@skylabs-digital/react-identity-access 2.15.0 → 2.17.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
-import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
-import { createContext as ue, useMemo as Z, useState as A, useCallback as re, useEffect as X, useContext as ie, useRef as Ve } from "react";
-import { useLocation as be, Navigate as me, useNavigate as ut, useSearchParams as ht } from "react-router-dom";
-class oe {
+import { jsx as s, Fragment as _, jsxs as c } from "react/jsx-runtime";
+import { createContext as ue, useMemo as J, useState as x, useCallback as se, useEffect as ee, useContext as oe, useRef as Ge } from "react";
+import { useLocation as Se, Navigate as ye, useNavigate as gt, useSearchParams as pt } from "react-router-dom";
+class ae {
   // SessionManager instance
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
@@ -23,33 +23,33 @@ class oe {
     };
     if (!(i != null && i.skipAuth) && this.sessionManager)
       try {
-        const b = await this.sessionManager.getAuthHeaders();
-        f = { ...f, ...b };
-      } catch (b) {
-        console.warn("Failed to inject auth headers:", b);
+        const m = await this.sessionManager.getAuthHeaders();
+        f = { ...f, ...m };
+      } catch (m) {
+        console.warn("Failed to inject auth headers:", m);
       }
-    const w = new AbortController(), u = setTimeout(() => w.abort(), p);
+    const w = new AbortController(), d = setTimeout(() => w.abort(), p);
     try {
-      const b = await fetch(a, {
+      const m = await fetch(a, {
         method: e,
         headers: f,
         body: n ? JSON.stringify(n) : void 0,
         signal: w.signal
       });
-      if (clearTimeout(u), b.status === 401 && !(i != null && i.skipRetry) && !o && this.sessionManager)
+      if (clearTimeout(d), m.status === 401 && !(i != null && i.skipRetry) && !o && this.sessionManager)
         try {
-          const T = this.sessionManager.getTokens();
-          if (T != null && T.refreshToken)
+          const v = this.sessionManager.getTokens();
+          if (v != null && v.refreshToken)
             return await this.sessionManager.getAuthHeaders(), this.executeRequest(e, t, n, i, !0);
         } catch {
-          throw new Error(`HTTP ${b.status}: ${b.statusText}`);
+          throw new Error(`HTTP ${m.status}: ${m.statusText}`);
         }
-      if (!b.ok)
-        throw new Error(`HTTP ${b.status}: ${b.statusText}`);
-      const g = b.headers.get("content-type");
-      return !g || !g.includes("application/json") ? {} : await b.json();
-    } catch (b) {
-      throw clearTimeout(u), b instanceof Error && b.name === "AbortError" ? new Error(`Request timeout after ${p}ms`) : b;
+      if (!m.ok)
+        throw new Error(`HTTP ${m.status}: ${m.statusText}`);
+      const h = m.headers.get("content-type");
+      return !h || !h.includes("application/json") ? {} : await m.json();
+    } catch (m) {
+      throw clearTimeout(d), m instanceof Error && m.name === "AbortError" ? new Error(`Request timeout after ${p}ms`) : m;
     }
   }
   async get(e, t) {
@@ -65,7 +65,7 @@ class oe {
     return this.request("DELETE", e, void 0, t);
   }
 }
-class He {
+class qe {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -124,32 +124,32 @@ class He {
     })).data;
   }
 }
-const Ie = ue(null);
-function hn({ config: r, children: e }) {
-  const t = Z(
+const Le = ue(null);
+function pn({ config: r, children: e }) {
+  const t = J(
     () => {
-      var g, T, I;
+      var h, v, I;
       return {
-        enabled: ((g = r.cache) == null ? void 0 : g.enabled) ?? !0,
-        ttl: ((T = r.cache) == null ? void 0 : T.ttl) ?? 3e5,
+        enabled: ((h = r.cache) == null ? void 0 : h.enabled) ?? !0,
+        ttl: ((v = r.cache) == null ? void 0 : v.ttl) ?? 3e5,
         // 5 minutes default
         storageKey: ((I = r.cache) == null ? void 0 : I.storageKey) ?? `app_cache_${r.appId}`
       };
     },
     [r.cache, r.appId]
-  ), [n, i] = A(() => {
+  ), [n, i] = x(() => {
     if (!t.enabled) return null;
     try {
-      const g = localStorage.getItem(t.storageKey);
-      if (!g) return null;
-      const T = JSON.parse(g);
-      return Date.now() - T.timestamp < t.ttl && T.appId === r.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
+      const h = localStorage.getItem(t.storageKey);
+      if (!h) return null;
+      const v = JSON.parse(h);
+      return Date.now() - v.timestamp < t.ttl && v.appId === r.appId ? v.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = A(!n), [p, f] = A(null), w = Z(() => {
-    const g = () => {
-      u();
+  }), [o, a] = x(!n), [p, f] = x(null), w = J(() => {
+    const h = () => {
+      d();
     };
     return {
       appId: r.appId,
@@ -158,18 +158,18 @@ function hn({ config: r, children: e }) {
       appInfo: n,
       isAppLoading: o,
       appError: p,
-      retryApp: g
+      retryApp: h
     };
-  }, [r, n, o, p]), u = re(
-    async (g = !1) => {
-      if (!(!g && t.enabled && n))
+  }, [r, n, o, p]), d = se(
+    async (h = !1) => {
+      if (!(!h && t.enabled && n))
         try {
           a(!0), f(null);
-          const T = new oe(r.baseUrl), N = await new He(T, {}).getPublicAppInfo(r.appId);
-          if (i(N), t.enabled)
+          const v = new ae(r.baseUrl), F = await new qe(v, {}).getPublicAppInfo(r.appId);
+          if (i(F), t.enabled)
             try {
               const M = {
-                data: N,
+                data: F,
                 timestamp: Date.now(),
                 appId: r.appId
               };
@@ -177,49 +177,49 @@ function hn({ config: r, children: e }) {
             } catch (M) {
               console.warn("Failed to cache app info:", M);
             }
-        } catch (T) {
-          const I = T instanceof Error ? T : new Error("Failed to load app information");
+        } catch (v) {
+          const I = v instanceof Error ? v : new Error("Failed to load app information");
           f(I), i(null);
         } finally {
           a(!1);
         }
     },
     [r.baseUrl, r.appId, t, n]
-  ), b = re(async () => {
+  ), m = se(async () => {
     if (!(!t.enabled || !n))
       try {
-        const g = localStorage.getItem(t.storageKey);
-        if (!g) return;
-        const T = JSON.parse(g);
-        if (Date.now() - T.timestamp > t.ttl * 0.5) {
-          const N = new oe(r.baseUrl), P = await new He(N, {}).getPublicAppInfo(r.appId);
+        const h = localStorage.getItem(t.storageKey);
+        if (!h) return;
+        const v = JSON.parse(h);
+        if (Date.now() - v.timestamp > t.ttl * 0.5) {
+          const F = new ae(r.baseUrl), P = await new qe(F, {}).getPublicAppInfo(r.appId);
           i(P);
-          const h = {
+          const u = {
             data: P,
             timestamp: Date.now(),
             appId: r.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(h));
+          localStorage.setItem(t.storageKey, JSON.stringify(u));
         }
-      } catch (g) {
-        console.warn("Background app refresh failed:", g);
+      } catch (h) {
+        console.warn("Background app refresh failed:", h);
       }
   }, [r, t, n]);
-  return X(() => {
-    n ? b() : u();
-  }, []), /* @__PURE__ */ s(Ie.Provider, { value: w, children: e });
+  return ee(() => {
+    n ? m() : d();
+  }, []), /* @__PURE__ */ s(Le.Provider, { value: w, children: e });
 }
-function ye() {
-  const r = ie(Ie);
+function we() {
+  const r = oe(Le);
   if (!r)
     throw new Error("useApp must be used within an AppProvider");
   return r;
 }
-function je() {
-  return ie(Ie);
+function Ze() {
+  return oe(Le);
 }
-const gn = ye;
-class xe {
+const fn = we;
+class Re {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey);
   }
@@ -372,7 +372,7 @@ class xe {
     return e !== null && !this.isTokenExpired(e);
   }
 }
-class gt {
+class ft {
   constructor(e) {
     this.httpService = e;
   }
@@ -428,7 +428,7 @@ class gt {
     });
   }
 }
-class Be {
+class Oe {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -504,7 +504,7 @@ class Be {
     };
   }
 }
-class pt {
+class mt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -544,7 +544,7 @@ class pt {
     });
   }
 }
-class fe {
+class me {
   constructor(e, t, n) {
     this.httpService = e, this.appId = t, this.sessionManager = n;
   }
@@ -622,7 +622,7 @@ class fe {
     )).data;
   }
 }
-function ft(r, e) {
+function yt(r, e) {
   if (r === "localhost" || r.startsWith("127.") || r.startsWith("192.168."))
     return null;
   if (e) {
@@ -638,26 +638,26 @@ function ft(r, e) {
   const n = r.split(".");
   return n.length >= 3 && n[0] !== "www" ? n[0] : null;
 }
-function mt(r, e = "tenant", t) {
+function wt(r, e = "tenant", t) {
   const i = new URLSearchParams(r).get(e);
   return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
 }
-function yt(r, e, t) {
-  const { tenantMode: n, baseDomain: i, selectorParam: o } = r;
-  return n === "subdomain" ? ft(e.hostname, i) : n === "selector" ? mt(e.search, o, t) : null;
+function bt(r, e, t) {
+  const { tenantMode: n, baseDomain: i, selectorParam: o, fixedTenantSlug: a } = r;
+  return n === "fixed" ? a || null : n === "subdomain" ? yt(e.hostname, i) : n === "selector" ? wt(e.search, o, t) : null;
 }
-function wt(r, e, t) {
+function St(r, e, t) {
   if (t)
     return `${r}.${t}`;
   const n = e.split(".");
   return n.length === 2 ? `${r}.${e}` : n.length >= 3 ? (n[0] = r, n.join(".")) : null;
 }
 const de = "_auth";
-function qe(r) {
+function ze(r) {
   const e = JSON.stringify(r);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function bt(r) {
+function vt(r) {
   try {
     let e = r.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
@@ -668,7 +668,7 @@ function bt(r) {
     return null;
   }
 }
-function St() {
+function Tt() {
   if (typeof window > "u")
     return console.log("[CrossDomainAuth] SSR environment, skipping URL token extraction"), null;
   const e = new URLSearchParams(window.location.search).get(de);
@@ -677,7 +677,7 @@ function St() {
     searchParams: window.location.search,
     encodedLength: e == null ? void 0 : e.length
   }), !e) return null;
-  const t = bt(e);
+  const t = vt(e);
   return console.log("[CrossDomainAuth] Token decode result:", {
     success: !!t,
     hasAccessToken: !!(t != null && t.accessToken),
@@ -685,7 +685,7 @@ function St() {
     expiresIn: t == null ? void 0 : t.expiresIn
   }), t;
 }
-function vt() {
+function kt() {
   if (typeof window > "u") return;
   const r = new URL(window.location.href);
   r.searchParams.delete(de), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
@@ -693,131 +693,133 @@ function vt() {
     newUrl: r.toString()
   }), window.history.replaceState({}, "", r.toString());
 }
-const Me = ue(null);
-function pn({ config: r, children: e }) {
-  const { baseUrl: t, appInfo: n, appId: i } = ye(), o = re(() => typeof window > "u" ? null : yt(
+const Ee = ue(null);
+function mn({ config: r, children: e }) {
+  const { baseUrl: t, appInfo: n, appId: i } = we(), o = se(() => typeof window > "u" ? null : bt(
     {
       tenantMode: r.tenantMode || "selector",
       baseDomain: r.baseDomain,
-      selectorParam: r.selectorParam
+      selectorParam: r.selectorParam,
+      fixedTenantSlug: r.fixedTenantSlug
     },
     {
       hostname: window.location.hostname,
       search: window.location.search
     },
     window.localStorage
-  ), [r.tenantMode, r.baseDomain, r.selectorParam]), [a, p] = A(() => o()), f = Z(
+  ), [r.tenantMode, r.baseDomain, r.selectorParam, r.fixedTenantSlug]), [a, p] = x(() => o()), f = J(
     () => {
-      var c, H, F;
+      var g, C, T;
       return {
-        enabled: ((c = r.cache) == null ? void 0 : c.enabled) ?? !0,
-        ttl: ((H = r.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
+        enabled: ((g = r.cache) == null ? void 0 : g.enabled) ?? !0,
+        ttl: ((C = r.cache) == null ? void 0 : C.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((F = r.cache) == null ? void 0 : F.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((T = r.cache) == null ? void 0 : T.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [r.cache, a]
-  ), [w, u] = A(() => {
+  ), [w, d] = x(() => {
     if (r.initialTenant) return r.initialTenant;
     if (!f.enabled || !a) return null;
     try {
-      const c = localStorage.getItem(f.storageKey);
-      if (!c) return null;
-      const H = JSON.parse(c);
-      return Date.now() - H.timestamp < f.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(f.storageKey), null);
+      const g = localStorage.getItem(f.storageKey);
+      if (!g) return null;
+      const C = JSON.parse(g);
+      return Date.now() - C.timestamp < f.ttl && C.tenantSlug === a ? C.data : (localStorage.removeItem(f.storageKey), null);
     } catch {
       return null;
     }
-  }), [b, g] = A(!w && !r.initialTenant), [T, I] = A(null), [N, M] = A(null), [P, h] = A(!1), [x, S] = A(null);
-  X(() => {
-    const c = o();
-    p(c);
-  }, [o]);
-  const L = (n == null ? void 0 : n.settingsSchema) || null, E = re(
-    async (c, H = !1) => {
-      if (!(!H && f.enabled && w && w.domain === c))
+  }), [m, h] = x(!w && !r.initialTenant), [v, I] = x(null), [F, M] = x(null), [P, u] = x(!1), [A, b] = x(null);
+  ee(() => {
+    if (r.tenantMode === "fixed") return;
+    const g = o();
+    p(g);
+  }, [o, r.tenantMode]);
+  const L = (n == null ? void 0 : n.settingsSchema) || null, E = se(
+    async (g, C = !1) => {
+      if (!(!C && f.enabled && w && w.domain === g))
         try {
-          g(!0), I(null);
-          const F = new oe(t), m = await new fe(F, i).getPublicTenantInfo(c);
-          if (u(m), f.enabled)
+          h(!0), I(null);
+          const T = new ae(t), y = await new me(T, i).getPublicTenantInfo(g);
+          if (d(y), f.enabled)
             try {
-              const v = {
-                data: m,
+              const k = {
+                data: y,
                 timestamp: Date.now(),
-                tenantSlug: c
+                tenantSlug: g
               };
-              localStorage.setItem(f.storageKey, JSON.stringify(v));
-            } catch (v) {
-              console.warn("Failed to cache tenant info:", v);
+              localStorage.setItem(f.storageKey, JSON.stringify(k));
+            } catch (k) {
+              console.warn("Failed to cache tenant info:", k);
             }
-        } catch (F) {
-          const y = F instanceof Error ? F : new Error("Failed to load tenant information");
-          I(y), u(null);
+        } catch (T) {
+          const S = T instanceof Error ? T : new Error("Failed to load tenant information");
+          I(S), d(null);
         } finally {
-          g(!1);
+          h(!1);
         }
     },
     [t, i, f, w]
-  ), C = re(async () => {
+  ), N = se(async () => {
     if (!(!f.enabled || !w || !a))
       try {
-        const c = localStorage.getItem(f.storageKey);
-        if (!c) return;
-        const H = JSON.parse(c);
-        if (Date.now() - H.timestamp > f.ttl * 0.5) {
-          const y = new oe(t), v = await new fe(y, i).getPublicTenantInfo(a);
-          u(v);
-          const G = {
-            data: v,
+        const g = localStorage.getItem(f.storageKey);
+        if (!g) return;
+        const C = JSON.parse(g);
+        if (Date.now() - C.timestamp > f.ttl * 0.5) {
+          const S = new ae(t), k = await new me(S, i).getPublicTenantInfo(a);
+          d(k);
+          const j = {
+            data: k,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(f.storageKey, JSON.stringify(G));
+          localStorage.setItem(f.storageKey, JSON.stringify(j));
         }
-      } catch (c) {
-        console.warn("Background tenant refresh failed:", c);
+      } catch (g) {
+        console.warn("Background tenant refresh failed:", g);
       }
-  }, [t, i, f, w, a]), R = re(async () => {
+  }, [t, i, f, w, a]), R = se(async () => {
     if (w != null && w.id)
       try {
-        h(!0), S(null);
-        const c = new oe(t), F = await new fe(c, w.appId).getTenantSettings(w.id);
-        M(F);
-      } catch (c) {
