@skylabs-digital/react-identity-access 2.13.0 → 2.14.0

package/dist/index.es.js

@@ -1,6 +1,6 @@
 import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
-import { createContext as me, useMemo as K, useState as A, useCallback as re, useEffect as X, useContext as oe, useRef as ze } from "react";
-import { useLocation as be, Navigate as fe, useNavigate as lt, useSearchParams as ct } from "react-router-dom";
+import { createContext as ue, useMemo as Z, useState as A, useCallback as re, useEffect as X, useContext as oe, useRef as We } from "react";
+import { useLocation as be, Navigate as me, useNavigate as dt, useSearchParams as ut } from "react-router-dom";
 class ie {
   // SessionManager instance
   constructor(e, t = 1e4) {
@@ -12,44 +12,44 @@ class ie {
   getBaseUrl() {
     return this.baseUrl;
   }
-  async request(e, t, n, i) {
-    return this.executeRequest(e, t, n, i, !1);
+  async request(e, t, n, o) {
+    return this.executeRequest(e, t, n, o, !1);
   }
-  async executeRequest(e, t, n, i, o = !1) {
-    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, p = (i == null ? void 0 : i.timeout) || this.timeout;
+  async executeRequest(e, t, n, o, i = !1) {
+    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, p = (o == null ? void 0 : o.timeout) || this.timeout;
     let f = {
       "Content-Type": "application/json",
-      ...i == null ? void 0 : i.headers
+      ...o == null ? void 0 : o.headers
     };
-    if (!(i != null && i.skipAuth) && this.sessionManager)
+    if (!(o != null && o.skipAuth) && this.sessionManager)
       try {
-        const w = await this.sessionManager.getAuthHeaders();
-        f = { ...f, ...w };
-      } catch (w) {
-        console.warn("Failed to inject auth headers:", w);
+        const b = await this.sessionManager.getAuthHeaders();
+        f = { ...f, ...b };
+      } catch (b) {
+        console.warn("Failed to inject auth headers:", b);
       }
-    const b = new AbortController(), u = setTimeout(() => b.abort(), p);
+    const w = new AbortController(), u = setTimeout(() => w.abort(), p);
     try {
-      const w = await fetch(a, {
+      const b = await fetch(a, {
         method: e,
         headers: f,
         body: n ? JSON.stringify(n) : void 0,
-        signal: b.signal
+        signal: w.signal
       });
-      if (clearTimeout(u), w.status === 401 && !(i != null && i.skipRetry) && !o && this.sessionManager)
+      if (clearTimeout(u), b.status === 401 && !(o != null && o.skipRetry) && !i && this.sessionManager)
         try {
-          const v = this.sessionManager.getTokens();
-          if (v != null && v.refreshToken)
-            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, n, i, !0);
+          const T = this.sessionManager.getTokens();
+          if (T != null && T.refreshToken)
+            return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, n, o, !0);
         } catch {
-          throw new Error(`HTTP ${w.status}: ${w.statusText}`);
+          throw new Error(`HTTP ${b.status}: ${b.statusText}`);
         }
-      if (!w.ok)
-        throw new Error(`HTTP ${w.status}: ${w.statusText}`);
-      const g = w.headers.get("content-type");
-      return !g || !g.includes("application/json") ? {} : await w.json();
-    } catch (w) {
-      throw clearTimeout(u), w instanceof Error && w.name === "AbortError" ? new Error(`Request timeout after ${p}ms`) : w;
+      if (!b.ok)
+        throw new Error(`HTTP ${b.status}: ${b.statusText}`);
+      const g = b.headers.get("content-type");
+      return !g || !g.includes("application/json") ? {} : await b.json();
+    } catch (b) {
+      throw clearTimeout(u), b instanceof Error && b.name === "AbortError" ? new Error(`Request timeout after ${p}ms`) : b;
     }
   }
   async get(e, t) {
@@ -65,7 +65,7 @@ class ie {
     return this.request("DELETE", e, void 0, t);
   }
 }
-class Ce {
+class $e {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -78,12 +78,12 @@ class Ce {
   async getApps(e) {
     const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
     e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
-    const i = `/apps/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
+    const o = `/apps/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      apps: o.data,
-      meta: o.meta
+      apps: i.data,
+      meta: i.meta
     };
   }
   async getAppById(e) {
@@ -110,11 +110,11 @@ class Ce {
     )).data;
   }
   async updateSettingsSchema(e, t, n) {
-    const i = await this.sessionManager.getAuthHeaders();
+    const o = await this.sessionManager.getAuthHeaders();
     return (await this.httpService.put(
       `/apps/${e}/settings-schema`,
       { schema: t, defaultSettings: n },
-      { headers: i }
+      { headers: o }
     )).data;
   }
   async exportConfig(e) {
@@ -124,30 +124,30 @@ class Ce {
     })).data;
   }
 }
-const Re = me(null);
-function dn({ config: r, children: e }) {
-  const t = K(
+const Re = ue(null);
+function un({ config: r, children: e }) {
+  const t = Z(
     () => {
-      var g, v, M;
+      var g, T, I;
       return {
         enabled: ((g = r.cache) == null ? void 0 : g.enabled) ?? !0,
-        ttl: ((v = r.cache) == null ? void 0 : v.ttl) ?? 3e5,
+        ttl: ((T = r.cache) == null ? void 0 : T.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((M = r.cache) == null ? void 0 : M.storageKey) ?? `app_cache_${r.appId}`
+        storageKey: ((I = r.cache) == null ? void 0 : I.storageKey) ?? `app_cache_${r.appId}`
       };
     },
     [r.cache, r.appId]
-  ), [n, i] = A(() => {
+  ), [n, o] = A(() => {
     if (!t.enabled) return null;
     try {
       const g = localStorage.getItem(t.storageKey);
       if (!g) return null;
-      const v = JSON.parse(g);
-      return Date.now() - v.timestamp < t.ttl && v.appId === r.appId ? v.data : (localStorage.removeItem(t.storageKey), null);
+      const T = JSON.parse(g);
+      return Date.now() - T.timestamp < t.ttl && T.appId === r.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = A(!n), [p, f] = A(null), b = K(() => {
+  }), [i, a] = A(!n), [p, f] = A(null), w = Z(() => {
     const g = () => {
       u();
     };
@@ -156,44 +156,44 @@ function dn({ config: r, children: e }) {
       baseUrl: r.baseUrl,
       // App info
       appInfo: n,
-      isAppLoading: o,
+      isAppLoading: i,
       appError: p,
       retryApp: g
     };
-  }, [r, n, o, p]), u = re(
+  }, [r, n, i, p]), u = re(
     async (g = !1) => {
       if (!(!g && t.enabled && n))
         try {
           a(!0), f(null);
-          const v = new ie(r.baseUrl), F = await new Ce(v, {}).getPublicAppInfo(r.appId);
-          if (i(F), t.enabled)
+          const T = new ie(r.baseUrl), N = await new $e(T, {}).getPublicAppInfo(r.appId);
+          if (o(N), t.enabled)
             try {
-              const L = {
-                data: F,
+              const M = {
+                data: N,
                 timestamp: Date.now(),
                 appId: r.appId
               };
-              localStorage.setItem(t.storageKey, JSON.stringify(L));
-            } catch (L) {
-              console.warn("Failed to cache app info:", L);
+              localStorage.setItem(t.storageKey, JSON.stringify(M));
+            } catch (M) {
+              console.warn("Failed to cache app info:", M);
             }
-        } catch (v) {
-          const M = v instanceof Error ? v : new Error("Failed to load app information");
-          f(M), i(null);
+        } catch (T) {
+          const I = T instanceof Error ? T : new Error("Failed to load app information");
+          f(I), o(null);
         } finally {
           a(!1);
         }
     },
     [r.baseUrl, r.appId, t, n]
-  ), w = re(async () => {
+  ), b = re(async () => {
     if (!(!t.enabled || !n))
       try {
         const g = localStorage.getItem(t.storageKey);
         if (!g) return;
-        const v = JSON.parse(g);
-        if (Date.now() - v.timestamp > t.ttl * 0.5) {
-          const F = new ie(r.baseUrl), P = await new Ce(F, {}).getPublicAppInfo(r.appId);
-          i(P);
+        const T = JSON.parse(g);
+        if (Date.now() - T.timestamp > t.ttl * 0.5) {
+          const N = new ie(r.baseUrl), P = await new $e(N, {}).getPublicAppInfo(r.appId);
+          o(P);
           const h = {
             data: P,
             timestamp: Date.now(),
@@ -206,8 +206,8 @@ function dn({ config: r, children: e }) {
       }
   }, [r, t, n]);
   return X(() => {
-    n ? w() : u();
-  }, []), /* @__PURE__ */ s(Re.Provider, { value: b, children: e });
+    n ? b() : u();
+  }, []), /* @__PURE__ */ s(Re.Provider, { value: w, children: e });
 }
 function ye() {
   const r = oe(Re);
@@ -215,10 +215,10 @@ function ye() {
     throw new Error("useApp must be used within an AppProvider");
   return r;
 }
-function _e() {
+function Ve() {
   return oe(Re);
 }
-const un = ye;
+const hn = ye;
 class Ae {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey);
@@ -256,13 +256,13 @@ class Ae {
     this.tokenStorage.set(t);
   }
   getTokens() {
-    const { accessToken: e, refreshToken: t, expiresAt: n, expiresIn: i, tokenType: o } = this.tokenStorage.get() || {};
+    const { accessToken: e, refreshToken: t, expiresAt: n, expiresIn: o, tokenType: i } = this.tokenStorage.get() || {};
     return e ? {
       accessToken: e,
       refreshToken: t,
       expiresAt: n,
-      expiresIn: i,
-      tokenType: o
+      expiresIn: o,
+      tokenType: i
     } : null;
   }
   clearTokens() {
@@ -298,10 +298,10 @@ class Ae {
     try {
       await this.refreshPromise;
       const t = this.getTokens(), n = t != null && t.accessToken ? { Authorization: `Bearer ${t.accessToken}` } : {};
-      return this.refreshQueue.forEach(({ resolve: i }) => i(n)), this.refreshQueue = [], n;
+      return this.refreshQueue.forEach(({ resolve: o }) => o(n)), this.refreshQueue = [], n;
     } catch (t) {
       const n = t instanceof Error ? t : new Error("Token refresh failed");
-      return this.refreshQueue.forEach(({ reject: i }) => i(n)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
+      return this.refreshQueue.forEach(({ reject: o }) => o(n)), this.refreshQueue = [], this.clearSession(), this.onRefreshFailed && this.onRefreshFailed(), {};
     } finally {
       this.refreshPromise = null;
     }
@@ -320,11 +320,11 @@ class Ae {
     });
     if (!n.ok)
       throw new Error(`Token refresh failed: ${n.status} ${n.statusText}`);
-    const i = await n.json();
+    const o = await n.json();
     this.setTokens({
-      accessToken: i.accessToken,
-      refreshToken: i.refreshToken || e,
-      expiresIn: i.expiresIn
+      accessToken: o.accessToken,
+      refreshToken: o.refreshToken || e,
+      expiresIn: o.expiresIn
     });
   }
   setUser(e) {
@@ -352,8 +352,8 @@ class Ae {
       if (!(e != null && e.accessToken)) return null;
       const t = e.accessToken.split(".");
       if (t.length !== 3) return null;
-      const n = t[1], i = atob(n.replace(/-/g, "+").replace(/_/g, "/"));
-      return JSON.parse(i);
+      const n = t[1], o = atob(n.replace(/-/g, "+").replace(/_/g, "/"));
+      return JSON.parse(o);
     } catch {
       return null;
     }
@@ -372,7 +372,7 @@ class Ae {
     return e !== null && !this.isTokenExpired(e);
   }
 }
-class dt {
+class ht {
   constructor(e) {
     this.httpService = e;
   }
@@ -428,7 +428,7 @@ class dt {
     });
   }
 }
-class De {
+class He {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -468,10 +468,10 @@ class De {
   async getRolesByApp(e, t) {
     const n = new URLSearchParams();
     t != null && t.page && n.append("page", t.page.toString()), t != null && t.limit && n.append("limit", t.limit.toString()), t != null && t.sortBy && n.append("sortBy", t.sortBy), t != null && t.sortOrder && n.append("sortOrder", t.sortOrder);
-    const i = `/roles/app/${e}${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i);
+    const o = `/roles/app/${e}${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o);
     return {
-      roles: o.data,
-      meta: o.meta
+      roles: i.data,
+      meta: i.meta
     };
   }
   async assignRole(e, t) {
@@ -493,9 +493,9 @@ class De {
   async getUserRoles(e, t) {
     if (!this.sessionManager)
       throw new Error("SessionManager is required for private endpoints");
-    const n = await this.sessionManager.getAuthHeaders(), i = new URLSearchParams();
-    t != null && t.page && i.append("page", t.page.toString()), t != null && t.limit && i.append("limit", t.limit.toString()), t != null && t.sortBy && i.append("sortBy", t.sortBy), t != null && t.sortOrder && i.append("sortOrder", t.sortOrder);
-    const o = `/roles/user/${e}${i.toString() ? `?${i.toString()}` : ""}`, a = await this.httpService.get(o, {
+    const n = await this.sessionManager.getAuthHeaders(), o = new URLSearchParams();
+    t != null && t.page && o.append("page", t.page.toString()), t != null && t.limit && o.append("limit", t.limit.toString()), t != null && t.sortBy && o.append("sortBy", t.sortBy), t != null && t.sortOrder && o.append("sortOrder", t.sortOrder);
+    const i = `/roles/user/${e}${o.toString() ? `?${o.toString()}` : ""}`, a = await this.httpService.get(i, {
       headers: n
     });
     return {
@@ -504,7 +504,7 @@ class De {
     };
   }
 }
-class ut {
+class gt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -517,12 +517,12 @@ class ut {
   async getUsers(e) {
     const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
     e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
-    const i = `/users/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
+    const o = `/users/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      users: o.data,
-      meta: o.meta
+      users: i.data,
+      meta: i.meta
     };
   }
   async getUserById(e) {
@@ -544,7 +544,7 @@ class ut {
     });
   }
 }
-class pe {
+class fe {
   constructor(e, t, n) {
     this.httpService = e, this.appId = t, this.sessionManager = n;
   }
@@ -561,12 +561,12 @@ class pe {
       throw new Error("SessionManager is required for private endpoints");
     const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
     e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
-    const i = `/tenants/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
+    const o = `/tenants/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      tenants: o.data,
-      meta: o.meta
+      tenants: i.data,
+      meta: i.meta
     };
   }
   async getTenantById(e) {
@@ -622,15 +622,15 @@ class pe {
     )).data;
   }
 }
-function ht(r, e) {
+function pt(r, e) {
   if (r === "localhost" || r.startsWith("127.") || r.startsWith("192.168."))
