@skylabs-digital/react-identity-access 2.26.0 → 2.28.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
-import { jsx as s, Fragment as _, jsxs as d } from "react/jsx-runtime";
-import { createContext as fe, useMemo as K, useState as k, useCallback as se, useEffect as re, useContext as ae, useRef as Me } from "react";
-import { useLocation as ke, Navigate as ve, useNavigate as pt, useSearchParams as ft } from "react-router-dom";
-class le {
+import { jsx as s, Fragment as _, jsxs as u } from "react/jsx-runtime";
+import { createContext as ye, useMemo as Z, useState as x, useCallback as oe, useEffect as ne, useContext as le, useRef as Ne } from "react";
+import { useLocation as xe, Navigate as Se, useNavigate as mt, useSearchParams as yt } from "react-router-dom";
+class de {
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
   }
@@ -13,26 +13,26 @@ class le {
   }
   async executeRequest(e, t, r, i) {
     const o = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, a = (i == null ? void 0 : i.timeout) || this.timeout;
-    let p = {
+    let c = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
       const f = await this.sessionManager.getValidAccessToken();
-      p = { ...p, Authorization: `Bearer ${f}` };
+      c = { ...c, Authorization: `Bearer ${f}` };
     }
-    const w = new AbortController(), y = setTimeout(() => w.abort(), a);
+    const m = new AbortController(), y = setTimeout(() => m.abort(), a);
     try {
       const f = await fetch(o, {
         method: e,
-        headers: p,
+        headers: c,
         body: r ? JSON.stringify(r) : void 0,
-        signal: w.signal
+        signal: m.signal
       });
       if (clearTimeout(y), !f.ok)
         throw new Error(`HTTP ${f.status}: ${f.statusText}`);
-      const x = f.headers.get("content-type");
-      return !x || !x.includes("application/json") ? {} : await f.json();
+      const F = f.headers.get("content-type");
+      return !F || !F.includes("application/json") ? {} : await f.json();
     } catch (f) {
       throw clearTimeout(y), f instanceof Error && f.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : f;
     }
@@ -50,7 +50,7 @@ class le {
     return this.executeRequest("DELETE", e, void 0, t);
   }
 }
-class qe {
+class Ve {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -109,31 +109,31 @@ class qe {
     })).data;
   }
 }
-const Le = fe(null);
-function mr({ config: n, children: e }) {
-  const t = K(
+const Fe = ye(null);
+function br({ config: n, children: e }) {
+  const t = Z(
     () => {
-      var h, R, N;
+      var g, T, A;
       return {
-        enabled: ((h = n.cache) == null ? void 0 : h.enabled) ?? !0,
-        ttl: ((R = n.cache) == null ? void 0 : R.ttl) ?? 3e5,
+        enabled: ((g = n.cache) == null ? void 0 : g.enabled) ?? !0,
+        ttl: ((T = n.cache) == null ? void 0 : T.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((N = n.cache) == null ? void 0 : N.storageKey) ?? `app_cache_${n.appId}`
+        storageKey: ((A = n.cache) == null ? void 0 : A.storageKey) ?? `app_cache_${n.appId}`
       };
     },
     [n.cache, n.appId]
-  ), [r, i] = k(() => {
+  ), [r, i] = x(() => {
     if (!t.enabled) return null;
     try {
-      const h = localStorage.getItem(t.storageKey);
-      if (!h) return null;
-      const R = JSON.parse(h);
-      return Date.now() - R.timestamp < t.ttl && R.appId === n.appId ? R.data : (localStorage.removeItem(t.storageKey), null);
+      const g = localStorage.getItem(t.storageKey);
+      if (!g) return null;
+      const T = JSON.parse(g);
+      return Date.now() - T.timestamp < t.ttl && T.appId === n.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = k(!r), [p, w] = k(null), y = K(() => {
-    const h = () => {
+  }), [o, a] = x(!r), [c, m] = x(null), y = Z(() => {
+    const g = () => {
       f();
     };
     return {
@@ -142,69 +142,69 @@ function mr({ config: n, children: e }) {
       // App info
       appInfo: r,
       isAppLoading: o,
-      appError: p,
-      retryApp: h
+      appError: c,
+      retryApp: g
     };
-  }, [n, r, o, p]), f = se(
-    async (h = !1) => {
-      if (!(!h && t.enabled && r))
+  }, [n, r, o, c]), f = oe(
+    async (g = !1) => {
+      if (!(!g && t.enabled && r))
         try {
-          a(!0), w(null);
-          const R = new le(n.baseUrl), D = await new qe(R, {}).getPublicAppInfo(n.appId);
-          if (i(D), t.enabled)
+          a(!0), m(null);
+          const T = new de(n.baseUrl), L = await new Ve(T, {}).getPublicAppInfo(n.appId);
+          if (i(L), t.enabled)
             try {
-              const E = {
-                data: D,
+              const M = {
+                data: L,
                 timestamp: Date.now(),
                 appId: n.appId
               };
-              localStorage.setItem(t.storageKey, JSON.stringify(E));
-            } catch (E) {
-              process.env.NODE_ENV === "development" && console.warn("[AppProvider] Failed to cache app info:", E);
+              localStorage.setItem(t.storageKey, JSON.stringify(M));
+            } catch (M) {
+              process.env.NODE_ENV === "development" && console.warn("[AppProvider] Failed to cache app info:", M);
             }
-        } catch (R) {
-          const N = R instanceof Error ? R : new Error("Failed to load app information");
-          w(N), i(null);
+        } catch (T) {
+          const A = T instanceof Error ? T : new Error("Failed to load app information");
+          m(A), i(null);
         } finally {
           a(!1);
         }
     },
     [n.baseUrl, n.appId, t, r]
-  ), x = se(async () => {
+  ), F = oe(async () => {
     if (!(!t.enabled || !r))
       try {
-        const h = localStorage.getItem(t.storageKey);
-        if (!h) return;
-        const R = JSON.parse(h);
-        if (Date.now() - R.timestamp > t.ttl * 0.5) {
-          const D = new le(n.baseUrl), P = await new qe(D, {}).getPublicAppInfo(n.appId);
+        const g = localStorage.getItem(t.storageKey);
+        if (!g) return;
+        const T = JSON.parse(g);
+        if (Date.now() - T.timestamp > t.ttl * 0.5) {
+          const L = new de(n.baseUrl), P = await new Ve(L, {}).getPublicAppInfo(n.appId);
           i(P);
-          const u = {
+          const d = {
             data: P,
             timestamp: Date.now(),
             appId: n.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(u));
+          localStorage.setItem(t.storageKey, JSON.stringify(d));
         }
-      } catch (h) {
-        process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", h);
+      } catch (g) {
+        process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", g);
       }
   }, [n, t, r]);
-  return re(() => {
-    r ? x() : f();
-  }, []), /* @__PURE__ */ s(Le.Provider, { value: y, children: e });
+  return ne(() => {
+    r ? F() : f();
+  }, []), /* @__PURE__ */ s(Fe.Provider, { value: y, children: e });
 }
-function Se() {
-  const n = ae(Le);
+function Ae() {
+  const n = le(Fe);
   if (!n)
     throw new Error("useApp must be used within an AppProvider");
   return n;
 }
-function Qe() {
-  return ae(Le);
+function De() {
+  return le(Fe);
 }
-const yr = Se;
-class ne extends Error {
+const vr = Ae;
+class se extends Error {
   constructor(e, t) {
     const r = {
       token_expired: "Refresh token has expired",
@@ -214,12 +214,12 @@ class ne extends Error {
     super(t || r[e]), this.name = "SessionExpiredError", this.reason = e;
   }
 }
-class gt extends Error {
+class wt extends Error {
   constructor(e) {
     super(`Token refresh timed out after ${e}ms`), this.name = "TokenRefreshTimeoutError", this.timeoutMs = e;
   }
 }
-class mt extends Error {
+class bt extends Error {
   constructor(e, t) {
     super(
       `Token refresh failed after ${e} attempts: ${(t == null ? void 0 : t.message) || "Unknown error"}`
@@ -228,7 +228,7 @@ class mt extends Error {
 }
 const ie = class ie {
   constructor(e = {}) {
-    this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
+    this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, this.consecutiveBackgroundFailures = 0, e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
   }
   /**
    * Get or create a SessionManager instance for the given config.
@@ -353,13 +353,26 @@ const ie = class ie {
     if (!(e != null && e.refreshToken) || this.refreshPromise) return;
     const t = this.sessionGeneration;
     this.startRefreshAndResolveQueue(e.refreshToken).then(() => {
+      this.consecutiveBackgroundFailures = 0;
     }).catch((r) => {
-      r instanceof ne || this.sessionGeneration === t && (process.env.NODE_ENV === "development" && console.warn(
-        "[SessionManager] Background refresh failed, retrying in 30s:",
-        r.message
-      ), this.backgroundRetryTimerId = setTimeout(() => {
-        this.backgroundRefresh();
-      }, 3e4));
+      if (!(r instanceof se)) {
+        if (this.sessionGeneration === t) {
+          if (this.consecutiveBackgroundFailures++, this.consecutiveBackgroundFailures >= ie.MAX_BACKGROUND_FAILURES) {
+            process.env.NODE_ENV === "development" && console.error(
+              `[SessionManager] Background refresh failed ${this.consecutiveBackgroundFailures} consecutive times — expiring session`
+            ), this.consecutiveBackgroundFailures = 0, this.handleSessionExpired(
+              new se("token_invalid", "Background refresh failed repeatedly")
+            );
+            return;
+          }
+          process.env.NODE_ENV === "development" && console.warn(
+            "[SessionManager] Background refresh failed, retrying in 30s:",
+            r.message
+          ), this.backgroundRetryTimerId = setTimeout(() => {
+            this.backgroundRefresh();
+          }, 3e4);
+        }
+      }
     });
   }
   /**
@@ -386,13 +399,13 @@ const ie = class ie {
   async getValidAccessToken() {
     const e = this.getTokens();
     if (!(e != null && e.accessToken)) {
-      const t = new ne("token_invalid", "No tokens available");
+      const t = new se("token_invalid", "No tokens available");
       throw this.handleSessionExpired(t), t;
     }
     if (!this.shouldRefreshToken(e) && !this.isTokenExpired(e))
       return e.accessToken;
     if (!e.refreshToken) {
-      const t = new ne("token_invalid", "No refresh token available");
+      const t = new se("token_invalid", "No refresh token available");
       throw this.handleSessionExpired(t), t;
     }
     return this.refreshPromise ? this.enqueueForToken() : this.startRefreshAndResolveQueue(e.refreshToken);
@@ -404,14 +417,14 @@ const ie = class ie {
     try {
       return { Authorization: `Bearer ${await this.getValidAccessToken()}` };
     } catch (e) {
-      return e instanceof ne && this.onRefreshFailed && this.onRefreshFailed(), {};
+      return e instanceof se && this.onRefreshFailed && this.onRefreshFailed(), {};
     }
   }
   enqueueForToken() {
     return new Promise((e, t) => {
       const r = setTimeout(() => {
         const i = this.refreshQueue.findIndex((o) => o.timeoutId === r);
-        i !== -1 && this.refreshQueue.splice(i, 1), t(new gt(this.refreshQueueTimeout));
+        i !== -1 && this.refreshQueue.splice(i, 1), t(new wt(this.refreshQueueTimeout));
       }, this.refreshQueueTimeout);
       this.refreshQueue.push({ resolve: e, reject: t, timeoutId: r });
     });
@@ -424,7 +437,7 @@ const ie = class ie {
       return this.resolveQueue(r), r;
     } catch (t) {
       const r = t instanceof Error ? t : new Error("Token refresh failed");
-      throw r instanceof ne ? (this.rejectQueue(r), this.handleSessionExpired(r)) : this.rejectQueue(r), r;
+      throw r instanceof se ? (this.rejectQueue(r), this.handleSessionExpired(r)) : this.rejectQueue(r), r;
     } finally {
       this.refreshPromise = null;
     }
@@ -447,21 +460,21 @@ const ie = class ie {
     const r = this.sessionGeneration;
     for (let i = 0; i <= this.maxRefreshRetries; i++) {
       if (this.sessionGeneration !== r)
-        throw new ne("token_invalid", "Session cleared during refresh");
+        throw new se("token_invalid", "Session cleared during refresh");
       try {
         await this.performTokenRefresh(e, r);
         return;
       } catch (o) {
         const a = o instanceof Error ? o : new Error(String(o));
-        if (a instanceof ne)
+        if (a instanceof se)
           throw a;
         if (t = a, i < this.maxRefreshRetries) {
-          const p = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(p);
+          const c = this.retryBackoffBase * Math.pow(2, i);
+          await this.sleep(c);
         }
       }
     }
-    throw new mt(this.maxRefreshRetries + 1, t);
+    throw new bt(this.maxRefreshRetries + 1, t);
   }
   /**
    * Single refresh attempt with error classification.