-        const H = c instanceof Error ? c : new Error("Failed to load tenant settings");
-        S(H), M(null);
+        u(!0), b(null);
+        const g = new ae(t), T = await new me(g, w.appId).getTenantSettings(w.id);
+        M(T);
+      } catch (g) {
+        const C = g instanceof Error ? g : new Error("Failed to load tenant settings");
+        b(C), M(null);
       } finally {
-        h(!1);
+        u(!1);
       }
-  }, [t, w]), $ = re(() => {
+  }, [t, w]), U = se(() => {
     R();
-  }, [R]), l = re(
-    (c) => {
+  }, [R]), l = se(
+    (g) => {
       if (!L)
         return { isValid: !0, errors: [] };
-      const H = [];
+      const C = [];
       try {
-        return L.properties && Object.entries(L.properties).forEach(([F, y]) => {
-          var v;
-          const m = c[F];
-          if ((v = L.required) != null && v.includes(F) && m == null) {
-            H.push(`Field '${F}' is required`);
+        return L.properties && Object.entries(L.properties).forEach(([T, S]) => {
+          var k;
+          const y = g[T];
+          if ((k = L.required) != null && k.includes(T) && y == null) {
+            C.push(`Field '${T}' is required`);
             return;
           }
-          if (m != null) {
-            if (y.type) {
-              const G = y.type, Y = typeof m;
-              G === "string" && Y !== "string" ? H.push(`Field '${F}' must be a string`) : (G === "number" || G === "integer") && Y !== "number" ? H.push(`Field '${F}' must be a number`) : G === "boolean" && Y !== "boolean" ? H.push(`Field '${F}' must be a boolean`) : G === "array" && !Array.isArray(m) && H.push(`Field '${F}' must be an array`);
+          if (y != null) {
+            if (S.type) {
+              const j = S.type, Z = typeof y;
+              j === "string" && Z !== "string" ? C.push(`Field '${T}' must be a string`) : (j === "number" || j === "integer") && Z !== "number" ? C.push(`Field '${T}' must be a number`) : j === "boolean" && Z !== "boolean" ? C.push(`Field '${T}' must be a boolean`) : j === "array" && !Array.isArray(y) && C.push(`Field '${T}' must be an array`);
             }
-            y.minLength !== void 0 && typeof m == "string" && m.length < y.minLength && H.push(
-              `Field '${F}' must be at least ${y.minLength} characters long`
-            ), y.maxLength !== void 0 && typeof m == "string" && m.length > y.maxLength && H.push(
-              `Field '${F}' must be no more than ${y.maxLength} characters long`
-            ), y.minimum !== void 0 && typeof m == "number" && m < y.minimum && H.push(`Field '${F}' must be at least ${y.minimum}`), y.maximum !== void 0 && typeof m == "number" && m > y.maximum && H.push(`Field '${F}' must be no more than ${y.maximum}`), y.pattern && typeof m == "string" && (new RegExp(y.pattern).test(m) || H.push(`Field '${F}' does not match the required pattern`)), y.enum && !y.enum.includes(m) && H.push(`Field '${F}' must be one of: ${y.enum.join(", ")}`);
+            S.minLength !== void 0 && typeof y == "string" && y.length < S.minLength && C.push(
+              `Field '${T}' must be at least ${S.minLength} characters long`
+            ), S.maxLength !== void 0 && typeof y == "string" && y.length > S.maxLength && C.push(
+              `Field '${T}' must be no more than ${S.maxLength} characters long`
+            ), S.minimum !== void 0 && typeof y == "number" && y < S.minimum && C.push(`Field '${T}' must be at least ${S.minimum}`), S.maximum !== void 0 && typeof y == "number" && y > S.maximum && C.push(`Field '${T}' must be no more than ${S.maximum}`), S.pattern && typeof y == "string" && (new RegExp(S.pattern).test(y) || C.push(`Field '${T}' does not match the required pattern`)), S.enum && !S.enum.includes(y) && C.push(`Field '${T}' must be one of: ${S.enum.join(", ")}`);
           }
         }), {
-          isValid: H.length === 0,
-          errors: H
+          isValid: C.length === 0,
+          errors: C
         };
       } catch {
         return {
@@ -828,88 +830,95 @@ function pn({ config: r, children: e }) {
     },
     [L]
   );
-  X(() => {
-    !r.initialTenant && a ? w ? C() : E(a) : !r.initialTenant && !a && (u(null), I(null), g(!1));
-  }, [r.initialTenant, a, w, E, C]), X(() => {
-    w != null && w.id ? R() : (M(null), S(null), h(!1));
+  ee(() => {
+    !r.initialTenant && a ? w ? N() : E(a) : !r.initialTenant && !a && (d(null), I(null), h(!1));
+  }, [r.initialTenant, a, w, E, N]), ee(() => {
+    w != null && w.id ? R() : (M(null), b(null), u(!1));
   }, [w == null ? void 0 : w.id, R]);
-  const D = re(
-    (c, H) => {
-      const { mode: F = "reload", tokens: y, redirectPath: m } = H || {}, v = r.tenantMode || "selector";
-      if (localStorage.setItem("tenant", c), v === "subdomain") {
-        const G = window.location.hostname, Y = wt(
-          c,
-          G,
+  const D = se(
+    (g, C) => {
+      const { mode: T = "reload", tokens: S, redirectPath: y } = C || {}, k = r.tenantMode || "selector";
+      if (k === "fixed") {
+        console.warn(
+          "[TenantProvider] switchTenant is a no-op in fixed mode. Tenant is always:",
+          r.fixedTenantSlug
+        ), y && (window.location.href = y);
+        return;
+      }
+      if (localStorage.setItem("tenant", g), k === "subdomain") {
+        const j = window.location.hostname, Z = St(
+          g,
+          j,
           r.baseDomain
         );
-        if (!Y) {
+        if (!Z) {
           console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            G
+            j
           );
           return;
         }
-        const q = m || window.location.pathname, O = new URL(`${window.location.protocol}//${Y}${q}`);
-        new URLSearchParams(window.location.search).forEach((k, K) => {
-          K !== de && O.searchParams.set(K, k);
-        }), y && O.searchParams.set(de, qe(y)), window.location.href = O.toString();
-      } else if (v === "selector") {
-        const G = m || window.location.pathname, Y = new URLSearchParams(window.location.search);
-        if (Y.set(r.selectorParam || "tenant", c), Y.delete(de), y && Y.set(de, qe(y)), F === "reload") {
-          const q = `${G}?${Y.toString()}${window.location.hash}`;
-          window.location.href = q;
+        const O = y || window.location.pathname, q = new URL(`${window.location.protocol}//${Z}${O}`);
+        new URLSearchParams(window.location.search).forEach((B, X) => {
+          X !== de && q.searchParams.set(X, B);
+        }), S && q.searchParams.set(de, ze(S)), window.location.href = q.toString();
+      } else if (k === "selector") {
+        const j = y || window.location.pathname, Z = new URLSearchParams(window.location.search);
+        if (Z.set(r.selectorParam || "tenant", g), Z.delete(de), S && Z.set(de, ze(S)), T === "reload") {
+          const O = `${j}?${Z.toString()}${window.location.hash}`;
+          window.location.href = O;
         } else {
-          const q = `${G}?${Y.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", q), p(c), E(c);
+          const O = `${j}?${Z.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", O), p(g), E(g);
         }
       }
     },
     [r.tenantMode, r.selectorParam, r.baseDomain, E]
-  ), U = Z(() => ({
+  ), $ = J(() => ({
     // Tenant info
     tenant: w,
     tenantSlug: a,
-    isTenantLoading: b,
-    tenantError: T,
+    isTenantLoading: m,
+    tenantError: v,
     retryTenant: () => {
       a && E(a);
     },
     // Settings
-    settings: N,
+    settings: F,
     settingsSchema: L,
     isSettingsLoading: P,
-    settingsError: x,
+    settingsError: A,
     // Actions
-    refreshSettings: $,
+    refreshSettings: U,
     switchTenant: D,
     // Validation
     validateSettings: l
   }), [
     w,
     a,
-    b,
-    T,
-    N,
+    m,
+    v,
+    F,
     L,
     P,
-    x,
-    $,
+    A,
+    U,
     D,
     l
   ]);
-  return /* @__PURE__ */ s(Me.Provider, { value: U, children: e });
+  return /* @__PURE__ */ s(Ee.Provider, { value: $, children: e });
 }
 function he() {
-  const r = ie(Me);
+  const r = oe(Ee);
   if (!r)
     throw new Error("useTenant must be used within a TenantProvider");
   return r;
 }
-function Se() {
-  return ie(Me);
+function ve() {
+  return oe(Ee);
 }
-const fn = he;
-function mn() {
+const yn = he;
+function wn() {
   const { settings: r, settingsSchema: e, isSettingsLoading: t, settingsError: n, validateSettings: i } = he();
   return {
     settings: r,
@@ -929,305 +938,305 @@ function ge() {
     retry: i
   };
 }
-const Le = ue(null);
-function yn({ config: r = {}, children: e }) {
-  const { appId: t, baseUrl: n } = ye(), { tenant: i, tenantSlug: o, switchTenant: a } = he(), [p, f] = A(r.initialRoles || []), [w, u] = A(!r.initialRoles), [b, g] = A(null), [T, I] = A(!1), [N, M] = A(null), [P, h] = A(0), [x, S] = A(() => {
+const Fe = ue(null);
+function bn({ config: r = {}, children: e }) {
+  const { appId: t, baseUrl: n } = we(), { tenant: i, tenantSlug: o, switchTenant: a } = he(), [p, f] = x(r.initialRoles || []), [w, d] = x(!r.initialRoles), [m, h] = x(null), [v, I] = x(!1), [F, M] = x(null), [P, u] = x(0), [A, b] = x(() => {
     try {
-      const k = localStorage.getItem("userTenants");
-      return k ? JSON.parse(k) : [];
+      const G = localStorage.getItem("userTenants");
+      return G ? JSON.parse(G) : [];
     } catch {
       return [];
     }
-  }), [L, E] = A(!1), C = Ve({ done: !1, urlTokens: null });
-  C.current.done || (C.current.done = !0, C.current.urlTokens = St(), C.current.urlTokens && console.log(
+  }), [L, E] = x(!1), N = Ge({ done: !1, urlTokens: null });
+  N.current.done || (N.current.done = !0, N.current.urlTokens = Tt(), N.current.urlTokens && console.log(
     "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
   ));
-  const [R, $] = A(() => {
-    const k = C.current.urlTokens !== null;
-    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", k), k;
-  }), l = Z(() => {
-    const k = new xe({
+  const [R, U] = x(() => {
+    const G = N.current.urlTokens !== null;
+    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", G), G;
+  }), l = J(() => {
+    const G = new Re({
       tenantSlug: o,
       onRefreshFailed: r.onRefreshFailed,
       baseUrl: n
     });
-    return C.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), k.setTokens({
-      accessToken: C.current.urlTokens.accessToken,
-      refreshToken: C.current.urlTokens.refreshToken,
-      expiresIn: C.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", k.hasValidSession())), k;
-  }, [o, n, r.onRefreshFailed]), D = C.current.done && !R, U = Z(() => {
-    const k = new oe(n);
-    return k.setSessionManager(l), k;
-  }, [n, l]), c = Z(() => new gt(new oe(n)), [n]), H = Z(() => new pt(U, l), [U, l]), F = Z(() => new Be(new oe(n)), [n]), y = Z(() => b || l.getUser(), [b, l]), m = Z(() => y != null && y.roleId && p.find((k) => k.id === y.roleId) || null, [y, p]), v = Z(() => (m == null ? void 0 : m.permissions) || [], [m]), G = Z(() => l.hasValidSession() && b !== null, [l, b]), Y = 5 * 60 * 1e3, q = Z(() => {
-    const k = async (B = !1) => {
+    return N.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), G.setTokens({
+      accessToken: N.current.urlTokens.accessToken,
+      refreshToken: N.current.urlTokens.refreshToken,
+      expiresIn: N.current.urlTokens.expiresIn
+    }), console.log("[AuthProvider] SYNC: Session valid:", G.hasValidSession())), G;
+  }, [o, n, r.onRefreshFailed]), [D, $] = x(() => N.current.urlTokens ? !1 : l.hasValidSession()), g = N.current.done && !R && !D, C = J(() => {
+    const G = new ae(n);
+    return G.setSessionManager(l), G;
+  }, [n, l]), T = J(() => new ft(new ae(n)), [n]), S = J(() => new mt(C, l), [C, l]), y = J(() => new Oe(new ae(n)), [n]), k = J(() => m || l.getUser(), [m, l]), j = J(() => k != null && k.roleId && p.find((G) => G.id === k.roleId) || null, [k, p]), Z = J(() => (j == null ? void 0 : j.permissions) || [], [j]), O = J(() => l.hasValidSession() && m !== null, [l, m]), q = 5 * 60 * 1e3, W = J(() => {
+    const G = async (H = !1) => {
       try {
         if (!l.hasValidSession())
           return;
         const z = Date.now();
-        if (!B && z - P < Y && b)
+        if (!H && z - P < q && m)
           return;
-        const W = l.getUserId();
-        if (!W) {
+        const V = l.getUserId();
+        if (!V) {
           console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
         I(!0), M(null);
-        const J = await H.getUserById(W);
-        g(J), l.setUser(J), h(Date.now());
+        const Y = await S.getUserById(V);
+        h(Y), l.setUser(Y), u(Date.now());
       } catch (z) {
         const Q = z instanceof Error ? z : new Error("Failed to load user data");
         M(Q), console.error("[AuthProvider] Failed to load user data:", Q);
       } finally {
         I(!1);
       }
-    }, K = async () => {
-      await k();
-    }, ce = async (B) => {
-      var Ue;
-      const { username: z, password: Q, tenantSlug: W, redirectPath: J } = B;
-      let ee = i == null ? void 0 : i.id, te = o, ne = l;
-      W && (ee = (await new fe(U, t).getPublicTenantInfo(W)).id, te = W);
-      const j = await c.login({
+    }, pe = async () => {
+      await G();
+    }, Te = async (H) => {
+      var He;
+      const { username: z, password: Q, tenantSlug: V, redirectPath: Y } = H;
+      let te = i == null ? void 0 : i.id, ne = o, re = l;
+      V && (te = (await new me(C, t).getPublicTenantInfo(V)).id, ne = V);
+      const K = await T.login({
         username: z,
         password: Q,
         appId: t,
-        tenantId: ee
-      }), pe = W && W !== o;
-      if (pe && (ne = new xe({
-        tenantSlug: te,
+        tenantId: te
+      }), fe = V && V !== o;
+      if (fe && (re = new Re({
+        tenantSlug: ne,
         baseUrl: n
-      })), ne.setTokens({
-        accessToken: j.accessToken,
-        refreshToken: j.refreshToken,
-        expiresIn: j.expiresIn
-      }), j.user) {
-        ne.setUser(j.user), g(j.user);
+      })), re.setTokens({
+        accessToken: K.accessToken,
+        refreshToken: K.refreshToken,
+        expiresIn: K.expiresIn
+      }), K.user) {
+        re.setUser(K.user), h(K.user);
         try {
-          await k();
-        } catch (we) {
-          console.warn("Failed to load complete user data after login:", we);
+          await G();
+        } catch (be) {
+          console.warn("Failed to load complete user data after login:", be);
         }
       }
-      if (j.tenants && j.tenants.length > 0) {
-        S(j.tenants);
+      if (K.tenants && K.tenants.length > 0) {
+        b(K.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(j.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(K.tenants));
         } catch {
         }
       }
-      const ke = ((Ue = j.user) == null ? void 0 : Ue.tenantId) !== null;
-      E(ke);
-      const Ae = {
-        accessToken: j.accessToken,
-        refreshToken: j.refreshToken,
-        expiresIn: j.expiresIn
+      const Ae = ((He = K.user) == null ? void 0 : He.tenantId) !== null;
+      E(Ae);
+      const Pe = {
+        accessToken: K.accessToken,
+        refreshToken: K.refreshToken,
+        expiresIn: K.expiresIn
       };
-      if (pe && te)
-        return a(te, { tokens: Ae, redirectPath: J }), j;
-      if (J && J !== window.location.pathname)
-        return a(te || o || "", { tokens: Ae, redirectPath: J }), j;
-      if (!ke && j.tenants && j.tenants.length > 0) {
-        const we = B.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
-        if (j.tenants.length === 1 && we) {
-          const $e = j.tenants[0];
-          return a($e.subdomain, { tokens: Ae, redirectPath: J }), j;
-        } else j.tenants.length > 1 && r.onTenantSelectionRequired && r.onTenantSelectionRequired(j.tenants);
+      if (fe && ne)
+        return a(ne, { tokens: Pe, redirectPath: Y }), K;
+      if (Y && Y !== window.location.pathname)
+        return a(ne || o || "", { tokens: Pe, redirectPath: Y }), K;
+      if (!Ae && K.tenants && K.tenants.length > 0) {
+        const be = H.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