     return null;
   if (e) {
-    const i = e.toLowerCase(), o = r.toLowerCase();
-    if (o === i || o === `www.${i}`)
+    const o = e.toLowerCase(), i = r.toLowerCase();
+    if (i === o || i === `www.${o}`)
       return null;
-    if (o.endsWith(`.${i}`)) {
-      const a = o.slice(0, -(i.length + 1));
+    if (i.endsWith(`.${o}`)) {
+      const a = i.slice(0, -(o.length + 1));
       return a === "www" ? null : a;
     }
     return null;
@@ -638,26 +638,26 @@ function ht(r, e) {
   const n = r.split(".");
   return n.length >= 3 && n[0] !== "www" ? n[0] : null;
 }
-function gt(r, e = "tenant", t) {
-  const i = new URLSearchParams(r).get(e);
-  return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
+function ft(r, e = "tenant", t) {
+  const o = new URLSearchParams(r).get(e);
+  return o ? (t && t.setItem("tenant", o), o) : t ? t.getItem("tenant") : null;
 }
-function pt(r, e, t) {
-  const { tenantMode: n, baseDomain: i, selectorParam: o } = r;
-  return n === "subdomain" ? ht(e.hostname, i) : n === "selector" ? gt(e.search, o, t) : null;
+function mt(r, e, t) {
+  const { tenantMode: n, baseDomain: o, selectorParam: i } = r;
+  return n === "subdomain" ? pt(e.hostname, o) : n === "selector" ? ft(e.search, i, t) : null;
 }
-function ft(r, e, t) {
+function yt(r, e, t) {
   if (t)
     return `${r}.${t}`;
   const n = e.split(".");
   return n.length === 2 ? `${r}.${e}` : n.length >= 3 ? (n[0] = r, n.join(".")) : null;
 }
 const de = "_auth";
-function $e(r) {
+function Be(r) {
   const e = JSON.stringify(r);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function mt(r) {
+function wt(r) {
   try {
     let e = r.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
@@ -668,7 +668,7 @@ function mt(r) {
     return null;
   }
 }
-function yt() {
+function bt() {
   if (typeof window > "u")
     return console.log("[CrossDomainAuth] SSR environment, skipping URL token extraction"), null;
   const e = new URLSearchParams(window.location.search).get(de);
@@ -677,7 +677,7 @@ function yt() {
     searchParams: window.location.search,
     encodedLength: e == null ? void 0 : e.length
   }), !e) return null;
-  const t = mt(e);
+  const t = wt(e);
   return console.log("[CrossDomainAuth] Token decode result:", {
     success: !!t,
     hasAccessToken: !!(t != null && t.accessToken),
@@ -685,7 +685,7 @@ function yt() {
     expiresIn: t == null ? void 0 : t.expiresIn
   }), t;
 }
-function wt() {
+function St() {
   if (typeof window > "u") return;
   const r = new URL(window.location.href);
   r.searchParams.delete(de), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
@@ -693,9 +693,9 @@ function wt() {
     newUrl: r.toString()
   }), window.history.replaceState({}, "", r.toString());
 }
-const Ie = me(null);
-function hn({ config: r, children: e }) {
-  const { baseUrl: t, appInfo: n, appId: i } = ye(), o = re(() => typeof window > "u" ? null : pt(
+const Ie = ue(null);
+function gn({ config: r, children: e }) {
+  const { baseUrl: t, appInfo: n, appId: o } = ye(), i = re(() => typeof window > "u" ? null : mt(
     {
       tenantMode: r.tenantMode || "selector",
       baseDomain: r.baseDomain,
@@ -706,69 +706,69 @@ function hn({ config: r, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [r.tenantMode, r.baseDomain, r.selectorParam]), [a, p] = A(() => o()), f = K(
+  ), [r.tenantMode, r.baseDomain, r.selectorParam]), [a, p] = A(() => i()), f = Z(
     () => {
-      var c, $, E;
+      var c, H, F;
       return {
         enabled: ((c = r.cache) == null ? void 0 : c.enabled) ?? !0,
-        ttl: (($ = r.cache) == null ? void 0 : $.ttl) ?? 5 * 60 * 1e3,
+        ttl: ((H = r.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((E = r.cache) == null ? void 0 : E.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((F = r.cache) == null ? void 0 : F.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [r.cache, a]
-  ), [b, u] = A(() => {
+  ), [w, u] = A(() => {
     if (r.initialTenant) return r.initialTenant;
     if (!f.enabled || !a) return null;
     try {
       const c = localStorage.getItem(f.storageKey);
       if (!c) return null;
-      const $ = JSON.parse(c);
-      return Date.now() - $.timestamp < f.ttl && $.tenantSlug === a ? $.data : (localStorage.removeItem(f.storageKey), null);
+      const H = JSON.parse(c);
+      return Date.now() - H.timestamp < f.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(f.storageKey), null);
     } catch {
       return null;
     }
-  }), [w, g] = A(!b && !r.initialTenant), [v, M] = A(null), [F, L] = A(null), [P, h] = A(!1), [x, k] = A(null);
+  }), [b, g] = A(!w && !r.initialTenant), [T, I] = A(null), [N, M] = A(null), [P, h] = A(!1), [x, S] = A(null);
   X(() => {
-    const c = o();
+    const c = i();
     p(c);
-  }, [o]);
-  const I = (n == null ? void 0 : n.settingsSchema) || null, U = re(
-    async (c, $ = !1) => {
-      if (!(!$ && f.enabled && b && b.domain === c))
+  }, [i]);
+  const L = (n == null ? void 0 : n.settingsSchema) || null, E = re(
+    async (c, H = !1) => {
+      if (!(!H && f.enabled && w && w.domain === c))
         try {
-          g(!0), M(null);
-          const E = new ie(t), m = await new pe(E, i).getPublicTenantInfo(c);
+          g(!0), I(null);
+          const F = new ie(t), m = await new fe(F, o).getPublicTenantInfo(c);
           if (u(m), f.enabled)
             try {
-              const S = {
+              const v = {
                 data: m,
                 timestamp: Date.now(),
                 tenantSlug: c
               };
-              localStorage.setItem(f.storageKey, JSON.stringify(S));
-            } catch (S) {
-              console.warn("Failed to cache tenant info:", S);
+              localStorage.setItem(f.storageKey, JSON.stringify(v));
+            } catch (v) {
+              console.warn("Failed to cache tenant info:", v);
             }
-        } catch (E) {
-          const y = E instanceof Error ? E : new Error("Failed to load tenant information");
-          M(y), u(null);
+        } catch (F) {
+          const y = F instanceof Error ? F : new Error("Failed to load tenant information");
+          I(y), u(null);
         } finally {
           g(!1);
         }
     },
-    [t, i, f, b]
+    [t, o, f, w]
   ), C = re(async () => {
-    if (!(!f.enabled || !b || !a))
+    if (!(!f.enabled || !w || !a))
       try {
         const c = localStorage.getItem(f.storageKey);
         if (!c) return;
-        const $ = JSON.parse(c);
-        if (Date.now() - $.timestamp > f.ttl * 0.5) {
-          const y = new ie(t), S = await new pe(y, i).getPublicTenantInfo(a);
-          u(S);
+        const H = JSON.parse(c);
+        if (Date.now() - H.timestamp > f.ttl * 0.5) {
+          const y = new ie(t), v = await new fe(y, o).getPublicTenantInfo(a);
+          u(v);
           const G = {
-            data: S,
+            data: v,
             timestamp: Date.now(),
             tenantSlug: a
           };
@@ -777,47 +777,47 @@ function hn({ config: r, children: e }) {
       } catch (c) {
         console.warn("Background tenant refresh failed:", c);
       }
-  }, [t, i, f, b, a]), R = re(async () => {
-    if (b != null && b.id)
+  }, [t, o, f, w, a]), R = re(async () => {
+    if (w != null && w.id)
       try {
-        h(!0), k(null);
-        const c = new ie(t), E = await new pe(c, b.appId).getTenantSettings(b.id);
-        L(E);
+        h(!0), S(null);
+        const c = new ie(t), F = await new fe(c, w.appId).getTenantSettings(w.id);
+        M(F);
       } catch (c) {
-        const $ = c instanceof Error ? c : new Error("Failed to load tenant settings");
-        k($), L(null);
+        const H = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        S(H), M(null);
       } finally {
         h(!1);
       }
-  }, [t, b]), B = re(() => {
+  }, [t, w]), $ = re(() => {
     R();
   }, [R]), l = re(
     (c) => {
-      if (!I)
+      if (!L)
         return { isValid: !0, errors: [] };
-      const $ = [];
+      const H = [];
       try {
-        return I.properties && Object.entries(I.properties).forEach(([E, y]) => {
-          var S;
-          const m = c[E];
-          if ((S = I.required) != null && S.includes(E) && m == null) {
-            $.push(`Field '${E}' is required`);
+        return L.properties && Object.entries(L.properties).forEach(([F, y]) => {
+          var v;
+          const m = c[F];
+          if ((v = L.required) != null && v.includes(F) && m == null) {
+            H.push(`Field '${F}' is required`);
             return;
           }
           if (m != null) {
             if (y.type) {
               const G = y.type, J = typeof m;
-              G === "string" && J !== "string" ? $.push(`Field '${E}' must be a string`) : (G === "number" || G === "integer") && J !== "number" ? $.push(`Field '${E}' must be a number`) : G === "boolean" && J !== "boolean" ? $.push(`Field '${E}' must be a boolean`) : G === "array" && !Array.isArray(m) && $.push(`Field '${E}' must be an array`);
+              G === "string" && J !== "string" ? H.push(`Field '${F}' must be a string`) : (G === "number" || G === "integer") && J !== "number" ? H.push(`Field '${F}' must be a number`) : G === "boolean" && J !== "boolean" ? H.push(`Field '${F}' must be a boolean`) : G === "array" && !Array.isArray(m) && H.push(`Field '${F}' must be an array`);
             }
-            y.minLength !== void 0 && typeof m == "string" && m.length < y.minLength && $.push(
-              `Field '${E}' must be at least ${y.minLength} characters long`
-            ), y.maxLength !== void 0 && typeof m == "string" && m.length > y.maxLength && $.push(
-              `Field '${E}' must be no more than ${y.maxLength} characters long`
-            ), y.minimum !== void 0 && typeof m == "number" && m < y.minimum && $.push(`Field '${E}' must be at least ${y.minimum}`), y.maximum !== void 0 && typeof m == "number" && m > y.maximum && $.push(`Field '${E}' must be no more than ${y.maximum}`), y.pattern && typeof m == "string" && (new RegExp(y.pattern).test(m) || $.push(`Field '${E}' does not match the required pattern`)), y.enum && !y.enum.includes(m) && $.push(`Field '${E}' must be one of: ${y.enum.join(", ")}`);
+            y.minLength !== void 0 && typeof m == "string" && m.length < y.minLength && H.push(
+              `Field '${F}' must be at least ${y.minLength} characters long`
+            ), y.maxLength !== void 0 && typeof m == "string" && m.length > y.maxLength && H.push(
+              `Field '${F}' must be no more than ${y.maxLength} characters long`
+            ), y.minimum !== void 0 && typeof m == "number" && m < y.minimum && H.push(`Field '${F}' must be at least ${y.minimum}`), y.maximum !== void 0 && typeof m == "number" && m > y.maximum && H.push(`Field '${F}' must be no more than ${y.maximum}`), y.pattern && typeof m == "string" && (new RegExp(y.pattern).test(m) || H.push(`Field '${F}' does not match the required pattern`)), y.enum && !y.enum.includes(m) && H.push(`Field '${F}' must be one of: ${y.enum.join(", ")}`);
           }
         }), {
-          isValid: $.length === 0,
-          errors: $
+          isValid: H.length === 0,
+          errors: H
         };
       } catch {
         return {
@@ -826,18 +826,18 @@ function hn({ config: r, children: e }) {
         };
       }
     },
-    [I]
+    [L]
   );
   X(() => {
-    !r.initialTenant && a ? b ? C() : U(a) : !r.initialTenant && !a && (u(null), M(null), g(!1));
-  }, [r.initialTenant, a, b, U, C]), X(() => {
-    b != null && b.id ? R() : (L(null), k(null), h(!1));
-  }, [b == null ? void 0 : b.id, R]);
-  const N = re(
-    (c, $) => {
-      const { mode: E = "reload", tokens: y, redirectPath: m } = $ || {}, S = r.tenantMode || "selector";
-      if (localStorage.setItem("tenant", c), S === "subdomain") {
-        const G = window.location.hostname, J = ft(
+    !r.initialTenant && a ? w ? C() : E(a) : !r.initialTenant && !a && (u(null), I(null), g(!1));
+  }, [r.initialTenant, a, w, E, C]), X(() => {
+    w != null && w.id ? R() : (M(null), S(null), h(!1));
+  }, [w == null ? void 0 : w.id, R]);
+  const D = re(
+    (c, H) => {
+      const { mode: F = "reload", tokens: y, redirectPath: m } = H || {}, v = r.tenantMode || "selector";
+      if (localStorage.setItem("tenant", c), v === "subdomain") {
+        const G = window.location.hostname, J = yt(
           c,
           G,
           r.baseDomain
@@ -850,56 +850,56 @@ function hn({ config: r, children: e }) {
           return;
         }
         const q = m || window.location.pathname, O = new URL(`${window.location.protocol}//${J}${q}`);
-        new URLSearchParams(window.location.search).forEach((T, Z) => {
-          Z !== de && O.searchParams.set(Z, T);
-        }), y && O.searchParams.set(de, $e(y)), window.location.href = O.toString();
-      } else if (S === "selector") {
+        new URLSearchParams(window.location.search).forEach((k, K) => {
+          K !== de && O.searchParams.set(K, k);
+        }), y && O.searchParams.set(de, Be(y)), window.location.href = O.toString();
+      } else if (v === "selector") {
         const G = m || window.location.pathname, J = new URLSearchParams(window.location.search);
-        if (J.set(r.selectorParam || "tenant", c), J.delete(de), y && J.set(de, $e(y)), E === "reload") {
+        if (J.set(r.selectorParam || "tenant", c), J.delete(de), y && J.set(de, Be(y)), F === "reload") {
           const q = `${G}?${J.toString()}${window.location.hash}`;
           window.location.href = q;
         } else {
           const q = `${G}?${J.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", q), p(c), U(c);
+          window.history.pushState({}, "", q), p(c), E(c);
         }
       }
     },
-    [r.tenantMode, r.selectorParam, r.baseDomain, U]
-  ), D = K(() => ({
+    [r.tenantMode, r.selectorParam, r.baseDomain, E]
+  ), U = Z(() => ({
     // Tenant info
-    tenant: b,
+    tenant: w,
     tenantSlug: a,
-    isTenantLoading: w,
-    tenantError: v,
+    isTenantLoading: b,
+    tenantError: T,
     retryTenant: () => {
-      a && U(a);
+      a && E(a);
     },
     // Settings
-    settings: F,
-    settingsSchema: I,
+    settings: N,
+    settingsSchema: L,
     isSettingsLoading: P,
     settingsError: x,
     // Actions
-    refreshSettings: B,
-    switchTenant: N,
+    refreshSettings: $,
+    switchTenant: D,
     // Validation
     validateSettings: l
   }), [
-    b,
-    a,
     w,
-    v,
-    F,
-    I,
+    a,
+    b,
+    T,
+    N,
+    L,
     P,
     x,
-    B,
-    N,
+    $,
+    D,
     l
   ]);
-  return /* @__PURE__ */ s(Ie.Provider, { value: D, children: e });
+  return /* @__PURE__ */ s(Ie.Provider, { value: U, children: e });
 }
-function ue() {
+function he() {
   const r = oe(Ie);
   if (!r)
     throw new Error("useTenant must be used within a TenantProvider");
@@ -908,93 +908,93 @@ function ue() {
 function Se() {
   return oe(Ie);
 }
-const gn = ue;
-function pn() {
-  const { settings: r, settingsSchema: e, isSettingsLoading: t, settingsError: n, validateSettings: i } = ue();
+const pn = he;
+function fn() {
+  const { settings: r, settingsSchema: e, isSettingsLoading: t, settingsError: n, validateSettings: o } = he();
   return {
     settings: r,
     settingsSchema: e,
     isLoading: t,
     error: n,
