@skylabs-digital/react-identity-access 2.24.0 → 2.26.0

package/dist/index.es.js

@@ -1,6 +1,6 @@
-import { jsx as s, Fragment as _, jsxs as u } from "react/jsx-runtime";
-import { createContext as pe, useMemo as K, useState as k, useCallback as se, useEffect as re, useContext as ae, useRef as Me } from "react";
-import { useLocation as ke, Navigate as Se, useNavigate as ft, useSearchParams as pt } from "react-router-dom";
+import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
+import { createContext as fe, useMemo as K, useState as k, useCallback as se, useEffect as re, useContext as ae, useRef as Me } from "react";
+import { useLocation as ke, Navigate as ve, useNavigate as pt, useSearchParams as ft } from "react-router-dom";
 class le {
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
@@ -13,28 +13,28 @@ class le {
   }
   async executeRequest(e, t, r, i) {
     const o = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, a = (i == null ? void 0 : i.timeout) || this.timeout;
-    let f = {
+    let p = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
-      const c = await this.sessionManager.getValidAccessToken();
-      f = { ...f, Authorization: `Bearer ${c}` };
+      const f = await this.sessionManager.getValidAccessToken();
+      p = { ...p, Authorization: `Bearer ${f}` };
     }
-    const m = new AbortController(), b = setTimeout(() => m.abort(), a);
+    const w = new AbortController(), y = setTimeout(() => w.abort(), a);
     try {
-      const c = await fetch(o, {
+      const f = await fetch(o, {
         method: e,
-        headers: f,
+        headers: p,
         body: r ? JSON.stringify(r) : void 0,
-        signal: m.signal
+        signal: w.signal
       });
-      if (clearTimeout(b), !c.ok)
-        throw new Error(`HTTP ${c.status}: ${c.statusText}`);
-      const L = c.headers.get("content-type");
-      return !L || !L.includes("application/json") ? {} : await c.json();
-    } catch (c) {
-      throw clearTimeout(b), c instanceof Error && c.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : c;
+      if (clearTimeout(y), !f.ok)
+        throw new Error(`HTTP ${f.status}: ${f.statusText}`);
+      const x = f.headers.get("content-type");
+      return !x || !x.includes("application/json") ? {} : await f.json();
+    } catch (f) {
+      throw clearTimeout(y), f instanceof Error && f.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : f;
     }
   }
   async get(e, t) {
@@ -50,7 +50,7 @@ class le {
     return this.executeRequest("DELETE", e, void 0, t);
   }
 }
-class Oe {
+class qe {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -109,32 +109,32 @@ class Oe {
     })).data;
   }
 }
-const Le = pe(null);
-function gr({ config: n, children: e }) {
+const Le = fe(null);
+function mr({ config: n, children: e }) {
   const t = K(
     () => {
-      var p, R, I;
+      var h, R, N;
       return {
-        enabled: ((p = n.cache) == null ? void 0 : p.enabled) ?? !0,
+        enabled: ((h = n.cache) == null ? void 0 : h.enabled) ?? !0,
         ttl: ((R = n.cache) == null ? void 0 : R.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((I = n.cache) == null ? void 0 : I.storageKey) ?? `app_cache_${n.appId}`
+        storageKey: ((N = n.cache) == null ? void 0 : N.storageKey) ?? `app_cache_${n.appId}`
       };
     },
     [n.cache, n.appId]
   ), [r, i] = k(() => {
     if (!t.enabled) return null;
     try {
-      const p = localStorage.getItem(t.storageKey);
-      if (!p) return null;
-      const R = JSON.parse(p);
+      const h = localStorage.getItem(t.storageKey);
+      if (!h) return null;
+      const R = JSON.parse(h);
       return Date.now() - R.timestamp < t.ttl && R.appId === n.appId ? R.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = k(!r), [f, m] = k(null), b = K(() => {
-    const p = () => {
-      c();
+  }), [o, a] = k(!r), [p, w] = k(null), y = K(() => {
+    const h = () => {
+      f();
     };
     return {
       appId: n.appId,
@@ -142,59 +142,59 @@ function gr({ config: n, children: e }) {
       // App info
       appInfo: r,
       isAppLoading: o,
-      appError: f,
-      retryApp: p
+      appError: p,
+      retryApp: h
     };
-  }, [n, r, o, f]), c = se(
-    async (p = !1) => {
-      if (!(!p && t.enabled && r))
+  }, [n, r, o, p]), f = se(
+    async (h = !1) => {
+      if (!(!h && t.enabled && r))
         try {
-          a(!0), m(null);
-          const R = new le(n.baseUrl), M = await new Oe(R, {}).getPublicAppInfo(n.appId);
-          if (i(M), t.enabled)
+          a(!0), w(null);
+          const R = new le(n.baseUrl), D = await new qe(R, {}).getPublicAppInfo(n.appId);
+          if (i(D), t.enabled)
             try {
               const E = {
-                data: M,
+                data: D,
                 timestamp: Date.now(),
                 appId: n.appId
               };
               localStorage.setItem(t.storageKey, JSON.stringify(E));
             } catch (E) {
-              console.warn("Failed to cache app info:", E);
+              process.env.NODE_ENV === "development" && console.warn("[AppProvider] Failed to cache app info:", E);
             }
         } catch (R) {
-          const I = R instanceof Error ? R : new Error("Failed to load app information");
-          m(I), i(null);
+          const N = R instanceof Error ? R : new Error("Failed to load app information");
+          w(N), i(null);
         } finally {
           a(!1);
         }
     },
     [n.baseUrl, n.appId, t, r]
-  ), L = se(async () => {
+  ), x = se(async () => {
     if (!(!t.enabled || !r))
       try {
-        const p = localStorage.getItem(t.storageKey);
-        if (!p) return;
-        const R = JSON.parse(p);
+        const h = localStorage.getItem(t.storageKey);
+        if (!h) return;
+        const R = JSON.parse(h);
         if (Date.now() - R.timestamp > t.ttl * 0.5) {
-          const M = new le(n.baseUrl), x = await new Oe(M, {}).getPublicAppInfo(n.appId);
-          i(x);
-          const h = {
-            data: x,
+          const D = new le(n.baseUrl), P = await new qe(D, {}).getPublicAppInfo(n.appId);
+          i(P);
+          const u = {
+            data: P,
             timestamp: Date.now(),
             appId: n.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(h));
+          localStorage.setItem(t.storageKey, JSON.stringify(u));
         }
-      } catch (p) {
-        console.warn("Background app refresh failed:", p);
+      } catch (h) {
+        process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", h);
       }
   }, [n, t, r]);
   return re(() => {
-    r ? L() : c();
-  }, []), /* @__PURE__ */ s(Le.Provider, { value: b, children: e });
+    r ? x() : f();
+  }, []), /* @__PURE__ */ s(Le.Provider, { value: y, children: e });
 }
-function ve() {
+function Se() {
   const n = ae(Le);
   if (!n)
     throw new Error("useApp must be used within an AppProvider");
@@ -203,7 +203,7 @@ function ve() {
 function Qe() {
   return ae(Le);
 }
-const mr = ve;
+const yr = Se;
 class ne extends Error {
   constructor(e, t) {
     const r = {
@@ -354,7 +354,7 @@ const ie = class ie {
     const t = this.sessionGeneration;
     this.startRefreshAndResolveQueue(e.refreshToken).then(() => {
     }).catch((r) => {
-      r instanceof ne || this.sessionGeneration === t && (console.warn(
+      r instanceof ne || this.sessionGeneration === t && (process.env.NODE_ENV === "development" && console.warn(
         "[SessionManager] Background refresh failed, retrying in 30s:",
         r.message
       ), this.backgroundRetryTimerId = setTimeout(() => {
@@ -456,8 +456,8 @@ const ie = class ie {
         if (a instanceof ne)
           throw a;
         if (t = a, i < this.maxRefreshRetries) {
-          const f = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(f);
+          const p = this.retryBackoffBase * Math.pow(2, i);
+          await this.sleep(p);
         }
       }
     }
@@ -485,8 +485,8 @@ const ie = class ie {
     if (!i.ok) {
       let a = "";
       try {
-        const f = await i.json();
-        a = (f.message || f.error || "").toLowerCase();
+        const p = await i.json();
+        a = (p.message || p.error || "").toLowerCase();
       } catch {
         a = i.statusText.toLowerCase();
       }
@@ -836,13 +836,13 @@ function bt(n, e) {
   const r = n.split(".");
   return r.length >= 3 && r[0] !== "www" ? r[0] : null;
 }
-function St(n, e = "tenant", t) {
+function vt(n, e = "tenant", t) {
   const i = new URLSearchParams(n).get(e);
   return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
 }
-function vt(n, e, t) {
+function St(n, e, t) {
   const { tenantMode: r, baseDomain: i, selectorParam: o, fixedTenantSlug: a } = n;
-  return r === "fixed" ? a || null : r === "subdomain" ? bt(e.hostname, i) : r === "selector" ? St(e.search, o, t) : null;
+  return r === "fixed" ? a || null : r === "subdomain" ? bt(e.hostname, i) : r === "selector" ? vt(e.search, o, t) : null;
 }
 function Tt(n, e, t) {
   if (t)
@@ -850,7 +850,7 @@ function Tt(n, e, t) {
   const r = e.split(".");
   return r.length === 2 ? `${n}.${e}` : r.length >= 3 ? (r[0] = n, r.join(".")) : null;
 }
-const fe = "_auth";
+const pe = "_auth";
 function _e(n) {
   const e = JSON.stringify(n);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
@@ -868,32 +868,18 @@ function kt(n) {
 }
 function xt() {
   if (typeof window > "u")
-    return console.log("[CrossDomainAuth] SSR environment, skipping URL token extraction"), null;
-  const e = new URLSearchParams(window.location.search).get(fe);
-  if (console.log("[CrossDomainAuth] extractAuthTokensFromUrl called", {
-    hasAuthParam: !!e,
-    searchParams: window.location.search,
-    encodedLength: e == null ? void 0 : e.length
-  }), !e) return null;
-  const t = kt(e);
-  return console.log("[CrossDomainAuth] Token decode result:", {
-    success: !!t,
-    hasAccessToken: !!(t != null && t.accessToken),
-    hasRefreshToken: !!(t != null && t.refreshToken),
-    expiresIn: t == null ? void 0 : t.expiresIn
-  }), t;
+    return null;
+  const e = new URLSearchParams(window.location.search).get(pe);
+  return e ? kt(e) : null;
 }
 function At() {
   if (typeof window > "u") return;
   const n = new URL(window.location.href);
-  n.searchParams.delete(fe), console.log("[CrossDomainAuth] Clearing auth tokens from URL", {
-    oldUrl: window.location.href,
-    newUrl: n.toString()
-  }), window.history.replaceState({}, "", n.toString());
+  n.searchParams.delete(pe), window.history.replaceState({}, "", n.toString());
 }
-const Fe = pe(null);
-function yr({ config: n, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: i } = ve(), o = se(() => typeof window > "u" ? null : vt(
+const Ne = fe(null);
+function wr({ config: n, children: e }) {
+  const { baseUrl: t, appInfo: r, appId: i } = Se(), o = se(() => typeof window > "u" ? null : St(
     {
       tenantMode: n.tenantMode || "selector",
       baseDomain: n.baseDomain,
@@ -905,119 +891,119 @@ function yr({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, f] = k(() => o()), m = K(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, p] = k(() => o()), w = K(
     () => {
-      var d, U, F;
+      var c, H, I;
       return {
-        enabled: ((d = n.cache) == null ? void 0 : d.enabled) ?? !0,
-        ttl: ((U = n.cache) == null ? void 0 : U.ttl) ?? 5 * 60 * 1e3,
+        enabled: ((c = n.cache) == null ? void 0 : c.enabled) ?? !0,
+        ttl: ((H = n.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((F = n.cache) == null ? void 0 : F.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((I = n.cache) == null ? void 0 : I.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [n.cache, a]
-  ), [b, c] = k(() => {
+  ), [y, f] = k(() => {
     if (n.initialTenant) return n.initialTenant;
-    if (!m.enabled || !a) return null;
+    if (!w.enabled || !a) return null;
     try {
-      const d = localStorage.getItem(m.storageKey);
-      if (!d) return null;
-      const U = JSON.parse(d);
-      return Date.now() - U.timestamp < m.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(m.storageKey), null);
+      const c = localStorage.getItem(w.storageKey);
+      if (!c) return null;
+      const H = JSON.parse(c);
+      return Date.now() - H.timestamp < w.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(w.storageKey), null);
     } catch {
       return null;
     }
-  }), [L, p] = k(!b && !n.initialTenant), [R, I] = k(null), [M, E] = k(null), [x, h] = k(!1), [A, w] = k(null);
+  }), [x, h] = k(!y && !n.initialTenant), [R, N] = k(null), [D, E] = k(null), [P, u] = k(!1), [S, C] = k(null);
   re(() => {
     if (n.tenantMode === "fixed") return;
-    const d = o();
-    f(d);
+    const c = o();
+    p(c);
   }, [o, n.tenantMode]);
-  const v = (r == null ? void 0 : r.settingsSchema) || null, N = se(
-    async (d, U = !1) => {
-      if (!(!U && m.enabled && b && b.domain === d))
+  const M = (r == null ? void 0 : r.settingsSchema) || null, T = se(
+    async (c, H = !1) => {
+      if (!(!H && w.enabled && y && y.domain === c))
         try {
-          p(!0), I(null);
-          const F = new le(t), g = await new be(F, i).getPublicTenantInfo(d);
-          if (c(g), m.enabled)
+          h(!0), N(null);
+          const I = new le(t), m = await new be(I, i).getPublicTenantInfo(c);
+          if (f(m), w.enabled)
             try {
-              const S = {
-                data: g,
+              const v = {
+                data: m,
                 timestamp: Date.now(),
-                tenantSlug: d
+                tenantSlug: c
               };
-              localStorage.setItem(m.storageKey, JSON.stringify(S));
-            } catch (S) {
-              console.warn("Failed to cache tenant info:", S);
+              localStorage.setItem(w.storageKey, JSON.stringify(v));
+            } catch (v) {
+              process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", v);
             }
-        } catch (F) {
-          const y = F instanceof Error ? F : new Error("Failed to load tenant information");
-          I(y), c(null);
+        } catch (I) {
+          const g = I instanceof Error ? I : new Error("Failed to load tenant information");
+          N(g), f(null);
         } finally {
-          p(!1);
+          h(!1);
         }
     },
-    [t, i, m, b]
-  ), B = se(async () => {
-    if (!(!m.enabled || !b || !a))
+    [t, i, w, y]
+  ), $ = se(async () => {
+    if (!(!w.enabled || !y || !a))
       try {
-        const d = localStorage.getItem(m.storageKey);
-        if (!d) return;
-        const U = JSON.parse(d);
-        if (Date.now() - U.timestamp > m.ttl * 0.5) {
-          const y = new le(t), S = await new be(y, i).getPublicTenantInfo(a);
-          c(S);
+        const c = localStorage.getItem(w.storageKey);
+        if (!c) return;
+        const H = JSON.parse(c);
+        if (Date.now() - H.timestamp > w.ttl * 0.5) {
+          const g = new le(t), v = await new be(g, i).getPublicTenantInfo(a);
+          f(v);
           const Q = {
-            data: S,
+            data: v,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(m.storageKey, JSON.stringify(Q));
+          localStorage.setItem(w.storageKey, JSON.stringify(Q));
         }
-      } catch (d) {
-        console.warn("Background tenant refresh failed:", d);
+      } catch (c) {
+        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", c);
       }
-  }, [t, i, m, b, a]), l = se(async () => {
-    if (b != null && b.id)
+  }, [t, i, w, y, a]), l = se(async () => {
+    if (y != null && y.id)
       try {
-        h(!0), w(null);
-        const d = new le(t), F = await new be(d, b.appId).getTenantSettings(b.id);
-        E(F);
-      } catch (d) {
-        const U = d instanceof Error ? d : new Error("Failed to load tenant settings");
-        w(U), E(null);
+        u(!0), C(null);
+        const c = new le(t), I = await new be(c, y.appId).getTenantSettings(y.id);
+        E(I);
+      } catch (c) {
+        const H = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        C(H), E(null);
       } finally {
-        h(!1);
+        u(!1);
       }
-  }, [t, b]), H = se(() => {
+  }, [t, y]), U = se(() => {
     l();
-  }, [l]), P = se(
-    (d) => {
-      if (!v)
+  }, [l]), b = se(
+    (c) => {
+      if (!M)
         return { isValid: !0, errors: [] };
-      const U = [];
+      const H = [];
       try {
-        return v.properties && Object.entries(v.properties).forEach(([F, y]) => {
-          var S;
-          const g = d[F];
-          if ((S = v.required) != null && S.includes(F) && g == null) {
-            U.push(`Field '${F}' is required`);
+        return M.properties && Object.entries(M.properties).forEach(([I, g]) => {
+          var v;
+          const m = c[I];
+          if ((v = M.required) != null && v.includes(I) && m == null) {
