ue(null), I = i ?? (p == null ? void 0 : p.userTenants) ?? [], C = e ?? (($ = p == null ? void 0 : p.currentUser) == null ? void 0 : $.tenantId) ?? null, R = async (A) => {
-    f(!1), t ? t(A) : p != null && p.switchToTenant && await p.switchToTenant(A);
+  var x;
+  const u = Le(), [b, g] = A(!1), T = We(null), I = r ?? (u == null ? void 0 : u.userTenants) ?? [], N = e ?? ((x = u == null ? void 0 : u.currentUser) == null ? void 0 : x.tenantId) ?? null, M = async (S) => {
+    g(!1), t ? t(S) : u != null && u.switchToTenant && await u.switchToTenant(S);
   };
-  re(() => {
-    const A = (E) => {
-      T.current && !T.current.contains(E.target) && f(!1);
+  X(() => {
+    const S = (L) => {
+      T.current && !T.current.contains(L.target) && g(!1);
     };
-    return document.addEventListener("mousedown", A), () => document.removeEventListener("mousedown", A);
+    return document.addEventListener("mousedown", S), () => document.removeEventListener("mousedown", S);
   }, []);
-  const x = I.find((A) => A.id === C);
+  const P = I.find((S) => S.id === N);
   if (I.length === 0)
     return null;
-  if (I.length === 1 && b)
-    return /* @__PURE__ */ n("div", { className: r, children: /* @__PURE__ */ n("span", { children: I[0].name }) });
-  const g = (A, E) => /* @__PURE__ */ d("span", { style: { fontWeight: E ? "bold" : "normal" }, children: [
-    A.name,
-    A.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
+  if (I.length === 1 && w)
+    return /* @__PURE__ */ s("div", { className: n, children: /* @__PURE__ */ s("span", { children: I[0].name }) });
+  const h = (S, L) => /* @__PURE__ */ d("span", { style: { fontWeight: L ? "bold" : "normal" }, children: [
+    S.name,
+    S.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
       "(",
-      A.role,
+      S.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ d("div", { ref: T, className: r, style: { position: "relative" }, children: [
+  return /* @__PURE__ */ d("div", { ref: T, className: n, style: { position: "relative" }, children: [
     /* @__PURE__ */ d(
       "button",
       {
         type: "button",
-        onClick: () => !y && f(!S),
-        disabled: y,
+        onClick: () => !f && g(!b),
+        disabled: f,
         style: {
-          cursor: y ? "not-allowed" : "pointer",
-          opacity: y ? 0.6 : 1
+          cursor: f ? "not-allowed" : "pointer",
+          opacity: f ? 0.6 : 1
         },
         children: [
-          x ? x.name : m,
-          /* @__PURE__ */ n("span", { style: { marginLeft: 8 }, children: S ? "▲" : "▼" })
+          P ? P.name : p,
+          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: b ? "▲" : "▼" })
         ]
       }
     ),
-    S && /* @__PURE__ */ n(
+    b && /* @__PURE__ */ s(
       "div",
       {
-        className: s,
+        className: o,
         style: {
           position: "absolute",
           top: "100%",
@@ -3599,34 +3783,34 @@ function fr({
           maxHeight: 300,
           overflowY: "auto"
         },
-        children: I.map((A) => {
-          const E = A.id === C;
-          return /* @__PURE__ */ n(
+        children: I.map((S) => {
+          const L = S.id === N;
+          return /* @__PURE__ */ s(
             "div",
             {
-              className: o,
-              onClick: () => R(A.id),
+              className: i,
+              onClick: () => M(S.id),
               style: {
                 padding: "8px 12px",
                 cursor: "pointer",
-                backgroundColor: E ? "#f0f0f0" : "transparent"
+                backgroundColor: L ? "#f0f0f0" : "transparent"
               },
-              onMouseEnter: (U) => {
-                E || (U.target.style.backgroundColor = "#f5f5f5");
+              onMouseEnter: (E) => {
+                L || (E.target.style.backgroundColor = "#f5f5f5");
               },
-              onMouseLeave: (U) => {
-                E || (U.target.style.backgroundColor = "transparent");
+              onMouseLeave: (E) => {
+                L || (E.target.style.backgroundColor = "transparent");
               },
-              children: a ? a(A, E) : g(A, E)
+              children: a ? a(S, L) : h(S, L)
             },
