@skylabs-digital/react-identity-access 2.23.0 → 2.25.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
 import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
-import { createContext as me, useMemo as Z, useState as T, useCallback as ie, useEffect as ee, useContext as le, useRef as Ke } from "react";
-import { useLocation as Ae, Navigate as Te, useNavigate as gt, useSearchParams as mt } from "react-router-dom";
-class ce {
+import { createContext as fe, useMemo as K, useState as k, useCallback as se, useEffect as re, useContext as ae, useRef as Me } from "react";
+import { useLocation as ke, Navigate as ve, useNavigate as pt, useSearchParams as ft } from "react-router-dom";
+class le {
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
   }
@@ -13,28 +13,28 @@ class ce {
   }
   async executeRequest(e, t, r, i) {
     const o = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, a = (i == null ? void 0 : i.timeout) || this.timeout;
-    let h = {
+    let p = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
-      const c = await this.sessionManager.getValidAccessToken();
-      h = { ...h, Authorization: `Bearer ${c}` };
+      const f = await this.sessionManager.getValidAccessToken();
+      p = { ...p, Authorization: `Bearer ${f}` };
     }
-    const g = new AbortController(), w = setTimeout(() => g.abort(), a);
+    const w = new AbortController(), y = setTimeout(() => w.abort(), a);
     try {
-      const c = await fetch(o, {
+      const f = await fetch(o, {
         method: e,
-        headers: h,
+        headers: p,
         body: r ? JSON.stringify(r) : void 0,
-        signal: g.signal
+        signal: w.signal
       });
-      if (clearTimeout(w), !c.ok)
-        throw new Error(`HTTP ${c.status}: ${c.statusText}`);
-      const I = c.headers.get("content-type");
-      return !I || !I.includes("application/json") ? {} : await c.json();
-    } catch (c) {
-      throw clearTimeout(w), c instanceof Error && c.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : c;
+      if (clearTimeout(y), !f.ok)
+        throw new Error(`HTTP ${f.status}: ${f.statusText}`);
+      const x = f.headers.get("content-type");
+      return !x || !x.includes("application/json") ? {} : await f.json();
+    } catch (f) {
+      throw clearTimeout(y), f instanceof Error && f.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : f;
     }
   }
   async get(e, t) {
@@ -50,7 +50,7 @@ class ce {
     return this.executeRequest("DELETE", e, void 0, t);
   }
 }
-class ze {
+class qe {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -109,32 +109,32 @@ class ze {
     })).data;
   }
 }
-const Fe = me(null);
-function yr({ config: n, children: e }) {
-  const t = Z(
+const Le = fe(null);
+function mr({ config: n, children: e }) {
+  const t = K(
     () => {
-      var p, x, R;
+      var h, R, N;
       return {
-        enabled: ((p = n.cache) == null ? void 0 : p.enabled) ?? !0,
-        ttl: ((x = n.cache) == null ? void 0 : x.ttl) ?? 3e5,
+        enabled: ((h = n.cache) == null ? void 0 : h.enabled) ?? !0,
+        ttl: ((R = n.cache) == null ? void 0 : R.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((R = n.cache) == null ? void 0 : R.storageKey) ?? `app_cache_${n.appId}`
+        storageKey: ((N = n.cache) == null ? void 0 : N.storageKey) ?? `app_cache_${n.appId}`
       };
     },
     [n.cache, n.appId]
-  ), [r, i] = T(() => {
+  ), [r, i] = k(() => {
     if (!t.enabled) return null;
     try {
-      const p = localStorage.getItem(t.storageKey);
-      if (!p) return null;
-      const x = JSON.parse(p);
-      return Date.now() - x.timestamp < t.ttl && x.appId === n.appId ? x.data : (localStorage.removeItem(t.storageKey), null);
+      const h = localStorage.getItem(t.storageKey);
+      if (!h) return null;
+      const R = JSON.parse(h);
+      return Date.now() - R.timestamp < t.ttl && R.appId === n.appId ? R.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = T(!r), [h, g] = T(null), w = Z(() => {
-    const p = () => {
-      c();
+  }), [o, a] = k(!r), [p, w] = k(null), y = K(() => {
+    const h = () => {
+      f();
     };
     return {
       appId: n.appId,
@@ -142,69 +142,69 @@ function yr({ config: n, children: e }) {
       // App info
       appInfo: r,
       isAppLoading: o,
-      appError: h,
-      retryApp: p
+      appError: p,
+      retryApp: h
     };
-  }, [n, r, o, h]), c = ie(
-    async (p = !1) => {
-      if (!(!p && t.enabled && r))
+  }, [n, r, o, p]), f = se(
+    async (h = !1) => {
+      if (!(!h && t.enabled && r))
         try {
-          a(!0), g(null);
-          const x = new ce(n.baseUrl), F = await new ze(x, {}).getPublicAppInfo(n.appId);
-          if (i(F), t.enabled)
+          a(!0), w(null);
+          const R = new le(n.baseUrl), D = await new qe(R, {}).getPublicAppInfo(n.appId);
+          if (i(D), t.enabled)
             try {
               const E = {
-                data: F,
+                data: D,
                 timestamp: Date.now(),
                 appId: n.appId
               };
               localStorage.setItem(t.storageKey, JSON.stringify(E));
             } catch (E) {
-              console.warn("Failed to cache app info:", E);
+              process.env.NODE_ENV === "development" && console.warn("[AppProvider] Failed to cache app info:", E);
             }
-        } catch (x) {
-          const R = x instanceof Error ? x : new Error("Failed to load app information");
-          g(R), i(null);
+        } catch (R) {
+          const N = R instanceof Error ? R : new Error("Failed to load app information");
+          w(N), i(null);
         } finally {
           a(!1);
         }
     },
     [n.baseUrl, n.appId, t, r]
-  ), I = ie(async () => {
+  ), x = se(async () => {
     if (!(!t.enabled || !r))
       try {
-        const p = localStorage.getItem(t.storageKey);
-        if (!p) return;
-        const x = JSON.parse(p);
-        if (Date.now() - x.timestamp > t.ttl * 0.5) {
-          const F = new ce(n.baseUrl), A = await new ze(F, {}).getPublicAppInfo(n.appId);
-          i(A);
+        const h = localStorage.getItem(t.storageKey);
+        if (!h) return;
+        const R = JSON.parse(h);
+        if (Date.now() - R.timestamp > t.ttl * 0.5) {
+          const D = new le(n.baseUrl), P = await new qe(D, {}).getPublicAppInfo(n.appId);
+          i(P);
           const u = {
-            data: A,
+            data: P,
             timestamp: Date.now(),
             appId: n.appId
           };
           localStorage.setItem(t.storageKey, JSON.stringify(u));
         }
-      } catch (p) {
-        console.warn("Background app refresh failed:", p);
+      } catch (h) {
+        process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", h);
       }
   }, [n, t, r]);
-  return ee(() => {
-    r ? I() : c();
-  }, []), /* @__PURE__ */ s(Fe.Provider, { value: w, children: e });
+  return re(() => {
+    r ? x() : f();
+  }, []), /* @__PURE__ */ s(Le.Provider, { value: y, children: e });
 }
-function ke() {
-  const n = le(Fe);
+function Se() {
+  const n = ae(Le);
   if (!n)
     throw new Error("useApp must be used within an AppProvider");
   return n;
 }
-function Ze() {
-  return le(Fe);
+function Qe() {
+  return ae(Le);
 }
-const wr = ke;
-class se extends Error {
+const yr = Se;
+class ne extends Error {
   constructor(e, t) {
     const r = {
       token_expired: "Refresh token has expired",
@@ -214,19 +214,19 @@ class se extends Error {
     super(t || r[e]), this.name = "SessionExpiredError", this.reason = e;
   }
 }
-class yt extends Error {
+class gt extends Error {
   constructor(e) {
     super(`Token refresh timed out after ${e}ms`), this.name = "TokenRefreshTimeoutError", this.timeoutMs = e;
   }
 }
-class wt extends Error {
+class mt extends Error {
   constructor(e, t) {
     super(
       `Token refresh failed after ${e} attempts: ${(t == null ? void 0 : t.message) || "Unknown error"}`
     ), this.name = "TokenRefreshError", this.attempts = e, this.lastError = t;
   }
 }
-const oe = class oe {
+const ie = class ie {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
   }
@@ -236,17 +236,17 @@ const oe = class oe {
    * Mutable config (callbacks, baseUrl) is updated on the existing instance.
    */
   static getInstance(e = {}) {
-    const t = oe.resolveStorageKey(e), r = oe.instances.get(t);
+    const t = ie.resolveStorageKey(e), r = ie.instances.get(t);
     if (r)
       return r.updateConfig(e), r;
-    const i = new oe(e);
-    return oe.instances.set(t, i), i;
+    const i = new ie(e);
+    return ie.instances.set(t, i), i;
   }
   /** Reset all singleton instances. For testing only. */
   static resetAllInstances() {
-    for (const e of oe.instances.values())
+    for (const e of ie.instances.values())
       e.destroy();
-    oe.instances.clear();
+    ie.instances.clear();
   }
   static resolveStorageKey(e) {
     return e.storageKey ? e.storageKey : e.tenantSlug !== void 0 && e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens";
@@ -296,7 +296,7 @@ const oe = class oe {
     }
   }
   setTokens(e) {
-    const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || oe.extractJwtExpiry(e.accessToken), r = {
+    const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || ie.extractJwtExpiry(e.accessToken), r = {
       ...e,
       expiresAt: t
     }, i = this.tokenStorage.get() || {};
@@ -306,7 +306,7 @@ const oe = class oe {
     const { accessToken: e, refreshToken: t, expiresAt: r, expiresIn: i, tokenType: o } = this.tokenStorage.get() || {};
     if (!e)
       return null;
-    const a = r || oe.extractJwtExpiry(e);
+    const a = r || ie.extractJwtExpiry(e);
     return {
       accessToken: e,
       refreshToken: t,
@@ -354,7 +354,7 @@ const oe = class oe {
     const t = this.sessionGeneration;
     this.startRefreshAndResolveQueue(e.refreshToken).then(() => {
     }).catch((r) => {
-      r instanceof se || this.sessionGeneration === t && (console.warn(
+      r instanceof ne || this.sessionGeneration === t && (process.env.NODE_ENV === "development" && console.warn(
         "[SessionManager] Background refresh failed, retrying in 30s:",
         r.message
       ), this.backgroundRetryTimerId = setTimeout(() => {
@@ -386,13 +386,13 @@ const oe = class oe {
   async getValidAccessToken() {
     const e = this.getTokens();
     if (!(e != null && e.accessToken)) {
-      const t = new se("token_invalid", "No tokens available");
+      const t = new ne("token_invalid", "No tokens available");
       throw this.handleSessionExpired(t), t;
     }
     if (!this.shouldRefreshToken(e) && !this.isTokenExpired(e))
       return e.accessToken;
     if (!e.refreshToken) {
-      const t = new se("token_invalid", "No refresh token available");
+      const t = new ne("token_invalid", "No refresh token available");
       throw this.handleSessionExpired(t), t;
     }
     return this.refreshPromise ? this.enqueueForToken() : this.startRefreshAndResolveQueue(e.refreshToken);
@@ -404,14 +404,14 @@ const oe = class oe {
     try {
       return { Authorization: `Bearer ${await this.getValidAccessToken()}` };
     } catch (e) {
-      return e instanceof se && this.onRefreshFailed && this.onRefreshFailed(), {};
+      return e instanceof ne && this.onRefreshFailed && this.onRefreshFailed(), {};
     }
   }
   enqueueForToken() {
     return new Promise((e, t) => {
       const r = setTimeout(() => {
         const i = this.refreshQueue.findIndex((o) => o.timeoutId === r);
-        i !== -1 && this.refreshQueue.splice(i, 1), t(new yt(this.refreshQueueTimeout));
+        i !== -1 && this.refreshQueue.splice(i, 1), t(new gt(this.refreshQueueTimeout));
       }, this.refreshQueueTimeout);
       this.refreshQueue.push({ resolve: e, reject: t, timeoutId: r });
     });
@@ -424,7 +424,7 @@ const oe = class oe {
       return this.resolveQueue(r), r;
     } catch (t) {
       const r = t instanceof Error ? t : new Error("Token refresh failed");
-      throw r instanceof se ? (this.rejectQueue(r), this.handleSessionExpired(r)) : this.rejectQueue(r), r;
+      throw r instanceof ne ? (this.rejectQueue(r), this.handleSessionExpired(r)) : this.rejectQueue(r), r;
     } finally {
       this.refreshPromise = null;
     }
@@ -447,21 +447,21 @@ const oe = class oe {
     const r = this.sessionGeneration;
     for (let i = 0; i <= this.maxRefreshRetries; i++) {
       if (this.sessionGeneration !== r)
-        throw new se("token_invalid", "Session cleared during refresh");
+        throw new ne("token_invalid", "Session cleared during refresh");
       try {
         await this.performTokenRefresh(e, r);
         return;
       } catch (o) {
         const a = o instanceof Error ? o : new Error(String(o));
-        if (a instanceof se)
+        if (a instanceof ne)
           throw a;
         if (t = a, i < this.maxRefreshRetries) {
-          const h = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(h);
+          const p = this.retryBackoffBase * Math.pow(2, i);
+          await this.sleep(p);
         }
       }
     }
-    throw new wt(this.maxRefreshRetries + 1, t);
+    throw new mt(this.maxRefreshRetries + 1, t);
   }
   /**
    * Single refresh attempt with error classification.
@@ -485,15 +485,15 @@ const oe = class oe {
     if (!i.ok) {
       let a = "";
       try {
-        const h = await i.json();
-        a = (h.message || h.error || "").toLowerCase();
+        const p = await i.json();
+        a = (p.message || p.error || "").toLowerCase();
       } catch {
         a = i.statusText.toLowerCase();
       }
-      throw i.status === 401 ? a.includes("expired") ? new se("token_expired") : a.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${a}`) : i.status === 400 ? a.includes("inactive") ? new se("user_inactive") : a.includes("expired") || a.includes("invalid") ? new se("token_invalid", a) : new Error(`Token refresh failed (400): ${a}`) : new Error(`Token refresh failed: ${i.status} ${a}`);
+      throw i.status === 401 ? a.includes("expired") ? new ne("token_expired") : a.includes("invalid") ? new ne("token_invalid") : new ne("token_invalid", `Unauthorized: ${a}`) : i.status === 400 ? a.includes("inactive") ? new ne("user_inactive") : a.includes("expired") || a.includes("invalid") ? new ne("token_invalid", a) : new Error(`Token refresh failed (400): ${a}`) : new Error(`Token refresh failed: ${i.status} ${a}`);
     }
     if (this.sessionGeneration !== t)
-      throw new se("token_invalid", "Session cleared during refresh");
+      throw new ne("token_invalid", "Session cleared during refresh");
     const o = await i.json();
     this.setTokens({
       accessToken: o.accessToken,
@@ -521,7 +521,7 @@ const oe = class oe {
   // --- Session lifecycle ---
   clearSession() {
     this.sessionGeneration++, this.cancelProactiveTimer(), this.clearTokens();
-    const e = new se("token_invalid", "Session cleared");
+    const e = new ne("token_invalid", "Session cleared");
     this.rejectQueue(e);
   }
   /**
@@ -529,8 +529,8 @@ const oe = class oe {
    * Cancels all timers and rejects pending queue entries.
    */
   destroy() {
-    this.isDestroyed = !0, oe.instances.delete(this.storageKey), this.cancelProactiveTimer();
-    const e = new se("token_invalid", "SessionManager destroyed");
+    this.isDestroyed = !0, ie.instances.delete(this.storageKey), this.cancelProactiveTimer();
+    const e = new ne("token_invalid", "SessionManager destroyed");
     this.rejectQueue(e);
   }
   // --- JWT helpers ---
@@ -568,9 +568,9 @@ const oe = class oe {
     return new Promise((t) => setTimeout(t, e));
   }
 };
-oe.instances = /* @__PURE__ */ new Map();
-let Se = oe;
-class bt {
+ie.instances = /* @__PURE__ */ new Map();
+let we = ie;
+class yt {
   constructor(e) {
     this.httpService = e;
   }
@@ -626,7 +626,7 @@ class bt {
     });
   }
 }
-class _e {
+class ze {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -702,7 +702,7 @@ class _e {
     };
   }
 }
-class St {
+class wt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -742,7 +742,7 @@ class St {
     });
   }
 }
-class ve {
+class be {
   constructor(e, t, r) {
     this.httpService = e, this.appId = t, this.sessionManager = r;
   }
@@ -820,7 +820,7 @@ class ve {
     )).data;
   }
 }
-function vt(n, e) {
+function bt(n, e) {
   if (n === "localhost" || n.startsWith("127.") || n.startsWith("192.168."))