+            H.push(`Field '${I}' is required`);
             return;
           }
-          if (g != null) {
-            if (y.type) {
-              const Q = y.type, J = typeof g;
-              Q === "string" && J !== "string" ? U.push(`Field '${F}' must be a string`) : (Q === "number" || Q === "integer") && J !== "number" ? U.push(`Field '${F}' must be a number`) : Q === "boolean" && J !== "boolean" ? U.push(`Field '${F}' must be a boolean`) : Q === "array" && !Array.isArray(g) && U.push(`Field '${F}' must be an array`);
+          if (m != null) {
+            if (g.type) {
+              const Q = g.type, J = typeof m;
+              Q === "string" && J !== "string" ? H.push(`Field '${I}' must be a string`) : (Q === "number" || Q === "integer") && J !== "number" ? H.push(`Field '${I}' must be a number`) : Q === "boolean" && J !== "boolean" ? H.push(`Field '${I}' must be a boolean`) : Q === "array" && !Array.isArray(m) && H.push(`Field '${I}' must be an array`);
             }
-            y.minLength !== void 0 && typeof g == "string" && g.length < y.minLength && U.push(
-              `Field '${F}' must be at least ${y.minLength} characters long`
-            ), y.maxLength !== void 0 && typeof g == "string" && g.length > y.maxLength && U.push(
-              `Field '${F}' must be no more than ${y.maxLength} characters long`
-            ), y.minimum !== void 0 && typeof g == "number" && g < y.minimum && U.push(`Field '${F}' must be at least ${y.minimum}`), y.maximum !== void 0 && typeof g == "number" && g > y.maximum && U.push(`Field '${F}' must be no more than ${y.maximum}`), y.pattern && typeof g == "string" && (new RegExp(y.pattern).test(g) || U.push(`Field '${F}' does not match the required pattern`)), y.enum && !y.enum.includes(g) && U.push(`Field '${F}' must be one of: ${y.enum.join(", ")}`);
+            g.minLength !== void 0 && typeof m == "string" && m.length < g.minLength && H.push(
+              `Field '${I}' must be at least ${g.minLength} characters long`
+            ), g.maxLength !== void 0 && typeof m == "string" && m.length > g.maxLength && H.push(
+              `Field '${I}' must be no more than ${g.maxLength} characters long`
+            ), g.minimum !== void 0 && typeof m == "number" && m < g.minimum && H.push(`Field '${I}' must be at least ${g.minimum}`), g.maximum !== void 0 && typeof m == "number" && m > g.maximum && H.push(`Field '${I}' must be no more than ${g.maximum}`), g.pattern && typeof m == "string" && (new RegExp(g.pattern).test(m) || H.push(`Field '${I}' does not match the required pattern`)), g.enum && !g.enum.includes(m) && H.push(`Field '${I}' must be one of: ${g.enum.join(", ")}`);
           }
         }), {
-          isValid: U.length === 0,
-          errors: U
+          isValid: H.length === 0,
+          errors: H
         };
       } catch {
         return {
@@ -1026,97 +1012,97 @@ function yr({ config: n, children: e }) {
         };
       }
     },
-    [v]
+    [M]
   );
   re(() => {
-    !n.initialTenant && a ? b ? B() : N(a) : !n.initialTenant && !a && (c(null), I(null), p(!1));
-  }, [n.initialTenant, a, b, N, B]), re(() => {
-    b != null && b.id ? l() : (E(null), w(null), h(!1));
-  }, [b == null ? void 0 : b.id, l]);
-  const D = se(
-    (d, U) => {
-      const { mode: F = "reload", tokens: y, redirectPath: g } = U || {}, S = n.tenantMode || "selector";
-      if (S === "fixed") {
-        console.warn(
+    !n.initialTenant && a ? y ? $() : T(a) : !n.initialTenant && !a && (f(null), N(null), h(!1));
+  }, [n.initialTenant, a, y, T, $]), re(() => {
+    y != null && y.id ? l() : (E(null), C(null), u(!1));
+  }, [y == null ? void 0 : y.id, l]);
+  const L = se(
+    (c, H) => {
+      const { mode: I = "reload", tokens: g, redirectPath: m } = H || {}, v = n.tenantMode || "selector";
+      if (v === "fixed") {
+        process.env.NODE_ENV === "development" && console.warn(
           "[TenantProvider] switchTenant is a no-op in fixed mode. Tenant is always:",
           n.fixedTenantSlug
-        ), g && (window.location.href = g);
+        ), m && (window.location.href = m);
         return;
       }
-      if (localStorage.setItem("tenant", d), S === "subdomain") {
+      if (localStorage.setItem("tenant", c), v === "subdomain") {
         const Q = window.location.hostname, J = Tt(
-          d,
+          c,
           Q,
           n.baseDomain
         );
         if (!J) {
-          console.warn(
+          process.env.NODE_ENV === "development" && console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
             Q
           );
           return;
         }
-        const q = g || window.location.pathname, O = new URL(`${window.location.protocol}//${J}${q}`);
-        new URLSearchParams(window.location.search).forEach((T, V) => {
-          V !== fe && O.searchParams.set(V, T);
-        }), y && O.searchParams.set(fe, _e(y)), window.location.href = O.toString();
-      } else if (S === "selector") {
-        const Q = g || window.location.pathname, J = new URLSearchParams(window.location.search);
-        if (J.set(n.selectorParam || "tenant", d), J.delete(fe), y && J.set(fe, _e(y)), F === "reload") {
-          const q = `${Q}?${J.toString()}${window.location.hash}`;
-          window.location.href = q;
+        const O = m || window.location.pathname, q = new URL(`${window.location.protocol}//${J}${O}`);
+        new URLSearchParams(window.location.search).forEach((A, V) => {
+          V !== pe && q.searchParams.set(V, A);
+        }), g && q.searchParams.set(pe, _e(g)), window.location.href = q.toString();
+      } else if (v === "selector") {
+        const Q = m || window.location.pathname, J = new URLSearchParams(window.location.search);
+        if (J.set(n.selectorParam || "tenant", c), J.delete(pe), g && J.set(pe, _e(g)), I === "reload") {
+          const O = `${Q}?${J.toString()}${window.location.hash}`;
+          window.location.href = O;
         } else {
-          const q = `${Q}?${J.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", q), f(d), N(d);
+          const O = `${Q}?${J.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", O), p(c), T(c);
         }
       }
     },
-    [n.tenantMode, n.selectorParam, n.baseDomain, N]
-  ), C = K(() => ({
+    [n.tenantMode, n.selectorParam, n.baseDomain, T]
+  ), F = K(() => ({
     // Tenant info
-    tenant: b,
+    tenant: y,
     tenantSlug: a,
-    isTenantLoading: L,
+    isTenantLoading: x,
     tenantError: R,
     retryTenant: () => {
-      a && N(a);
+      a && T(a);
     },
     // Settings
-    settings: M,
-    settingsSchema: v,
-    isSettingsLoading: x,
-    settingsError: A,
+    settings: D,
+    settingsSchema: M,
+    isSettingsLoading: P,
+    settingsError: S,
     // Actions
-    refreshSettings: H,
-    switchTenant: D,
+    refreshSettings: U,
+    switchTenant: L,
     // Validation
-    validateSettings: P
+    validateSettings: b
   }), [
-    b,
+    y,
     a,
-    L,
-    R,
-    M,
-    v,
     x,
-    A,
-    H,
+    R,
     D,
-    P
+    M,
+    P,
+    S,
+    U,
+    L,
+    b
   ]);
-  return /* @__PURE__ */ s(Fe.Provider, { value: C, children: e });
+  return /* @__PURE__ */ s(Ne.Provider, { value: F, children: e });
 }
 function ge() {
-  const n = ae(Fe);
+  const n = ae(Ne);
   if (!n)
     throw new Error("useTenant must be used within a TenantProvider");
   return n;
 }
 function xe() {
-  return ae(Fe);
+  return ae(Ne);
 }
-const wr = ge;
-function br() {
+const br = ge;
+function vr() {
   const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = ge();
   return {
     settings: n,
@@ -1136,30 +1122,25 @@ function me() {
     retry: i
   };
 }
-const Ne = pe(null);
+const De = fe(null);
 function Sr({ config: n = {}, children: e }) {
-  const { appId: t, baseUrl: r } = ve(), { tenant: i, tenantSlug: o, switchTenant: a } = ge(), [f, m] = k(n.initialRoles || []), [b, c] = k(!n.initialRoles), [L, p] = k(null), [R, I] = k(!1), [M, E] = k(null), [x, h] = k(() => {
+  const { appId: t, baseUrl: r } = Se(), { tenant: i, tenantSlug: o, switchTenant: a } = ge(), [p, w] = k(n.initialRoles || []), [y, f] = k(!n.initialRoles), [x, h] = k(null), [R, N] = k(!1), [D, E] = k(null), [P, u] = k(() => {
     try {
-      const T = localStorage.getItem("userTenants");
-      return T ? JSON.parse(T) : [];
+      const A = localStorage.getItem("userTenants");
+      return A ? JSON.parse(A) : [];
     } catch {
       return [];
     }
-  }), [A, w] = k(!1), v = Me({ done: !1, urlTokens: null });
-  v.current.done || (v.current.done = !0, v.current.urlTokens = xt(), v.current.urlTokens && console.log(
-    "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
-  ));
-  const [N, B] = k(() => {
-    const T = v.current.urlTokens !== null;
-    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", T), T;
-  }), l = K(() => {
-    const T = we.getInstance({
+  }), [S, C] = k(!1), M = Me({ done: !1, urlTokens: null });
+  M.current.done || (M.current.done = !0, M.current.urlTokens = xt());
+  const [T, $] = k(() => M.current.urlTokens !== null), l = K(() => {
+    const A = we.getInstance({
       tenantSlug: o,
       baseUrl: r,
       refreshQueueTimeout: n.refreshQueueTimeout,
       proactiveRefreshMargin: n.proactiveRefreshMargin,
       onSessionExpired: (V) => {
-        p(null), E(null), h([]), w(!1);
+        h(null), E(null), u([]), C(!1);
         try {
           localStorage.removeItem("userTenants");
         } catch {
@@ -1167,46 +1148,46 @@ function Sr({ config: n = {}, children: e }) {
         n.onSessionExpired ? n.onSessionExpired(V) : n.onRefreshFailed && n.onRefreshFailed();
       }
     });
-    return v.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), T.setTokens({
-      accessToken: v.current.urlTokens.accessToken,
-      refreshToken: v.current.urlTokens.refreshToken,
-      expiresIn: v.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", T.hasValidSession())), T;
-  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [H, P] = k(() => {
-    if (v.current.urlTokens) return !1;
-    const T = l.getTokens();
-    return T ? l.hasValidSession() || !!T.refreshToken : !1;
-  }), D = v.current.done && !N && !H, C = K(() => {
-    const T = new le(r);
-    return T.setSessionManager(l), T;
-  }, [r, l]), d = K(() => new yt(new le(r)), [r]), U = K(() => new wt(C, l), [C, l]), F = K(() => new ze(new le(r)), [r]), y = K(() => L || l.getUser(), [L, l]), g = K(() => y != null && y.roleId && f.find((T) => T.id === y.roleId) || null, [y, f]), S = K(() => (g == null ? void 0 : g.permissions) || [], [g]), Q = K(() => l.hasValidSession() && L !== null, [l, L]), J = Me(async () => {
-  }), q = K(() => {
-    const T = async ($ = !1) => {
+    return M.current.urlTokens && A.setTokens({
+      accessToken: M.current.urlTokens.accessToken,
+      refreshToken: M.current.urlTokens.refreshToken,
+      expiresIn: M.current.urlTokens.expiresIn
+    }), A;
+  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [U, b] = k(() => {
+    if (M.current.urlTokens) return !1;
+    const A = l.getTokens();
+    return A ? l.hasValidSession() || !!A.refreshToken : !1;
+  }), L = M.current.done && !T && !U, F = K(() => {
+    const A = new le(r);
+    return A.setSessionManager(l), A;
+  }, [r, l]), c = K(() => new yt(new le(r)), [r]), H = K(() => new wt(F, l), [F, l]), I = K(() => new ze(new le(r)), [r]), g = K(() => x || l.getUser(), [x, l]), m = K(() => g != null && g.roleId && p.find((A) => A.id === g.roleId) || null, [g, p]), v = K(() => (m == null ? void 0 : m.permissions) || [], [m]), Q = K(() => l.hasValidSession() && x !== null, [l, x]), J = Me(async () => {
+  }), O = K(() => {
+    const A = async (B = !1) => {
       try {
-        if (!l.hasValidSession() || !$ && L)
+        if (!l.hasValidSession() || !B && x)
           return;
         const z = l.getUserId();
         if (!z) {
-          console.warn("[AuthProvider] No userId available in token or storage");
+          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        I(!0), E(null);
-        const Z = await U.getUserById(z);
-        p(Z), l.setUser(Z);
+        N(!0), E(null);
+        const Z = await H.getUserById(z);
+        h(Z), l.setUser(Z);
       } catch (z) {
         const Z = z instanceof Error ? z : new Error("Failed to load user data");
-        E(Z), console.error("[AuthProvider] Failed to load user data:", Z);
+        E(Z), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", Z);
       } finally {
-        I(!1);
+        N(!1);
       }
     }, V = async () => {
-      await T();
-    }, de = async ($) => {
+      await A();
+    }, de = async (B) => {
       var Be;
-      const { username: z, password: Z, tenantSlug: W, redirectPath: Y } = $;
+      const { username: z, password: Z, tenantSlug: W, redirectPath: Y } = B;
       let X = i == null ? void 0 : i.id, ee = o, te = l;
-      W && (X = (await new be(C, t).getPublicTenantInfo(W)).id, ee = W);
-      const G = await d.login({
+      W && (X = (await new be(F, t).getPublicTenantInfo(W)).id, ee = W);
+      const G = await c.login({
         username: z,
         password: Z,
         appId: t,
@@ -1220,22 +1201,22 @@ function Sr({ config: n = {}, children: e }) {
         refreshToken: G.refreshToken,
         expiresIn: G.expiresIn
       }), G.user) {
-        te.setUser(G.user), p(G.user);
+        te.setUser(G.user), h(G.user);
         try {
-          await T();
+          await A();
         } catch (Te) {
-          console.warn("Failed to load complete user data after login:", Te);
+          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", Te);
         }
       }
       if (G.tenants && G.tenants.length > 0) {
-        h(G.tenants);
+        u(G.tenants);
         try {
           localStorage.setItem("userTenants", JSON.stringify(G.tenants));
         } catch {
         }
       }
       const Pe = ((Be = G.user) == null ? void 0 : Be.tenantId) !== null;
-      w(Pe);
+      C(Pe);
       const Re = {
         accessToken: G.accessToken,
         refreshToken: G.refreshToken,
@@ -1246,21 +1227,21 @@ function Sr({ config: n = {}, children: e }) {
       if (Y && Y !== window.location.pathname)
         return a(ee || o || "", { tokens: Re, redirectPath: Y }), G;
       if (!Pe && G.tenants && G.tenants.length > 0) {
-        const Te = $.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
+        const Te = B.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
         if (G.tenants.length === 1 && Te) {
-          const qe = G.tenants[0];
-          return a(qe.subdomain, { tokens: Re, redirectPath: Y }), G;
+          const Oe = G.tenants[0];
+          return a(Oe.subdomain, { tokens: Re, redirectPath: Y }), G;
         } else G.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(G.tenants);
       }
       return G;
-    }, he = async ($) => {
-      const { email: z, phoneNumber: Z, name: W, password: Y, lastName: X, tenantId: ee } = $;
+    }, he = async (B) => {
+      const { email: z, phoneNumber: Z, name: W, password: Y, lastName: X, tenantId: ee } = B;
       if (!z && !Z)
         throw new Error("Either email or phoneNumber is required");
       if (!W || !Y)
         throw new Error("Name and password are required");
       const te = ee ?? (i == null ? void 0 : i.id);
-      return await d.signup({
+      return await c.signup({
         email: z,
         phoneNumber: Z,
         name: W,
@@ -1269,13 +1250,13 @@ function Sr({ config: n = {}, children: e }) {
         lastName: X,
         appId: t
       });
-    }, et = async ($) => {
-      const { email: z, phoneNumber: Z, name: W, password: Y, tenantName: X, lastName: ee } = $;
+    }, et = async (B) => {
+      const { email: z, phoneNumber: Z, name: W, password: Y, tenantName: X, lastName: ee } = B;
       if (!z && !Z)
         throw new Error("Either email or phoneNumber is required");
       if (!W || !Y || !X)
         throw new Error("Name, password, and tenantName are required");
-      return await d.signupTenantAdmin({
+      return await c.signupTenantAdmin({
         email: z,
         phoneNumber: Z,
         name: W,
@@ -1284,22 +1265,22 @@ function Sr({ config: n = {}, children: e }) {
         appId: t,
         lastName: ee
       });
-    }, tt = async ($) => {
-      const { currentPassword: z, newPassword: Z } = $, W = await l.getAuthHeaders();
-      await d.changePassword({ currentPassword: z, newPassword: Z }, W);
-    }, rt = async ($) => {
-      const { email: z, tenantId: Z } = $, W = Z ?? (i == null ? void 0 : i.id);
+    }, tt = async (B) => {
+      const { currentPassword: z, newPassword: Z } = B, W = await l.getAuthHeaders();
+      await c.changePassword({ currentPassword: z, newPassword: Z }, W);
+    }, rt = async (B) => {
+      const { email: z, tenantId: Z } = B, W = Z ?? (i == null ? void 0 : i.id);
       if (!W)