-    validateSettings: i
+    validateSettings: o
   };
 }
-function he() {
-  const { tenant: r, tenantSlug: e, isTenantLoading: t, tenantError: n, retryTenant: i } = ue();
+function ge() {
+  const { tenant: r, tenantSlug: e, isTenantLoading: t, tenantError: n, retryTenant: o } = he();
   return {
     tenant: r,
     tenantSlug: e,
     isLoading: t,
     error: n,
-    retry: i
+    retry: o
   };
 }
-const Me = me(null);
-function fn({ config: r = {}, children: e }) {
-  const { appId: t, baseUrl: n } = ye(), { tenant: i, tenantSlug: o, switchTenant: a } = ue(), [p, f] = A(r.initialRoles || []), [b, u] = A(!r.initialRoles), [w, g] = A(null), [v, M] = A(!1), [F, L] = A(null), [P, h] = A(0), [x, k] = A(() => {
+const Me = ue(null);
+function mn({ config: r = {}, children: e }) {
+  const { appId: t, baseUrl: n } = ye(), { tenant: o, tenantSlug: i, switchTenant: a } = he(), [p, f] = A(r.initialRoles || []), [w, u] = A(!r.initialRoles), [b, g] = A(null), [T, I] = A(!1), [N, M] = A(null), [P, h] = A(0), [x, S] = A(() => {
     try {
-      const T = localStorage.getItem("userTenants");
-      return T ? JSON.parse(T) : [];
+      const k = localStorage.getItem("userTenants");
+      return k ? JSON.parse(k) : [];
     } catch {
       return [];
     }
-  }), [I, U] = A(!1), C = ze({ done: !1, urlTokens: null });
-  C.current.done || (C.current.done = !0, C.current.urlTokens = yt(), C.current.urlTokens && console.log(
+  }), [L, E] = A(!1), C = We({ done: !1, urlTokens: null });
+  C.current.done || (C.current.done = !0, C.current.urlTokens = bt(), C.current.urlTokens && console.log(
     "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
   ));
-  const [R, B] = A(() => {
-    const T = C.current.urlTokens !== null;
-    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", T), T;
-  }), l = K(() => {
-    const T = new Ae({
-      tenantSlug: o,
+  const [R, $] = A(() => {
+    const k = C.current.urlTokens !== null;
+    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", k), k;
+  }), l = Z(() => {
+    const k = new Ae({
+      tenantSlug: i,
       onRefreshFailed: r.onRefreshFailed,
       baseUrl: n
     });
-    return C.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), T.setTokens({
+    return C.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), k.setTokens({
       accessToken: C.current.urlTokens.accessToken,
       refreshToken: C.current.urlTokens.refreshToken,
       expiresIn: C.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", T.hasValidSession())), T;
-  }, [o, n, r.onRefreshFailed]), N = C.current.done && !R, D = K(() => {
-    const T = new ie(n);
-    return T.setSessionManager(l), T;
-  }, [n, l]), c = K(() => new dt(new ie(n)), [n]), $ = K(() => new ut(D, l), [D, l]), E = K(() => new De(new ie(n)), [n]), y = K(() => w || l.getUser(), [w, l]), m = K(() => y != null && y.roleId && p.find((T) => T.id === y.roleId) || null, [y, p]), S = K(() => (m == null ? void 0 : m.permissions) || [], [m]), G = K(() => l.hasValidSession() && w !== null, [l, w]), J = 5 * 60 * 1e3, q = K(() => {
-    const T = async (H = !1) => {
+    }), console.log("[AuthProvider] SYNC: Session valid:", k.hasValidSession())), k;
+  }, [i, n, r.onRefreshFailed]), D = C.current.done && !R, U = Z(() => {
+    const k = new ie(n);
+    return k.setSessionManager(l), k;
+  }, [n, l]), c = Z(() => new ht(new ie(n)), [n]), H = Z(() => new gt(U, l), [U, l]), F = Z(() => new He(new ie(n)), [n]), y = Z(() => b || l.getUser(), [b, l]), m = Z(() => y != null && y.roleId && p.find((k) => k.id === y.roleId) || null, [y, p]), v = Z(() => (m == null ? void 0 : m.permissions) || [], [m]), G = Z(() => l.hasValidSession() && b !== null, [l, b]), J = 5 * 60 * 1e3, q = Z(() => {
+    const k = async (B = !1) => {
       try {
         if (!l.hasValidSession())
           return;
         const z = Date.now();
-        if (!H && z - P < J && w)
+        if (!B && z - P < J && b)
           return;
         const W = l.getUserId();
         if (!W) {
           console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        M(!0), L(null);
-        const Q = await $.getUserById(W);
+        I(!0), M(null);
+        const Q = await H.getUserById(W);
         g(Q), l.setUser(Q), h(Date.now());
       } catch (z) {
         const Y = z instanceof Error ? z : new Error("Failed to load user data");
-        L(Y), console.error("[AuthProvider] Failed to load user data:", Y);
+        M(Y), console.error("[AuthProvider] Failed to load user data:", Y);
       } finally {
-        M(!1);
+        I(!1);
       }
-    }, Z = async () => {
-      await T();
-    }, ce = async (H) => {
-      var Ne;
-      const { username: z, password: Y, tenantSlug: W, redirectPath: Q } = H;
-      let ee = i == null ? void 0 : i.id, te = o, ne = l;
-      W && (ee = (await new pe(D, t).getPublicTenantInfo(W)).id, te = W);
+    }, K = async () => {
+      await k();
+    }, ce = async (B) => {
+      var Ce;
+      const { username: z, password: Y, tenantSlug: W, redirectPath: Q } = B;
+      let ee = o == null ? void 0 : o.id, te = i, ne = l;
+      W && (ee = (await new fe(U, t).getPublicTenantInfo(W)).id, te = W);
       const j = await c.login({
         username: z,
         password: Y,
         appId: t,
         tenantId: ee
-      }), ge = W && W !== o;
-      if (ge && (ne = new Ae({
+      }), pe = W && W !== i;
+      if (pe && (ne = new Ae({
         tenantSlug: te,
         baseUrl: n
       })), ne.setTokens({
@@ -1004,20 +1004,20 @@ function fn({ config: r = {}, children: e }) {
       }), j.user) {
         ne.setUser(j.user), g(j.user);
         try {
-          await T();
+          await k();
         } catch (we) {
           console.warn("Failed to load complete user data after login:", we);
         }
       }
       if (j.tenants && j.tenants.length > 0) {
-        k(j.tenants);
+        S(j.tenants);
         try {
           localStorage.setItem("userTenants", JSON.stringify(j.tenants));
         } catch {
         }
       }
-      const ke = ((Ne = j.user) == null ? void 0 : Ne.tenantId) !== null;
-      if (U(ke), ge && te && te !== o && a(te, {
+      const ke = ((Ce = j.user) == null ? void 0 : Ce.tenantId) !== null;
+      if (E(ke), pe && te && te !== i && a(te, {
         tokens: {
           accessToken: j.accessToken,
           refreshToken: j.refreshToken,
@@ -1025,7 +1025,7 @@ function fn({ config: r = {}, children: e }) {
         },
         redirectPath: Q
       }), !ke && j.tenants && j.tenants.length > 0) {
-        const we = H.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
+        const we = B.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
         if (j.tenants.length === 1 && we) {
           const Ue = j.tenants[0];
           a(Ue.subdomain, {
@@ -1039,13 +1039,13 @@ function fn({ config: r = {}, children: e }) {
         } else j.tenants.length > 1 && r.onTenantSelectionRequired && r.onTenantSelectionRequired(j.tenants);
       }
       return j;
-    }, ve = async (H) => {
-      const { email: z, phoneNumber: Y, name: W, password: Q, lastName: ee, tenantId: te } = H;
+    }, ve = async (B) => {
+      const { email: z, phoneNumber: Y, name: W, password: Q, lastName: ee, tenantId: te } = B;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!W || !Q)
         throw new Error("Name and password are required");
-      const ne = te ?? (i == null ? void 0 : i.id);
+      const ne = te ?? (o == null ? void 0 : o.id);
       return await c.signup({
         email: z,
         phoneNumber: Y,
@@ -1055,8 +1055,8 @@ function fn({ config: r = {}, children: e }) {
         lastName: ee,
         appId: t
       });
-    }, Ke = async (H) => {
-      const { email: z, phoneNumber: Y, name: W, password: Q, tenantName: ee, lastName: te } = H;
+    }, Ye = async (B) => {
+      const { email: z, phoneNumber: Y, name: W, password: Q, tenantName: ee, lastName: te } = B;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!W || !Q || !ee)
@@ -1070,19 +1070,19 @@ function fn({ config: r = {}, children: e }) {
         appId: t,
         lastName: te
       });
-    }, Je = async (H) => {
-      const { currentPassword: z, newPassword: Y } = H, W = await l.getAuthHeaders();
+    }, Qe = async (B) => {
+      const { currentPassword: z, newPassword: Y } = B, W = await l.getAuthHeaders();
       await c.changePassword({ currentPassword: z, newPassword: Y }, W);
-    }, Ye = async (H) => {
-      const { email: z, tenantId: Y } = H, W = Y ?? (i == null ? void 0 : i.id);
+    }, Xe = async (B) => {
+      const { email: z, tenantId: Y } = B, W = Y ?? (o == null ? void 0 : o.id);
       if (!W)
         throw new Error("tenantId is required for password reset");
       await c.requestPasswordReset({ email: z, tenantId: W });
-    }, Qe = async (H) => {
-      const { token: z, newPassword: Y } = H;
+    }, et = async (B) => {
+      const { token: z, newPassword: Y } = B;
       await c.confirmPasswordReset({ token: z, newPassword: Y });
-    }, Xe = async (H) => {
-      const { email: z, frontendUrl: Y, name: W, lastName: Q, tenantId: ee } = H, te = ee ?? (i == null ? void 0 : i.id);
+    }, tt = async (B) => {
+      const { email: z, frontendUrl: Y, name: W, lastName: Q, tenantId: ee } = B, te = ee ?? (o == null ? void 0 : o.id);
       if (!te)
         throw new Error("tenantId is required for magic link authentication");
       return await c.sendMagicLink({
@@ -1093,16 +1093,16 @@ function fn({ config: r = {}, children: e }) {
         lastName: Q,
         appId: t
       });
-    }, et = async (H) => {
-      const { token: z, email: Y, tenantSlug: W } = H;
-      let Q = i == null ? void 0 : i.id, ee = o, te = l;
-      W && (Q = (await new pe(D, t).getPublicTenantInfo(W)).id, ee = W);
+    }, nt = async (B) => {
+      const { token: z, email: Y, tenantSlug: W } = B;
+      let Q = o == null ? void 0 : o.id, ee = i, te = l;
+      W && (Q = (await new fe(U, t).getPublicTenantInfo(W)).id, ee = W);
       const ne = await c.verifyMagicLink({
         token: z,
         email: Y,
         appId: t,
         tenantId: Q
-      }), j = W && W !== o;
+      }), j = W && W !== i;
       if (j && (te = new Ae({
         tenantSlug: ee,
         baseUrl: n
@@ -1113,113 +1113,113 @@ function fn({ config: r = {}, children: e }) {
       }), ne.user) {
         te.setUser(ne.user), g(ne.user);
         try {
-          await T();
-        } catch (ge) {
-          console.warn("Failed to load complete user data after magic link login:", ge);
+          await k();
+        } catch (pe) {
+          console.warn("Failed to load complete user data after magic link login:", pe);
         }
       }
-      return j && ee && ee !== o && a(ee, {
+      return j && ee && ee !== i && a(ee, {
         tokens: {
           accessToken: ne.accessToken,
           refreshToken: ne.refreshToken,
           expiresIn: ne.expiresIn
         }
       }), ne;
-    }, tt = async () => {
-      const H = l.getTokens();
-      if (!(H != null && H.refreshToken))
+    }, rt = async () => {
+      const B = l.getTokens();
+      if (!(B != null && B.refreshToken))
         throw new Error("No refresh token available");
       const z = await c.refreshToken({
-        refreshToken: H.refreshToken
+        refreshToken: B.refreshToken
       });
       l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || H.refreshToken,
+        refreshToken: z.refreshToken || B.refreshToken,
         expiresIn: z.expiresIn
       });
-    }, nt = () => {
-      l.clearSession(), g(null), L(null), k([]), U(!1);
+    }, st = () => {
+      l.clearSession(), g(null), M(null), S([]), E(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, rt = (H) => {
-      l.setTokens(H);
-    }, st = () => l.hasValidSession(), it = () => {
-      l.clearSession(), g(null), L(null);
-    }, ot = async () => {
+    }, ot = (B) => {
+      l.setTokens(B);
+    }, it = () => l.hasValidSession(), at = () => {
+      l.clearSession(), g(null), M(null);
+    }, lt = async () => {
       if (t)
         try {
           u(!0);
-          const { roles: H } = await E.getRolesByApp(t);
-          f(H);
-        } catch (H) {
-          console.error("Failed to fetch roles:", H);
+          const { roles: B } = await F.getRolesByApp(t);
+          f(B);
+        } catch (B) {
+          console.error("Failed to fetch roles:", B);
         } finally {
           u(!1);
         }
-    }, at = async () => {
-      await ot();
-    }, Te = (H) => {
-      if (!S || S.length === 0)
+    }, ct = async () => {
+      await lt();
+    }, Te = (B) => {
+      if (!v || v.length === 0)
         return !1;
-      if (typeof H == "string")
-        return S.includes(H);
-      const z = `${H.resource}.${H.action}`;
-      return S.includes(z);
+      if (typeof B == "string")
+        return v.includes(B);
+      const z = `${B.resource}.${B.action}`;
+      return v.includes(z);
     };
     return {
       // RFC-003: Authentication state
       isAuthenticated: G,
       sessionManager: l,
-      authenticatedHttpService: D,
+      authenticatedHttpService: U,
       login: ce,
       signup: ve,
-      signupTenantAdmin: Ke,
-      sendMagicLink: Xe,
-      verifyMagicLink: et,
-      changePassword: Je,
-      requestPasswordReset: Ye,
-      confirmPasswordReset: Qe,
-      refreshToken: tt,
-      logout: nt,
-      setTokens: rt,
-      hasValidSession: st,
-      clearSession: it,
-      currentUser: w,
-      isUserLoading: v,
-      userError: F,
-      loadUserData: T,
-      refreshUser: Z,
-      isAuthInitializing: !N,
-      isAuthReady: N,
+      signupTenantAdmin: Ye,
+      sendMagicLink: tt,
+      verifyMagicLink: nt,
+      changePassword: Qe,
+      requestPasswordReset: Xe,
+      confirmPasswordReset: et,
+      refreshToken: rt,
+      logout: st,
+      setTokens: ot,
+      hasValidSession: it,
+      clearSession: at,
+      currentUser: b,
+      isUserLoading: T,
+      userError: N,
+      loadUserData: k,
+      refreshUser: K,
+      isAuthInitializing: !D,
+      isAuthReady: D,
       userRole: m,
-      userPermissions: S,
+      userPermissions: v,
       availableRoles: p,
-      rolesLoading: b,
+      rolesLoading: w,
       hasPermission: Te,
-      hasAnyPermission: (H) => H.some((z) => Te(z)),
-      hasAllPermissions: (H) => H.every((z) => Te(z)),
-      getUserPermissionStrings: () => S || [],
-      refreshRoles: at,
+      hasAnyPermission: (B) => B.some((z) => Te(z)),
+      hasAllPermissions: (B) => B.every((z) => Te(z)),
+      getUserPermissionStrings: () => v || [],
+      refreshRoles: ct,
       // RFC-004: Multi-tenant user membership
       userTenants: x,
-      hasTenantContext: I,
-      switchToTenant: async (H, z) => {
+      hasTenantContext: L,
+      switchToTenant: async (B, z) => {
         const { redirectPath: Y } = z || {}, W = l.getTokens();
         if (!(W != null && W.refreshToken))
           throw new Error("No refresh token available for tenant switch");
         const Q = await c.switchTenant({
           refreshToken: W.refreshToken,
-          tenantId: H
+          tenantId: B
         });
         l.setTokens({
           accessToken: Q.accessToken,
           refreshToken: W.refreshToken,
           // Keep the same refresh token