     return null;
   if (e) {
@@ -836,26 +836,26 @@ function vt(n, e) {
   const r = n.split(".");
   return r.length >= 3 && r[0] !== "www" ? r[0] : null;
 }
-function Tt(n, e = "tenant", t) {
+function vt(n, e = "tenant", t) {
   const i = new URLSearchParams(n).get(e);
   return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
 }
-function kt(n, e, t) {
+function St(n, e, t) {
   const { tenantMode: r, baseDomain: i, selectorParam: o, fixedTenantSlug: a } = n;
-  return r === "fixed" ? a || null : r === "subdomain" ? vt(e.hostname, i) : r === "selector" ? Tt(e.search, o, t) : null;
+  return r === "fixed" ? a || null : r === "subdomain" ? bt(e.hostname, i) : r === "selector" ? vt(e.search, o, t) : null;
 }
-function xt(n, e, t) {
+function Tt(n, e, t) {
   if (t)
     return `${n}.${t}`;
   const r = e.split(".");
   return r.length === 2 ? `${n}.${e}` : r.length >= 3 ? (r[0] = n, r.join(".")) : null;
 }
-const ge = "_auth";
-function We(n) {
+const pe = "_auth";
+function _e(n) {
   const e = JSON.stringify(n);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function At(n) {
+function kt(n) {
   try {
     let e = n.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
@@ -866,34 +866,20 @@ function At(n) {
     return null;
   }
 }
-function Pt() {
+function xt() {
   if (typeof window > "u")
-    return console.log("[CrossDomainAuth] SSR environment, skipping URL token extraction"), null;
-  const e = new URLSearchParams(window.location.search).get(ge);
-  if (console.log("[CrossDomainAuth] extractAuthTokensFromUrl called", {
-    hasAuthParam: !!e,
-    searchParams: window.location.search,
-    encodedLength: e == null ? void 0 : e.length
-  }), !e) return null;
-  const t = At(e);
-  return console.log("[CrossDomainAuth] Token decode result:", {
-    success: !!t,
-    hasAccessToken: !!(t != null && t.accessToken),
-    hasRefreshToken: !!(t != null && t.refreshToken),
-    expiresIn: t == null ? void 0 : t.expiresIn
-  }), t;
+    return null;
+  const e = new URLSearchParams(window.location.search).get(pe);
+  return e ? kt(e) : null;
 }
-function Rt() {
+function At() {
   if (typeof window > "u") return;
   const n = new URL(window.location.href);
-  n.searchParams.delete(ge), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
-    oldUrl: window.location.href,
-    newUrl: n.toString()
-  }), window.history.replaceState({}, "", n.toString());
+  n.searchParams.delete(pe), window.history.replaceState({}, "", n.toString());
 }
-const De = me(null);
-function br({ config: n, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: i } = ke(), o = ie(() => typeof window > "u" ? null : kt(
+const Ne = fe(null);
+function wr({ config: n, children: e }) {
+  const { baseUrl: t, appInfo: r, appId: i } = Se(), o = se(() => typeof window > "u" ? null : St(
     {
       tenantMode: n.tenantMode || "selector",
       baseDomain: n.baseDomain,
@@ -905,119 +891,119 @@ function br({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, h] = T(() => o()), g = Z(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, p] = k(() => o()), w = K(
     () => {
-      var f, C, S;
+      var c, H, I;
       return {
-        enabled: ((f = n.cache) == null ? void 0 : f.enabled) ?? !0,
-        ttl: ((C = n.cache) == null ? void 0 : C.ttl) ?? 5 * 60 * 1e3,
+        enabled: ((c = n.cache) == null ? void 0 : c.enabled) ?? !0,
+        ttl: ((H = n.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((S = n.cache) == null ? void 0 : S.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((I = n.cache) == null ? void 0 : I.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [n.cache, a]
-  ), [w, c] = T(() => {
+  ), [y, f] = k(() => {
     if (n.initialTenant) return n.initialTenant;
-    if (!g.enabled || !a) return null;
+    if (!w.enabled || !a) return null;
     try {
-      const f = localStorage.getItem(g.storageKey);
-      if (!f) return null;
-      const C = JSON.parse(f);
-      return Date.now() - C.timestamp < g.ttl && C.tenantSlug === a ? C.data : (localStorage.removeItem(g.storageKey), null);
+      const c = localStorage.getItem(w.storageKey);
+      if (!c) return null;
+      const H = JSON.parse(c);
+      return Date.now() - H.timestamp < w.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(w.storageKey), null);
     } catch {
       return null;
     }
-  }), [I, p] = T(!w && !n.initialTenant), [x, R] = T(null), [F, E] = T(null), [A, u] = T(!1), [k, m] = T(null);
-  ee(() => {
+  }), [x, h] = k(!y && !n.initialTenant), [R, N] = k(null), [D, E] = k(null), [P, u] = k(!1), [S, C] = k(null);
+  re(() => {
     if (n.tenantMode === "fixed") return;
-    const f = o();
-    h(f);
+    const c = o();
+    p(c);
   }, [o, n.tenantMode]);
-  const M = (r == null ? void 0 : r.settingsSchema) || null, L = ie(
-    async (f, C = !1) => {
-      if (!(!C && g.enabled && w && w.domain === f))
+  const M = (r == null ? void 0 : r.settingsSchema) || null, T = se(
+    async (c, H = !1) => {
+      if (!(!H && w.enabled && y && y.domain === c))
         try {
-          p(!0), R(null);
-          const S = new ce(t), y = await new ve(S, i).getPublicTenantInfo(f);
-          if (c(y), g.enabled)
+          h(!0), N(null);
+          const I = new le(t), m = await new be(I, i).getPublicTenantInfo(c);
+          if (f(m), w.enabled)
             try {
               const v = {
-                data: y,
+                data: m,
                 timestamp: Date.now(),
-                tenantSlug: f
+                tenantSlug: c
               };
-              localStorage.setItem(g.storageKey, JSON.stringify(v));
+              localStorage.setItem(w.storageKey, JSON.stringify(v));
             } catch (v) {
-              console.warn("Failed to cache tenant info:", v);
+              process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", v);
             }
-        } catch (S) {
-          const b = S instanceof Error ? S : new Error("Failed to load tenant information");
-          R(b), c(null);
+        } catch (I) {
+          const g = I instanceof Error ? I : new Error("Failed to load tenant information");
+          N(g), f(null);
         } finally {
-          p(!1);
+          h(!1);
         }
     },
-    [t, i, g, w]
-  ), D = ie(async () => {
-    if (!(!g.enabled || !w || !a))
+    [t, i, w, y]
+  ), $ = se(async () => {
+    if (!(!w.enabled || !y || !a))
       try {
-        const f = localStorage.getItem(g.storageKey);
-        if (!f) return;
-        const C = JSON.parse(f);
-        if (Date.now() - C.timestamp > g.ttl * 0.5) {
-          const b = new ce(t), v = await new ve(b, i).getPublicTenantInfo(a);
-          c(v);
-          const G = {
+        const c = localStorage.getItem(w.storageKey);
+        if (!c) return;
+        const H = JSON.parse(c);
+        if (Date.now() - H.timestamp > w.ttl * 0.5) {
+          const g = new le(t), v = await new be(g, i).getPublicTenantInfo(a);
+          f(v);
+          const Q = {
             data: v,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(g.storageKey, JSON.stringify(G));
+          localStorage.setItem(w.storageKey, JSON.stringify(Q));
         }
-      } catch (f) {
-        console.warn("Background tenant refresh failed:", f);
+      } catch (c) {
+        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", c);
       }
-  }, [t, i, g, w, a]), P = ie(async () => {
-    if (w != null && w.id)
+  }, [t, i, w, y, a]), l = se(async () => {
+    if (y != null && y.id)
       try {
-        u(!0), m(null);
-        const f = new ce(t), S = await new ve(f, w.appId).getTenantSettings(w.id);
-        E(S);
-      } catch (f) {
-        const C = f instanceof Error ? f : new Error("Failed to load tenant settings");
-        m(C), E(null);
+        u(!0), C(null);
+        const c = new le(t), I = await new be(c, y.appId).getTenantSettings(y.id);
+        E(I);
+      } catch (c) {
+        const H = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        C(H), E(null);
       } finally {
         u(!1);
       }
-  }, [t, w]), U = ie(() => {
-    P();
-  }, [P]), l = ie(
-    (f) => {
+  }, [t, y]), U = se(() => {
+    l();
+  }, [l]), b = se(
+    (c) => {
       if (!M)
         return { isValid: !0, errors: [] };
-      const C = [];
+      const H = [];
       try {
-        return M.properties && Object.entries(M.properties).forEach(([S, b]) => {
+        return M.properties && Object.entries(M.properties).forEach(([I, g]) => {
           var v;
-          const y = f[S];
-          if ((v = M.required) != null && v.includes(S) && y == null) {
-            C.push(`Field '${S}' is required`);
+          const m = c[I];
+          if ((v = M.required) != null && v.includes(I) && m == null) {
+            H.push(`Field '${I}' is required`);
             return;
           }
-          if (y != null) {
-            if (b.type) {
-              const G = b.type, Q = typeof y;
-              G === "string" && Q !== "string" ? C.push(`Field '${S}' must be a string`) : (G === "number" || G === "integer") && Q !== "number" ? C.push(`Field '${S}' must be a number`) : G === "boolean" && Q !== "boolean" ? C.push(`Field '${S}' must be a boolean`) : G === "array" && !Array.isArray(y) && C.push(`Field '${S}' must be an array`);
+          if (m != null) {
+            if (g.type) {
+              const Q = g.type, J = typeof m;
+              Q === "string" && J !== "string" ? H.push(`Field '${I}' must be a string`) : (Q === "number" || Q === "integer") && J !== "number" ? H.push(`Field '${I}' must be a number`) : Q === "boolean" && J !== "boolean" ? H.push(`Field '${I}' must be a boolean`) : Q === "array" && !Array.isArray(m) && H.push(`Field '${I}' must be an array`);
             }
-            b.minLength !== void 0 && typeof y == "string" && y.length < b.minLength && C.push(
-              `Field '${S}' must be at least ${b.minLength} characters long`
-            ), b.maxLength !== void 0 && typeof y == "string" && y.length > b.maxLength && C.push(
-              `Field '${S}' must be no more than ${b.maxLength} characters long`
-            ), b.minimum !== void 0 && typeof y == "number" && y < b.minimum && C.push(`Field '${S}' must be at least ${b.minimum}`), b.maximum !== void 0 && typeof y == "number" && y > b.maximum && C.push(`Field '${S}' must be no more than ${b.maximum}`), b.pattern && typeof y == "string" && (new RegExp(b.pattern).test(y) || C.push(`Field '${S}' does not match the required pattern`)), b.enum && !b.enum.includes(y) && C.push(`Field '${S}' must be one of: ${b.enum.join(", ")}`);
+            g.minLength !== void 0 && typeof m == "string" && m.length < g.minLength && H.push(
+              `Field '${I}' must be at least ${g.minLength} characters long`
+            ), g.maxLength !== void 0 && typeof m == "string" && m.length > g.maxLength && H.push(
+              `Field '${I}' must be no more than ${g.maxLength} characters long`
+            ), g.minimum !== void 0 && typeof m == "number" && m < g.minimum && H.push(`Field '${I}' must be at least ${g.minimum}`), g.maximum !== void 0 && typeof m == "number" && m > g.maximum && H.push(`Field '${I}' must be no more than ${g.maximum}`), g.pattern && typeof m == "string" && (new RegExp(g.pattern).test(m) || H.push(`Field '${I}' does not match the required pattern`)), g.enum && !g.enum.includes(m) && H.push(`Field '${I}' must be one of: ${g.enum.join(", ")}`);
           }
         }), {
-          isValid: C.length === 0,
-          errors: C
+          isValid: H.length === 0,
+          errors: H
         };
       } catch {
         return {
@@ -1028,96 +1014,96 @@ function br({ config: n, children: e }) {
     },
     [M]
   );
-  ee(() => {
-    !n.initialTenant && a ? w ? D() : L(a) : !n.initialTenant && !a && (c(null), R(null), p(!1));
-  }, [n.initialTenant, a, w, L, D]), ee(() => {
-    w != null && w.id ? P() : (E(null), m(null), u(!1));
-  }, [w == null ? void 0 : w.id, P]);
-  const N = ie(
-    (f, C) => {
-      const { mode: S = "reload", tokens: b, redirectPath: y } = C || {}, v = n.tenantMode || "selector";
+  re(() => {
+    !n.initialTenant && a ? y ? $() : T(a) : !n.initialTenant && !a && (f(null), N(null), h(!1));
+  }, [n.initialTenant, a, y, T, $]), re(() => {
+    y != null && y.id ? l() : (E(null), C(null), u(!1));
+  }, [y == null ? void 0 : y.id, l]);
+  const L = se(
+    (c, H) => {
+      const { mode: I = "reload", tokens: g, redirectPath: m } = H || {}, v = n.tenantMode || "selector";
       if (v === "fixed") {
-        console.warn(
+        process.env.NODE_ENV === "development" && console.warn(
           "[TenantProvider] switchTenant is a no-op in fixed mode. Tenant is always:",
           n.fixedTenantSlug
-        ), y && (window.location.href = y);
+        ), m && (window.location.href = m);
         return;
       }
-      if (localStorage.setItem("tenant", f), v === "subdomain") {
-        const G = window.location.hostname, Q = xt(
-          f,
-          G,
+      if (localStorage.setItem("tenant", c), v === "subdomain") {
+        const Q = window.location.hostname, J = Tt(
+          c,
+          Q,
           n.baseDomain
         );
-        if (!Q) {
-          console.warn(
+        if (!J) {
+          process.env.NODE_ENV === "development" && console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            G
+            Q
           );
           return;
         }
-        const O = y || window.location.pathname, q = new URL(`${window.location.protocol}//${Q}${O}`);
-        new URLSearchParams(window.location.search).forEach((B, X) => {
-          X !== ge && q.searchParams.set(X, B);
-        }), b && q.searchParams.set(ge, We(b)), window.location.href = q.toString();
+        const O = m || window.location.pathname, q = new URL(`${window.location.protocol}//${J}${O}`);
+        new URLSearchParams(window.location.search).forEach((A, V) => {
+          V !== pe && q.searchParams.set(V, A);
+        }), g && q.searchParams.set(pe, _e(g)), window.location.href = q.toString();
       } else if (v === "selector") {
-        const G = y || window.location.pathname, Q = new URLSearchParams(window.location.search);
-        if (Q.set(n.selectorParam || "tenant", f), Q.delete(ge), b && Q.set(ge, We(b)), S === "reload") {
-          const O = `${G}?${Q.toString()}${window.location.hash}`;
+        const Q = m || window.location.pathname, J = new URLSearchParams(window.location.search);
+        if (J.set(n.selectorParam || "tenant", c), J.delete(pe), g && J.set(pe, _e(g)), I === "reload") {
+          const O = `${Q}?${J.toString()}${window.location.hash}`;
           window.location.href = O;
         } else {
-          const O = `${G}?${Q.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", O), h(f), L(f);
+          const O = `${Q}?${J.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", O), p(c), T(c);
         }
       }
     },
-    [n.tenantMode, n.selectorParam, n.baseDomain, L]
-  ), H = Z(() => ({
+    [n.tenantMode, n.selectorParam, n.baseDomain, T]
+  ), F = K(() => ({
     // Tenant info
-    tenant: w,
+    tenant: y,
     tenantSlug: a,
-    isTenantLoading: I,
-    tenantError: x,
+    isTenantLoading: x,
+    tenantError: R,
     retryTenant: () => {
-      a && L(a);
+      a && T(a);
     },
     // Settings
-    settings: F,
+    settings: D,
     settingsSchema: M,
-    isSettingsLoading: A,
-    settingsError: k,
+    isSettingsLoading: P,
+    settingsError: S,
     // Actions
     refreshSettings: U,
-    switchTenant: N,
+    switchTenant: L,
     // Validation
-    validateSettings: l
+    validateSettings: b
   }), [
-    w,
+    y,
     a,
-    I,
     x,
-    F,
+    R,
+    D,
     M,
-    A,
-    k,
+    P,
+    S,
     U,
-    N,
-    l
+    L,
+    b
   ]);
-  return /* @__PURE__ */ s(De.Provider, { value: H, children: e });
+  return /* @__PURE__ */ s(Ne.Provider, { value: F, children: e });
 }
-function ye() {
-  const n = le(De);
+function ge() {
+  const n = ae(Ne);
   if (!n)
     throw new Error("useTenant must be used within a TenantProvider");
   return n;
 }
-function Pe() {
-  return le(De);
+function xe() {
+  return ae(Ne);
 }
-const Sr = ye;
+const br = ge;
 function vr() {
-  const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = ye();
+  const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = ge();
   return {
     settings: n,
     settingsSchema: e,
@@ -1126,8 +1112,8 @@ function vr() {
     validateSettings: i
   };
 }
-function we() {
-  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = ye();
+function me() {
+  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = ge();
   return {
     tenant: n,
     tenantSlug: e,
@@ -1136,318 +1122,314 @@ function we() {
     retry: i
   };
 }
-const Ne = me(null);
-function Tr({ config: n = {}, children: e }) {
-  const { appId: t, baseUrl: r } = ke(), { tenant: i, tenantSlug: o, switchTenant: a } = ye(), [h, g] = T(n.initialRoles || []), [w, c] = T(!n.initialRoles), [I, p] = T(null), [x, R] = T(!1), [F, E] = T(null), [A, u] = T(0), [k, m] = T(() => {
+const De = fe(null);
+function Sr({ config: n = {}, children: e }) {
+  const { appId: t, baseUrl: r } = Se(), { tenant: i, tenantSlug: o, switchTenant: a } = ge(), [p, w] = k(n.initialRoles || []), [y, f] = k(!n.initialRoles), [x, h] = k(null), [R, N] = k(!1), [D, E] = k(null), [P, u] = k(() => {
     try {
-      const V = localStorage.getItem("userTenants");
-      return V ? JSON.parse(V) : [];
+      const A = localStorage.getItem("userTenants");
+      return A ? JSON.parse(A) : [];
     } catch {
       return [];
     }
-  }), [M, L] = T(!1), D = Ke({ done: !1, urlTokens: null });
-  D.current.done || (D.current.done = !0, D.current.urlTokens = Pt(), D.current.urlTokens && console.log(
-    "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
-  ));
-  const [P, U] = T(() => {
-    const V = D.current.urlTokens !== null;
-    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", V), V;
-  }), l = Z(() => {
-    const V = Se.getInstance({
+  }), [S, C] = k(!1), M = Me({ done: !1, urlTokens: null });
+  M.current.done || (M.current.done = !0, M.current.urlTokens = xt());
+  const [T, $] = k(() => M.current.urlTokens !== null), l = K(() => {
+    const A = we.getInstance({
       tenantSlug: o,
       baseUrl: r,
       refreshQueueTimeout: n.refreshQueueTimeout,