         throw new Error("tenantId is required for password reset");
-      await d.requestPasswordReset({ email: z, tenantId: W });
-    }, nt = async ($) => {
-      const { token: z, newPassword: Z } = $;
-      await d.confirmPasswordReset({ token: z, newPassword: Z });
-    }, st = async ($) => {
-      const { email: z, frontendUrl: Z, name: W, lastName: Y, tenantId: X } = $, ee = X ?? (i == null ? void 0 : i.id);
+      await c.requestPasswordReset({ email: z, tenantId: W });
+    }, nt = async (B) => {
+      const { token: z, newPassword: Z } = B;
+      await c.confirmPasswordReset({ token: z, newPassword: Z });
+    }, st = async (B) => {
+      const { email: z, frontendUrl: Z, name: W, lastName: Y, tenantId: X } = B, ee = X ?? (i == null ? void 0 : i.id);
       if (!ee)
         throw new Error("tenantId is required for magic link authentication");
-      return await d.sendMagicLink({
+      return await c.sendMagicLink({
         email: z,
         tenantId: ee,
         frontendUrl: Z,
@@ -1307,11 +1288,11 @@ function Sr({ config: n = {}, children: e }) {
         lastName: Y,
         appId: t
       });
-    }, it = async ($) => {
-      const { token: z, email: Z, tenantSlug: W } = $;
+    }, it = async (B) => {
+      const { token: z, email: Z, tenantSlug: W } = B;
       let Y = i == null ? void 0 : i.id, X = o, ee = l;
-      W && (Y = (await new be(C, t).getPublicTenantInfo(W)).id, X = W);
-      const te = await d.verifyMagicLink({
+      W && (Y = (await new be(F, t).getPublicTenantInfo(W)).id, X = W);
+      const te = await c.verifyMagicLink({
         token: z,
         email: Z,
         appId: t,
@@ -1325,11 +1306,14 @@ function Sr({ config: n = {}, children: e }) {
         refreshToken: te.refreshToken,
         expiresIn: te.expiresIn
       }), te.user) {
-        ee.setUser(te.user), p(te.user);
+        ee.setUser(te.user), h(te.user);
         try {
-          await T();
+          await A();
         } catch (ye) {
-          console.warn("Failed to load complete user data after magic link login:", ye);
+          process.env.NODE_ENV === "development" && console.warn(
+            "[AuthProvider] Failed to load complete user data after magic link:",
+            ye
+          );
         }
       }
       return G && X && X !== o && a(X, {
@@ -1340,53 +1324,53 @@ function Sr({ config: n = {}, children: e }) {
         }
       }), te;
     }, ot = async () => {
-      const $ = l.getTokens();
-      if (!($ != null && $.refreshToken))
+      const B = l.getTokens();
+      if (!(B != null && B.refreshToken))
         throw new Error("No refresh token available");
-      const z = await d.refreshToken({
-        refreshToken: $.refreshToken
+      const z = await c.refreshToken({
+        refreshToken: B.refreshToken
       });
       l.setTokens({
         accessToken: z.accessToken,
-        refreshToken: z.refreshToken || $.refreshToken,
+        refreshToken: z.refreshToken || B.refreshToken,
         expiresIn: z.expiresIn
       });
     }, at = () => {
-      l.clearSession(), p(null), E(null), h([]), w(!1);
+      l.clearSession(), h(null), E(null), u([]), C(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, lt = ($) => {
-      l.setTokens($);
+    }, lt = (B) => {
+      l.setTokens(B);
     }, ct = () => l.hasValidSession(), dt = () => {
-      l.clearSession(), p(null), E(null);
+      l.clearSession(), h(null), E(null);
     }, ut = async () => {
       if (t)
         try {
-          c(!0);
-          const { roles: $ } = await F.getRolesByApp(t);
-          m($);
-        } catch ($) {
-          console.error("Failed to fetch roles:", $);
+          f(!0);
+          const { roles: B } = await I.getRolesByApp(t);
+          w(B);
+        } catch (B) {
+          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", B);
         } finally {
-          c(!1);
+          f(!1);
         }
     }, ht = async () => {
       await ut();
-    }, Ae = ($) => {
-      if (!S || S.length === 0)
+    }, Ae = (B) => {
+      if (!v || v.length === 0)
         return !1;
-      if (typeof $ == "string")
-        return S.includes($);
-      const z = `${$.resource}.${$.action}`;
-      return S.includes(z);
+      if (typeof B == "string")
+        return v.includes(B);
+      const z = `${B.resource}.${B.action}`;
+      return v.includes(z);
     };
     return {
       // RFC-003: Authentication state
       isAuthenticated: Q,
       sessionManager: l,
-      authenticatedHttpService: C,
+      authenticatedHttpService: F,
       login: de,
       signup: he,
       signupTenantAdmin: et,
@@ -1400,40 +1384,40 @@ function Sr({ config: n = {}, children: e }) {
       setTokens: lt,
       hasValidSession: ct,
       clearSession: dt,
-      currentUser: L,
+      currentUser: x,
       isUserLoading: R,
-      userError: M,
-      loadUserData: T,
+      userError: D,
+      loadUserData: A,
       refreshUser: V,
-      isAuthInitializing: !D,
-      isAuthReady: D,
-      userRole: g,
-      userPermissions: S,
-      availableRoles: f,
-      rolesLoading: b,
+      isAuthInitializing: !L,
+      isAuthReady: L,
+      userRole: m,
+      userPermissions: v,
+      availableRoles: p,
+      rolesLoading: y,
       hasPermission: Ae,
-      hasAnyPermission: ($) => $.some((z) => Ae(z)),
-      hasAllPermissions: ($) => $.every((z) => Ae(z)),
-      getUserPermissionStrings: () => S || [],
+      hasAnyPermission: (B) => B.some((z) => Ae(z)),
+      hasAllPermissions: (B) => B.every((z) => Ae(z)),
+      getUserPermissionStrings: () => v || [],
       refreshRoles: ht,
       // RFC-004: Multi-tenant user membership
-      userTenants: x,
-      hasTenantContext: A,
-      switchToTenant: async ($, z) => {
+      userTenants: P,
+      hasTenantContext: S,
+      switchToTenant: async (B, z) => {
         const { redirectPath: Z } = z || {}, W = l.getTokens();
         if (!(W != null && W.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const Y = await d.switchTenant({
+        const Y = await c.switchTenant({
           refreshToken: W.refreshToken,
-          tenantId: $
+          tenantId: B
         });
         l.setTokens({
           accessToken: Y.accessToken,
           refreshToken: W.refreshToken,
           // Keep the same refresh token
           expiresIn: Y.expiresIn
-        }), p(Y.user), l.setUser(Y.user), w(!0);
-        const X = x.find((ee) => ee.id === $);
+        }), h(Y.user), l.setUser(Y.user), C(!0);
+        const X = P.find((ee) => ee.id === B);
         X && a(X.subdomain, {
           tokens: {
             accessToken: Y.accessToken,
@@ -1444,8 +1428,8 @@ function Sr({ config: n = {}, children: e }) {
         });
       },
       refreshUserTenants: async () => {
-        const $ = await l.getAuthHeaders(), z = await d.getUserTenants($);
-        h(z);
+        const B = await l.getAuthHeaders(), z = await c.getUserTenants(B);
+        u(z);
         try {
           localStorage.setItem("userTenants", JSON.stringify(z));
         } catch {
@@ -1456,69 +1440,69 @@ function Sr({ config: n = {}, children: e }) {
   }, [
     Q,
     l,
-    C,
-    d,
-    U,
     F,
+    c,
+    H,
+    I,
     t,
     i,
     o,
     a,
-    f,
-    L,
-    R,
-    M,
+    p,
     x,
-    A,
+    R,
     D,
-    g,
-    S
+    P,
+    S,
+    L,
+    m,
+    v
   ]);
-  J.current = q.loadUserData, re(() => {
+  J.current = O.loadUserData, re(() => {
     !n.initialRoles && t && (async () => {
       try {
-        c(!0);
+        f(!0);
         const V = new le(r), de = new ze(V), { roles: he } = await de.getRolesByApp(t);
-        m(he);
+        w(he);
       } catch (V) {
-        console.error("Failed to fetch roles:", V);
+        process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", V);
       } finally {
-        c(!1);
+        f(!1);
       }
     })();
   }, [t, r, n.initialRoles]);
-  const [O, j] = k(!1);
+  const [q, j] = k(!1);
   return re(() => {
-    O || (j(!0), v.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), At(), B(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), q.loadUserData().catch((T) => {
-      console.error("[AuthProvider] Failed to load user data:", T);
+    q || (j(!0), M.current.urlTokens && (At(), $(!0), O.loadUserData().catch((A) => {
+      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", A);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), B(!1);
+      $(!1);
     })));
-  }, [q, O]), re(() => {
-    let T = !1;
+  }, [O, q]), re(() => {
+    let A = !1;
     return (async () => {
       var he;
-      if (!l.hasValidSession() && ((he = l.getTokens()) != null && he.refreshToken) && await l.waitForPendingRefresh(), T) return;
+      if (!l.hasValidSession() && ((he = l.getTokens()) != null && he.refreshToken) && await l.waitForPendingRefresh(), A) return;
       const de = l.getUser();
-      de && l.hasValidSession() && p(de), P(!1);
+      de && l.hasValidSession() && h(de), b(!1);
     })(), () => {
-      T = !0;
+      A = !0;
     };
   }, [l]), re(() => {
-    O && (v.current.urlTokens || (!L && !R && !M && l.hasValidSession() ? (console.log("[AuthProvider] Auto-loading user data..."), J.current().catch(() => {
+    q && (M.current.urlTokens || (!x && !R && !D && l.hasValidSession() ? J.current().catch(() => {
     }).finally(() => {
-      P(!1);
-    })) : P(!1)));
-  }, [L, R, M, l, O]), /* @__PURE__ */ s(Ne.Provider, { value: q, children: e });
+      b(!1);
+    }) : b(!1)));
+  }, [x, R, D, l, q]), /* @__PURE__ */ s(De.Provider, { value: O, children: e });
 }
 function ue() {
-  const n = ae(Ne);
+  const n = ae(De);
   if (!n)
     throw new Error("useAuth must be used within an AuthProvider");
   return n;
 }
-function De() {
-  return ae(Ne);
+function Fe() {
+  return ae(De);
 }
 class Pt {
   constructor(e, t) {
@@ -1600,55 +1584,55 @@ class Pt {
     })).data;
   }
 }
-const Ce = pe(null);
-function vr({ config: n = {}, children: e }) {
-  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [f, m] = k([]), [b, c] = k(!1), [L, p] = k(null), [R, I] = k(!1), M = K(() => {
-    const h = new le(i);
-    return new Pt(h);
+const Ce = fe(null);
+function Tr({ config: n = {}, children: e }) {
+  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [p, w] = k([]), [y, f] = k(!1), [x, h] = k(null), [R, N] = k(!1), D = K(() => {
+    const u = new le(i);
+    return new Pt(u);
   }, [i]), E = async () => {
     if (!(a != null && a.id)) {
-      m([]);
+      w([]);
       return;
     }
-    c(!0), p(null);
+    f(!0), h(null);
     try {
-      const h = await M.getTenantFeatureFlags(a.id, o);
-      m(h);
-    } catch (h) {
-      const A = h instanceof Error ? h.message : "Failed to fetch feature flags";
-      p(A), n.onError && n.onError(h instanceof Error ? h : new Error(A));
+      const u = await D.getTenantFeatureFlags(a.id, o);
+      w(u);
+    } catch (u) {
+      const S = u instanceof Error ? u.message : "Failed to fetch feature flags";
+      h(S), n.onError && n.onError(u instanceof Error ? u : new Error(S));
     } finally {
-      c(!1);
+      f(!1);
     }
   };
   re(() => {
     if (!i || !o) return;
-    E().finally(() => I(!0));
-    const h = n.refreshInterval || 5 * 60 * 1e3, A = setInterval(E, h);
-    return () => clearInterval(A);
+    E().finally(() => N(!0));
+    const u = n.refreshInterval || 5 * 60 * 1e3, S = setInterval(E, u);
+    return () => clearInterval(S);
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
-  const x = K(() => {
-    const h = (B) => {
-      const l = f.find((H) => H.key === B);
+  const P = K(() => {
+    const u = ($) => {
+      const l = p.find((U) => U.key === $);
       return (l == null ? void 0 : l.value) === !0;
-    }, A = (B) => f.find((l) => l.key === B), w = (B) => {
-      const l = f.find((H) => H.key === B);
+    }, S = ($) => p.find((l) => l.key === $), C = ($) => {
+      const l = p.find((U) => U.key === $);
       return l ? l.value ? "enabled" : "disabled" : "not_found";
-    }, v = async () => {
+    }, M = async () => {
       await E();
-    }, N = !!(i && o) && (R || !(a != null && a.id));
+    }, T = !!(i && o) && (R || !(a != null && a.id));
     return {
-      featureFlags: f,
-      loading: b,
-      error: L,
-      isReady: N,
-      isEnabled: h,
-      getFlag: A,
-      getFlagState: w,
-      refresh: v
+      featureFlags: p,
+      loading: y,
+      error: x,
+      isReady: T,
+      isEnabled: u,
+      getFlag: S,
+      getFlagState: C,
+      refresh: M
     };
-  }, [f, b, L, i, o, a == null ? void 0 : a.id, R]);
-  return /* @__PURE__ */ s(Ce.Provider, { value: x, children: e });
+  }, [p, y, x, i, o, a == null ? void 0 : a.id, R]);
+  return /* @__PURE__ */ s(Ce.Provider, { value: P, children: e });
 }
 function Rt() {
   const n = ae(Ce);
@@ -1659,7 +1643,7 @@ function Rt() {
 function Ke() {
   return ae(Ce);
 }
-class It {
+class Et {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1725,68 +1709,68 @@ class It {
     )).data;
   }
 }
-const Ue = pe(void 0);
-function Tr({ config: n = {}, children: e }) {
-  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, f] = k(null), [m, b] = k(!1), [c, L] = k(null), [p, R] = k(!1), I = K(() => {
-    const x = new le(i);
-    return new It(x);
-  }, [i]), M = async () => {
+const $e = fe(void 0);
+function kr({ config: n = {}, children: e }) {
+  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, p] = k(null), [w, y] = k(!1), [f, x] = k(null), [h, R] = k(!1), N = K(() => {
+    const P = new le(i);
+    return new Et(P);
+  }, [i]), D = async () => {
     if (!(o != null && o.id)) {
-      f(null);
+      p(null);
       return;
     }
-    b(!0), L(null);
+    y(!0), x(null);
     try {
-      const x = await I.getTenantSubscriptionFeatures(o.id);
-      f(x);
-    } catch (x) {
-      const h = x instanceof Error ? x.message : "Failed to fetch subscription";
-      L(h), n.onError && n.onError(x instanceof Error ? x : new Error(h));
+      const P = await N.getTenantSubscriptionFeatures(o.id);
+      p(P);
+    } catch (P) {
+      const u = P instanceof Error ? P.message : "Failed to fetch subscription";
+      x(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
     } finally {
-      b(!1);
+      y(!1);
     }
   };
   re(() => {
-    if (!i || (M().finally(() => R(!0)), !n.refreshInterval)) return;
-    const x = n.refreshInterval || 10 * 60 * 1e3, h = setInterval(M, x);
-    return () => clearInterval(h);
+    if (!i || (D().finally(() => R(!0)), !n.refreshInterval)) return;
+    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(D, P);
+    return () => clearInterval(u);
   }, [o == null ? void 0 : o.id, i, n.refreshInterval]);
   const E = K(() => {
-    const x = (a == null ? void 0 : a.features) || [], h = (l) => {
-      const H = x.find((P) => P.key === l);
-      return H ? H.type === "BOOLEAN" || H.type === "boolean" ? H.value === !0 : !!H.value : !1;
-    }, A = (l) => x.find((H) => H.key === l), w = (l, H) => {
-      const P = x.find((D) => D.key === l);
-      return P ? P.value : H;
-    }, v = (l) => !a || !a.isActive ? !1 : l.includes(a.planId), N = async () => {
-      await M();
-    }, B = !!i && (p || !(o != null && o.id));
+    const P = (a == null ? void 0 : a.features) || [], u = (l) => {
+      const U = P.find((b) => b.key === l);
+      return U ? U.type === "BOOLEAN" || U.type === "boolean" ? U.value === !0 : !!U.value : !1;
+    }, S = (l) => P.find((U) => U.key === l), C = (l, U) => {
+      const b = P.find((L) => L.key === l);
+      return b ? b.value : U;
+    }, M = (l) => !a || !a.isActive ? !1 : l.includes(a.planId), T = async () => {
+      await D();
+    }, $ = !!i && (h || !(o != null && o.id));
     return {
       subscription: a,
-      features: x,
-      loading: m,
-      error: c,
-      isReady: B,
-      isFeatureEnabled: h,
-      getFeature: A,
-      getFeatureValue: w,
-      hasAllowedPlan: v,
-      refresh: N
+      features: P,
+      loading: w,
+      error: f,
+      isReady: $,
+      isFeatureEnabled: u,
+      getFeature: S,
+      getFeatureValue: C,
+      hasAllowedPlan: M,
+      refresh: T
     };
-  }, [a, m, c, i, o == null ? void 0 : o.id, p]);
-  return /* @__PURE__ */ s(Ue.Provider, { value: E, children: e });
+  }, [a, w, f, i, o == null ? void 0 : o.id, h]);
+  return /* @__PURE__ */ s($e.Provider, { value: E, children: e });
 }
-function Et() {
-  const n = ae(Ue);
+function It() {
+  const n = ae($e);
   if (n === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return n;
 }
 function Ze() {
-  return ae(Ue) ?? null;
+  return ae($e) ?? null;
 }
 var oe = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(oe || {});
-const $e = {
+const Ue = {
   publicGuest: "/",
   publicUser: "/account",
   publicAdmin: "/admin",
@@ -1811,11 +1795,11 @@ const $e = {