@@ -485,15 +498,15 @@ const ie = class ie {
     if (!i.ok) {
       let a = "";
       try {
-        const p = await i.json();
-        a = (p.message || p.error || "").toLowerCase();
+        const c = await i.json();
+        a = (c.message || c.error || "").toLowerCase();
       } catch {
         a = i.statusText.toLowerCase();
       }
-      throw i.status === 401 ? a.includes("expired") ? new ne("token_expired") : a.includes("invalid") ? new ne("token_invalid") : new ne("token_invalid", `Unauthorized: ${a}`) : i.status === 400 ? a.includes("inactive") ? new ne("user_inactive") : a.includes("expired") || a.includes("invalid") ? new ne("token_invalid", a) : new Error(`Token refresh failed (400): ${a}`) : new Error(`Token refresh failed: ${i.status} ${a}`);
+      throw i.status === 401 ? a.includes("expired") ? new se("token_expired") : a.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${a}`) : i.status === 400 ? a.includes("inactive") ? new se("user_inactive") : a.includes("expired") || a.includes("invalid") ? new se("token_invalid", a) : a.includes("reuse") || a.includes("revoked") ? new se("token_invalid", a) : new Error(`Token refresh failed (400): ${a}`) : new Error(`Token refresh failed: ${i.status} ${a}`);
     }
     if (this.sessionGeneration !== t)
-      throw new ne("token_invalid", "Session cleared during refresh");
+      throw new se("token_invalid", "Session cleared during refresh");
     const o = await i.json();
     this.setTokens({
       accessToken: o.accessToken,
@@ -521,7 +534,7 @@ const ie = class ie {
   // --- Session lifecycle ---
   clearSession() {
     this.sessionGeneration++, this.cancelProactiveTimer(), this.clearTokens();
-    const e = new ne("token_invalid", "Session cleared");
+    const e = new se("token_invalid", "Session cleared");
     this.rejectQueue(e);
   }
   /**
@@ -530,7 +543,7 @@ const ie = class ie {
    */
   destroy() {
     this.isDestroyed = !0, ie.instances.delete(this.storageKey), this.cancelProactiveTimer();
-    const e = new ne("token_invalid", "SessionManager destroyed");
+    const e = new se("token_invalid", "SessionManager destroyed");
     this.rejectQueue(e);
   }
   // --- JWT helpers ---
@@ -568,9 +581,10 @@ const ie = class ie {
     return new Promise((t) => setTimeout(t, e));
   }
 };
-ie.instances = /* @__PURE__ */ new Map();
-let we = ie;
-class yt {
+ie.instances = /* @__PURE__ */ new Map(), ie.MAX_BACKGROUND_FAILURES = 3;
+let be = ie;
+const Ie = /* @__PURE__ */ new Map();
+class vt {
   constructor(e) {
     this.httpService = e;
   }
@@ -611,10 +625,12 @@ class yt {
     );
   }
   async verifyMagicLink(e) {
-    return await this.httpService.post(
-      "/auth/magic-link/verify",
-      e
-    );
+    const t = e.token, r = Ie.get(t);
+    if (r) return r;
+    const i = this.httpService.post("/auth/magic-link/verify", e).finally(() => {
+      Ie.delete(t);
+    });
+    return Ie.set(t, i), i;
   }
   async confirmPasswordReset(e) {
     await this.httpService.post("/auth/password-reset/confirm", e);
@@ -626,7 +642,7 @@ class yt {
     });
   }
 }
-class ze {
+class We {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -702,7 +718,7 @@ class ze {
     };
   }
 }
-class wt {
+class St {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -742,7 +758,7 @@ class wt {
     });
   }
 }
-class be {
+class ve {
   constructor(e, t, r) {
     this.httpService = e, this.appId = t, this.sessionManager = r;
   }
@@ -820,7 +836,7 @@ class be {
     )).data;
   }
 }
-function bt(n, e) {
+function Tt(n, e) {
   if (n === "localhost" || n.startsWith("127.") || n.startsWith("192.168."))
     return null;
   if (e) {
@@ -836,26 +852,26 @@ function bt(n, e) {
   const r = n.split(".");
   return r.length >= 3 && r[0] !== "www" ? r[0] : null;
 }
-function vt(n, e = "tenant", t) {
+function kt(n, e = "tenant", t) {
   const i = new URLSearchParams(n).get(e);
   return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
 }
-function St(n, e, t) {
+function xt(n, e, t) {
   const { tenantMode: r, baseDomain: i, selectorParam: o, fixedTenantSlug: a } = n;
-  return r === "fixed" ? a || null : r === "subdomain" ? bt(e.hostname, i) : r === "selector" ? vt(e.search, o, t) : null;
+  return r === "fixed" ? a || null : r === "subdomain" ? Tt(e.hostname, i) : r === "selector" ? kt(e.search, o, t) : null;
 }
-function Tt(n, e, t) {
+function At(n, e, t) {
   if (t)
     return `${n}.${t}`;
   const r = e.split(".");
   return r.length === 2 ? `${n}.${e}` : r.length >= 3 ? (r[0] = n, r.join(".")) : null;
 }
-const pe = "_auth";
-function _e(n) {
+const me = "_auth";
+function je(n) {
   const e = JSON.stringify(n);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function kt(n) {
+function Pt(n) {
   try {
     let e = n.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
@@ -866,20 +882,20 @@ function kt(n) {
     return null;
   }
 }
-function xt() {
+function Rt() {
   if (typeof window > "u")
     return null;
-  const e = new URLSearchParams(window.location.search).get(pe);
-  return e ? kt(e) : null;
+  const e = new URLSearchParams(window.location.search).get(me);
+  return e ? Pt(e) : null;
 }
-function At() {
+function Et() {
   if (typeof window > "u") return;
   const n = new URL(window.location.href);
-  n.searchParams.delete(pe), window.history.replaceState({}, "", n.toString());
+  n.searchParams.delete(me), window.history.replaceState({}, "", n.toString());
 }
-const Ne = fe(null);
-function wr({ config: n, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: i } = Se(), o = se(() => typeof window > "u" ? null : St(
+const Ue = ye(null);
+function Sr({ config: n, children: e }) {
+  const { baseUrl: t, appInfo: r, appId: i } = Ae(), o = oe(() => typeof window > "u" ? null : xt(
     {
       tenantMode: n.tenantMode || "selector",
       baseDomain: n.baseDomain,
@@ -891,119 +907,119 @@ function wr({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, p] = k(() => o()), w = K(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, c] = x(() => o()), m = Z(
     () => {
-      var c, H, I;
+      var p, U, b;
       return {
-        enabled: ((c = n.cache) == null ? void 0 : c.enabled) ?? !0,
-        ttl: ((H = n.cache) == null ? void 0 : H.ttl) ?? 5 * 60 * 1e3,
+        enabled: ((p = n.cache) == null ? void 0 : p.enabled) ?? !0,
+        ttl: ((U = n.cache) == null ? void 0 : U.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((I = n.cache) == null ? void 0 : I.storageKey) ?? `tenant_cache_${a || "default"}`
+        storageKey: ((b = n.cache) == null ? void 0 : b.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [n.cache, a]
-  ), [y, f] = k(() => {
+  ), [y, f] = x(() => {
     if (n.initialTenant) return n.initialTenant;
-    if (!w.enabled || !a) return null;
+    if (!m.enabled || !a) return null;
     try {
-      const c = localStorage.getItem(w.storageKey);
-      if (!c) return null;
-      const H = JSON.parse(c);
-      return Date.now() - H.timestamp < w.ttl && H.tenantSlug === a ? H.data : (localStorage.removeItem(w.storageKey), null);
+      const p = localStorage.getItem(m.storageKey);
+      if (!p) return null;
+      const U = JSON.parse(p);
+      return Date.now() - U.timestamp < m.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(m.storageKey), null);
     } catch {
       return null;
     }
-  }), [x, h] = k(!y && !n.initialTenant), [R, N] = k(null), [D, E] = k(null), [P, u] = k(!1), [S, C] = k(null);
-  re(() => {
+  }), [F, g] = x(!y && !n.initialTenant), [T, A] = x(null), [L, M] = x(null), [P, d] = x(!1), [v, N] = x(null);
+  ne(() => {
     if (n.tenantMode === "fixed") return;
-    const c = o();
-    p(c);
+    const p = o();
+    c(p);
   }, [o, n.tenantMode]);
-  const M = (r == null ? void 0 : r.settingsSchema) || null, T = se(
-    async (c, H = !1) => {
-      if (!(!H && w.enabled && y && y.domain === c))
+  const B = (r == null ? void 0 : r.settingsSchema) || null, w = oe(
+    async (p, U = !1) => {
+      if (!(!U && m.enabled && y && y.domain === p))
         try {
-          h(!0), N(null);
-          const I = new le(t), m = await new be(I, i).getPublicTenantInfo(c);
-          if (f(m), w.enabled)
+          g(!0), A(null);
+          const b = new de(t), S = await new ve(b, i).getPublicTenantInfo(p);
+          if (f(S), m.enabled)
             try {
-              const v = {
-                data: m,
+              const E = {
+                data: S,
                 timestamp: Date.now(),
-                tenantSlug: c
+                tenantSlug: p
               };
-              localStorage.setItem(w.storageKey, JSON.stringify(v));
-            } catch (v) {
-              process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", v);
+              localStorage.setItem(m.storageKey, JSON.stringify(E));
+            } catch (E) {
+              process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", E);
             }
-        } catch (I) {
-          const g = I instanceof Error ? I : new Error("Failed to load tenant information");
-          N(g), f(null);
+        } catch (b) {
+          const h = b instanceof Error ? b : new Error("Failed to load tenant information");
+          A(h), f(null);
         } finally {
-          h(!1);
+          g(!1);
         }
     },
-    [t, i, w, y]
-  ), $ = se(async () => {
-    if (!(!w.enabled || !y || !a))
+    [t, i, m, y]
+  ), R = oe(async () => {
+    if (!(!m.enabled || !y || !a))
       try {
-        const c = localStorage.getItem(w.storageKey);
-        if (!c) return;
-        const H = JSON.parse(c);
-        if (Date.now() - H.timestamp > w.ttl * 0.5) {
-          const g = new le(t), v = await new be(g, i).getPublicTenantInfo(a);
-          f(v);
-          const Q = {
-            data: v,
+        const p = localStorage.getItem(m.storageKey);
+        if (!p) return;
+        const U = JSON.parse(p);
+        if (Date.now() - U.timestamp > m.ttl * 0.5) {
+          const h = new de(t), E = await new ve(h, i).getPublicTenantInfo(a);
+          f(E);
+          const K = {
+            data: E,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(w.storageKey, JSON.stringify(Q));
+          localStorage.setItem(m.storageKey, JSON.stringify(K));
         }
-      } catch (c) {
-        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", c);
+      } catch (p) {
+        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", p);
       }
-  }, [t, i, w, y, a]), l = se(async () => {
+  }, [t, i, m, y, a]), k = oe(async () => {
     if (y != null && y.id)
       try {
-        u(!0), C(null);
-        const c = new le(t), I = await new be(c, y.appId).getTenantSettings(y.id);
-        E(I);
-      } catch (c) {
-        const H = c instanceof Error ? c : new Error("Failed to load tenant settings");
-        C(H), E(null);
+        d(!0), N(null);
+        const p = new de(t), b = await new ve(p, y.appId).getTenantSettings(y.id);
+        M(b);
+      } catch (p) {
+        const U = p instanceof Error ? p : new Error("Failed to load tenant settings");
+        N(U), M(null);
       } finally {
-        u(!1);
+        d(!1);
       }
-  }, [t, y]), U = se(() => {
-    l();
-  }, [l]), b = se(
-    (c) => {
-      if (!M)
+  }, [t, y]), I = oe(() => {
+    k();
+  }, [k]), l = oe(
+    (p) => {
+      if (!B)
         return { isValid: !0, errors: [] };
-      const H = [];
+      const U = [];
       try {
-        return M.properties && Object.entries(M.properties).forEach(([I, g]) => {
-          var v;
-          const m = c[I];
-          if ((v = M.required) != null && v.includes(I) && m == null) {
-            H.push(`Field '${I}' is required`);
+        return B.properties && Object.entries(B.properties).forEach(([b, h]) => {
+          var E;
+          const S = p[b];
+          if ((E = B.required) != null && E.includes(b) && S == null) {
+            U.push(`Field '${b}' is required`);
             return;
           }
-          if (m != null) {
-            if (g.type) {
-              const Q = g.type, J = typeof m;
-              Q === "string" && J !== "string" ? H.push(`Field '${I}' must be a string`) : (Q === "number" || Q === "integer") && J !== "number" ? H.push(`Field '${I}' must be a number`) : Q === "boolean" && J !== "boolean" ? H.push(`Field '${I}' must be a boolean`) : Q === "array" && !Array.isArray(m) && H.push(`Field '${I}' must be an array`);
+          if (S != null) {
+            if (h.type) {
+              const K = h.type, G = typeof S;
+              K === "string" && G !== "string" ? U.push(`Field '${b}' must be a string`) : (K === "number" || K === "integer") && G !== "number" ? U.push(`Field '${b}' must be a number`) : K === "boolean" && G !== "boolean" ? U.push(`Field '${b}' must be a boolean`) : K === "array" && !Array.isArray(S) && U.push(`Field '${b}' must be an array`);
             }
-            g.minLength !== void 0 && typeof m == "string" && m.length < g.minLength && H.push(
-              `Field '${I}' must be at least ${g.minLength} characters long`
-            ), g.maxLength !== void 0 && typeof m == "string" && m.length > g.maxLength && H.push(
-              `Field '${I}' must be no more than ${g.maxLength} characters long`
-            ), g.minimum !== void 0 && typeof m == "number" && m < g.minimum && H.push(`Field '${I}' must be at least ${g.minimum}`), g.maximum !== void 0 && typeof m == "number" && m > g.maximum && H.push(`Field '${I}' must be no more than ${g.maximum}`), g.pattern && typeof m == "string" && (new RegExp(g.pattern).test(m) || H.push(`Field '${I}' does not match the required pattern`)), g.enum && !g.enum.includes(m) && H.push(`Field '${I}' must be one of: ${g.enum.join(", ")}`);
+            h.minLength !== void 0 && typeof S == "string" && S.length < h.minLength && U.push(
+              `Field '${b}' must be at least ${h.minLength} characters long`
+            ), h.maxLength !== void 0 && typeof S == "string" && S.length > h.maxLength && U.push(
+              `Field '${b}' must be no more than ${h.maxLength} characters long`