       proactiveRefreshMargin: n.proactiveRefreshMargin,
-      onSessionExpired: (he) => {
-        p(null), E(null), m([]), L(!1);
+      onSessionExpired: (V) => {
+        h(null), E(null), u([]), C(!1);
         try {
           localStorage.removeItem("userTenants");
         } catch {
         }
-        n.onSessionExpired ? n.onSessionExpired(he) : n.onRefreshFailed && n.onRefreshFailed();
+        n.onSessionExpired ? n.onSessionExpired(V) : n.onRefreshFailed && n.onRefreshFailed();
       }
     });
-    return D.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), V.setTokens({
-      accessToken: D.current.urlTokens.accessToken,
-      refreshToken: D.current.urlTokens.refreshToken,
-      expiresIn: D.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", V.hasValidSession())), V;
-  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [N, H] = T(() => {
-    if (D.current.urlTokens) return !1;
-    const V = l.getTokens();
-    return V ? l.hasValidSession() || !!V.refreshToken : !1;
-  }), f = D.current.done && !P && !N, C = Z(() => {
-    const V = new ce(r);
-    return V.setSessionManager(l), V;
-  }, [r, l]), S = Z(() => new bt(new ce(r)), [r]), b = Z(() => new St(C, l), [C, l]), y = Z(() => new _e(new ce(r)), [r]), v = Z(() => I || l.getUser(), [I, l]), G = Z(() => v != null && v.roleId && h.find((V) => V.id === v.roleId) || null, [v, h]), Q = Z(() => (G == null ? void 0 : G.permissions) || [], [G]), O = Z(() => l.hasValidSession() && I !== null, [l, I]), q = 5 * 60 * 1e3, W = Z(() => {
-    const V = async ($ = !1) => {
+    return M.current.urlTokens && A.setTokens({
+      accessToken: M.current.urlTokens.accessToken,
+      refreshToken: M.current.urlTokens.refreshToken,
+      expiresIn: M.current.urlTokens.expiresIn
+    }), A;
+  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [U, b] = k(() => {
+    if (M.current.urlTokens) return !1;
+    const A = l.getTokens();
+    return A ? l.hasValidSession() || !!A.refreshToken : !1;
+  }), L = M.current.done && !T && !U, F = K(() => {
+    const A = new le(r);
+    return A.setSessionManager(l), A;
+  }, [r, l]), c = K(() => new yt(new le(r)), [r]), H = K(() => new wt(F, l), [F, l]), I = K(() => new ze(new le(r)), [r]), g = K(() => x || l.getUser(), [x, l]), m = K(() => g != null && g.roleId && p.find((A) => A.id === g.roleId) || null, [g, p]), v = K(() => (m == null ? void 0 : m.permissions) || [], [m]), Q = K(() => l.hasValidSession() && x !== null, [l, x]), J = Me(async () => {
+  }), O = K(() => {
+    const A = async (B = !1) => {
       try {
-        if (!l.hasValidSession())
+        if (!l.hasValidSession() || !B && x)
           return;
-        const z = Date.now();
-        if (!$ && z - A < q && I)
-          return;
-        const j = l.getUserId();
-        if (!j) {
-          console.warn("[AuthProvider] No userId available in token or storage");
+        const z = l.getUserId();
+        if (!z) {
+          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        R(!0), E(null);
-        const J = await b.getUserById(j);
-        p(J), l.setUser(J), u(Date.now());
+        N(!0), E(null);
+        const Z = await H.getUserById(z);
+        h(Z), l.setUser(Z);
       } catch (z) {
-        const Y = z instanceof Error ? z : new Error("Failed to load user data");
-        E(Y), console.error("[AuthProvider] Failed to load user data:", Y);
+        const Z = z instanceof Error ? z : new Error("Failed to load user data");
+        E(Z), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", Z);
       } finally {
-        R(!1);
+        N(!1);
       }
-    }, he = async () => {
-      await V();
-    }, fe = async ($) => {
-      var qe;
-      const { username: z, password: Y, tenantSlug: j, redirectPath: J } = $;
-      let te = i == null ? void 0 : i.id, re = o, ne = l;
-      j && (te = (await new ve(C, t).getPublicTenantInfo(j)).id, re = j);
-      const K = await S.login({
+    }, V = async () => {
+      await A();
+    }, de = async (B) => {
+      var Be;
+      const { username: z, password: Z, tenantSlug: W, redirectPath: Y } = B;
+      let X = i == null ? void 0 : i.id, ee = o, te = l;
+      W && (X = (await new be(F, t).getPublicTenantInfo(W)).id, ee = W);
+      const G = await c.login({
         username: z,
-        password: Y,
+        password: Z,
         appId: t,
-        tenantId: te
-      }), be = j && j !== o;
-      if (be && (ne = new Se({
-        tenantSlug: re,
+        tenantId: X
+      }), ye = W && W !== o;
+      if (ye && (te = new we({
+        tenantSlug: ee,
         baseUrl: r
-      })), ne.setTokens({
-        accessToken: K.accessToken,
-        refreshToken: K.refreshToken,
-        expiresIn: K.expiresIn
-      }), K.user) {
-        ne.setUser(K.user), p(K.user);
+      })), te.setTokens({
+        accessToken: G.accessToken,
+        refreshToken: G.refreshToken,
+        expiresIn: G.expiresIn
+      }), G.user) {
+        te.setUser(G.user), h(G.user);
         try {
-          await V();
-        } catch (xe) {
-          console.warn("Failed to load complete user data after login:", xe);
+          await A();
+        } catch (Te) {
+          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", Te);
         }
       }
-      if (K.tenants && K.tenants.length > 0) {
-        m(K.tenants);
+      if (G.tenants && G.tenants.length > 0) {
+        u(G.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(K.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(G.tenants));
         } catch {
         }
       }
-      const Ie = ((qe = K.user) == null ? void 0 : qe.tenantId) !== null;
-      L(Ie);
-      const Ee = {
-        accessToken: K.accessToken,
-        refreshToken: K.refreshToken,
-        expiresIn: K.expiresIn
+      const Pe = ((Be = G.user) == null ? void 0 : Be.tenantId) !== null;
+      C(Pe);
+      const Re = {
+        accessToken: G.accessToken,
+        refreshToken: G.refreshToken,
+        expiresIn: G.expiresIn
       };
-      if (be && re)
-        return a(re, { tokens: Ee, redirectPath: J }), K;
-      if (J && J !== window.location.pathname)
-        return a(re || o || "", { tokens: Ee, redirectPath: J }), K;
-      if (!Ie && K.tenants && K.tenants.length > 0) {
-        const xe = $.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
-        if (K.tenants.length === 1 && xe) {
-          const Oe = K.tenants[0];
-          return a(Oe.subdomain, { tokens: Ee, redirectPath: J }), K;
-        } else K.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(K.tenants);
+      if (ye && ee)
+        return a(ee, { tokens: Re, redirectPath: Y }), G;
+      if (Y && Y !== window.location.pathname)
+        return a(ee || o || "", { tokens: Re, redirectPath: Y }), G;
+      if (!Pe && G.tenants && G.tenants.length > 0) {
+        const Te = B.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
+        if (G.tenants.length === 1 && Te) {
+          const Oe = G.tenants[0];
+          return a(Oe.subdomain, { tokens: Re, redirectPath: Y }), G;
+        } else G.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(G.tenants);
       }
-      return K;
-    }, pe = async ($) => {
-      const { email: z, phoneNumber: Y, name: j, password: J, lastName: te, tenantId: re } = $;
-      if (!z && !Y)
+      return G;
+    }, he = async (B) => {
+      const { email: z, phoneNumber: Z, name: W, password: Y, lastName: X, tenantId: ee } = B;
+      if (!z && !Z)
         throw new Error("Either email or phoneNumber is required");
-      if (!j || !J)
+      if (!W || !Y)
         throw new Error("Name and password are required");
-      const ne = re ?? (i == null ? void 0 : i.id);
-      return await S.signup({
+      const te = ee ?? (i == null ? void 0 : i.id);
+      return await c.signup({
         email: z,
-        phoneNumber: Y,
-        name: j,
-        password: J,
-        tenantId: ne,
-        lastName: te,
+        phoneNumber: Z,
+        name: W,
+        password: Y,
+        tenantId: te,
+        lastName: X,
         appId: t
       });
-    }, rt = async ($) => {
-      const { email: z, phoneNumber: Y, name: j, password: J, tenantName: te, lastName: re } = $;
-      if (!z && !Y)
+    }, et = async (B) => {
+      const { email: z, phoneNumber: Z, name: W, password: Y, tenantName: X, lastName: ee } = B;
+      if (!z && !Z)
         throw new Error("Either email or phoneNumber is required");
-      if (!j || !J || !te)
+      if (!W || !Y || !X)
         throw new Error("Name, password, and tenantName are required");
-      return await S.signupTenantAdmin({
+      return await c.signupTenantAdmin({
         email: z,
-        phoneNumber: Y,
-        name: j,
-        password: J,
-        tenantName: te,
+        phoneNumber: Z,
+        name: W,
+        password: Y,
+        tenantName: X,
         appId: t,
-        lastName: re
+        lastName: ee
       });
-    }, nt = async ($) => {
-      const { currentPassword: z, newPassword: Y } = $, j = await l.getAuthHeaders();
-      await S.changePassword({ currentPassword: z, newPassword: Y }, j);
-    }, st = async ($) => {
-      const { email: z, tenantId: Y } = $, j = Y ?? (i == null ? void 0 : i.id);
-      if (!j)
+    }, tt = async (B) => {
+      const { currentPassword: z, newPassword: Z } = B, W = await l.getAuthHeaders();
+      await c.changePassword({ currentPassword: z, newPassword: Z }, W);
+    }, rt = async (B) => {
+      const { email: z, tenantId: Z } = B, W = Z ?? (i == null ? void 0 : i.id);
+      if (!W)
         throw new Error("tenantId is required for password reset");
-      await S.requestPasswordReset({ email: z, tenantId: j });
-    }, it = async ($) => {
-      const { token: z, newPassword: Y } = $;
-      await S.confirmPasswordReset({ token: z, newPassword: Y });
-    }, ot = async ($) => {
-      const { email: z, frontendUrl: Y, name: j, lastName: J, tenantId: te } = $, re = te ?? (i == null ? void 0 : i.id);
-      if (!re)
+      await c.requestPasswordReset({ email: z, tenantId: W });
+    }, nt = async (B) => {
+      const { token: z, newPassword: Z } = B;
+      await c.confirmPasswordReset({ token: z, newPassword: Z });
+    }, st = async (B) => {
+      const { email: z, frontendUrl: Z, name: W, lastName: Y, tenantId: X } = B, ee = X ?? (i == null ? void 0 : i.id);
+      if (!ee)
         throw new Error("tenantId is required for magic link authentication");
-      return await S.sendMagicLink({
+      return await c.sendMagicLink({
         email: z,
-        tenantId: re,
-        frontendUrl: Y,
-        name: j,
-        lastName: J,
+        tenantId: ee,
+        frontendUrl: Z,
+        name: W,
+        lastName: Y,
         appId: t
       });
-    }, at = async ($) => {
-      const { token: z, email: Y, tenantSlug: j } = $;
-      let J = i == null ? void 0 : i.id, te = o, re = l;
-      j && (J = (await new ve(C, t).getPublicTenantInfo(j)).id, te = j);
-      const ne = await S.verifyMagicLink({
+    }, it = async (B) => {
+      const { token: z, email: Z, tenantSlug: W } = B;
+      let Y = i == null ? void 0 : i.id, X = o, ee = l;
+      W && (Y = (await new be(F, t).getPublicTenantInfo(W)).id, X = W);
+      const te = await c.verifyMagicLink({
         token: z,
-        email: Y,
+        email: Z,
         appId: t,
-        tenantId: J
-      }), K = j && j !== o;
-      if (K && (re = new Se({
-        tenantSlug: te,
+        tenantId: Y
+      }), G = W && W !== o;
+      if (G && (ee = new we({
+        tenantSlug: X,
         baseUrl: r
-      })), re.setTokens({
-        accessToken: ne.accessToken,
-        refreshToken: ne.refreshToken,
-        expiresIn: ne.expiresIn
-      }), ne.user) {
-        re.setUser(ne.user), p(ne.user);
+      })), ee.setTokens({
+        accessToken: te.accessToken,
+        refreshToken: te.refreshToken,
+        expiresIn: te.expiresIn
+      }), te.user) {
+        ee.setUser(te.user), h(te.user);
         try {
-          await V();
-        } catch (be) {
-          console.warn("Failed to load complete user data after magic link login:", be);
+          await A();
+        } catch (ye) {
+          process.env.NODE_ENV === "development" && console.warn(
+            "[AuthProvider] Failed to load complete user data after magic link:",
+            ye
+          );
         }
       }
-      return K && te && te !== o && a(te, {
+      return G && X && X !== o && a(X, {
         tokens: {
-          accessToken: ne.accessToken,
-          refreshToken: ne.refreshToken,
-          expiresIn: ne.expiresIn
+          accessToken: te.accessToken,
+          refreshToken: te.refreshToken,
+          expiresIn: te.expiresIn
         }
-      }), ne;
-    }, lt = async () => {
-      const $ = l.getTokens();
-      if (!($ != null && $.refreshToken))
+      }), te;
+    }, ot = async () => {
+      const B = l.getTokens();
+      if (!(B != null && B.refreshToken))
         throw new Error("No refresh token available");
-      const z = await S.refreshToken({
-        refreshToken: $.refreshToken
+      const z = await c.refreshToken({
+        refreshToken: B.refreshToken
       });
       l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || $.refreshToken,
+        refreshToken: z.refreshToken || B.refreshToken,
         expiresIn: z.expiresIn
       });
-    }, ct = () => {
-      l.clearSession(), p(null), E(null), m([]), L(!1);
+    }, at = () => {
+      l.clearSession(), h(null), E(null), u([]), C(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, dt = ($) => {
-      l.setTokens($);
-    }, ut = () => l.hasValidSession(), ht = () => {
-      l.clearSession(), p(null), E(null);
-    }, ft = async () => {
+    }, lt = (B) => {
+      l.setTokens(B);
+    }, ct = () => l.hasValidSession(), dt = () => {
+      l.clearSession(), h(null), E(null);
+    }, ut = async () => {
       if (t)
         try {
-          c(!0);
-          const { roles: $ } = await y.getRolesByApp(t);
-          g($);
-        } catch ($) {
-          console.error("Failed to fetch roles:", $);
+          f(!0);
+          const { roles: B } = await I.getRolesByApp(t);
+          w(B);
+        } catch (B) {
+          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", B);
         } finally {
-          c(!1);
+          f(!1);
         }
-    }, pt = async () => {
-      await ft();
-    }, Re = ($) => {
-      if (!Q || Q.length === 0)
+    }, ht = async () => {
+      await ut();
+    }, Ae = (B) => {
+      if (!v || v.length === 0)
         return !1;
-      if (typeof $ == "string")
-        return Q.includes($);
-      const z = `${$.resource}.${$.action}`;
-      return Q.includes(z);
+      if (typeof B == "string")
+        return v.includes(B);
+      const z = `${B.resource}.${B.action}`;
+      return v.includes(z);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: O,
+      isAuthenticated: Q,
       sessionManager: l,
-      authenticatedHttpService: C,
-      login: fe,
-      signup: pe,
-      signupTenantAdmin: rt,
-      sendMagicLink: ot,
-      verifyMagicLink: at,
-      changePassword: nt,
-      requestPasswordReset: st,
-      confirmPasswordReset: it,
-      refreshToken: lt,
-      logout: ct,
-      setTokens: dt,
-      hasValidSession: ut,
-      clearSession: ht,
-      currentUser: I,
-      isUserLoading: x,
-      userError: F,
-      loadUserData: V,
-      refreshUser: he,
-      isAuthInitializing: !f,
-      isAuthReady: f,
-      userRole: G,
-      userPermissions: Q,
-      availableRoles: h,
-      rolesLoading: w,
-      hasPermission: Re,
-      hasAnyPermission: ($) => $.some((z) => Re(z)),
-      hasAllPermissions: ($) => $.every((z) => Re(z)),
-      getUserPermissionStrings: () => Q || [],
-      refreshRoles: pt,
+      authenticatedHttpService: F,
+      login: de,
+      signup: he,
+      signupTenantAdmin: et,
+      sendMagicLink: st,
+      verifyMagicLink: it,
+      changePassword: tt,
+      requestPasswordReset: rt,
+      confirmPasswordReset: nt,
+      refreshToken: ot,
+      logout: at,
+      setTokens: lt,
+      hasValidSession: ct,
+      clearSession: dt,
+      currentUser: x,
+      isUserLoading: R,
+      userError: D,
+      loadUserData: A,
+      refreshUser: V,
+      isAuthInitializing: !L,
+      isAuthReady: L,
+      userRole: m,
+      userPermissions: v,
+      availableRoles: p,
+      rolesLoading: y,
+      hasPermission: Ae,
+      hasAnyPermission: (B) => B.some((z) => Ae(z)),
+      hasAllPermissions: (B) => B.every((z) => Ae(z)),
+      getUserPermissionStrings: () => v || [],
+      refreshRoles: ht,
       // RFC-004: Multi-tenant user membership
-      userTenants: k,
-      hasTenantContext: M,
-      switchToTenant: async ($, z) => {
-        const { redirectPath: Y } = z || {}, j = l.getTokens();
-        if (!(j != null && j.refreshToken))
+      userTenants: P,
+      hasTenantContext: S,
+      switchToTenant: async (B, z) => {
+        const { redirectPath: Z } = z || {}, W = l.getTokens();
+        if (!(W != null && W.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const J = await S.switchTenant({
-          refreshToken: j.refreshToken,
-          tenantId: $
+        const Y = await c.switchTenant({
+          refreshToken: W.refreshToken,
+          tenantId: B
         });
         l.setTokens({
-          accessToken: J.accessToken,
-          refreshToken: j.refreshToken,
+          accessToken: Y.accessToken,
+          refreshToken: W.refreshToken,
           // Keep the same refresh token
-          expiresIn: J.expiresIn
-        }), p(J.user), l.setUser(J.user), L(!0);
-        const te = k.find((re) => re.id === $);
-        te && a(te.subdomain, {
+          expiresIn: Y.expiresIn
+        }), h(Y.user), l.setUser(Y.user), C(!0);
+        const X = P.find((ee) => ee.id === B);
+        X && a(X.subdomain, {
           tokens: {
-            accessToken: J.accessToken,
-            refreshToken: j.refreshToken,
-            expiresIn: J.expiresIn
+            accessToken: Y.accessToken,
+            refreshToken: W.refreshToken,
+            expiresIn: Y.expiresIn
           },
-          redirectPath: Y
+          redirectPath: Z
         });
       },
       refreshUserTenants: async () => {
-        const $ = await l.getAuthHeaders(), z = await S.getUserTenants($);
-        m(z);