           expiresIn: Q.expiresIn
-        }), g(Q.user), l.setUser(Q.user), U(!0);
-        const ee = x.find((te) => te.id === H);
+        }), g(Q.user), l.setUser(Q.user), E(!0);
+        const ee = x.find((te) => te.id === B);
         ee && a(ee.subdomain, {
           tokens: {
             accessToken: Q.accessToken,
@@ -1230,8 +1230,8 @@ function fn({ config: r = {}, children: e }) {
         });
       },
       refreshUserTenants: async () => {
-        const H = await l.getAuthHeaders(), z = await c.getUserTenants(H);
-        k(z);
+        const B = await l.getAuthHeaders(), z = await c.getUserTenants(B);
+        S(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
         } catch {
@@ -1242,23 +1242,23 @@ function fn({ config: r = {}, children: e }) {
   }, [
     G,
     l,
-    D,
+    U,
     c,
-    $,
-    E,
+    H,
+    F,
     t,
-    i,
     o,
+    i,
     a,
     p,
-    w,
-    v,
-    F,
-    x,
-    I,
+    b,
+    T,
     N,
+    x,
+    L,
+    D,
     m,
-    S,
+    v,
     P,
     J
   ]);
@@ -1266,10 +1266,10 @@ function fn({ config: r = {}, children: e }) {
     !r.initialRoles && t && (async () => {
       try {
         u(!0);
-        const Z = new ie(n), ce = new De(Z), { roles: ve } = await ce.getRolesByApp(t);
+        const K = new ie(n), ce = new He(K), { roles: ve } = await ce.getRolesByApp(t);
         f(ve);
-      } catch (Z) {
-        console.error("Failed to fetch roles:", Z);
+      } catch (K) {
+        console.error("Failed to fetch roles:", K);
       } finally {
         u(!1);
       }
@@ -1277,26 +1277,26 @@ function fn({ config: r = {}, children: e }) {
   }, [t, n, r.initialRoles]);
   const [O, V] = A(!1);
   return X(() => {
-    O || (V(!0), C.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), wt(), B(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), q.loadUserData().catch((T) => {
-      console.error("[AuthProvider] Failed to load user data:", T);
+    O || (V(!0), C.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), St(), $(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), q.loadUserData().catch((k) => {
+      console.error("[AuthProvider] Failed to load user data:", k);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), B(!1);
+      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), $(!1);
     })));
   }, [q, O]), X(() => {
-    const T = l.getUser();
-    T && l.hasValidSession() && g(T);
+    const k = l.getUser();
+    k && l.hasValidSession() && g(k);
   }, [l]), X(() => {
-    O && (C.current.urlTokens || !w && !v && l.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), q.loadUserData().catch(() => {
+    O && (C.current.urlTokens || !b && !T && l.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), q.loadUserData().catch(() => {
     })));
-  }, [w, v, q, l, O]), X(() => {
-    if (!l.hasValidSession() || !w)
+  }, [b, T, q, l, O]), X(() => {
+    if (!l.hasValidSession() || !b)
       return;
-    const T = setInterval(() => {
+    const k = setInterval(() => {
       q.loadUserData().catch(() => {
       });
     }, J);
-    return () => clearInterval(T);
-  }, [l, w, q, J]), /* @__PURE__ */ s(Me.Provider, { value: q, children: e });
+    return () => clearInterval(k);
+  }, [l, b, q, J]), /* @__PURE__ */ s(Me.Provider, { value: q, children: e });
 }
 function le() {
   const r = oe(Me);
@@ -1307,7 +1307,7 @@ function le() {
 function Le() {
   return oe(Me);
 }
-class bt {
+class vt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1328,12 +1328,12 @@ class bt {
       throw new Error("SessionManager is required for private endpoints");
     const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
     e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
-    const i = `/feature-flags/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
+    const o = `/feature-flags/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      featureFlags: o.data,
-      meta: o.meta
+      featureFlags: i.data,
+      meta: i.meta
     };
   }
   async getFeatureFlagById(e) {
@@ -1370,8 +1370,8 @@ class bt {
       throw new Error("Tenant ID and App ID are required");
     const n = new URLSearchParams();
     n.append("tenantId", e), n.append("appId", t);
-    const i = `/tenant-feature-flags${n.toString() ? `?${n.toString()}` : ""}`;
-    return (await this.httpService.get(i, {
+    const o = `/tenant-feature-flags${n.toString() ? `?${n.toString()}` : ""}`;
+    return (await this.httpService.get(o, {
       headers: { "X-Tenant-ID": e }
     })).data;
   }
@@ -1379,27 +1379,27 @@ class bt {
   async getTenantFeatureFlag(e, t, n) {
     if (!e || !t || !n)
       throw new Error("Flag Key, Tenant ID and App ID are required");
-    const i = new URLSearchParams();
-    i.append("tenantId", t), i.append("appId", n);
-    const o = `/tenant-feature-flags/${e}${i.toString() ? `?${i.toString()}` : ""}`;
-    return (await this.httpService.get(o, {
+    const o = new URLSearchParams();
+    o.append("tenantId", t), o.append("appId", n);
+    const i = `/tenant-feature-flags/${e}${o.toString() ? `?${o.toString()}` : ""}`;
+    return (await this.httpService.get(i, {
       headers: { "X-Tenant-ID": t }
     })).data;
   }
 }
-const Ee = me(null);
-function mn({ config: r = {}, children: e }) {
-  const t = _e(), n = Se(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [p, f] = A([]), [b, u] = A(!1), [w, g] = A(null), [v, M] = A(!1), F = K(() => {
-    const h = new ie(i);
-    return new bt(h);
-  }, [i]), L = async () => {
+const Ee = ue(null);
+function yn({ config: r = {}, children: e }) {
+  const t = Ve(), n = Se(), o = (t == null ? void 0 : t.baseUrl) ?? "", i = (t == null ? void 0 : t.appId) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [p, f] = A([]), [w, u] = A(!1), [b, g] = A(null), [T, I] = A(!1), N = Z(() => {
+    const h = new ie(o);
+    return new vt(h);
+  }, [o]), M = async () => {
     if (!(a != null && a.id)) {
       f([]);
       return;
     }
     u(!0), g(null);
     try {
-      const h = await F.getTenantFeatureFlags(a.id, o);
+      const h = await N.getTenantFeatureFlags(a.id, i);
       f(h);
     } catch (h) {
       const x = h instanceof Error ? h.message : "Failed to fetch feature flags";
@@ -1409,44 +1409,44 @@ function mn({ config: r = {}, children: e }) {
     }
   };
   X(() => {
-    if (!i || !o) return;
-    L().finally(() => M(!0));
-    const h = r.refreshInterval || 5 * 60 * 1e3, x = setInterval(L, h);
+    if (!o || !i) return;
+    M().finally(() => I(!0));
+    const h = r.refreshInterval || 5 * 60 * 1e3, x = setInterval(M, h);
     return () => clearInterval(x);
-  }, [a == null ? void 0 : a.id, i, o, r.refreshInterval]);
-  const P = K(() => {
+  }, [a == null ? void 0 : a.id, o, i, r.refreshInterval]);
+  const P = Z(() => {
     const h = (C) => {
-      const R = p.find((B) => B.key === C);
+      const R = p.find(($) => $.key === C);
       return (R == null ? void 0 : R.value) === !0;
-    }, x = (C) => p.find((R) => R.key === C), k = (C) => {
-      const R = p.find((B) => B.key === C);
+    }, x = (C) => p.find((R) => R.key === C), S = (C) => {
+      const R = p.find(($) => $.key === C);
       return R ? R.value ? "enabled" : "disabled" : "not_found";
-    }, I = async () => {
-      await L();
-    }, U = !!(i && o) && (v || !(a != null && a.id));
+    }, L = async () => {
+      await M();
+    }, E = !!(o && i) && (T || !(a != null && a.id));
     return {
       featureFlags: p,
-      loading: b,
-      error: w,
-      isReady: U,
+      loading: w,
+      error: b,
+      isReady: E,
       isEnabled: h,
       getFlag: x,
-      getFlagState: k,
-      refresh: I
+      getFlagState: S,
+      refresh: L
     };
-  }, [p, b, w, i, o, a == null ? void 0 : a.id, v]);
+  }, [p, w, b, o, i, a == null ? void 0 : a.id, T]);
   return /* @__PURE__ */ s(Ee.Provider, { value: P, children: e });
 }
-function St() {
+function Tt() {
   const r = oe(Ee);
   if (!r)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return r;
 }
-function We() {
+function je() {
   return oe(Ee);
 }
-class vt {
+class kt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1512,42 +1512,42 @@ class vt {
     )).data;
   }
 }
-const Fe = me(void 0);
-function yn({ config: r = {}, children: e }) {
-  const t = _e(), n = Se(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (n == null ? void 0 : n.tenant) ?? null, [a, p] = A(null), [f, b] = A(!1), [u, w] = A(null), [g, v] = A(!1), M = K(() => {
-    const P = new ie(i);
-    return new vt(P);
-  }, [i]), F = async () => {
-    if (!(o != null && o.id)) {
+const Fe = ue(void 0);
+function wn({ config: r = {}, children: e }) {
+  const t = Ve(), n = Se(), o = (t == null ? void 0 : t.baseUrl) ?? "", i = (n == null ? void 0 : n.tenant) ?? null, [a, p] = A(null), [f, w] = A(!1), [u, b] = A(null), [g, T] = A(!1), I = Z(() => {
+    const P = new ie(o);
+    return new kt(P);
+  }, [o]), N = async () => {
+    if (!(i != null && i.id)) {
       p(null);
       return;
     }
-    b(!0), w(null);
+    w(!0), b(null);
     try {
-      const P = await M.getTenantSubscriptionFeatures(o.id);
+      const P = await I.getTenantSubscriptionFeatures(i.id);
       p(P);
     } catch (P) {
       const h = P instanceof Error ? P.message : "Failed to fetch subscription";
-      w(h), r.onError && r.onError(P instanceof Error ? P : new Error(h));
+      b(h), r.onError && r.onError(P instanceof Error ? P : new Error(h));
     } finally {
-      b(!1);
+      w(!1);
     }
   };
   X(() => {
-    if (!i || (F().finally(() => v(!0)), !r.refreshInterval)) return;
-    const P = r.refreshInterval || 10 * 60 * 1e3, h = setInterval(F, P);
+    if (!o || (N().finally(() => T(!0)), !r.refreshInterval)) return;
+    const P = r.refreshInterval || 10 * 60 * 1e3, h = setInterval(N, P);
     return () => clearInterval(h);
-  }, [o == null ? void 0 : o.id, i, r.refreshInterval]);
-  const L = K(() => {
+  }, [i == null ? void 0 : i.id, o, r.refreshInterval]);
+  const M = Z(() => {
     const P = (a == null ? void 0 : a.features) || [], h = (R) => {
-      const B = P.find((l) => l.key === R);
-      return B ? B.type === "BOOLEAN" || B.type === "boolean" ? B.value === !0 : !!B.value : !1;
-    }, x = (R) => P.find((B) => B.key === R), k = (R, B) => {
-      const l = P.find((N) => N.key === R);
-      return l ? l.value : B;
-    }, I = (R) => !a || !a.isActive ? !1 : R.includes(a.planId), U = async () => {
-      await F();
-    }, C = !!i && (g || !(o != null && o.id));
+      const $ = P.find((l) => l.key === R);
+      return $ ? $.type === "BOOLEAN" || $.type === "boolean" ? $.value === !0 : !!$.value : !1;
+    }, x = (R) => P.find(($) => $.key === R), S = (R, $) => {
+      const l = P.find((D) => D.key === R);
+      return l ? l.value : $;
+    }, L = (R) => !a || !a.isActive ? !1 : R.includes(a.planId), E = async () => {
+      await N();
+    }, C = !!o && (g || !(i != null && i.id));
     return {
       subscription: a,
       features: P,
@@ -1556,24 +1556,89 @@ function yn({ config: r = {}, children: e }) {
       isReady: C,
       isFeatureEnabled: h,
       getFeature: x,
-      getFeatureValue: k,
-      hasAllowedPlan: I,
-      refresh: U
+      getFeatureValue: S,
+      hasAllowedPlan: L,
+      refresh: E
     };
-  }, [a, f, u, i, o == null ? void 0 : o.id, g]);
-  return /* @__PURE__ */ s(Fe.Provider, { value: L, children: e });
+  }, [a, f, u, o, i == null ? void 0 : i.id, g]);
+  return /* @__PURE__ */ s(Fe.Provider, { value: M, children: e });
 }
-function Tt() {
+function At() {
   const r = oe(Fe);
   if (r === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return r;
 }
-function Ve() {
+function Ge() {
   return oe(Fe) ?? null;
 }
 var se = /* @__PURE__ */ ((r) => (r.SUPERUSER = "SUPERUSER", r.TENANT_ADMIN = "TENANT_ADMIN", r.USER = "USER", r))(se || {});
-const He = () => /* @__PURE__ */ d(
+const Ne = {
+  publicGuest: "/",
+  publicUser: "/account",
+  publicAdmin: "/admin",
+  tenantGuest: "/login",
+  tenantUser: "/dashboard",
+  tenantAdmin: "/admin/dashboard",
+  default: "/"
+}, Ze = {
+  // Public/Landing zones
+  landing: { tenant: "forbidden", auth: "optional" },
+  publicOnly: { tenant: "forbidden", auth: "forbidden" },
+  // Auth zones
+  login: { tenant: "required", auth: "forbidden" },
+  guest: { auth: "forbidden" },
+  authenticated: { auth: "required" },
+  // Tenant zones
+  tenant: { tenant: "required" },
+  tenantOpen: { tenant: "required", auth: "optional" },
+  tenantAuth: { tenant: "required", auth: "required" },
+  // User type zones
+  user: { tenant: "required", auth: "required", userType: se.USER },
+  admin: { tenant: "required", auth: "required", userType: se.TENANT_ADMIN },
+  // Fully open
+  open: { tenant: "optional", auth: "optional" }
+}, De = ue(null);
+function bn({ config: r = {}, children: e }) {
+  const t = Z(() => {
+    const n = {
+      ...Ne,
+      ...r.zoneRoots
+    }, o = {
+      ...Ze,
+      ...r.presets
+    };
+    return {
+      zoneRoots: n,
+      presets: o,
+      loadingFallback: r.loadingFallback ?? null,
+      accessDeniedFallback: r.accessDeniedFallback ?? null,
+      onAccessDenied: r.onAccessDenied,
+      returnToParam: r.returnToParam ?? "returnTo",
+      returnToStorage: r.returnToStorage ?? "url"
+    };
+  }, [r]);
+  return /* @__PURE__ */ s(De.Provider, { value: t, children: e });
+}
+function Sn() {
+  const r = oe(De);
+  if (!r)
+    throw new Error("useRouting must be used within a RoutingProvider");
+  return r;
+}
+function xt() {
+  const r = oe(De);
+  return r || {
+    zoneRoots: Ne,
+    presets: Ze,
+    loadingFallback: null,
+    accessDeniedFallback: null,
+    onAccessDenied: void 0,
+    returnToParam: "returnTo",
+    returnToStorage: "url"
+  };
+}
+const qe = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1610,7 +1675,7 @@ const He = () => /* @__PURE__ */ d(
       )
     ]
   }
-), Be = ({
+), Oe = ({
   userType: r,
   minUserType: e,
   missingPermissions: t
@@ -1651,7 +1716,7 @@ const He = () => /* @__PURE__ */ d(
       ] })
     ]
   }
-), kt = (r, e) => {
+), Pt = (r, e) => {
   const t = {
     [se.USER]: 1,
     [se.TENANT_ADMIN]: 2,
@@ -1659,28 +1724,28 @@ const He = () => /* @__PURE__ */ d(
   };
   return t[r] >= t[e];
 };
-function wn({
+function vn({
   children: r,
   fallback: e,
   minUserType: t,
   requiredPermissions: n,
-  requireAllPermissions: i = !1
+  requireAllPermissions: o = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: f, hasAllPermissions: b } = le();
-  if (!o())
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(He, {}) });
+  const { hasValidSession: i, sessionManager: a, hasPermission: p, hasAnyPermission: f, hasAllPermissions: w } = le();
+  if (!i())
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(qe, {}) });
   const u = a.getUser();
   if (!u)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(He, {}) });
-  if (t && !kt(u.userType, t))
-    return /* @__PURE__ */ s(Be, { userType: u.userType, minUserType: t });
-  if (n && n.length > 0 && !(i ? b(n) : f(n))) {
-    const g = n.filter((v) => !p(v)).map((v) => typeof v == "string" ? v : v.name);
-    return /* @__PURE__ */ s(Be, { missingPermissions: g });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(qe, {}) });
+  if (t && !Pt(u.userType, t))