+            ), h.minimum !== void 0 && typeof S == "number" && S < h.minimum && U.push(`Field '${b}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof S == "number" && S > h.maximum && U.push(`Field '${b}' must be no more than ${h.maximum}`), h.pattern && typeof S == "string" && (new RegExp(h.pattern).test(S) || U.push(`Field '${b}' does not match the required pattern`)), h.enum && !h.enum.includes(S) && U.push(`Field '${b}' must be one of: ${h.enum.join(", ")}`);
           }
         }), {
-          isValid: H.length === 0,
-          errors: H
+          isValid: U.length === 0,
+          errors: U
         };
       } catch {
         return {
@@ -1012,98 +1028,98 @@ function wr({ config: n, children: e }) {
         };
       }
     },
-    [M]
+    [B]
   );
-  re(() => {
-    !n.initialTenant && a ? y ? $() : T(a) : !n.initialTenant && !a && (f(null), N(null), h(!1));
-  }, [n.initialTenant, a, y, T, $]), re(() => {
-    y != null && y.id ? l() : (E(null), C(null), u(!1));
-  }, [y == null ? void 0 : y.id, l]);
-  const L = se(
-    (c, H) => {
-      const { mode: I = "reload", tokens: g, redirectPath: m } = H || {}, v = n.tenantMode || "selector";
-      if (v === "fixed") {
+  ne(() => {
+    !n.initialTenant && a ? y ? R() : w(a) : !n.initialTenant && !a && (f(null), A(null), g(!1));
+  }, [n.initialTenant, a, y, w, R]), ne(() => {
+    y != null && y.id ? k() : (M(null), N(null), d(!1));
+  }, [y == null ? void 0 : y.id, k]);
+  const z = oe(
+    (p, U) => {
+      const { mode: b = "reload", tokens: h, redirectPath: S } = U || {}, E = n.tenantMode || "selector";
+      if (E === "fixed") {
         process.env.NODE_ENV === "development" && console.warn(
           "[TenantProvider] switchTenant is a no-op in fixed mode. Tenant is always:",
           n.fixedTenantSlug
-        ), m && (window.location.href = m);
+        ), S && (window.location.href = S);
         return;
       }
-      if (localStorage.setItem("tenant", c), v === "subdomain") {
-        const Q = window.location.hostname, J = Tt(
-          c,
-          Q,
+      if (localStorage.setItem("tenant", p), E === "subdomain") {
+        const K = window.location.hostname, G = At(
+          p,
+          K,
           n.baseDomain
         );
-        if (!J) {
+        if (!G) {
           process.env.NODE_ENV === "development" && console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            Q
+            K
           );
           return;
         }
-        const O = m || window.location.pathname, q = new URL(`${window.location.protocol}//${J}${O}`);
-        new URLSearchParams(window.location.search).forEach((A, V) => {
-          V !== pe && q.searchParams.set(V, A);
-        }), g && q.searchParams.set(pe, _e(g)), window.location.href = q.toString();
-      } else if (v === "selector") {
-        const Q = m || window.location.pathname, J = new URLSearchParams(window.location.search);
-        if (J.set(n.selectorParam || "tenant", c), J.delete(pe), g && J.set(pe, _e(g)), I === "reload") {
-          const O = `${Q}?${J.toString()}${window.location.hash}`;
-          window.location.href = O;
+        const X = S || window.location.pathname, W = new URL(`${window.location.protocol}//${G}${X}`);
+        new URLSearchParams(window.location.search).forEach((V, H) => {
+          H !== me && W.searchParams.set(H, V);
+        }), h && W.searchParams.set(me, je(h)), window.location.href = W.toString();
+      } else if (E === "selector") {
+        const K = S || window.location.pathname, G = new URLSearchParams(window.location.search);
+        if (G.set(n.selectorParam || "tenant", p), G.delete(me), h && G.set(me, je(h)), b === "reload") {
+          const X = `${K}?${G.toString()}${window.location.hash}`;
+          window.location.href = X;
         } else {
-          const O = `${Q}?${J.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", O), p(c), T(c);
+          const X = `${K}?${G.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", X), c(p), w(p);
         }
       }
     },
-    [n.tenantMode, n.selectorParam, n.baseDomain, T]
-  ), F = K(() => ({
+    [n.tenantMode, n.selectorParam, n.baseDomain, w]
+  ), D = Z(() => ({
     // Tenant info
     tenant: y,
     tenantSlug: a,
-    isTenantLoading: x,
-    tenantError: R,
+    isTenantLoading: F,
+    tenantError: T,
     retryTenant: () => {
-      a && T(a);
+      a && w(a);
     },
     // Settings
-    settings: D,
-    settingsSchema: M,
+    settings: L,
+    settingsSchema: B,
     isSettingsLoading: P,
-    settingsError: S,
+    settingsError: v,
     // Actions
-    refreshSettings: U,
-    switchTenant: L,
+    refreshSettings: I,
+    switchTenant: z,
     // Validation
-    validateSettings: b
+    validateSettings: l
   }), [
     y,
     a,
-    x,
-    R,
-    D,
-    M,
-    P,
-    S,
-    U,
+    F,
+    T,
     L,
-    b
+    B,
+    P,
+    v,
+    I,
+    z,
+    l
   ]);
-  return /* @__PURE__ */ s(Ne.Provider, { value: F, children: e });
+  return /* @__PURE__ */ s(Ue.Provider, { value: D, children: e });
 }
-function ge() {
-  const n = ae(Ne);
+function Te() {
+  const n = le(Ue);
   if (!n)
     throw new Error("useTenant must be used within a TenantProvider");
   return n;
 }
-function xe() {
-  return ae(Ne);
+function pe() {
+  return le(Ue);
 }
-const br = ge;
-function vr() {
-  const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = ge();
+const Tr = Te;
+function kr() {
+  const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = Te();
   return {
     settings: n,
     settingsSchema: e,
@@ -1112,8 +1128,8 @@ function vr() {
     validateSettings: i
   };
 }
-function me() {
-  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = ge();
+function Je() {
+  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = Te();
   return {
     tenant: n,
     tenantSlug: e,
@@ -1122,389 +1138,395 @@ function me() {
     retry: i
   };
 }
-const De = fe(null);
-function Sr({ config: n = {}, children: e }) {
-  const { appId: t, baseUrl: r } = Se(), { tenant: i, tenantSlug: o, switchTenant: a } = ge(), [p, w] = k(n.initialRoles || []), [y, f] = k(!n.initialRoles), [x, h] = k(null), [R, N] = k(!1), [D, E] = k(null), [P, u] = k(() => {
+const Be = ye(null);
+function xr({ config: n = {}, children: e }) {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, c = (r == null ? void 0 : r.tenantSlug) ?? null, m = (r == null ? void 0 : r.switchTenant) ?? (() => {
+  });
+  if (!i)
+    throw new Error(
+      "[AuthProvider] baseUrl is required. Provide it via AppProvider or AuthConfig.baseUrl."
+    );
+  const [y, f] = x(n.initialRoles || []), [F, g] = x(!n.initialRoles), [T, A] = x(null), [L, M] = x(!1), [P, d] = x(null), [v, N] = x(() => {
     try {
-      const A = localStorage.getItem("userTenants");
-      return A ? JSON.parse(A) : [];
+      const $ = localStorage.getItem("userTenants");
+      return $ ? JSON.parse($) : [];
     } catch {
       return [];
     }
-  }), [S, C] = k(!1), M = Me({ done: !1, urlTokens: null });
-  M.current.done || (M.current.done = !0, M.current.urlTokens = xt());
-  const [T, $] = k(() => M.current.urlTokens !== null), l = K(() => {
-    const A = we.getInstance({
-      tenantSlug: o,
-      baseUrl: r,
+  }), [B, w] = x(!1), R = Ne({ done: !1, urlTokens: null });
+  R.current.done || (R.current.done = !0, R.current.urlTokens = Rt());
+  const [k, I] = x(() => R.current.urlTokens !== null), l = Z(() => {
+    const $ = be.getInstance({
+      tenantSlug: c,
+      baseUrl: i,
       refreshQueueTimeout: n.refreshQueueTimeout,
       proactiveRefreshMargin: n.proactiveRefreshMargin,
-      onSessionExpired: (V) => {
-        h(null), E(null), u([]), C(!1);
+      onSessionExpired: (ce) => {
+        A(null), d(null), N([]), w(!1);
         try {
           localStorage.removeItem("userTenants");
         } catch {
         }
-        n.onSessionExpired ? n.onSessionExpired(V) : n.onRefreshFailed && n.onRefreshFailed();
+        n.onSessionExpired ? n.onSessionExpired(ce) : n.onRefreshFailed && n.onRefreshFailed();
       }
     });
-    return M.current.urlTokens && A.setTokens({
-      accessToken: M.current.urlTokens.accessToken,
-      refreshToken: M.current.urlTokens.refreshToken,
-      expiresIn: M.current.urlTokens.expiresIn
-    }), A;
-  }, [o, r, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [U, b] = k(() => {
-    if (M.current.urlTokens) return !1;
-    const A = l.getTokens();
-    return A ? l.hasValidSession() || !!A.refreshToken : !1;
-  }), L = M.current.done && !T && !U, F = K(() => {
-    const A = new le(r);
-    return A.setSessionManager(l), A;
-  }, [r, l]), c = K(() => new yt(new le(r)), [r]), H = K(() => new wt(F, l), [F, l]), I = K(() => new ze(new le(r)), [r]), g = K(() => x || l.getUser(), [x, l]), m = K(() => g != null && g.roleId && p.find((A) => A.id === g.roleId) || null, [g, p]), v = K(() => (m == null ? void 0 : m.permissions) || [], [m]), Q = K(() => l.hasValidSession() && x !== null, [l, x]), J = Me(async () => {
-  }), O = K(() => {
-    const A = async (B = !1) => {
+    return R.current.urlTokens && $.setTokens({
+      accessToken: R.current.urlTokens.accessToken,
+      refreshToken: R.current.urlTokens.refreshToken,
+      expiresIn: R.current.urlTokens.expiresIn
+    }), $;
+  }, [c, i, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [z, D] = x(() => {
+    if (R.current.urlTokens) return !1;
+    const $ = l.getTokens();
+    return $ ? l.hasValidSession() || !!$.refreshToken : !1;
+  }), p = R.current.done && !k && !z, U = Z(() => {
+    const $ = new de(i);
+    return $.setSessionManager(l), $;
+  }, [i, l]), b = Z(() => new vt(new de(i)), [i]), h = Z(() => new St(U, l), [U, l]), S = Z(() => new We(new de(i)), [i]), E = Z(() => T || l.getUser(), [T, l]), K = Z(() => E != null && E.roleId && y.find(($) => $.id === E.roleId) || null, [E, y]), G = Z(() => (K == null ? void 0 : K.permissions) || [], [K]), X = Z(() => l.hasValidSession() && T !== null, [l, T]), W = Ne(async () => {
+  }), q = Z(() => {
+    const $ = async (C = !1) => {
       try {
-        if (!l.hasValidSession() || !B && x)
+        if (!l.hasValidSession() || !C && T)
           return;
-        const z = l.getUserId();
-        if (!z) {
+        const O = l.getUserId();
+        if (!O) {
           process.env.NODE_ENV === "development" && console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        N(!0), E(null);
-        const Z = await H.getUserById(z);
-        h(Z), l.setUser(Z);
-      } catch (z) {
-        const Z = z instanceof Error ? z : new Error("Failed to load user data");
-        E(Z), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", Z);
+        M(!0), d(null);
+        const J = await h.getUserById(O);
+        A(J), l.setUser(J);
+      } catch (O) {
+        const J = O instanceof Error ? O : new Error("Failed to load user data");
+        d(J), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", J);
       } finally {
-        N(!1);
+        M(!1);
       }
-    }, V = async () => {
-      await A();
-    }, de = async (B) => {
-      var Be;
-      const { username: z, password: Z, tenantSlug: W, redirectPath: Y } = B;
-      let X = i == null ? void 0 : i.id, ee = o, te = l;
-      W && (X = (await new be(F, t).getPublicTenantInfo(W)).id, ee = W);
-      const G = await c.login({
-        username: z,
-        password: Z,
-        appId: t,
-        tenantId: X
-      }), ye = W && W !== o;
-      if (ye && (te = new we({
-        tenantSlug: ee,
-        baseUrl: r
-      })), te.setTokens({
-        accessToken: G.accessToken,
-        refreshToken: G.refreshToken,
-        expiresIn: G.expiresIn
-      }), G.user) {
-        te.setUser(G.user), h(G.user);
+    }, ce = async () => {
+      await $();
+    }, fe = async (C) => {
+      var _e;
+      const { username: O, password: J, tenantSlug: j, redirectPath: Y } = C;
+      let ee = a == null ? void 0 : a.id, te = c, re = l;
+      j && (ee = (await new ve(U, o).getPublicTenantInfo(j)).id, te = j);
+      const Q = await b.login({
+        username: O,
+        password: J,
+        appId: o,
+        tenantId: ee
+      }), we = j && j !== c;
+      if (we && (re = new be({
+        tenantSlug: te,
+        baseUrl: i
+      })), re.setTokens({
+        accessToken: Q.accessToken,
+        refreshToken: Q.refreshToken,
+        expiresIn: Q.expiresIn
+      }), Q.user) {
+        re.setUser(Q.user), A(Q.user);
         try {
-          await A();
-        } catch (Te) {
-          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", Te);
+          await $();
+        } catch (ke) {
+          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", ke);
         }
       }
-      if (G.tenants && G.tenants.length > 0) {
-        u(G.tenants);
+      if (Q.tenants && Q.tenants.length > 0) {
+        N(Q.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(G.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(Q.tenants));
         } catch {
         }
       }
-      const Pe = ((Be = G.user) == null ? void 0 : Be.tenantId) !== null;
-      C(Pe);
-      const Re = {
-        accessToken: G.accessToken,
-        refreshToken: G.refreshToken,
-        expiresIn: G.expiresIn
+      const Re = ((_e = Q.user) == null ? void 0 : _e.tenantId) !== null;
+      w(Re);
+      const Ee = {
+        accessToken: Q.accessToken,
+        refreshToken: Q.refreshToken,
+        expiresIn: Q.expiresIn
       };
-      if (ye && ee)
-        return a(ee, { tokens: Re, redirectPath: Y }), G;
+      if (we && te)
+        return m(te, { tokens: Ee, redirectPath: Y }), Q;
       if (Y && Y !== window.location.pathname)
-        return a(ee || o || "", { tokens: Re, redirectPath: Y }), G;
-      if (!Pe && G.tenants && G.tenants.length > 0) {
-        const Te = B.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
-        if (G.tenants.length === 1 && Te) {
-          const Oe = G.tenants[0];
-          return a(Oe.subdomain, { tokens: Re, redirectPath: Y }), G;
-        } else G.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(G.tenants);
+        return m(te || c || "", { tokens: Ee, redirectPath: Y }), Q;
+      if (!Re && Q.tenants && Q.tenants.length > 0) {
+        const ke = C.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
+        if (Q.tenants.length === 1 && ke) {
+          const ze = Q.tenants[0];
+          return m(ze.subdomain, { tokens: Ee, redirectPath: Y }), Q;