+        const B = await l.getAuthHeaders(), z = await c.getUserTenants(B);
+        u(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
         } catch {
@@ -1456,83 +1438,73 @@ function Tr({ config: n = {}, children: e }) {
       }
     };
   }, [
-    O,
+    Q,
     l,
-    C,
-    S,
-    b,
-    y,
+    F,
+    c,
+    H,
+    I,
     t,
     i,
     o,
     a,
-    h,
-    I,
+    p,
     x,
-    F,
-    k,
-    M,
-    f,
-    G,
-    Q,
-    A,
-    q
+    R,
+    D,
+    P,
+    S,
+    L,
+    m,
+    v
   ]);
-  ee(() => {
+  J.current = O.loadUserData, re(() => {
     !n.initialRoles && t && (async () => {
       try {
-        c(!0);
-        const he = new ce(r), fe = new _e(he), { roles: pe } = await fe.getRolesByApp(t);
-        g(pe);
-      } catch (he) {
-        console.error("Failed to fetch roles:", he);
+        f(!0);
+        const V = new le(r), de = new ze(V), { roles: he } = await de.getRolesByApp(t);
+        w(he);
+      } catch (V) {
+        process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", V);
       } finally {
-        c(!1);
+        f(!1);
       }
     })();
   }, [t, r, n.initialRoles]);
-  const [B, X] = T(!1);
-  return ee(() => {
-    B || (X(!0), D.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), Rt(), U(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), W.loadUserData().catch((V) => {
-      console.error("[AuthProvider] Failed to load user data:", V);
+  const [q, j] = k(!1);
+  return re(() => {
+    q || (j(!0), M.current.urlTokens && (At(), $(!0), O.loadUserData().catch((A) => {
+      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", A);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), U(!1);
+      $(!1);
     })));
-  }, [W, B]), ee(() => {
-    let V = !1;
+  }, [O, q]), re(() => {
+    let A = !1;
     return (async () => {
-      var pe;
-      if (!l.hasValidSession() && ((pe = l.getTokens()) != null && pe.refreshToken) && await l.waitForPendingRefresh(), V) return;
-      const fe = l.getUser();
-      fe && l.hasValidSession() && p(fe), H(!1);
+      var he;
+      if (!l.hasValidSession() && ((he = l.getTokens()) != null && he.refreshToken) && await l.waitForPendingRefresh(), A) return;
+      const de = l.getUser();
+      de && l.hasValidSession() && h(de), b(!1);
     })(), () => {
-      V = !0;
+      A = !0;
     };
-  }, [l]), ee(() => {
-    B && (D.current.urlTokens || (!I && !x && l.hasValidSession() ? (console.log("[AuthProvider] Auto-loading user data..."), W.loadUserData().catch(() => {
+  }, [l]), re(() => {
+    q && (M.current.urlTokens || (!x && !R && !D && l.hasValidSession() ? J.current().catch(() => {
     }).finally(() => {
-      H(!1);
-    })) : I && H(!1)));
-  }, [I, x, W, l, B]), ee(() => {
-    if (!l.hasValidSession() || !I)
-      return;
-    const V = setInterval(() => {
-      W.loadUserData().catch(() => {
-      });
-    }, q);
-    return () => clearInterval(V);
-  }, [l, I, W, q]), /* @__PURE__ */ s(Ne.Provider, { value: W, children: e });
+      b(!1);
+    }) : b(!1)));
+  }, [x, R, D, l, q]), /* @__PURE__ */ s(De.Provider, { value: O, children: e });
 }
 function ue() {
-  const n = le(Ne);
+  const n = ae(De);
   if (!n)
     throw new Error("useAuth must be used within an AuthProvider");
   return n;
 }
-function Ce() {
-  return le(Ne);
+function Fe() {
+  return ae(De);
 }
-class It {
+class Pt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1612,66 +1584,66 @@ class It {
     })).data;
   }
 }
-const Ue = me(null);
-function kr({ config: n = {}, children: e }) {
-  const t = Ze(), r = Pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [h, g] = T([]), [w, c] = T(!1), [I, p] = T(null), [x, R] = T(!1), F = Z(() => {
-    const u = new ce(i);
-    return new It(u);
+const Ce = fe(null);
+function Tr({ config: n = {}, children: e }) {
+  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [p, w] = k([]), [y, f] = k(!1), [x, h] = k(null), [R, N] = k(!1), D = K(() => {
+    const u = new le(i);
+    return new Pt(u);
   }, [i]), E = async () => {
     if (!(a != null && a.id)) {
-      g([]);
+      w([]);
       return;
     }
-    c(!0), p(null);
+    f(!0), h(null);
     try {
-      const u = await F.getTenantFeatureFlags(a.id, o);
-      g(u);
+      const u = await D.getTenantFeatureFlags(a.id, o);
+      w(u);
     } catch (u) {
-      const k = u instanceof Error ? u.message : "Failed to fetch feature flags";
-      p(k), n.onError && n.onError(u instanceof Error ? u : new Error(k));
+      const S = u instanceof Error ? u.message : "Failed to fetch feature flags";
+      h(S), n.onError && n.onError(u instanceof Error ? u : new Error(S));
     } finally {
-      c(!1);
+      f(!1);
     }
   };
-  ee(() => {
+  re(() => {
     if (!i || !o) return;
-    E().finally(() => R(!0));
-    const u = n.refreshInterval || 5 * 60 * 1e3, k = setInterval(E, u);
-    return () => clearInterval(k);
+    E().finally(() => N(!0));
+    const u = n.refreshInterval || 5 * 60 * 1e3, S = setInterval(E, u);
+    return () => clearInterval(S);
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
-  const A = Z(() => {
-    const u = (D) => {
-      const P = h.find((U) => U.key === D);
-      return (P == null ? void 0 : P.value) === !0;
-    }, k = (D) => h.find((P) => P.key === D), m = (D) => {
-      const P = h.find((U) => U.key === D);
-      return P ? P.value ? "enabled" : "disabled" : "not_found";
+  const P = K(() => {
+    const u = ($) => {
+      const l = p.find((U) => U.key === $);
+      return (l == null ? void 0 : l.value) === !0;
+    }, S = ($) => p.find((l) => l.key === $), C = ($) => {
+      const l = p.find((U) => U.key === $);
+      return l ? l.value ? "enabled" : "disabled" : "not_found";
     }, M = async () => {
       await E();
-    }, L = !!(i && o) && (x || !(a != null && a.id));
+    }, T = !!(i && o) && (R || !(a != null && a.id));
     return {
-      featureFlags: h,
-      loading: w,
-      error: I,
-      isReady: L,
+      featureFlags: p,
+      loading: y,
+      error: x,
+      isReady: T,
       isEnabled: u,
-      getFlag: k,
-      getFlagState: m,
+      getFlag: S,
+      getFlagState: C,
       refresh: M
     };
-  }, [h, w, I, i, o, a == null ? void 0 : a.id, x]);
-  return /* @__PURE__ */ s(Ue.Provider, { value: A, children: e });
+  }, [p, y, x, i, o, a == null ? void 0 : a.id, R]);
+  return /* @__PURE__ */ s(Ce.Provider, { value: P, children: e });
 }
-function Et() {
-  const n = le(Ue);
+function Rt() {
+  const n = ae(Ce);
   if (!n)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return n;
 }
-function Je() {
-  return le(Ue);
+function Ke() {
+  return ae(Ce);
 }
-class Mt {
+class Et {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1737,68 +1709,68 @@ class Mt {
     )).data;
   }
 }
-const $e = me(void 0);
-function xr({ config: n = {}, children: e }) {
-  const t = Ze(), r = Pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, h] = T(null), [g, w] = T(!1), [c, I] = T(null), [p, x] = T(!1), R = Z(() => {
-    const A = new ce(i);
-    return new Mt(A);
-  }, [i]), F = async () => {
+const $e = fe(void 0);
+function kr({ config: n = {}, children: e }) {
+  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, p] = k(null), [w, y] = k(!1), [f, x] = k(null), [h, R] = k(!1), N = K(() => {
+    const P = new le(i);
+    return new Et(P);
+  }, [i]), D = async () => {
     if (!(o != null && o.id)) {
-      h(null);
+      p(null);
       return;
     }
-    w(!0), I(null);
+    y(!0), x(null);
     try {
-      const A = await R.getTenantSubscriptionFeatures(o.id);
-      h(A);
-    } catch (A) {
-      const u = A instanceof Error ? A.message : "Failed to fetch subscription";
-      I(u), n.onError && n.onError(A instanceof Error ? A : new Error(u));
+      const P = await N.getTenantSubscriptionFeatures(o.id);
+      p(P);
+    } catch (P) {
+      const u = P instanceof Error ? P.message : "Failed to fetch subscription";
+      x(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
     } finally {
-      w(!1);
+      y(!1);
     }
   };
-  ee(() => {
-    if (!i || (F().finally(() => x(!0)), !n.refreshInterval)) return;
-    const A = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(F, A);
+  re(() => {
+    if (!i || (D().finally(() => R(!0)), !n.refreshInterval)) return;
+    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(D, P);
     return () => clearInterval(u);
   }, [o == null ? void 0 : o.id, i, n.refreshInterval]);
-  const E = Z(() => {
-    const A = (a == null ? void 0 : a.features) || [], u = (P) => {
-      const U = A.find((l) => l.key === P);
+  const E = K(() => {
+    const P = (a == null ? void 0 : a.features) || [], u = (l) => {
+      const U = P.find((b) => b.key === l);
       return U ? U.type === "BOOLEAN" || U.type === "boolean" ? U.value === !0 : !!U.value : !1;
-    }, k = (P) => A.find((U) => U.key === P), m = (P, U) => {
-      const l = A.find((N) => N.key === P);
-      return l ? l.value : U;
-    }, M = (P) => !a || !a.isActive ? !1 : P.includes(a.planId), L = async () => {
-      await F();
-    }, D = !!i && (p || !(o != null && o.id));
+    }, S = (l) => P.find((U) => U.key === l), C = (l, U) => {
+      const b = P.find((L) => L.key === l);
+      return b ? b.value : U;
+    }, M = (l) => !a || !a.isActive ? !1 : l.includes(a.planId), T = async () => {
+      await D();
+    }, $ = !!i && (h || !(o != null && o.id));
     return {
       subscription: a,
-      features: A,
-      loading: g,
-      error: c,
-      isReady: D,
+      features: P,
+      loading: w,
+      error: f,
+      isReady: $,
       isFeatureEnabled: u,
-      getFeature: k,
-      getFeatureValue: m,
+      getFeature: S,
+      getFeatureValue: C,
       hasAllowedPlan: M,
-      refresh: L
+      refresh: T
     };
-  }, [a, g, c, i, o == null ? void 0 : o.id, p]);
+  }, [a, w, f, i, o == null ? void 0 : o.id, h]);
   return /* @__PURE__ */ s($e.Provider, { value: E, children: e });
 }
-function Lt() {
-  const n = le($e);
+function It() {
+  const n = ae($e);
   if (n === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return n;
 }
-function Ye() {
-  return le($e) ?? null;
+function Ze() {
+  return ae($e) ?? null;
 }
-var ae = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(ae || {});
-const He = {
+var oe = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(oe || {});
+const Ue = {
   publicGuest: "/",
   publicUser: "/account",
   publicAdmin: "/admin",
@@ -1806,7 +1778,7 @@ const He = {
   tenantUser: "/dashboard",
   tenantAdmin: "/admin/dashboard",
   default: "/"
-}, Xe = {
+}, Je = {
   // Public/Landing zones
   landing: { tenant: "forbidden", auth: "optional" },
   publicOnly: { tenant: "forbidden", auth: "forbidden" },
@@ -1819,18 +1791,18 @@ const He = {
   tenantOpen: { tenant: "required", auth: "optional" },
   tenantAuth: { tenant: "required", auth: "required" },
   // User type zones
-  user: { tenant: "required", auth: "required", userType: ae.USER },
-  admin: { tenant: "required", auth: "required", userType: ae.TENANT_ADMIN },
+  user: { tenant: "required", auth: "required", userType: oe.USER },
+  admin: { tenant: "required", auth: "required", userType: oe.TENANT_ADMIN },
   // Fully open
   open: { tenant: "optional", auth: "optional" }
-}, Be = me(null);
-function Ar({ config: n = {}, children: e }) {
-  const t = Z(() => {
+}, He = fe(null);
+function xr({ config: n = {}, children: e }) {
+  const t = K(() => {
     const r = {
-      ...He,
+      ...Ue,
       ...n.zoneRoots
     }, i = {
-      ...Xe,
+      ...Je,
       ...n.presets
     };
     return {
@@ -1843,19 +1815,19 @@ function Ar({ config: n = {}, children: e }) {
       returnToStorage: n.returnToStorage ?? "url"
     };
   }, [n]);
-  return /* @__PURE__ */ s(Be.Provider, { value: t, children: e });
+  return /* @__PURE__ */ s(He.Provider, { value: t, children: e });
 }
-function Pr() {
-  const n = le(Be);
+function Ar() {
+  const n = ae(He);
   if (!n)
     throw new Error("useRouting must be used within a RoutingProvider");
   return n;
 }
-function Ft() {
-  const n = le(Be);
+function Mt() {
+  const n = ae(He);
   return n || {
-    zoneRoots: He,
-    presets: Xe,
+    zoneRoots: Ue,
+    presets: Je,
     loadingFallback: null,
     accessDeniedFallback: null,
     onAccessDenied: void 0,
@@ -1863,7 +1835,7 @@ function Ft() {
     returnToStorage: "url"
   };
 }
-const Ve = () => /* @__PURE__ */ d(
+const We = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1900,7 +1872,7 @@ const Ve = () => /* @__PURE__ */ d(
       )
     ]
   }
-), je = ({
+), Ve = ({
   userType: n,
   minUserType: e,
   missingPermissions: t
@@ -1941,32 +1913,32 @@ const Ve = () => /* @__PURE__ */ d(
       ] })
     ]
   }
-), Dt = (n, e) => {
+), Lt = (n, e) => {
   const t = {
-    [ae.USER]: 1,
-    [ae.TENANT_ADMIN]: 2,
-    [ae.SUPERUSER]: 3
+    [oe.USER]: 1,
+    [oe.TENANT_ADMIN]: 2,
+    [oe.SUPERUSER]: 3
   };
   return t[n] >= t[e];
 };
-function Rr({
+function Pr({
   children: n,
   fallback: e,
   minUserType: t,
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: h, hasAnyPermission: g, hasAllPermissions: w } = ue();
+  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: w, hasAllPermissions: y } = ue();
   if (!o())
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ve, {}) });
-  const c = a.getUser();
-  if (!c)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ve, {}) });
-  if (t && !Dt(c.userType, t))
-    return /* @__PURE__ */ s(je, { userType: c.userType, minUserType: t });
-  if (r && r.length > 0 && !(i ? w(r) : g(r))) {
-    const p = r.filter((x) => !h(x)).map((x) => typeof x == "string" ? x : x.name);
-    return /* @__PURE__ */ s(je, { missingPermissions: p });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(We, {}) });
+  const f = a.getUser();
+  if (!f)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(We, {}) });
+  if (t && !Lt(f.userType, t))
+    return /* @__PURE__ */ s(Ve, { userType: f.userType, minUserType: t });
+  if (r && r.length > 0 && !(i ? y(r) : w(r))) {
+    const h = r.filter((R) => !p(R)).map((R) => typeof R == "string" ? R : R.name);
+    return /* @__PURE__ */ s(Ve, { missingPermissions: h });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
@@ -2006,7 +1978,7 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Ge = ({
+), je = ({
   userType: n,
   requiredUserType: e,
   missingPermissions: t
@@ -2057,8 +2029,8 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Ct = (n, e) => n === e;
-function Ir({
+), Dt = (n, e) => n === e;
+function Rr({
   children: n,
   redirectTo: e = "/login",
   requiredUserType: t,
@@ -2066,34 +2038,34 @@ function Ir({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: h, hasPermission: g, hasAnyPermission: w, hasAllPermissions: c } = ue(), I = Ae();
-  if (ee(() => {
+  const { hasValidSession: a, sessionManager: p, hasPermission: w, hasAnyPermission: y, hasAllPermissions: f } = ue(), x = ke();
+  if (re(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
     return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ d(_, { children: [
       /* @__PURE__ */ s(Nt, { redirectPath: e }),
-      /* @__PURE__ */ s(Te, { to: e, state: { from: I.pathname }, replace: !0 })
+      /* @__PURE__ */ s(ve, { to: e, state: { from: x.pathname }, replace: !0 })
     ] });
-  const p = h.getUser();
-  if (!p)
-    return /* @__PURE__ */ s(Te, { to: e, state: { from: I.pathname }, replace: !0 });
-  if (t && !Ct(p.userType, t))
+  const h = p.getUser();
+  if (!h)
+    return /* @__PURE__ */ s(ve, { to: e, state: { from: x.pathname }, replace: !0 });
+  if (t && !Dt(h.userType, t))
     return /* @__PURE__ */ s(
-      Ge,
+      je,
       {
-        userType: p.userType,
+        userType: h.userType,
         requiredUserType: t
       }
     );
-  if (r && r.length > 0 && !(i ? c(r) : w(r))) {
-    const R = r.filter((F) => !g(F)).map((F) => typeof F == "string" ? F : F.name);
-    return /* @__PURE__ */ s(Ge, { missingPermissions: R });
+  if (r && r.length > 0 && !(i ? f(r) : y(r))) {
+    const N = r.filter((D) => !w(D)).map((D) => typeof D == "string" ? D : D.name);
+    return /* @__PURE__ */ s(je, { missingPermissions: N });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2131,17 +2103,17 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
   }
 );
 function Er({ children: n, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = we(), a = Ae();
-  return ee(() => {
+  const { tenant: r, isLoading: i, error: o } = me(), a = ke();
+  return re(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
   }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s(Ut, { redirectPath: e }),
-    /* @__PURE__ */ s(Te, { to: e, state: { from: a.pathname }, replace: !0 })
+    /* @__PURE__ */ s(Ft, { redirectPath: e }),
+    /* @__PURE__ */ s(ve, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2178,41 +2150,41 @@ const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
     )
   }
 );
-function Mr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = we(), a = Ae();
-  return ee(() => {
+function Ir({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: r, isLoading: i, error: o } = me(), a = ke();
+  return re(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
   }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s($t, { redirectPath: e }),
-    /* @__PURE__ */ s(Te, { to: e, state: { from: a.pathname }, replace: !0 })
+    /* @__PURE__ */ s(Ct, { redirectPath: e }),
+    /* @__PURE__ */ s(ve, { to: e, state: { from: a.pathname }, replace: !0 })
   ] }) : /* @__PURE__ */ s(_, { children: n });
 }
-function Ht(n, e) {
+function $t(n, e) {
   return e ? n ? Array.isArray(e) ? e.includes(n) : n === e : !1 : !0;
 }
-function Qe(n, e) {
+function Ge(n, e) {
   return !n || n === "optional" ? "skip" : n === "required" ? e ? "pass" : "fail" : n === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
-function Bt(n, e) {
-  return Qe(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Qe(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ht(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
+function Ut(n, e) {
+  return Ge(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ge(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !$t(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
 }
-function qt(n, e) {