   admin: { tenant: "required", auth: "required", userType: oe.TENANT_ADMIN },
   // Fully open
   open: { tenant: "optional", auth: "optional" }
-}, He = pe(null);
-function kr({ config: n = {}, children: e }) {
+}, He = fe(null);
+function xr({ config: n = {}, children: e }) {
   const t = K(() => {
     const r = {
-      ...$e,
+      ...Ue,
       ...n.zoneRoots
     }, i = {
       ...Je,
@@ -1833,7 +1817,7 @@ function kr({ config: n = {}, children: e }) {
   }, [n]);
   return /* @__PURE__ */ s(He.Provider, { value: t, children: e });
 }
-function xr() {
+function Ar() {
   const n = ae(He);
   if (!n)
     throw new Error("useRouting must be used within a RoutingProvider");
@@ -1842,7 +1826,7 @@ function xr() {
 function Mt() {
   const n = ae(He);
   return n || {
-    zoneRoots: $e,
+    zoneRoots: Ue,
     presets: Je,
     loadingFallback: null,
     accessDeniedFallback: null,
@@ -1851,7 +1835,7 @@ function Mt() {
     returnToStorage: "url"
   };
 }
-const We = () => /* @__PURE__ */ u(
+const We = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1892,7 +1876,7 @@ const We = () => /* @__PURE__ */ u(
   userType: n,
   minUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ u(
+}) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -1910,19 +1894,19 @@ const We = () => /* @__PURE__ */ u(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
       /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && n ? /* @__PURE__ */ u(_, { children: [
-        /* @__PURE__ */ u("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+      e && n ? /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ d("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
           /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
-        /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
           /* @__PURE__ */ s("strong", { children: n })
         ] })
-      ] }) : /* @__PURE__ */ u(_, { children: [
+      ] }) : /* @__PURE__ */ d(_, { children: [
         /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
-        t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
           /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
@@ -1937,28 +1921,28 @@ const We = () => /* @__PURE__ */ u(
   };
   return t[n] >= t[e];
 };
-function Ar({
+function Pr({
   children: n,
   fallback: e,
   minUserType: t,
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: f, hasAnyPermission: m, hasAllPermissions: b } = ue();
+  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: w, hasAllPermissions: y } = ue();
   if (!o())
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(We, {}) });
-  const c = a.getUser();
-  if (!c)
+  const f = a.getUser();
+  if (!f)
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(We, {}) });
-  if (t && !Lt(c.userType, t))
-    return /* @__PURE__ */ s(Ve, { userType: c.userType, minUserType: t });
-  if (r && r.length > 0 && !(i ? b(r) : m(r))) {
-    const p = r.filter((R) => !f(R)).map((R) => typeof R == "string" ? R : R.name);
-    return /* @__PURE__ */ s(Ve, { missingPermissions: p });
+  if (t && !Lt(f.userType, t))
+    return /* @__PURE__ */ s(Ve, { userType: f.userType, minUserType: t });
+  if (r && r.length > 0 && !(i ? y(r) : w(r))) {
+    const h = r.filter((R) => !p(R)).map((R) => typeof R == "string" ? R : R.name);
+    return /* @__PURE__ */ s(Ve, { missingPermissions: h });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1971,7 +1955,7 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ d(
       "div",
       {
         style: {
@@ -1985,7 +1969,7 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
-          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2011,7 +1995,7 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ d(
       "div",
       {
         style: {
@@ -2024,19 +2008,19 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
         children: [
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && n ? /* @__PURE__ */ u(_, { children: [
-            /* @__PURE__ */ u("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+          e && n ? /* @__PURE__ */ d(_, { children: [
+            /* @__PURE__ */ d("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
               /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
-            /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
               /* @__PURE__ */ s("strong", { children: n })
             ] })
-          ] }) : /* @__PURE__ */ u(_, { children: [
+          ] }) : /* @__PURE__ */ d(_, { children: [
             /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
-            t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
               /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
@@ -2045,8 +2029,8 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Nt = (n, e) => n === e;
-function Pr({
+), Dt = (n, e) => n === e;
+function Rr({
   children: n,
   redirectTo: e = "/login",
   requiredUserType: t,
@@ -2054,34 +2038,34 @@ function Pr({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: f, hasPermission: m, hasAnyPermission: b, hasAllPermissions: c } = ue(), L = ke();
+  const { hasValidSession: a, sessionManager: p, hasPermission: w, hasAnyPermission: y, hasAllPermissions: f } = ue(), x = ke();
   if (re(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
-    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ u(_, { children: [
-      /* @__PURE__ */ s(Ft, { redirectPath: e }),
-      /* @__PURE__ */ s(Se, { to: e, state: { from: L.pathname }, replace: !0 })
+    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ d(_, { children: [
+      /* @__PURE__ */ s(Nt, { redirectPath: e }),
+      /* @__PURE__ */ s(ve, { to: e, state: { from: x.pathname }, replace: !0 })
     ] });
-  const p = f.getUser();
-  if (!p)
-    return /* @__PURE__ */ s(Se, { to: e, state: { from: L.pathname }, replace: !0 });
-  if (t && !Nt(p.userType, t))
+  const h = p.getUser();
+  if (!h)
+    return /* @__PURE__ */ s(ve, { to: e, state: { from: x.pathname }, replace: !0 });
+  if (t && !Dt(h.userType, t))
     return /* @__PURE__ */ s(
       je,
       {
-        userType: p.userType,
+        userType: h.userType,
         requiredUserType: t
       }
     );
-  if (r && r.length > 0 && !(i ? c(r) : b(r))) {
-    const I = r.filter((M) => !m(M)).map((M) => typeof M == "string" ? M : M.name);
-    return /* @__PURE__ */ s(je, { missingPermissions: I });
+  if (r && r.length > 0 && !(i ? f(r) : y(r))) {
+    const N = r.filter((D) => !w(D)).map((D) => typeof D == "string" ? D : D.name);
+    return /* @__PURE__ */ s(je, { missingPermissions: N });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Dt = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2094,7 +2078,7 @@ const Dt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ d(
       "div",
       {
         style: {
@@ -2108,7 +2092,7 @@ const Dt = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
-          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2118,15 +2102,15 @@ const Dt = ({ redirectPath: n }) => /* @__PURE__ */ s(
     )
   }
 );
-function Rr({ children: n, redirectTo: e = "/", fallback: t }) {
+function Er({ children: n, redirectTo: e = "/", fallback: t }) {
   const { tenant: r, isLoading: i, error: o } = me(), a = ke();
   return re(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ u(_, { children: [
-    /* @__PURE__ */ s(Dt, { redirectPath: e }),
-    /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+    /* @__PURE__ */ s(Ft, { redirectPath: e }),
+    /* @__PURE__ */ s(ve, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
 const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
@@ -2142,7 +2126,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ d(
       "div",
       {
         style: {
@@ -2156,7 +2140,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
-          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2172,19 +2156,19 @@ function Ir({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ u(_, { children: [
+  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
     /* @__PURE__ */ s(Ct, { redirectPath: e }),
-    /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
+    /* @__PURE__ */ s(ve, { to: e, state: { from: a.pathname }, replace: !0 })
   ] }) : /* @__PURE__ */ s(_, { children: n });
 }
-function Ut(n, e) {
+function $t(n, e) {
   return e ? n ? Array.isArray(e) ? e.includes(n) : n === e : !1 : !0;
 }
 function Ge(n, e) {
   return !n || n === "optional" ? "skip" : n === "required" ? e ? "pass" : "fail" : n === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
-function $t(n, e) {
-  return Ge(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ge(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ut(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
+function Ut(n, e) {
+  return Ge(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ge(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !$t(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
 }
 function Ht(n, e) {
   return n.hasTenant ? n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
@@ -2195,7 +2179,7 @@ function Bt(n, e, t, r, i) {
   const o = typeof e == "string" ? e : t, a = n.includes("?") ? "&" : "?";
   return `${n}${a}${r}=${encodeURIComponent(o)}`;
 }
-function qt(n, e, t) {
+function Ot(n, e, t) {
   if (!n || t === "url") return;
   const r = typeof n == "string" ? n : e, i = "zone_return_to";
   t === "session" ? sessionStorage.setItem(i, r) : t === "local" && localStorage.setItem(i, r);
@@ -2208,83 +2192,83 @@ const ce = ({
   userType: i,
   requiredPermissions: o,
   requireAllPermissions: a = !0,
-  returnTo: f,
-  onAccessDenied: m,
-  redirectTo: b,
-  loadingFallback: c,
-  accessDeniedFallback: L
+  returnTo: p,
+  onAccessDenied: w,
+  redirectTo: y,
+  loadingFallback: f,
+  accessDeniedFallback: x
 }) => {
-  const p = ke(), { isAuthenticated: R, isAuthInitializing: I, currentUser: M, userPermissions: E } = ue(), { tenant: x, isTenantLoading: h } = ge(), A = Mt(), w = K(() => {
+  const h = ke(), { isAuthenticated: R, isAuthInitializing: N, currentUser: D, userPermissions: E } = ue(), { tenant: P, isTenantLoading: u } = ge(), S = Mt(), C = K(() => {
     if (e)
-      return A.presets[e];
-  }, [e, A.presets]), v = K(
+      return S.presets[e];
+  }, [e, S.presets]), M = K(
     () => ({
-      tenant: t ?? (w == null ? void 0 : w.tenant),
-      auth: r ?? (w == null ? void 0 : w.auth),
-      userType: i ?? (w == null ? void 0 : w.userType),
-      permissions: o ?? (w == null ? void 0 : w.requiredPermissions),
+      tenant: t ?? (C == null ? void 0 : C.tenant),
+      auth: r ?? (C == null ? void 0 : C.auth),
+      userType: i ?? (C == null ? void 0 : C.userType),
+      permissions: o ?? (C == null ? void 0 : C.requiredPermissions),
       requireAllPermissions: a
     }),
-    [t, r, i, o, w, a]
-  ), N = K(
+    [t, r, i, o, C, a]
+  ), T = K(
     () => ({
-      hasTenant: !!x,
+      hasTenant: !!P,
       isAuthenticated: R,
-      userType: M == null ? void 0 : M.userType,
+      userType: D == null ? void 0 : D.userType,
       permissions: E,
-      isLoading: I || h
+      isLoading: N || u
     }),
     [
-      x,
+      P,
       R,
-      M == null ? void 0 : M.userType,
+      D == null ? void 0 : D.userType,
       E,
-      I,
-      h
+      N,
+      u
     ]
-  ), B = K(() => N.isLoading ? null : $t(v, N), [v, N]), l = K(() => B ? b || Ht(N, A.zoneRoots) : null, [B, b, N, A.zoneRoots]), H = K(() => !B || !l ? null : {
-    type: B,
+  ), $ = K(() => T.isLoading ? null : Ut(M, T), [M, T]), l = K(() => $ ? y || Ht(T, S.zoneRoots) : null, [$, y, T, S.zoneRoots]), U = K(() => !$ || !l ? null : {
+    type: $,
     required: {
-      tenant: v.tenant,
-      auth: v.auth,
-      userType: v.userType,
-      permissions: v.permissions
+      tenant: M.tenant,
+      auth: M.auth,
+      userType: M.userType,
+      permissions: M.permissions
     },
     current: {
-      hasTenant: N.hasTenant,
-      isAuthenticated: N.isAuthenticated,
-      userType: N.userType,
-      permissions: N.permissions
+      hasTenant: T.hasTenant,
+      isAuthenticated: T.isAuthenticated,
+      userType: T.userType,
+      permissions: T.permissions
     },
     redirectTo: l
-  }, [B, l, v, N]);
+  }, [$, l, M, T]);
   if (re(() => {
-    H && (m ? m(H) : A.onAccessDenied && A.onAccessDenied(H));
-  }, [H, m, A]), re(() => {
-    H && f && qt(f, p.pathname + p.search, A.returnToStorage);
+    U && (w ? w(U) : S.onAccessDenied && S.onAccessDenied(U));
+  }, [U, w, S]), re(() => {
+    U && p && Ot(p, h.pathname + h.search, S.returnToStorage);
   }, [
-    H,
-    f,
-    p.pathname,
-    p.search,
-    A.returnToStorage
-  ]), N.isLoading)
-    return /* @__PURE__ */ s(_, { children: c ?? A.loadingFallback ?? null });
-  if (H && l) {
-    const P = L ?? A.accessDeniedFallback;
-    if (P)
-      return /* @__PURE__ */ s(_, { children: P });
-    const D = Bt(
+    U,
+    p,
+    h.pathname,
+    h.search,
+    S.returnToStorage
+  ]), T.isLoading)
+    return /* @__PURE__ */ s(_, { children: f ?? S.loadingFallback ?? null });
+  if (U && l) {
+    const b = x ?? S.accessDeniedFallback;
+    if (b)
+      return /* @__PURE__ */ s(_, { children: b });
+    const L = Bt(
       l,
-      f,
-      p.pathname + p.search,
-      A.returnToParam,
-      A.returnToStorage
+      p,
+      h.pathname + h.search,
+      S.returnToParam,
+      S.returnToStorage
     );
-    return /* @__PURE__ */ s(Se, { to: D, replace: !0 });
+    return /* @__PURE__ */ s(ve, { to: L, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: n });
-}, Er = (n) => /* @__PURE__ */ s(ce, { tenant: "required", ...n }), Mr = (n) => /* @__PURE__ */ s(ce, { tenant: "forbidden", ...n }), Lr = (n) => /* @__PURE__ */ s(ce, { auth: "required", ...n }), Fr = (n) => /* @__PURE__ */ s(ce, { auth: "forbidden", ...n }), Nr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.TENANT_ADMIN, ...n }), Dr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.USER, ...n }), Cr = (n) => /* @__PURE__ */ s(ce, { tenant: "optional", auth: "optional", ...n }), Ur = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "required", ...n }), $r = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "optional", ...n }), Hr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "forbidden", ...n }), Ot = () => /* @__PURE__ */ u(
+}, Mr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", ...n }), Lr = (n) => /* @__PURE__ */ s(ce, { tenant: "forbidden", ...n }), Nr = (n) => /* @__PURE__ */ s(ce, { auth: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ce, { auth: "forbidden", ...n }), Fr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.USER, ...n }), $r = (n) => /* @__PURE__ */ s(ce, { tenant: "optional", auth: "optional", ...n }), Ur = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "required", ...n }), Hr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "optional", ...n }), Br = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "forbidden", ...n }), qt = () => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -2301,14 +2285,14 @@ const ce = ({
     ]
   }
 );
-function Br({
+function Or({
   children: n,
-  fallback: e = /* @__PURE__ */ s(Ot, {}),
+  fallback: e = /* @__PURE__ */ s(qt, {}),
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: f } = Et();
-  return f ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = It();
+  return p ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2320,7 +2304,7 @@ function Br({
     }
   ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : r && !a(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: n }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const zt = ({ flagName: n }) => /* @__PURE__ */ u(
+const zt = ({ flagName: n }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -2339,7 +2323,7 @@ const zt = ({ flagName: n }) => /* @__PURE__ */ u(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
       /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
-      /* @__PURE__ */ u("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+      /* @__PURE__ */ d("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
         n,
         '" is disabled'
@@ -2364,7 +2348,7 @@ function qr({ name: n, children: e, fallback: t }) {
     }
   ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(zt, { flagName: n }) });
 }
-const _t = () => /* @__PURE__ */ u(
+const _t = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -2381,7 +2365,7 @@ const _t = () => /* @__PURE__ */ u(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Wt = () => /* @__PURE__ */ u(
+), Wt = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "16",
@@ -2414,7 +2398,11 @@ const _t = () => /* @__PURE__ */ u(
   magicLinkText: "Prefer passwordless?",
   magicLinkLink: "Use Magic Link",
   errorMessage: "Invalid credentials",
-  loadingText: "Signing in..."
