@skylabs-digital/react-identity-access 2.22.0 → 2.23.0

package/dist/index.es.js

@@ -13,19 +13,19 @@ class ce {
   }
   async executeRequest(e, t, r, i) {
     const o = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, a = (i == null ? void 0 : i.timeout) || this.timeout;
-    let f = {
+    let h = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
       const c = await this.sessionManager.getValidAccessToken();
-      f = { ...f, Authorization: `Bearer ${c}` };
+      h = { ...h, Authorization: `Bearer ${c}` };
     }
     const g = new AbortController(), w = setTimeout(() => g.abort(), a);
     try {
       const c = await fetch(o, {
         method: e,
-        headers: f,
+        headers: h,
         body: r ? JSON.stringify(r) : void 0,
         signal: g.signal
       });
@@ -132,7 +132,7 @@ function yr({ config: n, children: e }) {
     } catch {
       return null;
     }
-  }), [o, a] = T(!r), [f, g] = T(null), w = Z(() => {
+  }), [o, a] = T(!r), [h, g] = T(null), w = Z(() => {
     const p = () => {
       c();
     };
@@ -142,10 +142,10 @@ function yr({ config: n, children: e }) {
       // App info
       appInfo: r,
       isAppLoading: o,
-      appError: f,
+      appError: h,
       retryApp: p
     };
-  }, [n, r, o, f]), c = ie(
+  }, [n, r, o, h]), c = ie(
     async (p = !1) => {
       if (!(!p && t.enabled && r))
         try {
@@ -299,8 +299,8 @@ const oe = class oe {
     const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || oe.extractJwtExpiry(e.accessToken), r = {
       ...e,
       expiresAt: t
-    };
-    this.tokenStorage.set(r), this.scheduleProactiveRefresh();
+    }, i = this.tokenStorage.get() || {};
+    this.tokenStorage.set({ ...i, ...r }), this.scheduleProactiveRefresh();
   }
   getTokens() {
     const { accessToken: e, refreshToken: t, expiresAt: r, expiresIn: i, tokenType: o } = this.tokenStorage.get() || {};
@@ -449,15 +449,15 @@ const oe = class oe {
       if (this.sessionGeneration !== r)
         throw new se("token_invalid", "Session cleared during refresh");
       try {
-        await this.performTokenRefresh(e);
+        await this.performTokenRefresh(e, r);
         return;
       } catch (o) {
         const a = o instanceof Error ? o : new Error(String(o));
         if (a instanceof se)
           throw a;
         if (t = a, i < this.maxRefreshRetries) {
-          const f = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(f);
+          const h = this.retryBackoffBase * Math.pow(2, i);
+          await this.sleep(h);
         }
       }
     }
@@ -468,35 +468,37 @@ const oe = class oe {
    * Throws SessionExpiredError for fatal errors (no retry).
    * Throws generic Error for transient errors (will be retried).
    */
-  async performTokenRefresh(e) {
+  async performTokenRefresh(e, t) {
     if (!this.baseUrl)
       throw new Error("Base URL not configured for token refresh");
-    const t = `${this.baseUrl}/auth/refresh`;
-    let r;
+    const r = `${this.baseUrl}/auth/refresh`;
+    let i;
     try {
-      r = await fetch(t, {
+      i = await fetch(r, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({ refreshToken: e })
       });
-    } catch (o) {
-      throw o instanceof Error ? o : new Error("Network error during token refresh");
+    } catch (a) {
+      throw a instanceof Error ? a : new Error("Network error during token refresh");
     }
-    if (!r.ok) {
-      let o = "";
+    if (!i.ok) {
+      let a = "";
       try {
-        const a = await r.json();
-        o = (a.message || a.error || "").toLowerCase();
+        const h = await i.json();
+        a = (h.message || h.error || "").toLowerCase();
       } catch {
-        o = r.statusText.toLowerCase();
+        a = i.statusText.toLowerCase();
       }
-      throw r.status === 401 ? o.includes("expired") ? new se("token_expired") : o.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${o}`) : r.status === 400 ? o.includes("inactive") ? new se("user_inactive") : new Error(`Token refresh failed (400): ${o}`) : new Error(`Token refresh failed: ${r.status} ${o}`);
+      throw i.status === 401 ? a.includes("expired") ? new se("token_expired") : a.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${a}`) : i.status === 400 ? a.includes("inactive") ? new se("user_inactive") : a.includes("expired") || a.includes("invalid") ? new se("token_invalid", a) : new Error(`Token refresh failed (400): ${a}`) : new Error(`Token refresh failed: ${i.status} ${a}`);
     }
-    const i = await r.json();
+    if (this.sessionGeneration !== t)
+      throw new se("token_invalid", "Session cleared during refresh");
+    const o = await i.json();
     this.setTokens({
-      accessToken: i.accessToken,
-      refreshToken: i.refreshToken || e,
-      expiresIn: i.expiresIn
+      accessToken: o.accessToken,
+      refreshToken: o.refreshToken || e,
+      expiresIn: o.expiresIn
     });
   }
   // --- Session expiry handler ---
@@ -518,7 +520,7 @@ const oe = class oe {
   }
   // --- Session lifecycle ---
   clearSession() {
-    this.sessionGeneration++, this.cancelProactiveTimer(), this.clearTokens(), this.clearUser();
+    this.sessionGeneration++, this.cancelProactiveTimer(), this.clearTokens();
     const e = new se("token_invalid", "Session cleared");
     this.rejectQueue(e);
   }
@@ -903,11 +905,11 @@ function br({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, f] = T(() => o()), g = Z(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, h] = T(() => o()), g = Z(
     () => {
-      var h, C, S;
+      var f, C, S;
       return {
-        enabled: ((h = n.cache) == null ? void 0 : h.enabled) ?? !0,
+        enabled: ((f = n.cache) == null ? void 0 : f.enabled) ?? !0,
         ttl: ((C = n.cache) == null ? void 0 : C.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
         storageKey: ((S = n.cache) == null ? void 0 : S.storageKey) ?? `tenant_cache_${a || "default"}`
@@ -918,9 +920,9 @@ function br({ config: n, children: e }) {
     if (n.initialTenant) return n.initialTenant;
     if (!g.enabled || !a) return null;
     try {
-      const h = localStorage.getItem(g.storageKey);
-      if (!h) return null;
-      const C = JSON.parse(h);
+      const f = localStorage.getItem(g.storageKey);
+      if (!f) return null;
+      const C = JSON.parse(f);