+        if (K.tenants.length === 1 && be) {
+          const Be = K.tenants[0];
+          return a(Be.subdomain, { tokens: Pe, redirectPath: Y }), K;
+        } else K.tenants.length > 1 && r.onTenantSelectionRequired && r.onTenantSelectionRequired(K.tenants);
       }
-      return j;
-    }, ve = async (B) => {
-      const { email: z, phoneNumber: Q, name: W, password: J, lastName: ee, tenantId: te } = B;
+      return K;
+    }, ke = async (H) => {
+      const { email: z, phoneNumber: Q, name: V, password: Y, lastName: te, tenantId: ne } = H;
       if (!z && !Q)
         throw new Error("Either email or phoneNumber is required");
-      if (!W || !J)
+      if (!V || !Y)
         throw new Error("Name and password are required");
-      const ne = te ?? (i == null ? void 0 : i.id);
-      return await c.signup({
+      const re = ne ?? (i == null ? void 0 : i.id);
+      return await T.signup({
         email: z,
         phoneNumber: Q,
-        name: W,
-        password: J,
-        tenantId: ne,
-        lastName: ee,
+        name: V,
+        password: Y,
+        tenantId: re,
+        lastName: te,
         appId: t
       });
-    }, Qe = async (B) => {
-      const { email: z, phoneNumber: Q, name: W, password: J, tenantName: ee, lastName: te } = B;
+    }, et = async (H) => {
+      const { email: z, phoneNumber: Q, name: V, password: Y, tenantName: te, lastName: ne } = H;
       if (!z && !Q)
         throw new Error("Either email or phoneNumber is required");
-      if (!W || !J || !ee)
+      if (!V || !Y || !te)
         throw new Error("Name, password, and tenantName are required");
-      return await c.signupTenantAdmin({
+      return await T.signupTenantAdmin({
         email: z,
         phoneNumber: Q,
-        name: W,
-        password: J,
-        tenantName: ee,
+        name: V,
+        password: Y,
+        tenantName: te,
         appId: t,
-        lastName: te
+        lastName: ne
       });
-    }, Xe = async (B) => {
-      const { currentPassword: z, newPassword: Q } = B, W = await l.getAuthHeaders();
-      await c.changePassword({ currentPassword: z, newPassword: Q }, W);
-    }, et = async (B) => {
-      const { email: z, tenantId: Q } = B, W = Q ?? (i == null ? void 0 : i.id);
-      if (!W)
+    }, tt = async (H) => {
+      const { currentPassword: z, newPassword: Q } = H, V = await l.getAuthHeaders();
+      await T.changePassword({ currentPassword: z, newPassword: Q }, V);
+    }, nt = async (H) => {
+      const { email: z, tenantId: Q } = H, V = Q ?? (i == null ? void 0 : i.id);
+      if (!V)
         throw new Error("tenantId is required for password reset");
-      await c.requestPasswordReset({ email: z, tenantId: W });
-    }, tt = async (B) => {
-      const { token: z, newPassword: Q } = B;
-      await c.confirmPasswordReset({ token: z, newPassword: Q });
-    }, nt = async (B) => {
-      const { email: z, frontendUrl: Q, name: W, lastName: J, tenantId: ee } = B, te = ee ?? (i == null ? void 0 : i.id);
-      if (!te)
+      await T.requestPasswordReset({ email: z, tenantId: V });
+    }, rt = async (H) => {
+      const { token: z, newPassword: Q } = H;
+      await T.confirmPasswordReset({ token: z, newPassword: Q });
+    }, st = async (H) => {
+      const { email: z, frontendUrl: Q, name: V, lastName: Y, tenantId: te } = H, ne = te ?? (i == null ? void 0 : i.id);
+      if (!ne)
         throw new Error("tenantId is required for magic link authentication");
-      return await c.sendMagicLink({
+      return await T.sendMagicLink({
         email: z,
-        tenantId: te,
+        tenantId: ne,
         frontendUrl: Q,
-        name: W,
-        lastName: J,
+        name: V,
+        lastName: Y,
         appId: t
       });
-    }, rt = async (B) => {
-      const { token: z, email: Q, tenantSlug: W } = B;
-      let J = i == null ? void 0 : i.id, ee = o, te = l;
-      W && (J = (await new fe(U, t).getPublicTenantInfo(W)).id, ee = W);
-      const ne = await c.verifyMagicLink({
+    }, it = async (H) => {
+      const { token: z, email: Q, tenantSlug: V } = H;
+      let Y = i == null ? void 0 : i.id, te = o, ne = l;
+      V && (Y = (await new me(C, t).getPublicTenantInfo(V)).id, te = V);
+      const re = await T.verifyMagicLink({
         token: z,
         email: Q,
         appId: t,
-        tenantId: J
-      }), j = W && W !== o;
-      if (j && (te = new xe({
-        tenantSlug: ee,
+        tenantId: Y
+      }), K = V && V !== o;
+      if (K && (ne = new Re({
+        tenantSlug: te,
         baseUrl: n
-      })), te.setTokens({
-        accessToken: ne.accessToken,
-        refreshToken: ne.refreshToken,
-        expiresIn: ne.expiresIn
-      }), ne.user) {
-        te.setUser(ne.user), g(ne.user);
+      })), ne.setTokens({
+        accessToken: re.accessToken,
+        refreshToken: re.refreshToken,
+        expiresIn: re.expiresIn
+      }), re.user) {
+        ne.setUser(re.user), h(re.user);
         try {
-          await k();
-        } catch (pe) {
-          console.warn("Failed to load complete user data after magic link login:", pe);
+          await G();
+        } catch (fe) {
+          console.warn("Failed to load complete user data after magic link login:", fe);
         }
       }
-      return j && ee && ee !== o && a(ee, {
+      return K && te && te !== o && a(te, {
         tokens: {
-          accessToken: ne.accessToken,
-          refreshToken: ne.refreshToken,
-          expiresIn: ne.expiresIn
+          accessToken: re.accessToken,
+          refreshToken: re.refreshToken,
+          expiresIn: re.expiresIn
         }
-      }), ne;
-    }, st = async () => {
-      const B = l.getTokens();
-      if (!(B != null && B.refreshToken))
+      }), re;
+    }, ot = async () => {
+      const H = l.getTokens();
+      if (!(H != null && H.refreshToken))
         throw new Error("No refresh token available");
-      const z = await c.refreshToken({
-        refreshToken: B.refreshToken
+      const z = await T.refreshToken({
+        refreshToken: H.refreshToken
       });
       l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || B.refreshToken,
+        refreshToken: z.refreshToken || H.refreshToken,
         expiresIn: z.expiresIn
       });
-    }, it = () => {
-      l.clearSession(), g(null), M(null), S([]), E(!1);
+    }, at = () => {
+      l.clearSession(), h(null), M(null), b([]), E(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, ot = (B) => {
-      l.setTokens(B);
-    }, at = () => l.hasValidSession(), lt = () => {
-      l.clearSession(), g(null), M(null);
-    }, ct = async () => {
+    }, lt = (H) => {
+      l.setTokens(H);
+    }, ct = () => l.hasValidSession(), dt = () => {
+      l.clearSession(), h(null), M(null);
+    }, ut = async () => {
       if (t)
         try {
-          u(!0);
-          const { roles: B } = await F.getRolesByApp(t);
-          f(B);
-        } catch (B) {
-          console.error("Failed to fetch roles:", B);
+          d(!0);
+          const { roles: H } = await y.getRolesByApp(t);
+          f(H);
+        } catch (H) {
+          console.error("Failed to fetch roles:", H);
         } finally {
-          u(!1);
+          d(!1);
         }
-    }, dt = async () => {
-      await ct();
-    }, Te = (B) => {
-      if (!v || v.length === 0)
+    }, ht = async () => {
+      await ut();
+    }, xe = (H) => {
+      if (!Z || Z.length === 0)
         return !1;
-      if (typeof B == "string")
-        return v.includes(B);
-      const z = `${B.resource}.${B.action}`;
-      return v.includes(z);
+      if (typeof H == "string")
+        return Z.includes(H);
+      const z = `${H.resource}.${H.action}`;
+      return Z.includes(z);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: G,
+      isAuthenticated: O,
       sessionManager: l,
-      authenticatedHttpService: U,
-      login: ce,
-      signup: ve,
-      signupTenantAdmin: Qe,
-      sendMagicLink: nt,
-      verifyMagicLink: rt,
-      changePassword: Xe,
-      requestPasswordReset: et,
-      confirmPasswordReset: tt,
-      refreshToken: st,
-      logout: it,
-      setTokens: ot,
-      hasValidSession: at,
-      clearSession: lt,
-      currentUser: b,
-      isUserLoading: T,
-      userError: N,
-      loadUserData: k,
-      refreshUser: K,
-      isAuthInitializing: !D,
-      isAuthReady: D,
-      userRole: m,
-      userPermissions: v,
+      authenticatedHttpService: C,
+      login: Te,
+      signup: ke,
+      signupTenantAdmin: et,
+      sendMagicLink: st,
+      verifyMagicLink: it,
+      changePassword: tt,
+      requestPasswordReset: nt,
+      confirmPasswordReset: rt,
+      refreshToken: ot,
+      logout: at,
+      setTokens: lt,
+      hasValidSession: ct,
+      clearSession: dt,
+      currentUser: m,
+      isUserLoading: v,
+      userError: F,
+      loadUserData: G,
+      refreshUser: pe,
+      isAuthInitializing: !g,
+      isAuthReady: g,
+      userRole: j,
+      userPermissions: Z,
       availableRoles: p,
       rolesLoading: w,
-      hasPermission: Te,
-      hasAnyPermission: (B) => B.some((z) => Te(z)),
-      hasAllPermissions: (B) => B.every((z) => Te(z)),
-      getUserPermissionStrings: () => v || [],
-      refreshRoles: dt,
+      hasPermission: xe,
+      hasAnyPermission: (H) => H.some((z) => xe(z)),
+      hasAllPermissions: (H) => H.every((z) => xe(z)),
+      getUserPermissionStrings: () => Z || [],
+      refreshRoles: ht,
       // RFC-004: Multi-tenant user membership
-      userTenants: x,
+      userTenants: A,
       hasTenantContext: L,
-      switchToTenant: async (B, z) => {
-        const { redirectPath: Q } = z || {}, W = l.getTokens();
-        if (!(W != null && W.refreshToken))
+      switchToTenant: async (H, z) => {
+        const { redirectPath: Q } = z || {}, V = l.getTokens();
+        if (!(V != null && V.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const J = await c.switchTenant({
-          refreshToken: W.refreshToken,
-          tenantId: B
+        const Y = await T.switchTenant({
+          refreshToken: V.refreshToken,
+          tenantId: H
         });
         l.setTokens({
-          accessToken: J.accessToken,
-          refreshToken: W.refreshToken,
+          accessToken: Y.accessToken,
+          refreshToken: V.refreshToken,
           // Keep the same refresh token
-          expiresIn: J.expiresIn
-        }), g(J.user), l.setUser(J.user), E(!0);
-        const ee = x.find((te) => te.id === B);
-        ee && a(ee.subdomain, {
+          expiresIn: Y.expiresIn
+        }), h(Y.user), l.setUser(Y.user), E(!0);
+        const te = A.find((ne) => ne.id === H);
+        te && a(te.subdomain, {
           tokens: {
-            accessToken: J.accessToken,
-            refreshToken: W.refreshToken,
-            expiresIn: J.expiresIn
+            accessToken: Y.accessToken,
+            refreshToken: V.refreshToken,
+            expiresIn: Y.expiresIn
           },
           redirectPath: Q
         });
       },
       refreshUserTenants: async () => {
-        const B = await l.getAuthHeaders(), z = await c.getUserTenants(B);
-        S(z);
+        const H = await l.getAuthHeaders(), z = await T.getUserTenants(H);
+        b(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
         } catch {
@@ -1236,74 +1245,76 @@ function yn({ config: r = {}, children: e }) {
       }
     };
   }, [
-    G,
+    O,
     l,
-    U,
-    c,
-    H,
-    F,
+    C,
+    T,
+    S,
+    y,
     t,
     i,
     o,
     a,
     p,
-    b,
-    T,
-    N,
-    x,
-    L,
-    D,
     m,
     v,
+    F,
+    A,
+    L,
+    g,
+    j,
+    Z,
     P,
-    Y
+    q
   ]);
-  X(() => {
+  ee(() => {
     !r.initialRoles && t && (async () => {
       try {
-        u(!0);
-        const K = new oe(n), ce = new Be(K), { roles: ve } = await ce.getRolesByApp(t);
-        f(ve);
-      } catch (K) {
-        console.error("Failed to fetch roles:", K);
+        d(!0);
+        const pe = new ae(n), Te = new Oe(pe), { roles: ke } = await Te.getRolesByApp(t);
+        f(ke);
+      } catch (pe) {
+        console.error("Failed to fetch roles:", pe);
       } finally {
-        u(!1);
+        d(!1);
       }
     })();
   }, [t, n, r.initialRoles]);
-  const [O, V] = A(!1);
-  return X(() => {
-    O || (V(!0), C.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), vt(), $(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), q.loadUserData().catch((k) => {
-      console.error("[AuthProvider] Failed to load user data:", k);
+  const [B, X] = x(!1);
+  return ee(() => {
+    B || (X(!0), N.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), kt(), U(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), W.loadUserData().catch((G) => {
+      console.error("[AuthProvider] Failed to load user data:", G);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), $(!1);
+      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), U(!1);
     })));
-  }, [q, O]), X(() => {
-    const k = l.getUser();
-    k && l.hasValidSession() && g(k);
-  }, [l]), X(() => {
-    O && (C.current.urlTokens || !b && !T && l.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), q.loadUserData().catch(() => {
-    })));
-  }, [b, T, q, l, O]), X(() => {
-    if (!l.hasValidSession() || !b)
+  }, [W, B]), ee(() => {
+    const G = l.getUser();
+    G && l.hasValidSession() ? (h(G), $(!1)) : l.hasValidSession() || $(!1);
+  }, [l]), ee(() => {
+    B && (N.current.urlTokens || (!m && !v && l.hasValidSession() ? (console.log("[AuthProvider] Auto-loading user data..."), W.loadUserData().catch(() => {
+    }).finally(() => {
+      $(!1);
+    })) : m && $(!1)));
+  }, [m, v, W, l, B]), ee(() => {
+    if (!l.hasValidSession() || !m)
       return;
-    const k = setInterval(() => {
-      q.loadUserData().catch(() => {
+    const G = setInterval(() => {
+      W.loadUserData().catch(() => {
       });
-    }, Y);
-    return () => clearInterval(k);
-  }, [l, b, q, Y]), /* @__PURE__ */ s(Le.Provider, { value: q, children: e });
+    }, q);
+    return () => clearInterval(G);
+  }, [l, m, W, q]), /* @__PURE__ */ s(Fe.Provider, { value: W, children: e });
 }
-function le() {
-  const r = ie(Le);
+function ce() {
+  const r = oe(Fe);
   if (!r)
     throw new Error("useAuth must be used within an AuthProvider");
   return r;
 }
-function Ee() {
-  return ie(Le);
+function Ne() {
+  return oe(Fe);
 }
-class Tt {
+class xt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1383,66 +1394,66 @@ class Tt {
     })).data;
   }
 }
-const Fe = ue(null);
-function wn({ config: r = {}, children: e }) {
-  const t = je(), n = Se(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [p, f] = A([]), [w, u] = A(!1), [b, g] = A(null), [T, I] = A(!1), N = Z(() => {
-    const h = new oe(i);
-    return new Tt(h);
+const De = ue(null);
+function Sn({ config: r = {}, children: e }) {
+  const t = Ze(), n = ve(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [p, f] = x([]), [w, d] = x(!1), [m, h] = x(null), [v, I] = x(!1), F = J(() => {
+    const u = new ae(i);
+    return new xt(u);
   }, [i]), M = async () => {
     if (!(a != null && a.id)) {
       f([]);
       return;
     }
-    u(!0), g(null);
+    d(!0), h(null);
     try {
-      const h = await N.getTenantFeatureFlags(a.id, o);
-      f(h);
-    } catch (h) {
-      const x = h instanceof Error ? h.message : "Failed to fetch feature flags";
-      g(x), r.onError && r.onError(h instanceof Error ? h : new Error(x));
+      const u = await F.getTenantFeatureFlags(a.id, o);
+      f(u);
+    } catch (u) {
+      const A = u instanceof Error ? u.message : "Failed to fetch feature flags";
+      h(A), r.onError && r.onError(u instanceof Error ? u : new Error(A));
     } finally {
-      u(!1);
+      d(!1);
     }
   };
-  X(() => {
+  ee(() => {
     if (!i || !o) return;
     M().finally(() => I(!0));
-    const h = r.refreshInterval || 5 * 60 * 1e3, x = setInterval(M, h);
-    return () => clearInterval(x);
+    const u = r.refreshInterval || 5 * 60 * 1e3, A = setInterval(M, u);
+    return () => clearInterval(A);