+        } else Q.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(Q.tenants);
       }
-      return G;
-    }, he = async (B) => {
-      const { email: z, phoneNumber: Z, name: W, password: Y, lastName: X, tenantId: ee } = B;
-      if (!z && !Z)
+      return Q;
+    }, ge = async (C) => {
+      const { email: O, phoneNumber: J, name: j, password: Y, lastName: ee, tenantId: te } = C;
+      if (!O && !J)
         throw new Error("Either email or phoneNumber is required");
-      if (!W || !Y)
+      if (!j || !Y)
         throw new Error("Name and password are required");
-      const te = ee ?? (i == null ? void 0 : i.id);
-      return await c.signup({
-        email: z,
-        phoneNumber: Z,
-        name: W,
+      const re = te ?? (a == null ? void 0 : a.id);
+      return await b.signup({
+        email: O,
+        phoneNumber: J,
+        name: j,
         password: Y,
-        tenantId: te,
-        lastName: X,
-        appId: t
+        tenantId: re,
+        lastName: ee,
+        appId: o
       });
-    }, et = async (B) => {
-      const { email: z, phoneNumber: Z, name: W, password: Y, tenantName: X, lastName: ee } = B;
-      if (!z && !Z)
+    }, nt = async (C) => {
+      const { email: O, phoneNumber: J, name: j, password: Y, tenantName: ee, lastName: te } = C;
+      if (!O && !J)
         throw new Error("Either email or phoneNumber is required");
-      if (!W || !Y || !X)
+      if (!j || !Y || !ee)
         throw new Error("Name, password, and tenantName are required");
-      return await c.signupTenantAdmin({
-        email: z,
-        phoneNumber: Z,
-        name: W,
+      return await b.signupTenantAdmin({
+        email: O,
+        phoneNumber: J,
+        name: j,
         password: Y,
-        tenantName: X,
-        appId: t,
-        lastName: ee
+        tenantName: ee,
+        appId: o,
+        lastName: te
       });
-    }, tt = async (B) => {
-      const { currentPassword: z, newPassword: Z } = B, W = await l.getAuthHeaders();
-      await c.changePassword({ currentPassword: z, newPassword: Z }, W);
-    }, rt = async (B) => {
-      const { email: z, tenantId: Z } = B, W = Z ?? (i == null ? void 0 : i.id);
-      if (!W)
+    }, st = async (C) => {
+      const { currentPassword: O, newPassword: J } = C, j = await l.getAuthHeaders();
+      await b.changePassword({ currentPassword: O, newPassword: J }, j);
+    }, it = async (C) => {
+      const { email: O, tenantId: J } = C, j = J ?? (a == null ? void 0 : a.id);
+      if (!j)
         throw new Error("tenantId is required for password reset");
-      await c.requestPasswordReset({ email: z, tenantId: W });
-    }, nt = async (B) => {
-      const { token: z, newPassword: Z } = B;
-      await c.confirmPasswordReset({ token: z, newPassword: Z });
-    }, st = async (B) => {
-      const { email: z, frontendUrl: Z, name: W, lastName: Y, tenantId: X } = B, ee = X ?? (i == null ? void 0 : i.id);
-      if (!ee)
+      await b.requestPasswordReset({ email: O, tenantId: j });
+    }, ot = async (C) => {
+      const { token: O, newPassword: J } = C;
+      await b.confirmPasswordReset({ token: O, newPassword: J });
+    }, at = async (C) => {
+      const { email: O, frontendUrl: J, name: j, lastName: Y, tenantId: ee } = C, te = ee ?? (a == null ? void 0 : a.id);
+      if (!te)
         throw new Error("tenantId is required for magic link authentication");
-      return await c.sendMagicLink({
-        email: z,
-        tenantId: ee,
-        frontendUrl: Z,
-        name: W,
+      return await b.sendMagicLink({
+        email: O,
+        tenantId: te,
+        frontendUrl: J,
+        name: j,
         lastName: Y,
-        appId: t
+        appId: o
       });
-    }, it = async (B) => {
-      const { token: z, email: Z, tenantSlug: W } = B;
-      let Y = i == null ? void 0 : i.id, X = o, ee = l;
-      W && (Y = (await new be(F, t).getPublicTenantInfo(W)).id, X = W);
-      const te = await c.verifyMagicLink({
-        token: z,
-        email: Z,
-        appId: t,
+    }, lt = async (C) => {
+      const { token: O, email: J, tenantSlug: j } = C;
+      let Y = a == null ? void 0 : a.id, ee = c, te = l;
+      j && (Y = (await new ve(U, o).getPublicTenantInfo(j)).id, ee = j);
+      const re = await b.verifyMagicLink({
+        token: O,
+        email: J,
+        appId: o,
         tenantId: Y
-      }), G = W && W !== o;
-      if (G && (ee = new we({
-        tenantSlug: X,
-        baseUrl: r
-      })), ee.setTokens({
-        accessToken: te.accessToken,
-        refreshToken: te.refreshToken,
-        expiresIn: te.expiresIn
-      }), te.user) {
-        ee.setUser(te.user), h(te.user);
+      }), Q = j && j !== c;
+      if (Q && (te = new be({
+        tenantSlug: ee,
+        baseUrl: i
+      })), te.setTokens({
+        accessToken: re.accessToken,
+        refreshToken: re.refreshToken,
+        expiresIn: re.expiresIn
+      }), re.user) {
+        te.setUser(re.user), A(re.user);
         try {
-          await A();
-        } catch (ye) {
+          await $();
+        } catch (we) {
           process.env.NODE_ENV === "development" && console.warn(
             "[AuthProvider] Failed to load complete user data after magic link:",
-            ye
+            we
           );
         }
       }
-      return G && X && X !== o && a(X, {
+      return Q && ee && ee !== c && m(ee, {
         tokens: {
-          accessToken: te.accessToken,
-          refreshToken: te.refreshToken,
-          expiresIn: te.expiresIn
+          accessToken: re.accessToken,
+          refreshToken: re.refreshToken,
+          expiresIn: re.expiresIn
         }
-      }), te;
-    }, ot = async () => {
-      const B = l.getTokens();
-      if (!(B != null && B.refreshToken))
+      }), re;
+    }, ct = async () => {
+      const C = l.getTokens();
+      if (!(C != null && C.refreshToken))
         throw new Error("No refresh token available");
-      const z = await c.refreshToken({
-        refreshToken: B.refreshToken
+      const O = await b.refreshToken({
+        refreshToken: C.refreshToken
       });
       l.setTokens({
-        accessToken: z.accessToken,
-        refreshToken: z.refreshToken || B.refreshToken,
-        expiresIn: z.expiresIn
+        accessToken: O.accessToken,
+        refreshToken: O.refreshToken || C.refreshToken,
+        expiresIn: O.expiresIn
       });
-    }, at = () => {
-      l.clearSession(), h(null), E(null), u([]), C(!1);
+    }, dt = () => {
+      l.clearSession(), A(null), d(null), N([]), w(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, lt = (B) => {
-      l.setTokens(B);
-    }, ct = () => l.hasValidSession(), dt = () => {
-      l.clearSession(), h(null), E(null);
-    }, ut = async () => {
-      if (t)
+    }, ut = (C) => {
+      l.setTokens(C);
+    }, ht = () => l.hasValidSession(), pt = () => {
+      l.clearSession(), A(null), d(null);
+    }, ft = async () => {
+      if (o)
         try {
-          f(!0);
-          const { roles: B } = await I.getRolesByApp(t);
-          w(B);
-        } catch (B) {
-          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", B);
+          g(!0);
+          const { roles: C } = await S.getRolesByApp(o);
+          f(C);
+        } catch (C) {
+          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", C);
         } finally {
-          f(!1);
+          g(!1);
         }
-    }, ht = async () => {
-      await ut();
-    }, Ae = (B) => {
-      if (!v || v.length === 0)
+    }, gt = async () => {
+      await ft();
+    }, Pe = (C) => {
+      if (!G || G.length === 0)
         return !1;
-      if (typeof B == "string")
-        return v.includes(B);
-      const z = `${B.resource}.${B.action}`;
-      return v.includes(z);
+      if (typeof C == "string")
+        return G.includes(C);
+      const O = `${C.resource}.${C.action}`;
+      return G.includes(O);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: Q,
+      isAuthenticated: X,
       sessionManager: l,
-      authenticatedHttpService: F,
-      login: de,
-      signup: he,
-      signupTenantAdmin: et,
-      sendMagicLink: st,
-      verifyMagicLink: it,
-      changePassword: tt,
-      requestPasswordReset: rt,
-      confirmPasswordReset: nt,
-      refreshToken: ot,
-      logout: at,
-      setTokens: lt,
-      hasValidSession: ct,
-      clearSession: dt,
-      currentUser: x,
-      isUserLoading: R,
-      userError: D,
-      loadUserData: A,
-      refreshUser: V,
-      isAuthInitializing: !L,
-      isAuthReady: L,
-      userRole: m,
-      userPermissions: v,
-      availableRoles: p,
-      rolesLoading: y,
-      hasPermission: Ae,
-      hasAnyPermission: (B) => B.some((z) => Ae(z)),
-      hasAllPermissions: (B) => B.every((z) => Ae(z)),
-      getUserPermissionStrings: () => v || [],
-      refreshRoles: ht,
+      authenticatedHttpService: U,
+      login: fe,
+      signup: ge,
+      signupTenantAdmin: nt,
+      sendMagicLink: at,
+      verifyMagicLink: lt,
+      changePassword: st,
+      requestPasswordReset: it,
+      confirmPasswordReset: ot,
+      refreshToken: ct,
+      logout: dt,
+      setTokens: ut,
+      hasValidSession: ht,
+      clearSession: pt,
+      currentUser: T,
+      isUserLoading: L,
+      userError: P,
+      loadUserData: $,
+      refreshUser: ce,
+      isAuthInitializing: !p,
+      isAuthReady: p,
+      userRole: K,
+      userPermissions: G,
+      availableRoles: y,
+      rolesLoading: F,
+      hasPermission: Pe,
+      hasAnyPermission: (C) => C.some((O) => Pe(O)),
+      hasAllPermissions: (C) => C.every((O) => Pe(O)),
+      getUserPermissionStrings: () => G || [],
+      refreshRoles: gt,
       // RFC-004: Multi-tenant user membership
-      userTenants: P,
-      hasTenantContext: S,
-      switchToTenant: async (B, z) => {
-        const { redirectPath: Z } = z || {}, W = l.getTokens();
-        if (!(W != null && W.refreshToken))
+      userTenants: v,
+      hasTenantContext: B,
+      switchToTenant: async (C, O) => {
+        const { redirectPath: J } = O || {}, j = l.getTokens();
+        if (!(j != null && j.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const Y = await c.switchTenant({
-          refreshToken: W.refreshToken,
-          tenantId: B
+        const Y = await b.switchTenant({
+          refreshToken: j.refreshToken,
+          tenantId: C
         });
         l.setTokens({
           accessToken: Y.accessToken,
-          refreshToken: W.refreshToken,
+          refreshToken: j.refreshToken,
           // Keep the same refresh token
           expiresIn: Y.expiresIn
-        }), h(Y.user), l.setUser(Y.user), C(!0);
-        const X = P.find((ee) => ee.id === B);
-        X && a(X.subdomain, {
+        }), A(Y.user), l.setUser(Y.user), w(!0);
+        const ee = v.find((te) => te.id === C);
+        ee && m(ee.subdomain, {
           tokens: {
             accessToken: Y.accessToken,
-            refreshToken: W.refreshToken,
+            refreshToken: j.refreshToken,
             expiresIn: Y.expiresIn
           },
-          redirectPath: Z
+          redirectPath: J
         });
       },
       refreshUserTenants: async () => {
-        const B = await l.getAuthHeaders(), z = await c.getUserTenants(B);
-        u(z);
+        const C = await l.getAuthHeaders(), O = await b.getUserTenants(C);
+        N(O);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(z));
+          localStorage.setItem("userTenants", JSON.stringify(O));
         } catch {
         }
-        return z;
+        return O;
       }
     };
   }, [
-    Q,
+    X,
     l,
-    F,
-    c,
-    H,
-    I,
-    t,
-    i,
+    U,
+    b,
+    h,
+    S,
     o,
     a,
-    p,
-    x,
-    R,
-    D,
-    P,
-    S,
-    L,
+    c,
     m,
-    v
+    y,
+    T,
+    L,
+    P,
+    v,
+    B,
+    p,
+    K,
+    G
   ]);
-  J.current = O.loadUserData, re(() => {
-    !n.initialRoles && t && (async () => {
+  W.current = q.loadUserData, ne(() => {
+    !n.initialRoles && o && (async () => {
       try {
-        f(!0);
-        const V = new le(r), de = new ze(V), { roles: he } = await de.getRolesByApp(t);
-        w(he);
-      } catch (V) {
-        process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", V);
+        g(!0);
+        const ce = new de(i), fe = new We(ce), { roles: ge } = await fe.getRolesByApp(o);
+        f(ge);
+      } catch (ce) {
+        process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", ce);
       } finally {
-        f(!1);
+        g(!1);
       }
     })();
-  }, [t, r, n.initialRoles]);
-  const [q, j] = k(!1);
-  return re(() => {
-    q || (j(!0), M.current.urlTokens && (At(), $(!0), O.loadUserData().catch((A) => {
-      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", A);
+  }, [o, i, n.initialRoles]);
+  const [V, H] = x(!1);
+  return ne(() => {
+    V || (H(!0), R.current.urlTokens && (Et(), I(!0), q.loadUserData().catch(($) => {
+      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", $);
     }).finally(() => {
-      $(!1);
+      I(!1);
     })));
-  }, [O, q]), re(() => {
-    let A = !1;
+  }, [q, V]), ne(() => {
+    let $ = !1;
     return (async () => {
-      var he;
-      if (!l.hasValidSession() && ((he = l.getTokens()) != null && he.refreshToken) && await l.waitForPendingRefresh(), A) return;
-      const de = l.getUser();
-      de && l.hasValidSession() && h(de), b(!1);
+      var ge;
+      if (!l.hasValidSession() && ((ge = l.getTokens()) != null && ge.refreshToken) && await l.waitForPendingRefresh(), $) return;
+      const fe = l.getUser();
+      fe && l.hasValidSession() && A(fe), D(!1);
     })(), () => {
-      A = !0;
+      $ = !0;
     };
-  }, [l]), re(() => {
-    q && (M.current.urlTokens || (!x && !R && !D && l.hasValidSession() ? J.current().catch(() => {
+  }, [l]), ne(() => {
+    V && (R.current.urlTokens || (!T && !L && !P && l.hasValidSession() ? W.current().catch(() => {
     }).finally(() => {
-      b(!1);
-    }) : b(!1)));
-  }, [x, R, D, l, q]), /* @__PURE__ */ s(De.Provider, { value: O, children: e });
+      D(!1);
+    }) : D(!1)));
+  }, [T, L, P, l, V]), /* @__PURE__ */ s(Be.Provider, { value: q, children: e });