+  loadingText: "Signing in...",
+  tenantNotFoundError: "Tenant not found",
+  dividerBullet: "•",
+  showPasswordAriaLabel: "Show password",
+  hidePasswordAriaLabel: "Hide password"
 }, Gt = {
   container: {
     maxWidth: "400px",
@@ -2520,9 +2508,12 @@ const _t = () => /* @__PURE__ */ u(
     margin: "0.5rem 0",
     color: "#6b7280",
     fontSize: "0.875rem"
+  },
+  inputWithIcon: {
+    paddingRight: "2.5rem"
   }
 };
-function Or({
+function zr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -2530,120 +2521,119 @@ function Or({
   onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: f,
-  showForgotPassword: m = !0,
-  showSignupLink: b = !0,
-  showMagicLinkOption: c = !0,
-  className: L
+  onMagicLinkClick: p,
+  showForgotPassword: w = !0,
+  showSignupLink: y = !0,
+  showMagicLinkOption: f = !0,
+  className: x
 }) {
-  const [p, R] = k(""), [I, M] = k(""), [E, x] = k(!1), [h, A] = k(!1), [w, v] = k(""), [N, B] = k({}), { login: l } = ue(), { tenant: H } = me(), P = { ...jt, ...n }, D = { ...Gt, ...e }, C = { ...Vt, ...t }, d = () => {
-    const g = {};
-    return p.trim() || (g.username = !0), I.trim() || (g.password = !0), B(g), Object.keys(g).length === 0;
-  }, U = async (g) => {
-    if (g.preventDefault(), !!d()) {
-      if (!(H != null && H.id)) {
-        v("Tenant not found");
+  const [h, R] = k(""), [N, D] = k(""), [E, P] = k(!1), [u, S] = k(!1), [C, M] = k(""), [T, $] = k({}), { login: l } = ue(), { tenant: U } = me(), b = { ...jt, ...n }, L = { ...Gt, ...e }, F = { ...Vt, ...t }, c = () => {
+    const m = {};
+    return h.trim() || (m.username = !0), N.trim() || (m.password = !0), $(m), Object.keys(m).length === 0;
+  }, H = async (m) => {
+    if (m.preventDefault(), !!c()) {
+      if (!(U != null && U.id)) {
+        M(b.tenantNotFoundError);
         return;
       }
-      A(!0), v("");
+      S(!0), M("");
       try {
-        const S = await l({
-          username: p,
-          password: I
+        const v = await l({
+          username: h,
+          password: N
           // tenantId inferred from context automatically
         });
-        r == null || r(S);
-      } catch (S) {
-        const Q = S.message || P.errorMessage;
-        v(Q), i == null || i(Q);
+        r == null || r(v);
+      } catch (v) {
+        const Q = v.message || b.errorMessage;
+        M(Q), i == null || i(Q);
       } finally {
-        A(!1);
+        S(!1);
       }
     }
-  }, F = (g) => ({
-    ...D.input,
-    ...N[g] ? D.inputError : {}
-  }), y = () => ({
-    ...D.button,
-    ...h ? D.buttonLoading : {},
-    ...!p || !I || h ? D.buttonDisabled : {}
+  }, I = (m) => ({
+    ...L.input,
+    ...T[m] ? L.inputError : {}
+  }), g = () => ({
+    ...L.button,
+    ...u ? L.buttonLoading : {},
+    ...!h || !N || u ? L.buttonDisabled : {}
   });
-  return /* @__PURE__ */ u("div", { className: L, style: D.container, children: [
-    /* @__PURE__ */ s("h2", { style: D.title, children: P.title }),
-    /* @__PURE__ */ u("form", { onSubmit: U, style: D.form, children: [
-      /* @__PURE__ */ u("div", { style: D.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: D.label, children: P.usernameLabel }),
+  return /* @__PURE__ */ d("div", { className: x, style: L.container, children: [
+    /* @__PURE__ */ s("h2", { style: L.title, children: b.title }),
+    /* @__PURE__ */ d("form", { onSubmit: H, style: L.form, children: [
+      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: L.label, children: b.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "username",
             name: "username",
             type: "text",
-            value: p,
-            onChange: (g) => {
-              R(g.target.value), N.username && B((S) => ({ ...S, username: !1 }));
+            value: h,
+            onChange: (m) => {
+              R(m.target.value), T.username && $((v) => ({ ...v, username: !1 }));
             },
-            placeholder: P.usernamePlaceholder,
-            style: F("username"),
-            disabled: h
+            placeholder: b.usernamePlaceholder,
+            style: I("username"),
+            disabled: u
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: D.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: D.label, children: P.passwordLabel }),
-        /* @__PURE__ */ u("div", { style: D.inputContainer, children: [
+      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: L.label, children: b.passwordLabel }),
+        /* @__PURE__ */ d("div", { style: L.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
               id: "password",
               name: "password",
               type: E ? "text" : "password",
-              value: I,
-              onChange: (g) => {
-                M(g.target.value), N.password && B((S) => ({ ...S, password: !1 }));
+              value: N,
+              onChange: (m) => {
+                D(m.target.value), T.password && $((v) => ({ ...v, password: !1 }));
               },
-              placeholder: P.passwordPlaceholder,
+              placeholder: b.passwordPlaceholder,
               style: {
-                ...F("password"),
-                paddingRight: "2.5rem"
-                // Make room for the icon
+                ...I("password"),
+                ...L.inputWithIcon
               },
-              disabled: h
+              disabled: u
             }
           ),
           /* @__PURE__ */ s(
             "button",
             {
               type: "button",
-              onClick: () => x(!E),
-              style: D.passwordToggle,
-              disabled: h,
-              "aria-label": E ? "Hide password" : "Show password",
-              children: E ? C.hidePassword : C.showPassword
+              onClick: () => P(!E),
+              style: L.passwordToggle,
+              disabled: u,
+              "aria-label": E ? b.hidePasswordAriaLabel : b.showPasswordAriaLabel,
+              children: E ? F.hidePassword : F.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !p || !I || h, style: y(), children: h ? P.loadingText : P.submitButton }),
-      w && /* @__PURE__ */ s("div", { style: D.errorText, children: w })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !h || !N || u, style: g(), children: u ? b.loadingText : b.submitButton }),
+      C && /* @__PURE__ */ s("div", { style: L.errorText, children: C })
     ] }),
-    (m || b || c) && /* @__PURE__ */ u("div", { style: D.linkContainer, children: [
-      c && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: D.divider, children: [
-          P.magicLinkText,
+    (w || y || f) && /* @__PURE__ */ d("div", { style: L.linkContainer, children: [
+      f && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: L.divider, children: [
+          b.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: f, style: D.link, children: P.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: p, style: L.link, children: b.magicLinkLink })
       ] }),
-      c && (m || b) && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
-      m && /* @__PURE__ */ s("a", { onClick: o, style: D.link, children: P.forgotPasswordLink }),
-      m && b && /* @__PURE__ */ s("div", { style: D.divider, children: "•" }),
-      b && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: D.divider, children: [
-          P.signupText,
+      f && (w || y) && /* @__PURE__ */ s("div", { style: L.divider, children: b.dividerBullet }),
+      w && /* @__PURE__ */ s("a", { onClick: o, style: L.link, children: b.forgotPasswordLink }),
+      w && y && /* @__PURE__ */ s("div", { style: L.divider, children: b.dividerBullet }),
+      y && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: L.divider, children: [
+          b.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: D.link, children: P.signupLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: L.link, children: b.signupLink })
       ] })
     ] })
   ] });
@@ -2673,7 +2663,10 @@ const Qt = {
   loadingText: "Creating account...",
   passwordMismatchError: "Passwords do not match",
   isAdminLabel: "Create new organization",
-  isAdminDescription: "Check this if you want to create a new organization"
+  isAdminDescription: "Check this if you want to create a new organization",
+  contactMethodHint: "At least one contact method (email or phone) is required",
+  tenantNotFoundError: "Tenant not found",
+  dividerBullet: "•"
 }, Kt = {
   container: {
     maxWidth: "400px",
@@ -2771,9 +2764,15 @@ const Qt = {
     margin: "0.5rem 0",
     color: "#6b7280",
     fontSize: "0.875rem"
+  },
+  hintText: {
+    fontSize: "0.875rem",
+    color: "#6b7280",
+    textAlign: "center",
+    margin: "0.5rem 0"
   }
 };
-function zr({
+function _r({
   copy: n = {},
   styles: e = {},
   signupType: t = "user",
@@ -2781,113 +2780,113 @@ function zr({
   onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: f = !0,
-  showMagicLinkOption: m = !0,
-  className: b
+  showLoginLink: p = !0,
+  showMagicLinkOption: w = !0,
+  className: y
 }) {
-  const [c, L] = k(""), [p, R] = k(""), [I, M] = k(""), [E, x] = k(""), [h, A] = k(""), [w, v] = k(""), [N, B] = k(""), [l, H] = k(!1), [P, D] = k(""), [C, d] = k({}), { signup: U, signupTenantAdmin: F } = ue(), { tenant: y } = me(), g = { ...Qt, ...n }, S = { ...Kt, ...e }, Q = () => {
-    const T = {};
-    return c.trim() || (T.name = !0), !I.trim() && !E.trim() && (T.email = !0, T.phoneNumber = !0), h.trim() || (T.password = !0), w.trim() || (T.confirmPassword = !0), t === "tenant" && !N.trim() && (T.tenantName = !0), d(T), Object.keys(T).length === 0;
-  }, J = async (T) => {
-    if (T.preventDefault(), !!Q()) {
-      if (h !== w) {
-        D(g.passwordMismatchError), d({ confirmPassword: !0 });
+  const [f, x] = k(""), [h, R] = k(""), [N, D] = k(""), [E, P] = k(""), [u, S] = k(""), [C, M] = k(""), [T, $] = k(""), [l, U] = k(!1), [b, L] = k(""), [F, c] = k({}), { signup: H, signupTenantAdmin: I } = ue(), { tenant: g } = me(), m = { ...Qt, ...n }, v = { ...Kt, ...e }, Q = () => {
+    const A = {};
+    return f.trim() || (A.name = !0), !N.trim() && !E.trim() && (A.email = !0, A.phoneNumber = !0), u.trim() || (A.password = !0), C.trim() || (A.confirmPassword = !0), t === "tenant" && !T.trim() && (A.tenantName = !0), c(A), Object.keys(A).length === 0;
+  }, J = async (A) => {
+    if (A.preventDefault(), !!Q()) {
+      if (u !== C) {
+        L(m.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(y != null && y.id)) {
-        D("Tenant not found");
+      if (t === "user" && !(g != null && g.id)) {
+        L(m.tenantNotFoundError);
         return;
       }
-      H(!0), D("");
+      U(!0), L("");
       try {
         let V;
-        t === "tenant" ? V = await F({
-          email: I || void 0,
+        t === "tenant" ? V = await I({
+          email: N || void 0,
           phoneNumber: E || void 0,
-          name: c,
-          password: h,
-          tenantName: N,
-          lastName: p || void 0
-        }) : V = await U({
-          email: I || void 0,
+          name: f,
+          password: u,
+          tenantName: T,
+          lastName: h || void 0
+        }) : V = await H({
+          email: N || void 0,
           phoneNumber: E || void 0,
-          name: c,
-          password: h,
-          tenantId: y.id,
-          lastName: p || void 0
+          name: f,
+          password: u,
+          tenantId: g.id,
+          lastName: h || void 0
         }), r == null || r(V);
       } catch (V) {
-        const de = V.message || g.errorMessage;
-        D(de), i == null || i(de);
+        const de = V.message || m.errorMessage;
+        L(de), i == null || i(de);
       } finally {
-        H(!1);
+        U(!1);
       }
     }
-  }, q = (T) => ({
-    ...S.input,
-    ...C[T] ? S.inputError : {}
-  }), O = () => ({
-    ...S.button,
-    ...l ? S.buttonLoading : {},
-    ...!c || !I && !E || !h || !w || l || t === "tenant" && !N ? S.buttonDisabled : {}
-  }), j = c && (I || E) && h && w && (t === "user" || N);
-  return /* @__PURE__ */ u("div", { className: b, style: S.container, children: [
-    /* @__PURE__ */ s("h2", { style: S.title, children: g.title }),
-    /* @__PURE__ */ u("form", { onSubmit: J, style: S.form, children: [
-      /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.nameLabel }),
+  }, O = (A) => ({
+    ...v.input,
+    ...F[A] ? v.inputError : {}
+  }), q = () => ({
+    ...v.button,
+    ...l ? v.buttonLoading : {},
+    ...!f || !N && !E || !u || !C || l || t === "tenant" && !T ? v.buttonDisabled : {}
+  }), j = f && (N || E) && u && C && (t === "user" || T);
+  return /* @__PURE__ */ d("div", { className: y, style: v.container, children: [
+    /* @__PURE__ */ s("h2", { style: v.title, children: m.title }),
+    /* @__PURE__ */ d("form", { onSubmit: J, style: v.form, children: [
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.nameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "name",
             name: "name",
             type: "text",
-            value: c,
-            onChange: (T) => {
-              L(T.target.value), C.name && d((V) => ({ ...V, name: !1 }));
+            value: f,
+            onChange: (A) => {
+              x(A.target.value), F.name && c((V) => ({ ...V, name: !1 }));
             },
-            placeholder: g.namePlaceholder,
-            style: q("name"),
+            placeholder: m.namePlaceholder,
+            style: O("name"),
             disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.lastNameLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: p,
-            onChange: (T) => R(T.target.value),
-            placeholder: g.lastNamePlaceholder,
-            style: S.input,
+            value: h,
+            onChange: (A) => R(A.target.value),
+            placeholder: m.lastNamePlaceholder,
+            style: v.input,
             disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.emailLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: I,
-            onChange: (T) => {
-              M(T.target.value), C.email && d((V) => ({ ...V, email: !1, phoneNumber: !1 }));
+            value: N,
+            onChange: (A) => {
+              D(A.target.value), F.email && c((V) => ({ ...V, email: !1, phoneNumber: !1 }));
             },
-            placeholder: g.emailPlaceholder,
-            style: q("email"),
+            placeholder: m.emailPlaceholder,
+            style: O("email"),
             disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.phoneNumberLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2895,99 +2894,88 @@ function zr({
             name: "phoneNumber",
             type: "tel",
             value: E,
-            onChange: (T) => {
-              x(T.target.value), C.phoneNumber && d((V) => ({ ...V, email: !1, phoneNumber: !1 }));
+            onChange: (A) => {
+              P(A.target.value), F.phoneNumber && c((V) => ({ ...V, email: !1, phoneNumber: !1 }));
             },
-            placeholder: g.phoneNumberPlaceholder,
-            style: q("phoneNumber"),
+            placeholder: m.phoneNumberPlaceholder,
+            style: O("phoneNumber"),
             disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ s(
-        "div",
-        {
-          style: {
-            fontSize: "0.875rem",
-            color: "#6b7280",
-            textAlign: "center",
-            margin: "0.5rem 0"
-          },
-          children: "At least one contact method (email or phone) is required"
-        }
-      ),
-      /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.passwordLabel }),
+      /* @__PURE__ */ s("div", { style: v.hintText, children: m.contactMethodHint }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "password",
             name: "password",
             type: "password",
-            value: h,
-            onChange: (T) => {
-              A(T.target.value), C.password && d((V) => ({ ...V, password: !1 }));
+            value: u,
+            onChange: (A) => {
+              S(A.target.value), F.password && c((V) => ({ ...V, password: !1 }));
             },
-            placeholder: g.passwordPlaceholder,
-            style: q("password"),
+            placeholder: m.passwordPlaceholder,
+            style: O("password"),
             disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.confirmPasswordLabel }),
+      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: w,
-            onChange: (T) => {
-              v(T.target.value), C.confirmPassword && d((V) => ({ ...V, confirmPassword: !1 })), P === g.passwordMismatchError && D("");
+            value: C,
+            onChange: (A) => {
+              M(A.target.value), F.confirmPassword && c((V) => ({ ...V, confirmPassword: !1 })), b === m.passwordMismatchError && L("");
             },
-            placeholder: g.confirmPasswordPlaceholder,
-            style: q("confirmPassword"),
+            placeholder: m.confirmPasswordPlaceholder,
+            style: O("confirmPassword"),
             disabled: l
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ u("div", { style: S.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: S.label, children: g.tenantNameLabel }),
+      t === "tenant" && /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: v.label, children: m.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
-            value: N,
-            onChange: (T) => {
-              B(T.target.value), C.tenantName && d((V) => ({ ...V, tenantName: !1 }));
+            value: T,
+            onChange: (A) => {
+              $(A.target.value), F.tenantName && c((V) => ({ ...V, tenantName: !1 }));
             },
-            placeholder: g.tenantNamePlaceholder,
-            style: q("tenantName"),
+            placeholder: m.tenantNamePlaceholder,
+            style: O("tenantName"),
             disabled: l
           }
         )
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !j || l, style: O(), children: l ? g.loadingText : g.submitButton }),
-      P && /* @__PURE__ */ s("div", { style: S.errorText, children: P })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !j || l, style: q(), children: l ? m.loadingText : m.submitButton }),
+      b && /* @__PURE__ */ s("div", { style: v.errorText, children: b })
     ] }),
-    (f || m) && /* @__PURE__ */ u("div", { style: S.linkContainer, children: [
-      m && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: S.divider, children: [
-          g.magicLinkText,
+    (p || w) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
+      w && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: v.divider, children: [
+          m.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: S.link, children: g.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: m.magicLinkLink })
       ] }),
-      m && f && /* @__PURE__ */ s("div", { style: S.divider, children: "•" }),
-      f && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: S.divider, children: [
-          g.loginText,
+      w && p && /* @__PURE__ */ s("div", { style: v.divider, children: m.dividerBullet }),
+      p && /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: v.divider, children: [
+          m.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: S.link, children: g.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: v.link, children: m.loginLink })
       ] })
     ] })
   ] });
@@ -3009,7 +2997,13 @@ const Zt = {
   errorMessage: "Failed to send magic link. Please try again.",
   loadingText: "Sending magic link...",
   verifyingText: "Verifying magic link...",
-  description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you."