-  return n.hasTenant ? n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
+function Ht(n, e) {
+  return n.hasTenant ? n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
 }
-function Ot(n, e, t, r, i) {
+function Bt(n, e, t, r, i) {
   if (!e || i !== "url")
     return n;
   const o = typeof e == "string" ? e : t, a = n.includes("?") ? "&" : "?";
   return `${n}${a}${r}=${encodeURIComponent(o)}`;
 }
-function zt(n, e, t) {
+function Ot(n, e, t) {
   if (!n || t === "url") return;
   const r = typeof n == "string" ? n : e, i = "zone_return_to";
   t === "session" ? sessionStorage.setItem(i, r) : t === "local" && localStorage.setItem(i, r);
 }
-const de = ({
+const ce = ({
   children: n,
   preset: e,
   tenant: t,
@@ -2220,42 +2192,42 @@ const de = ({
   userType: i,
   requiredPermissions: o,
   requireAllPermissions: a = !0,
-  returnTo: h,
-  onAccessDenied: g,
-  redirectTo: w,
-  loadingFallback: c,
-  accessDeniedFallback: I
+  returnTo: p,
+  onAccessDenied: w,
+  redirectTo: y,
+  loadingFallback: f,
+  accessDeniedFallback: x
 }) => {
-  const p = Ae(), { isAuthenticated: x, isAuthInitializing: R, currentUser: F, userPermissions: E } = ue(), { tenant: A, isTenantLoading: u } = ye(), k = Ft(), m = Z(() => {
+  const h = ke(), { isAuthenticated: R, isAuthInitializing: N, currentUser: D, userPermissions: E } = ue(), { tenant: P, isTenantLoading: u } = ge(), S = Mt(), C = K(() => {
     if (e)
-      return k.presets[e];
-  }, [e, k.presets]), M = Z(
+      return S.presets[e];
+  }, [e, S.presets]), M = K(
     () => ({
-      tenant: t ?? (m == null ? void 0 : m.tenant),
-      auth: r ?? (m == null ? void 0 : m.auth),
-      userType: i ?? (m == null ? void 0 : m.userType),
-      permissions: o ?? (m == null ? void 0 : m.requiredPermissions),
+      tenant: t ?? (C == null ? void 0 : C.tenant),
+      auth: r ?? (C == null ? void 0 : C.auth),
+      userType: i ?? (C == null ? void 0 : C.userType),
+      permissions: o ?? (C == null ? void 0 : C.requiredPermissions),
       requireAllPermissions: a
     }),
-    [t, r, i, o, m, a]
-  ), L = Z(
+    [t, r, i, o, C, a]
+  ), T = K(
     () => ({
-      hasTenant: !!A,
-      isAuthenticated: x,
-      userType: F == null ? void 0 : F.userType,
+      hasTenant: !!P,
+      isAuthenticated: R,
+      userType: D == null ? void 0 : D.userType,
       permissions: E,
-      isLoading: R || u
+      isLoading: N || u
     }),
     [
-      A,
-      x,
-      F == null ? void 0 : F.userType,
-      E,
+      P,
       R,
+      D == null ? void 0 : D.userType,
+      E,
+      N,
       u
     ]
-  ), D = Z(() => L.isLoading ? null : Bt(M, L), [M, L]), P = Z(() => D ? w || qt(L, k.zoneRoots) : null, [D, w, L, k.zoneRoots]), U = Z(() => !D || !P ? null : {
-    type: D,
+  ), $ = K(() => T.isLoading ? null : Ut(M, T), [M, T]), l = K(() => $ ? y || Ht(T, S.zoneRoots) : null, [$, y, T, S.zoneRoots]), U = K(() => !$ || !l ? null : {
+    type: $,
     required: {
       tenant: M.tenant,
       auth: M.auth,
@@ -2263,40 +2235,40 @@ const de = ({
       permissions: M.permissions
     },
     current: {
-      hasTenant: L.hasTenant,
-      isAuthenticated: L.isAuthenticated,
-      userType: L.userType,
-      permissions: L.permissions
+      hasTenant: T.hasTenant,
+      isAuthenticated: T.isAuthenticated,
+      userType: T.userType,
+      permissions: T.permissions
     },
-    redirectTo: P
-  }, [D, P, M, L]);
-  if (ee(() => {
-    U && (g ? g(U) : k.onAccessDenied && k.onAccessDenied(U));
-  }, [U, g, k]), ee(() => {
-    U && h && zt(h, p.pathname + p.search, k.returnToStorage);
+    redirectTo: l
+  }, [$, l, M, T]);
+  if (re(() => {
+    U && (w ? w(U) : S.onAccessDenied && S.onAccessDenied(U));
+  }, [U, w, S]), re(() => {
+    U && p && Ot(p, h.pathname + h.search, S.returnToStorage);
   }, [
     U,
-    h,
-    p.pathname,
-    p.search,
-    k.returnToStorage
-  ]), L.isLoading)
-    return /* @__PURE__ */ s(_, { children: c ?? k.loadingFallback ?? null });
-  if (U && P) {
-    const l = I ?? k.accessDeniedFallback;
-    if (l)
-      return /* @__PURE__ */ s(_, { children: l });
-    const N = Ot(
-      P,
-      h,
-      p.pathname + p.search,
-      k.returnToParam,
-      k.returnToStorage
+    p,
+    h.pathname,
+    h.search,
+    S.returnToStorage
+  ]), T.isLoading)
+    return /* @__PURE__ */ s(_, { children: f ?? S.loadingFallback ?? null });
+  if (U && l) {
+    const b = x ?? S.accessDeniedFallback;
+    if (b)
+      return /* @__PURE__ */ s(_, { children: b });
+    const L = Bt(
+      l,
+      p,
+      h.pathname + h.search,
+      S.returnToParam,
+      S.returnToStorage
     );
-    return /* @__PURE__ */ s(Te, { to: N, replace: !0 });
+    return /* @__PURE__ */ s(ve, { to: L, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: n });
-}, Lr = (n) => /* @__PURE__ */ s(de, { tenant: "required", ...n }), Fr = (n) => /* @__PURE__ */ s(de, { tenant: "forbidden", ...n }), Dr = (n) => /* @__PURE__ */ s(de, { auth: "required", ...n }), Nr = (n) => /* @__PURE__ */ s(de, { auth: "forbidden", ...n }), Cr = (n) => /* @__PURE__ */ s(de, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Ur = (n) => /* @__PURE__ */ s(de, { auth: "required", userType: ae.USER, ...n }), $r = (n) => /* @__PURE__ */ s(de, { tenant: "optional", auth: "optional", ...n }), Hr = (n) => /* @__PURE__ */ s(de, { tenant: "required", auth: "required", ...n }), Br = (n) => /* @__PURE__ */ s(de, { tenant: "required", auth: "optional", ...n }), qr = (n) => /* @__PURE__ */ s(de, { tenant: "required", auth: "forbidden", ...n }), _t = () => /* @__PURE__ */ d(
+}, Mr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", ...n }), Lr = (n) => /* @__PURE__ */ s(ce, { tenant: "forbidden", ...n }), Nr = (n) => /* @__PURE__ */ s(ce, { auth: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ce, { auth: "forbidden", ...n }), Fr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.USER, ...n }), $r = (n) => /* @__PURE__ */ s(ce, { tenant: "optional", auth: "optional", ...n }), Ur = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "required", ...n }), Hr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "optional", ...n }), Br = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "forbidden", ...n }), qt = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -2315,12 +2287,12 @@ const de = ({
 );
 function Or({
   children: n,
-  fallback: e = /* @__PURE__ */ s(_t, {}),
+  fallback: e = /* @__PURE__ */ s(qt, {}),
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: h } = Lt();
-  return h ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = It();
+  return p ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2332,7 +2304,7 @@ function Or({
     }
   ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : r && !a(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: n }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const Wt = ({ flagName: n }) => /* @__PURE__ */ d(
+const zt = ({ flagName: n }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -2359,8 +2331,8 @@ const Wt = ({ flagName: n }) => /* @__PURE__ */ d(
     ]
   }
 );
-function zr({ name: n, children: e, fallback: t }) {
-  const { isEnabled: r, loading: i } = Et();
+function qr({ name: n, children: e, fallback: t }) {
+  const { isEnabled: r, loading: i } = Rt();
   return i ? /* @__PURE__ */ s(
     "div",
     {
@@ -2374,9 +2346,9 @@ function zr({ name: n, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Wt, { flagName: n }) });
+  ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(zt, { flagName: n }) });
 }
-const Vt = () => /* @__PURE__ */ d(
+const _t = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -2393,7 +2365,7 @@ const Vt = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), jt = () => /* @__PURE__ */ d(
+), Wt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -2410,10 +2382,10 @@ const Vt = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), Gt = {
-  showPassword: /* @__PURE__ */ s(Vt, {}),
-  hidePassword: /* @__PURE__ */ s(jt, {})
-}, Qt = {
+), Vt = {
+  showPassword: /* @__PURE__ */ s(_t, {}),
+  hidePassword: /* @__PURE__ */ s(Wt, {})
+}, jt = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2426,8 +2398,12 @@ const Vt = () => /* @__PURE__ */ d(
   magicLinkText: "Prefer passwordless?",
   magicLinkLink: "Use Magic Link",
   errorMessage: "Invalid credentials",
-  loadingText: "Signing in..."
-}, Kt = {
+  loadingText: "Signing in...",
+  tenantNotFoundError: "Tenant not found",
+  dividerBullet: "•",
+  showPasswordAriaLabel: "Show password",
+  hidePasswordAriaLabel: "Hide password"
+}, Gt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2532,9 +2508,12 @@ const Vt = () => /* @__PURE__ */ d(
     margin: "0.5rem 0",
     color: "#6b7280",
     fontSize: "0.875rem"
+  },
+  inputWithIcon: {
+    paddingRight: "2.5rem"
   }
 };
-function _r({
+function zr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -2542,83 +2521,82 @@ function _r({
   onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: h,
-  showForgotPassword: g = !0,
-  showSignupLink: w = !0,
-  showMagicLinkOption: c = !0,
-  className: I
+  onMagicLinkClick: p,
+  showForgotPassword: w = !0,
+  showSignupLink: y = !0,
+  showMagicLinkOption: f = !0,
+  className: x
 }) {
-  const [p, x] = T(""), [R, F] = T(""), [E, A] = T(!1), [u, k] = T(!1), [m, M] = T(""), [L, D] = T({}), { login: P } = ue(), { tenant: U } = we(), l = { ...Qt, ...n }, N = { ...Kt, ...e }, H = { ...Gt, ...t }, f = () => {
-    const y = {};
-    return p.trim() || (y.username = !0), R.trim() || (y.password = !0), D(y), Object.keys(y).length === 0;
-  }, C = async (y) => {
-    if (y.preventDefault(), !!f()) {
+  const [h, R] = k(""), [N, D] = k(""), [E, P] = k(!1), [u, S] = k(!1), [C, M] = k(""), [T, $] = k({}), { login: l } = ue(), { tenant: U } = me(), b = { ...jt, ...n }, L = { ...Gt, ...e }, F = { ...Vt, ...t }, c = () => {
+    const m = {};
+    return h.trim() || (m.username = !0), N.trim() || (m.password = !0), $(m), Object.keys(m).length === 0;
+  }, H = async (m) => {
+    if (m.preventDefault(), !!c()) {
       if (!(U != null && U.id)) {
-        M("Tenant not found");
+        M(b.tenantNotFoundError);
         return;
       }
-      k(!0), M("");
+      S(!0), M("");
       try {
-        const v = await P({
-          username: p,
-          password: R
+        const v = await l({
+          username: h,
+          password: N
           // tenantId inferred from context automatically
         });
         r == null || r(v);
       } catch (v) {
-        const G = v.message || l.errorMessage;
-        M(G), i == null || i(G);
+        const Q = v.message || b.errorMessage;
+        M(Q), i == null || i(Q);
       } finally {
-        k(!1);
+        S(!1);
       }
     }
-  }, S = (y) => ({
-    ...N.input,
-    ...L[y] ? N.inputError : {}
-  }), b = () => ({
-    ...N.button,
-    ...u ? N.buttonLoading : {},
-    ...!p || !R || u ? N.buttonDisabled : {}
+  }, I = (m) => ({
+    ...L.input,
+    ...T[m] ? L.inputError : {}
+  }), g = () => ({
+    ...L.button,
+    ...u ? L.buttonLoading : {},
+    ...!h || !N || u ? L.buttonDisabled : {}
   });
-  return /* @__PURE__ */ d("div", { className: I, style: N.container, children: [
-    /* @__PURE__ */ s("h2", { style: N.title, children: l.title }),
-    /* @__PURE__ */ d("form", { onSubmit: C, style: N.form, children: [
-      /* @__PURE__ */ d("div", { style: N.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: N.label, children: l.usernameLabel }),
+  return /* @__PURE__ */ d("div", { className: x, style: L.container, children: [
+    /* @__PURE__ */ s("h2", { style: L.title, children: b.title }),
+    /* @__PURE__ */ d("form", { onSubmit: H, style: L.form, children: [
+      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: L.label, children: b.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "username",
             name: "username",
             type: "text",
-            value: p,
-            onChange: (y) => {
-              x(y.target.value), L.username && D((v) => ({ ...v, username: !1 }));
+            value: h,
+            onChange: (m) => {
+              R(m.target.value), T.username && $((v) => ({ ...v, username: !1 }));
             },
-            placeholder: l.usernamePlaceholder,
-            style: S("username"),
+            placeholder: b.usernamePlaceholder,
+            style: I("username"),
             disabled: u
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: N.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: N.label, children: l.passwordLabel }),
-        /* @__PURE__ */ d("div", { style: N.inputContainer, children: [
+      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: L.label, children: b.passwordLabel }),
+        /* @__PURE__ */ d("div", { style: L.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
               id: "password",
               name: "password",
               type: E ? "text" : "password",
-              value: R,
-              onChange: (y) => {
-                F(y.target.value), L.password && D((v) => ({ ...v, password: !1 }));
+              value: N,
+              onChange: (m) => {
+                D(m.target.value), T.password && $((v) => ({ ...v, password: !1 }));
               },
-              placeholder: l.passwordPlaceholder,
+              placeholder: b.passwordPlaceholder,
               style: {
-                ...S("password"),
-                paddingRight: "2.5rem"
-                // Make room for the icon
+                ...I("password"),
+                ...L.inputWithIcon
               },
               disabled: u
             }
@@ -2627,40 +2605,40 @@ function _r({
             "button",
             {
               type: "button",
-              onClick: () => A(!E),
-              style: N.passwordToggle,
+              onClick: () => P(!E),
+              style: L.passwordToggle,
               disabled: u,
-              "aria-label": E ? "Hide password" : "Show password",
-              children: E ? H.hidePassword : H.showPassword
+              "aria-label": E ? b.hidePasswordAriaLabel : b.showPasswordAriaLabel,
+              children: E ? F.hidePassword : F.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !p || !R || u, style: b(), children: u ? l.loadingText : l.submitButton }),
-      m && /* @__PURE__ */ s("div", { style: N.errorText, children: m })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !h || !N || u, style: g(), children: u ? b.loadingText : b.submitButton }),
+      C && /* @__PURE__ */ s("div", { style: L.errorText, children: C })
     ] }),
-    (g || w || c) && /* @__PURE__ */ d("div", { style: N.linkContainer, children: [
-      c && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: N.divider, children: [
-          l.magicLinkText,
+    (w || y || f) && /* @__PURE__ */ d("div", { style: L.linkContainer, children: [
+      f && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: L.divider, children: [
+          b.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: h, style: N.link, children: l.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: p, style: L.link, children: b.magicLinkLink })
       ] }),
-      c && (g || w) && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
-      g && /* @__PURE__ */ s("a", { onClick: o, style: N.link, children: l.forgotPasswordLink }),
-      g && w && /* @__PURE__ */ s("div", { style: N.divider, children: "•" }),
-      w && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: N.divider, children: [
-          l.signupText,
+      f && (w || y) && /* @__PURE__ */ s("div", { style: L.divider, children: b.dividerBullet }),
+      w && /* @__PURE__ */ s("a", { onClick: o, style: L.link, children: b.forgotPasswordLink }),
+      w && y && /* @__PURE__ */ s("div", { style: L.divider, children: b.dividerBullet }),
+      y && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: L.divider, children: [
+          b.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: N.link, children: l.signupLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: L.link, children: b.signupLink })
       ] })
     ] })
   ] });
 }
-const Zt = {
+const Qt = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2685,8 +2663,11 @@ const Zt = {
   loadingText: "Creating account...",
   passwordMismatchError: "Passwords do not match",
   isAdminLabel: "Create new organization",
-  isAdminDescription: "Check this if you want to create a new organization"
-}, Jt = {
+  isAdminDescription: "Check this if you want to create a new organization",
+  contactMethodHint: "At least one contact method (email or phone) is required",
+  tenantNotFoundError: "Tenant not found",
+  dividerBullet: "•"
+}, Kt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2783,9 +2764,15 @@ const Zt = {
     margin: "0.5rem 0",
     color: "#6b7280",
     fontSize: "0.875rem"
+  },
+  hintText: {
+    fontSize: "0.875rem",
+    color: "#6b7280",
+    textAlign: "center",
+    margin: "0.5rem 0"
   }
 };
-function Wr({
+function _r({
   copy: n = {},
   styles: e = {},
   signupType: t = "user",
@@ -2793,113 +2780,113 @@ function Wr({
   onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: h = !0,
-  showMagicLinkOption: g = !0,
-  className: w
+  showLoginLink: p = !0,
+  showMagicLinkOption: w = !0,
+  className: y
 }) {
-  const [c, I] = T(""), [p, x] = T(""), [R, F] = T(""), [E, A] = T(""), [u, k] = T(""), [m, M] = T(""), [L, D] = T(""), [P, U] = T(!1), [l, N] = T(""), [H, f] = T({}), { signup: C, signupTenantAdmin: S } = ue(), { tenant: b } = we(), y = { ...Zt, ...n }, v = { ...Jt, ...e }, G = () => {
-    const B = {};
-    return c.trim() || (B.name = !0), !R.trim() && !E.trim() && (B.email = !0, B.phoneNumber = !0), u.trim() || (B.password = !0), m.trim() || (B.confirmPassword = !0), t === "tenant" && !L.trim() && (B.tenantName = !0), f(B), Object.keys(B).length === 0;
-  }, Q = async (B) => {
-    if (B.preventDefault(), !!G()) {
-      if (u !== m) {
-        N(y.passwordMismatchError), f({ confirmPassword: !0 });
+  const [f, x] = k(""), [h, R] = k(""), [N, D] = k(""), [E, P] = k(""), [u, S] = k(""), [C, M] = k(""), [T, $] = k(""), [l, U] = k(!1), [b, L] = k(""), [F, c] = k({}), { signup: H, signupTenantAdmin: I } = ue(), { tenant: g } = me(), m = { ...Qt, ...n }, v = { ...Kt, ...e }, Q = () => {
+    const A = {};