 }
-function ue() {
-  const n = ae(De);
+function he() {
+  const n = le(Be);
   if (!n)
     throw new Error("useAuth must be used within an AuthProvider");
   return n;
 }
-function Fe() {
-  return ae(De);
+function $e() {
+  return le(Be);
 }
-class Pt {
+class It {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1584,66 +1606,66 @@ class Pt {
     })).data;
   }
 }
-const Ce = fe(null);
-function Tr({ config: n = {}, children: e }) {
-  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [p, w] = k([]), [y, f] = k(!1), [x, h] = k(null), [R, N] = k(!1), D = K(() => {
-    const u = new le(i);
-    return new Pt(u);
-  }, [i]), E = async () => {
+const Ce = ye(null);
+function Ar({ config: n = {}, children: e }) {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [c, m] = x([]), [y, f] = x(!1), [F, g] = x(null), [T, A] = x(!1), L = Z(() => {
+    const d = new de(i);
+    return new It(d);
+  }, [i]), M = async () => {
     if (!(a != null && a.id)) {
-      w([]);
+      m([]);
       return;
     }
-    f(!0), h(null);
+    f(!0), g(null);
     try {
-      const u = await D.getTenantFeatureFlags(a.id, o);
-      w(u);
-    } catch (u) {
-      const S = u instanceof Error ? u.message : "Failed to fetch feature flags";
-      h(S), n.onError && n.onError(u instanceof Error ? u : new Error(S));
+      const d = await L.getTenantFeatureFlags(a.id, o);
+      m(d);
+    } catch (d) {
+      const v = d instanceof Error ? d.message : "Failed to fetch feature flags";
+      g(v), n.onError && n.onError(d instanceof Error ? d : new Error(v));
     } finally {
       f(!1);
     }
   };
-  re(() => {
+  ne(() => {
     if (!i || !o) return;
-    E().finally(() => N(!0));
-    const u = n.refreshInterval || 5 * 60 * 1e3, S = setInterval(E, u);
-    return () => clearInterval(S);
+    M().finally(() => A(!0));
+    const d = n.refreshInterval || 5 * 60 * 1e3, v = setInterval(M, d);
+    return () => clearInterval(v);
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
-  const P = K(() => {
-    const u = ($) => {
-      const l = p.find((U) => U.key === $);
-      return (l == null ? void 0 : l.value) === !0;
-    }, S = ($) => p.find((l) => l.key === $), C = ($) => {
-      const l = p.find((U) => U.key === $);
-      return l ? l.value ? "enabled" : "disabled" : "not_found";
-    }, M = async () => {
-      await E();
-    }, T = !!(i && o) && (R || !(a != null && a.id));
+  const P = Z(() => {
+    const d = (R) => {
+      const k = c.find((I) => I.key === R);
+      return (k == null ? void 0 : k.value) === !0;
+    }, v = (R) => c.find((k) => k.key === R), N = (R) => {
+      const k = c.find((I) => I.key === R);
+      return k ? k.value ? "enabled" : "disabled" : "not_found";
+    }, B = async () => {
+      await M();
+    }, w = !!(i && o) && (T || !(a != null && a.id));
     return {
-      featureFlags: p,
+      featureFlags: c,
       loading: y,
-      error: x,
-      isReady: T,
-      isEnabled: u,
-      getFlag: S,
-      getFlagState: C,
-      refresh: M
+      error: F,
+      isReady: w,
+      isEnabled: d,
+      getFlag: v,
+      getFlagState: N,
+      refresh: B
     };
-  }, [p, y, x, i, o, a == null ? void 0 : a.id, R]);
+  }, [c, y, F, i, o, a == null ? void 0 : a.id, T]);
   return /* @__PURE__ */ s(Ce.Provider, { value: P, children: e });
 }
-function Rt() {
-  const n = ae(Ce);
+function Mt() {
+  const n = le(Ce);
   if (!n)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return n;
 }
-function Ke() {
-  return ae(Ce);
+function Ye() {
+  return le(Ce);
 }
-class Et {
+class Lt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1709,68 +1731,68 @@ class Et {
     )).data;
   }
 }
-const $e = fe(void 0);
-function kr({ config: n = {}, children: e }) {
-  const t = Qe(), r = xe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, p] = k(null), [w, y] = k(!1), [f, x] = k(null), [h, R] = k(!1), N = K(() => {
-    const P = new le(i);
-    return new Et(P);
-  }, [i]), D = async () => {
+const He = ye(void 0);
+function Pr({ config: n = {}, children: e }) {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, c] = x(null), [m, y] = x(!1), [f, F] = x(null), [g, T] = x(!1), A = Z(() => {
+    const P = new de(i);
+    return new Lt(P);
+  }, [i]), L = async () => {
     if (!(o != null && o.id)) {
-      p(null);
+      c(null);
       return;
     }
-    y(!0), x(null);
+    y(!0), F(null);
     try {
-      const P = await N.getTenantSubscriptionFeatures(o.id);
-      p(P);
+      const P = await A.getTenantSubscriptionFeatures(o.id);
+      c(P);
     } catch (P) {
-      const u = P instanceof Error ? P.message : "Failed to fetch subscription";
-      x(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
+      const d = P instanceof Error ? P.message : "Failed to fetch subscription";
+      F(d), n.onError && n.onError(P instanceof Error ? P : new Error(d));
     } finally {
       y(!1);
     }
   };
-  re(() => {
-    if (!i || (D().finally(() => R(!0)), !n.refreshInterval)) return;
-    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(D, P);
-    return () => clearInterval(u);
+  ne(() => {
+    if (!i || (L().finally(() => T(!0)), !n.refreshInterval)) return;
+    const P = n.refreshInterval || 10 * 60 * 1e3, d = setInterval(L, P);
+    return () => clearInterval(d);
   }, [o == null ? void 0 : o.id, i, n.refreshInterval]);
-  const E = K(() => {
-    const P = (a == null ? void 0 : a.features) || [], u = (l) => {
-      const U = P.find((b) => b.key === l);
-      return U ? U.type === "BOOLEAN" || U.type === "boolean" ? U.value === !0 : !!U.value : !1;
-    }, S = (l) => P.find((U) => U.key === l), C = (l, U) => {
-      const b = P.find((L) => L.key === l);
-      return b ? b.value : U;
-    }, M = (l) => !a || !a.isActive ? !1 : l.includes(a.planId), T = async () => {
-      await D();
-    }, $ = !!i && (h || !(o != null && o.id));
+  const M = Z(() => {
+    const P = (a == null ? void 0 : a.features) || [], d = (k) => {
+      const I = P.find((l) => l.key === k);
+      return I ? I.type === "BOOLEAN" || I.type === "boolean" ? I.value === !0 : !!I.value : !1;
+    }, v = (k) => P.find((I) => I.key === k), N = (k, I) => {
+      const l = P.find((z) => z.key === k);
+      return l ? l.value : I;
+    }, B = (k) => !a || !a.isActive ? !1 : k.includes(a.planId), w = async () => {
+      await L();
+    }, R = !!i && (g || !(o != null && o.id));
     return {
       subscription: a,
       features: P,
-      loading: w,
+      loading: m,
       error: f,
-      isReady: $,
-      isFeatureEnabled: u,
-      getFeature: S,
-      getFeatureValue: C,
-      hasAllowedPlan: M,
-      refresh: T
+      isReady: R,
+      isFeatureEnabled: d,
+      getFeature: v,
+      getFeatureValue: N,
+      hasAllowedPlan: B,
+      refresh: w
     };
-  }, [a, w, f, i, o == null ? void 0 : o.id, h]);
-  return /* @__PURE__ */ s($e.Provider, { value: E, children: e });
+  }, [a, m, f, i, o == null ? void 0 : o.id, g]);
+  return /* @__PURE__ */ s(He.Provider, { value: M, children: e });
 }
-function It() {
-  const n = ae($e);
+function Nt() {
+  const n = le(He);
   if (n === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return n;
 }
-function Ze() {
-  return ae($e) ?? null;
+function Xe() {
+  return le(He) ?? null;
 }
-var oe = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(oe || {});
-const Ue = {
+var ae = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(ae || {});
+const Oe = {
   publicGuest: "/",
   publicUser: "/account",
   publicAdmin: "/admin",
@@ -1778,7 +1800,7 @@ const Ue = {
   tenantUser: "/dashboard",
   tenantAdmin: "/admin/dashboard",
   default: "/"
-}, Je = {
+}, et = {
   // Public/Landing zones
   landing: { tenant: "forbidden", auth: "optional" },
   publicOnly: { tenant: "forbidden", auth: "forbidden" },
@@ -1791,18 +1813,18 @@ const Ue = {
   tenantOpen: { tenant: "required", auth: "optional" },
   tenantAuth: { tenant: "required", auth: "required" },
   // User type zones
-  user: { tenant: "required", auth: "required", userType: oe.USER },
-  admin: { tenant: "required", auth: "required", userType: oe.TENANT_ADMIN },
+  user: { tenant: "required", auth: "required", userType: ae.USER },
+  admin: { tenant: "required", auth: "required", userType: ae.TENANT_ADMIN },
   // Fully open
   open: { tenant: "optional", auth: "optional" }
-}, He = fe(null);
-function xr({ config: n = {}, children: e }) {
-  const t = K(() => {
+}, qe = ye(null);
+function Rr({ config: n = {}, children: e }) {
+  const t = Z(() => {
     const r = {
-      ...Ue,
+      ...Oe,
       ...n.zoneRoots
     }, i = {
-      ...Je,
+      ...et,
       ...n.presets
     };
     return {
@@ -1815,19 +1837,19 @@ function xr({ config: n = {}, children: e }) {
       returnToStorage: n.returnToStorage ?? "url"
     };
   }, [n]);
-  return /* @__PURE__ */ s(He.Provider, { value: t, children: e });
+  return /* @__PURE__ */ s(qe.Provider, { value: t, children: e });
 }
-function Ar() {
-  const n = ae(He);
+function Er() {
+  const n = le(qe);
   if (!n)
     throw new Error("useRouting must be used within a RoutingProvider");
   return n;
 }
-function Mt() {
-  const n = ae(He);
+function Ft() {
+  const n = le(qe);
   return n || {
-    zoneRoots: Ue,
-    presets: Je,
+    zoneRoots: Oe,
+    presets: et,
     loadingFallback: null,
     accessDeniedFallback: null,
     onAccessDenied: void 0,
@@ -1835,7 +1857,7 @@ function Mt() {
     returnToStorage: "url"
   };
 }
-const We = () => /* @__PURE__ */ d(
+const Ge = () => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -1872,11 +1894,11 @@ const We = () => /* @__PURE__ */ d(
       )
     ]
   }
-), Ve = ({
+), Ke = ({
   userType: n,
   minUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ d(
+}) => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -1894,55 +1916,55 @@ const We = () => /* @__PURE__ */ d(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
       /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && n ? /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ d("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+      e && n ? /* @__PURE__ */ u(_, { children: [
+        /* @__PURE__ */ u("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
           /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
-        /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
           /* @__PURE__ */ s("strong", { children: n })
         ] })
-      ] }) : /* @__PURE__ */ d(_, { children: [
+      ] }) : /* @__PURE__ */ u(_, { children: [
         /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
-        t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
           /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
       ] })
     ]
   }
-), Lt = (n, e) => {
+), Dt = (n, e) => {
   const t = {
-    [oe.USER]: 1,
-    [oe.TENANT_ADMIN]: 2,
-    [oe.SUPERUSER]: 3
+    [ae.USER]: 1,
+    [ae.TENANT_ADMIN]: 2,
+    [ae.SUPERUSER]: 3
   };
   return t[n] >= t[e];
 };
-function Pr({
+function Ir({
   children: n,
   fallback: e,
   minUserType: t,
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: p, hasAnyPermission: w, hasAllPermissions: y } = ue();
+  const { hasValidSession: o, sessionManager: a, hasPermission: c, hasAnyPermission: m, hasAllPermissions: y } = he();
   if (!o())
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(We, {}) });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
   const f = a.getUser();
   if (!f)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(We, {}) });
-  if (t && !Lt(f.userType, t))
-    return /* @__PURE__ */ s(Ve, { userType: f.userType, minUserType: t });
-  if (r && r.length > 0 && !(i ? y(r) : w(r))) {
-    const h = r.filter((R) => !p(R)).map((R) => typeof R == "string" ? R : R.name);
-    return /* @__PURE__ */ s(Ve, { missingPermissions: h });
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
+  if (t && !Dt(f.userType, t))
+    return /* @__PURE__ */ s(Ke, { userType: f.userType, minUserType: t });
+  if (r && r.length > 0 && !(i ? y(r) : m(r))) {
+    const g = r.filter((T) => !c(T)).map((T) => typeof T == "string" ? T : T.name);
+    return /* @__PURE__ */ s(Ke, { missingPermissions: g });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -1955,7 +1977,7 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -1969,7 +1991,7 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
-          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -1978,7 +2000,7 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), je = ({
+), Qe = ({
   userType: n,
   requiredUserType: e,
   missingPermissions: t
@@ -1995,7 +2017,7 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2008,19 +2030,19 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
         children: [
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && n ? /* @__PURE__ */ d(_, { children: [
-            /* @__PURE__ */ d("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+          e && n ? /* @__PURE__ */ u(_, { children: [
+            /* @__PURE__ */ u("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
               /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
-            /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
               /* @__PURE__ */ s("strong", { children: n })
             ] })
-          ] }) : /* @__PURE__ */ d(_, { children: [
+          ] }) : /* @__PURE__ */ u(_, { children: [
             /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
-            t && t.length > 0 && /* @__PURE__ */ d("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
               /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
@@ -2029,8 +2051,8 @@ const Nt = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Dt = (n, e) => n === e;
-function Rr({
+), Bt = (n, e) => n === e;
+function Mr({
   children: n,
   redirectTo: e = "/login",
   requiredUserType: t,
@@ -2038,34 +2060,34 @@ function Rr({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: p, hasPermission: w, hasAnyPermission: y, hasAllPermissions: f } = ue(), x = ke();
-  if (re(() => {
+  const { hasValidSession: a, sessionManager: c, hasPermission: m, hasAnyPermission: y, hasAllPermissions: f } = he(), F = xe();