       return Date.now() - C.timestamp < g.ttl && C.tenantSlug === a ? C.data : (localStorage.removeItem(g.storageKey), null);
     } catch {
       return null;
@@ -928,21 +930,21 @@ function br({ config: n, children: e }) {
   }), [I, p] = T(!w && !n.initialTenant), [x, R] = T(null), [F, E] = T(null), [A, u] = T(!1), [k, m] = T(null);
   ee(() => {
     if (n.tenantMode === "fixed") return;
-    const h = o();
-    f(h);
+    const f = o();
+    h(f);
   }, [o, n.tenantMode]);
   const M = (r == null ? void 0 : r.settingsSchema) || null, L = ie(
-    async (h, C = !1) => {
-      if (!(!C && g.enabled && w && w.domain === h))
+    async (f, C = !1) => {
+      if (!(!C && g.enabled && w && w.domain === f))
         try {
           p(!0), R(null);
-          const S = new ce(t), y = await new ve(S, i).getPublicTenantInfo(h);
+          const S = new ce(t), y = await new ve(S, i).getPublicTenantInfo(f);
           if (c(y), g.enabled)
             try {
               const v = {
                 data: y,
                 timestamp: Date.now(),
-                tenantSlug: h
+                tenantSlug: f
               };
               localStorage.setItem(g.storageKey, JSON.stringify(v));
             } catch (v) {
@@ -959,9 +961,9 @@ function br({ config: n, children: e }) {
   ), D = ie(async () => {
     if (!(!g.enabled || !w || !a))
       try {
-        const h = localStorage.getItem(g.storageKey);
-        if (!h) return;
-        const C = JSON.parse(h);
+        const f = localStorage.getItem(g.storageKey);
+        if (!f) return;
+        const C = JSON.parse(f);
         if (Date.now() - C.timestamp > g.ttl * 0.5) {
           const b = new ce(t), v = await new ve(b, i).getPublicTenantInfo(a);
           c(v);
@@ -972,17 +974,17 @@ function br({ config: n, children: e }) {
           };
           localStorage.setItem(g.storageKey, JSON.stringify(G));
         }
-      } catch (h) {
-        console.warn("Background tenant refresh failed:", h);
+      } catch (f) {
+        console.warn("Background tenant refresh failed:", f);
       }
   }, [t, i, g, w, a]), P = ie(async () => {
     if (w != null && w.id)
       try {
         u(!0), m(null);
-        const h = new ce(t), S = await new ve(h, w.appId).getTenantSettings(w.id);
+        const f = new ce(t), S = await new ve(f, w.appId).getTenantSettings(w.id);
         E(S);
-      } catch (h) {
-        const C = h instanceof Error ? h : new Error("Failed to load tenant settings");
+      } catch (f) {
+        const C = f instanceof Error ? f : new Error("Failed to load tenant settings");
         m(C), E(null);
       } finally {
         u(!1);
@@ -990,14 +992,14 @@ function br({ config: n, children: e }) {
   }, [t, w]), U = ie(() => {
     P();
   }, [P]), l = ie(
-    (h) => {
+    (f) => {
       if (!M)
         return { isValid: !0, errors: [] };
       const C = [];
       try {
         return M.properties && Object.entries(M.properties).forEach(([S, b]) => {
           var v;
-          const y = h[S];
+          const y = f[S];
           if ((v = M.required) != null && v.includes(S) && y == null) {
             C.push(`Field '${S}' is required`);
             return;
@@ -1032,7 +1034,7 @@ function br({ config: n, children: e }) {
     w != null && w.id ? P() : (E(null), m(null), u(!1));
   }, [w == null ? void 0 : w.id, P]);
   const N = ie(
-    (h, C) => {
+    (f, C) => {
       const { mode: S = "reload", tokens: b, redirectPath: y } = C || {}, v = n.tenantMode || "selector";
       if (v === "fixed") {
         console.warn(
@@ -1041,9 +1043,9 @@ function br({ config: n, children: e }) {
         ), y && (window.location.href = y);
         return;
       }
-      if (localStorage.setItem("tenant", h), v === "subdomain") {
+      if (localStorage.setItem("tenant", f), v === "subdomain") {
         const G = window.location.hostname, Q = xt(
-          h,
+          f,
           G,
           n.baseDomain
         );
@@ -1060,17 +1062,17 @@ function br({ config: n, children: e }) {
         }), b && q.searchParams.set(ge, We(b)), window.location.href = q.toString();
       } else if (v === "selector") {
         const G = y || window.location.pathname, Q = new URLSearchParams(window.location.search);
-        if (Q.set(n.selectorParam || "tenant", h), Q.delete(ge), b && Q.set(ge, We(b)), S === "reload") {
+        if (Q.set(n.selectorParam || "tenant", f), Q.delete(ge), b && Q.set(ge, We(b)), S === "reload") {
           const O = `${G}?${Q.toString()}${window.location.hash}`;
           window.location.href = O;
         } else {
           const O = `${G}?${Q.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", O), f(h), L(h);
+          window.history.pushState({}, "", O), h(f), L(f);
         }
       }
     },
     [n.tenantMode, n.selectorParam, n.baseDomain, L]
-  ), $ = Z(() => ({
+  ), H = Z(() => ({
     // Tenant info
     tenant: w,
     tenantSlug: a,
@@ -1102,7 +1104,7 @@ function br({ config: n, children: e }) {
     N,
     l
   ]);
-  return /* @__PURE__ */ s(De.Provider, { value: $, children: e });
+  return /* @__PURE__ */ s(De.Provider, { value: H, children: e });
 }
 function ye() {
   const n = le(De);
@@ -1136,7 +1138,7 @@ function we() {
 }
 const Ne = me(null);
 function Tr({ config: n = {}, children: e }) {
-  const { appId: t, baseUrl: r } = ke(), { tenant: i, tenantSlug: o, switchTenant: a } = ye(), [f, g] = T(n.initialRoles || []), [w, c] = T(!n.initialRoles), [I, p] = T(null), [x, R] = T(!1), [F, E] = T(null), [A, u] = T(0), [k, m] = T(() => {
+  const { appId: t, baseUrl: r } = ke(), { tenant: i, tenantSlug: o, switchTenant: a } = ye(), [h, g] = T(n.initialRoles || []), [w, c] = T(!n.initialRoles), [I, p] = T(null), [x, R] = T(!1), [F, E] = T(null), [A, u] = T(0), [k, m] = T(() => {
     try {
       const V = localStorage.getItem("userTenants");
       return V ? JSON.parse(V) : [];
@@ -1170,20 +1172,20 @@ function Tr({ config: n = {}, children: e }) {
       refreshToken: D.current.urlTokens.refreshToken,
       expiresIn: D.current.urlTokens.expiresIn
     }), console.log("[AuthProvider] SYNC: Session valid:", V.hasValidSession())), V;
-  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [N, $] = T(() => {
+  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [N, H] = T(() => {