+    return /* @__PURE__ */ s(Oe, { userType: u.userType, minUserType: t });
+  if (n && n.length > 0 && !(o ? w(n) : f(n))) {
+    const g = n.filter((T) => !p(T)).map((T) => typeof T == "string" ? T : T.name);
+    return /* @__PURE__ */ s(Oe, { missingPermissions: g });
   }
   return /* @__PURE__ */ s(_, { children: r });
 }
-const At = ({ redirectPath: r }) => /* @__PURE__ */ s(
+const Rt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1716,7 +1781,7 @@ const At = ({ redirectPath: r }) => /* @__PURE__ */ s(
       }
     )
   }
-), qe = ({
+), ze = ({
   userType: r,
   requiredUserType: e,
   missingPermissions: t
@@ -1767,43 +1832,43 @@ const At = ({ redirectPath: r }) => /* @__PURE__ */ s(
       }
     )
   }
-), xt = (r, e) => r === e;
-function bn({
+), It = (r, e) => r === e;
+function Tn({
   children: r,
   redirectTo: e = "/login",
   requiredUserType: t,
   requiredPermissions: n,
-  requireAllPermissions: i = !1,
-  fallback: o
+  requireAllPermissions: o = !1,
+  fallback: i
 }) {
-  const { hasValidSession: a, sessionManager: p, hasPermission: f, hasAnyPermission: b, hasAllPermissions: u } = le(), w = be();
+  const { hasValidSession: a, sessionManager: p, hasPermission: f, hasAnyPermission: w, hasAllPermissions: u } = le(), b = be();
   if (X(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
-    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ d(_, { children: [
-      /* @__PURE__ */ s(At, { redirectPath: e }),
-      /* @__PURE__ */ s(fe, { to: e, state: { from: w.pathname }, replace: !0 })
+    return i ? /* @__PURE__ */ s(_, { children: i }) : /* @__PURE__ */ d(_, { children: [
+      /* @__PURE__ */ s(Rt, { redirectPath: e }),
+      /* @__PURE__ */ s(me, { to: e, state: { from: b.pathname }, replace: !0 })
     ] });
   const g = p.getUser();
   if (!g)
-    return /* @__PURE__ */ s(fe, { to: e, state: { from: w.pathname }, replace: !0 });
-  if (t && !xt(g.userType, t))
+    return /* @__PURE__ */ s(me, { to: e, state: { from: b.pathname }, replace: !0 });
+  if (t && !It(g.userType, t))
     return /* @__PURE__ */ s(
-      qe,
+      ze,
       {
         userType: g.userType,
         requiredUserType: t
       }
     );
-  if (n && n.length > 0 && !(i ? u(n) : b(n))) {
-    const M = n.filter((F) => !f(F)).map((F) => typeof F == "string" ? F : F.name);
-    return /* @__PURE__ */ s(qe, { missingPermissions: M });
+  if (n && n.length > 0 && !(o ? u(n) : w(n))) {
+    const I = n.filter((N) => !f(N)).map((N) => typeof N == "string" ? N : N.name);
+    return /* @__PURE__ */ s(ze, { missingPermissions: I });
   }
   return /* @__PURE__ */ s(_, { children: r });
 }
-const Pt = ({ redirectPath: r }) => /* @__PURE__ */ s(
+const Mt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1840,18 +1905,18 @@ const Pt = ({ redirectPath: r }) => /* @__PURE__ */ s(
     )
   }
 );
-function Sn({ children: r, redirectTo: e = "/", fallback: t }) {
-  const { tenant: n, isLoading: i, error: o } = he(), a = be();
+function kn({ children: r, redirectTo: e = "/", fallback: t }) {
+  const { tenant: n, isLoading: o, error: i } = ge(), a = be();
   return X(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : n ? /* @__PURE__ */ s(_, { children: r }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s(Pt, { redirectPath: e }),
-    /* @__PURE__ */ s(fe, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), o || i ? null : n ? /* @__PURE__ */ s(_, { children: r }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Mt, { redirectPath: e }),
+    /* @__PURE__ */ s(me, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const Rt = ({ redirectPath: r }) => /* @__PURE__ */ s(
+const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1888,144 +1953,125 @@ const Rt = ({ redirectPath: r }) => /* @__PURE__ */ s(
     )
   }
 );
-function vn({ children: r, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: n, isLoading: i, error: o } = he(), a = be();
+function An({ children: r, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: n, isLoading: o, error: i } = ge(), a = be();
   return X(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : n ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s(Rt, { redirectPath: e }),
-    /* @__PURE__ */ s(fe, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), o || i ? null : n ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Lt, { redirectPath: e }),
+    /* @__PURE__ */ s(me, { to: e, state: { from: a.pathname }, replace: !0 })
   ] }) : /* @__PURE__ */ s(_, { children: r });
 }
-const je = {
-  publicGuest: "/",
-  publicUser: "/account",
-  publicAdmin: "/admin",
-  tenantGuest: "/login",
-  tenantUser: "/dashboard",
-  tenantAdmin: "/admin/dashboard",
-  default: "/"
-}, It = {
-  // Public/Landing zones
-  landing: { tenant: "forbidden", auth: "optional" },
-  publicOnly: { tenant: "forbidden", auth: "forbidden" },
-  // Auth zones
-  login: { tenant: "required", auth: "forbidden" },
-  guest: { auth: "forbidden" },
-  authenticated: { auth: "required" },
-  // Tenant zones
-  tenant: { tenant: "required" },
-  tenantOpen: { tenant: "required", auth: "optional" },
-  tenantAuth: { tenant: "required", auth: "required" },
-  // User type zones
-  user: { tenant: "required", auth: "required", userType: se.USER },
-  admin: { tenant: "required", auth: "required", userType: se.TENANT_ADMIN },
-  // Fully open
-  open: { tenant: "optional", auth: "optional" }
-}, Mt = "returnTo";
-function Lt(r, e) {
+function Et(r, e) {
   return e ? r ? Array.isArray(e) ? e.includes(r) : r === e : !1 : !0;
 }
-function Oe(r, e) {
+function _e(r, e) {
   return !r || r === "optional" ? "skip" : r === "required" ? e ? "pass" : "fail" : r === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
-function Et(r, e) {
-  return Oe(r.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Oe(r.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : r.userType && e.isAuthenticated && !Lt(e.userType, r.userType) ? "wrong_user_type" : r.permissions && r.permissions.length > 0 && !(r.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(r.permissions) ? "missing_permissions" : null;
-}
 function Ft(r, e) {
+  return _e(r.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : _e(r.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : r.userType && e.isAuthenticated && !Et(e.userType, r.userType) ? "wrong_user_type" : r.permissions && r.permissions.length > 0 && !(r.requireAllPermissions !== !1 ? (i) => i.every((a) => e.permissions.includes(a)) : (i) => i.some((a) => e.permissions.includes(a)))(r.permissions) ? "missing_permissions" : null;
+}
+function Nt(r, e) {
   return r.hasTenant ? r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
 }
-function Nt(r, e, t, n, i) {
-  if (!e || i !== "url")
+function Dt(r, e, t, n, o) {
+  if (!e || o !== "url")
     return r;
-  const o = typeof e == "string" ? e : t, a = r.includes("?") ? "&" : "?";
-  return `${r}${a}${n}=${encodeURIComponent(o)}`;
+  const i = typeof e == "string" ? e : t, a = r.includes("?") ? "&" : "?";
+  return `${r}${a}${n}=${encodeURIComponent(i)}`;
 }
-function Ut(r, e, t) {
+function Ct(r, e, t) {
   if (!r || t === "url") return;
-  const n = typeof r == "string" ? r : e;
-  sessionStorage.setItem("zone_return_to", n);
+  const n = typeof r == "string" ? r : e, o = "zone_return_to";
+  t === "session" ? sessionStorage.setItem(o, n) : t === "local" && localStorage.setItem(o, n);
 }
 const ae = ({
   children: r,
   preset: e,
   tenant: t,
   auth: n,
-  userType: i,
-  requiredPermissions: o,
+  userType: o,
+  requiredPermissions: i,
   requireAllPermissions: a = !0,
   returnTo: p,
   onAccessDenied: f,
-  redirectTo: b,
+  redirectTo: w,
   loadingFallback: u,
-  accessDeniedFallback: w
+  accessDeniedFallback: b
 }) => {
-  const g = be(), { isAuthenticated: v, isAuthInitializing: M, currentUser: F, userPermissions: L } = le(), { tenant: P, isTenantLoading: h } = ue(), x = K(() => {
+  const g = be(), { isAuthenticated: T, isAuthInitializing: I, currentUser: N, userPermissions: M } = le(), { tenant: P, isTenantLoading: h } = he(), x = xt(), S = Z(() => {
     if (e)
-      return It[e];
-  }, [e]), k = K(
+      return x.presets[e];
+  }, [e, x.presets]), L = Z(
     () => ({
-      tenant: t ?? (x == null ? void 0 : x.tenant),
-      auth: n ?? (x == null ? void 0 : x.auth),
-      userType: i ?? (x == null ? void 0 : x.userType),
-      permissions: o ?? (x == null ? void 0 : x.requiredPermissions),
+      tenant: t ?? (S == null ? void 0 : S.tenant),
+      auth: n ?? (S == null ? void 0 : S.auth),
+      userType: o ?? (S == null ? void 0 : S.userType),
+      permissions: i ?? (S == null ? void 0 : S.requiredPermissions),
       requireAllPermissions: a
     }),
-    [t, n, i, o, x, a]
-  ), I = K(
+    [t, n, o, i, S, a]
+  ), E = Z(
     () => ({
       hasTenant: !!P,
-      isAuthenticated: v,
-      userType: F == null ? void 0 : F.userType,
-      permissions: L,
-      isLoading: M || h
+      isAuthenticated: T,
+      userType: N == null ? void 0 : N.userType,
+      permissions: M,
+      isLoading: I || h
     }),
     [
       P,
-      v,
-      F == null ? void 0 : F.userType,
-      L,
+      T,
+      N == null ? void 0 : N.userType,
       M,
+      I,
       h
     ]
-  ), U = K(() => I.isLoading ? null : Et(k, I), [k, I]), C = je, R = K(() => U ? b || Ft(I, C) : null, [U, b, I, C]), B = K(() => !U || !R ? null : {
-    type: U,
+  ), C = Z(() => E.isLoading ? null : Ft(L, E), [L, E]), R = Z(() => C ? w || Nt(E, x.zoneRoots) : null, [C, w, E, x.zoneRoots]), $ = Z(() => !C || !R ? null : {
+    type: C,
     required: {
-      tenant: k.tenant,
-      auth: k.auth,
-      userType: k.userType,
-      permissions: k.permissions
+      tenant: L.tenant,
+      auth: L.auth,
+      userType: L.userType,
+      permissions: L.permissions
     },
     current: {
-      hasTenant: I.hasTenant,
-      isAuthenticated: I.isAuthenticated,
-      userType: I.userType,
-      permissions: I.permissions
+      hasTenant: E.hasTenant,
+      isAuthenticated: E.isAuthenticated,
+      userType: E.userType,
+      permissions: E.permissions
     },
     redirectTo: R
-  }, [U, R, k, I]);
+  }, [C, R, L, E]);
   if (X(() => {
-    B && f && f(B);
-  }, [B, f]), X(() => {
-    B && p && Ut(p, g.pathname + g.search, "session");
-  }, [B, p, g.pathname, g.search]), I.isLoading)
-    return /* @__PURE__ */ s(_, { children: u || null });
-  if (B && R) {
-    if (w)
-      return /* @__PURE__ */ s(_, { children: w });
-    const l = Nt(
+    $ && (f ? f($) : x.onAccessDenied && x.onAccessDenied($));
+  }, [$, f, x]), X(() => {
+    $ && p && Ct(p, g.pathname + g.search, x.returnToStorage);
+  }, [
+    $,
+    p,
+    g.pathname,
+    g.search,
+    x.returnToStorage
+  ]), E.isLoading)
+    return /* @__PURE__ */ s(_, { children: u ?? x.loadingFallback ?? null });
+  if ($ && R) {
+    const l = b ?? x.accessDeniedFallback;
+    if (l)
+      return /* @__PURE__ */ s(_, { children: l });
+    const D = Dt(
       R,
       p,
       g.pathname + g.search,
-      Mt,
-      "url"
+      x.returnToParam,
+      x.returnToStorage
     );
-    return /* @__PURE__ */ s(fe, { to: l, replace: !0 });
+    return /* @__PURE__ */ s(me, { to: D, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: r });
-}, Tn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", ...r }), kn = (r) => /* @__PURE__ */ s(ae, { tenant: "forbidden", ...r }), An = (r) => /* @__PURE__ */ s(ae, { auth: "required", ...r }), xn = (r) => /* @__PURE__ */ s(ae, { auth: "forbidden", ...r }), Pn = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.TENANT_ADMIN, ...r }), Rn = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.USER, ...r }), In = (r) => /* @__PURE__ */ s(ae, { tenant: "optional", auth: "optional", ...r }), Mn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "required", ...r }), Ln = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "optional", ...r }), En = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "forbidden", ...r }), Ct = () => /* @__PURE__ */ d(
+}, xn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", ...r }), Pn = (r) => /* @__PURE__ */ s(ae, { tenant: "forbidden", ...r }), Rn = (r) => /* @__PURE__ */ s(ae, { auth: "required", ...r }), In = (r) => /* @__PURE__ */ s(ae, { auth: "forbidden", ...r }), Mn = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.TENANT_ADMIN, ...r }), Ln = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.USER, ...r }), En = (r) => /* @__PURE__ */ s(ae, { tenant: "optional", auth: "optional", ...r }), Fn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "required", ...r }), Nn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "optional", ...r }), Dn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "forbidden", ...r }), Ut = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -2042,13 +2088,13 @@ const ae = ({
     ]
   }
 );
-function Fn({
+function Cn({
   children: r,
-  fallback: e = /* @__PURE__ */ s(Ct, {}),
+  fallback: e = /* @__PURE__ */ s(Ut, {}),
   allowedPlans: t,
   requiredFeature: n
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = Tt();
+  const { subscription: o, hasAllowedPlan: i, isFeatureEnabled: a, loading: p } = At();
   return p ? /* @__PURE__ */ s(
     "div",
     {
@@ -2059,9 +2105,9 @@ function Fn({
       },
       children: "Loading subscription..."
     }
-  ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : n && !a(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: r }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
+  ) : o ? o.isActive ? t && t.length > 0 && !i(t) ? /* @__PURE__ */ s(_, { children: e }) : n && !a(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: r }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const Dt = ({ flagName: r }) => /* @__PURE__ */ d(
+const $t = ({ flagName: r }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -2088,9 +2134,9 @@ const Dt = ({ flagName: r }) => /* @__PURE__ */ d(
     ]
   }
 );
-function Nn({ name: r, children: e, fallback: t }) {
-  const { isEnabled: n, loading: i } = St();
-  return i ? /* @__PURE__ */ s(
+function Un({ name: r, children: e, fallback: t }) {
+  const { isEnabled: n, loading: o } = Tt();
+  return o ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2103,9 +2149,9 @@ function Nn({ name: r, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : n(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Dt, { flagName: r }) });
+  ) : n(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s($t, { flagName: r }) });
 }
-const $t = () => /* @__PURE__ */ d(
+const Ht = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -2122,7 +2168,7 @@ const $t = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Ht = () => /* @__PURE__ */ d(
+), Bt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -2139,10 +2185,10 @@ const $t = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), Bt = {
-  showPassword: /* @__PURE__ */ s($t, {}),
-  hidePassword: /* @__PURE__ */ s(Ht, {})
-}, qt = {
+), qt = {
+  showPassword: /* @__PURE__ */ s(Ht, {}),
+  hidePassword: /* @__PURE__ */ s(Bt, {})
+}, Ot = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2156,7 +2202,7 @@ const $t = () => /* @__PURE__ */ d(
   magicLinkLink: "Use Magic Link",
   errorMessage: "Invalid credentials",
   loadingText: "Signing in..."