+  verifyingDescription: "Please wait while we verify your magic link...",
+  description: "Enter your email to receive a magic link. If you don't have an account, we'll create one for you.",
+  showNameToggle: "New user? Add your name",
+  hideNameToggle: "Existing user? Hide name fields",
+  tenantNotFoundError: "Tenant not found",
+  missingTenantOrEmailError: "Missing tenant or email",
+  dividerBullet: "•"
 }, Jt = {
   container: {
     maxWidth: "400px",
@@ -3111,9 +3105,29 @@ const Zt = {
     margin: "0.5rem 0",
     color: "#6b7280",
     fontSize: "0.875rem"
+  },
+  verifyingContainer: {
+    textAlign: "center",
+    padding: "2rem"
+  },
+  verifyingText: {
+    fontSize: "1rem",
+    color: "#6b7280"
+  },
+  toggleContainer: {
+    textAlign: "center",
+    marginTop: "0.5rem"
+  },
+  toggleLink: {
+    background: "none",
+    border: "none",
+    color: "#3b82f6",
+    fontSize: "0.875rem",
+    cursor: "pointer",
+    textDecoration: "underline"
   }
 };
-function _r({
+function Wr({
   copy: n = {},
   styles: e = {},
   onSuccess: t,
@@ -3121,181 +3135,167 @@ function _r({
   onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: f,
-  verifyToken: m,
-  frontendUrl: b
+  className: p,
+  verifyToken: w,
+  frontendUrl: y
 }) {
-  const [c, L] = k(""), [p, R] = k(""), [I, M] = k(""), [E, x] = k(!1), [h, A] = k(!1), [w, v] = k(""), [N, B] = k(""), [l, H] = k({}), [P, D] = k(!1), { sendMagicLink: C, verifyMagicLink: d } = ue(), { tenant: U } = me(), F = { ...Zt, ...n }, y = { ...Jt, ...e };
+  const [f, x] = k(""), [h, R] = k(""), [N, D] = k(""), [E, P] = k(!1), [u, S] = k(!1), [C, M] = k(""), [T, $] = k(""), [l, U] = k({}), [b, L] = k(!1), { sendMagicLink: F, verifyMagicLink: c } = ue(), { tenant: H } = me(), I = { ...Zt, ...n }, g = { ...Jt, ...e };
   re(() => {
-    m && g(m);
-  }, [m]);
-  const g = async (O) => {
-    if (!U || !c) {
-      v("Missing tenant or email");
+    w && m(w);
+  }, [w]);
+  const m = async (q) => {
+    if (!H || !f) {
+      M(I.missingTenantOrEmailError);
       return;
     }
-    A(!0), v("");
+    S(!0), M("");
     try {
-      const j = await d({
-        token: O,
-        email: c
+      const j = await c({
+        token: q,
+        email: f
         // tenantId inferred from context automatically
       });
       t == null || t(j);
     } catch (j) {
-      const T = j.message || "Failed to verify magic link";
-      v(T), r == null || r(T);
+      const A = j.message || "Failed to verify magic link";
+      M(A), r == null || r(A);
     } finally {
-      A(!1);
+      S(!1);
     }
-  }, S = () => {
-    const O = {};
-    return c.trim() || (O.email = !0), P && !p.trim() && (O.name = !0), H(O), Object.keys(O).length === 0;
-  }, Q = async (O) => {
-    if (O.preventDefault(), !!S()) {
-      if (!(U != null && U.id)) {
-        v("Tenant not found");
+  }, v = () => {
+    const q = {};
+    return f.trim() || (q.email = !0), b && !h.trim() && (q.name = !0), U(q), Object.keys(q).length === 0;
+  }, Q = async (q) => {
+    if (q.preventDefault(), !!v()) {
+      if (!(H != null && H.id)) {
+        M(I.tenantNotFoundError);
         return;
       }
-      x(!0), v(""), B("");
+      P(!0), M(""), $("");
       try {
-        const j = b || (typeof window < "u" ? window.location.origin : ""), T = await C({
-          email: c,
-          tenantId: U.id,
+        const j = y || (typeof window < "u" ? window.location.origin : ""), A = await F({
+          email: f,
+          tenantId: H.id,
           frontendUrl: j,
-          name: P ? p : void 0,
-          lastName: P ? I : void 0
+          name: b ? h : void 0,
+          lastName: b ? N : void 0
         });
-        B(F.successMessage), t == null || t(T);
+        $(I.successMessage), t == null || t(A);
       } catch (j) {
-        const T = j.message || F.errorMessage;
-        v(T), r == null || r(T);
+        const A = j.message || I.errorMessage;
+        M(A), r == null || r(A);
       } finally {
-        x(!1);
+        P(!1);
       }
     }
-  }, J = (O) => ({
-    ...y.input,
-    ...l[O] ? y.inputError : {}
-  }), q = () => ({
-    ...y.button,
-    ...E || h ? y.buttonLoading : {},
-    ...!c || E || h ? y.buttonDisabled : {}
+  }, J = (q) => ({
+    ...g.input,
+    ...l[q] ? g.inputError : {}
+  }), O = () => ({
+    ...g.button,
+    ...E || u ? g.buttonLoading : {},
+    ...!f || E || u ? g.buttonDisabled : {}
   });
-  return h ? /* @__PURE__ */ u("div", { className: f, style: y.container, children: [
-    /* @__PURE__ */ s("h2", { style: y.title, children: F.verifyingText }),
-    /* @__PURE__ */ s("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ s("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ u("div", { className: f, style: y.container, children: [
-    /* @__PURE__ */ s("h2", { style: y.title, children: F.title }),
-    /* @__PURE__ */ s("p", { style: y.description, children: F.description }),
-    /* @__PURE__ */ u("form", { onSubmit: Q, style: y.form, children: [
-      /* @__PURE__ */ u("div", { style: y.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: y.label, children: F.emailLabel }),
+  return u ? /* @__PURE__ */ d("div", { className: p, style: g.container, children: [
+    /* @__PURE__ */ s("h2", { style: g.title, children: I.verifyingText }),
+    /* @__PURE__ */ s("div", { style: g.verifyingContainer, children: /* @__PURE__ */ s("div", { style: g.verifyingText, children: I.verifyingDescription }) })
+  ] }) : /* @__PURE__ */ d("div", { className: p, style: g.container, children: [
+    /* @__PURE__ */ s("h2", { style: g.title, children: I.title }),
+    /* @__PURE__ */ s("p", { style: g.description, children: I.description }),
+    /* @__PURE__ */ d("form", { onSubmit: Q, style: g.form, children: [
+      /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: g.label, children: I.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: c,
-            onChange: (O) => {
-              L(O.target.value), l.email && H((j) => ({ ...j, email: !1 }));
+            value: f,
+            onChange: (q) => {
+              x(q.target.value), l.email && U((j) => ({ ...j, email: !1 }));
             },
-            placeholder: F.emailPlaceholder,
+            placeholder: I.emailPlaceholder,
             style: J("email"),
-            disabled: E || h
+            disabled: E || u
           }
         )
       ] }),
-      !P && /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
+      !b && /* @__PURE__ */ s("div", { style: g.toggleContainer, children: /* @__PURE__ */ s(
         "button",
         {
           type: "button",
-          onClick: () => D(!0),
-          style: {
-            background: "none",
-            border: "none",
-            color: "#3b82f6",
-            fontSize: "0.875rem",
-            cursor: "pointer",
-            textDecoration: "underline"
-          },
-          children: "New user? Add your name"
+          onClick: () => L(!0),
+          style: g.toggleLink,
+          children: I.showNameToggle
         }
       ) }),
-      P && /* @__PURE__ */ u(_, { children: [
-        /* @__PURE__ */ u("div", { style: y.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: y.label, children: F.nameLabel }),
+      b && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: I.nameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: p,
-              onChange: (O) => {
-                R(O.target.value), l.name && H((j) => ({ ...j, name: !1 }));
+              value: h,
+              onChange: (q) => {
+                R(q.target.value), l.name && U((j) => ({ ...j, name: !1 }));
               },
-              placeholder: F.namePlaceholder,
+              placeholder: I.namePlaceholder,
               style: J("name"),
-              disabled: E || h
+              disabled: E || u
             }
           )
         ] }),
-        /* @__PURE__ */ u("div", { style: y.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: y.label, children: F.lastNameLabel }),
+        /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: I.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "lastName",
               name: "lastName",
               type: "text",
-              value: I,
-              onChange: (O) => M(O.target.value),
-              placeholder: F.lastNamePlaceholder,
-              style: y.input,
-              disabled: E || h
+              value: N,
+              onChange: (q) => D(q.target.value),
+              placeholder: I.lastNamePlaceholder,
+              style: g.input,
+              disabled: E || u
             }
           )
         ] }),
-        /* @__PURE__ */ s("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ s(
+        /* @__PURE__ */ s("div", { style: g.toggleContainer, children: /* @__PURE__ */ s(
           "button",
           {
             type: "button",
             onClick: () => {
-              D(!1), R(""), M("");
-            },
-            style: {
-              background: "none",
-              border: "none",
-              color: "#6b7280",
-              fontSize: "0.875rem",
-              cursor: "pointer",
-              textDecoration: "underline"
+              L(!1), R(""), D("");
             },
-            children: "Existing user? Hide name fields"
+            style: g.toggleLink,
+            children: I.hideNameToggle
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !c || E || h, style: q(), children: E ? F.loadingText : F.submitButton }),
-      w && /* @__PURE__ */ s("div", { style: y.errorText, children: w }),
-      N && /* @__PURE__ */ s("div", { style: y.successText, children: N })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !f || E || u, style: O(), children: E ? I.loadingText : I.submitButton }),
+      C && /* @__PURE__ */ s("div", { style: g.errorText, children: C }),
+      T && /* @__PURE__ */ s("div", { style: g.successText, children: T })
     ] }),
-    a && /* @__PURE__ */ u("div", { style: y.linkContainer, children: [
-      /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: y.divider, children: [
-          F.loginText,
+    a && /* @__PURE__ */ d("div", { style: g.linkContainer, children: [
+      /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: g.divider, children: [
+          I.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: i, style: y.link, children: F.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: g.link, children: I.loginLink })
       ] }),
-      /* @__PURE__ */ s("div", { style: y.divider, children: "•" }),
-      /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: y.divider, children: [
-          F.signupText,
+      /* @__PURE__ */ s("div", { style: g.divider, children: I.dividerBullet }),
+      /* @__PURE__ */ d("div", { children: [
+        /* @__PURE__ */ d("span", { style: g.divider, children: [
+          I.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: y.link, children: F.signupLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: g.link, children: I.signupLink })
       ] })
     ] })
   ] });
@@ -3307,7 +3307,8 @@ const Yt = {
   errorMessage: "Failed to verify magic link. The link may be expired or invalid.",
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
-  backToLoginButton: "Back to Login"
+  backToLoginButton: "Back to Login",
+  missingParamsError: "Missing required parameters: token or email"
 }, Ye = {
   container: {
     maxWidth: "400px",
@@ -3394,8 +3395,14 @@ const Yt = {
     fontWeight: "500",
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
+  },
+  retryButtonHover: {
+    backgroundColor: "#2563eb"
+  },
+  backButtonHover: {
+    backgroundColor: "#e5e7eb"
   }
-}, Xt = () => /* @__PURE__ */ s("div", { style: Ye.spinner }), er = () => /* @__PURE__ */ u(
+}, Xt = () => /* @__PURE__ */ s("div", { style: Ye.spinner }), er = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3412,7 +3419,7 @@ const Yt = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), tr = () => /* @__PURE__ */ u(
+), tr = () => /* @__PURE__ */ d(
   "svg",
   {
     width: "48",
@@ -3435,7 +3442,7 @@ const Yt = {
   success: /* @__PURE__ */ s(er, {}),
   error: /* @__PURE__ */ s(tr, {})
 };
-function Wr({
+function Vr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -3443,96 +3450,102 @@ function Wr({
   onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: f,
-  token: m,
-  email: b,
-  appId: c,
-  tenantSlug: L,
-  autoRedirectDelay: p = 3e3
+  className: p,
+  token: w,
+  email: y,
+  appId: f,
+  tenantSlug: x,
+  autoRedirectDelay: h = 3e3
 }) {
-  const [R, I] = k("verifying"), [M, E] = k(""), { verifyMagicLink: x } = ue(), h = { ...Yt, ...n }, A = { ...Ye, ...e }, w = { ...rr, ...t }, v = () => {
+  const [R, N] = k("verifying"), [D, E] = k(""), { verifyMagicLink: P } = ue(), u = { ...Yt, ...n }, S = { ...Ye, ...e }, C = { ...rr, ...t }, M = () => {
     if (typeof window > "u") return {};
-    const P = new URLSearchParams(window.location.search);
+    const b = new URLSearchParams(window.location.search);
     return {
-      token: m || P.get("token") || "",
-      email: b || P.get("email") || "",
-      appId: c || P.get("appId") || "",
-      tenantSlug: L || P.get("tenantSlug") || void 0
+      token: w || b.get("token") || "",
+      email: y || b.get("email") || "",
+      appId: f || b.get("appId") || "",
+      tenantSlug: x || b.get("tenantSlug") || void 0
     };
-  }, N = async () => {
-    I("verifying"), E("");
+  }, T = async () => {
+    N("verifying"), E("");
     try {
-      const P = v();
-      if (!P.token || !P.email)
-        throw new Error("Missing required parameters: token or email");
-      const D = await x({
-        token: P.token,
-        email: P.email,
-        tenantSlug: P.tenantSlug
+      const b = M();
+      if (!b.token || !b.email)
+        throw new Error(u.missingParamsError);
+      const L = await P({
+        token: b.token,
+        email: b.email,
+        tenantSlug: b.tenantSlug
       });
-      I("success"), r == null || r(D), p > 0 && setTimeout(() => {
-        I("redirecting");
-      }, p);
-    } catch (P) {
-      const D = P.message || h.errorMessage;
-      E(D), I("error"), i == null || i(D);
+      N("success"), r == null || r(L), h > 0 && setTimeout(() => {
+        N("redirecting");
+      }, h);
+    } catch (b) {
+      const L = b.message || u.errorMessage;
+      E(L), N("error"), i == null || i(L);
     }
-  }, B = () => {
-    o == null || o(), N();
+  }, $ = () => {
+    o == null || o(), T();
   }, l = () => {
     a == null || a();
   };
   re(() => {
-    N();
+    T();
   }, []);
-  const H = () => {
+  const U = () => {
     switch (R) {
       case "verifying":
-        return /* @__PURE__ */ u("div", { style: A.message, children: [
-          w.loading,
-          h.verifyingMessage
+        return /* @__PURE__ */ d("div", { style: S.message, children: [
+          C.loading,
+          u.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ u(_, { children: [
-          w.success,
-          /* @__PURE__ */ s("div", { style: A.successMessage, children: h.successMessage })
+        return /* @__PURE__ */ d(_, { children: [
+          C.success,
+          /* @__PURE__ */ s("div", { style: S.successMessage, children: u.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ u(_, { children: [