     if (D.current.urlTokens) return !1;
     const V = l.getTokens();
     return V ? l.hasValidSession() || !!V.refreshToken : !1;
-  }), h = D.current.done && !P && !N, C = Z(() => {
+  }), f = D.current.done && !P && !N, C = Z(() => {
     const V = new ce(r);
     return V.setSessionManager(l), V;
-  }, [r, l]), S = Z(() => new bt(new ce(r)), [r]), b = Z(() => new St(C, l), [C, l]), y = Z(() => new _e(new ce(r)), [r]), v = Z(() => I || l.getUser(), [I, l]), G = Z(() => v != null && v.roleId && f.find((V) => V.id === v.roleId) || null, [v, f]), Q = Z(() => (G == null ? void 0 : G.permissions) || [], [G]), O = Z(() => l.hasValidSession() && I !== null, [l, I]), q = 5 * 60 * 1e3, W = Z(() => {
-    const V = async (H = !1) => {
+  }, [r, l]), S = Z(() => new bt(new ce(r)), [r]), b = Z(() => new St(C, l), [C, l]), y = Z(() => new _e(new ce(r)), [r]), v = Z(() => I || l.getUser(), [I, l]), G = Z(() => v != null && v.roleId && h.find((V) => V.id === v.roleId) || null, [v, h]), Q = Z(() => (G == null ? void 0 : G.permissions) || [], [G]), O = Z(() => l.hasValidSession() && I !== null, [l, I]), q = 5 * 60 * 1e3, W = Z(() => {
+    const V = async ($ = !1) => {
       try {
         if (!l.hasValidSession())
           return;
         const z = Date.now();
-        if (!H && z - A < q && I)
+        if (!$ && z - A < q && I)
           return;
         const j = l.getUserId();
         if (!j) {
@@ -1201,9 +1203,9 @@ function Tr({ config: n = {}, children: e }) {
       }
     }, he = async () => {
       await V();
-    }, fe = async (H) => {
+    }, fe = async ($) => {
       var qe;
-      const { username: z, password: Y, tenantSlug: j, redirectPath: J } = H;
+      const { username: z, password: Y, tenantSlug: j, redirectPath: J } = $;
       let te = i == null ? void 0 : i.id, re = o, ne = l;
       j && (te = (await new ve(C, t).getPublicTenantInfo(j)).id, re = j);
       const K = await S.login({
@@ -1246,15 +1248,15 @@ function Tr({ config: n = {}, children: e }) {
       if (J && J !== window.location.pathname)
         return a(re || o || "", { tokens: Ee, redirectPath: J }), K;
       if (!Ie && K.tenants && K.tenants.length > 0) {
-        const xe = H.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
+        const xe = $.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
         if (K.tenants.length === 1 && xe) {
           const Oe = K.tenants[0];
           return a(Oe.subdomain, { tokens: Ee, redirectPath: J }), K;
         } else K.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(K.tenants);
       }
       return K;
-    }, pe = async (H) => {
-      const { email: z, phoneNumber: Y, name: j, password: J, lastName: te, tenantId: re } = H;
+    }, pe = async ($) => {
+      const { email: z, phoneNumber: Y, name: j, password: J, lastName: te, tenantId: re } = $;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!j || !J)
@@ -1269,8 +1271,8 @@ function Tr({ config: n = {}, children: e }) {
         lastName: te,
         appId: t
       });
-    }, rt = async (H) => {
-      const { email: z, phoneNumber: Y, name: j, password: J, tenantName: te, lastName: re } = H;
+    }, rt = async ($) => {
+      const { email: z, phoneNumber: Y, name: j, password: J, tenantName: te, lastName: re } = $;
       if (!z && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!j || !J || !te)
@@ -1284,19 +1286,19 @@ function Tr({ config: n = {}, children: e }) {
         appId: t,
         lastName: re
       });
-    }, nt = async (H) => {
-      const { currentPassword: z, newPassword: Y } = H, j = await l.getAuthHeaders();
+    }, nt = async ($) => {
+      const { currentPassword: z, newPassword: Y } = $, j = await l.getAuthHeaders();
       await S.changePassword({ currentPassword: z, newPassword: Y }, j);
-    }, st = async (H) => {
-      const { email: z, tenantId: Y } = H, j = Y ?? (i == null ? void 0 : i.id);
+    }, st = async ($) => {
+      const { email: z, tenantId: Y } = $, j = Y ?? (i == null ? void 0 : i.id);
       if (!j)
         throw new Error("tenantId is required for password reset");
       await S.requestPasswordReset({ email: z, tenantId: j });
-    }, it = async (H) => {
-      const { token: z, newPassword: Y } = H;
+    }, it = async ($) => {
+      const { token: z, newPassword: Y } = $;
       await S.confirmPasswordReset({ token: z, newPassword: Y });
-    }, ot = async (H) => {
-      const { email: z, frontendUrl: Y, name: j, lastName: J, tenantId: te } = H, re = te ?? (i == null ? void 0 : i.id);
+    }, ot = async ($) => {
+      const { email: z, frontendUrl: Y, name: j, lastName: J, tenantId: te } = $, re = te ?? (i == null ? void 0 : i.id);
       if (!re)
         throw new Error("tenantId is required for magic link authentication");
       return await S.sendMagicLink({
@@ -1307,8 +1309,8 @@ function Tr({ config: n = {}, children: e }) {
         lastName: J,
         appId: t
       });
-    }, at = async (H) => {
-      const { token: z, email: Y, tenantSlug: j } = H;
+    }, at = async ($) => {
+      const { token: z, email: Y, tenantSlug: j } = $;
       let J = i == null ? void 0 : i.id, te = o, re = l;
       j && (J = (await new ve(C, t).getPublicTenantInfo(j)).id, te = j);
       const ne = await S.verifyMagicLink({
@@ -1340,15 +1342,15 @@ function Tr({ config: n = {}, children: e }) {
         }
       }), ne;
     }, lt = async () => {
-      const H = l.getTokens();
-      if (!(H != null && H.refreshToken))
+      const $ = l.getTokens();
+      if (!($ != null && $.refreshToken))
         throw new Error("No refresh token available");
       const z = await S.refreshToken({
-        refreshToken: H.refreshToken
+        refreshToken: $.refreshToken
       });
       l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || H.refreshToken,
+        refreshToken: z.refreshToken || $.refreshToken,
         expiresIn: z.expiresIn
       });
     }, ct = () => {
@@ -1357,29 +1359,29 @@ function Tr({ config: n = {}, children: e }) {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, dt = (H) => {
-      l.setTokens(H);
+    }, dt = ($) => {
+      l.setTokens($);
     }, ut = () => l.hasValidSession(), ht = () => {
       l.clearSession(), p(null), E(null);
     }, ft = async () => {
       if (t)
         try {
           c(!0);