+    return f.trim() || (A.name = !0), !N.trim() && !E.trim() && (A.email = !0, A.phoneNumber = !0), u.trim() || (A.password = !0), C.trim() || (A.confirmPassword = !0), t === "tenant" && !T.trim() && (A.tenantName = !0), c(A), Object.keys(A).length === 0;
+  }, J = async (A) => {
+    if (A.preventDefault(), !!Q()) {
+      if (u !== C) {
+        L(m.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(b != null && b.id)) {
-        N("Tenant not found");
+      if (t === "user" && !(g != null && g.id)) {
+        L(m.tenantNotFoundError);
         return;
       }
-      U(!0), N("");
+      U(!0), L("");
       try {
-        let X;
-        t === "tenant" ? X = await S({
-          email: R || void 0,
+        let V;
+        t === "tenant" ? V = await I({
+          email: N || void 0,
           phoneNumber: E || void 0,
-          name: c,
+          name: f,
           password: u,
-          tenantName: L,
-          lastName: p || void 0
-        }) : X = await C({
-          email: R || void 0,
+          tenantName: T,
+          lastName: h || void 0
+        }) : V = await H({
+          email: N || void 0,
           phoneNumber: E || void 0,
-          name: c,
+          name: f,
           password: u,
-          tenantId: b.id,
-          lastName: p || void 0
-        }), r == null || r(X);
-      } catch (X) {
-        const V = X.message || y.errorMessage;
-        N(V), i == null || i(V);
+          tenantId: g.id,
+          lastName: h || void 0
+        }), r == null || r(V);
+      } catch (V) {
+        const de = V.message || m.errorMessage;
+        L(de), i == null || i(de);
       } finally {
         U(!1);
       }
     }
-  }, O = (B) => ({
+  }, O = (A) => ({
     ...v.input,
-    ...H[B] ? v.inputError : {}
+    ...F[A] ? v.inputError : {}
   }), q = () => ({
     ...v.button,
-    ...P ? v.buttonLoading : {},
-    ...!c || !R && !E || !u || !m || P || t === "tenant" && !L ? v.buttonDisabled : {}
-  }), W = c && (R || E) && u && m && (t === "user" || L);
-  return /* @__PURE__ */ d("div", { className: w, style: v.container, children: [
-    /* @__PURE__ */ s("h2", { style: v.title, children: y.title }),
-    /* @__PURE__ */ d("form", { onSubmit: Q, style: v.form, children: [
+    ...l ? v.buttonLoading : {},
+    ...!f || !N && !E || !u || !C || l || t === "tenant" && !T ? v.buttonDisabled : {}
+  }), j = f && (N || E) && u && C && (t === "user" || T);
+  return /* @__PURE__ */ d("div", { className: y, style: v.container, children: [
+    /* @__PURE__ */ s("h2", { style: v.title, children: m.title }),
+    /* @__PURE__ */ d("form", { onSubmit: J, style: v.form, children: [
       /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.nameLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.nameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "name",
             name: "name",
             type: "text",
-            value: c,
-            onChange: (B) => {
-              I(B.target.value), H.name && f((X) => ({ ...X, name: !1 }));
+            value: f,
+            onChange: (A) => {
+              x(A.target.value), F.name && c((V) => ({ ...V, name: !1 }));
             },
-            placeholder: y.namePlaceholder,
+            placeholder: m.namePlaceholder,
             style: O("name"),
-            disabled: P
+            disabled: l
           }
         )
       ] }),
       /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.lastNameLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: p,
-            onChange: (B) => x(B.target.value),
-            placeholder: y.lastNamePlaceholder,
+            value: h,
+            onChange: (A) => R(A.target.value),
+            placeholder: m.lastNamePlaceholder,
             style: v.input,
-            disabled: P
+            disabled: l
           }
         )
       ] }),
       /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.emailLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: R,
-            onChange: (B) => {
-              F(B.target.value), H.email && f((X) => ({ ...X, email: !1, phoneNumber: !1 }));
+            value: N,
+            onChange: (A) => {
+              D(A.target.value), F.email && c((V) => ({ ...V, email: !1, phoneNumber: !1 }));
             },
-            placeholder: y.emailPlaceholder,
+            placeholder: m.emailPlaceholder,
             style: O("email"),
-            disabled: P
+            disabled: l
           }
         )
       ] }),
       /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.phoneNumberLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2907,29 +2894,18 @@ function Wr({
             name: "phoneNumber",
             type: "tel",
             value: E,
-            onChange: (B) => {
-              A(B.target.value), H.phoneNumber && f((X) => ({ ...X, email: !1, phoneNumber: !1 }));
+            onChange: (A) => {
+              P(A.target.value), F.phoneNumber && c((V) => ({ ...V, email: !1, phoneNumber: !1 }));
             },
-            placeholder: y.phoneNumberPlaceholder,
+            placeholder: m.phoneNumberPlaceholder,
             style: O("phoneNumber"),
-            disabled: P
+            disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ s(
-        "div",
-        {
-          style: {
-            fontSize: "0.875rem",
-            color: "#6b7280",
-            textAlign: "center",
-            margin: "0.5rem 0"
-          },
-          children: "At least one contact method (email or phone) is required"
-        }
-      ),
+      /* @__PURE__ */ s("div", { style: v.hintText, children: m.contactMethodHint }),
       /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.passwordLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2937,74 +2913,74 @@ function Wr({
             name: "password",
             type: "password",
             value: u,
-            onChange: (B) => {
-              k(B.target.value), H.password && f((X) => ({ ...X, password: !1 }));
+            onChange: (A) => {
+              S(A.target.value), F.password && c((V) => ({ ...V, password: !1 }));
             },
-            placeholder: y.passwordPlaceholder,
+            placeholder: m.passwordPlaceholder,
             style: O("password"),
-            disabled: P
+            disabled: l
           }
         )
       ] }),
       /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.confirmPasswordLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: m,
-            onChange: (B) => {
-              M(B.target.value), H.confirmPassword && f((X) => ({ ...X, confirmPassword: !1 })), l === y.passwordMismatchError && N("");
+            value: C,
+            onChange: (A) => {
+              M(A.target.value), F.confirmPassword && c((V) => ({ ...V, confirmPassword: !1 })), b === m.passwordMismatchError && L("");
             },
-            placeholder: y.confirmPasswordPlaceholder,
+            placeholder: m.confirmPasswordPlaceholder,
             style: O("confirmPassword"),
-            disabled: P
+            disabled: l
           }
         )
       ] }),
       t === "tenant" && /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: y.tenantNameLabel }),
+        /* @__PURE__ */ s("label", { style: v.label, children: m.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
-            value: L,
-            onChange: (B) => {
-              D(B.target.value), H.tenantName && f((X) => ({ ...X, tenantName: !1 }));
+            value: T,
+            onChange: (A) => {
+              $(A.target.value), F.tenantName && c((V) => ({ ...V, tenantName: !1 }));
             },
-            placeholder: y.tenantNamePlaceholder,
+            placeholder: m.tenantNamePlaceholder,
             style: O("tenantName"),
-            disabled: P
+            disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !W || P, style: q(), children: P ? y.loadingText : y.submitButton }),
-      l && /* @__PURE__ */ s("div", { style: v.errorText, children: l })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !j || l, style: q(), children: l ? m.loadingText : m.submitButton }),
+      b && /* @__PURE__ */ s("div", { style: v.errorText, children: b })
     ] }),
-    (h || g) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
-      g && /* @__PURE__ */ d("div", { children: [
+    (p || w) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
+      w && /* @__PURE__ */ d("div", { children: [
         /* @__PURE__ */ d("span", { style: v.divider, children: [
-          y.magicLinkText,
+          m.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: y.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: m.magicLinkLink })
       ] }),
-      g && h && /* @__PURE__ */ s("div", { style: v.divider, children: "•" }),
-      h && /* @__PURE__ */ d("div", { children: [
+      w && p && /* @__PURE__ */ s("div", { style: v.divider, children: m.dividerBullet }),
+      p && /* @__PURE__ */ d("div", { children: [
         /* @__PURE__ */ d("span", { style: v.divider, children: [
-          y.loginText,
+          m.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: v.link, children: y.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: v.link, children: m.loginLink })
       ] })
     ] })
   ] });
 }
-const Yt = {
+const Zt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -3021,8 +2997,14 @@ const Yt = {
   errorMessage: "Failed to send magic link. Please try again.",
   loadingText: "Sending magic link...",
   verifyingText: "Verifying magic link...",
-  description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you."
-}, Xt = {
+  verifyingDescription: "Please wait while we verify your magic link...",
+  description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you.",
+  showNameToggle: "New user? Add your name",
+  hideNameToggle: "Existing user? Hide name fields",
+  tenantNotFoundError: "Tenant not found",
+  missingTenantOrEmailError: "Missing tenant or email",
+  dividerBullet: "•"
+}, Jt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3123,9 +3105,29 @@ const Yt = {
     margin: "0.5rem 0",
     color: "#6b7280",
     fontSize: "0.875rem"
+  },
+  verifyingContainer: {
+    textAlign: "center",
+    padding: "2rem"
+  },
+  verifyingText: {
+    fontSize: "1rem",
+    color: "#6b7280"
+  },
+  toggleContainer: {
+    textAlign: "center",
+    marginTop: "0.5rem"
+  },
+  toggleLink: {
+    background: "none",
+    border: "none",
+    color: "#3b82f6",
+    fontSize: "0.875rem",
+    cursor: "pointer",
+    textDecoration: "underline"
   }
 };
-function Vr({
+function Wr({
   copy: n = {},
   styles: e = {},
   onSuccess: t,
@@ -3133,194 +3135,181 @@ function Vr({
   onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: h,
-  verifyToken: g,
-  frontendUrl: w
+  className: p,
+  verifyToken: w,
+  frontendUrl: y
 }) {
-  const [c, I] = T(""), [p, x] = T(""), [R, F] = T(""), [E, A] = T(!1), [u, k] = T(!1), [m, M] = T(""), [L, D] = T(""), [P, U] = T({}), [l, N] = T(!1), { sendMagicLink: H, verifyMagicLink: f } = ue(), { tenant: C } = we(), S = { ...Yt, ...n }, b = { ...Xt, ...e };
-  ee(() => {
-    g && y(g);
-  }, [g]);
-  const y = async (q) => {
-    if (!C || !c) {
-      M("Missing tenant or email");
+  const [f, x] = k(""), [h, R] = k(""), [N, D] = k(""), [E, P] = k(!1), [u, S] = k(!1), [C, M] = k(""), [T, $] = k(""), [l, U] = k({}), [b, L] = k(!1), { sendMagicLink: F, verifyMagicLink: c } = ue(), { tenant: H } = me(), I = { ...Zt, ...n }, g = { ...Jt, ...e };
+  re(() => {
+    w && m(w);
+  }, [w]);
+  const m = async (q) => {
+    if (!H || !f) {
+      M(I.missingTenantOrEmailError);
       return;
     }
-    k(!0), M("");
+    S(!0), M("");
     try {
-      const W = await f({
+      const j = await c({
         token: q,
-        email: c
+        email: f
         // tenantId inferred from context automatically
       });
-      t == null || t(W);
-    } catch (W) {
-      const B = W.message || "Failed to verify magic link";
-      M(B), r == null || r(B);
+      t == null || t(j);
+    } catch (j) {
+      const A = j.message || "Failed to verify magic link";
+      M(A), r == null || r(A);
     } finally {
-      k(!1);
+      S(!1);
     }
   }, v = () => {
     const q = {};
-    return c.trim() || (q.email = !0), l && !p.trim() && (q.name = !0), U(q), Object.keys(q).length === 0;
-  }, G = async (q) => {
+    return f.trim() || (q.email = !0), b && !h.trim() && (q.name = !0), U(q), Object.keys(q).length === 0;
+  }, Q = async (q) => {
     if (q.preventDefault(), !!v()) {
-      if (!(C != null && C.id)) {
-        M("Tenant not found");
+      if (!(H != null && H.id)) {
+        M(I.tenantNotFoundError);
         return;
       }
-      A(!0), M(""), D("");
+      P(!0), M(""), $("");
       try {
-        const W = w || (typeof window < "u" ? window.location.origin : ""), B = await H({
-          email: c,
-          tenantId: C.id,
-          frontendUrl: W,
-          name: l ? p : void 0,
-          lastName: l ? R : void 0
+        const j = y || (typeof window < "u" ? window.location.origin : ""), A = await F({
+          email: f,
+          tenantId: H.id,
+          frontendUrl: j,
+          name: b ? h : void 0,
+          lastName: b ? N : void 0
         });
-        D(S.successMessage), t == null || t(B);
-      } catch (W) {
-        const B = W.message || S.errorMessage;
-        M(B), r == null || r(B);
+        $(I.successMessage), t == null || t(A);
+      } catch (j) {
+        const A = j.message || I.errorMessage;
+        M(A), r == null || r(A);
       } finally {
-        A(!1);
+        P(!1);
       }
     }
-  }, Q = (q) => ({
-    ...b.input,
-    ...P[q] ? b.inputError : {}
+  }, J = (q) => ({
+    ...g.input,
+    ...l[q] ? g.inputError : {}
   }), O = () => ({
-    ...b.button,
-    ...E || u ? b.buttonLoading : {},
-    ...!c || E || u ? b.buttonDisabled : {}
+    ...g.button,
+    ...E || u ? g.buttonLoading : {},
+    ...!f || E || u ? g.buttonDisabled : {}
   });
-  return u ? /* @__PURE__ */ d("div", { className: h, style: b.container, children: [
-    /* @__PURE__ */ s("h2", { style: b.title, children: S.verifyingText }),
-    /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ d("div", { className: h, style: b.container, children: [
-    /* @__PURE__ */ s("h2", { style: b.title, children: S.title }),
-    /* @__PURE__ */ s("p", { style: b.description, children: S.description }),
-    /* @__PURE__ */ d("form", { onSubmit: G, style: b.form, children: [
-      /* @__PURE__ */ d("div", { style: b.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: b.label, children: S.emailLabel }),
+  return u ? /* @__PURE__ */ d("div", { className: p, style: g.container, children: [
+    /* @__PURE__ */ s("h2", { style: g.title, children: I.verifyingText }),
+    /* @__PURE__ */ s("div", { style: g.verifyingContainer, children: /* @__PURE__ */ s("div", { style: g.verifyingText, children: I.verifyingDescription }) })
+  ] }) : /* @__PURE__ */ d("div", { className: p, style: g.container, children: [
+    /* @__PURE__ */ s("h2", { style: g.title, children: I.title }),
+    /* @__PURE__ */ s("p", { style: g.description, children: I.description }),
+    /* @__PURE__ */ d("form", { onSubmit: Q, style: g.form, children: [
+      /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: g.label, children: I.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: c,
+            value: f,
             onChange: (q) => {
-              I(q.target.value), P.email && U((W) => ({ ...W, email: !1 }));
+              x(q.target.value), l.email && U((j) => ({ ...j, email: !1 }));
             },
-            placeholder: S.emailPlaceholder,
-            style: Q("email"),
+            placeholder: I.emailPlaceholder,
+            style: J("email"),
             disabled: E || u
           }
         )
       ] }),
-      !l && /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
+      !b && /* @__PURE__ */ s("div", { style: g.toggleContainer, children: /* @__PURE__ */ s(
         "button",
         {
           type: "button",
-          onClick: () => N(!0),
-          style: {
-            background: "none",
-            border: "none",
-            color: "#3b82f6",
-            fontSize: "0.875rem",
-            cursor: "pointer",
-            textDecoration: "underline"
-          },
-          children: "New user? Add your name"
+          onClick: () => L(!0),
+          style: g.toggleLink,
+          children: I.showNameToggle
         }
       ) }),
-      l && /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ d("div", { style: b.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: b.label, children: S.nameLabel }),
+      b && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: I.nameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: p,
+              value: h,
               onChange: (q) => {
-                x(q.target.value), P.name && U((W) => ({ ...W, name: !1 }));
+                R(q.target.value), l.name && U((j) => ({ ...j, name: !1 }));
               },
-              placeholder: S.namePlaceholder,
-              style: Q("name"),
+              placeholder: I.namePlaceholder,
+              style: J("name"),
               disabled: E || u
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: b.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: b.label, children: S.lastNameLabel }),
+        /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: I.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "lastName",
               name: "lastName",
               type: "text",
-              value: R,
-              onChange: (q) => F(q.target.value),
-              placeholder: S.lastNamePlaceholder,
-              style: b.input,
+              value: N,
+              onChange: (q) => D(q.target.value),
+              placeholder: I.lastNamePlaceholder,
+              style: g.input,
               disabled: E || u
             }
           )
         ] }),
-        /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
+        /* @__PURE__ */ s("div", { style: g.toggleContainer, children: /* @__PURE__ */ s(
           "button",
           {
             type: "button",
             onClick: () => {
-              N(!1), x(""), F("");
-            },
-            style: {
-              background: "none",
-              border: "none",
-              color: "#6b7280",
-              fontSize: "0.875rem",