   }, [a == null ? void 0 : a.id, i, o, r.refreshInterval]);
-  const P = Z(() => {
-    const h = (C) => {
-      const R = p.find(($) => $.key === C);
+  const P = J(() => {
+    const u = (N) => {
+      const R = p.find((U) => U.key === N);
       return (R == null ? void 0 : R.value) === !0;
-    }, x = (C) => p.find((R) => R.key === C), S = (C) => {
-      const R = p.find(($) => $.key === C);
+    }, A = (N) => p.find((R) => R.key === N), b = (N) => {
+      const R = p.find((U) => U.key === N);
       return R ? R.value ? "enabled" : "disabled" : "not_found";
     }, L = async () => {
       await M();
-    }, E = !!(i && o) && (T || !(a != null && a.id));
+    }, E = !!(i && o) && (v || !(a != null && a.id));
     return {
       featureFlags: p,
       loading: w,
-      error: b,
+      error: m,
       isReady: E,
-      isEnabled: h,
-      getFlag: x,
-      getFlagState: S,
+      isEnabled: u,
+      getFlag: A,
+      getFlagState: b,
       refresh: L
     };
-  }, [p, w, b, i, o, a == null ? void 0 : a.id, T]);
-  return /* @__PURE__ */ s(Fe.Provider, { value: P, children: e });
+  }, [p, w, m, i, o, a == null ? void 0 : a.id, v]);
+  return /* @__PURE__ */ s(De.Provider, { value: P, children: e });
 }
-function kt() {
-  const r = ie(Fe);
+function At() {
+  const r = oe(De);
   if (!r)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return r;
 }
-function Ge() {
-  return ie(Fe);
+function Ke() {
+  return oe(De);
 }
-class At {
+class Pt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1508,68 +1519,68 @@ class At {
     )).data;
   }
 }
-const Ne = ue(void 0);
-function bn({ config: r = {}, children: e }) {
-  const t = je(), n = Se(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (n == null ? void 0 : n.tenant) ?? null, [a, p] = A(null), [f, w] = A(!1), [u, b] = A(null), [g, T] = A(!1), I = Z(() => {
-    const P = new oe(i);
-    return new At(P);
-  }, [i]), N = async () => {
+const Ce = ue(void 0);
+function vn({ config: r = {}, children: e }) {
+  const t = Ze(), n = ve(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (n == null ? void 0 : n.tenant) ?? null, [a, p] = x(null), [f, w] = x(!1), [d, m] = x(null), [h, v] = x(!1), I = J(() => {
+    const P = new ae(i);
+    return new Pt(P);
+  }, [i]), F = async () => {
     if (!(o != null && o.id)) {
       p(null);
       return;
     }
-    w(!0), b(null);
+    w(!0), m(null);
     try {
       const P = await I.getTenantSubscriptionFeatures(o.id);
       p(P);
     } catch (P) {
-      const h = P instanceof Error ? P.message : "Failed to fetch subscription";
-      b(h), r.onError && r.onError(P instanceof Error ? P : new Error(h));
+      const u = P instanceof Error ? P.message : "Failed to fetch subscription";
+      m(u), r.onError && r.onError(P instanceof Error ? P : new Error(u));
     } finally {
       w(!1);
     }
   };
-  X(() => {
-    if (!i || (N().finally(() => T(!0)), !r.refreshInterval)) return;
-    const P = r.refreshInterval || 10 * 60 * 1e3, h = setInterval(N, P);
-    return () => clearInterval(h);
+  ee(() => {
+    if (!i || (F().finally(() => v(!0)), !r.refreshInterval)) return;
+    const P = r.refreshInterval || 10 * 60 * 1e3, u = setInterval(F, P);
+    return () => clearInterval(u);
   }, [o == null ? void 0 : o.id, i, r.refreshInterval]);
-  const M = Z(() => {
-    const P = (a == null ? void 0 : a.features) || [], h = (R) => {
-      const $ = P.find((l) => l.key === R);
-      return $ ? $.type === "BOOLEAN" || $.type === "boolean" ? $.value === !0 : !!$.value : !1;
-    }, x = (R) => P.find(($) => $.key === R), S = (R, $) => {
+  const M = J(() => {
+    const P = (a == null ? void 0 : a.features) || [], u = (R) => {
+      const U = P.find((l) => l.key === R);
+      return U ? U.type === "BOOLEAN" || U.type === "boolean" ? U.value === !0 : !!U.value : !1;
+    }, A = (R) => P.find((U) => U.key === R), b = (R, U) => {
       const l = P.find((D) => D.key === R);
-      return l ? l.value : $;
+      return l ? l.value : U;
     }, L = (R) => !a || !a.isActive ? !1 : R.includes(a.planId), E = async () => {
-      await N();
-    }, C = !!i && (g || !(o != null && o.id));
+      await F();
+    }, N = !!i && (h || !(o != null && o.id));
     return {
       subscription: a,
       features: P,
       loading: f,
-      error: u,
-      isReady: C,
-      isFeatureEnabled: h,
-      getFeature: x,
-      getFeatureValue: S,
+      error: d,
+      isReady: N,
+      isFeatureEnabled: u,
+      getFeature: A,
+      getFeatureValue: b,
       hasAllowedPlan: L,
       refresh: E
     };
-  }, [a, f, u, i, o == null ? void 0 : o.id, g]);
-  return /* @__PURE__ */ s(Ne.Provider, { value: M, children: e });
+  }, [a, f, d, i, o == null ? void 0 : o.id, h]);
+  return /* @__PURE__ */ s(Ce.Provider, { value: M, children: e });
 }
-function xt() {
-  const r = ie(Ne);
+function Rt() {
+  const r = oe(Ce);
   if (r === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return r;
 }
-function Ze() {
-  return ie(Ne) ?? null;
+function Je() {
+  return oe(Ce) ?? null;
 }
-var se = /* @__PURE__ */ ((r) => (r.SUPERUSER = "SUPERUSER", r.TENANT_ADMIN = "TENANT_ADMIN", r.USER = "USER", r))(se || {});
-const De = {
+var ie = /* @__PURE__ */ ((r) => (r.SUPERUSER = "SUPERUSER", r.TENANT_ADMIN = "TENANT_ADMIN", r.USER = "USER", r))(ie || {});
+const Ue = {
   publicGuest: "/",
   publicUser: "/account",
   publicAdmin: "/admin",
@@ -1577,7 +1588,7 @@ const De = {
   tenantUser: "/dashboard",
   tenantAdmin: "/admin/dashboard",
   default: "/"
-}, Ke = {
+}, Ye = {
   // Public/Landing zones
   landing: { tenant: "forbidden", auth: "optional" },
   publicOnly: { tenant: "forbidden", auth: "forbidden" },
@@ -1590,18 +1601,18 @@ const De = {
   tenantOpen: { tenant: "required", auth: "optional" },
   tenantAuth: { tenant: "required", auth: "required" },
   // User type zones
-  user: { tenant: "required", auth: "required", userType: se.USER },
-  admin: { tenant: "required", auth: "required", userType: se.TENANT_ADMIN },
+  user: { tenant: "required", auth: "required", userType: ie.USER },
+  admin: { tenant: "required", auth: "required", userType: ie.TENANT_ADMIN },
   // Fully open
   open: { tenant: "optional", auth: "optional" }
-}, Ce = ue(null);
-function Sn({ config: r = {}, children: e }) {
-  const t = Z(() => {
+}, $e = ue(null);
+function Tn({ config: r = {}, children: e }) {
+  const t = J(() => {
     const n = {
-      ...De,
+      ...Ue,
       ...r.zoneRoots
     }, i = {
-      ...Ke,
+      ...Ye,
       ...r.presets
     };
     return {
@@ -1614,19 +1625,19 @@ function Sn({ config: r = {}, children: e }) {
       returnToStorage: r.returnToStorage ?? "url"
     };
   }, [r]);
-  return /* @__PURE__ */ s(Ce.Provider, { value: t, children: e });
+  return /* @__PURE__ */ s($e.Provider, { value: t, children: e });
 }
-function vn() {
-  const r = ie(Ce);
+function kn() {
+  const r = oe($e);
   if (!r)
     throw new Error("useRouting must be used within a RoutingProvider");
   return r;
 }
-function Pt() {
-  const r = ie(Ce);
+function It() {
+  const r = oe($e);
   return r || {
-    zoneRoots: De,
-    presets: Ke,
+    zoneRoots: Ue,
+    presets: Ye,
     loadingFallback: null,
     accessDeniedFallback: null,
     onAccessDenied: void 0,
@@ -1634,7 +1645,7 @@ function Pt() {
     returnToStorage: "url"
   };
 }
-const Oe = () => /* @__PURE__ */ d(
+const _e = () => /* @__PURE__ */ c(
   "div",
   {
     style: {
@@ -1671,11 +1682,11 @@ const Oe = () => /* @__PURE__ */ d(
       )
     ]
   }
-), ze = ({
+), We = ({
   userType: r,
   minUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ d(
+}) => /* @__PURE__ */ c(
   "div",
   {
     style: {
@@ -1693,55 +1704,55 @@ const Oe = () => /* @__PURE__ */ d(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
       /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && r ? /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ d("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+      e && r ? /* @__PURE__ */ c(_, { children: [
+        /* @__PURE__ */ c("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
           /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
-        /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        /* @__PURE__ */ c("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
           /* @__PURE__ */ s("strong", { children: r })
         ] })
-      ] }) : /* @__PURE__ */ d(_, { children: [
+      ] }) : /* @__PURE__ */ c(_, { children: [
         /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
-        t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        t && t.length > 0 && /* @__PURE__ */ c("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
           /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
       ] })
     ]
   }
-), Rt = (r, e) => {
+), Mt = (r, e) => {
   const t = {
-    [se.USER]: 1,
-    [se.TENANT_ADMIN]: 2,
-    [se.SUPERUSER]: 3
+    [ie.USER]: 1,
+    [ie.TENANT_ADMIN]: 2,
+    [ie.SUPERUSER]: 3
   };
   return t[r] >= t[e];
 };
-function Tn({
+function xn({
   children: r,
   fallback: e,
   minUserType: t,
   requiredPermissions: n,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: f, hasAllPermissions: w } = le();
+  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: f, hasAllPermissions: w } = ce();
   if (!o())
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Oe, {}) });
-  const u = a.getUser();
-  if (!u)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Oe, {}) });
-  if (t && !Rt(u.userType, t))
-    return /* @__PURE__ */ s(ze, { userType: u.userType, minUserType: t });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(_e, {}) });
+  const d = a.getUser();
+  if (!d)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(_e, {}) });
+  if (t && !Mt(d.userType, t))
+    return /* @__PURE__ */ s(We, { userType: d.userType, minUserType: t });
   if (n && n.length > 0 && !(i ? w(n) : f(n))) {
-    const g = n.filter((T) => !p(T)).map((T) => typeof T == "string" ? T : T.name);
-    return /* @__PURE__ */ s(ze, { missingPermissions: g });
+    const h = n.filter((v) => !p(v)).map((v) => typeof v == "string" ? v : v.name);
+    return /* @__PURE__ */ s(We, { missingPermissions: h });
   }
   return /* @__PURE__ */ s(_, { children: r });
 }
-const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
+const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1754,7 +1765,7 @@ const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ c(
       "div",
       {
         style: {
@@ -1768,7 +1779,7 @@ const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
-          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ c("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             r,
             "..."
@@ -1777,7 +1788,7 @@ const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
       }
     )
   }
-), _e = ({
+), Ve = ({
   userType: r,
   requiredUserType: e,
   missingPermissions: t
@@ -1794,7 +1805,7 @@ const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ c(
       "div",
       {
         style: {
@@ -1807,19 +1818,19 @@ const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
         children: [
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && r ? /* @__PURE__ */ d(_, { children: [
-            /* @__PURE__ */ d("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+          e && r ? /* @__PURE__ */ c(_, { children: [
+            /* @__PURE__ */ c("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
               /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
-            /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ c("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
               /* @__PURE__ */ s("strong", { children: r })
             ] })
-          ] }) : /* @__PURE__ */ d(_, { children: [
+          ] }) : /* @__PURE__ */ c(_, { children: [
             /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
-            t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            t && t.length > 0 && /* @__PURE__ */ c("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
               /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
@@ -1828,8 +1839,8 @@ const It = ({ redirectPath: r }) => /* @__PURE__ */ s(
       }
     )
   }
-), Mt = (r, e) => r === e;
-function kn({
+), Et = (r, e) => r === e;
+function An({
   children: r,
   redirectTo: e = "/login",
   requiredUserType: t,
@@ -1837,34 +1848,34 @@ function kn({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: p, hasPermission: f, hasAnyPermission: w, hasAllPermissions: u } = le(), b = be();
-  if (X(() => {
+  const { hasValidSession: a, sessionManager: p, hasPermission: f, hasAnyPermission: w, hasAllPermissions: d } = ce(), m = Se();
+  if (ee(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
-    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ d(_, { children: [
-      /* @__PURE__ */ s(It, { redirectPath: e }),
-      /* @__PURE__ */ s(me, { to: e, state: { from: b.pathname }, replace: !0 })
+    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ c(_, { children: [
+      /* @__PURE__ */ s(Lt, { redirectPath: e }),
+      /* @__PURE__ */ s(ye, { to: e, state: { from: m.pathname }, replace: !0 })
     ] });
-  const g = p.getUser();
-  if (!g)
-    return /* @__PURE__ */ s(me, { to: e, state: { from: b.pathname }, replace: !0 });
-  if (t && !Mt(g.userType, t))
+  const h = p.getUser();
+  if (!h)
+    return /* @__PURE__ */ s(ye, { to: e, state: { from: m.pathname }, replace: !0 });
+  if (t && !Et(h.userType, t))
     return /* @__PURE__ */ s(
-      _e,
+      Ve,
       {
-        userType: g.userType,
+        userType: h.userType,
         requiredUserType: t
       }
     );
-  if (n && n.length > 0 && !(i ? u(n) : w(n))) {
-    const I = n.filter((N) => !f(N)).map((N) => typeof N == "string" ? N : N.name);
-    return /* @__PURE__ */ s(_e, { missingPermissions: I });
+  if (n && n.length > 0 && !(i ? d(n) : w(n))) {
+    const I = n.filter((F) => !f(F)).map((F) => typeof F == "string" ? F : F.name);
+    return /* @__PURE__ */ s(Ve, { missingPermissions: I });
   }
   return /* @__PURE__ */ s(_, { children: r });
 }
-const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
+const Ft = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1877,7 +1888,7 @@ const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ c(
       "div",
       {
         style: {
@@ -1891,7 +1902,7 @@ const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
-          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ c("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             r,
             "..."
@@ -1901,18 +1912,18 @@ const Lt = ({ redirectPath: r }) => /* @__PURE__ */ s(
     )
   }
 );
-function An({ children: r, redirectTo: e = "/", fallback: t }) {
-  const { tenant: n, isLoading: i, error: o } = ge(), a = be();
-  return X(() => {
+function Pn({ children: r, redirectTo: e = "/", fallback: t }) {
+  const { tenant: n, isLoading: i, error: o } = ge(), a = Se();
+  return ee(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : n ? /* @__PURE__ */ s(_, { children: r }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s(Lt, { redirectPath: e }),
-    /* @__PURE__ */ s(me, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), i || o ? null : n ? /* @__PURE__ */ s(_, { children: r }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ c(_, { children: [
+    /* @__PURE__ */ s(Ft, { redirectPath: e }),
+    /* @__PURE__ */ s(ye, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const Et = ({ redirectPath: r }) => /* @__PURE__ */ s(
+const Nt = ({ redirectPath: r }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1925,7 +1936,7 @@ const Et = ({ redirectPath: r }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ c(
       "div",
       {
         style: {
@@ -1939,7 +1950,7 @@ const Et = ({ redirectPath: r }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
-          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ c("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             r,
             "..."