-            A.id
+            S.id
           );
         })
       }
     )
   ] });
 }
-class mr {
+class Vn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3645,14 +3829,14 @@ class mr {
   async getPermissions(e) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder);
-    const s = `/permissions/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
+    const o = `/permissions/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      permissions: o.data,
-      meta: o.meta
+      permissions: i.data,
+      meta: i.meta
     };
   }
   async getPermissionById(e) {
@@ -3666,12 +3850,12 @@ class mr {
   async updatePermission(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/permissions/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -3685,16 +3869,16 @@ class mr {
   }
   // Public endpoint - no auth required
   async getAppPermissions(e, t) {
-    const r = new URLSearchParams();
-    t != null && t.page && r.append("page", t.page.toString()), t != null && t.limit && r.append("limit", t.limit.toString()), t != null && t.sortBy && r.append("sortBy", t.sortBy), t != null && t.sortOrder && r.append("sortOrder", t.sortOrder);
-    const s = `/permissions/apps/${e}${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s);
+    const n = new URLSearchParams();
+    t != null && t.page && n.append("page", t.page.toString()), t != null && t.limit && n.append("limit", t.limit.toString()), t != null && t.sortBy && n.append("sortBy", t.sortBy), t != null && t.sortOrder && n.append("sortOrder", t.sortOrder);
+    const o = `/permissions/apps/${e}${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o);
     return {
-      permissions: o.data,
-      meta: o.meta
+      permissions: i.data,
+      meta: i.meta
     };
   }
 }
-class yr {
+class jn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3709,14 +3893,14 @@ class yr {
     )).data;
   }
   async getSubscriptionPlans(e) {
-    const t = await this.sessionManager.getAuthHeaders(), r = new URLSearchParams();
-    e != null && e.page && r.append("page", e.page.toString()), e != null && e.limit && r.append("limit", e.limit.toString()), e != null && e.sortBy && r.append("sortBy", e.sortBy), e != null && e.sortOrder && r.append("sortOrder", e.sortOrder), e != null && e.appId && r.append("appId", e.appId);
-    const s = `/subscription-plans/${r.toString() ? `?${r.toString()}` : ""}`, o = await this.httpService.get(s, {
+    const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
+    e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder), e != null && e.appId && n.append("appId", e.appId);
+    const o = `/subscription-plans/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      plans: o.data,
-      meta: o.meta
+      plans: i.data,
+      meta: i.meta
     };
   }
   async getSubscriptionPlanById(e) {
@@ -3729,12 +3913,12 @@ class yr {
     )).data;
   }
   async updateSubscriptionPlan(e, t) {
-    const r = await this.sessionManager.getAuthHeaders();
+    const n = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/subscription-plans/${e}`,
       t,
       {
-        headers: r
+        headers: n
       }
     )).data;
   }
@@ -3745,7 +3929,7 @@ class yr {
     });
   }
 }
-class wr {
+class Gn {
   constructor(e) {
     this.httpService = e;
   }
@@ -3754,7 +3938,7 @@ class wr {
     return await this.httpService.get("/health");
   }
 }
-class br {
+class Zn {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -3871,54 +4055,141 @@ class br {
   // Transform query parameters for API calls
   static transformQueryParams(e) {
     const t = new URLSearchParams();
-    return Object.entries(e).forEach(([r, s]) => {
-      s != null && s !== "" && t.append(r, String(s));
+    return Object.entries(e).forEach(([n, o]) => {
+      o != null && o !== "" && t.append(n, String(o));
     }), t;
   }
 }
+const Je = "returnTo", xe = "zone_return_to", Pe = "zone_return_to";
+function Kn(r = {}) {
+  const {
+    zoneRoots: e = {},
+    returnToParam: t = Je,
+    returnToStorage: n = "url"
+  } = r, o = dt(), [i, a] = ut(), { isAuthenticated: p, currentUser: f } = le(), { tenant: w } = he(), u = Z(() => ({ ...Ne, ...e }), [e]), b = !!w, g = f == null ? void 0 : f.userType, T = Z(() => {