-}, Ot = {
+}, zt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2263,57 +2309,57 @@ const $t = () => /* @__PURE__ */ d(
     fontSize: "0.875rem"
   }
 };
-function Un({
+function $n({
   copy: r = {},
   styles: e = {},
   icons: t = {},
   onSuccess: n,
-  onError: i,
-  onForgotPassword: o,
+  onError: o,
+  onForgotPassword: i,
   onSignupClick: a,
   onMagicLinkClick: p,
   showForgotPassword: f = !0,
-  showSignupLink: b = !0,
+  showSignupLink: w = !0,
   showMagicLinkOption: u = !0,
-  className: w
+  className: b
 }) {
-  const [g, v] = A(""), [M, F] = A(""), [L, P] = A(!1), [h, x] = A(!1), [k, I] = A(""), [U, C] = A({}), { login: R } = le(), { tenant: B } = he(), l = { ...qt, ...r }, N = { ...Ot, ...e }, D = { ...Bt, ...t }, c = () => {
+  const [g, T] = A(""), [I, N] = A(""), [M, P] = A(!1), [h, x] = A(!1), [S, L] = A(""), [E, C] = A({}), { login: R } = le(), { tenant: $ } = ge(), l = { ...Ot, ...r }, D = { ...zt, ...e }, U = { ...qt, ...t }, c = () => {
     const m = {};
-    return g.trim() || (m.username = !0), M.trim() || (m.password = !0), C(m), Object.keys(m).length === 0;
-  }, $ = async (m) => {
+    return g.trim() || (m.username = !0), I.trim() || (m.password = !0), C(m), Object.keys(m).length === 0;
+  }, H = async (m) => {
     if (m.preventDefault(), !!c()) {
-      if (!(B != null && B.id)) {
-        I("Tenant not found");
+      if (!($ != null && $.id)) {
+        L("Tenant not found");
         return;
       }
-      x(!0), I("");
+      x(!0), L("");
       try {
-        const S = await R({
+        const v = await R({
           username: g,
-          password: M
+          password: I
           // tenantId inferred from context automatically
         });
-        n == null || n(S);
-      } catch (S) {
-        const G = S.message || l.errorMessage;
-        I(G), i == null || i(G);
+        n == null || n(v);
+      } catch (v) {
+        const G = v.message || l.errorMessage;
+        L(G), o == null || o(G);
       } finally {
         x(!1);
       }
     }
-  }, E = (m) => ({
-    ...N.input,
-    ...U[m] ? N.inputError : {}
+  }, F = (m) => ({
+    ...D.input,
+    ...E[m] ? D.inputError : {}
   }), y = () => ({
-    ...N.button,
-    ...h ? N.buttonLoading : {},
-    ...!g || !M || h ? N.buttonDisabled : {}
+    ...D.button,
+    ...h ? D.buttonLoading : {},
+    ...!g || !I || h ? D.buttonDisabled : {}
   });
-  return /* @__PURE__ */ d("div", { className: w, style: N.container, children: [
-    /* @__PURE__ */ s("h2", { style: N.title, children: l.title }),
-    /* @__PURE__ */ d("form", { onSubmit: $, style: N.form, children: [
-      /* @__PURE__ */ d("div", { style: N.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: N.label, children: l.usernameLabel }),
+  return /* @__PURE__ */ d("div", { className: b, style: D.container, children: [
+    /* @__PURE__ */ s("h2", { style: D.title, children: l.title }),
+    /* @__PURE__ */ d("form", { onSubmit: H, style: D.form, children: [
+      /* @__PURE__ */ d("div", { style: D.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: D.label, children: l.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2322,30 +2368,30 @@ function Un({
             type: "text",
             value: g,
             onChange: (m) => {
-              v(m.target.value), U.username && C((S) => ({ ...S, username: !1 }));
+              T(m.target.value), E.username && C((v) => ({ ...v, username: !1 }));
             },
             placeholder: l.usernamePlaceholder,
-            style: E("username"),
+            style: F("username"),
             disabled: h
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: N.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: N.label, children: l.passwordLabel }),
-        /* @__PURE__ */ d("div", { style: N.inputContainer, children: [
+      /* @__PURE__ */ d("div", { style: D.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: D.label, children: l.passwordLabel }),
+        /* @__PURE__ */ d("div", { style: D.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
               id: "password",
               name: "password",
-              type: L ? "text" : "password",
-              value: M,
+              type: M ? "text" : "password",
+              value: I,
               onChange: (m) => {
-                F(m.target.value), U.password && C((S) => ({ ...S, password: !1 }));
+                N(m.target.value), E.password && C((v) => ({ ...v, password: !1 }));
               },
               placeholder: l.passwordPlaceholder,
               style: {
-                ...E("password"),
+                ...F("password"),
                 paddingRight: "2.5rem"
                 // Make room for the icon
               },
@@ -2356,40 +2402,40 @@ function Un({
             "button",
             {
               type: "button",
-              onClick: () => P(!L),
-              style: N.passwordToggle,
+              onClick: () => P(!M),
+              style: D.passwordToggle,
               disabled: h,
-              "aria-label": L ? "Hide password" : "Show password",
-              children: L ? D.hidePassword : D.showPassword
+              "aria-label": M ? "Hide password" : "Show password",
+              children: M ? U.hidePassword : U.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !M || h, style: y(), children: h ? l.loadingText : l.submitButton }),
-      k && /* @__PURE__ */ s("div", { style: N.errorText, children: k })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !I || h, style: y(), children: h ? l.loadingText : l.submitButton }),
+      S && /* @__PURE__ */ s("div", { style: D.errorText, children: S })
     ] }),
-    (f || b || u) && /* @__PURE__ */ d("div", { style: N.linkContainer, children: [
+    (f || w || u) && /* @__PURE__ */ d("div", { style: D.linkContainer, children: [
       u && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: N.divider, children: [
+        /* @__PURE__ */ d("span", { style: D.divider, children: [
           l.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: p, style: N.link, children: l.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: p, style: D.link, children: l.magicLinkLink })
       ] }),
-      u && (f || b) && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
-      f && /* @__PURE__ */ s("a", { onClick: o, style: N.link, children: l.forgotPasswordLink }),
-      f && b && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
-      b && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: N.divider, children: [
+      u && (f || w) && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
+      f && /* @__PURE__ */ s("a", { onClick: i, style: D.link, children: l.forgotPasswordLink }),
+      f && w && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
+      w && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: D.divider, children: [
           l.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: N.link, children: l.signupLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: D.link, children: l.signupLink })
       ] })
     ] })
   ] });
 }
-const zt = {
+const _t = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2415,7 +2461,7 @@ const zt = {
   passwordMismatchError: "Passwords do not match",
   isAdminLabel: "Create new organization",
   isAdminDescription: "Check this if you want to create a new organization"
-}, _t = {
+}, Wt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2514,69 +2560,69 @@ const zt = {
     fontSize: "0.875rem"
   }
 };
-function Cn({
+function Hn({
   copy: r = {},
   styles: e = {},
   signupType: t = "user",
   onSuccess: n,
-  onError: i,
-  onLoginClick: o,
+  onError: o,
+  onLoginClick: i,
   onMagicLinkClick: a,
   showLoginLink: p = !0,
   showMagicLinkOption: f = !0,
-  className: b
+  className: w
 }) {
-  const [u, w] = A(""), [g, v] = A(""), [M, F] = A(""), [L, P] = A(""), [h, x] = A(""), [k, I] = A(""), [U, C] = A(""), [R, B] = A(!1), [l, N] = A(""), [D, c] = A({}), { signup: $, signupTenantAdmin: E } = le(), { tenant: y } = he(), m = { ...zt, ...r }, S = { ..._t, ...e }, G = () => {
-    const T = {};
-    return u.trim() || (T.name = !0), !M.trim() && !L.trim() && (T.email = !0, T.phoneNumber = !0), h.trim() || (T.password = !0), k.trim() || (T.confirmPassword = !0), t === "tenant" && !U.trim() && (T.tenantName = !0), c(T), Object.keys(T).length === 0;
-  }, J = async (T) => {
-    if (T.preventDefault(), !!G()) {
-      if (h !== k) {
-        N(m.passwordMismatchError), c({ confirmPassword: !0 });
+  const [u, b] = A(""), [g, T] = A(""), [I, N] = A(""), [M, P] = A(""), [h, x] = A(""), [S, L] = A(""), [E, C] = A(""), [R, $] = A(!1), [l, D] = A(""), [U, c] = A({}), { signup: H, signupTenantAdmin: F } = le(), { tenant: y } = ge(), m = { ..._t, ...r }, v = { ...Wt, ...e }, G = () => {
+    const k = {};
+    return u.trim() || (k.name = !0), !I.trim() && !M.trim() && (k.email = !0, k.phoneNumber = !0), h.trim() || (k.password = !0), S.trim() || (k.confirmPassword = !0), t === "tenant" && !E.trim() && (k.tenantName = !0), c(k), Object.keys(k).length === 0;
+  }, J = async (k) => {
+    if (k.preventDefault(), !!G()) {
+      if (h !== S) {
+        D(m.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
       if (t === "user" && !(y != null && y.id)) {
-        N("Tenant not found");
+        D("Tenant not found");
         return;
       }
-      B(!0), N("");
+      $(!0), D("");
       try {
-        let Z;
-        t === "tenant" ? Z = await E({
-          email: M || void 0,
-          phoneNumber: L || void 0,
+        let K;
+        t === "tenant" ? K = await F({
+          email: I || void 0,
+          phoneNumber: M || void 0,
           name: u,
           password: h,
-          tenantName: U,
+          tenantName: E,
           lastName: g || void 0
-        }) : Z = await $({
-          email: M || void 0,
-          phoneNumber: L || void 0,
+        }) : K = await H({
+          email: I || void 0,
+          phoneNumber: M || void 0,
           name: u,
           password: h,
           tenantId: y.id,
           lastName: g || void 0
-        }), n == null || n(Z);
-      } catch (Z) {
-        const ce = Z.message || m.errorMessage;
-        N(ce), i == null || i(ce);
+        }), n == null || n(K);
+      } catch (K) {
+        const ce = K.message || m.errorMessage;
+        D(ce), o == null || o(ce);
       } finally {
-        B(!1);
+        $(!1);
       }
     }
-  }, q = (T) => ({
-    ...S.input,
-    ...D[T] ? S.inputError : {}
+  }, q = (k) => ({
+    ...v.input,
+    ...U[k] ? v.inputError : {}
   }), O = () => ({
-    ...S.button,
-    ...R ? S.buttonLoading : {},
-    ...!u || !M && !L || !h || !k || R || t === "tenant" && !U ? S.buttonDisabled : {}
-  }), V = u && (M || L) && h && k && (t === "user" || U);
-  return /* @__PURE__ */ d("div", { className: b, style: S.container, children: [
-    /* @__PURE__ */ s("h2", { style: S.title, children: m.title }),
-    /* @__PURE__ */ d("form", { onSubmit: J, style: S.form, children: [
-      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.nameLabel }),
+    ...v.button,
+    ...R ? v.buttonLoading : {},
+    ...!u || !I && !M || !h || !S || R || t === "tenant" && !E ? v.buttonDisabled : {}
+  }), V = u && (I || M) && h && S && (t === "user" || E);
+  return /* @__PURE__ */ d("div", { className: w, style: v.container, children: [
+    /* @__PURE__ */ s("h2", { style: v.title, children: m.title }),
+    /* @__PURE__ */ d("form", { onSubmit: J, style: v.form, children: [
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.nameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2584,8 +2630,8 @@ function Cn({
             name: "name",
             type: "text",
             value: u,
-            onChange: (T) => {
-              w(T.target.value), D.name && c((Z) => ({ ...Z, name: !1 }));
+            onChange: (k) => {
+              b(k.target.value), U.name && c((K) => ({ ...K, name: !1 }));
             },
             placeholder: m.namePlaceholder,
             style: q("name"),
@@ -2593,8 +2639,8 @@ function Cn({
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.lastNameLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2602,24 +2648,24 @@ function Cn({
             name: "lastName",
             type: "text",
             value: g,
-            onChange: (T) => v(T.target.value),
+            onChange: (k) => T(k.target.value),
             placeholder: m.lastNamePlaceholder,
-            style: S.input,
+            style: v.input,
             disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.emailLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: M,
-            onChange: (T) => {
-              F(T.target.value), D.email && c((Z) => ({ ...Z, email: !1, phoneNumber: !1 }));
+            value: I,
+            onChange: (k) => {
+              N(k.target.value), U.email && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
             },
             placeholder: m.emailPlaceholder,
             style: q("email"),
@@ -2627,17 +2673,17 @@ function Cn({
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.phoneNumberLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "phoneNumber",
             name: "phoneNumber",
             type: "tel",
-            value: L,
-            onChange: (T) => {
-              P(T.target.value), D.phoneNumber && c((Z) => ({ ...Z, email: !1, phoneNumber: !1 }));
+            value: M,
+            onChange: (k) => {
+              P(k.target.value), U.phoneNumber && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
             },
             placeholder: m.phoneNumberPlaceholder,
             style: q("phoneNumber"),
@@ -2657,8 +2703,8 @@ function Cn({
           children: "At least one contact method (email or phone) is required"
         }
       ),
-      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.passwordLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2666,8 +2712,8 @@ function Cn({
             name: "password",
             type: "password",
             value: h,
-            onChange: (T) => {
-              x(T.target.value), D.password && c((Z) => ({ ...Z, password: !1 }));
+            onChange: (k) => {
+              x(k.target.value), U.password && c((K) => ({ ...K, password: !1 }));
             },
             placeholder: m.passwordPlaceholder,
             style: q("password"),
@@ -2675,17 +2721,17 @@ function Cn({
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.confirmPasswordLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: k,
-            onChange: (T) => {
-              I(T.target.value), D.confirmPassword && c((Z) => ({ ...Z, confirmPassword: !1 })), l === m.passwordMismatchError && N("");
+            value: S,
+            onChange: (k) => {
+              L(k.target.value), U.confirmPassword && c((K) => ({ ...K, confirmPassword: !1 })), l === m.passwordMismatchError && D("");
             },
             placeholder: m.confirmPasswordPlaceholder,
             style: q("confirmPassword"),
@@ -2693,17 +2739,17 @@ function Cn({
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ d("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: m.tenantNameLabel }),
+      t === "tenant" && /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
-            value: U,
-            onChange: (T) => {
-              C(T.target.value), D.tenantName && c((Z) => ({ ...Z, tenantName: !1 }));
+            value: E,
+            onChange: (k) => {
+              C(k.target.value), U.tenantName && c((K) => ({ ...K, tenantName: !1 }));
             },
             placeholder: m.tenantNamePlaceholder,
             style: q("tenantName"),
@@ -2712,28 +2758,28 @@ function Cn({
         )
       ] }),
       /* @__PURE__ */ s("button", { type: "submit", disabled: !V || R, style: O(), children: R ? m.loadingText : m.submitButton }),
-      l && /* @__PURE__ */ s("div", { style: S.errorText, children: l })
+      l && /* @__PURE__ */ s("div", { style: v.errorText, children: l })
     ] }),
-    (p || f) && /* @__PURE__ */ d("div", { style: S.linkContainer, children: [
+    (p || f) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
       f && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: S.divider, children: [
+        /* @__PURE__ */ d("span", { style: v.divider, children: [
           m.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: S.link, children: m.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: m.magicLinkLink })
       ] }),
-      f && p && /* @__PURE__ */ s("div", { style: S.divider, children: "•" }),
+      f && p && /* @__PURE__ */ s("div", { style: v.divider, children: "•" }),
       p && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: S.divider, children: [
+        /* @__PURE__ */ d("span", { style: v.divider, children: [
           m.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: S.link, children: m.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: v.link, children: m.loginLink })
       ] })
     ] })
   ] });
 }
-const Wt = {
+const Vt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -2751,7 +2797,7 @@ const Wt = {
   loadingText: "Sending magic link...",
   verifyingText: "Verifying magic link...",
   description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you."
-}, Vt = {
+}, jt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2854,28 +2900,28 @@ const Wt = {
     fontSize: "0.875rem"
   }
 };
-function Dn({
+function Bn({
   copy: r = {},
   styles: e = {},
   onSuccess: t,
   onError: n,
-  onLoginClick: i,
-  onSignupClick: o,
+  onLoginClick: o,
+  onSignupClick: i,
   showTraditionalLinks: a = !0,
   className: p,
   verifyToken: f,
-  frontendUrl: b
+  frontendUrl: w
 }) {
-  const [u, w] = A(""), [g, v] = A(""), [M, F] = A(""), [L, P] = A(!1), [h, x] = A(!1), [k, I] = A(""), [U, C] = A(""), [R, B] = A({}), [l, N] = A(!1), { sendMagicLink: D, verifyMagicLink: c } = le(), { tenant: $ } = he(), E = { ...Wt, ...r }, y = { ...Vt, ...e };
+  const [u, b] = A(""), [g, T] = A(""), [I, N] = A(""), [M, P] = A(!1), [h, x] = A(!1), [S, L] = A(""), [E, C] = A(""), [R, $] = A({}), [l, D] = A(!1), { sendMagicLink: U, verifyMagicLink: c } = le(), { tenant: H } = ge(), F = { ...Vt, ...r }, y = { ...jt, ...e };
   X(() => {
     f && m(f);
   }, [f]);
   const m = async (O) => {
-    if (!$ || !u) {
-      I("Missing tenant or email");
+    if (!H || !u) {
+      L("Missing tenant or email");
       return;
     }
-    x(!0), I("");
+    x(!0), L("");
     try {
       const V = await c({
         token: O,
@@ -2884,33 +2930,33 @@ function Dn({
       });
       t == null || t(V);
     } catch (V) {