@@ -1949,41 +1960,41 @@ const Et = ({ redirectPath: r }) => /* @__PURE__ */ s(
     )
   }
 );
-function xn({ children: r, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: n, isLoading: i, error: o } = ge(), a = be();
-  return X(() => {
+function Rn({ children: r, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: n, isLoading: i, error: o } = ge(), a = Se();
+  return ee(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : n ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s(Et, { redirectPath: e }),
-    /* @__PURE__ */ s(me, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), i || o ? null : n ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ c(_, { children: [
+    /* @__PURE__ */ s(Nt, { redirectPath: e }),
+    /* @__PURE__ */ s(ye, { to: e, state: { from: a.pathname }, replace: !0 })
   ] }) : /* @__PURE__ */ s(_, { children: r });
 }
-function Ft(r, e) {
+function Dt(r, e) {
   return e ? r ? Array.isArray(e) ? e.includes(r) : r === e : !1 : !0;
 }
-function We(r, e) {
+function je(r, e) {
   return !r || r === "optional" ? "skip" : r === "required" ? e ? "pass" : "fail" : r === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
-function Nt(r, e) {
-  return We(r.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : We(r.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : r.userType && e.isAuthenticated && !Ft(e.userType, r.userType) ? "wrong_user_type" : r.permissions && r.permissions.length > 0 && !(r.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(r.permissions) ? "missing_permissions" : null;
+function Ct(r, e) {
+  return je(r.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : je(r.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : r.userType && e.isAuthenticated && !Dt(e.userType, r.userType) ? "wrong_user_type" : r.permissions && r.permissions.length > 0 && !(r.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(r.permissions) ? "missing_permissions" : null;
 }
-function Dt(r, e) {
-  return r.hasTenant ? r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : r.isAuthenticated ? r.userType === se.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
+function Ut(r, e) {
+  return r.hasTenant ? r.isAuthenticated ? r.userType === ie.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : r.isAuthenticated ? r.userType === ie.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
 }
-function Ct(r, e, t, n, i) {
+function $t(r, e, t, n, i) {
   if (!e || i !== "url")
     return r;
   const o = typeof e == "string" ? e : t, a = r.includes("?") ? "&" : "?";
   return `${r}${a}${n}=${encodeURIComponent(o)}`;
 }
-function Ut(r, e, t) {
+function Ht(r, e, t) {
   if (!r || t === "url") return;
   const n = typeof r == "string" ? r : e, i = "zone_return_to";
   t === "session" ? sessionStorage.setItem(i, n) : t === "local" && localStorage.setItem(i, n);
 }
-const ae = ({
+const le = ({
   children: r,
   preset: e,
   tenant: t,
@@ -1994,39 +2005,39 @@ const ae = ({
   returnTo: p,
   onAccessDenied: f,
   redirectTo: w,
-  loadingFallback: u,
-  accessDeniedFallback: b
+  loadingFallback: d,
+  accessDeniedFallback: m
 }) => {
-  const g = be(), { isAuthenticated: T, isAuthInitializing: I, currentUser: N, userPermissions: M } = le(), { tenant: P, isTenantLoading: h } = he(), x = Pt(), S = Z(() => {
+  const h = Se(), { isAuthenticated: v, isAuthInitializing: I, currentUser: F, userPermissions: M } = ce(), { tenant: P, isTenantLoading: u } = he(), A = It(), b = J(() => {
     if (e)
-      return x.presets[e];
-  }, [e, x.presets]), L = Z(
+      return A.presets[e];
+  }, [e, A.presets]), L = J(
     () => ({
-      tenant: t ?? (S == null ? void 0 : S.tenant),
-      auth: n ?? (S == null ? void 0 : S.auth),
-      userType: i ?? (S == null ? void 0 : S.userType),
-      permissions: o ?? (S == null ? void 0 : S.requiredPermissions),
+      tenant: t ?? (b == null ? void 0 : b.tenant),
+      auth: n ?? (b == null ? void 0 : b.auth),
+      userType: i ?? (b == null ? void 0 : b.userType),
+      permissions: o ?? (b == null ? void 0 : b.requiredPermissions),
       requireAllPermissions: a
     }),
-    [t, n, i, o, S, a]
-  ), E = Z(
+    [t, n, i, o, b, a]
+  ), E = J(
     () => ({
       hasTenant: !!P,
-      isAuthenticated: T,
-      userType: N == null ? void 0 : N.userType,
+      isAuthenticated: v,
+      userType: F == null ? void 0 : F.userType,
       permissions: M,
-      isLoading: I || h
+      isLoading: I || u
     }),
     [
       P,
-      T,
-      N == null ? void 0 : N.userType,
+      v,
+      F == null ? void 0 : F.userType,
       M,
       I,
-      h
+      u
     ]
-  ), C = Z(() => E.isLoading ? null : Nt(L, E), [L, E]), R = Z(() => C ? w || Dt(E, x.zoneRoots) : null, [C, w, E, x.zoneRoots]), $ = Z(() => !C || !R ? null : {
-    type: C,
+  ), N = J(() => E.isLoading ? null : Ct(L, E), [L, E]), R = J(() => N ? w || Ut(E, A.zoneRoots) : null, [N, w, E, A.zoneRoots]), U = J(() => !N || !R ? null : {
+    type: N,
     required: {
       tenant: L.tenant,
       auth: L.auth,
@@ -2040,34 +2051,34 @@ const ae = ({
       permissions: E.permissions
     },
     redirectTo: R
-  }, [C, R, L, E]);
-  if (X(() => {
-    $ && (f ? f($) : x.onAccessDenied && x.onAccessDenied($));
-  }, [$, f, x]), X(() => {
-    $ && p && Ut(p, g.pathname + g.search, x.returnToStorage);
+  }, [N, R, L, E]);
+  if (ee(() => {
+    U && (f ? f(U) : A.onAccessDenied && A.onAccessDenied(U));
+  }, [U, f, A]), ee(() => {
+    U && p && Ht(p, h.pathname + h.search, A.returnToStorage);
   }, [
-    $,
+    U,
     p,
-    g.pathname,
-    g.search,
-    x.returnToStorage
+    h.pathname,
+    h.search,
+    A.returnToStorage
   ]), E.isLoading)
-    return /* @__PURE__ */ s(_, { children: u ?? x.loadingFallback ?? null });
-  if ($ && R) {
-    const l = b ?? x.accessDeniedFallback;
+    return /* @__PURE__ */ s(_, { children: d ?? A.loadingFallback ?? null });
+  if (U && R) {
+    const l = m ?? A.accessDeniedFallback;
     if (l)
       return /* @__PURE__ */ s(_, { children: l });
-    const D = Ct(
+    const D = $t(
       R,
       p,
-      g.pathname + g.search,
-      x.returnToParam,
-      x.returnToStorage
+      h.pathname + h.search,
+      A.returnToParam,
+      A.returnToStorage
     );
-    return /* @__PURE__ */ s(me, { to: D, replace: !0 });
+    return /* @__PURE__ */ s(ye, { to: D, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: r });
-}, Pn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", ...r }), Rn = (r) => /* @__PURE__ */ s(ae, { tenant: "forbidden", ...r }), In = (r) => /* @__PURE__ */ s(ae, { auth: "required", ...r }), Mn = (r) => /* @__PURE__ */ s(ae, { auth: "forbidden", ...r }), Ln = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.TENANT_ADMIN, ...r }), En = (r) => /* @__PURE__ */ s(ae, { auth: "required", userType: se.USER, ...r }), Fn = (r) => /* @__PURE__ */ s(ae, { tenant: "optional", auth: "optional", ...r }), Nn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "required", ...r }), Dn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "optional", ...r }), Cn = (r) => /* @__PURE__ */ s(ae, { tenant: "required", auth: "forbidden", ...r }), $t = () => /* @__PURE__ */ d(
+}, In = (r) => /* @__PURE__ */ s(le, { tenant: "required", ...r }), Mn = (r) => /* @__PURE__ */ s(le, { tenant: "forbidden", ...r }), Ln = (r) => /* @__PURE__ */ s(le, { auth: "required", ...r }), En = (r) => /* @__PURE__ */ s(le, { auth: "forbidden", ...r }), Fn = (r) => /* @__PURE__ */ s(le, { auth: "required", userType: ie.TENANT_ADMIN, ...r }), Nn = (r) => /* @__PURE__ */ s(le, { auth: "required", userType: ie.USER, ...r }), Dn = (r) => /* @__PURE__ */ s(le, { tenant: "optional", auth: "optional", ...r }), Cn = (r) => /* @__PURE__ */ s(le, { tenant: "required", auth: "required", ...r }), Un = (r) => /* @__PURE__ */ s(le, { tenant: "required", auth: "optional", ...r }), $n = (r) => /* @__PURE__ */ s(le, { tenant: "required", auth: "forbidden", ...r }), Bt = () => /* @__PURE__ */ c(
   "div",
   {
     style: {
@@ -2084,13 +2095,13 @@ const ae = ({
     ]
   }
 );
-function Un({
+function Hn({
   children: r,
-  fallback: e = /* @__PURE__ */ s($t, {}),
+  fallback: e = /* @__PURE__ */ s(Bt, {}),
   allowedPlans: t,
   requiredFeature: n
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = xt();
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = Rt();
   return p ? /* @__PURE__ */ s(
     "div",
     {
@@ -2103,7 +2114,7 @@ function Un({
     }
   ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : n && !a(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: r }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const Ht = ({ flagName: r }) => /* @__PURE__ */ d(
+const qt = ({ flagName: r }) => /* @__PURE__ */ c(
   "div",
   {
     style: {
@@ -2122,7 +2133,7 @@ const Ht = ({ flagName: r }) => /* @__PURE__ */ d(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
       /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
-      /* @__PURE__ */ d("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+      /* @__PURE__ */ c("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
         r,
         '" is disabled'
@@ -2130,8 +2141,8 @@ const Ht = ({ flagName: r }) => /* @__PURE__ */ d(
     ]
   }
 );
-function $n({ name: r, children: e, fallback: t }) {
-  const { isEnabled: n, loading: i } = kt();
+function Bn({ name: r, children: e, fallback: t }) {
+  const { isEnabled: n, loading: i } = At();
   return i ? /* @__PURE__ */ s(
     "div",
     {
@@ -2145,9 +2156,9 @@ function $n({ name: r, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : n(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Ht, { flagName: r }) });
+  ) : n(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(qt, { flagName: r }) });
 }
-const Bt = () => /* @__PURE__ */ d(
+const Ot = () => /* @__PURE__ */ c(
   "svg",
   {
     width: "16",
@@ -2164,7 +2175,7 @@ const Bt = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), qt = () => /* @__PURE__ */ d(
+), zt = () => /* @__PURE__ */ c(
   "svg",
   {
     width: "16",
@@ -2181,10 +2192,10 @@ const Bt = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), Ot = {
-  showPassword: /* @__PURE__ */ s(Bt, {}),
-  hidePassword: /* @__PURE__ */ s(qt, {})
-}, zt = {
+), _t = {
+  showPassword: /* @__PURE__ */ s(Ot, {}),
+  hidePassword: /* @__PURE__ */ s(zt, {})
+}, Wt = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2198,7 +2209,7 @@ const Bt = () => /* @__PURE__ */ d(
   magicLinkLink: "Use Magic Link",
   errorMessage: "Invalid credentials",
   loadingText: "Signing in..."
-}, _t = {
+}, Vt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2305,7 +2316,7 @@ const Bt = () => /* @__PURE__ */ d(
     fontSize: "0.875rem"
   }
 };
-function Hn({
+function qn({
   copy: r = {},
   styles: e = {},
   icons: t = {},
@@ -2316,45 +2327,45 @@ function Hn({
   onMagicLinkClick: p,
   showForgotPassword: f = !0,
   showSignupLink: w = !0,
-  showMagicLinkOption: u = !0,
-  className: b
+  showMagicLinkOption: d = !0,
+  className: m
 }) {
-  const [g, T] = A(""), [I, N] = A(""), [M, P] = A(!1), [h, x] = A(!1), [S, L] = A(""), [E, C] = A({}), { login: R } = le(), { tenant: $ } = ge(), l = { ...zt, ...r }, D = { ..._t, ...e }, U = { ...Ot, ...t }, c = () => {
-    const m = {};
-    return g.trim() || (m.username = !0), I.trim() || (m.password = !0), C(m), Object.keys(m).length === 0;
-  }, H = async (m) => {
-    if (m.preventDefault(), !!c()) {
-      if (!($ != null && $.id)) {
+  const [h, v] = x(""), [I, F] = x(""), [M, P] = x(!1), [u, A] = x(!1), [b, L] = x(""), [E, N] = x({}), { login: R } = ce(), { tenant: U } = ge(), l = { ...Wt, ...r }, D = { ...Vt, ...e }, $ = { ..._t, ...t }, g = () => {
+    const y = {};
+    return h.trim() || (y.username = !0), I.trim() || (y.password = !0), N(y), Object.keys(y).length === 0;
+  }, C = async (y) => {
+    if (y.preventDefault(), !!g()) {
+      if (!(U != null && U.id)) {
         L("Tenant not found");
         return;
       }
-      x(!0), L("");
+      A(!0), L("");
       try {
-        const v = await R({
-          username: g,
+        const k = await R({
+          username: h,
           password: I
           // tenantId inferred from context automatically
         });
-        n == null || n(v);
-      } catch (v) {
-        const G = v.message || l.errorMessage;
-        L(G), i == null || i(G);
+        n == null || n(k);
+      } catch (k) {
+        const j = k.message || l.errorMessage;
+        L(j), i == null || i(j);
       } finally {
-        x(!1);
+        A(!1);
       }
     }
-  }, F = (m) => ({
+  }, T = (y) => ({
     ...D.input,
-    ...E[m] ? D.inputError : {}
-  }), y = () => ({
+    ...E[y] ? D.inputError : {}
+  }), S = () => ({
     ...D.button,
-    ...h ? D.buttonLoading : {},
-    ...!g || !I || h ? D.buttonDisabled : {}
+    ...u ? D.buttonLoading : {},
+    ...!h || !I || u ? D.buttonDisabled : {}
   });
-  return /* @__PURE__ */ d("div", { className: b, style: D.container, children: [
+  return /* @__PURE__ */ c("div", { className: m, style: D.container, children: [
     /* @__PURE__ */ s("h2", { style: D.title, children: l.title }),
-    /* @__PURE__ */ d("form", { onSubmit: H, style: D.form, children: [
-      /* @__PURE__ */ d("div", { style: D.fieldGroup, children: [
+    /* @__PURE__ */ c("form", { onSubmit: C, style: D.form, children: [
+      /* @__PURE__ */ c("div", { style: D.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: D.label, children: l.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2362,19 +2373,19 @@ function Hn({
             id: "username",
             name: "username",
             type: "text",
-            value: g,
-            onChange: (m) => {
-              T(m.target.value), E.username && C((v) => ({ ...v, username: !1 }));
+            value: h,
+            onChange: (y) => {
+              v(y.target.value), E.username && N((k) => ({ ...k, username: !1 }));
             },
             placeholder: l.usernamePlaceholder,
-            style: F("username"),
-            disabled: h
+            style: T("username"),
+            disabled: u
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: D.fieldGroup, children: [
+      /* @__PURE__ */ c("div", { style: D.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: D.label, children: l.passwordLabel }),
-        /* @__PURE__ */ d("div", { style: D.inputContainer, children: [
+        /* @__PURE__ */ c("div", { style: D.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
@@ -2382,16 +2393,16 @@ function Hn({
               name: "password",
               type: M ? "text" : "password",
               value: I,
-              onChange: (m) => {
-                N(m.target.value), E.password && C((v) => ({ ...v, password: !1 }));
+              onChange: (y) => {
+                F(y.target.value), E.password && N((k) => ({ ...k, password: !1 }));
               },
               placeholder: l.passwordPlaceholder,
               style: {
-                ...F("password"),
+                ...T("password"),
                 paddingRight: "2.5rem"
                 // Make room for the icon
               },
-              disabled: h
+              disabled: u
             }
           ),
           /* @__PURE__ */ s(
@@ -2400,29 +2411,29 @@ function Hn({
               type: "button",
               onClick: () => P(!M),
               style: D.passwordToggle,
-              disabled: h,
+              disabled: u,
               "aria-label": M ? "Hide password" : "Show password",
-              children: M ? U.hidePassword : U.showPassword
+              children: M ? $.hidePassword : $.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !I || h, style: y(), children: h ? l.loadingText : l.submitButton }),
-      S && /* @__PURE__ */ s("div", { style: D.errorText, children: S })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !h || !I || u, style: S(), children: u ? l.loadingText : l.submitButton }),
+      b && /* @__PURE__ */ s("div", { style: D.errorText, children: b })
     ] }),
-    (f || w || u) && /* @__PURE__ */ d("div", { style: D.linkContainer, children: [
-      u && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: D.divider, children: [
+    (f || w || d) && /* @__PURE__ */ c("div", { style: D.linkContainer, children: [
+      d && /* @__PURE__ */ c("div", { children: [
+        /* @__PURE__ */ c("span", { style: D.divider, children: [
           l.magicLinkText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: p, style: D.link, children: l.magicLinkLink })
       ] }),
-      u && (f || w) && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
+      d && (f || w) && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
       f && /* @__PURE__ */ s("a", { onClick: o, style: D.link, children: l.forgotPasswordLink }),
       f && w && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
-      w && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: D.divider, children: [