-              cursor: "pointer",
-              textDecoration: "underline"
+              L(!1), R(""), D("");
             },
-            children: "Existing user? Hide name fields"
+            style: g.toggleLink,
+            children: I.hideNameToggle
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !c || E || u, style: O(), children: E ? S.loadingText : S.submitButton }),
-      m && /* @__PURE__ */ s("div", { style: b.errorText, children: m }),
-      L && /* @__PURE__ */ s("div", { style: b.successText, children: L })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !f || E || u, style: O(), children: E ? I.loadingText : I.submitButton }),
+      C && /* @__PURE__ */ s("div", { style: g.errorText, children: C }),
+      T && /* @__PURE__ */ s("div", { style: g.successText, children: T })
     ] }),
-    a && /* @__PURE__ */ d("div", { style: b.linkContainer, children: [
+    a && /* @__PURE__ */ d("div", { style: g.linkContainer, children: [
       /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: b.divider, children: [
-          S.loginText,
+        /* @__PURE__ */ d("span", { style: g.divider, children: [
+          I.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: i, style: b.link, children: S.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: g.link, children: I.loginLink })
       ] }),
-      /* @__PURE__ */ s("div", { style: b.divider, children: "•" }),
+      /* @__PURE__ */ s("div", { style: g.divider, children: I.dividerBullet }),
       /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: b.divider, children: [
-          S.signupText,
+        /* @__PURE__ */ d("span", { style: g.divider, children: [
+          I.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: b.link, children: S.signupLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: g.link, children: I.signupLink })
       ] })
     ] })
   ] });
 }
-const er = {
+const Yt = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
   errorMessage: "Failed to verify magic link. The link may be expired or invalid.",
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
-  backToLoginButton: "Back to Login"
-}, et = {
+  backToLoginButton: "Back to Login",
+  missingParamsError: "Missing required parameters: token or email"
+}, Ye = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3406,8 +3395,14 @@ const er = {
     fontWeight: "500",
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
+  },
+  retryButtonHover: {
+    backgroundColor: "#2563eb"
+  },
+  backButtonHover: {
+    backgroundColor: "#e5e7eb"
   }
-}, tr = () => /* @__PURE__ */ s("div", { style: et.spinner }), rr = () => /* @__PURE__ */ d(
+}, Xt = () => /* @__PURE__ */ s("div", { style: Ye.spinner }), er = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3424,7 +3419,7 @@ const er = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), nr = () => /* @__PURE__ */ d(
+), tr = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3442,12 +3437,12 @@ const er = {
       /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), sr = {
-  loading: /* @__PURE__ */ s(tr, {}),
-  success: /* @__PURE__ */ s(rr, {}),
-  error: /* @__PURE__ */ s(nr, {})
+), rr = {
+  loading: /* @__PURE__ */ s(Xt, {}),
+  success: /* @__PURE__ */ s(er, {}),
+  error: /* @__PURE__ */ s(tr, {})
 };
-function jr({
+function Vr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -3455,80 +3450,83 @@ function jr({
   onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: h,
-  token: g,
-  email: w,
-  appId: c,
-  tenantSlug: I,
-  autoRedirectDelay: p = 3e3
+  className: p,
+  token: w,
+  email: y,
+  appId: f,
+  tenantSlug: x,
+  autoRedirectDelay: h = 3e3
 }) {
-  const [x, R] = T("verifying"), [F, E] = T(""), { verifyMagicLink: A } = ue(), u = { ...er, ...n }, k = { ...et, ...e }, m = { ...sr, ...t }, M = () => {
+  const [R, N] = k("verifying"), [D, E] = k(""), { verifyMagicLink: P } = ue(), u = { ...Yt, ...n }, S = { ...Ye, ...e }, C = { ...rr, ...t }, M = () => {
     if (typeof window > "u") return {};
-    const l = new URLSearchParams(window.location.search);
+    const b = new URLSearchParams(window.location.search);
     return {
-      token: g || l.get("token") || "",
-      email: w || l.get("email") || "",
-      appId: c || l.get("appId") || "",
-      tenantSlug: I || l.get("tenantSlug") || void 0
+      token: w || b.get("token") || "",
+      email: y || b.get("email") || "",
+      appId: f || b.get("appId") || "",
+      tenantSlug: x || b.get("tenantSlug") || void 0
     };
-  }, L = async () => {
-    R("verifying"), E("");
+  }, T = async () => {
+    N("verifying"), E("");
     try {
-      const l = M();
-      if (!l.token || !l.email)
-        throw new Error("Missing required parameters: token or email");
-      const N = await A({
-        token: l.token,
-        email: l.email,
-        tenantSlug: l.tenantSlug
+      const b = M();
+      if (!b.token || !b.email)
+        throw new Error(u.missingParamsError);
+      const L = await P({
+        token: b.token,
+        email: b.email,
+        tenantSlug: b.tenantSlug
       });
-      R("success"), r == null || r(N), p > 0 && setTimeout(() => {
-        R("redirecting");
-      }, p);
-    } catch (l) {
-      const N = l.message || u.errorMessage;
-      E(N), R("error"), i == null || i(N);
+      N("success"), r == null || r(L), h > 0 && setTimeout(() => {
+        N("redirecting");
+      }, h);
+    } catch (b) {
+      const L = b.message || u.errorMessage;
+      E(L), N("error"), i == null || i(L);
     }
-  }, D = () => {
-    o == null || o(), L();
-  }, P = () => {
+  }, $ = () => {
+    o == null || o(), T();
+  }, l = () => {
     a == null || a();
   };
-  ee(() => {
-    L();
+  re(() => {
+    T();
   }, []);
   const U = () => {
-    switch (x) {
+    switch (R) {
       case "verifying":
-        return /* @__PURE__ */ d("div", { style: k.message, children: [
-          m.loading,
+        return /* @__PURE__ */ d("div", { style: S.message, children: [
+          C.loading,
           u.verifyingMessage
         ] });
       case "success":
         return /* @__PURE__ */ d(_, { children: [
-          m.success,
-          /* @__PURE__ */ s("div", { style: k.successMessage, children: u.successMessage })
+          C.success,
+          /* @__PURE__ */ s("div", { style: S.successMessage, children: u.successMessage })
         ] });
       case "redirecting":
         return /* @__PURE__ */ d(_, { children: [
-          m.loading,
-          /* @__PURE__ */ s("div", { style: k.message, children: u.redirectingMessage })
+          C.loading,
+          /* @__PURE__ */ s("div", { style: S.message, children: u.redirectingMessage })
         ] });
       case "error":
         return /* @__PURE__ */ d(_, { children: [
-          m.error,
-          /* @__PURE__ */ s("div", { style: k.errorMessage, children: F || u.errorMessage }),
-          /* @__PURE__ */ d("div", { style: k.buttonContainer, children: [
+          C.error,
+          /* @__PURE__ */ s("div", { style: S.errorMessage, children: D || u.errorMessage }),
+          /* @__PURE__ */ d("div", { style: S.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: D,
-                style: k.retryButton,
-                onMouseOver: (l) => {
-                  l.currentTarget.style.backgroundColor = "#2563eb";
+                onClick: $,
+                style: S.retryButton,
+                onMouseOver: (b) => {
+                  Object.assign(b.currentTarget.style, S.retryButtonHover);
                 },
-                onMouseOut: (l) => {
-                  l.currentTarget.style.backgroundColor = "#3b82f6";
+                onMouseOut: (b) => {
+                  const L = S.retryButton || {};
+                  Object.keys(S.retryButtonHover || {}).forEach((F) => {
+                    b.currentTarget.style[F] = L[F] ?? "";
+                  });
                 },
                 children: u.retryButton
               }
@@ -3536,13 +3534,16 @@ function jr({
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: P,
-                style: k.backButton,
-                onMouseOver: (l) => {
-                  l.currentTarget.style.backgroundColor = "#e5e7eb";
+                onClick: l,
+                style: S.backButton,
+                onMouseOver: (b) => {
+                  Object.assign(b.currentTarget.style, S.backButtonHover);
                 },
-                onMouseOut: (l) => {
-                  l.currentTarget.style.backgroundColor = "#f3f4f6";
+                onMouseOut: (b) => {
+                  const L = S.backButton || {};
+                  Object.keys(S.backButtonHover || {}).forEach((F) => {
+                    b.currentTarget.style[F] = L[F] ?? "";
+                  });
                 },
                 children: u.backToLoginButton
               }
@@ -3553,18 +3554,18 @@ function jr({
         return null;
     }
   };
-  return /* @__PURE__ */ d("div", { style: k.container, className: h, children: [
+  return /* @__PURE__ */ d("div", { style: S.container, className: p, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ s("h1", { style: k.title, children: u.title }),
+    /* @__PURE__ */ s("h1", { style: S.title, children: u.title }),
     U()
   ] });
 }
-const ir = {
+const nr = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3585,8 +3586,12 @@ const ir = {
   resetSubmitButton: "Reset Password",
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
-  passwordMismatchError: "Passwords do not match"
-}, or = {
+  passwordMismatchError: "Passwords do not match",
+  requestNewLinkLink: "Request New Link",
+  haveTokenLink: "I have a token",
+  tenantNotFoundError: "Tenant not found",
+  dividerBullet: "•"
+}, sr = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3676,9 +3681,13 @@ const ir = {
     textDecoration: "none",
     fontSize: "0.875rem",
     cursor: "pointer"
+  },
+  modeSwitchDivider: {
+    margin: "0 0.5rem",
+    color: "#6b7280"
   }
 };
-function Gr({
+function jr({
   copy: n = {},
   styles: e = {},
   mode: t = "request",
@@ -3686,105 +3695,105 @@ function Gr({
   onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: h,
-  className: g
+  onModeChange: p,
+  className: w
 }) {
-  const [w, c] = T(""), [I, p] = T(r), [x, R] = T(""), [F, E] = T(""), [A, u] = T(!1), [k, m] = T(""), [M, L] = T(""), [D, P] = T({}), { requestPasswordReset: U, confirmPasswordReset: l } = ue(), { tenant: N } = we(), H = { ...ir, ...n }, f = { ...or, ...e }, C = () => {
+  const [y, f] = k(""), [x, h] = k(r), [R, N] = k(""), [D, E] = k(""), [P, u] = k(!1), [S, C] = k(""), [M, T] = k(""), [$, l] = k({}), { requestPasswordReset: U, confirmPasswordReset: b } = ue(), { tenant: L } = me(), F = { ...nr, ...n }, c = { ...sr, ...e }, H = () => {
     const O = {};
-    return w.trim() || (O.email = !0), P(O), Object.keys(O).length === 0;
-  }, S = () => {
+    return y.trim() || (O.email = !0), l(O), Object.keys(O).length === 0;
+  }, I = () => {
     const O = {};
-    return I.trim() || (O.token = !0), x.trim() || (O.newPassword = !0), F.trim() || (O.confirmPassword = !0), P(O), Object.keys(O).length === 0;
-  }, b = async (O) => {
-    if (O.preventDefault(), !!C()) {
-      if (!(N != null && N.id)) {
-        m("Tenant not found");
+    return x.trim() || (O.token = !0), R.trim() || (O.newPassword = !0), D.trim() || (O.confirmPassword = !0), l(O), Object.keys(O).length === 0;
+  }, g = async (O) => {
+    if (O.preventDefault(), !!H()) {
+      if (!(L != null && L.id)) {
+        C(F.tenantNotFoundError);
         return;
       }
-      u(!0), m(""), L("");
+      u(!0), C(""), T("");
       try {
-        await U({ email: w, tenantId: N.id }), L(H.successMessage), i == null || i();
+        await U({ email: y, tenantId: L.id }), T(F.successMessage), i == null || i();
       } catch (q) {
-        const W = q.message || H.errorMessage;
-        m(W), o == null || o(W);
+        const j = q.message || F.errorMessage;
+        C(j), o == null || o(j);
       } finally {
         u(!1);
       }
     }
-  }, y = async (O) => {
-    if (O.preventDefault(), !!S()) {
-      if (x !== F) {
-        m(H.passwordMismatchError), P({ confirmPassword: !0 });
+  }, m = async (O) => {
+    if (O.preventDefault(), !!I()) {
+      if (R !== D) {
+        C(F.passwordMismatchError), l({ confirmPassword: !0 });
         return;
       }
-      u(!0), m(""), L("");
+      u(!0), C(""), T("");
       try {
-        await l({ token: I, newPassword: x }), L(H.resetSuccessMessage), i == null || i();
+        await b({ token: x, newPassword: R }), T(F.resetSuccessMessage), i == null || i();
       } catch (q) {
-        const W = q.message || H.errorMessage;
-        m(W), o == null || o(W);
+        const j = q.message || F.errorMessage;
+        C(j), o == null || o(j);
       } finally {
         u(!1);
       }
     }
   }, v = (O) => ({
-    ...f.input,
-    ...D[O] ? f.inputError : {}
-  }), G = () => ({
-    ...f.button,
-    ...A ? f.buttonLoading : {}
+    ...c.input,
+    ...$[O] ? c.inputError : {}
+  }), Q = () => ({
+    ...c.button,
+    ...P ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const O = I && x && F;
-    return /* @__PURE__ */ d("div", { className: g, style: f.container, children: [
-      /* @__PURE__ */ s("h2", { style: f.title, children: H.resetTitle }),
-      /* @__PURE__ */ s("p", { style: f.subtitle, children: H.resetSubtitle }),
-      /* @__PURE__ */ d("form", { onSubmit: y, style: f.form, children: [
-        /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: f.label, children: H.tokenLabel }),
+    const O = x && R && D;
+    return /* @__PURE__ */ d("div", { className: w, style: c.container, children: [
+      /* @__PURE__ */ s("h2", { style: c.title, children: F.resetTitle }),
+      /* @__PURE__ */ s("p", { style: c.subtitle, children: F.resetSubtitle }),
+      /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: F.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: I,
+              value: x,
               onChange: (q) => {
-                p(q.target.value), D.token && P((W) => ({ ...W, token: !1 }));
+                h(q.target.value), $.token && l((j) => ({ ...j, token: !1 }));
               },
-              placeholder: H.tokenPlaceholder,
+              placeholder: F.tokenPlaceholder,
               style: v("token"),
-              disabled: A
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: f.label, children: H.newPasswordLabel }),
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: F.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: x,
+              value: R,
               onChange: (q) => {
-                R(q.target.value), D.newPassword && P((W) => ({ ...W, newPassword: !1 }));
+                N(q.target.value), $.newPassword && l((j) => ({ ...j, newPassword: !1 }));
               },
-              placeholder: H.newPasswordPlaceholder,
+              placeholder: F.newPasswordPlaceholder,
               style: v("newPassword"),
-              disabled: A
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: f.label, children: H.confirmPasswordLabel }),
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: F.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: F,
+              value: D,
               onChange: (q) => {
-                E(q.target.value), D.confirmPassword && P((W) => ({ ...W, confirmPassword: !1 })), k === H.passwordMismatchError && m("");
+                E(q.target.value), $.confirmPassword && l((j) => ({ ...j, confirmPassword: !1 })), S === F.passwordMismatchError && C("");
               },
-              placeholder: H.confirmPasswordPlaceholder,
+              placeholder: F.confirmPasswordPlaceholder,
               style: v("confirmPassword"),
-              disabled: A
+              disabled: P
             }
           )
         ] }),
@@ -3792,44 +3801,44 @@ function Gr({
           "button",
           {
             type: "submit",
-            disabled: !O || A,
+            disabled: !O || P,
             style: {
-              ...G(),
-              ...!O || A ? f.buttonDisabled : {}
+              ...Q(),
+              ...!O || P ? c.buttonDisabled : {}
             },
-            children: A ? H.resetLoadingText : H.resetSubmitButton
+            children: P ? F.resetLoadingText : F.resetSubmitButton
           }
         ),
-        k && /* @__PURE__ */ s("div", { style: f.errorText, children: k }),
-        M && /* @__PURE__ */ s("div", { style: f.successText, children: M })
+        S && /* @__PURE__ */ s("div", { style: c.errorText, children: S }),
+        M && /* @__PURE__ */ s("div", { style: c.successText, children: M })
       ] }),
-      /* @__PURE__ */ d("div", { style: f.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: H.backToLoginLink }),
-        h && /* @__PURE__ */ d(_, { children: [
-          /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ s("a", { onClick: () => h("request"), style: f.link, children: "Request New Link" })
+      /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
+        p && /* @__PURE__ */ d(_, { children: [
+          /* @__PURE__ */ s("span", { style: c.modeSwitchDivider, children: F.dividerBullet }),
+          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: F.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
-  const Q = w;
-  return /* @__PURE__ */ d("div", { className: g, style: f.container, children: [
-    /* @__PURE__ */ s("h2", { style: f.title, children: H.title }),
-    /* @__PURE__ */ s("p", { style: f.subtitle, children: H.subtitle }),
-    /* @__PURE__ */ d("form", { onSubmit: b, style: f.form, children: [
-      /* @__PURE__ */ d("div", { style: f.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: f.label, children: H.emailLabel }),
+  const J = y;
+  return /* @__PURE__ */ d("div", { className: w, style: c.container, children: [
+    /* @__PURE__ */ s("h2", { style: c.title, children: F.title }),
+    /* @__PURE__ */ s("p", { style: c.subtitle, children: F.subtitle }),
+    /* @__PURE__ */ d("form", { onSubmit: g, style: c.form, children: [
+      /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: c.label, children: F.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
-            value: w,
+            value: y,
             onChange: (O) => {
-              c(O.target.value), D.email && P((q) => ({ ...q, email: !1 }));