+  if (ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
-    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ d(_, { children: [
-      /* @__PURE__ */ s(Nt, { redirectPath: e }),
-      /* @__PURE__ */ s(ve, { to: e, state: { from: x.pathname }, replace: !0 })
+    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ u(_, { children: [
+      /* @__PURE__ */ s(Ut, { redirectPath: e }),
+      /* @__PURE__ */ s(Se, { to: e, state: { from: F.pathname }, replace: !0 })
     ] });
-  const h = p.getUser();
-  if (!h)
-    return /* @__PURE__ */ s(ve, { to: e, state: { from: x.pathname }, replace: !0 });
-  if (t && !Dt(h.userType, t))
+  const g = c.getUser();
+  if (!g)
+    return /* @__PURE__ */ s(Se, { to: e, state: { from: F.pathname }, replace: !0 });
+  if (t && !Bt(g.userType, t))
     return /* @__PURE__ */ s(
-      je,
+      Qe,
       {
-        userType: h.userType,
+        userType: g.userType,
         requiredUserType: t
       }
     );
   if (r && r.length > 0 && !(i ? f(r) : y(r))) {
-    const N = r.filter((D) => !w(D)).map((D) => typeof D == "string" ? D : D.name);
-    return /* @__PURE__ */ s(je, { missingPermissions: N });
+    const A = r.filter((L) => !m(L)).map((L) => typeof L == "string" ? L : L.name);
+    return /* @__PURE__ */ s(Qe, { missingPermissions: A });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2078,7 +2100,7 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2092,7 +2114,7 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
-          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2102,15 +2124,15 @@ const Ft = ({ redirectPath: n }) => /* @__PURE__ */ s(
     )
   }
 );
-function Er({ children: n, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = me(), a = ke();
-  return re(() => {
+function Lr({ children: n, redirectTo: e = "/", fallback: t }) {
+  const { tenant: r, isLoading: i, error: o } = Je(), a = xe();
+  return ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
-    /* @__PURE__ */ s(Ft, { redirectPath: e }),
-    /* @__PURE__ */ s(ve, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ u(_, { children: [
+    /* @__PURE__ */ s($t, { redirectPath: e }),
+    /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
 const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
@@ -2126,7 +2148,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ d(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2140,7 +2162,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
-          /* @__PURE__ */ d("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2150,41 +2172,41 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
     )
   }
 );
-function Ir({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = me(), a = ke();
-  return re(() => {
+function Nr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: r, isLoading: i, error: o } = Je(), a = xe();
+  return ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ d(_, { children: [
+  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ u(_, { children: [
     /* @__PURE__ */ s(Ct, { redirectPath: e }),
-    /* @__PURE__ */ s(ve, { to: e, state: { from: a.pathname }, replace: !0 })
+    /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
   ] }) : /* @__PURE__ */ s(_, { children: n });
 }
-function $t(n, e) {
+function Ht(n, e) {
   return e ? n ? Array.isArray(e) ? e.includes(n) : n === e : !1 : !0;
 }
-function Ge(n, e) {
+function Ze(n, e) {
   return !n || n === "optional" ? "skip" : n === "required" ? e ? "pass" : "fail" : n === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
-function Ut(n, e) {
-  return Ge(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ge(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !$t(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
+function Ot(n, e) {
+  return Ze(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ze(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ht(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
 }
-function Ht(n, e) {
-  return n.hasTenant ? n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
+function qt(n, e) {
+  return n.hasTenant ? n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
 }
-function Bt(n, e, t, r, i) {
+function _t(n, e, t, r, i) {
   if (!e || i !== "url")
     return n;
   const o = typeof e == "string" ? e : t, a = n.includes("?") ? "&" : "?";
   return `${n}${a}${r}=${encodeURIComponent(o)}`;
 }
-function Ot(n, e, t) {
+function zt(n, e, t) {
   if (!n || t === "url") return;
   const r = typeof n == "string" ? n : e, i = "zone_return_to";
   t === "session" ? sessionStorage.setItem(i, r) : t === "local" && localStorage.setItem(i, r);
 }
-const ce = ({
+const ue = ({
   children: n,
   preset: e,
   tenant: t,
@@ -2192,83 +2214,83 @@ const ce = ({
   userType: i,
   requiredPermissions: o,
   requireAllPermissions: a = !0,
-  returnTo: p,
-  onAccessDenied: w,
+  returnTo: c,
+  onAccessDenied: m,
   redirectTo: y,
   loadingFallback: f,
-  accessDeniedFallback: x
+  accessDeniedFallback: F
 }) => {
-  const h = ke(), { isAuthenticated: R, isAuthInitializing: N, currentUser: D, userPermissions: E } = ue(), { tenant: P, isTenantLoading: u } = ge(), S = Mt(), C = K(() => {
+  const g = xe(), { isAuthenticated: T, isAuthInitializing: A, currentUser: L, userPermissions: M } = he(), { tenant: P, isTenantLoading: d } = Te(), v = Ft(), N = Z(() => {
     if (e)
-      return S.presets[e];
-  }, [e, S.presets]), M = K(
+      return v.presets[e];
+  }, [e, v.presets]), B = Z(
     () => ({
-      tenant: t ?? (C == null ? void 0 : C.tenant),
-      auth: r ?? (C == null ? void 0 : C.auth),
-      userType: i ?? (C == null ? void 0 : C.userType),
-      permissions: o ?? (C == null ? void 0 : C.requiredPermissions),
+      tenant: t ?? (N == null ? void 0 : N.tenant),
+      auth: r ?? (N == null ? void 0 : N.auth),
+      userType: i ?? (N == null ? void 0 : N.userType),
+      permissions: o ?? (N == null ? void 0 : N.requiredPermissions),
       requireAllPermissions: a
     }),
-    [t, r, i, o, C, a]
-  ), T = K(
+    [t, r, i, o, N, a]
+  ), w = Z(
     () => ({
       hasTenant: !!P,
-      isAuthenticated: R,
-      userType: D == null ? void 0 : D.userType,
-      permissions: E,
-      isLoading: N || u
+      isAuthenticated: T,
+      userType: L == null ? void 0 : L.userType,
+      permissions: M,
+      isLoading: A || d
     }),
     [
       P,
-      R,
-      D == null ? void 0 : D.userType,
-      E,
-      N,
-      u
+      T,
+      L == null ? void 0 : L.userType,
+      M,
+      A,
+      d
     ]
-  ), $ = K(() => T.isLoading ? null : Ut(M, T), [M, T]), l = K(() => $ ? y || Ht(T, S.zoneRoots) : null, [$, y, T, S.zoneRoots]), U = K(() => !$ || !l ? null : {
-    type: $,
+  ), R = Z(() => w.isLoading ? null : Ot(B, w), [B, w]), k = Z(() => R ? y || qt(w, v.zoneRoots) : null, [R, y, w, v.zoneRoots]), I = Z(() => !R || !k ? null : {
+    type: R,
     required: {
-      tenant: M.tenant,
-      auth: M.auth,
-      userType: M.userType,
-      permissions: M.permissions
+      tenant: B.tenant,
+      auth: B.auth,
+      userType: B.userType,
+      permissions: B.permissions
     },
     current: {
-      hasTenant: T.hasTenant,
-      isAuthenticated: T.isAuthenticated,
-      userType: T.userType,
-      permissions: T.permissions
+      hasTenant: w.hasTenant,
+      isAuthenticated: w.isAuthenticated,
+      userType: w.userType,
+      permissions: w.permissions
     },
-    redirectTo: l
-  }, [$, l, M, T]);
-  if (re(() => {
-    U && (w ? w(U) : S.onAccessDenied && S.onAccessDenied(U));
-  }, [U, w, S]), re(() => {
-    U && p && Ot(p, h.pathname + h.search, S.returnToStorage);
+    redirectTo: k
+  }, [R, k, B, w]);
+  if (ne(() => {
+    I && (m ? m(I) : v.onAccessDenied && v.onAccessDenied(I));
+  }, [I, m, v]), ne(() => {
+    I && c && zt(c, g.pathname + g.search, v.returnToStorage);
   }, [
-    U,
-    p,
-    h.pathname,
-    h.search,
-    S.returnToStorage
-  ]), T.isLoading)
-    return /* @__PURE__ */ s(_, { children: f ?? S.loadingFallback ?? null });
-  if (U && l) {
-    const b = x ?? S.accessDeniedFallback;
-    if (b)
-      return /* @__PURE__ */ s(_, { children: b });
-    const L = Bt(
-      l,
-      p,
-      h.pathname + h.search,
-      S.returnToParam,
-      S.returnToStorage
+    I,
+    c,
+    g.pathname,
+    g.search,
+    v.returnToStorage
+  ]), w.isLoading)
+    return /* @__PURE__ */ s(_, { children: f ?? v.loadingFallback ?? null });
+  if (I && k) {
+    const l = F ?? v.accessDeniedFallback;
+    if (l)
+      return /* @__PURE__ */ s(_, { children: l });
+    const z = _t(
+      k,
+      c,
+      g.pathname + g.search,
+      v.returnToParam,
+      v.returnToStorage
     );
-    return /* @__PURE__ */ s(ve, { to: L, replace: !0 });
+    return /* @__PURE__ */ s(Se, { to: z, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: n });
-}, Mr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", ...n }), Lr = (n) => /* @__PURE__ */ s(ce, { tenant: "forbidden", ...n }), Nr = (n) => /* @__PURE__ */ s(ce, { auth: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ce, { auth: "forbidden", ...n }), Fr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ce, { auth: "required", userType: oe.USER, ...n }), $r = (n) => /* @__PURE__ */ s(ce, { tenant: "optional", auth: "optional", ...n }), Ur = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "required", ...n }), Hr = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "optional", ...n }), Br = (n) => /* @__PURE__ */ s(ce, { tenant: "required", auth: "forbidden", ...n }), qt = () => /* @__PURE__ */ d(
+}, Fr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ue, { tenant: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(ue, { auth: "required", ...n }), Br = (n) => /* @__PURE__ */ s(ue, { auth: "forbidden", ...n }), $r = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.USER, ...n }), Hr = (n) => /* @__PURE__ */ s(ue, { tenant: "optional", auth: "optional", ...n }), Or = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "required", ...n }), qr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "optional", ...n }), _r = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "forbidden", ...n }), Vt = () => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -2285,14 +2307,14 @@ const ce = ({
     ]
   }
 );
-function Or({
+function zr({
   children: n,
-  fallback: e = /* @__PURE__ */ s(qt, {}),
+  fallback: e = /* @__PURE__ */ s(Vt, {}),
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: p } = It();
-  return p ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: c } = Nt();
+  return c ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2304,7 +2326,7 @@ function Or({
     }
   ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : r && !a(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: n }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const zt = ({ flagName: n }) => /* @__PURE__ */ d(
+const Wt = ({ flagName: n }) => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -2323,7 +2345,7 @@ const zt = ({ flagName: n }) => /* @__PURE__ */ d(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
       /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
-      /* @__PURE__ */ d("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+      /* @__PURE__ */ u("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
         n,
         '" is disabled'
@@ -2331,8 +2353,8 @@ const zt = ({ flagName: n }) => /* @__PURE__ */ d(
     ]
   }
 );
-function qr({ name: n, children: e, fallback: t }) {
-  const { isEnabled: r, loading: i } = Rt();
+function Vr({ name: n, children: e, fallback: t }) {
+  const { isEnabled: r, loading: i } = Mt();
   return i ? /* @__PURE__ */ s(
     "div",
     {
@@ -2346,9 +2368,9 @@ function qr({ name: n, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(zt, { flagName: n }) });
+  ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Wt, { flagName: n }) });
 }
-const _t = () => /* @__PURE__ */ d(
+const jt = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "16",
@@ -2365,7 +2387,7 @@ const _t = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Wt = () => /* @__PURE__ */ d(
+), Gt = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "16",
@@ -2382,10 +2404,10 @@ const _t = () => /* @__PURE__ */ d(
       /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), Vt = {
-  showPassword: /* @__PURE__ */ s(_t, {}),
-  hidePassword: /* @__PURE__ */ s(Wt, {})
-}, jt = {
+), Kt = {
+  showPassword: /* @__PURE__ */ s(jt, {}),
+  hidePassword: /* @__PURE__ */ s(Gt, {})
+}, Qt = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2403,7 +2425,7 @@ const _t = () => /* @__PURE__ */ d(
   dividerBullet: "•",
   showPasswordAriaLabel: "Show password",
   hidePasswordAriaLabel: "Hide password"
-}, Gt = {
+}, Zt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2513,7 +2535,7 @@ const _t = () => /* @__PURE__ */ d(
     paddingRight: "2.5rem"
   }
 };
-function zr({
+function Wr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -2521,124 +2543,120 @@ function zr({
   onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: p,
-  showForgotPassword: w = !0,
+  onMagicLinkClick: c,
+  showForgotPassword: m = !0,
   showSignupLink: y = !0,
   showMagicLinkOption: f = !0,
-  className: x
+  className: F
 }) {
-  const [h, R] = k(""), [N, D] = k(""), [E, P] = k(!1), [u, S] = k(!1), [C, M] = k(""), [T, $] = k({}), { login: l } = ue(), { tenant: U } = me(), b = { ...jt, ...n }, L = { ...Gt, ...e }, F = { ...Vt, ...t }, c = () => {
-    const m = {};
-    return h.trim() || (m.username = !0), N.trim() || (m.password = !0), $(m), Object.keys(m).length === 0;
-  }, H = async (m) => {
-    if (m.preventDefault(), !!c()) {
-      if (!(U != null && U.id)) {
-        M(b.tenantNotFoundError);
-        return;
-      }
-      S(!0), M("");
+  const [g, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [d, v] = x(!1), [N, B] = x(""), [w, R] = x({}), { login: k } = he(), I = { ...Qt, ...n }, l = { ...Zt, ...e }, z = { ...Kt, ...t }, D = () => {
+    const h = {};
+    return g.trim() || (h.username = !0), A.trim() || (h.password = !0), R(h), Object.keys(h).length === 0;
+  }, p = async (h) => {
+    if (h.preventDefault(), !!D()) {
+      v(!0), B("");