+      w && /* @__PURE__ */ c("div", { children: [
+        /* @__PURE__ */ c("span", { style: D.divider, children: [
           l.signupText,
           " "
         ] }),
@@ -2431,7 +2442,7 @@ function Hn({
     ] })
   ] });
 }
-const Wt = {
+const jt = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2457,7 +2468,7 @@ const Wt = {
   passwordMismatchError: "Passwords do not match",
   isAdminLabel: "Create new organization",
   isAdminDescription: "Check this if you want to create a new organization"
-}, Vt = {
+}, Gt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2556,7 +2567,7 @@ const Wt = {
     fontSize: "0.875rem"
   }
 };
-function Bn({
+function On({
   copy: r = {},
   styles: e = {},
   signupType: t = "user",
@@ -2568,91 +2579,91 @@ function Bn({
   showMagicLinkOption: f = !0,
   className: w
 }) {
-  const [u, b] = A(""), [g, T] = A(""), [I, N] = A(""), [M, P] = A(""), [h, x] = A(""), [S, L] = A(""), [E, C] = A(""), [R, $] = A(!1), [l, D] = A(""), [U, c] = A({}), { signup: H, signupTenantAdmin: F } = le(), { tenant: y } = ge(), m = { ...Wt, ...r }, v = { ...Vt, ...e }, G = () => {
-    const k = {};
-    return u.trim() || (k.name = !0), !I.trim() && !M.trim() && (k.email = !0, k.phoneNumber = !0), h.trim() || (k.password = !0), S.trim() || (k.confirmPassword = !0), t === "tenant" && !E.trim() && (k.tenantName = !0), c(k), Object.keys(k).length === 0;
-  }, Y = async (k) => {
-    if (k.preventDefault(), !!G()) {
-      if (h !== S) {
-        D(m.passwordMismatchError), c({ confirmPassword: !0 });
+  const [d, m] = x(""), [h, v] = x(""), [I, F] = x(""), [M, P] = x(""), [u, A] = x(""), [b, L] = x(""), [E, N] = x(""), [R, U] = x(!1), [l, D] = x(""), [$, g] = x({}), { signup: C, signupTenantAdmin: T } = ce(), { tenant: S } = ge(), y = { ...jt, ...r }, k = { ...Gt, ...e }, j = () => {
+    const B = {};
+    return d.trim() || (B.name = !0), !I.trim() && !M.trim() && (B.email = !0, B.phoneNumber = !0), u.trim() || (B.password = !0), b.trim() || (B.confirmPassword = !0), t === "tenant" && !E.trim() && (B.tenantName = !0), g(B), Object.keys(B).length === 0;
+  }, Z = async (B) => {
+    if (B.preventDefault(), !!j()) {
+      if (u !== b) {
+        D(y.passwordMismatchError), g({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(y != null && y.id)) {
+      if (t === "user" && !(S != null && S.id)) {
         D("Tenant not found");
         return;
       }
-      $(!0), D("");
+      U(!0), D("");
       try {
-        let K;
-        t === "tenant" ? K = await F({
+        let X;
+        t === "tenant" ? X = await T({
           email: I || void 0,
           phoneNumber: M || void 0,
-          name: u,
-          password: h,
+          name: d,
+          password: u,
           tenantName: E,
-          lastName: g || void 0
-        }) : K = await H({
+          lastName: h || void 0
+        }) : X = await C({
           email: I || void 0,
           phoneNumber: M || void 0,
-          name: u,
-          password: h,
-          tenantId: y.id,
-          lastName: g || void 0
-        }), n == null || n(K);
-      } catch (K) {
-        const ce = K.message || m.errorMessage;
-        D(ce), i == null || i(ce);
+          name: d,
+          password: u,
+          tenantId: S.id,
+          lastName: h || void 0
+        }), n == null || n(X);
+      } catch (X) {
+        const G = X.message || y.errorMessage;
+        D(G), i == null || i(G);
       } finally {
-        $(!1);
+        U(!1);
       }
     }
-  }, q = (k) => ({
-    ...v.input,
-    ...U[k] ? v.inputError : {}
-  }), O = () => ({
-    ...v.button,
-    ...R ? v.buttonLoading : {},
-    ...!u || !I && !M || !h || !S || R || t === "tenant" && !E ? v.buttonDisabled : {}
-  }), V = u && (I || M) && h && S && (t === "user" || E);
-  return /* @__PURE__ */ d("div", { className: w, style: v.container, children: [
-    /* @__PURE__ */ s("h2", { style: v.title, children: m.title }),
-    /* @__PURE__ */ d("form", { onSubmit: Y, style: v.form, children: [
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.nameLabel }),
+  }, O = (B) => ({
+    ...k.input,
+    ...$[B] ? k.inputError : {}
+  }), q = () => ({
+    ...k.button,
+    ...R ? k.buttonLoading : {},
+    ...!d || !I && !M || !u || !b || R || t === "tenant" && !E ? k.buttonDisabled : {}
+  }), W = d && (I || M) && u && b && (t === "user" || E);
+  return /* @__PURE__ */ c("div", { className: w, style: k.container, children: [
+    /* @__PURE__ */ s("h2", { style: k.title, children: y.title }),
+    /* @__PURE__ */ c("form", { onSubmit: Z, style: k.form, children: [
+      /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.nameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "name",
             name: "name",
             type: "text",
-            value: u,
-            onChange: (k) => {
-              b(k.target.value), U.name && c((K) => ({ ...K, name: !1 }));
+            value: d,
+            onChange: (B) => {
+              m(B.target.value), $.name && g((X) => ({ ...X, name: !1 }));
             },
-            placeholder: m.namePlaceholder,
-            style: q("name"),
+            placeholder: y.namePlaceholder,
+            style: O("name"),
             disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.lastNameLabel }),
+      /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: g,
-            onChange: (k) => T(k.target.value),
-            placeholder: m.lastNamePlaceholder,
-            style: v.input,
+            value: h,
+            onChange: (B) => v(B.target.value),
+            placeholder: y.lastNamePlaceholder,
+            style: k.input,
             disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.emailLabel }),
+      /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2660,17 +2671,17 @@ function Bn({
             name: "email",
             type: "email",
             value: I,
-            onChange: (k) => {
-              N(k.target.value), U.email && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
+            onChange: (B) => {
+              F(B.target.value), $.email && g((X) => ({ ...X, email: !1, phoneNumber: !1 }));
             },
-            placeholder: m.emailPlaceholder,
-            style: q("email"),
+            placeholder: y.emailPlaceholder,
+            style: O("email"),
             disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.phoneNumberLabel }),
+      /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2678,11 +2689,11 @@ function Bn({
             name: "phoneNumber",
             type: "tel",
             value: M,
-            onChange: (k) => {
-              P(k.target.value), U.phoneNumber && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
+            onChange: (B) => {
+              P(B.target.value), $.phoneNumber && g((X) => ({ ...X, email: !1, phoneNumber: !1 }));
             },
-            placeholder: m.phoneNumberPlaceholder,
-            style: q("phoneNumber"),
+            placeholder: y.phoneNumberPlaceholder,
+            style: O("phoneNumber"),
             disabled: R
           }
         )
@@ -2699,44 +2710,44 @@ function Bn({
           children: "At least one contact method (email or phone) is required"
         }
       ),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.passwordLabel }),
+      /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "password",
             name: "password",
             type: "password",
-            value: h,
-            onChange: (k) => {
-              x(k.target.value), U.password && c((K) => ({ ...K, password: !1 }));
+            value: u,
+            onChange: (B) => {
+              A(B.target.value), $.password && g((X) => ({ ...X, password: !1 }));
             },
-            placeholder: m.passwordPlaceholder,
-            style: q("password"),
+            placeholder: y.passwordPlaceholder,
+            style: O("password"),
             disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.confirmPasswordLabel }),
+      /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: S,
-            onChange: (k) => {
-              L(k.target.value), U.confirmPassword && c((K) => ({ ...K, confirmPassword: !1 })), l === m.passwordMismatchError && D("");
+            value: b,
+            onChange: (B) => {
+              L(B.target.value), $.confirmPassword && g((X) => ({ ...X, confirmPassword: !1 })), l === y.passwordMismatchError && D("");
             },
-            placeholder: m.confirmPasswordPlaceholder,
-            style: q("confirmPassword"),
+            placeholder: y.confirmPasswordPlaceholder,
+            style: O("confirmPassword"),
             disabled: R
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.tenantNameLabel }),
+      t === "tenant" && /* @__PURE__ */ c("div", { style: k.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: k.label, children: y.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2744,38 +2755,38 @@ function Bn({
             name: "tenantName",
             type: "text",
             value: E,
-            onChange: (k) => {
-              C(k.target.value), U.tenantName && c((K) => ({ ...K, tenantName: !1 }));
+            onChange: (B) => {
+              N(B.target.value), $.tenantName && g((X) => ({ ...X, tenantName: !1 }));
             },
-            placeholder: m.tenantNamePlaceholder,
-            style: q("tenantName"),
+            placeholder: y.tenantNamePlaceholder,
+            style: O("tenantName"),
             disabled: R
           }
         )
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !V || R, style: O(), children: R ? m.loadingText : m.submitButton }),
-      l && /* @__PURE__ */ s("div", { style: v.errorText, children: l })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !W || R, style: q(), children: R ? y.loadingText : y.submitButton }),
+      l && /* @__PURE__ */ s("div", { style: k.errorText, children: l })
     ] }),
-    (p || f) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
-      f && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: v.divider, children: [
-          m.magicLinkText,
+    (p || f) && /* @__PURE__ */ c("div", { style: k.linkContainer, children: [
+      f && /* @__PURE__ */ c("div", { children: [
+        /* @__PURE__ */ c("span", { style: k.divider, children: [
+          y.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: m.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: k.link, children: y.magicLinkLink })
       ] }),
-      f && p && /* @__PURE__ */ s("div", { style: v.divider, children: "•" }),
-      p && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: v.divider, children: [
-          m.loginText,
+      f && p && /* @__PURE__ */ s("div", { style: k.divider, children: "•" }),
+      p && /* @__PURE__ */ c("div", { children: [
+        /* @__PURE__ */ c("span", { style: k.divider, children: [
+          y.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: v.link, children: m.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: k.link, children: y.loginLink })
       ] })
     ] })
   ] });
 }
-const jt = {
+const Zt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -2793,7 +2804,7 @@ const jt = {
   loadingText: "Sending magic link...",
   verifyingText: "Verifying magic link...",
   description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you."
-}, Gt = {
+}, Kt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2896,7 +2907,7 @@ const jt = {
     fontSize: "0.875rem"
   }
 };
-function qn({
+function zn({
   copy: r = {},
   styles: e = {},
   onSuccess: t,
@@ -2908,85 +2919,85 @@ function qn({
   verifyToken: f,
   frontendUrl: w
 }) {
-  const [u, b] = A(""), [g, T] = A(""), [I, N] = A(""), [M, P] = A(!1), [h, x] = A(!1), [S, L] = A(""), [E, C] = A(""), [R, $] = A({}), [l, D] = A(!1), { sendMagicLink: U, verifyMagicLink: c } = le(), { tenant: H } = ge(), F = { ...jt, ...r }, y = { ...Gt, ...e };
-  X(() => {
-    f && m(f);
+  const [d, m] = x(""), [h, v] = x(""), [I, F] = x(""), [M, P] = x(!1), [u, A] = x(!1), [b, L] = x(""), [E, N] = x(""), [R, U] = x({}), [l, D] = x(!1), { sendMagicLink: $, verifyMagicLink: g } = ce(), { tenant: C } = ge(), T = { ...Zt, ...r }, S = { ...Kt, ...e };
+  ee(() => {
+    f && y(f);
   }, [f]);
-  const m = async (O) => {
-    if (!H || !u) {
+  const y = async (q) => {
+    if (!C || !d) {
       L("Missing tenant or email");
       return;
     }
-    x(!0), L("");
+    A(!0), L("");
     try {
-      const V = await c({
-        token: O,
-        email: u
+      const W = await g({
+        token: q,
+        email: d
         // tenantId inferred from context automatically
       });
-      t == null || t(V);
-    } catch (V) {
-      const k = V.message || "Failed to verify magic link";
-      L(k), n == null || n(k);
+      t == null || t(W);
+    } catch (W) {
+      const B = W.message || "Failed to verify magic link";
+      L(B), n == null || n(B);
     } finally {
-      x(!1);
+      A(!1);
     }
-  }, v = () => {
-    const O = {};
-    return u.trim() || (O.email = !0), l && !g.trim() && (O.name = !0), $(O), Object.keys(O).length === 0;
-  }, G = async (O) => {
-    if (O.preventDefault(), !!v()) {
-      if (!(H != null && H.id)) {
+  }, k = () => {
+    const q = {};
+    return d.trim() || (q.email = !0), l && !h.trim() && (q.name = !0), U(q), Object.keys(q).length === 0;
+  }, j = async (q) => {
+    if (q.preventDefault(), !!k()) {
+      if (!(C != null && C.id)) {
         L("Tenant not found");
         return;
       }
-      P(!0), L(""), C("");
+      P(!0), L(""), N("");
       try {
-        const V = w || (typeof window < "u" ? window.location.origin : ""), k = await U({
-          email: u,
-          tenantId: H.id,
-          frontendUrl: V,
-          name: l ? g : void 0,
+        const W = w || (typeof window < "u" ? window.location.origin : ""), B = await $({
+          email: d,
+          tenantId: C.id,
+          frontendUrl: W,
+          name: l ? h : void 0,
           lastName: l ? I : void 0
         });
-        C(F.successMessage), t == null || t(k);
-      } catch (V) {
-        const k = V.message || F.errorMessage;
-        L(k), n == null || n(k);
+        N(T.successMessage), t == null || t(B);
+      } catch (W) {
+        const B = W.message || T.errorMessage;
+        L(B), n == null || n(B);
       } finally {
         P(!1);
       }
     }
-  }, Y = (O) => ({
-    ...y.input,
-    ...R[O] ? y.inputError : {}
-  }), q = () => ({
-    ...y.button,
-    ...M || h ? y.buttonLoading : {},
-    ...!u || M || h ? y.buttonDisabled : {}
+  }, Z = (q) => ({
+    ...S.input,
+    ...R[q] ? S.inputError : {}
+  }), O = () => ({
+    ...S.button,
+    ...M || u ? S.buttonLoading : {},
+    ...!d || M || u ? S.buttonDisabled : {}
   });
-  return h ? /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
-    /* @__PURE__ */ s("h2", { style: y.title, children: F.verifyingText }),
+  return u ? /* @__PURE__ */ c("div", { className: p, style: S.container, children: [
+    /* @__PURE__ */ s("h2", { style: S.title, children: T.verifyingText }),
     /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ d("div", { className: p, style: y.container, children: [
-    /* @__PURE__ */ s("h2", { style: y.title, children: F.title }),
-    /* @__PURE__ */ s("p", { style: y.description, children: F.description }),
-    /* @__PURE__ */ d("form", { onSubmit: G, style: y.form, children: [
-      /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: y.label, children: F.emailLabel }),
+  ] }) : /* @__PURE__ */ c("div", { className: p, style: S.container, children: [
+    /* @__PURE__ */ s("h2", { style: S.title, children: T.title }),
+    /* @__PURE__ */ s("p", { style: S.description, children: T.description }),
+    /* @__PURE__ */ c("form", { onSubmit: j, style: S.form, children: [
+      /* @__PURE__ */ c("div", { style: S.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: S.label, children: T.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: u,
-            onChange: (O) => {
-              b(O.target.value), R.email && $((V) => ({ ...V, email: !1 }));
+            value: d,
+            onChange: (q) => {
+              m(q.target.value), R.email && U((W) => ({ ...W, email: !1 }));
             },
-            placeholder: F.emailPlaceholder,
-            style: Y("email"),
-            disabled: M || h
+            placeholder: T.emailPlaceholder,
+            style: Z("email"),
+            disabled: M || u
           }
         )
       ] }),
@@ -3006,27 +3017,27 @@ function qn({
           children: "New user? Add your name"
         }
       ) }),
-      l && /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: y.label, children: F.nameLabel }),
+      l && /* @__PURE__ */ c(_, { children: [
+        /* @__PURE__ */ c("div", { style: S.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: S.label, children: T.nameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: g,