+              f(O.target.value), $.email && l((q) => ({ ...q, email: !1 }));
             },
-            placeholder: H.emailPlaceholder,
+            placeholder: F.emailPlaceholder,
             style: v("email"),
-            disabled: A
+            disabled: P
           }
         )
       ] }),
@@ -3837,27 +3846,27 @@ function Gr({
         "button",
         {
           type: "submit",
-          disabled: !Q || A,
+          disabled: !J || P,
           style: {
-            ...G(),
-            ...!Q || A ? f.buttonDisabled : {}
+            ...Q(),
+            ...!J || P ? c.buttonDisabled : {}
           },
-          children: A ? H.loadingText : H.submitButton
+          children: P ? F.loadingText : F.submitButton
         }
       ),
-      k && /* @__PURE__ */ s("div", { style: f.errorText, children: k }),
-      M && /* @__PURE__ */ s("div", { style: f.successText, children: M })
+      S && /* @__PURE__ */ s("div", { style: c.errorText, children: S }),
+      M && /* @__PURE__ */ s("div", { style: c.successText, children: M })
     ] }),
-    /* @__PURE__ */ d("div", { style: f.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: H.backToLoginLink }),
-      h && /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ s("a", { onClick: () => h("reset"), style: f.link, children: "I have a token" })
+    /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
+      p && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ s("span", { style: c.modeSwitchDivider, children: F.dividerBullet }),
+        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: F.haveTokenLink })
       ] })
     ] })
   ] });
 }
-const ar = () => /* @__PURE__ */ s(
+const ir = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3869,7 +3878,7 @@ const ar = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), lr = ({ error: n, retry: e }) => /* @__PURE__ */ d(
+), or = ({ error: n, retry: e }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -3903,139 +3912,169 @@ const ar = () => /* @__PURE__ */ s(
     ]
   }
 );
-function Qr({
+function Gr({
   children: n,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = ke(), h = Pe(), g = Ce(), w = Je(), c = Ye(), I = (h == null ? void 0 : h.isTenantLoading) ?? !1, p = (h == null ? void 0 : h.tenantError) ?? null, x = (h == null ? void 0 : h.tenantSlug) ?? null, R = (h == null ? void 0 : h.retryTenant) ?? (() => {
-  }), F = (g == null ? void 0 : g.isAuthReady) ?? !0, E = (w == null ? void 0 : w.isReady) ?? !0, A = (c == null ? void 0 : c.isReady) ?? !0, u = r && h && x, L = i || u && I || g && !F || w && !E || c && !A, D = o || (u ? p : null), P = () => {
-    o && a(), p && h && R();
+  const { isAppLoading: i, appError: o, retryApp: a } = Se(), p = xe(), w = Fe(), y = Ke(), f = Ze(), x = (p == null ? void 0 : p.isTenantLoading) ?? !1, h = (p == null ? void 0 : p.tenantError) ?? null, R = (p == null ? void 0 : p.tenantSlug) ?? null, N = (p == null ? void 0 : p.retryTenant) ?? (() => {
+  }), D = (w == null ? void 0 : w.isAuthReady) ?? !0, E = (y == null ? void 0 : y.isReady) ?? !0, P = (f == null ? void 0 : f.isReady) ?? !0, u = r && p && R, T = i || u && x || w && !D || y && !E || f && !P, $ = o || (u ? h : null), l = () => {
+    o && a(), h && p && N();
   };
-  if (L)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(ar, {}) });
-  if (D) {
-    const U = typeof t == "function" ? t(D, P) : t || /* @__PURE__ */ s(lr, { error: D, retry: P });
+  if (T)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(ir, {}) });
+  if ($) {
+    const U = typeof t == "function" ? t($, l) : t || /* @__PURE__ */ s(or, { error: $, retry: l });
     return /* @__PURE__ */ s(_, { children: U });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-function Kr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = ke(), o = Pe(), a = Ce(), h = Je(), g = Ye(), w = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, I = (o == null ? void 0 : o.tenant) ?? null, p = (o == null ? void 0 : o.tenantSlug) ?? null, x = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), R = (a == null ? void 0 : a.isAuthReady) ?? !0, F = (h == null ? void 0 : h.isReady) ?? !0, E = (g == null ? void 0 : g.isReady) ?? !0, A = n && o && p, M = e || A && w || a && !R || h && !F || g && !E, L = t || (A ? c : null);
+function Qr(n = !0) {
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Se(), o = xe(), a = Fe(), p = Ke(), w = Ze(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, f = (o == null ? void 0 : o.tenantError) ?? null, x = (o == null ? void 0 : o.tenant) ?? null, h = (o == null ? void 0 : o.tenantSlug) ?? null, R = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), N = (a == null ? void 0 : a.isAuthReady) ?? !0, D = (p == null ? void 0 : p.isReady) ?? !0, E = (w == null ? void 0 : w.isReady) ?? !0, P = n && o && h, M = e || P && y || a && !N || p && !D || w && !E, T = t || (P ? f : null);
   return {
     isLoading: M,
-    error: L,
-    isReady: !M && !L && i !== null && (!A || I !== null),
+    error: T,
+    isReady: !M && !T && i !== null && (!P || x !== null),
     retry: () => {
-      t && r(), c && o && x();
+      t && r(), f && o && R();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: w, error: c, data: I } : null,
-    auth: a ? { isReady: R } : null,
-    featureFlags: h ? { isReady: F } : null,
-    subscription: g ? { isReady: E } : null
+    tenant: o ? { isLoading: y, error: f, data: x } : null,
+    auth: a ? { isReady: N } : null,
+    featureFlags: p ? { isReady: D } : null,
+    subscription: w ? { isReady: E } : null
   };
 }
-function Zr({
+const ar = {
+  wrapper: {
+    position: "relative"
+  },
+  button: {
+    cursor: "pointer",
+    opacity: 1
+  },
+  buttonDisabled: {
+    cursor: "not-allowed",
+    opacity: 0.6
+  },
+  dropdown: {
+    position: "absolute",
+    top: "100%",
+    left: 0,
+    right: 0,
+    zIndex: 1e3,
+    backgroundColor: "white",
+    border: "1px solid #ccc",
+    borderRadius: 4,
+    boxShadow: "0 2px 8px rgba(0,0,0,0.15)",
+    maxHeight: 300,
+    overflowY: "auto"
+  },
+  item: {
+    padding: "8px 12px",
+    cursor: "pointer",
+    backgroundColor: "transparent"
+  },
+  itemSelected: {
+    backgroundColor: "#f0f0f0"
+  },
+  itemHover: {
+    backgroundColor: "#f5f5f5"
+  },
+  itemRole: {
+    opacity: 0.7,
+    marginLeft: 8
+  },
+  arrow: {
+    marginLeft: 8
+  }
+};
+function Kr({
   tenants: n,
   currentTenantId: e,
   onSelect: t,
-  className: r = "",
-  dropdownClassName: i = "",
-  itemClassName: o = "",
-  renderItem: a,
-  placeholder: h = "Select tenant",
-  disabled: g = !1,
-  showCurrentTenant: w = !0
+  styles: r = {},
+  className: i = "",
+  dropdownClassName: o = "",
+  itemClassName: a = "",
+  renderItem: p,
+  placeholder: w = "Select tenant",
+  disabled: y = !1,
+  showCurrentTenant: f = !0
 }) {
-  var k;
-  const c = Ce(), [I, p] = T(!1), x = Ke(null), R = n ?? (c == null ? void 0 : c.userTenants) ?? [], F = e ?? ((k = c == null ? void 0 : c.currentUser) == null ? void 0 : k.tenantId) ?? null, E = async (m) => {
-    p(!1), t ? t(m) : c != null && c.switchToTenant && await c.switchToTenant(m);
+  var M;
+  const x = { ...ar, ...r }, h = Fe(), [R, N] = k(!1), D = Me(null), E = n ?? (h == null ? void 0 : h.userTenants) ?? [], P = e ?? ((M = h == null ? void 0 : h.currentUser) == null ? void 0 : M.tenantId) ?? null, u = async (T) => {
+    N(!1), t ? t(T) : h != null && h.switchToTenant && await h.switchToTenant(T);
   };
-  ee(() => {
-    const m = (M) => {
-      x.current && !x.current.contains(M.target) && p(!1);
+  re(() => {
+    const T = ($) => {
+      D.current && !D.current.contains($.target) && N(!1);
     };
-    return document.addEventListener("mousedown", m), () => document.removeEventListener("mousedown", m);
+    return document.addEventListener("mousedown", T), () => document.removeEventListener("mousedown", T);
   }, []);
-  const A = R.find((m) => m.id === F);
-  if (R.length === 0)
+  const S = E.find((T) => T.id === P);
+  if (E.length === 0)
     return null;
-  if (R.length === 1 && w)
-    return /* @__PURE__ */ s("div", { className: r, children: /* @__PURE__ */ s("span", { children: R[0].name }) });
-  const u = (m, M) => /* @__PURE__ */ d("span", { style: { fontWeight: M ? "bold" : "normal" }, children: [
-    m.name,
-    m.role && /* @__PURE__ */ d("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
+  if (E.length === 1 && f)
+    return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: E[0].name }) });
+  const C = (T, $) => /* @__PURE__ */ d("span", { style: { fontWeight: $ ? "bold" : "normal" }, children: [
+    T.name,
+    T.role && /* @__PURE__ */ d("span", { style: x.itemRole, children: [
       "(",
-      m.role,
+      T.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ d("div", { ref: x, className: r, style: { position: "relative" }, children: [
+  return /* @__PURE__ */ d("div", { ref: D, className: i, style: x.wrapper, children: [
     /* @__PURE__ */ d(
       "button",
       {
         type: "button",
-        onClick: () => !g && p(!I),
-        disabled: g,
+        onClick: () => !y && N(!R),
+        disabled: y,
         style: {
-          cursor: g ? "not-allowed" : "pointer",
-          opacity: g ? 0.6 : 1
+          ...x.button,
+          ...y ? x.buttonDisabled : {}
         },
         children: [
-          A ? A.name : h,
-          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: I ? "▲" : "▼" })
+          S ? S.name : w,
+          /* @__PURE__ */ s("span", { style: x.arrow, children: R ? "▲" : "▼" })
         ]
       }
     ),
-    I && /* @__PURE__ */ s(
-      "div",
-      {
-        className: i,
-        style: {
-          position: "absolute",
-          top: "100%",
-          left: 0,
-          right: 0,
-          zIndex: 1e3,
-          backgroundColor: "white",
-          border: "1px solid #ccc",
-          borderRadius: 4,
-          boxShadow: "0 2px 8px rgba(0,0,0,0.15)",
-          maxHeight: 300,
-          overflowY: "auto"
+    R && /* @__PURE__ */ s("div", { className: o, style: x.dropdown, children: E.map((T) => {
+      const $ = T.id === P;
+      return /* @__PURE__ */ s(
+        "div",
+        {
+          className: a,
+          onClick: () => u(T.id),
+          style: {
+            ...x.item,
+            ...$ ? x.itemSelected : {}
+          },
+          onMouseEnter: (l) => {
+            $ || Object.assign(l.currentTarget.style, x.itemHover);
+          },
+          onMouseLeave: (l) => {
+            if (!$) {
+              const U = x.item || {};
+              Object.keys(x.itemHover || {}).forEach((b) => {
+                l.currentTarget.style[b] = U[b] ?? "";
+              });
+            }
+          },
+          children: p ? p(T, $) : C(T, $)
         },
-        children: R.map((m) => {
-          const M = m.id === F;
-          return /* @__PURE__ */ s(
-            "div",
-            {
-              className: o,
-              onClick: () => E(m.id),
-              style: {
-                padding: "8px 12px",
-                cursor: "pointer",
-                backgroundColor: M ? "#f0f0f0" : "transparent"
-              },
-              onMouseEnter: (L) => {
-                M || (L.target.style.backgroundColor = "#f5f5f5");
-              },
-              onMouseLeave: (L) => {
-                M || (L.target.style.backgroundColor = "transparent");
-              },
-              children: a ? a(m, M) : u(m, M)
-            },
-            m.id
-          );
-        })
-      }
-    )
+        T.id
+      );
+    }) })
   ] });
 }
-class Jr {
+class Zr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4103,7 +4142,7 @@ class Jr {
     };
   }
 }
-class Yr {
+class Jr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4154,7 +4193,7 @@ class Yr {
     });
   }
 }
-class Xr {
+class Yr {
   constructor(e) {
     this.httpService = e;
   }
@@ -4163,7 +4202,7 @@ class Xr {
     return await this.httpService.get("/health");
   }
 }
-class en {
+class Xr {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -4285,24 +4324,24 @@ class en {
     }), t;
   }
 }
-const tt = "returnTo", Me = "zone_return_to", Le = "zone_return_to";
-function tn(n = {}) {
+const Xe = "returnTo", Ee = "zone_return_to", Ie = "zone_return_to";
+function en(n = {}) {
   const {
     zoneRoots: e = {},
-    returnToParam: t = tt,
+    returnToParam: t = Xe,
     returnToStorage: r = "url"
-  } = n, i = gt(), [o, a] = mt(), { isAuthenticated: h, currentUser: g } = ue(), { tenant: w } = ye(), c = Z(() => ({ ...He, ...e }), [e]), I = !!w, p = g == null ? void 0 : g.userType, x = Z(() => {
+  } = n, i = pt(), [o, a] = ft(), { isAuthenticated: p, currentUser: w } = ue(), { tenant: y } = ge(), f = K(() => ({ ...Ue, ...e }), [e]), x = !!y, h = w == null ? void 0 : w.userType, R = K(() => {
     switch (r) {
       case "url":
         return o.get(t);
       case "session":
-        return sessionStorage.getItem(Me);
+        return sessionStorage.getItem(Ee);
       case "local":
-        return localStorage.getItem(Le);
+        return localStorage.getItem(Ie);
       default:
         return null;
     }
-  }, [r, o, t]), R = ie(() => {
+  }, [r, o, t]), N = se(() => {
     switch (r) {
       case "url": {
         const u = new URLSearchParams(o);
@@ -4310,114 +4349,114 @@ function tn(n = {}) {
         break;
       }
       case "session":
-        sessionStorage.removeItem(Me);
+        sessionStorage.removeItem(Ee);
         break;
       case "local":
-        localStorage.removeItem(Le);
+        localStorage.removeItem(Ie);
         break;
     }
-  }, [r, o, t, a]), F = ie(
+  }, [r, o, t, a]), D = se(
     (u) => {
       switch (r) {
         case "url": {
-          const k = new URLSearchParams(o);
-          k.set(t, u), a(k, { replace: !0 });
+          const S = new URLSearchParams(o);
+          S.set(t, u), a(S, { replace: !0 });
           break;
         }
         case "session":
-          sessionStorage.setItem(Me, u);
+          sessionStorage.setItem(Ee, u);
           break;
         case "local":
-          localStorage.setItem(Le, u);
+          localStorage.setItem(Ie, u);
           break;
       }
     },
     [r, o, t, a]
-  ), E = ie(
+  ), E = se(
     (u) => {
-      const k = c[u] || c.default;
-      i(k);
+      const S = f[u] || f.default;
+      i(S);
     },
-    [i, c]
-  ), A = ie(() => I ? h ? p === ae.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : h ? p === ae.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [I, h, p, c]);
+    [i, f]
+  ), P = se(() => x ? p ? h === oe.TENANT_ADMIN ? f.tenantAdmin : f.tenantUser : f.tenantGuest : p ? h === oe.TENANT_ADMIN ? f.publicAdmin : f.publicUser : f.publicGuest, [x, p, h, f]);
   return {
-    returnToUrl: x,
-    clearReturnTo: R,
-    setReturnTo: F,
+    returnToUrl: R,
+    clearReturnTo: N,
+    setReturnTo: D,
     navigateToZone: E,
-    getSmartRedirect: A
+    getSmartRedirect: P
   };
 }
-function rn(n, e, t = tt, r = "url") {
+function tn(n, e, t = Xe, r = "url") {
   if (!e || r !== "url")
     return n;
   const i = new URL(n, window.location.origin);
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  Cr as AdminZone,
-  en as ApiMappers,
-  ze as AppApiService,
-  Qr as AppLoader,
-  yr as AppProvider,
-  bt as AuthApiService,
-  Tr as AuthProvider,
-  Dr as AuthenticatedZone,
-  Xe as DEFAULT_ZONE_PRESETS,
-  He as DEFAULT_ZONE_ROOTS,
-  zr as FeatureFlag,
-  It as FeatureFlagApiService,
-  kr as FeatureFlagProvider,
-  Nr as GuestZone,
-  Xr as HealthApiService,
-  ce as HttpService,
-  Mr as LandingRoute,
-  _r as LoginForm,
-  Vr as MagicLinkForm,
-  jr as MagicLinkVerify,
+  Fr as AdminZone,
+  Xr as ApiMappers,
+  qe as AppApiService,
+  Gr as AppLoader,
+  mr as AppProvider,
+  yt as AuthApiService,
+  Sr as AuthProvider,
+  Nr as AuthenticatedZone,
+  Je as DEFAULT_ZONE_PRESETS,
+  Ue as DEFAULT_ZONE_ROOTS,
+  qr as FeatureFlag,
+  Pt as FeatureFlagApiService,
+  Tr as FeatureFlagProvider,
+  Dr as GuestZone,
+  Yr as HealthApiService,
+  le as HttpService,
+  Ir as LandingRoute,
+  zr as LoginForm,
+  Wr as MagicLinkForm,
+  Vr as MagicLinkVerify,
   $r as OpenZone,
-  Gr as PasswordRecoveryForm,
-  Jr as PermissionApiService,
-  Rr as Protected,
-  Ir as ProtectedRoute,
-  Fr as PublicZone,
-  _e as RoleApiService,
-  Ar as RoutingProvider,
-  se as SessionExpiredError,
-  Se as SessionManager,
-  Wr as SignupForm,
-  Mt as SubscriptionApiService,
+  jr as PasswordRecoveryForm,
+  Zr as PermissionApiService,
+  Pr as Protected,
+  Rr as ProtectedRoute,
+  Lr as PublicZone,
+  ze as RoleApiService,
+  xr as RoutingProvider,
+  ne as SessionExpiredError,
+  we as SessionManager,
+  _r as SignupForm,
+  Et as SubscriptionApiService,
   Or as SubscriptionGuard,
-  Yr as SubscriptionPlanApiService,
-  xr as SubscriptionProvider,
-  ve as TenantApiService,
-  Hr as TenantAuthenticatedZone,
-  qr as TenantGuestZone,
-  Br as TenantOpenZone,
-  br as TenantProvider,
+  Jr as SubscriptionPlanApiService,
+  kr as SubscriptionProvider,
+  be as TenantApiService,
+  Ur as TenantAuthenticatedZone,
+  Br as TenantGuestZone,
+  Hr as TenantOpenZone,
+  wr as TenantProvider,
   Er as TenantRoute,
-  Zr as TenantSelector,
-  Lr as TenantZone,
-  wt as TokenRefreshError,
-  yt as TokenRefreshTimeoutError,
-  St as UserApiService,
-  ae as UserType,
-  Ur as UserZone,
-  de as ZoneRoute,
-  rn as buildRedirectUrl,
-  wr as useApi,
-  ke as useApp,
-  Kr as useAppLoaderState,
+  Kr as TenantSelector,
+  Mr as TenantZone,
+  mt as TokenRefreshError,
+  gt as TokenRefreshTimeoutError,
+  wt as UserApiService,
+  oe as UserType,
+  Cr as UserZone,
+  ce as ZoneRoute,
+  tn as buildRedirectUrl,
+  yr as useApi,
+  Se as useApp,
+  Qr as useAppLoaderState,
   ue as useAuth,
-  Et as useFeatureFlags,
-  Pr as useRouting,
-  Ft as useRoutingOptional,
+  Rt as useFeatureFlags,
+  Ar as useRouting,
+  Mt as useRoutingOptional,
   vr as useSettings,
-  Lt as useSubscription,
-  ye as useTenant,
-  we as useTenantInfo,
-  Pe as useTenantOptional,
-  Sr as useTenantSettings,
-  tn as useZoneNavigation
+  It as useSubscription,
+  ge as useTenant,
+  me as useTenantInfo,
+  xe as useTenantOptional,
+  br as useTenantSettings,
+  en as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map