-      const T = V.message || "Failed to verify magic link";
-      I(T), n == null || n(T);
+      const k = V.message || "Failed to verify magic link";
+      L(k), n == null || n(k);
     } finally {
       x(!1);
     }
-  }, S = () => {
+  }, v = () => {
     const O = {};
-    return u.trim() || (O.email = !0), l && !g.trim() && (O.name = !0), B(O), Object.keys(O).length === 0;
+    return u.trim() || (O.email = !0), l && !g.trim() && (O.name = !0), $(O), Object.keys(O).length === 0;
   }, G = async (O) => {
-    if (O.preventDefault(), !!S()) {
-      if (!($ != null && $.id)) {
-        I("Tenant not found");
+    if (O.preventDefault(), !!v()) {
+      if (!(H != null && H.id)) {
+        L("Tenant not found");
         return;
       }
-      P(!0), I(""), C("");
+      P(!0), L(""), C("");
       try {
-        const V = b || (typeof window < "u" ? window.location.origin : ""), T = await D({
+        const V = w || (typeof window < "u" ? window.location.origin : ""), k = await U({
           email: u,
-          tenantId: $.id,
+          tenantId: H.id,
           frontendUrl: V,
           name: l ? g : void 0,
-          lastName: l ? M : void 0
+          lastName: l ? I : void 0
         });
-        C(E.successMessage), t == null || t(T);
+        C(F.successMessage), t == null || t(k);
       } catch (V) {
-        const T = V.message || E.errorMessage;
-        I(T), n == null || n(T);
+        const k = V.message || F.errorMessage;
+        L(k), n == null || n(k);
       } finally {
         P(!1);
       }
@@ -2920,18 +2966,18 @@ function Dn({
     ...R[O] ? y.inputError : {}
   }), q = () => ({
     ...y.button,
-    ...L || h ? y.buttonLoading : {},
-    ...!u || L || h ? y.buttonDisabled : {}
+    ...M || h ? y.buttonLoading : {},
+    ...!u || M || h ? y.buttonDisabled : {}
   });
   return h ? /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
-    /* @__PURE__ */ s("h2", { style: y.title, children: E.verifyingText }),
+    /* @__PURE__ */ s("h2", { style: y.title, children: F.verifyingText }),
     /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
   ] }) : /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
-    /* @__PURE__ */ s("h2", { style: y.title, children: E.title }),
-    /* @__PURE__ */ s("p", { style: y.description, children: E.description }),
+    /* @__PURE__ */ s("h2", { style: y.title, children: F.title }),
+    /* @__PURE__ */ s("p", { style: y.description, children: F.description }),
     /* @__PURE__ */ d("form", { onSubmit: G, style: y.form, children: [
       /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: y.label, children: E.emailLabel }),
+        /* @__PURE__ */ s("label", { style: y.label, children: F.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2940,11 +2986,11 @@ function Dn({
             type: "email",
             value: u,
             onChange: (O) => {
-              w(O.target.value), R.email && B((V) => ({ ...V, email: !1 }));
+              b(O.target.value), R.email && $((V) => ({ ...V, email: !1 }));
             },
-            placeholder: E.emailPlaceholder,
+            placeholder: F.emailPlaceholder,
             style: J("email"),
-            disabled: L || h
+            disabled: M || h
           }
         )
       ] }),
@@ -2952,7 +2998,7 @@ function Dn({
         "button",
         {
           type: "button",
-          onClick: () => N(!0),
+          onClick: () => D(!0),
           style: {
             background: "none",
             border: "none",
@@ -2966,7 +3012,7 @@ function Dn({
       ) }),
       l && /* @__PURE__ */ d(_, { children: [
         /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: y.label, children: E.nameLabel }),
+          /* @__PURE__ */ s("label", { style: y.label, children: F.nameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -2975,27 +3021,27 @@ function Dn({
               type: "text",
               value: g,
               onChange: (O) => {
-                v(O.target.value), R.name && B((V) => ({ ...V, name: !1 }));
+                T(O.target.value), R.name && $((V) => ({ ...V, name: !1 }));
               },
-              placeholder: E.namePlaceholder,
+              placeholder: F.namePlaceholder,
               style: J("name"),
-              disabled: L || h
+              disabled: M || h
             }
           )
         ] }),
         /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: y.label, children: E.lastNameLabel }),
+          /* @__PURE__ */ s("label", { style: y.label, children: F.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "lastName",
               name: "lastName",
               type: "text",
-              value: M,
-              onChange: (O) => F(O.target.value),
-              placeholder: E.lastNamePlaceholder,
+              value: I,
+              onChange: (O) => N(O.target.value),
+              placeholder: F.lastNamePlaceholder,
               style: y.input,
-              disabled: L || h
+              disabled: M || h
             }
           )
         ] }),
@@ -3004,7 +3050,7 @@ function Dn({
           {
             type: "button",
             onClick: () => {
-              N(!1), v(""), F("");
+              D(!1), T(""), N("");
             },
             style: {
               background: "none",
@@ -3018,30 +3064,30 @@ function Dn({
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !u || L || h, style: q(), children: L ? E.loadingText : E.submitButton }),
-      k && /* @__PURE__ */ s("div", { style: y.errorText, children: k }),
-      U && /* @__PURE__ */ s("div", { style: y.successText, children: U })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !u || M || h, style: q(), children: M ? F.loadingText : F.submitButton }),
+      S && /* @__PURE__ */ s("div", { style: y.errorText, children: S }),
+      E && /* @__PURE__ */ s("div", { style: y.successText, children: E })
     ] }),
     a && /* @__PURE__ */ d("div", { style: y.linkContainer, children: [
       /* @__PURE__ */ d("div", { children: [
         /* @__PURE__ */ d("span", { style: y.divider, children: [
-          E.loginText,
+          F.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: i, style: y.link, children: E.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: y.link, children: F.loginLink })
       ] }),
       /* @__PURE__ */ s("div", { style: y.divider, children: "•" }),
       /* @__PURE__ */ d("div", { children: [
         /* @__PURE__ */ d("span", { style: y.divider, children: [
-          E.signupText,
+          F.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: y.link, children: E.signupLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: y.link, children: F.signupLink })
       ] })
     ] })
   ] });
 }
-const jt = {
+const Gt = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
@@ -3049,7 +3095,7 @@ const jt = {
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
   backToLoginButton: "Back to Login"
-}, Ge = {
+}, Ke = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3136,7 +3182,7 @@ const jt = {
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
   }
-}, Gt = () => /* @__PURE__ */ s("div", { style: Ge.spinner }), Zt = () => /* @__PURE__ */ d(
+}, Zt = () => /* @__PURE__ */ s("div", { style: Ke.spinner }), Kt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3153,7 +3199,7 @@ const jt = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), Kt = () => /* @__PURE__ */ d(
+), Jt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3171,82 +3217,82 @@ const jt = {
       /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), Jt = {
-  loading: /* @__PURE__ */ s(Gt, {}),
-  success: /* @__PURE__ */ s(Zt, {}),
-  error: /* @__PURE__ */ s(Kt, {})
+), Yt = {
+  loading: /* @__PURE__ */ s(Zt, {}),
+  success: /* @__PURE__ */ s(Kt, {}),
+  error: /* @__PURE__ */ s(Jt, {})
 };
-function $n({
+function qn({
   copy: r = {},
   styles: e = {},
   icons: t = {},
   onSuccess: n,
-  onError: i,
-  onRetry: o,
+  onError: o,
+  onRetry: i,
   onBackToLogin: a,
   className: p,
   token: f,
-  email: b,
+  email: w,
   appId: u,
-  tenantSlug: w,
+  tenantSlug: b,
   autoRedirectDelay: g = 3e3
 }) {
-  const [v, M] = A("verifying"), [F, L] = A(""), { verifyMagicLink: P } = le(), h = { ...jt, ...r }, x = { ...Ge, ...e }, k = { ...Jt, ...t }, I = () => {
+  const [T, I] = A("verifying"), [N, M] = A(""), { verifyMagicLink: P } = le(), h = { ...Gt, ...r }, x = { ...Ke, ...e }, S = { ...Yt, ...t }, L = () => {
     if (typeof window > "u") return {};
     const l = new URLSearchParams(window.location.search);
     return {
       token: f || l.get("token") || "",
-      email: b || l.get("email") || "",
+      email: w || l.get("email") || "",
       appId: u || l.get("appId") || "",
-      tenantSlug: w || l.get("tenantSlug") || void 0
+      tenantSlug: b || l.get("tenantSlug") || void 0
     };
-  }, U = async () => {
-    M("verifying"), L("");
+  }, E = async () => {
+    I("verifying"), M("");
     try {
-      const l = I();
+      const l = L();
       if (!l.token || !l.email)
         throw new Error("Missing required parameters: token or email");
-      const N = await P({
+      const D = await P({
         token: l.token,
         email: l.email,
         tenantSlug: l.tenantSlug
       });
-      M("success"), n == null || n(N), g > 0 && setTimeout(() => {
-        M("redirecting");
+      I("success"), n == null || n(D), g > 0 && setTimeout(() => {
+        I("redirecting");
       }, g);
     } catch (l) {
-      const N = l.message || h.errorMessage;
-      L(N), M("error"), i == null || i(N);
+      const D = l.message || h.errorMessage;
+      M(D), I("error"), o == null || o(D);
     }
   }, C = () => {
-    o == null || o(), U();
+    i == null || i(), E();
   }, R = () => {
     a == null || a();
   };
   X(() => {
-    U();
+    E();
   }, []);
-  const B = () => {
-    switch (v) {
+  const $ = () => {
+    switch (T) {
       case "verifying":
         return /* @__PURE__ */ d("div", { style: x.message, children: [
-          k.loading,
+          S.loading,
           h.verifyingMessage
         ] });
       case "success":
         return /* @__PURE__ */ d(_, { children: [
-          k.success,
+          S.success,
           /* @__PURE__ */ s("div", { style: x.successMessage, children: h.successMessage })
         ] });
       case "redirecting":
         return /* @__PURE__ */ d(_, { children: [
-          k.loading,
+          S.loading,
           /* @__PURE__ */ s("div", { style: x.message, children: h.redirectingMessage })
         ] });
       case "error":
         return /* @__PURE__ */ d(_, { children: [
-          k.error,
-          /* @__PURE__ */ s("div", { style: x.errorMessage, children: F || h.errorMessage }),
+          S.error,
+          /* @__PURE__ */ s("div", { style: x.errorMessage, children: N || h.errorMessage }),
           /* @__PURE__ */ d("div", { style: x.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
@@ -3290,10 +3336,10 @@ function $n({
           }
         ` }),
     /* @__PURE__ */ s("h1", { style: x.title, children: h.title }),
-    B()
+    $()
   ] });
 }
-const Yt = {
+const Qt = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3315,7 +3361,7 @@ const Yt = {
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
   passwordMismatchError: "Passwords do not match"
-}, Qt = {
+}, Xt = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3407,56 +3453,56 @@ const Yt = {
     cursor: "pointer"
   }
 };
-function Hn({
+function On({
   copy: r = {},
   styles: e = {},
   mode: t = "request",
   token: n = "",
-  onSuccess: i,
-  onError: o,
+  onSuccess: o,
+  onError: i,
   onBackToLogin: a,
   onModeChange: p,
   className: f
 }) {
-  const [b, u] = A(""), [w, g] = A(n), [v, M] = A(""), [F, L] = A(""), [P, h] = A(!1), [x, k] = A(""), [I, U] = A(""), [C, R] = A({}), { requestPasswordReset: B, confirmPasswordReset: l } = le(), { tenant: N } = he(), D = { ...Yt, ...r }, c = { ...Qt, ...e }, $ = () => {
+  const [w, u] = A(""), [b, g] = A(n), [T, I] = A(""), [N, M] = A(""), [P, h] = A(!1), [x, S] = A(""), [L, E] = A(""), [C, R] = A({}), { requestPasswordReset: $, confirmPasswordReset: l } = le(), { tenant: D } = ge(), U = { ...Qt, ...r }, c = { ...Xt, ...e }, H = () => {
     const q = {};
-    return b.trim() || (q.email = !0), R(q), Object.keys(q).length === 0;
-  }, E = () => {
+    return w.trim() || (q.email = !0), R(q), Object.keys(q).length === 0;
+  }, F = () => {
     const q = {};
-    return w.trim() || (q.token = !0), v.trim() || (q.newPassword = !0), F.trim() || (q.confirmPassword = !0), R(q), Object.keys(q).length === 0;
+    return b.trim() || (q.token = !0), T.trim() || (q.newPassword = !0), N.trim() || (q.confirmPassword = !0), R(q), Object.keys(q).length === 0;
   }, y = async (q) => {
-    if (q.preventDefault(), !!$()) {
-      if (!(N != null && N.id)) {
-        k("Tenant not found");
+    if (q.preventDefault(), !!H()) {
+      if (!(D != null && D.id)) {
+        S("Tenant not found");
         return;
       }
-      h(!0), k(""), U("");
+      h(!0), S(""), E("");
       try {
-        await B({ email: b, tenantId: N.id }), U(D.successMessage), i == null || i();
+        await $({ email: w, tenantId: D.id }), E(U.successMessage), o == null || o();
       } catch (O) {
-        const V = O.message || D.errorMessage;
-        k(V), o == null || o(V);
+        const V = O.message || U.errorMessage;
+        S(V), i == null || i(V);
       } finally {
         h(!1);
       }
     }
   }, m = async (q) => {
-    if (q.preventDefault(), !!E()) {
-      if (v !== F) {
-        k(D.passwordMismatchError), R({ confirmPassword: !0 });
+    if (q.preventDefault(), !!F()) {
+      if (T !== N) {
+        S(U.passwordMismatchError), R({ confirmPassword: !0 });
         return;
       }
-      h(!0), k(""), U("");
+      h(!0), S(""), E("");
       try {
-        await l({ token: w, newPassword: v }), U(D.resetSuccessMessage), i == null || i();
+        await l({ token: b, newPassword: T }), E(U.resetSuccessMessage), o == null || o();
       } catch (O) {
-        const V = O.message || D.errorMessage;
-        k(V), o == null || o(V);
+        const V = O.message || U.errorMessage;
+        S(V), i == null || i(V);
       } finally {
         h(!1);
       }
     }
-  }, S = (q) => ({
+  }, v = (q) => ({
     ...c.input,
     ...C[q] ? c.inputError : {}
   }), G = () => ({
@@ -3464,55 +3510,55 @@ function Hn({
     ...P ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const q = w && v && F;
+    const q = b && T && N;
     return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
-      /* @__PURE__ */ s("h2", { style: c.title, children: D.resetTitle }),
-      /* @__PURE__ */ s("p", { style: c.subtitle, children: D.resetSubtitle }),
+      /* @__PURE__ */ s("h2", { style: c.title, children: U.resetTitle }),
+      /* @__PURE__ */ s("p", { style: c.subtitle, children: U.resetSubtitle }),
       /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
         /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: D.tokenLabel }),
+          /* @__PURE__ */ s("label", { style: c.label, children: U.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: w,
+              value: b,
               onChange: (O) => {
                 g(O.target.value), C.token && R((V) => ({ ...V, token: !1 }));
               },
-              placeholder: D.tokenPlaceholder,
-              style: S("token"),
+              placeholder: U.tokenPlaceholder,
+              style: v("token"),
               disabled: P
             }
           )
         ] }),
         /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: D.newPasswordLabel }),
+          /* @__PURE__ */ s("label", { style: c.label, children: U.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: v,
+              value: T,
               onChange: (O) => {
-                M(O.target.value), C.newPassword && R((V) => ({ ...V, newPassword: !1 }));
+                I(O.target.value), C.newPassword && R((V) => ({ ...V, newPassword: !1 }));
               },
-              placeholder: D.newPasswordPlaceholder,
-              style: S("newPassword"),
+              placeholder: U.newPasswordPlaceholder,
+              style: v("newPassword"),
               disabled: P
             }
           )
         ] }),
         /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: D.confirmPasswordLabel }),
+          /* @__PURE__ */ s("label", { style: c.label, children: U.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: F,
+              value: N,
               onChange: (O) => {
-                L(O.target.value), C.confirmPassword && R((V) => ({ ...V, confirmPassword: !1 })), x === D.passwordMismatchError && k("");
+                M(O.target.value), C.confirmPassword && R((V) => ({ ...V, confirmPassword: !1 })), x === U.passwordMismatchError && S("");
               },
-              placeholder: D.confirmPasswordPlaceholder,
-              style: S("confirmPassword"),
+              placeholder: U.confirmPasswordPlaceholder,
+              style: v("confirmPassword"),
               disabled: P
             }
           )
@@ -3526,14 +3572,14 @@ function Hn({
               ...G(),
               ...!q || P ? c.buttonDisabled : {}
             },
-            children: P ? D.resetLoadingText : D.resetSubmitButton
+            children: P ? U.resetLoadingText : U.resetSubmitButton
           }
         ),
         x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
-        I && /* @__PURE__ */ s("div", { style: c.successText, children: I })
+        L && /* @__PURE__ */ s("div", { style: c.successText, children: L })
       ] }),
       /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: D.backToLoginLink }),
+        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: U.backToLoginLink }),
         p && /* @__PURE__ */ d(_, { children: [
           /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
           /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: "Request New Link" })
@@ -3541,23 +3587,23 @@ function Hn({
       ] })
     ] });
   }
-  const J = b;
+  const J = w;
   return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
-    /* @__PURE__ */ s("h2", { style: c.title, children: D.title }),
-    /* @__PURE__ */ s("p", { style: c.subtitle, children: D.subtitle }),
+    /* @__PURE__ */ s("h2", { style: c.title, children: U.title }),
+    /* @__PURE__ */ s("p", { style: c.subtitle, children: U.subtitle }),
     /* @__PURE__ */ d("form", { onSubmit: y, style: c.form, children: [
       /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: c.label, children: D.emailLabel }),