-          w.loading,
-          /* @__PURE__ */ s("div", { style: A.message, children: h.redirectingMessage })
+        return /* @__PURE__ */ d(_, { children: [
+          C.loading,
+          /* @__PURE__ */ s("div", { style: S.message, children: u.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ u(_, { children: [
-          w.error,
-          /* @__PURE__ */ s("div", { style: A.errorMessage, children: M || h.errorMessage }),
-          /* @__PURE__ */ u("div", { style: A.buttonContainer, children: [
+        return /* @__PURE__ */ d(_, { children: [
+          C.error,
+          /* @__PURE__ */ s("div", { style: S.errorMessage, children: D || u.errorMessage }),
+          /* @__PURE__ */ d("div", { style: S.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: B,
-                style: A.retryButton,
-                onMouseOver: (P) => {
-                  P.currentTarget.style.backgroundColor = "#2563eb";
+                onClick: $,
+                style: S.retryButton,
+                onMouseOver: (b) => {
+                  Object.assign(b.currentTarget.style, S.retryButtonHover);
                 },
-                onMouseOut: (P) => {
-                  P.currentTarget.style.backgroundColor = "#3b82f6";
+                onMouseOut: (b) => {
+                  const L = S.retryButton || {};
+                  Object.keys(S.retryButtonHover || {}).forEach((F) => {
+                    b.currentTarget.style[F] = L[F] ?? "";
+                  });
                 },
-                children: h.retryButton
+                children: u.retryButton
               }
             ),
             /* @__PURE__ */ s(
               "button",
               {
                 onClick: l,
-                style: A.backButton,
-                onMouseOver: (P) => {
-                  P.currentTarget.style.backgroundColor = "#e5e7eb";
+                style: S.backButton,
+                onMouseOver: (b) => {
+                  Object.assign(b.currentTarget.style, S.backButtonHover);
                 },
-                onMouseOut: (P) => {
-                  P.currentTarget.style.backgroundColor = "#f3f4f6";
+                onMouseOut: (b) => {
+                  const L = S.backButton || {};
+                  Object.keys(S.backButtonHover || {}).forEach((F) => {
+                    b.currentTarget.style[F] = L[F] ?? "";
+                  });
                 },
-                children: h.backToLoginButton
+                children: u.backToLoginButton
               }
             )
           ] })
@@ -3541,15 +3554,15 @@ function Wr({
         return null;
     }
   };
-  return /* @__PURE__ */ u("div", { style: A.container, className: f, children: [
+  return /* @__PURE__ */ d("div", { style: S.container, className: p, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ s("h1", { style: A.title, children: h.title }),
-    H()
+    /* @__PURE__ */ s("h1", { style: S.title, children: u.title }),
+    U()
   ] });
 }
 const nr = {
@@ -3573,7 +3586,11 @@ const nr = {
   resetSubmitButton: "Reset Password",
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
-  passwordMismatchError: "Passwords do not match"
+  passwordMismatchError: "Passwords do not match",
+  requestNewLinkLink: "Request New Link",
+  haveTokenLink: "I have a token",
+  tenantNotFoundError: "Tenant not found",
+  dividerBullet: "•"
 }, sr = {
   container: {
     maxWidth: "400px",
@@ -3664,9 +3681,13 @@ const nr = {
     textDecoration: "none",
     fontSize: "0.875rem",
     cursor: "pointer"
+  },
+  modeSwitchDivider: {
+    margin: "0 0.5rem",
+    color: "#6b7280"
   }
 };
-function Vr({
+function jr({
   copy: n = {},
   styles: e = {},
   mode: t = "request",
@@ -3674,105 +3695,105 @@ function Vr({
   onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: f,
-  className: m
+  onModeChange: p,
+  className: w
 }) {
-  const [b, c] = k(""), [L, p] = k(r), [R, I] = k(""), [M, E] = k(""), [x, h] = k(!1), [A, w] = k(""), [v, N] = k(""), [B, l] = k({}), { requestPasswordReset: H, confirmPasswordReset: P } = ue(), { tenant: D } = me(), C = { ...nr, ...n }, d = { ...sr, ...e }, U = () => {
-    const q = {};
-    return b.trim() || (q.email = !0), l(q), Object.keys(q).length === 0;
-  }, F = () => {
-    const q = {};
-    return L.trim() || (q.token = !0), R.trim() || (q.newPassword = !0), M.trim() || (q.confirmPassword = !0), l(q), Object.keys(q).length === 0;
-  }, y = async (q) => {
-    if (q.preventDefault(), !!U()) {
-      if (!(D != null && D.id)) {
-        w("Tenant not found");
+  const [y, f] = k(""), [x, h] = k(r), [R, N] = k(""), [D, E] = k(""), [P, u] = k(!1), [S, C] = k(""), [M, T] = k(""), [$, l] = k({}), { requestPasswordReset: U, confirmPasswordReset: b } = ue(), { tenant: L } = me(), F = { ...nr, ...n }, c = { ...sr, ...e }, H = () => {
+    const O = {};
+    return y.trim() || (O.email = !0), l(O), Object.keys(O).length === 0;
+  }, I = () => {
+    const O = {};
+    return x.trim() || (O.token = !0), R.trim() || (O.newPassword = !0), D.trim() || (O.confirmPassword = !0), l(O), Object.keys(O).length === 0;
+  }, g = async (O) => {
+    if (O.preventDefault(), !!H()) {
+      if (!(L != null && L.id)) {
+        C(F.tenantNotFoundError);
         return;
       }
-      h(!0), w(""), N("");
+      u(!0), C(""), T("");
       try {
-        await H({ email: b, tenantId: D.id }), N(C.successMessage), i == null || i();
-      } catch (O) {
-        const j = O.message || C.errorMessage;
-        w(j), o == null || o(j);
+        await U({ email: y, tenantId: L.id }), T(F.successMessage), i == null || i();
+      } catch (q) {
+        const j = q.message || F.errorMessage;
+        C(j), o == null || o(j);
       } finally {
-        h(!1);
+        u(!1);
       }
     }
-  }, g = async (q) => {
-    if (q.preventDefault(), !!F()) {
-      if (R !== M) {
-        w(C.passwordMismatchError), l({ confirmPassword: !0 });
+  }, m = async (O) => {
+    if (O.preventDefault(), !!I()) {
+      if (R !== D) {
+        C(F.passwordMismatchError), l({ confirmPassword: !0 });
         return;
       }
-      h(!0), w(""), N("");
+      u(!0), C(""), T("");
       try {
-        await P({ token: L, newPassword: R }), N(C.resetSuccessMessage), i == null || i();
-      } catch (O) {
-        const j = O.message || C.errorMessage;
-        w(j), o == null || o(j);
+        await b({ token: x, newPassword: R }), T(F.resetSuccessMessage), i == null || i();
+      } catch (q) {
+        const j = q.message || F.errorMessage;
+        C(j), o == null || o(j);
       } finally {
-        h(!1);
+        u(!1);
       }
     }
-  }, S = (q) => ({
-    ...d.input,
-    ...B[q] ? d.inputError : {}
+  }, v = (O) => ({
+    ...c.input,
+    ...$[O] ? c.inputError : {}
   }), Q = () => ({
-    ...d.button,
-    ...x ? d.buttonLoading : {}
+    ...c.button,
+    ...P ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const q = L && R && M;
-    return /* @__PURE__ */ u("div", { className: m, style: d.container, children: [
-      /* @__PURE__ */ s("h2", { style: d.title, children: C.resetTitle }),
-      /* @__PURE__ */ s("p", { style: d.subtitle, children: C.resetSubtitle }),
-      /* @__PURE__ */ u("form", { onSubmit: g, style: d.form, children: [
-        /* @__PURE__ */ u("div", { style: d.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: d.label, children: C.tokenLabel }),
+    const O = x && R && D;
+    return /* @__PURE__ */ d("div", { className: w, style: c.container, children: [
+      /* @__PURE__ */ s("h2", { style: c.title, children: F.resetTitle }),
+      /* @__PURE__ */ s("p", { style: c.subtitle, children: F.resetSubtitle }),
+      /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: F.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: L,
-              onChange: (O) => {
-                p(O.target.value), B.token && l((j) => ({ ...j, token: !1 }));
+              value: x,
+              onChange: (q) => {
+                h(q.target.value), $.token && l((j) => ({ ...j, token: !1 }));
               },
-              placeholder: C.tokenPlaceholder,
-              style: S("token"),
-              disabled: x
+              placeholder: F.tokenPlaceholder,
+              style: v("token"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ u("div", { style: d.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: d.label, children: C.newPasswordLabel }),
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: F.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
               value: R,
-              onChange: (O) => {
-                I(O.target.value), B.newPassword && l((j) => ({ ...j, newPassword: !1 }));
+              onChange: (q) => {
+                N(q.target.value), $.newPassword && l((j) => ({ ...j, newPassword: !1 }));
               },
-              placeholder: C.newPasswordPlaceholder,
-              style: S("newPassword"),
-              disabled: x
+              placeholder: F.newPasswordPlaceholder,
+              style: v("newPassword"),
+              disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ u("div", { style: d.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: d.label, children: C.confirmPasswordLabel }),
+        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: c.label, children: F.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: M,
-              onChange: (O) => {
-                E(O.target.value), B.confirmPassword && l((j) => ({ ...j, confirmPassword: !1 })), A === C.passwordMismatchError && w("");
+              value: D,
+              onChange: (q) => {
+                E(q.target.value), $.confirmPassword && l((j) => ({ ...j, confirmPassword: !1 })), S === F.passwordMismatchError && C("");
               },
-              placeholder: C.confirmPasswordPlaceholder,
-              style: S("confirmPassword"),
-              disabled: x
+              placeholder: F.confirmPasswordPlaceholder,
+              style: v("confirmPassword"),
+              disabled: P
             }
           )
         ] }),
@@ -3780,44 +3801,44 @@ function Vr({
           "button",
           {
             type: "submit",
-            disabled: !q || x,
+            disabled: !O || P,
             style: {
               ...Q(),
-              ...!q || x ? d.buttonDisabled : {}
+              ...!O || P ? c.buttonDisabled : {}
             },
-            children: x ? C.resetLoadingText : C.resetSubmitButton
+            children: P ? F.resetLoadingText : F.resetSubmitButton
           }
         ),
-        A && /* @__PURE__ */ s("div", { style: d.errorText, children: A }),
-        v && /* @__PURE__ */ s("div", { style: d.successText, children: v })
+        S && /* @__PURE__ */ s("div", { style: c.errorText, children: S }),
+        M && /* @__PURE__ */ s("div", { style: c.successText, children: M })
       ] }),
-      /* @__PURE__ */ u("div", { style: d.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: d.link, children: C.backToLoginLink }),
-        f && /* @__PURE__ */ u(_, { children: [
-          /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ s("a", { onClick: () => f("request"), style: d.link, children: "Request New Link" })
+      /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
+        p && /* @__PURE__ */ d(_, { children: [
+          /* @__PURE__ */ s("span", { style: c.modeSwitchDivider, children: F.dividerBullet }),
+          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: F.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
-  const J = b;
-  return /* @__PURE__ */ u("div", { className: m, style: d.container, children: [
-    /* @__PURE__ */ s("h2", { style: d.title, children: C.title }),
-    /* @__PURE__ */ s("p", { style: d.subtitle, children: C.subtitle }),
-    /* @__PURE__ */ u("form", { onSubmit: y, style: d.form, children: [
-      /* @__PURE__ */ u("div", { style: d.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: d.label, children: C.emailLabel }),
+  const J = y;
+  return /* @__PURE__ */ d("div", { className: w, style: c.container, children: [
+    /* @__PURE__ */ s("h2", { style: c.title, children: F.title }),
+    /* @__PURE__ */ s("p", { style: c.subtitle, children: F.subtitle }),
+    /* @__PURE__ */ d("form", { onSubmit: g, style: c.form, children: [
+      /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: c.label, children: F.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
-            value: b,
-            onChange: (q) => {
-              c(q.target.value), B.email && l((O) => ({ ...O, email: !1 }));
+            value: y,
+            onChange: (O) => {
+              f(O.target.value), $.email && l((q) => ({ ...q, email: !1 }));
             },
-            placeholder: C.emailPlaceholder,
-            style: S("email"),
-            disabled: x
+            placeholder: F.emailPlaceholder,
+            style: v("email"),
+            disabled: P
           }
         )
       ] }),
@@ -3825,22 +3846,22 @@ function Vr({
         "button",
         {
           type: "submit",
-          disabled: !J || x,
+          disabled: !J || P,
           style: {
             ...Q(),
-            ...!J || x ? d.buttonDisabled : {}
+            ...!J || P ? c.buttonDisabled : {}
           },
-          children: x ? C.loadingText : C.submitButton
+          children: P ? F.loadingText : F.submitButton
         }
       ),
-      A && /* @__PURE__ */ s("div", { style: d.errorText, children: A }),
-      v && /* @__PURE__ */ s("div", { style: d.successText, children: v })
+      S && /* @__PURE__ */ s("div", { style: c.errorText, children: S }),
+      M && /* @__PURE__ */ s("div", { style: c.successText, children: M })
     ] }),
-    /* @__PURE__ */ u("div", { style: d.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: d.link, children: C.backToLoginLink }),
-      f && /* @__PURE__ */ u(_, { children: [
-        /* @__PURE__ */ s("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ s("a", { onClick: () => f("reset"), style: d.link, children: "I have a token" })
+    /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
+      p && /* @__PURE__ */ d(_, { children: [
+        /* @__PURE__ */ s("span", { style: c.modeSwitchDivider, children: F.dividerBullet }),
+        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: F.haveTokenLink })
       ] })
     ] })
   ] });
@@ -3857,7 +3878,7 @@ const ir = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), or = ({ error: n, retry: e }) => /* @__PURE__ */ u(
+), or = ({ error: n, retry: e }) => /* @__PURE__ */ d(
   "div",
   {
     style: {
@@ -3891,139 +3912,169 @@ const ir = () => /* @__PURE__ */ s(
     ]
   }
 );
-function jr({
+function Gr({
   children: n,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = ve(), f = xe(), m = De(), b = Ke(), c = Ze(), L = (f == null ? void 0 : f.isTenantLoading) ?? !1, p = (f == null ? void 0 : f.tenantError) ?? null, R = (f == null ? void 0 : f.tenantSlug) ?? null, I = (f == null ? void 0 : f.retryTenant) ?? (() => {
-  }), M = (m == null ? void 0 : m.isAuthReady) ?? !0, E = (b == null ? void 0 : b.isReady) ?? !0, x = (c == null ? void 0 : c.isReady) ?? !0, h = r && f && R, N = i || h && L || m && !M || b && !E || c && !x, B = o || (h ? p : null), l = () => {