-              onChange: (O) => {
-                T(O.target.value), R.name && $((V) => ({ ...V, name: !1 }));
+              value: h,
+              onChange: (q) => {
+                v(q.target.value), R.name && U((W) => ({ ...W, name: !1 }));
               },
-              placeholder: F.namePlaceholder,
-              style: Y("name"),
-              disabled: M || h
+              placeholder: T.namePlaceholder,
+              style: Z("name"),
+              disabled: M || u
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: y.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: y.label, children: F.lastNameLabel }),
+        /* @__PURE__ */ c("div", { style: S.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: S.label, children: T.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -3034,10 +3045,10 @@ function qn({
               name: "lastName",
               type: "text",
               value: I,
-              onChange: (O) => N(O.target.value),
-              placeholder: F.lastNamePlaceholder,
-              style: y.input,
-              disabled: M || h
+              onChange: (q) => F(q.target.value),
+              placeholder: T.lastNamePlaceholder,
+              style: S.input,
+              disabled: M || u
             }
           )
         ] }),
@@ -3046,7 +3057,7 @@ function qn({
           {
             type: "button",
             onClick: () => {
-              D(!1), T(""), N("");
+              D(!1), v(""), F("");
             },
             style: {
               background: "none",
@@ -3060,30 +3071,30 @@ function qn({
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !u || M || h, style: q(), children: M ? F.loadingText : F.submitButton }),
-      S && /* @__PURE__ */ s("div", { style: y.errorText, children: S }),
-      E && /* @__PURE__ */ s("div", { style: y.successText, children: E })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !d || M || u, style: O(), children: M ? T.loadingText : T.submitButton }),
+      b && /* @__PURE__ */ s("div", { style: S.errorText, children: b }),
+      E && /* @__PURE__ */ s("div", { style: S.successText, children: E })
     ] }),
-    a && /* @__PURE__ */ d("div", { style: y.linkContainer, children: [
-      /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: y.divider, children: [
-          F.loginText,
+    a && /* @__PURE__ */ c("div", { style: S.linkContainer, children: [
+      /* @__PURE__ */ c("div", { children: [
+        /* @__PURE__ */ c("span", { style: S.divider, children: [
+          T.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: i, style: y.link, children: F.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: S.link, children: T.loginLink })
       ] }),
-      /* @__PURE__ */ s("div", { style: y.divider, children: "•" }),
-      /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: y.divider, children: [
-          F.signupText,
+      /* @__PURE__ */ s("div", { style: S.divider, children: "•" }),
+      /* @__PURE__ */ c("div", { children: [
+        /* @__PURE__ */ c("span", { style: S.divider, children: [
+          T.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: y.link, children: F.signupLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: S.link, children: T.signupLink })
       ] })
     ] })
   ] });
 }
-const Zt = {
+const Jt = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
@@ -3091,7 +3102,7 @@ const Zt = {
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
   backToLoginButton: "Back to Login"
-}, Je = {
+}, Qe = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3178,7 +3189,7 @@ const Zt = {
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
   }
-}, Kt = () => /* @__PURE__ */ s("div", { style: Je.spinner }), Jt = () => /* @__PURE__ */ d(
+}, Yt = () => /* @__PURE__ */ s("div", { style: Qe.spinner }), Qt = () => /* @__PURE__ */ c(
   "svg",
   {
     width: "48",
@@ -3195,7 +3206,7 @@ const Zt = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), Yt = () => /* @__PURE__ */ d(
+), Xt = () => /* @__PURE__ */ c(
   "svg",
   {
     width: "48",
@@ -3213,12 +3224,12 @@ const Zt = {
       /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), Qt = {
-  loading: /* @__PURE__ */ s(Kt, {}),
-  success: /* @__PURE__ */ s(Jt, {}),
-  error: /* @__PURE__ */ s(Yt, {})
+), en = {
+  loading: /* @__PURE__ */ s(Yt, {}),
+  success: /* @__PURE__ */ s(Qt, {}),
+  error: /* @__PURE__ */ s(Xt, {})
 };
-function On({
+function _n({
   copy: r = {},
   styles: e = {},
   icons: t = {},
@@ -3229,18 +3240,18 @@ function On({
   className: p,
   token: f,
   email: w,
-  appId: u,
-  tenantSlug: b,
-  autoRedirectDelay: g = 3e3
+  appId: d,
+  tenantSlug: m,
+  autoRedirectDelay: h = 3e3
 }) {
-  const [T, I] = A("verifying"), [N, M] = A(""), { verifyMagicLink: P } = le(), h = { ...Zt, ...r }, x = { ...Je, ...e }, S = { ...Qt, ...t }, L = () => {
+  const [v, I] = x("verifying"), [F, M] = x(""), { verifyMagicLink: P } = ce(), u = { ...Jt, ...r }, A = { ...Qe, ...e }, b = { ...en, ...t }, L = () => {
     if (typeof window > "u") return {};
     const l = new URLSearchParams(window.location.search);
     return {
       token: f || l.get("token") || "",
       email: w || l.get("email") || "",
-      appId: u || l.get("appId") || "",
-      tenantSlug: b || l.get("tenantSlug") || void 0
+      appId: d || l.get("appId") || "",
+      tenantSlug: m || l.get("tenantSlug") || void 0
     };
   }, E = async () => {
     I("verifying"), M("");
@@ -3253,69 +3264,69 @@ function On({
         email: l.email,
         tenantSlug: l.tenantSlug
       });
-      I("success"), n == null || n(D), g > 0 && setTimeout(() => {
+      I("success"), n == null || n(D), h > 0 && setTimeout(() => {
         I("redirecting");
-      }, g);
+      }, h);
     } catch (l) {
-      const D = l.message || h.errorMessage;
+      const D = l.message || u.errorMessage;
       M(D), I("error"), i == null || i(D);
     }
-  }, C = () => {
+  }, N = () => {
     o == null || o(), E();
   }, R = () => {
     a == null || a();
   };
-  X(() => {
+  ee(() => {
     E();
   }, []);
-  const $ = () => {
-    switch (T) {
+  const U = () => {
+    switch (v) {
       case "verifying":
-        return /* @__PURE__ */ d("div", { style: x.message, children: [
-          S.loading,
-          h.verifyingMessage
+        return /* @__PURE__ */ c("div", { style: A.message, children: [
+          b.loading,
+          u.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ d(_, { children: [
-          S.success,
-          /* @__PURE__ */ s("div", { style: x.successMessage, children: h.successMessage })
+        return /* @__PURE__ */ c(_, { children: [
+          b.success,
+          /* @__PURE__ */ s("div", { style: A.successMessage, children: u.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ d(_, { children: [
-          S.loading,
-          /* @__PURE__ */ s("div", { style: x.message, children: h.redirectingMessage })
+        return /* @__PURE__ */ c(_, { children: [
+          b.loading,
+          /* @__PURE__ */ s("div", { style: A.message, children: u.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ d(_, { children: [
-          S.error,
-          /* @__PURE__ */ s("div", { style: x.errorMessage, children: N || h.errorMessage }),
-          /* @__PURE__ */ d("div", { style: x.buttonContainer, children: [
+        return /* @__PURE__ */ c(_, { children: [
+          b.error,
+          /* @__PURE__ */ s("div", { style: A.errorMessage, children: F || u.errorMessage }),
+          /* @__PURE__ */ c("div", { style: A.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: C,
-                style: x.retryButton,
+                onClick: N,
+                style: A.retryButton,
                 onMouseOver: (l) => {
                   l.currentTarget.style.backgroundColor = "#2563eb";
                 },
                 onMouseOut: (l) => {
                   l.currentTarget.style.backgroundColor = "#3b82f6";
                 },
-                children: h.retryButton
+                children: u.retryButton
               }
             ),
             /* @__PURE__ */ s(
               "button",
               {
                 onClick: R,
-                style: x.backButton,
+                style: A.backButton,
                 onMouseOver: (l) => {
                   l.currentTarget.style.backgroundColor = "#e5e7eb";
                 },
                 onMouseOut: (l) => {
                   l.currentTarget.style.backgroundColor = "#f3f4f6";
                 },
-                children: h.backToLoginButton
+                children: u.backToLoginButton
               }
             )
           ] })
@@ -3324,18 +3335,18 @@ function On({
         return null;
     }
   };
-  return /* @__PURE__ */ d("div", { style: x.container, className: p, children: [
+  return /* @__PURE__ */ c("div", { style: A.container, className: p, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ s("h1", { style: x.title, children: h.title }),
-    $()
+    /* @__PURE__ */ s("h1", { style: A.title, children: u.title }),
+    U()
   ] });
 }
-const Xt = {
+const tn = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3357,7 +3368,7 @@ const Xt = {
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
   passwordMismatchError: "Passwords do not match"
-}, en = {
+}, nn = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3449,7 +3460,7 @@ const Xt = {
     cursor: "pointer"
   }
 };
-function zn({
+function Wn({
   copy: r = {},
   styles: e = {},
   mode: t = "request",
@@ -3460,101 +3471,101 @@ function zn({
   onModeChange: p,
   className: f
 }) {
-  const [w, u] = A(""), [b, g] = A(n), [T, I] = A(""), [N, M] = A(""), [P, h] = A(!1), [x, S] = A(""), [L, E] = A(""), [C, R] = A({}), { requestPasswordReset: $, confirmPasswordReset: l } = le(), { tenant: D } = ge(), U = { ...Xt, ...r }, c = { ...en, ...e }, H = () => {
-    const q = {};
-    return w.trim() || (q.email = !0), R(q), Object.keys(q).length === 0;
-  }, F = () => {
-    const q = {};
-    return b.trim() || (q.token = !0), T.trim() || (q.newPassword = !0), N.trim() || (q.confirmPassword = !0), R(q), Object.keys(q).length === 0;
-  }, y = async (q) => {
-    if (q.preventDefault(), !!H()) {
+  const [w, d] = x(""), [m, h] = x(n), [v, I] = x(""), [F, M] = x(""), [P, u] = x(!1), [A, b] = x(""), [L, E] = x(""), [N, R] = x({}), { requestPasswordReset: U, confirmPasswordReset: l } = ce(), { tenant: D } = ge(), $ = { ...tn, ...r }, g = { ...nn, ...e }, C = () => {
+    const O = {};
+    return w.trim() || (O.email = !0), R(O), Object.keys(O).length === 0;
+  }, T = () => {
+    const O = {};
+    return m.trim() || (O.token = !0), v.trim() || (O.newPassword = !0), F.trim() || (O.confirmPassword = !0), R(O), Object.keys(O).length === 0;
+  }, S = async (O) => {
+    if (O.preventDefault(), !!C()) {
       if (!(D != null && D.id)) {
-        S("Tenant not found");
+        b("Tenant not found");
         return;
       }
-      h(!0), S(""), E("");
+      u(!0), b(""), E("");
       try {
-        await $({ email: w, tenantId: D.id }), E(U.successMessage), i == null || i();
-      } catch (O) {
-        const V = O.message || U.errorMessage;
-        S(V), o == null || o(V);
+        await U({ email: w, tenantId: D.id }), E($.successMessage), i == null || i();
+      } catch (q) {
+        const W = q.message || $.errorMessage;
+        b(W), o == null || o(W);
       } finally {
-        h(!1);
+        u(!1);
       }
     }
-  }, m = async (q) => {
-    if (q.preventDefault(), !!F()) {
-      if (T !== N) {
-        S(U.passwordMismatchError), R({ confirmPassword: !0 });
+  }, y = async (O) => {
+    if (O.preventDefault(), !!T()) {
+      if (v !== F) {
+        b($.passwordMismatchError), R({ confirmPassword: !0 });
         return;
       }
-      h(!0), S(""), E("");
+      u(!0), b(""), E("");
       try {
-        await l({ token: b, newPassword: T }), E(U.resetSuccessMessage), i == null || i();
-      } catch (O) {
-        const V = O.message || U.errorMessage;
-        S(V), o == null || o(V);
+        await l({ token: m, newPassword: v }), E($.resetSuccessMessage), i == null || i();
+      } catch (q) {
+        const W = q.message || $.errorMessage;
+        b(W), o == null || o(W);
       } finally {
-        h(!1);
+        u(!1);
       }
     }
-  }, v = (q) => ({
-    ...c.input,
-    ...C[q] ? c.inputError : {}
-  }), G = () => ({
-    ...c.button,
-    ...P ? c.buttonLoading : {}
+  }, k = (O) => ({
+    ...g.input,
+    ...N[O] ? g.inputError : {}
+  }), j = () => ({
+    ...g.button,
+    ...P ? g.buttonLoading : {}
   });
   if (t === "reset") {
-    const q = b && T && N;
-    return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
-      /* @__PURE__ */ s("h2", { style: c.title, children: U.resetTitle }),
-      /* @__PURE__ */ s("p", { style: c.subtitle, children: U.resetSubtitle }),
-      /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
-        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: U.tokenLabel }),
+    const O = m && v && F;
+    return /* @__PURE__ */ c("div", { className: f, style: g.container, children: [
+      /* @__PURE__ */ s("h2", { style: g.title, children: $.resetTitle }),
+      /* @__PURE__ */ s("p", { style: g.subtitle, children: $.resetSubtitle }),
+      /* @__PURE__ */ c("form", { onSubmit: y, style: g.form, children: [
+        /* @__PURE__ */ c("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: $.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: b,
-              onChange: (O) => {
-                g(O.target.value), C.token && R((V) => ({ ...V, token: !1 }));
+              value: m,
+              onChange: (q) => {
+                h(q.target.value), N.token && R((W) => ({ ...W, token: !1 }));
               },
-              placeholder: U.tokenPlaceholder,
-              style: v("token"),
+              placeholder: $.tokenPlaceholder,
+              style: k("token"),
               disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: U.newPasswordLabel }),
+        /* @__PURE__ */ c("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: $.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: T,
-              onChange: (O) => {
-                I(O.target.value), C.newPassword && R((V) => ({ ...V, newPassword: !1 }));
+              value: v,
+              onChange: (q) => {
+                I(q.target.value), N.newPassword && R((W) => ({ ...W, newPassword: !1 }));
               },
-              placeholder: U.newPasswordPlaceholder,
-              style: v("newPassword"),
+              placeholder: $.newPasswordPlaceholder,
+              style: k("newPassword"),
               disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: U.confirmPasswordLabel }),
+        /* @__PURE__ */ c("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: $.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: N,
-              onChange: (O) => {
-                M(O.target.value), C.confirmPassword && R((V) => ({ ...V, confirmPassword: !1 })), x === U.passwordMismatchError && S("");
+              value: F,
+              onChange: (q) => {
+                M(q.target.value), N.confirmPassword && R((W) => ({ ...W, confirmPassword: !1 })), A === $.passwordMismatchError && b("");
               },
-              placeholder: U.confirmPasswordPlaceholder,
-              style: v("confirmPassword"),
+              placeholder: $.confirmPasswordPlaceholder,
+              style: k("confirmPassword"),
               disabled: P
             }
           )
@@ -3563,43 +3574,43 @@ function zn({
           "button",
           {
             type: "submit",
-            disabled: !q || P,
+            disabled: !O || P,
             style: {
-              ...G(),
-              ...!q || P ? c.buttonDisabled : {}
+              ...j(),
+              ...!O || P ? g.buttonDisabled : {}
             },
-            children: P ? U.resetLoadingText : U.resetSubmitButton
+            children: P ? $.resetLoadingText : $.resetSubmitButton
           }
         ),
-        x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
-        L && /* @__PURE__ */ s("div", { style: c.successText, children: L })
+        A && /* @__PURE__ */ s("div", { style: g.errorText, children: A }),
+        L && /* @__PURE__ */ s("div", { style: g.successText, children: L })
       ] }),
-      /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: U.backToLoginLink }),
-        p && /* @__PURE__ */ d(_, { children: [
+      /* @__PURE__ */ c("div", { style: g.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: g.link, children: $.backToLoginLink }),
+        p && /* @__PURE__ */ c(_, { children: [
           /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: "Request New Link" })
+          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: g.link, children: "Request New Link" })