-          const { roles: H } = await y.getRolesByApp(t);
-          g(H);
-        } catch (H) {
-          console.error("Failed to fetch roles:", H);
+          const { roles: $ } = await y.getRolesByApp(t);
+          g($);
+        } catch ($) {
+          console.error("Failed to fetch roles:", $);
         } finally {
           c(!1);
         }
     }, pt = async () => {
       await ft();
-    }, Re = (H) => {
+    }, Re = ($) => {
       if (!Q || Q.length === 0)
         return !1;
-      if (typeof H == "string")
-        return Q.includes(H);
-      const z = `${H.resource}.${H.action}`;
+      if (typeof $ == "string")
+        return Q.includes($);
+      const z = `${$.resource}.${$.action}`;
       return Q.includes(z);
     };
     return {
@@ -1405,27 +1407,27 @@ function Tr({ config: n = {}, children: e }) {
       userError: F,
       loadUserData: V,
       refreshUser: he,
-      isAuthInitializing: !h,
-      isAuthReady: h,
+      isAuthInitializing: !f,
+      isAuthReady: f,
       userRole: G,
       userPermissions: Q,
-      availableRoles: f,
+      availableRoles: h,
       rolesLoading: w,
       hasPermission: Re,
-      hasAnyPermission: (H) => H.some((z) => Re(z)),
-      hasAllPermissions: (H) => H.every((z) => Re(z)),
+      hasAnyPermission: ($) => $.some((z) => Re(z)),
+      hasAllPermissions: ($) => $.every((z) => Re(z)),
       getUserPermissionStrings: () => Q || [],
       refreshRoles: pt,
       // RFC-004: Multi-tenant user membership
       userTenants: k,
       hasTenantContext: M,
-      switchToTenant: async (H, z) => {
+      switchToTenant: async ($, z) => {
         const { redirectPath: Y } = z || {}, j = l.getTokens();
         if (!(j != null && j.refreshToken))
           throw new Error("No refresh token available for tenant switch");
         const J = await S.switchTenant({
           refreshToken: j.refreshToken,
-          tenantId: H
+          tenantId: $
         });
         l.setTokens({
           accessToken: J.accessToken,
@@ -1433,7 +1435,7 @@ function Tr({ config: n = {}, children: e }) {
           // Keep the same refresh token
           expiresIn: J.expiresIn
         }), p(J.user), l.setUser(J.user), L(!0);
-        const te = k.find((re) => re.id === H);
+        const te = k.find((re) => re.id === $);
         te && a(te.subdomain, {
           tokens: {
             accessToken: J.accessToken,
@@ -1444,7 +1446,7 @@ function Tr({ config: n = {}, children: e }) {
         });
       },
       refreshUserTenants: async () => {
-        const H = await l.getAuthHeaders(), z = await S.getUserTenants(H);
+        const $ = await l.getAuthHeaders(), z = await S.getUserTenants($);
         m(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
@@ -1464,13 +1466,13 @@ function Tr({ config: n = {}, children: e }) {
     i,
     o,
     a,
-    f,
+    h,
     I,
     x,
     F,
     k,
     M,
-    h,
+    f,
     G,
     Q,
     A,
@@ -1502,15 +1504,15 @@ function Tr({ config: n = {}, children: e }) {
       var pe;
       if (!l.hasValidSession() && ((pe = l.getTokens()) != null && pe.refreshToken) && await l.waitForPendingRefresh(), V) return;
       const fe = l.getUser();
-      fe && l.hasValidSession() ? (p(fe), $(!1)) : l.hasValidSession() || $(!1);
+      fe && l.hasValidSession() && p(fe), H(!1);
     })(), () => {
       V = !0;
     };
   }, [l]), ee(() => {
     B && (D.current.urlTokens || (!I && !x && l.hasValidSession() ? (console.log("[AuthProvider] Auto-loading user data..."), W.loadUserData().catch(() => {
     }).finally(() => {
-      $(!1);
-    })) : I && $(!1)));
+      H(!1);
+    })) : I && H(!1)));
   }, [I, x, W, l, B]), ee(() => {
     if (!l.hasValidSession() || !I)
       return;
@@ -1612,7 +1614,7 @@ class It {
 }
 const Ue = me(null);
 function kr({ config: n = {}, children: e }) {
-  const t = Ze(), r = Pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [f, g] = T([]), [w, c] = T(!1), [I, p] = T(null), [x, R] = T(!1), F = Z(() => {
+  const t = Ze(), r = Pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [h, g] = T([]), [w, c] = T(!1), [I, p] = T(null), [x, R] = T(!1), F = Z(() => {
     const u = new ce(i);
     return new It(u);
   }, [i]), E = async () => {
@@ -1639,16 +1641,16 @@ function kr({ config: n = {}, children: e }) {
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
   const A = Z(() => {
     const u = (D) => {
-      const P = f.find((U) => U.key === D);
+      const P = h.find((U) => U.key === D);
       return (P == null ? void 0 : P.value) === !0;
-    }, k = (D) => f.find((P) => P.key === D), m = (D) => {
-      const P = f.find((U) => U.key === D);
+    }, k = (D) => h.find((P) => P.key === D), m = (D) => {
+      const P = h.find((U) => U.key === D);
       return P ? P.value ? "enabled" : "disabled" : "not_found";
     }, M = async () => {
       await E();
     }, L = !!(i && o) && (x || !(a != null && a.id));
     return {
-      featureFlags: f,
+      featureFlags: h,
       loading: w,
       error: I,
       isReady: L,
@@ -1657,7 +1659,7 @@ function kr({ config: n = {}, children: e }) {
       getFlagState: m,
       refresh: M
     };
-  }, [f, w, I, i, o, a == null ? void 0 : a.id, x]);
+  }, [h, w, I, i, o, a == null ? void 0 : a.id, x]);
   return /* @__PURE__ */ s(Ue.Provider, { value: A, children: e });
 }
 function Et() {
@@ -1737,18 +1739,18 @@ class Mt {
 }
 const $e = me(void 0);
 function xr({ config: n = {}, children: e }) {
-  const t = Ze(), r = Pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, f] = T(null), [g, w] = T(!1), [c, I] = T(null), [p, x] = T(!1), R = Z(() => {
+  const t = Ze(), r = Pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, h] = T(null), [g, w] = T(!1), [c, I] = T(null), [p, x] = T(!1), R = Z(() => {
     const A = new ce(i);
     return new Mt(A);
   }, [i]), F = async () => {
     if (!(o != null && o.id)) {
-      f(null);
+      h(null);
       return;
     }
     w(!0), I(null);
     try {
       const A = await R.getTenantSubscriptionFeatures(o.id);
-      f(A);
+      h(A);
     } catch (A) {
       const u = A instanceof Error ? A.message : "Failed to fetch subscription";
       I(u), n.onError && n.onError(A instanceof Error ? A : new Error(u));
@@ -1954,7 +1956,7 @@ function Rr({