-    o && a(), p && f && I();
+  const { isAppLoading: i, appError: o, retryApp: a } = Se(), p = xe(), w = Fe(), y = Ke(), f = Ze(), x = (p == null ? void 0 : p.isTenantLoading) ?? !1, h = (p == null ? void 0 : p.tenantError) ?? null, R = (p == null ? void 0 : p.tenantSlug) ?? null, N = (p == null ? void 0 : p.retryTenant) ?? (() => {
+  }), D = (w == null ? void 0 : w.isAuthReady) ?? !0, E = (y == null ? void 0 : y.isReady) ?? !0, P = (f == null ? void 0 : f.isReady) ?? !0, u = r && p && R, T = i || u && x || w && !D || y && !E || f && !P, $ = o || (u ? h : null), l = () => {
+    o && a(), h && p && N();
   };
-  if (N)
+  if (T)
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(ir, {}) });
-  if (B) {
-    const H = typeof t == "function" ? t(B, l) : t || /* @__PURE__ */ s(or, { error: B, retry: l });
-    return /* @__PURE__ */ s(_, { children: H });
+  if ($) {
+    const U = typeof t == "function" ? t($, l) : t || /* @__PURE__ */ s(or, { error: $, retry: l });
+    return /* @__PURE__ */ s(_, { children: U });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-function Gr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = ve(), o = xe(), a = De(), f = Ke(), m = Ze(), b = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, L = (o == null ? void 0 : o.tenant) ?? null, p = (o == null ? void 0 : o.tenantSlug) ?? null, R = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), I = (a == null ? void 0 : a.isAuthReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, E = (m == null ? void 0 : m.isReady) ?? !0, x = n && o && p, v = e || x && b || a && !I || f && !M || m && !E, N = t || (x ? c : null);
+function Qr(n = !0) {
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Se(), o = xe(), a = Fe(), p = Ke(), w = Ze(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, f = (o == null ? void 0 : o.tenantError) ?? null, x = (o == null ? void 0 : o.tenant) ?? null, h = (o == null ? void 0 : o.tenantSlug) ?? null, R = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), N = (a == null ? void 0 : a.isAuthReady) ?? !0, D = (p == null ? void 0 : p.isReady) ?? !0, E = (w == null ? void 0 : w.isReady) ?? !0, P = n && o && h, M = e || P && y || a && !N || p && !D || w && !E, T = t || (P ? f : null);
   return {
-    isLoading: v,
-    error: N,
-    isReady: !v && !N && i !== null && (!x || L !== null),
+    isLoading: M,
+    error: T,
+    isReady: !M && !T && i !== null && (!P || x !== null),
     retry: () => {
-      t && r(), c && o && R();
+      t && r(), f && o && R();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: b, error: c, data: L } : null,
-    auth: a ? { isReady: I } : null,
-    featureFlags: f ? { isReady: M } : null,
-    subscription: m ? { isReady: E } : null
+    tenant: o ? { isLoading: y, error: f, data: x } : null,
+    auth: a ? { isReady: N } : null,
+    featureFlags: p ? { isReady: D } : null,
+    subscription: w ? { isReady: E } : null
   };
 }
-function Qr({
+const ar = {
+  wrapper: {
+    position: "relative"
+  },
+  button: {
+    cursor: "pointer",
+    opacity: 1
+  },
+  buttonDisabled: {
+    cursor: "not-allowed",
+    opacity: 0.6
+  },
+  dropdown: {
+    position: "absolute",
+    top: "100%",
+    left: 0,
+    right: 0,
+    zIndex: 1e3,
+    backgroundColor: "white",
+    border: "1px solid #ccc",
+    borderRadius: 4,
+    boxShadow: "0 2px 8px rgba(0,0,0,0.15)",
+    maxHeight: 300,
+    overflowY: "auto"
+  },
+  item: {
+    padding: "8px 12px",
+    cursor: "pointer",
+    backgroundColor: "transparent"
+  },
+  itemSelected: {
+    backgroundColor: "#f0f0f0"
+  },
+  itemHover: {
+    backgroundColor: "#f5f5f5"
+  },
+  itemRole: {
+    opacity: 0.7,
+    marginLeft: 8
+  },
+  arrow: {
+    marginLeft: 8
+  }
+};
+function Kr({
   tenants: n,
   currentTenantId: e,
   onSelect: t,
-  className: r = "",
-  dropdownClassName: i = "",
-  itemClassName: o = "",
-  renderItem: a,
-  placeholder: f = "Select tenant",
-  disabled: m = !1,
-  showCurrentTenant: b = !0
+  styles: r = {},
+  className: i = "",
+  dropdownClassName: o = "",
+  itemClassName: a = "",
+  renderItem: p,
+  placeholder: w = "Select tenant",
+  disabled: y = !1,
+  showCurrentTenant: f = !0
 }) {
-  var A;
-  const c = De(), [L, p] = k(!1), R = Me(null), I = n ?? (c == null ? void 0 : c.userTenants) ?? [], M = e ?? ((A = c == null ? void 0 : c.currentUser) == null ? void 0 : A.tenantId) ?? null, E = async (w) => {
-    p(!1), t ? t(w) : c != null && c.switchToTenant && await c.switchToTenant(w);
+  var M;
+  const x = { ...ar, ...r }, h = Fe(), [R, N] = k(!1), D = Me(null), E = n ?? (h == null ? void 0 : h.userTenants) ?? [], P = e ?? ((M = h == null ? void 0 : h.currentUser) == null ? void 0 : M.tenantId) ?? null, u = async (T) => {
+    N(!1), t ? t(T) : h != null && h.switchToTenant && await h.switchToTenant(T);
   };
   re(() => {
-    const w = (v) => {
-      R.current && !R.current.contains(v.target) && p(!1);
+    const T = ($) => {
+      D.current && !D.current.contains($.target) && N(!1);
     };
-    return document.addEventListener("mousedown", w), () => document.removeEventListener("mousedown", w);
+    return document.addEventListener("mousedown", T), () => document.removeEventListener("mousedown", T);
   }, []);
-  const x = I.find((w) => w.id === M);
-  if (I.length === 0)
+  const S = E.find((T) => T.id === P);
+  if (E.length === 0)
     return null;
-  if (I.length === 1 && b)
-    return /* @__PURE__ */ s("div", { className: r, children: /* @__PURE__ */ s("span", { children: I[0].name }) });
-  const h = (w, v) => /* @__PURE__ */ u("span", { style: { fontWeight: v ? "bold" : "normal" }, children: [
-    w.name,
-    w.role && /* @__PURE__ */ u("span", { style: { opacity: 0.7, marginLeft: 8 }, children: [
+  if (E.length === 1 && f)
+    return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: E[0].name }) });
+  const C = (T, $) => /* @__PURE__ */ d("span", { style: { fontWeight: $ ? "bold" : "normal" }, children: [
+    T.name,
+    T.role && /* @__PURE__ */ d("span", { style: x.itemRole, children: [
       "(",
-      w.role,
+      T.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ u("div", { ref: R, className: r, style: { position: "relative" }, children: [
-    /* @__PURE__ */ u(
+  return /* @__PURE__ */ d("div", { ref: D, className: i, style: x.wrapper, children: [
+    /* @__PURE__ */ d(
       "button",
       {
         type: "button",
-        onClick: () => !m && p(!L),
-        disabled: m,
+        onClick: () => !y && N(!R),
+        disabled: y,
         style: {
-          cursor: m ? "not-allowed" : "pointer",
-          opacity: m ? 0.6 : 1
+          ...x.button,
+          ...y ? x.buttonDisabled : {}
         },
         children: [
-          x ? x.name : f,
-          /* @__PURE__ */ s("span", { style: { marginLeft: 8 }, children: L ? "▲" : "▼" })
+          S ? S.name : w,
+          /* @__PURE__ */ s("span", { style: x.arrow, children: R ? "▲" : "▼" })
         ]
       }
     ),
-    L && /* @__PURE__ */ s(
-      "div",
-      {
-        className: i,
-        style: {
-          position: "absolute",
-          top: "100%",
-          left: 0,
-          right: 0,
-          zIndex: 1e3,
-          backgroundColor: "white",
-          border: "1px solid #ccc",
-          borderRadius: 4,
-          boxShadow: "0 2px 8px rgba(0,0,0,0.15)",
-          maxHeight: 300,
-          overflowY: "auto"
+    R && /* @__PURE__ */ s("div", { className: o, style: x.dropdown, children: E.map((T) => {
+      const $ = T.id === P;
+      return /* @__PURE__ */ s(
+        "div",
+        {
+          className: a,
+          onClick: () => u(T.id),
+          style: {
+            ...x.item,
+            ...$ ? x.itemSelected : {}
+          },
+          onMouseEnter: (l) => {
+            $ || Object.assign(l.currentTarget.style, x.itemHover);
+          },
+          onMouseLeave: (l) => {
+            if (!$) {
+              const U = x.item || {};
+              Object.keys(x.itemHover || {}).forEach((b) => {
+                l.currentTarget.style[b] = U[b] ?? "";
+              });
+            }
+          },
+          children: p ? p(T, $) : C(T, $)
         },
-        children: I.map((w) => {
-          const v = w.id === M;
-          return /* @__PURE__ */ s(
-            "div",
-            {
-              className: o,
-              onClick: () => E(w.id),
-              style: {
-                padding: "8px 12px",
-                cursor: "pointer",
-                backgroundColor: v ? "#f0f0f0" : "transparent"
-              },
-              onMouseEnter: (N) => {
-                v || (N.target.style.backgroundColor = "#f5f5f5");
-              },
-              onMouseLeave: (N) => {
-                v || (N.target.style.backgroundColor = "transparent");
-              },
-              children: a ? a(w, v) : h(w, v)
-            },
-            w.id
-          );
-        })
-      }
-    )
+        T.id
+      );
+    }) })
   ] });
 }
-class Kr {
+class Zr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4091,7 +4142,7 @@ class Kr {
     };
   }
 }
-class Zr {
+class Jr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4142,7 +4193,7 @@ class Zr {
     });
   }
 }
-class Jr {
+class Yr {
   constructor(e) {
     this.httpService = e;
   }
@@ -4151,7 +4202,7 @@ class Jr {
     return await this.httpService.get("/health");
   }
 }
-class Yr {
+class Xr {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -4273,139 +4324,139 @@ class Yr {
     }), t;
   }
 }
-const Xe = "returnTo", Ie = "zone_return_to", Ee = "zone_return_to";
-function Xr(n = {}) {
+const Xe = "returnTo", Ee = "zone_return_to", Ie = "zone_return_to";
+function en(n = {}) {
   const {
     zoneRoots: e = {},
     returnToParam: t = Xe,
     returnToStorage: r = "url"
-  } = n, i = ft(), [o, a] = pt(), { isAuthenticated: f, currentUser: m } = ue(), { tenant: b } = ge(), c = K(() => ({ ...$e, ...e }), [e]), L = !!b, p = m == null ? void 0 : m.userType, R = K(() => {
+  } = n, i = pt(), [o, a] = ft(), { isAuthenticated: p, currentUser: w } = ue(), { tenant: y } = ge(), f = K(() => ({ ...Ue, ...e }), [e]), x = !!y, h = w == null ? void 0 : w.userType, R = K(() => {
     switch (r) {
       case "url":
         return o.get(t);
       case "session":
-        return sessionStorage.getItem(Ie);
+        return sessionStorage.getItem(Ee);
       case "local":
-        return localStorage.getItem(Ee);
+        return localStorage.getItem(Ie);
       default:
         return null;
     }
-  }, [r, o, t]), I = se(() => {
+  }, [r, o, t]), N = se(() => {
     switch (r) {
       case "url": {
-        const h = new URLSearchParams(o);
-        h.delete(t), a(h, { replace: !0 });
+        const u = new URLSearchParams(o);
+        u.delete(t), a(u, { replace: !0 });
         break;
       }
       case "session":
-        sessionStorage.removeItem(Ie);
+        sessionStorage.removeItem(Ee);
         break;
       case "local":
-        localStorage.removeItem(Ee);
+        localStorage.removeItem(Ie);
         break;
     }
-  }, [r, o, t, a]), M = se(
-    (h) => {
+  }, [r, o, t, a]), D = se(
+    (u) => {
       switch (r) {
         case "url": {
-          const A = new URLSearchParams(o);
-          A.set(t, h), a(A, { replace: !0 });
+          const S = new URLSearchParams(o);
+          S.set(t, u), a(S, { replace: !0 });
           break;
         }
         case "session":
-          sessionStorage.setItem(Ie, h);
+          sessionStorage.setItem(Ee, u);
           break;
         case "local":
-          localStorage.setItem(Ee, h);
+          localStorage.setItem(Ie, u);
           break;
       }
     },
     [r, o, t, a]
   ), E = se(
-    (h) => {
-      const A = c[h] || c.default;
-      i(A);
+    (u) => {
+      const S = f[u] || f.default;
+      i(S);
     },
-    [i, c]
-  ), x = se(() => L ? f ? p === oe.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : f ? p === oe.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [L, f, p, c]);
+    [i, f]
+  ), P = se(() => x ? p ? h === oe.TENANT_ADMIN ? f.tenantAdmin : f.tenantUser : f.tenantGuest : p ? h === oe.TENANT_ADMIN ? f.publicAdmin : f.publicUser : f.publicGuest, [x, p, h, f]);
   return {
     returnToUrl: R,
-    clearReturnTo: I,
-    setReturnTo: M,
+    clearReturnTo: N,
+    setReturnTo: D,
     navigateToZone: E,
-    getSmartRedirect: x
+    getSmartRedirect: P
   };
 }
-function en(n, e, t = Xe, r = "url") {
+function tn(n, e, t = Xe, r = "url") {
   if (!e || r !== "url")
     return n;
   const i = new URL(n, window.location.origin);
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  Nr as AdminZone,
-  Yr as ApiMappers,
-  Oe as AppApiService,
-  jr as AppLoader,
-  gr as AppProvider,
+  Fr as AdminZone,
+  Xr as ApiMappers,
+  qe as AppApiService,
+  Gr as AppLoader,
+  mr as AppProvider,
   yt as AuthApiService,
   Sr as AuthProvider,
-  Lr as AuthenticatedZone,
+  Nr as AuthenticatedZone,
   Je as DEFAULT_ZONE_PRESETS,
-  $e as DEFAULT_ZONE_ROOTS,
+  Ue as DEFAULT_ZONE_ROOTS,
   qr as FeatureFlag,
   Pt as FeatureFlagApiService,
-  vr as FeatureFlagProvider,
-  Fr as GuestZone,
-  Jr as HealthApiService,
+  Tr as FeatureFlagProvider,
+  Dr as GuestZone,
+  Yr as HealthApiService,
   le as HttpService,
   Ir as LandingRoute,
-  Or as LoginForm,
-  _r as MagicLinkForm,
-  Wr as MagicLinkVerify,
-  Cr as OpenZone,
-  Vr as PasswordRecoveryForm,
-  Kr as PermissionApiService,
-  Ar as Protected,
-  Pr as ProtectedRoute,
-  Mr as PublicZone,
+  zr as LoginForm,
+  Wr as MagicLinkForm,
+  Vr as MagicLinkVerify,
+  $r as OpenZone,
+  jr as PasswordRecoveryForm,
+  Zr as PermissionApiService,
+  Pr as Protected,
+  Rr as ProtectedRoute,
+  Lr as PublicZone,
   ze as RoleApiService,
-  kr as RoutingProvider,
+  xr as RoutingProvider,
   ne as SessionExpiredError,
   we as SessionManager,
-  zr as SignupForm,
-  It as SubscriptionApiService,
-  Br as SubscriptionGuard,
-  Zr as SubscriptionPlanApiService,
-  Tr as SubscriptionProvider,
+  _r as SignupForm,
+  Et as SubscriptionApiService,
+  Or as SubscriptionGuard,
+  Jr as SubscriptionPlanApiService,
+  kr as SubscriptionProvider,
   be as TenantApiService,
   Ur as TenantAuthenticatedZone,
-  Hr as TenantGuestZone,
-  $r as TenantOpenZone,
-  yr as TenantProvider,
-  Rr as TenantRoute,
-  Qr as TenantSelector,
-  Er as TenantZone,
+  Br as TenantGuestZone,
+  Hr as TenantOpenZone,
+  wr as TenantProvider,
+  Er as TenantRoute,
+  Kr as TenantSelector,
+  Mr as TenantZone,
   mt as TokenRefreshError,
   gt as TokenRefreshTimeoutError,
   wt as UserApiService,
   oe as UserType,
-  Dr as UserZone,
+  Cr as UserZone,
   ce as ZoneRoute,
-  en as buildRedirectUrl,
-  mr as useApi,
-  ve as useApp,
-  Gr as useAppLoaderState,
+  tn as buildRedirectUrl,
+  yr as useApi,
+  Se as useApp,
+  Qr as useAppLoaderState,
   ue as useAuth,
   Rt as useFeatureFlags,
-  xr as useRouting,
+  Ar as useRouting,
   Mt as useRoutingOptional,
-  br as useSettings,
-  Et as useSubscription,
+  vr as useSettings,
+  It as useSubscription,
   ge as useTenant,
   me as useTenantInfo,
   xe as useTenantOptional,
-  wr as useTenantSettings,
-  Xr as useZoneNavigation
+  br as useTenantSettings,
+  en as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map