         ] })
       ] })
     ] });
   }
-  const Y = w;
-  return /* @__PURE__ */ d("div", { className: f, style: c.container, children: [
-    /* @__PURE__ */ s("h2", { style: c.title, children: U.title }),
-    /* @__PURE__ */ s("p", { style: c.subtitle, children: U.subtitle }),
-    /* @__PURE__ */ d("form", { onSubmit: y, style: c.form, children: [
-      /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: c.label, children: U.emailLabel }),
+  const Z = w;
+  return /* @__PURE__ */ c("div", { className: f, style: g.container, children: [
+    /* @__PURE__ */ s("h2", { style: g.title, children: $.title }),
+    /* @__PURE__ */ s("p", { style: g.subtitle, children: $.subtitle }),
+    /* @__PURE__ */ c("form", { onSubmit: S, style: g.form, children: [
+      /* @__PURE__ */ c("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: g.label, children: $.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
             value: w,
-            onChange: (q) => {
-              u(q.target.value), C.email && R((O) => ({ ...O, email: !1 }));
+            onChange: (O) => {
+              d(O.target.value), N.email && R((q) => ({ ...q, email: !1 }));
             },
-            placeholder: U.emailPlaceholder,
-            style: v("email"),
+            placeholder: $.emailPlaceholder,
+            style: k("email"),
             disabled: P
           }
         )
@@ -3608,27 +3619,27 @@ function zn({
         "button",
         {
           type: "submit",
-          disabled: !Y || P,
+          disabled: !Z || P,
           style: {
-            ...G(),
-            ...!Y || P ? c.buttonDisabled : {}
+            ...j(),
+            ...!Z || P ? g.buttonDisabled : {}
           },
-          children: P ? U.loadingText : U.submitButton
+          children: P ? $.loadingText : $.submitButton
         }
       ),
-      x && /* @__PURE__ */ s("div", { style: c.errorText, children: x }),
-      L && /* @__PURE__ */ s("div", { style: c.successText, children: L })
+      A && /* @__PURE__ */ s("div", { style: g.errorText, children: A }),
+      L && /* @__PURE__ */ s("div", { style: g.successText, children: L })
     ] }),
-    /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: U.backToLoginLink }),
-      p && /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ c("div", { style: g.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: g.link, children: $.backToLoginLink }),
+      p && /* @__PURE__ */ c(_, { children: [
         /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: "I have a token" })
+        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: g.link, children: "I have a token" })
       ] })
     ] })
   ] });
 }
-const tn = () => /* @__PURE__ */ s(
+const rn = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3640,7 +3651,7 @@ const tn = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), nn = ({ error: r, retry: e }) => /* @__PURE__ */ d(
+), sn = ({ error: r, retry: e }) => /* @__PURE__ */ c(
   "div",
   {
     style: {
@@ -3674,43 +3685,43 @@ const tn = () => /* @__PURE__ */ s(
     ]
   }
 );
-function _n({
+function Vn({
   children: r,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: n = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = ye(), p = Se(), f = Ee(), w = Ge(), u = Ze(), b = (p == null ? void 0 : p.isTenantLoading) ?? !1, g = (p == null ? void 0 : p.tenantError) ?? null, T = (p == null ? void 0 : p.tenantSlug) ?? null, I = (p == null ? void 0 : p.retryTenant) ?? (() => {
-  }), N = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (w == null ? void 0 : w.isReady) ?? !0, P = (u == null ? void 0 : u.isReady) ?? !0, h = n && p && T, E = i || h && b || f && !N || w && !M || u && !P, C = o || (h ? g : null), R = () => {
-    o && a(), g && p && I();
+  const { isAppLoading: i, appError: o, retryApp: a } = we(), p = ve(), f = Ne(), w = Ke(), d = Je(), m = (p == null ? void 0 : p.isTenantLoading) ?? !1, h = (p == null ? void 0 : p.tenantError) ?? null, v = (p == null ? void 0 : p.tenantSlug) ?? null, I = (p == null ? void 0 : p.retryTenant) ?? (() => {
+  }), F = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (w == null ? void 0 : w.isReady) ?? !0, P = (d == null ? void 0 : d.isReady) ?? !0, u = n && p && v, E = i || u && m || f && !F || w && !M || d && !P, N = o || (u ? h : null), R = () => {
+    o && a(), h && p && I();
   };
   if (E)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(tn, {}) });
-  if (C) {
-    const $ = typeof t == "function" ? t(C, R) : t || /* @__PURE__ */ s(nn, { error: C, retry: R });
-    return /* @__PURE__ */ s(_, { children: $ });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(rn, {}) });
+  if (N) {
+    const U = typeof t == "function" ? t(N, R) : t || /* @__PURE__ */ s(sn, { error: N, retry: R });
+    return /* @__PURE__ */ s(_, { children: U });
   }
   return /* @__PURE__ */ s(_, { children: r });
 }
-function Wn(r = !0) {
-  const { isAppLoading: e, appError: t, retryApp: n, appInfo: i } = ye(), o = Se(), a = Ee(), p = Ge(), f = Ze(), w = (o == null ? void 0 : o.isTenantLoading) ?? !1, u = (o == null ? void 0 : o.tenantError) ?? null, b = (o == null ? void 0 : o.tenant) ?? null, g = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, N = (p == null ? void 0 : p.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = r && o && g, L = e || P && w || a && !I || p && !N || f && !M, E = t || (P ? u : null);
+function jn(r = !0) {
+  const { isAppLoading: e, appError: t, retryApp: n, appInfo: i } = we(), o = ve(), a = Ne(), p = Ke(), f = Je(), w = (o == null ? void 0 : o.isTenantLoading) ?? !1, d = (o == null ? void 0 : o.tenantError) ?? null, m = (o == null ? void 0 : o.tenant) ?? null, h = (o == null ? void 0 : o.tenantSlug) ?? null, v = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, F = (p == null ? void 0 : p.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = r && o && h, L = e || P && w || a && !I || p && !F || f && !M, E = t || (P ? d : null);
   return {
     isLoading: L,
     error: E,
-    isReady: !L && !E && i !== null && (!P || b !== null),
+    isReady: !L && !E && i !== null && (!P || m !== null),
     retry: () => {
-      t && n(), u && o && T();
+      t && n(), d && o && v();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: w, error: u, data: b } : null,
+    tenant: o ? { isLoading: w, error: d, data: m } : null,
     auth: a ? { isReady: I } : null,
-    featureFlags: p ? { isReady: N } : null,
+    featureFlags: p ? { isReady: F } : null,
     subscription: f ? { isReady: M } : null
   };
 }
-function Vn({
+function Gn({
   tenants: r,
   currentTenantId: e,
   onSelect: t,
@@ -3722,35 +3733,35 @@ function Vn({
   disabled: f = !1,
   showCurrentTenant: w = !0
 }) {
-  var x;
-  const u = Ee(), [b, g] = A(!1), T = Ve(null), I = r ?? (u == null ? void 0 : u.userTenants) ?? [], N = e ?? ((x = u == null ? void 0 : u.currentUser) == null ? void 0 : x.tenantId) ?? null, M = async (S) => {
-    g(!1), t ? t(S) : u != null && u.switchToTenant && await u.switchToTenant(S);
+  var A;
+  const d = Ne(), [m, h] = x(!1), v = Ge(null), I = r ?? (d == null ? void 0 : d.userTenants) ?? [], F = e ?? ((A = d == null ? void 0 : d.currentUser) == null ? void 0 : A.tenantId) ?? null, M = async (b) => {
+    h(!1), t ? t(b) : d != null && d.switchToTenant && await d.switchToTenant(b);
   };
-  X(() => {
-    const S = (L) => {
-      T.current && !T.current.contains(L.target) && g(!1);
+  ee(() => {
+    const b = (L) => {
+      v.current && !v.current.contains(L.target) && h(!1);
     };
-    return document.addEventListener("mousedown", S), () => document.removeEventListener("mousedown", S);
+    return document.addEventListener("mousedown", b), () => document.removeEventListener("mousedown", b);
   }, []);
-  const P = I.find((S) => S.id === N);
+  const P = I.find((b) => b.id === F);
   if (I.length === 0)
     return null;
   if (I.length === 1 && w)
     return /* @__PURE__ */ s("div", { className: n, children: /* @__PURE__ */ s("span", { children: I[0].name }) });
-  const h = (S, L) => /* @__PURE__ */ d("span", { style: { fontWeight: L ? "bold" : "normal" }, children: [
-    S.name,
-    S.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
+  const u = (b, L) => /* @__PURE__ */ c("span", { style: { fontWeight: L ? "bold" : "normal" }, children: [
+    b.name,
+    b.role && /* @__PURE__ */ c("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
       "(",
-      S.role,
+      b.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ d("div", { ref: T, className: n, style: { position: "relative" }, children: [
-    /* @__PURE__ */ d(
+  return /* @__PURE__ */ c("div", { ref: v, className: n, style: { position: "relative" }, children: [
+    /* @__PURE__ */ c(
       "button",
       {
         type: "button",
-        onClick: () => !f && g(!b),
+        onClick: () => !f && h(!m),
         disabled: f,
         style: {
           cursor: f ? "not-allowed" : "pointer",
@@ -3758,11 +3769,11 @@ function Vn({
         },
         children: [
           P ? P.name : p,
-          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: b ? "▲" : "▼" })
+          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: m ? "▲" : "▼" })
         ]
       }
     ),
-    b && /* @__PURE__ */ s(
+    m && /* @__PURE__ */ s(
       "div",
       {
         className: i,
@@ -3779,13 +3790,13 @@ function Vn({
           maxHeight: 300,
           overflowY: "auto"
         },
-        children: I.map((S) => {
-          const L = S.id === N;
+        children: I.map((b) => {
+          const L = b.id === F;
           return /* @__PURE__ */ s(
             "div",
             {
               className: o,
-              onClick: () => M(S.id),
+              onClick: () => M(b.id),
               style: {
                 padding: "8px 12px",
                 cursor: "pointer",
@@ -3797,16 +3808,16 @@ function Vn({
               onMouseLeave: (E) => {
                 L || (E.target.style.backgroundColor = "transparent");
               },
-              children: a ? a(S, L) : h(S, L)
+              children: a ? a(b, L) : u(b, L)
             },
-            S.id
+            b.id
           );
         })
       }
     )
   ] });
 }
-class jn {
+class Zn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3874,7 +3885,7 @@ class jn {
     };
   }
 }
-class Gn {
+class Kn {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3925,7 +3936,7 @@ class Gn {
     });
   }
 }
-class Zn {
+class Jn {
   constructor(e) {
     this.httpService = e;
   }
@@ -3934,7 +3945,7 @@ class Zn {
     return await this.httpService.get("/health");
   }
 }
-class Kn {
+class Yn {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -4056,136 +4067,136 @@ class Kn {
     }), t;
   }
 }
-const Ye = "returnTo", Pe = "zone_return_to", Re = "zone_return_to";
-function Jn(r = {}) {
+const Xe = "returnTo", Ie = "zone_return_to", Me = "zone_return_to";
+function Qn(r = {}) {
   const {
     zoneRoots: e = {},
-    returnToParam: t = Ye,
+    returnToParam: t = Xe,
     returnToStorage: n = "url"
-  } = r, i = ut(), [o, a] = ht(), { isAuthenticated: p, currentUser: f } = le(), { tenant: w } = he(), u = Z(() => ({ ...De, ...e }), [e]), b = !!w, g = f == null ? void 0 : f.userType, T = Z(() => {
+  } = r, i = gt(), [o, a] = pt(), { isAuthenticated: p, currentUser: f } = ce(), { tenant: w } = he(), d = J(() => ({ ...Ue, ...e }), [e]), m = !!w, h = f == null ? void 0 : f.userType, v = J(() => {
     switch (n) {
       case "url":
         return o.get(t);
       case "session":
-        return sessionStorage.getItem(Pe);
+        return sessionStorage.getItem(Ie);
       case "local":
-        return localStorage.getItem(Re);
+        return localStorage.getItem(Me);
       default:
         return null;
     }
-  }, [n, o, t]), I = re(() => {
+  }, [n, o, t]), I = se(() => {
     switch (n) {
       case "url": {
-        const h = new URLSearchParams(o);
-        h.delete(t), a(h, { replace: !0 });
+        const u = new URLSearchParams(o);
+        u.delete(t), a(u, { replace: !0 });
         break;
       }
       case "session":
-        sessionStorage.removeItem(Pe);
+        sessionStorage.removeItem(Ie);
         break;
       case "local":
-        localStorage.removeItem(Re);
+        localStorage.removeItem(Me);
         break;
     }
-  }, [n, o, t, a]), N = re(
-    (h) => {
+  }, [n, o, t, a]), F = se(
+    (u) => {
       switch (n) {
         case "url": {
-          const x = new URLSearchParams(o);
-          x.set(t, h), a(x, { replace: !0 });
+          const A = new URLSearchParams(o);
+          A.set(t, u), a(A, { replace: !0 });
           break;
         }
         case "session":
-          sessionStorage.setItem(Pe, h);
+          sessionStorage.setItem(Ie, u);
           break;
         case "local":
-          localStorage.setItem(Re, h);
+          localStorage.setItem(Me, u);
           break;
       }
     },
     [n, o, t, a]
-  ), M = re(
-    (h) => {
-      const x = u[h] || u.default;
-      i(x);
+  ), M = se(
+    (u) => {
+      const A = d[u] || d.default;
+      i(A);
     },
-    [i, u]
-  ), P = re(() => b ? p ? g === se.TENANT_ADMIN ? u.tenantAdmin : u.tenantUser : u.tenantGuest : p ? g === se.TENANT_ADMIN ? u.publicAdmin : u.publicUser : u.publicGuest, [b, p, g, u]);
+    [i, d]
+  ), P = se(() => m ? p ? h === ie.TENANT_ADMIN ? d.tenantAdmin : d.tenantUser : d.tenantGuest : p ? h === ie.TENANT_ADMIN ? d.publicAdmin : d.publicUser : d.publicGuest, [m, p, h, d]);
   return {
-    returnToUrl: T,
+    returnToUrl: v,
     clearReturnTo: I,
-    setReturnTo: N,
+    setReturnTo: F,
     navigateToZone: M,
     getSmartRedirect: P
   };
 }
-function Yn(r, e, t = Ye, n = "url") {
+function Xn(r, e, t = Xe, n = "url") {
   if (!e || n !== "url")
     return r;
   const i = new URL(r, window.location.origin);
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  Ln as AdminZone,
-  Kn as ApiMappers,
-  He as AppApiService,
-  _n as AppLoader,
-  hn as AppProvider,
-  gt as AuthApiService,
-  yn as AuthProvider,
-  In as AuthenticatedZone,
-  Ke as DEFAULT_ZONE_PRESETS,
-  De as DEFAULT_ZONE_ROOTS,
-  $n as FeatureFlag,
-  Tt as FeatureFlagApiService,
-  wn as FeatureFlagProvider,
-  Mn as GuestZone,
-  Zn as HealthApiService,
-  oe as HttpService,
-  xn as LandingRoute,
-  Hn as LoginForm,
-  qn as MagicLinkForm,
-  On as MagicLinkVerify,
-  Fn as OpenZone,
-  zn as PasswordRecoveryForm,
-  jn as PermissionApiService,
-  Tn as Protected,
-  kn as ProtectedRoute,
-  Rn as PublicZone,
-  Be as RoleApiService,
-  Sn as RoutingProvider,
-  xe as SessionManager,
-  Bn as SignupForm,
-  At as SubscriptionApiService,
-  Un as SubscriptionGuard,
-  Gn as SubscriptionPlanApiService,
-  bn as SubscriptionProvider,
-  fe as TenantApiService,
-  Nn as TenantAuthenticatedZone,
-  Cn as TenantGuestZone,
-  Dn as TenantOpenZone,
-  pn as TenantProvider,
-  An as TenantRoute,
-  Vn as TenantSelector,
-  Pn as TenantZone,
-  pt as UserApiService,
-  se as UserType,
-  En as UserZone,
-  ae as ZoneRoute,
-  Yn as buildRedirectUrl,
-  gn as useApi,
-  ye as useApp,
-  Wn as useAppLoaderState,
-  le as useAuth,
-  kt as useFeatureFlags,
-  vn as useRouting,
-  Pt as useRoutingOptional,
-  mn as useSettings,
-  xt as useSubscription,
+  Fn as AdminZone,
+  Yn as ApiMappers,
+  qe as AppApiService,
+  Vn as AppLoader,
+  pn as AppProvider,
+  ft as AuthApiService,
+  bn as AuthProvider,
+  Ln as AuthenticatedZone,
+  Ye as DEFAULT_ZONE_PRESETS,
+  Ue as DEFAULT_ZONE_ROOTS,
+  Bn as FeatureFlag,
+  xt as FeatureFlagApiService,
+  Sn as FeatureFlagProvider,
+  En as GuestZone,
+  Jn as HealthApiService,
+  ae as HttpService,
+  Rn as LandingRoute,
+  qn as LoginForm,
+  zn as MagicLinkForm,
+  _n as MagicLinkVerify,
+  Dn as OpenZone,
+  Wn as PasswordRecoveryForm,
+  Zn as PermissionApiService,
+  xn as Protected,
+  An as ProtectedRoute,
+  Mn as PublicZone,
+  Oe as RoleApiService,
+  Tn as RoutingProvider,
+  Re as SessionManager,
+  On as SignupForm,
+  Pt as SubscriptionApiService,
+  Hn as SubscriptionGuard,
+  Kn as SubscriptionPlanApiService,
+  vn as SubscriptionProvider,
+  me as TenantApiService,
+  Cn as TenantAuthenticatedZone,
+  $n as TenantGuestZone,
+  Un as TenantOpenZone,
+  mn as TenantProvider,
+  Pn as TenantRoute,
+  Gn as TenantSelector,
+  In as TenantZone,
+  mt as UserApiService,
+  ie as UserType,
+  Nn as UserZone,
+  le as ZoneRoute,
+  Xn as buildRedirectUrl,
+  fn as useApi,
+  we as useApp,
+  jn as useAppLoaderState,
+  ce as useAuth,
+  At as useFeatureFlags,
+  kn as useRouting,
+  It as useRoutingOptional,
+  wn as useSettings,
+  Rt as useSubscription,
   he as useTenant,
   ge as useTenantInfo,
-  Se as useTenantOptional,
-  fn as useTenantSettings,
-  Jn as useZoneNavigation
+  ve as useTenantOptional,
+  yn as useTenantSettings,
+  Qn as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map