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: f, hasAnyPermission: g, hasAllPermissions: w } = ue();
+  const { hasValidSession: o, sessionManager: a, hasPermission: h, hasAnyPermission: g, hasAllPermissions: w } = ue();
   if (!o())
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ve, {}) });
   const c = a.getUser();
@@ -1963,7 +1965,7 @@ function Rr({
   if (t && !Dt(c.userType, t))
     return /* @__PURE__ */ s(je, { userType: c.userType, minUserType: t });
   if (r && r.length > 0 && !(i ? w(r) : g(r))) {
-    const p = r.filter((x) => !f(x)).map((x) => typeof x == "string" ? x : x.name);
+    const p = r.filter((x) => !h(x)).map((x) => typeof x == "string" ? x : x.name);
     return /* @__PURE__ */ s(je, { missingPermissions: p });
   }
   return /* @__PURE__ */ s(_, { children: n });
@@ -2064,7 +2066,7 @@ function Ir({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: f, hasPermission: g, hasAnyPermission: w, hasAllPermissions: c } = ue(), I = Ae();
+  const { hasValidSession: a, sessionManager: h, hasPermission: g, hasAnyPermission: w, hasAllPermissions: c } = ue(), I = Ae();
   if (ee(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
@@ -2074,7 +2076,7 @@ function Ir({
       /* @__PURE__ */ s(Nt, { redirectPath: e }),
       /* @__PURE__ */ s(Te, { to: e, state: { from: I.pathname }, replace: !0 })
     ] });
-  const p = f.getUser();
+  const p = h.getUser();
   if (!p)
     return /* @__PURE__ */ s(Te, { to: e, state: { from: I.pathname }, replace: !0 });
   if (t && !Ct(p.userType, t))
@@ -2218,7 +2220,7 @@ const de = ({
   userType: i,
   requiredPermissions: o,
   requireAllPermissions: a = !0,
-  returnTo: f,
+  returnTo: h,
   onAccessDenied: g,
   redirectTo: w,
   loadingFallback: c,
@@ -2271,10 +2273,10 @@ const de = ({
   if (ee(() => {
     U && (g ? g(U) : k.onAccessDenied && k.onAccessDenied(U));
   }, [U, g, k]), ee(() => {
-    U && f && zt(f, p.pathname + p.search, k.returnToStorage);
+    U && h && zt(h, p.pathname + p.search, k.returnToStorage);
   }, [
     U,
-    f,
+    h,
     p.pathname,
     p.search,
     k.returnToStorage
@@ -2286,7 +2288,7 @@ const de = ({
       return /* @__PURE__ */ s(_, { children: l });
     const N = Ot(
       P,
-      f,
+      h,
       p.pathname + p.search,
       k.returnToParam,
       k.returnToStorage
@@ -2317,8 +2319,8 @@ function Or({
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: f } = Lt();
-  return f ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: h } = Lt();
+  return h ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2540,17 +2542,17 @@ function _r({
   onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: f,
+  onMagicLinkClick: h,
   showForgotPassword: g = !0,
   showSignupLink: w = !0,
   showMagicLinkOption: c = !0,
   className: I
 }) {
-  const [p, x] = T(""), [R, F] = T(""), [E, A] = T(!1), [u, k] = T(!1), [m, M] = T(""), [L, D] = T({}), { login: P } = ue(), { tenant: U } = we(), l = { ...Qt, ...n }, N = { ...Kt, ...e }, $ = { ...Gt, ...t }, h = () => {
+  const [p, x] = T(""), [R, F] = T(""), [E, A] = T(!1), [u, k] = T(!1), [m, M] = T(""), [L, D] = T({}), { login: P } = ue(), { tenant: U } = we(), l = { ...Qt, ...n }, N = { ...Kt, ...e }, H = { ...Gt, ...t }, f = () => {
     const y = {};
     return p.trim() || (y.username = !0), R.trim() || (y.password = !0), D(y), Object.keys(y).length === 0;
   }, C = async (y) => {
-    if (y.preventDefault(), !!h()) {
+    if (y.preventDefault(), !!f()) {
       if (!(U != null && U.id)) {
         M("Tenant not found");
         return;
@@ -2629,7 +2631,7 @@ function _r({
               style: N.passwordToggle,
               disabled: u,
               "aria-label": E ? "Hide password" : "Show password",
-              children: E ? $.hidePassword : $.showPassword
+              children: E ? H.hidePassword : H.showPassword
             }
           )
         ] })
@@ -2643,7 +2645,7 @@ function _r({
           l.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: f, style: N.link, children: l.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: h, style: N.link, children: l.magicLinkLink })
       ] }),
       c && (g || w) && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
       g && /* @__PURE__ */ s("a", { onClick: o, style: N.link, children: l.forgotPasswordLink }),
@@ -2791,17 +2793,17 @@ function Wr({
   onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: f = !0,
+  showLoginLink: h = !0,
   showMagicLinkOption: g = !0,
   className: w
 }) {
-  const [c, I] = T(""), [p, x] = T(""), [R, F] = T(""), [E, A] = T(""), [u, k] = T(""), [m, M] = T(""), [L, D] = T(""), [P, U] = T(!1), [l, N] = T(""), [$, h] = T({}), { signup: C, signupTenantAdmin: S } = ue(), { tenant: b } = we(), y = { ...Zt, ...n }, v = { ...Jt, ...e }, G = () => {
+  const [c, I] = T(""), [p, x] = T(""), [R, F] = T(""), [E, A] = T(""), [u, k] = T(""), [m, M] = T(""), [L, D] = T(""), [P, U] = T(!1), [l, N] = T(""), [H, f] = T({}), { signup: C, signupTenantAdmin: S } = ue(), { tenant: b } = we(), y = { ...Zt, ...n }, v = { ...Jt, ...e }, G = () => {
     const B = {};
-    return c.trim() || (B.name = !0), !R.trim() && !E.trim() && (B.email = !0, B.phoneNumber = !0), u.trim() || (B.password = !0), m.trim() || (B.confirmPassword = !0), t === "tenant" && !L.trim() && (B.tenantName = !0), h(B), Object.keys(B).length === 0;
+    return c.trim() || (B.name = !0), !R.trim() && !E.trim() && (B.email = !0, B.phoneNumber = !0), u.trim() || (B.password = !0), m.trim() || (B.confirmPassword = !0), t === "tenant" && !L.trim() && (B.tenantName = !0), f(B), Object.keys(B).length === 0;
   }, Q = async (B) => {
     if (B.preventDefault(), !!G()) {
       if (u !== m) {
-        N(y.passwordMismatchError), h({ confirmPassword: !0 });
+        N(y.passwordMismatchError), f({ confirmPassword: !0 });
         return;
       }
       if (t === "user" && !(b != null && b.id)) {
@@ -2835,7 +2837,7 @@ function Wr({
     }
   }, O = (B) => ({
     ...v.input,
-    ...$[B] ? v.inputError : {}
+    ...H[B] ? v.inputError : {}
   }), q = () => ({
     ...v.button,
     ...P ? v.buttonLoading : {},
@@ -2854,7 +2856,7 @@ function Wr({
             type: "text",
             value: c,
             onChange: (B) => {
-              I(B.target.value), $.name && h((X) => ({ ...X, name: !1 }));