       try {
-        const v = await l({
-          username: h,
-          password: N
+        const S = await k({
+          username: g,
+          password: A
           // tenantId inferred from context automatically
         });
-        r == null || r(v);
-      } catch (v) {
-        const Q = v.message || b.errorMessage;
-        M(Q), i == null || i(Q);
+        r == null || r(S);
+      } catch (S) {
+        const E = S.message || I.errorMessage;
+        B(E), i == null || i(E);
       } finally {
-        S(!1);
+        v(!1);
       }
     }
-  }, I = (m) => ({
-    ...L.input,
-    ...T[m] ? L.inputError : {}
-  }), g = () => ({
-    ...L.button,
-    ...u ? L.buttonLoading : {},
-    ...!h || !N || u ? L.buttonDisabled : {}
+  }, U = (h) => ({
+    ...l.input,
+    ...w[h] ? l.inputError : {}
+  }), b = () => ({
+    ...l.button,
+    ...d ? l.buttonLoading : {},
+    ...!g || !A || d ? l.buttonDisabled : {}
   });
-  return /* @__PURE__ */ d("div", { className: x, style: L.container, children: [
-    /* @__PURE__ */ s("h2", { style: L.title, children: b.title }),
-    /* @__PURE__ */ d("form", { onSubmit: H, style: L.form, children: [
-      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: L.label, children: b.usernameLabel }),
+  return /* @__PURE__ */ u("div", { className: F, style: l.container, children: [
+    /* @__PURE__ */ s("h2", { style: l.title, children: I.title }),
+    /* @__PURE__ */ u("form", { onSubmit: p, style: l.form, children: [
+      /* @__PURE__ */ u("div", { style: l.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: l.label, children: I.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "username",
             name: "username",
             type: "text",
-            value: h,
-            onChange: (m) => {
-              R(m.target.value), T.username && $((v) => ({ ...v, username: !1 }));
+            value: g,
+            onChange: (h) => {
+              T(h.target.value), w.username && R((S) => ({ ...S, username: !1 }));
             },
-            placeholder: b.usernamePlaceholder,
-            style: I("username"),
-            disabled: u
+            placeholder: I.usernamePlaceholder,
+            style: U("username"),
+            disabled: d
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: L.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: L.label, children: b.passwordLabel }),
-        /* @__PURE__ */ d("div", { style: L.inputContainer, children: [
+      /* @__PURE__ */ u("div", { style: l.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: l.label, children: I.passwordLabel }),
+        /* @__PURE__ */ u("div", { style: l.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
               id: "password",
               name: "password",
-              type: E ? "text" : "password",
-              value: N,
-              onChange: (m) => {
-                D(m.target.value), T.password && $((v) => ({ ...v, password: !1 }));
+              type: M ? "text" : "password",
+              value: A,
+              onChange: (h) => {
+                L(h.target.value), w.password && R((S) => ({ ...S, password: !1 }));
               },
-              placeholder: b.passwordPlaceholder,
+              placeholder: I.passwordPlaceholder,
               style: {
-                ...I("password"),
-                ...L.inputWithIcon
+                ...U("password"),
+                ...l.inputWithIcon
               },
-              disabled: u
+              disabled: d
             }
           ),
           /* @__PURE__ */ s(
             "button",
             {
               type: "button",
-              onClick: () => P(!E),
-              style: L.passwordToggle,
-              disabled: u,
-              "aria-label": E ? b.hidePasswordAriaLabel : b.showPasswordAriaLabel,
-              children: E ? F.hidePassword : F.showPassword
+              onClick: () => P(!M),
+              style: l.passwordToggle,
+              disabled: d,
+              "aria-label": M ? I.hidePasswordAriaLabel : I.showPasswordAriaLabel,
+              children: M ? z.hidePassword : z.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !h || !N || u, style: g(), children: u ? b.loadingText : b.submitButton }),
-      C && /* @__PURE__ */ s("div", { style: L.errorText, children: C })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !A || d, style: b(), children: d ? I.loadingText : I.submitButton }),
+      N && /* @__PURE__ */ s("div", { style: l.errorText, children: N })
     ] }),
-    (w || y || f) && /* @__PURE__ */ d("div", { style: L.linkContainer, children: [
-      f && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: L.divider, children: [
-          b.magicLinkText,
+    (m || y || f) && /* @__PURE__ */ u("div", { style: l.linkContainer, children: [
+      f && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: l.divider, children: [
+          I.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: p, style: L.link, children: b.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: c, style: l.link, children: I.magicLinkLink })
       ] }),
-      f && (w || y) && /* @__PURE__ */ s("div", { style: L.divider, children: b.dividerBullet }),
-      w && /* @__PURE__ */ s("a", { onClick: o, style: L.link, children: b.forgotPasswordLink }),
-      w && y && /* @__PURE__ */ s("div", { style: L.divider, children: b.dividerBullet }),
-      y && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: L.divider, children: [
-          b.signupText,
+      f && (m || y) && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
+      m && /* @__PURE__ */ s("a", { onClick: o, style: l.link, children: I.forgotPasswordLink }),
+      m && y && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
+      y && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: l.divider, children: [
+          I.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: L.link, children: b.signupLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: l.link, children: I.signupLink })
       ] })
     ] })
   ] });
 }
-const Qt = {
+const Jt = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2667,7 +2685,7 @@ const Qt = {
   contactMethodHint: "At least one contact method (email or phone) is required",
   tenantNotFoundError: "Tenant not found",
   dividerBullet: "•"
-}, Kt = {
+}, Yt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2772,7 +2790,7 @@ const Qt = {
     margin: "0.5rem 0"
   }
 };
-function _r({
+function jr({
   copy: n = {},
   styles: e = {},
   signupType: t = "user",
@@ -2780,61 +2798,62 @@ function _r({
   onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: p = !0,
-  showMagicLinkOption: w = !0,
+  showLoginLink: c = !0,
+  showMagicLinkOption: m = !0,
   className: y
 }) {
-  const [f, x] = k(""), [h, R] = k(""), [N, D] = k(""), [E, P] = k(""), [u, S] = k(""), [C, M] = k(""), [T, $] = k(""), [l, U] = k(!1), [b, L] = k(""), [F, c] = k({}), { signup: H, signupTenantAdmin: I } = ue(), { tenant: g } = me(), m = { ...Qt, ...n }, v = { ...Kt, ...e }, Q = () => {
-    const A = {};
-    return f.trim() || (A.name = !0), !N.trim() && !E.trim() && (A.email = !0, A.phoneNumber = !0), u.trim() || (A.password = !0), C.trim() || (A.confirmPassword = !0), t === "tenant" && !T.trim() && (A.tenantName = !0), c(A), Object.keys(A).length === 0;
-  }, J = async (A) => {
-    if (A.preventDefault(), !!Q()) {
-      if (u !== C) {
-        L(m.passwordMismatchError), c({ confirmPassword: !0 });
+  var V;
+  const [f, F] = x(""), [g, T] = x(""), [A, L] = x(""), [M, P] = x(""), [d, v] = x(""), [N, B] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, z] = x(""), [D, p] = x({}), { signup: U, signupTenantAdmin: b } = he(), h = ((V = pe()) == null ? void 0 : V.tenant) ?? null, S = { ...Jt, ...n }, E = { ...Yt, ...e }, K = () => {
+    const H = {};
+    return f.trim() || (H.name = !0), !A.trim() && !M.trim() && (H.email = !0, H.phoneNumber = !0), d.trim() || (H.password = !0), N.trim() || (H.confirmPassword = !0), t === "tenant" && !w.trim() && (H.tenantName = !0), p(H), Object.keys(H).length === 0;
+  }, G = async (H) => {
+    if (H.preventDefault(), !!K()) {
+      if (d !== N) {
+        z(S.passwordMismatchError), p({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(g != null && g.id)) {
-        L(m.tenantNotFoundError);
+      if (t === "user" && !(h != null && h.id)) {
+        z(S.tenantNotFoundError);
         return;
       }
-      U(!0), L("");
+      I(!0), z("");
       try {
-        let V;
-        t === "tenant" ? V = await I({
-          email: N || void 0,
-          phoneNumber: E || void 0,
+        let $;
+        t === "tenant" ? $ = await b({
+          email: A || void 0,
+          phoneNumber: M || void 0,
           name: f,
-          password: u,
-          tenantName: T,
-          lastName: h || void 0
-        }) : V = await H({
-          email: N || void 0,
-          phoneNumber: E || void 0,
+          password: d,
+          tenantName: w,
+          lastName: g || void 0
+        }) : $ = await U({
+          email: A || void 0,
+          phoneNumber: M || void 0,
           name: f,
-          password: u,
-          tenantId: g.id,
-          lastName: h || void 0
-        }), r == null || r(V);
-      } catch (V) {
-        const de = V.message || m.errorMessage;
-        L(de), i == null || i(de);
+          password: d,
+          tenantId: h.id,
+          lastName: g || void 0
+        }), r == null || r($);
+      } catch ($) {
+        const ce = $.message || S.errorMessage;
+        z(ce), i == null || i(ce);
       } finally {
-        U(!1);
+        I(!1);
       }
     }
-  }, O = (A) => ({
-    ...v.input,
-    ...F[A] ? v.inputError : {}
-  }), q = () => ({
-    ...v.button,
-    ...l ? v.buttonLoading : {},
-    ...!f || !N && !E || !u || !C || l || t === "tenant" && !T ? v.buttonDisabled : {}
-  }), j = f && (N || E) && u && C && (t === "user" || T);
-  return /* @__PURE__ */ d("div", { className: y, style: v.container, children: [
-    /* @__PURE__ */ s("h2", { style: v.title, children: m.title }),
-    /* @__PURE__ */ d("form", { onSubmit: J, style: v.form, children: [
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.nameLabel }),
+  }, X = (H) => ({
+    ...E.input,
+    ...D[H] ? E.inputError : {}
+  }), W = () => ({
+    ...E.button,
+    ...k ? E.buttonLoading : {},
+    ...!f || !A && !M || !d || !N || k || t === "tenant" && !w ? E.buttonDisabled : {}
+  }), q = f && (A || M) && d && N && (t === "user" || w);
+  return /* @__PURE__ */ u("div", { className: y, style: E.container, children: [
+    /* @__PURE__ */ s("h2", { style: E.title, children: S.title }),
+    /* @__PURE__ */ u("form", { onSubmit: G, style: E.form, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.nameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -2842,145 +2861,145 @@ function _r({
             name: "name",
             type: "text",
             value: f,
-            onChange: (A) => {
-              x(A.target.value), F.name && c((V) => ({ ...V, name: !1 }));
+            onChange: (H) => {
+              F(H.target.value), D.name && p(($) => ({ ...$, name: !1 }));
             },
-            placeholder: m.namePlaceholder,
-            style: O("name"),
-            disabled: l
+            placeholder: S.namePlaceholder,
+            style: X("name"),
+            disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.lastNameLabel }),
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: h,
-            onChange: (A) => R(A.target.value),
-            placeholder: m.lastNamePlaceholder,
-            style: v.input,
-            disabled: l
+            value: g,
+            onChange: (H) => T(H.target.value),
+            placeholder: S.lastNamePlaceholder,
+            style: E.input,
+            disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.emailLabel }),
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: N,
-            onChange: (A) => {
-              D(A.target.value), F.email && c((V) => ({ ...V, email: !1, phoneNumber: !1 }));
+            value: A,
+            onChange: (H) => {
+              L(H.target.value), D.email && p(($) => ({ ...$, email: !1, phoneNumber: !1 }));
             },
-            placeholder: m.emailPlaceholder,
-            style: O("email"),
-            disabled: l
+            placeholder: S.emailPlaceholder,
+            style: X("email"),
+            disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.phoneNumberLabel }),
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "phoneNumber",
             name: "phoneNumber",
             type: "tel",
-            value: E,
-            onChange: (A) => {
-              P(A.target.value), F.phoneNumber && c((V) => ({ ...V, email: !1, phoneNumber: !1 }));
+            value: M,
+            onChange: (H) => {
+              P(H.target.value), D.phoneNumber && p(($) => ({ ...$, email: !1, phoneNumber: !1 }));
             },
-            placeholder: m.phoneNumberPlaceholder,
-            style: O("phoneNumber"),
-            disabled: l
+            placeholder: S.phoneNumberPlaceholder,
+            style: X("phoneNumber"),
+            disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ s("div", { style: v.hintText, children: m.contactMethodHint }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.passwordLabel }),
+      /* @__PURE__ */ s("div", { style: E.hintText, children: S.contactMethodHint }),
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "password",
             name: "password",
             type: "password",
-            value: u,
-            onChange: (A) => {
-              S(A.target.value), F.password && c((V) => ({ ...V, password: !1 }));
+            value: d,
+            onChange: (H) => {
+              v(H.target.value), D.password && p(($) => ({ ...$, password: !1 }));
             },
-            placeholder: m.passwordPlaceholder,
-            style: O("password"),
-            disabled: l
+            placeholder: S.passwordPlaceholder,
+            style: X("password"),
+            disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.confirmPasswordLabel }),
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: C,
-            onChange: (A) => {