+    switch (n) {
+      case "url":
+        return i.get(t);
+      case "session":
+        return sessionStorage.getItem(xe);
+      case "local":
+        return localStorage.getItem(Pe);
+      default:
+        return null;
+    }
+  }, [n, i, t]), I = re(() => {
+    switch (n) {
+      case "url": {
+        const h = new URLSearchParams(i);
+        h.delete(t), a(h, { replace: !0 });
+        break;
+      }
+      case "session":
+        sessionStorage.removeItem(xe);
+        break;
+      case "local":
+        localStorage.removeItem(Pe);
+        break;
+    }
+  }, [n, i, t, a]), N = re(
+    (h) => {
+      switch (n) {
+        case "url": {
+          const x = new URLSearchParams(i);
+          x.set(t, h), a(x, { replace: !0 });
+          break;
+        }
+        case "session":
+          sessionStorage.setItem(xe, h);
+          break;
+        case "local":
+          localStorage.setItem(Pe, h);
+          break;
+      }
+    },
+    [n, i, t, a]
+  ), M = re(
+    (h) => {
+      const x = u[h] || u.default;
+      o(x);
+    },
+    [o, u]
+  ), P = re(() => b ? p ? g === se.TENANT_ADMIN ? u.tenantAdmin : u.tenantUser : u.tenantGuest : p ? g === se.TENANT_ADMIN ? u.publicAdmin : u.publicUser : u.publicGuest, [b, p, g, u]);
+  return {
+    returnToUrl: T,
+    clearReturnTo: I,
+    setReturnTo: N,
+    navigateToZone: M,
+    getSmartRedirect: P
+  };
+}
+function Jn(r, e, t = Je, n = "url") {
+  if (!e || n !== "url")
+    return r;
+  const o = new URL(r, window.location.origin);
+  return o.searchParams.set(t, e), o.pathname + o.search;
+}
 export {
-  br as ApiMappers,
-  Fe as AppApiService,
-  gr as AppLoader,
-  Jt as AppProvider,
-  rt as AuthApiService,
-  Zt as AuthProvider,
-  ar as FeatureFlag,
-  ut as FeatureFlagApiService,
-  er as FeatureFlagProvider,
-  wr as HealthApiService,
-  ne as HttpService,
-  ir as LandingRoute,
-  lr as LoginForm,
-  dr as MagicLinkForm,
-  ur as MagicLinkVerify,
-  hr as PasswordRecoveryForm,
-  mr as PermissionApiService,
-  rr as Protected,
-  nr as ProtectedRoute,
-  Ce as RoleApiService,
-  ke as SessionManager,
-  cr as SignupForm,
-  gt as SubscriptionApiService,
-  or as SubscriptionGuard,
-  yr as SubscriptionPlanApiService,
-  tr as SubscriptionProvider,
-  ue as TenantApiService,
-  Yt as TenantProvider,
-  sr as TenantRoute,
-  fr as TenantSelector,
-  nt as UserApiService,
-  fe as UserType,
-  Kt as useApi,
-  ge as useApp,
-  pr as useAppLoaderState,
-  oe as useAuth,
-  ht as useFeatureFlags,
-  Xt as useSettings,
-  pt as useSubscription,
-  ye as useTenant,
-  ce as useTenantInfo,
-  we as useTenantOptional,
-  Qt as useTenantSettings
+  Mn as AdminZone,
+  Zn as ApiMappers,
+  $e as AppApiService,
+  zn as AppLoader,
+  un as AppProvider,
+  ht as AuthApiService,
+  mn as AuthProvider,
+  Rn as AuthenticatedZone,
+  Ze as DEFAULT_ZONE_PRESETS,
+  Ne as DEFAULT_ZONE_ROOTS,
+  Un as FeatureFlag,
+  vt as FeatureFlagApiService,
+  yn as FeatureFlagProvider,
+  In as GuestZone,
+  Gn as HealthApiService,
+  ie as HttpService,
+  An as LandingRoute,
+  $n as LoginForm,
+  Bn as MagicLinkForm,
+  qn as MagicLinkVerify,
+  En as OpenZone,
+  On as PasswordRecoveryForm,
+  Vn as PermissionApiService,
+  vn as Protected,
+  Tn as ProtectedRoute,
+  Pn as PublicZone,
+  He as RoleApiService,
+  bn as RoutingProvider,
+  Ae as SessionManager,
+  Hn as SignupForm,
+  kt as SubscriptionApiService,
+  Cn as SubscriptionGuard,
+  jn as SubscriptionPlanApiService,
+  wn as SubscriptionProvider,
+  fe as TenantApiService,
+  Fn as TenantAuthenticatedZone,
+  Dn as TenantGuestZone,
+  Nn as TenantOpenZone,
+  gn as TenantProvider,
+  kn as TenantRoute,
+  Wn as TenantSelector,
+  xn as TenantZone,
+  gt as UserApiService,
+  se as UserType,
+  Ln as UserZone,
+  ae as ZoneRoute,
+  Jn as buildRedirectUrl,
+  hn as useApi,
+  ye as useApp,
+  _n as useAppLoaderState,
+  le as useAuth,
+  Tt as useFeatureFlags,
+  Sn as useRouting,
+  xt as useRoutingOptional,
+  fn as useSettings,
+  At as useSubscription,
+  he as useTenant,
+  ge as useTenantInfo,
+  Se as useTenantOptional,
+  pn as useTenantSettings,
+  Kn as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map