+              I(B.target.value), H.name && f((X) => ({ ...X, name: !1 }));
             },
             placeholder: y.namePlaceholder,
             style: O("name"),
@@ -2888,7 +2890,7 @@ function Wr({
             type: "email",
             value: R,
             onChange: (B) => {
-              F(B.target.value), $.email && h((X) => ({ ...X, email: !1, phoneNumber: !1 }));
+              F(B.target.value), H.email && f((X) => ({ ...X, email: !1, phoneNumber: !1 }));
             },
             placeholder: y.emailPlaceholder,
             style: O("email"),
@@ -2906,7 +2908,7 @@ function Wr({
             type: "tel",
             value: E,
             onChange: (B) => {
-              A(B.target.value), $.phoneNumber && h((X) => ({ ...X, email: !1, phoneNumber: !1 }));
+              A(B.target.value), H.phoneNumber && f((X) => ({ ...X, email: !1, phoneNumber: !1 }));
             },
             placeholder: y.phoneNumberPlaceholder,
             style: O("phoneNumber"),
@@ -2936,7 +2938,7 @@ function Wr({
             type: "password",
             value: u,
             onChange: (B) => {
-              k(B.target.value), $.password && h((X) => ({ ...X, password: !1 }));
+              k(B.target.value), H.password && f((X) => ({ ...X, password: !1 }));
             },
             placeholder: y.passwordPlaceholder,
             style: O("password"),
@@ -2954,7 +2956,7 @@ function Wr({
             type: "password",
             value: m,
             onChange: (B) => {
-              M(B.target.value), $.confirmPassword && h((X) => ({ ...X, confirmPassword: !1 })), l === y.passwordMismatchError && N("");
+              M(B.target.value), H.confirmPassword && f((X) => ({ ...X, confirmPassword: !1 })), l === y.passwordMismatchError && N("");
             },
             placeholder: y.confirmPasswordPlaceholder,
             style: O("confirmPassword"),
@@ -2972,7 +2974,7 @@ function Wr({
             type: "text",
             value: L,
             onChange: (B) => {
-              D(B.target.value), $.tenantName && h((X) => ({ ...X, tenantName: !1 }));
+              D(B.target.value), H.tenantName && f((X) => ({ ...X, tenantName: !1 }));
             },
             placeholder: y.tenantNamePlaceholder,
             style: O("tenantName"),
@@ -2983,7 +2985,7 @@ function Wr({
       /* @__PURE__ */ s("button", { type: "submit", disabled: !W || P, style: q(), children: P ? y.loadingText : y.submitButton }),
       l && /* @__PURE__ */ s("div", { style: v.errorText, children: l })
     ] }),
-    (f || g) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
+    (h || g) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
       g && /* @__PURE__ */ d("div", { children: [
         /* @__PURE__ */ d("span", { style: v.divider, children: [
           y.magicLinkText,
@@ -2991,8 +2993,8 @@ function Wr({
         ] }),
         /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: y.magicLinkLink })
       ] }),
-      g && f && /* @__PURE__ */ s("div", { style: v.divider, children: "•" }),
-      f && /* @__PURE__ */ d("div", { children: [
+      g && h && /* @__PURE__ */ s("div", { style: v.divider, children: "•" }),
+      h && /* @__PURE__ */ d("div", { children: [
         /* @__PURE__ */ d("span", { style: v.divider, children: [
           y.loginText,
           " "
@@ -3131,11 +3133,11 @@ function Vr({
   onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: f,
+  className: h,
   verifyToken: g,
   frontendUrl: w
 }) {
-  const [c, I] = T(""), [p, x] = T(""), [R, F] = T(""), [E, A] = T(!1), [u, k] = T(!1), [m, M] = T(""), [L, D] = T(""), [P, U] = T({}), [l, N] = T(!1), { sendMagicLink: $, verifyMagicLink: h } = ue(), { tenant: C } = we(), S = { ...Yt, ...n }, b = { ...Xt, ...e };
+  const [c, I] = T(""), [p, x] = T(""), [R, F] = T(""), [E, A] = T(!1), [u, k] = T(!1), [m, M] = T(""), [L, D] = T(""), [P, U] = T({}), [l, N] = T(!1), { sendMagicLink: H, verifyMagicLink: f } = ue(), { tenant: C } = we(), S = { ...Yt, ...n }, b = { ...Xt, ...e };
   ee(() => {
     g && y(g);
   }, [g]);
@@ -3146,7 +3148,7 @@ function Vr({
     }
     k(!0), M("");
     try {
-      const W = await h({
+      const W = await f({
         token: q,
         email: c
         // tenantId inferred from context automatically
@@ -3169,7 +3171,7 @@ function Vr({
       }
       A(!0), M(""), D("");
       try {
-        const W = w || (typeof window < "u" ? window.location.origin : ""), B = await $({
+        const W = w || (typeof window < "u" ? window.location.origin : ""), B = await H({
           email: c,
           tenantId: C.id,
           frontendUrl: W,
@@ -3192,10 +3194,10 @@ function Vr({
     ...E || u ? b.buttonLoading : {},
     ...!c || E || u ? b.buttonDisabled : {}
   });
-  return u ? /* @__PURE__ */ d("div", { className: f, style: b.container, children: [
+  return u ? /* @__PURE__ */ d("div", { className: h, style: b.container, children: [
     /* @__PURE__ */ s("h2", { style: b.title, children: S.verifyingText }),
     /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ d("div", { className: f, style: b.container, children: [
+  ] }) : /* @__PURE__ */ d("div", { className: h, style: b.container, children: [
     /* @__PURE__ */ s("h2", { style: b.title, children: S.title }),
     /* @__PURE__ */ s("p", { style: b.description, children: S.description }),
     /* @__PURE__ */ d("form", { onSubmit: G, style: b.form, children: [
@@ -3453,7 +3455,7 @@ function jr({
   onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: f,
+  className: h,
   token: g,
   email: w,
   appId: c,
@@ -3551,7 +3553,7 @@ function jr({
         return null;
     }
   };
-  return /* @__PURE__ */ d("div", { style: k.container, className: f, children: [
+  return /* @__PURE__ */ d("div", { style: k.container, className: h, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
@@ -3684,10 +3686,10 @@ function Gr({
   onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: f,
+  onModeChange: h,
   className: g
 }) {
-  const [w, c] = T(""), [I, p] = T(r), [x, R] = T(""), [F, E] = T(""), [A, u] = T(!1), [k, m] = T(""), [M, L] = T(""), [D, P] = T({}), { requestPasswordReset: U, confirmPasswordReset: l } = ue(), { tenant: N } = we(), $ = { ...ir, ...n }, h = { ...or, ...e }, C = () => {