+        /* @__PURE__ */ s("label", { style: c.label, children: U.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
-            value: b,
+            value: w,
             onChange: (q) => {
               u(q.target.value), C.email && R((O) => ({ ...O, email: !1 }));
             },
-            placeholder: D.emailPlaceholder,
-            style: S("email"),
+            placeholder: U.emailPlaceholder,
+            style: v("email"),
             disabled: P
           }
         )
@@ -3571,14 +3617,14 @@ function Hn({
             ...G(),
             ...!J || P ? c.buttonDisabled : {}
           },
-          children: P ? D.loadingText : D.submitButton
+          children: P ? U.loadingText : U.submitButton
         }
       ),
       x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
-      I && /* @__PURE__ */ s("div", { style: c.successText, children: I })
+      L && /* @__PURE__ */ s("div", { style: c.successText, children: L })
     ] }),
     /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: D.backToLoginLink }),
+      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: U.backToLoginLink }),
       p && /* @__PURE__ */ d(_, { children: [
         /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
         /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: "I have a token" })
@@ -3586,7 +3632,7 @@ function Hn({
     ] })
   ] });
 }
-const Xt = () => /* @__PURE__ */ s(
+const en = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3598,7 +3644,7 @@ const Xt = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), en = ({ error: r, retry: e }) => /* @__PURE__ */ d(
+), tn = ({ error: r, retry: e }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -3632,83 +3678,83 @@ const Xt = () => /* @__PURE__ */ s(
     ]
   }
 );
-function Bn({
+function zn({
   children: r,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: n = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = ye(), p = Se(), f = Le(), b = We(), u = Ve(), w = (p == null ? void 0 : p.isTenantLoading) ?? !1, g = (p == null ? void 0 : p.tenantError) ?? null, v = (p == null ? void 0 : p.tenantSlug) ?? null, M = (p == null ? void 0 : p.retryTenant) ?? (() => {
-  }), F = (f == null ? void 0 : f.isAuthReady) ?? !0, L = (b == null ? void 0 : b.isReady) ?? !0, P = (u == null ? void 0 : u.isReady) ?? !0, h = n && p && v, U = i || h && w || f && !F || b && !L || u && !P, C = o || (h ? g : null), R = () => {
-    o && a(), g && p && M();
+  const { isAppLoading: o, appError: i, retryApp: a } = ye(), p = Se(), f = Le(), w = je(), u = Ge(), b = (p == null ? void 0 : p.isTenantLoading) ?? !1, g = (p == null ? void 0 : p.tenantError) ?? null, T = (p == null ? void 0 : p.tenantSlug) ?? null, I = (p == null ? void 0 : p.retryTenant) ?? (() => {
+  }), N = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (w == null ? void 0 : w.isReady) ?? !0, P = (u == null ? void 0 : u.isReady) ?? !0, h = n && p && T, E = o || h && b || f && !N || w && !M || u && !P, C = i || (h ? g : null), R = () => {
+    i && a(), g && p && I();
   };
-  if (U)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Xt, {}) });
+  if (E)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(en, {}) });
   if (C) {
-    const B = typeof t == "function" ? t(C, R) : t || /* @__PURE__ */ s(en, { error: C, retry: R });
-    return /* @__PURE__ */ s(_, { children: B });
+    const $ = typeof t == "function" ? t(C, R) : t || /* @__PURE__ */ s(tn, { error: C, retry: R });
+    return /* @__PURE__ */ s(_, { children: $ });
   }
   return /* @__PURE__ */ s(_, { children: r });
 }
-function qn(r = !0) {
-  const { isAppLoading: e, appError: t, retryApp: n, appInfo: i } = ye(), o = Se(), a = Le(), p = We(), f = Ve(), b = (o == null ? void 0 : o.isTenantLoading) ?? !1, u = (o == null ? void 0 : o.tenantError) ?? null, w = (o == null ? void 0 : o.tenant) ?? null, g = (o == null ? void 0 : o.tenantSlug) ?? null, v = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), M = (a == null ? void 0 : a.isAuthReady) ?? !0, F = (p == null ? void 0 : p.isReady) ?? !0, L = (f == null ? void 0 : f.isReady) ?? !0, P = r && o && g, I = e || P && b || a && !M || p && !F || f && !L, U = t || (P ? u : null);
+function _n(r = !0) {
+  const { isAppLoading: e, appError: t, retryApp: n, appInfo: o } = ye(), i = Se(), a = Le(), p = je(), f = Ge(), w = (i == null ? void 0 : i.isTenantLoading) ?? !1, u = (i == null ? void 0 : i.tenantError) ?? null, b = (i == null ? void 0 : i.tenant) ?? null, g = (i == null ? void 0 : i.tenantSlug) ?? null, T = (i == null ? void 0 : i.retryTenant) ?? (() => {
+  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, N = (p == null ? void 0 : p.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = r && i && g, L = e || P && w || a && !I || p && !N || f && !M, E = t || (P ? u : null);
   return {
-    isLoading: I,
-    error: U,
-    isReady: !I && !U && i !== null && (!P || w !== null),
+    isLoading: L,
+    error: E,
+    isReady: !L && !E && o !== null && (!P || b !== null),
     retry: () => {
-      t && n(), u && o && v();
+      t && n(), u && i && T();
     },
     // Individual states
-    app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: b, error: u, data: w } : null,
-    auth: a ? { isReady: M } : null,
-    featureFlags: p ? { isReady: F } : null,
-    subscription: f ? { isReady: L } : null
+    app: { isLoading: e, error: t, data: o },
+    tenant: i ? { isLoading: w, error: u, data: b } : null,
+    auth: a ? { isReady: I } : null,
+    featureFlags: p ? { isReady: N } : null,
+    subscription: f ? { isReady: M } : null
   };
 }
-function On({
+function Wn({
   tenants: r,
   currentTenantId: e,
   onSelect: t,
   className: n = "",
-  dropdownClassName: i = "",
-  itemClassName: o = "",
+  dropdownClassName: o = "",
+  itemClassName: i = "",
   renderItem: a,
   placeholder: p = "Select tenant",
   disabled: f = !1,
-  showCurrentTenant: b = !0
+  showCurrentTenant: w = !0
 }) {
   var x;
-  const u = Le(), [w, g] = A(!1), v = ze(null), M = r ?? (u == null ? void 0 : u.userTenants) ?? [], F = e ?? ((x = u == null ? void 0 : u.currentUser) == null ? void 0 : x.tenantId) ?? null, L = async (k) => {
-    g(!1), t ? t(k) : u != null && u.switchToTenant && await u.switchToTenant(k);
+  const u = Le(), [b, g] = A(!1), T = We(null), I = r ?? (u == null ? void 0 : u.userTenants) ?? [], N = e ?? ((x = u == null ? void 0 : u.currentUser) == null ? void 0 : x.tenantId) ?? null, M = async (S) => {
+    g(!1), t ? t(S) : u != null && u.switchToTenant && await u.switchToTenant(S);
   };
   X(() => {
-    const k = (I) => {
-      v.current && !v.current.contains(I.target) && g(!1);
+    const S = (L) => {
+      T.current && !T.current.contains(L.target) && g(!1);
     };
-    return document.addEventListener("mousedown", k), () => document.removeEventListener("mousedown", k);
+    return document.addEventListener("mousedown", S), () => document.removeEventListener("mousedown", S);
   }, []);
-  const P = M.find((k) => k.id === F);
-  if (M.length === 0)
+  const P = I.find((S) => S.id === N);
+  if (I.length === 0)
     return null;
-  if (M.length === 1 && b)
-    return /* @__PURE__ */ s("div", { className: n, children: /* @__PURE__ */ s("span", { children: M[0].name }) });
-  const h = (k, I) => /* @__PURE__ */ d("span", { style: { fontWeight: I ? "bold" : "normal" }, children: [
-    k.name,
-    k.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
+  if (I.length === 1 && w)
+    return /* @__PURE__ */ s("div", { className: n, children: /* @__PURE__ */ s("span", { children: I[0].name }) });
+  const h = (S, L) => /* @__PURE__ */ d("span", { style: { fontWeight: L ? "bold" : "normal" }, children: [
+    S.name,
+    S.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
       "(",
-      k.role,
+      S.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ d("div", { ref: v, className: n, style: { position: "relative" }, children: [
+  return /* @__PURE__ */ d("div", { ref: T, className: n, style: { position: "relative" }, children: [
     /* @__PURE__ */ d(
       "button",
       {
         type: "button",
-        onClick: () => !f && g(!w),
+        onClick: () => !f && g(!b),
         disabled: f,
         style: {
           cursor: f ? "not-allowed" : "pointer",
@@ -3716,14 +3762,14 @@ function On({
         },
         children: [
           P ? P.name : p,
-          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: w ? "▲" : "▼" })
+          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: b ? "▲" : "▼" })
         ]
       }
     ),
-    w && /* @__PURE__ */ s(
+    b && /* @__PURE__ */ s(
       "div",
       {
-        className: i,
+        className: o,
         style: {
           position: "absolute",
           top: "100%",
@@ -3737,34 +3783,34 @@ function On({
           maxHeight: 300,
           overflowY: "auto"
         },
-        children: M.map((k) => {
-          const I = k.id === F;
+        children: I.map((S) => {
+          const L = S.id === N;
           return /* @__PURE__ */ s(
             "div",
             {
-              className: o,
-              onClick: () => L(k.id),
+              className: i,
+              onClick: () => M(S.id),
               style: {
                 padding: "8px 12px",
                 cursor: "pointer",
-                backgroundColor: I ? "#f0f0f0" : "transparent"
+                backgroundColor: L ? "#f0f0f0" : "transparent"
               },
-              onMouseEnter: (U) => {
-                I || (U.target.style.backgroundColor = "#f5f5f5");
+              onMouseEnter: (E) => {
+                L || (E.target.style.backgroundColor = "#f5f5f5");
               },
-              onMouseLeave: (U) => {
-                I || (U.target.style.backgroundColor = "transparent");
+              onMouseLeave: (E) => {
+                L || (E.target.style.backgroundColor = "transparent");
               },
-              children: a ? a(k, I) : h(k, I)
+              children: a ? a(S, L) : h(S, L)
             },
-            k.id
+            S.id
           );
         })
       }
     )
   ] });
 }
-class zn {
+class Vn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3785,12 +3831,12 @@ class zn {
       throw new Error("SessionManager is required for private endpoints");
     const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
     e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder);
-    const i = `/permissions/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
+    const o = `/permissions/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      permissions: o.data,
-      meta: o.meta
+      permissions: i.data,
+      meta: i.meta
     };
   }
   async getPermissionById(e) {
@@ -3825,14 +3871,14 @@ class zn {
   async getAppPermissions(e, t) {
     const n = new URLSearchParams();
     t != null && t.page && n.append("page", t.page.toString()), t != null && t.limit && n.append("limit", t.limit.toString()), t != null && t.sortBy && n.append("sortBy", t.sortBy), t != null && t.sortOrder && n.append("sortOrder", t.sortOrder);
-    const i = `/permissions/apps/${e}${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i);
+    const o = `/permissions/apps/${e}${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o);
     return {
-      permissions: o.data,
-      meta: o.meta
+      permissions: i.data,
+      meta: i.meta
     };
   }
 }
-class _n {
+class jn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3849,12 +3895,12 @@ class _n {
   async getSubscriptionPlans(e) {
     const t = await this.sessionManager.getAuthHeaders(), n = new URLSearchParams();
     e != null && e.page && n.append("page", e.page.toString()), e != null && e.limit && n.append("limit", e.limit.toString()), e != null && e.sortBy && n.append("sortBy", e.sortBy), e != null && e.sortOrder && n.append("sortOrder", e.sortOrder), e != null && e.appId && n.append("appId", e.appId);
-    const i = `/subscription-plans/${n.toString() ? `?${n.toString()}` : ""}`, o = await this.httpService.get(i, {
+    const o = `/subscription-plans/${n.toString() ? `?${n.toString()}` : ""}`, i = await this.httpService.get(o, {
       headers: t
     });
     return {
-      plans: o.data,
-      meta: o.meta
+      plans: i.data,
+      meta: i.meta
     };
   }
   async getSubscriptionPlanById(e) {
@@ -3883,7 +3929,7 @@ class _n {
     });
   }
 }
-class Wn {
+class Gn {
   constructor(e) {
     this.httpService = e;
   }
@@ -3892,7 +3938,7 @@ class Wn {
     return await this.httpService.get("/health");
   }
 }
-class Vn {
+class Zn {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -4009,21 +4055,21 @@ class Vn {
   // Transform query parameters for API calls
   static transformQueryParams(e) {
     const t = new URLSearchParams();
-    return Object.entries(e).forEach(([n, i]) => {
-      i != null && i !== "" && t.append(n, String(i));
+    return Object.entries(e).forEach(([n, o]) => {
+      o != null && o !== "" && t.append(n, String(o));
     }), t;
   }
 }
-const Ze = "returnTo", xe = "zone_return_to", Pe = "zone_return_to";
-function jn(r = {}) {
+const Je = "returnTo", xe = "zone_return_to", Pe = "zone_return_to";
+function Kn(r = {}) {
   const {
     zoneRoots: e = {},
-    returnToParam: t = Ze,
+    returnToParam: t = Je,
     returnToStorage: n = "url"
-  } = r, i = lt(), [o, a] = ct(), { isAuthenticated: p, currentUser: f } = le(), { tenant: b } = ue(), u = K(() => ({ ...je, ...e }), [e]), w = !!b, g = f == null ? void 0 : f.userType, v = K(() => {
+  } = r, o = dt(), [i, a] = ut(), { isAuthenticated: p, currentUser: f } = le(), { tenant: w } = he(), u = Z(() => ({ ...Ne, ...e }), [e]), b = !!w, g = f == null ? void 0 : f.userType, T = Z(() => {
     switch (n) {
       case "url":
-        return o.get(t);
+        return i.get(t);
       case "session":
         return sessionStorage.getItem(xe);
       case "local":
@@ -4031,10 +4077,10 @@ function jn(r = {}) {
       default:
         return null;
     }
-  }, [n, o, t]), M = re(() => {
+  }, [n, i, t]), I = re(() => {
     switch (n) {
       case "url": {
-        const h = new URLSearchParams(o);
+        const h = new URLSearchParams(i);
         h.delete(t), a(h, { replace: !0 });
         break;
       }
@@ -4045,11 +4091,11 @@ function jn(r = {}) {
         localStorage.removeItem(Pe);
         break;
     }
-  }, [n, o, t, a]), F = re(
+  }, [n, i, t, a]), N = re(
     (h) => {
       switch (n) {
         case "url": {
-          const x = new URLSearchParams(o);
+          const x = new URLSearchParams(i);
           x.set(t, h), a(x, { replace: !0 });
           break;
         }
@@ -4061,86 +4107,89 @@ function jn(r = {}) {
           break;
       }
     },
-    [n, o, t, a]
-  ), L = re(
+    [n, i, t, a]
+  ), M = re(
     (h) => {
       const x = u[h] || u.default;
-      i(x);
+      o(x);
     },
-    [i, u]
-  ), P = re(() => w ? p ? g === se.TENANT_ADMIN ? u.tenantAdmin : u.tenantUser : u.tenantGuest : p ? g === se.TENANT_ADMIN ? u.publicAdmin : u.publicUser : u.publicGuest, [w, p, g, u]);
+    [o, u]
+  ), P = re(() => b ? p ? g === se.TENANT_ADMIN ? u.tenantAdmin : u.tenantUser : u.tenantGuest : p ? g === se.TENANT_ADMIN ? u.publicAdmin : u.publicUser : u.publicGuest, [b, p, g, u]);
   return {
-    returnToUrl: v,
-    clearReturnTo: M,
-    setReturnTo: F,
-    navigateToZone: L,
+    returnToUrl: T,
+    clearReturnTo: I,
+    setReturnTo: N,
+    navigateToZone: M,
     getSmartRedirect: P
   };
 }
-function Gn(r, e, t = Ze, n = "url") {
+function Jn(r, e, t = Je, n = "url") {
   if (!e || n !== "url")
     return r;
-  const i = new URL(r, window.location.origin);
-  return i.searchParams.set(t, e), i.pathname + i.search;
+  const o = new URL(r, window.location.origin);
+  return o.searchParams.set(t, e), o.pathname + o.search;
 }
 export {
-  Pn as AdminZone,
-  Vn as ApiMappers,
-  Ce as AppApiService,
-  Bn as AppLoader,
-  dn as AppProvider,
-  dt as AuthApiService,
-  fn as AuthProvider,
-  An as AuthenticatedZone,
-  It as DEFAULT_ZONE_PRESETS,
-  je as DEFAULT_ZONE_ROOTS,
-  Nn as FeatureFlag,
-  bt as FeatureFlagApiService,
-  mn as FeatureFlagProvider,
-  xn as GuestZone,
-  Wn as HealthApiService,
+  Mn as AdminZone,
+  Zn as ApiMappers,
+  $e as AppApiService,
+  zn as AppLoader,
+  un as AppProvider,
+  ht as AuthApiService,
+  mn as AuthProvider,
+  Rn as AuthenticatedZone,
+  Ze as DEFAULT_ZONE_PRESETS,
+  Ne as DEFAULT_ZONE_ROOTS,
+  Un as FeatureFlag,
+  vt as FeatureFlagApiService,
+  yn as FeatureFlagProvider,
+  In as GuestZone,
+  Gn as HealthApiService,
   ie as HttpService,
-  vn as LandingRoute,
-  Un as LoginForm,
-  Dn as MagicLinkForm,
-  $n as MagicLinkVerify,
-  In as OpenZone,
-  Hn as PasswordRecoveryForm,
-  zn as PermissionApiService,
-  wn as Protected,
-  bn as ProtectedRoute,
-  kn as PublicZone,
-  De as RoleApiService,
+  An as LandingRoute,
+  $n as LoginForm,
+  Bn as MagicLinkForm,
+  qn as MagicLinkVerify,
+  En as OpenZone,
+  On as PasswordRecoveryForm,
+  Vn as PermissionApiService,
+  vn as Protected,
+  Tn as ProtectedRoute,
+  Pn as PublicZone,
+  He as RoleApiService,
+  bn as RoutingProvider,
   Ae as SessionManager,
-  Cn as SignupForm,
-  vt as SubscriptionApiService,
-  Fn as SubscriptionGuard,
-  _n as SubscriptionPlanApiService,
-  yn as SubscriptionProvider,
-  pe as TenantApiService,
-  Mn as TenantAuthenticatedZone,
-  En as TenantGuestZone,
-  Ln as TenantOpenZone,
-  hn as TenantProvider,
-  Sn as TenantRoute,
-  On as TenantSelector,
-  Tn as TenantZone,
-  ut as UserApiService,
+  Hn as SignupForm,
+  kt as SubscriptionApiService,
+  Cn as SubscriptionGuard,
+  jn as SubscriptionPlanApiService,
+  wn as SubscriptionProvider,
+  fe as TenantApiService,
+  Fn as TenantAuthenticatedZone,
+  Dn as TenantGuestZone,
+  Nn as TenantOpenZone,
+  gn as TenantProvider,
+  kn as TenantRoute,
+  Wn as TenantSelector,
+  xn as TenantZone,
+  gt as UserApiService,
   se as UserType,
-  Rn as UserZone,
+  Ln as UserZone,
   ae as ZoneRoute,
-  Gn as buildRedirectUrl,
-  un as useApi,
+  Jn as buildRedirectUrl,
+  hn as useApi,
   ye as useApp,
-  qn as useAppLoaderState,
+  _n as useAppLoaderState,
   le as useAuth,
-  St as useFeatureFlags,
-  pn as useSettings,
-  Tt as useSubscription,
-  ue as useTenant,
-  he as useTenantInfo,
+  Tt as useFeatureFlags,
+  Sn as useRouting,
+  xt as useRoutingOptional,
+  fn as useSettings,
+  At as useSubscription,
+  he as useTenant,
+  ge as useTenantInfo,
   Se as useTenantOptional,
-  gn as useTenantSettings,
-  jn as useZoneNavigation
+  pn as useTenantSettings,
+  Kn as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map