+  const [w, c] = T(""), [I, p] = T(r), [x, R] = T(""), [F, E] = T(""), [A, u] = T(!1), [k, m] = T(""), [M, L] = T(""), [D, P] = T({}), { requestPasswordReset: U, confirmPasswordReset: l } = ue(), { tenant: N } = we(), H = { ...ir, ...n }, f = { ...or, ...e }, C = () => {
     const O = {};
     return w.trim() || (O.email = !0), P(O), Object.keys(O).length === 0;
   }, S = () => {
@@ -3701,9 +3703,9 @@ function Gr({
       }
       u(!0), m(""), L("");
       try {
-        await U({ email: w, tenantId: N.id }), L($.successMessage), i == null || i();
+        await U({ email: w, tenantId: N.id }), L(H.successMessage), i == null || i();
       } catch (q) {
-        const W = q.message || $.errorMessage;
+        const W = q.message || H.errorMessage;
         m(W), o == null || o(W);
       } finally {
         u(!1);
@@ -3712,34 +3714,34 @@ function Gr({
   }, y = async (O) => {
     if (O.preventDefault(), !!S()) {
       if (x !== F) {
-        m($.passwordMismatchError), P({ confirmPassword: !0 });
+        m(H.passwordMismatchError), P({ confirmPassword: !0 });
         return;
       }
       u(!0), m(""), L("");
       try {
-        await l({ token: I, newPassword: x }), L($.resetSuccessMessage), i == null || i();
+        await l({ token: I, newPassword: x }), L(H.resetSuccessMessage), i == null || i();
       } catch (q) {
-        const W = q.message || $.errorMessage;
+        const W = q.message || H.errorMessage;
         m(W), o == null || o(W);
       } finally {
         u(!1);
       }
     }
   }, v = (O) => ({
-    ...h.input,
-    ...D[O] ? h.inputError : {}
+    ...f.input,
+    ...D[O] ? f.inputError : {}
   }), G = () => ({
-    ...h.button,
-    ...A ? h.buttonLoading : {}
+    ...f.button,
+    ...A ? f.buttonLoading : {}
   });
   if (t === "reset") {
     const O = I && x && F;
-    return /* @__PURE__ */ d("div", { className: g, style: h.container, children: [
-      /* @__PURE__ */ s("h2", { style: h.title, children: $.resetTitle }),
-      /* @__PURE__ */ s("p", { style: h.subtitle, children: $.resetSubtitle }),
-      /* @__PURE__ */ d("form", { onSubmit: y, style: h.form, children: [
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: h.label, children: $.tokenLabel }),
+    return /* @__PURE__ */ d("div", { className: g, style: f.container, children: [
+      /* @__PURE__ */ s("h2", { style: f.title, children: H.resetTitle }),
+      /* @__PURE__ */ s("p", { style: f.subtitle, children: H.resetSubtitle }),
+      /* @__PURE__ */ d("form", { onSubmit: y, style: f.form, children: [
+        /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: f.label, children: H.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -3748,14 +3750,14 @@ function Gr({
               onChange: (q) => {
                 p(q.target.value), D.token && P((W) => ({ ...W, token: !1 }));
               },
-              placeholder: $.tokenPlaceholder,
+              placeholder: H.tokenPlaceholder,
               style: v("token"),
               disabled: A
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: h.label, children: $.newPasswordLabel }),
+        /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: f.label, children: H.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -3764,23 +3766,23 @@ function Gr({
               onChange: (q) => {
                 R(q.target.value), D.newPassword && P((W) => ({ ...W, newPassword: !1 }));
               },
-              placeholder: $.newPasswordPlaceholder,
+              placeholder: H.newPasswordPlaceholder,
               style: v("newPassword"),
               disabled: A
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: h.label, children: $.confirmPasswordLabel }),
+        /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: f.label, children: H.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
               value: F,
               onChange: (q) => {
-                E(q.target.value), D.confirmPassword && P((W) => ({ ...W, confirmPassword: !1 })), k === $.passwordMismatchError && m("");
+                E(q.target.value), D.confirmPassword && P((W) => ({ ...W, confirmPassword: !1 })), k === H.passwordMismatchError && m("");
               },
-              placeholder: $.confirmPasswordPlaceholder,
+              placeholder: H.confirmPasswordPlaceholder,
               style: v("confirmPassword"),
               disabled: A
             }
@@ -3793,30 +3795,30 @@ function Gr({
             disabled: !O || A,
             style: {
               ...G(),
-              ...!O || A ? h.buttonDisabled : {}
+              ...!O || A ? f.buttonDisabled : {}
             },
-            children: A ? $.resetLoadingText : $.resetSubmitButton
+            children: A ? H.resetLoadingText : H.resetSubmitButton
           }
         ),
-        k && /* @__PURE__ */ s("div", { style: h.errorText, children: k }),
-        M && /* @__PURE__ */ s("div", { style: h.successText, children: M })
+        k && /* @__PURE__ */ s("div", { style: f.errorText, children: k }),
+        M && /* @__PURE__ */ s("div", { style: f.successText, children: M })
       ] }),
-      /* @__PURE__ */ d("div", { style: h.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: h.link, children: $.backToLoginLink }),
-        f && /* @__PURE__ */ d(_, { children: [
+      /* @__PURE__ */ d("div", { style: f.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: H.backToLoginLink }),
+        h && /* @__PURE__ */ d(_, { children: [
           /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ s("a", { onClick: () => f("request"), style: h.link, children: "Request New Link" })
+          /* @__PURE__ */ s("a", { onClick: () => h("request"), style: f.link, children: "Request New Link" })
         ] })
       ] })
     ] });
   }
   const Q = w;
-  return /* @__PURE__ */ d("div", { className: g, style: h.container, children: [
-    /* @__PURE__ */ s("h2", { style: h.title, children: $.title }),
-    /* @__PURE__ */ s("p", { style: h.subtitle, children: $.subtitle }),
-    /* @__PURE__ */ d("form", { onSubmit: b, style: h.form, children: [
-      /* @__PURE__ */ d("div", { style: h.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: h.label, children: $.emailLabel }),
+  return /* @__PURE__ */ d("div", { className: g, style: f.container, children: [
+    /* @__PURE__ */ s("h2", { style: f.title, children: H.title }),
+    /* @__PURE__ */ s("p", { style: f.subtitle, children: H.subtitle }),
+    /* @__PURE__ */ d("form", { onSubmit: b, style: f.form, children: [
+      /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: f.label, children: H.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -3825,7 +3827,7 @@ function Gr({
             onChange: (O) => {
               c(O.target.value), D.email && P((q) => ({ ...q, email: !1 }));
             },
-            placeholder: $.emailPlaceholder,
+            placeholder: H.emailPlaceholder,
             style: v("email"),
             disabled: A
           }
@@ -3838,19 +3840,19 @@ function Gr({
           disabled: !Q || A,
           style: {
             ...G(),
-            ...!Q || A ? h.buttonDisabled : {}
+            ...!Q || A ? f.buttonDisabled : {}
           },
-          children: A ? $.loadingText : $.submitButton
+          children: A ? H.loadingText : H.submitButton
         }
       ),
-      k && /* @__PURE__ */ s("div", { style: h.errorText, children: k }),
-      M && /* @__PURE__ */ s("div", { style: h.successText, children: M })
+      k && /* @__PURE__ */ s("div", { style: f.errorText, children: k }),
+      M && /* @__PURE__ */ s("div", { style: f.successText, children: M })
     ] }),
-    /* @__PURE__ */ d("div", { style: h.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: h.link, children: $.backToLoginLink }),
-      f && /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ d("div", { style: f.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: H.backToLoginLink }),
+      h && /* @__PURE__ */ d(_, { children: [
         /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ s("a", { onClick: () => f("reset"), style: h.link, children: "I have a token" })
+        /* @__PURE__ */ s("a", { onClick: () => h("reset"), style: f.link, children: "I have a token" })
       ] })
     ] })
   ] });
@@ -3907,9 +3909,9 @@ function Qr({
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = ke(), f = Pe(), g = Ce(), w = Je(), c = Ye(), I = (f == null ? void 0 : f.isTenantLoading) ?? !1, p = (f == null ? void 0 : f.tenantError) ?? null, x = (f == null ? void 0 : f.tenantSlug) ?? null, R = (f == null ? void 0 : f.retryTenant) ?? (() => {
-  }), F = (g == null ? void 0 : g.isAuthReady) ?? !0, E = (w == null ? void 0 : w.isReady) ?? !0, A = (c == null ? void 0 : c.isReady) ?? !0, u = r && f && x, L = i || u && I || g && !F || w && !E || c && !A, D = o || (u ? p : null), P = () => {
-    o && a(), p && f && R();
+  const { isAppLoading: i, appError: o, retryApp: a } = ke(), h = Pe(), g = Ce(), w = Je(), c = Ye(), I = (h == null ? void 0 : h.isTenantLoading) ?? !1, p = (h == null ? void 0 : h.tenantError) ?? null, x = (h == null ? void 0 : h.tenantSlug) ?? null, R = (h == null ? void 0 : h.retryTenant) ?? (() => {
+  }), F = (g == null ? void 0 : g.isAuthReady) ?? !0, E = (w == null ? void 0 : w.isReady) ?? !0, A = (c == null ? void 0 : c.isReady) ?? !0, u = r && h && x, L = i || u && I || g && !F || w && !E || c && !A, D = o || (u ? p : null), P = () => {
+    o && a(), p && h && R();
   };
   if (L)
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(ar, {}) });
@@ -3920,8 +3922,8 @@ function Qr({
   return /* @__PURE__ */ s(_, { children: n });
 }
 function Kr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = ke(), o = Pe(), a = Ce(), f = Je(), g = Ye(), w = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, I = (o == null ? void 0 : o.tenant) ?? null, p = (o == null ? void 0 : o.tenantSlug) ?? null, x = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), R = (a == null ? void 0 : a.isAuthReady) ?? !0, F = (f == null ? void 0 : f.isReady) ?? !0, E = (g == null ? void 0 : g.isReady) ?? !0, A = n && o && p, M = e || A && w || a && !R || f && !F || g && !E, L = t || (A ? c : null);
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = ke(), o = Pe(), a = Ce(), h = Je(), g = Ye(), w = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, I = (o == null ? void 0 : o.tenant) ?? null, p = (o == null ? void 0 : o.tenantSlug) ?? null, x = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), R = (a == null ? void 0 : a.isAuthReady) ?? !0, F = (h == null ? void 0 : h.isReady) ?? !0, E = (g == null ? void 0 : g.isReady) ?? !0, A = n && o && p, M = e || A && w || a && !R || h && !F || g && !E, L = t || (A ? c : null);
   return {
     isLoading: M,
     error: L,
@@ -3933,7 +3935,7 @@ function Kr(n = !0) {
     app: { isLoading: e, error: t, data: i },
     tenant: o ? { isLoading: w, error: c, data: I } : null,
     auth: a ? { isReady: R } : null,
-    featureFlags: f ? { isReady: F } : null,
+    featureFlags: h ? { isReady: F } : null,
     subscription: g ? { isReady: E } : null
   };
 }
@@ -3945,7 +3947,7 @@ function Zr({
   dropdownClassName: i = "",
   itemClassName: o = "",
   renderItem: a,
-  placeholder: f = "Select tenant",
+  placeholder: h = "Select tenant",
   disabled: g = !1,
   showCurrentTenant: w = !0
 }) {
@@ -3984,7 +3986,7 @@ function Zr({
           opacity: g ? 0.6 : 1
         },
         children: [
-          A ? A.name : f,
+          A ? A.name : h,
           /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: I ? "▲" : "▼" })
         ]
       }
@@ -4289,7 +4291,7 @@ function tn(n = {}) {
     zoneRoots: e = {},
     returnToParam: t = tt,
     returnToStorage: r = "url"
-  } = n, i = gt(), [o, a] = mt(), { isAuthenticated: f, currentUser: g } = ue(), { tenant: w } = ye(), c = Z(() => ({ ...He, ...e }), [e]), I = !!w, p = g == null ? void 0 : g.userType, x = Z(() => {
+  } = n, i = gt(), [o, a] = mt(), { isAuthenticated: h, currentUser: g } = ue(), { tenant: w } = ye(), c = Z(() => ({ ...He, ...e }), [e]), I = !!w, p = g == null ? void 0 : g.userType, x = Z(() => {
     switch (r) {
       case "url":
         return o.get(t);
@@ -4337,7 +4339,7 @@ function tn(n = {}) {
       i(k);
     },
     [i, c]
-  ), A = ie(() => I ? f ? p === ae.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : f ? p === ae.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [I, f, p, c]);
+  ), A = ie(() => I ? h ? p === ae.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : h ? p === ae.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [I, h, p, c]);
   return {
     returnToUrl: x,
     clearReturnTo: R,