-              M(A.target.value), F.confirmPassword && c((V) => ({ ...V, confirmPassword: !1 })), b === m.passwordMismatchError && L("");
+            value: N,
+            onChange: (H) => {
+              B(H.target.value), D.confirmPassword && p(($) => ({ ...$, confirmPassword: !1 })), l === S.passwordMismatchError && z("");
             },
-            placeholder: m.confirmPasswordPlaceholder,
-            style: O("confirmPassword"),
-            disabled: l
+            placeholder: S.confirmPasswordPlaceholder,
+            style: X("confirmPassword"),
+            disabled: k
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ d("div", { style: v.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: v.label, children: m.tenantNameLabel }),
+      t === "tenant" && /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: E.label, children: S.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
-            value: T,
-            onChange: (A) => {
-              $(A.target.value), F.tenantName && c((V) => ({ ...V, tenantName: !1 }));
+            value: w,
+            onChange: (H) => {
+              R(H.target.value), D.tenantName && p(($) => ({ ...$, tenantName: !1 }));
             },
-            placeholder: m.tenantNamePlaceholder,
-            style: O("tenantName"),
-            disabled: l
+            placeholder: S.tenantNamePlaceholder,
+            style: X("tenantName"),
+            disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !j || l, style: q(), children: l ? m.loadingText : m.submitButton }),
-      b && /* @__PURE__ */ s("div", { style: v.errorText, children: b })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !q || k, style: W(), children: k ? S.loadingText : S.submitButton }),
+      l && /* @__PURE__ */ s("div", { style: E.errorText, children: l })
     ] }),
-    (p || w) && /* @__PURE__ */ d("div", { style: v.linkContainer, children: [
-      w && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: v.divider, children: [
-          m.magicLinkText,
+    (c || m) && /* @__PURE__ */ u("div", { style: E.linkContainer, children: [
+      m && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: E.divider, children: [
+          S.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: a, style: v.link, children: m.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: a, style: E.link, children: S.magicLinkLink })
       ] }),
-      w && p && /* @__PURE__ */ s("div", { style: v.divider, children: m.dividerBullet }),
-      p && /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: v.divider, children: [
-          m.loginText,
+      m && c && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
+      c && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: E.divider, children: [
+          S.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: v.link, children: m.loginLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: E.link, children: S.loginLink })
       ] })
     ] })
   ] });
 }
-const Zt = {
+const Xt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -3004,7 +3023,7 @@ const Zt = {
   tenantNotFoundError: "Tenant not found",
   missingTenantOrEmailError: "Missing tenant or email",
   dividerBullet: "•"
-}, Jt = {
+}, er = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3127,7 +3146,7 @@ const Zt = {
     textDecoration: "underline"
   }
 };
-function Wr({
+function Gr({
   copy: n = {},
   styles: e = {},
   onSuccess: t,
@@ -3135,76 +3154,77 @@ function Wr({
   onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: p,
-  verifyToken: w,
+  className: c,
+  verifyToken: m,
   frontendUrl: y
 }) {
-  const [f, x] = k(""), [h, R] = k(""), [N, D] = k(""), [E, P] = k(!1), [u, S] = k(!1), [C, M] = k(""), [T, $] = k(""), [l, U] = k({}), [b, L] = k(!1), { sendMagicLink: F, verifyMagicLink: c } = ue(), { tenant: H } = me(), I = { ...Zt, ...n }, g = { ...Jt, ...e };
-  re(() => {
-    w && m(w);
-  }, [w]);
-  const m = async (q) => {
-    if (!H || !f) {
-      M(I.missingTenantOrEmailError);
+  var W;
+  const [f, F] = x(""), [g, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [d, v] = x(!1), [N, B] = x(""), [w, R] = x(""), [k, I] = x({}), [l, z] = x(!1), { sendMagicLink: D, verifyMagicLink: p } = he(), U = ((W = pe()) == null ? void 0 : W.tenant) ?? null, b = { ...Xt, ...n }, h = { ...er, ...e };
+  ne(() => {
+    m && S(m);
+  }, [m]);
+  const S = async (q) => {
+    if (!U || !f) {
+      B(b.missingTenantOrEmailError);
       return;
     }
-    S(!0), M("");
+    v(!0), B("");
     try {
-      const j = await c({
+      const V = await p({
         token: q,
         email: f
         // tenantId inferred from context automatically
       });
-      t == null || t(j);
-    } catch (j) {
-      const A = j.message || "Failed to verify magic link";
-      M(A), r == null || r(A);
+      t == null || t(V);
+    } catch (V) {
+      const H = V.message || "Failed to verify magic link";
+      B(H), r == null || r(H);
     } finally {
-      S(!1);
+      v(!1);
     }
-  }, v = () => {
+  }, E = () => {
     const q = {};
-    return f.trim() || (q.email = !0), b && !h.trim() && (q.name = !0), U(q), Object.keys(q).length === 0;
-  }, Q = async (q) => {
-    if (q.preventDefault(), !!v()) {
-      if (!(H != null && H.id)) {
-        M(I.tenantNotFoundError);
+    return f.trim() || (q.email = !0), l && !g.trim() && (q.name = !0), I(q), Object.keys(q).length === 0;
+  }, K = async (q) => {
+    if (q.preventDefault(), !!E()) {
+      if (!(U != null && U.id)) {
+        B(b.tenantNotFoundError);
         return;
       }
-      P(!0), M(""), $("");
+      P(!0), B(""), R("");
       try {
-        const j = y || (typeof window < "u" ? window.location.origin : ""), A = await F({
+        const V = y || (typeof window < "u" ? window.location.origin : ""), H = await D({
           email: f,
-          tenantId: H.id,
-          frontendUrl: j,
-          name: b ? h : void 0,
-          lastName: b ? N : void 0
+          tenantId: U.id,
+          frontendUrl: V,
+          name: l ? g : void 0,
+          lastName: l ? A : void 0
         });
-        $(I.successMessage), t == null || t(A);
-      } catch (j) {
-        const A = j.message || I.errorMessage;
-        M(A), r == null || r(A);
+        R(b.successMessage), t == null || t(H);
+      } catch (V) {
+        const H = V.message || b.errorMessage;
+        B(H), r == null || r(H);
       } finally {
         P(!1);
       }
     }
-  }, J = (q) => ({
-    ...g.input,
-    ...l[q] ? g.inputError : {}
-  }), O = () => ({
-    ...g.button,
-    ...E || u ? g.buttonLoading : {},
-    ...!f || E || u ? g.buttonDisabled : {}
+  }, G = (q) => ({
+    ...h.input,
+    ...k[q] ? h.inputError : {}
+  }), X = () => ({
+    ...h.button,
+    ...M || d ? h.buttonLoading : {},
+    ...!f || M || d ? h.buttonDisabled : {}
   });
-  return u ? /* @__PURE__ */ d("div", { className: p, style: g.container, children: [
-    /* @__PURE__ */ s("h2", { style: g.title, children: I.verifyingText }),
-    /* @__PURE__ */ s("div", { style: g.verifyingContainer, children: /* @__PURE__ */ s("div", { style: g.verifyingText, children: I.verifyingDescription }) })
-  ] }) : /* @__PURE__ */ d("div", { className: p, style: g.container, children: [
-    /* @__PURE__ */ s("h2", { style: g.title, children: I.title }),
-    /* @__PURE__ */ s("p", { style: g.description, children: I.description }),
-    /* @__PURE__ */ d("form", { onSubmit: Q, style: g.form, children: [
-      /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: g.label, children: I.emailLabel }),
+  return d ? /* @__PURE__ */ u("div", { className: c, style: h.container, children: [
+    /* @__PURE__ */ s("h2", { style: h.title, children: b.verifyingText }),
+    /* @__PURE__ */ s("div", { style: h.verifyingContainer, children: /* @__PURE__ */ s("div", { style: h.verifyingText, children: b.verifyingDescription }) })
+  ] }) : /* @__PURE__ */ u("div", { className: c, style: h.container, children: [
+    /* @__PURE__ */ s("h2", { style: h.title, children: b.title }),
+    /* @__PURE__ */ s("p", { style: h.description, children: b.description }),
+    /* @__PURE__ */ u("form", { onSubmit: K, style: h.form, children: [
+      /* @__PURE__ */ u("div", { style: h.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: h.label, children: b.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
@@ -3213,94 +3233,94 @@ function Wr({
             type: "email",
             value: f,
             onChange: (q) => {
-              x(q.target.value), l.email && U((j) => ({ ...j, email: !1 }));
+              F(q.target.value), k.email && I((V) => ({ ...V, email: !1 }));
             },
-            placeholder: I.emailPlaceholder,
-            style: J("email"),
-            disabled: E || u
+            placeholder: b.emailPlaceholder,
+            style: G("email"),
+            disabled: M || d
           }
         )
       ] }),
-      !b && /* @__PURE__ */ s("div", { style: g.toggleContainer, children: /* @__PURE__ */ s(
+      !l && /* @__PURE__ */ s("div", { style: h.toggleContainer, children: /* @__PURE__ */ s(
         "button",
         {
           type: "button",
-          onClick: () => L(!0),
-          style: g.toggleLink,
-          children: I.showNameToggle
+          onClick: () => z(!0),
+          style: h.toggleLink,
+          children: b.showNameToggle
         }
       ) }),
-      b && /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: g.label, children: I.nameLabel }),
+      l && /* @__PURE__ */ u(_, { children: [
+        /* @__PURE__ */ u("div", { style: h.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: h.label, children: b.nameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: h,
+              value: g,
               onChange: (q) => {
-                R(q.target.value), l.name && U((j) => ({ ...j, name: !1 }));
+                T(q.target.value), k.name && I((V) => ({ ...V, name: !1 }));
               },
-              placeholder: I.namePlaceholder,
-              style: J("name"),
-              disabled: E || u
+              placeholder: b.namePlaceholder,
+              style: G("name"),
+              disabled: M || d
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: g.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: g.label, children: I.lastNameLabel }),
+        /* @__PURE__ */ u("div", { style: h.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: h.label, children: b.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "lastName",
               name: "lastName",
               type: "text",
-              value: N,
-              onChange: (q) => D(q.target.value),
-              placeholder: I.lastNamePlaceholder,
-              style: g.input,
-              disabled: E || u
+              value: A,
+              onChange: (q) => L(q.target.value),
+              placeholder: b.lastNamePlaceholder,
+              style: h.input,
+              disabled: M || d
             }
           )
         ] }),
-        /* @__PURE__ */ s("div", { style: g.toggleContainer, children: /* @__PURE__ */ s(
+        /* @__PURE__ */ s("div", { style: h.toggleContainer, children: /* @__PURE__ */ s(
           "button",
           {
             type: "button",
             onClick: () => {
-              L(!1), R(""), D("");
+              z(!1), T(""), L("");
             },
-            style: g.toggleLink,
-            children: I.hideNameToggle
+            style: h.toggleLink,
+            children: b.hideNameToggle
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !f || E || u, style: O(), children: E ? I.loadingText : I.submitButton }),
-      C && /* @__PURE__ */ s("div", { style: g.errorText, children: C }),
-      T && /* @__PURE__ */ s("div", { style: g.successText, children: T })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !f || M || d, style: X(), children: M ? b.loadingText : b.submitButton }),
+      N && /* @__PURE__ */ s("div", { style: h.errorText, children: N }),
+      w && /* @__PURE__ */ s("div", { style: h.successText, children: w })
     ] }),
-    a && /* @__PURE__ */ d("div", { style: g.linkContainer, children: [
-      /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: g.divider, children: [
-          I.loginText,
+    a && /* @__PURE__ */ u("div", { style: h.linkContainer, children: [
+      /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: h.divider, children: [
+          b.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: i, style: g.link, children: I.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: h.link, children: b.loginLink })
       ] }),
-      /* @__PURE__ */ s("div", { style: g.divider, children: I.dividerBullet }),
-      /* @__PURE__ */ d("div", { children: [
-        /* @__PURE__ */ d("span", { style: g.divider, children: [
-          I.signupText,
+      /* @__PURE__ */ s("div", { style: h.divider, children: b.dividerBullet }),
+      /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: h.divider, children: [
+          b.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: g.link, children: I.signupLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: h.link, children: b.signupLink })
       ] })
     ] })
   ] });
 }
-const Yt = {
+const tr = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
@@ -3309,7 +3329,7 @@ const Yt = {
   retryButton: "Try Again",
   backToLoginButton: "Back to Login",
   missingParamsError: "Missing required parameters: token or email"
-}, Ye = {
+}, tt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3402,7 +3422,7 @@ const Yt = {
   backButtonHover: {
     backgroundColor: "#e5e7eb"
   }
-}, Xt = () => /* @__PURE__ */ s("div", { style: Ye.spinner }), er = () => /* @__PURE__ */ d(
+}, rr = () => /* @__PURE__ */ s("div", { style: tt.spinner }), nr = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "48",
@@ -3419,7 +3439,7 @@ const Yt = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), tr = () => /* @__PURE__ */ d(
+), sr = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "48",
@@ -3437,12 +3457,12 @@ const Yt = {
       /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), rr = {
-  loading: /* @__PURE__ */ s(Xt, {}),
-  success: /* @__PURE__ */ s(er, {}),
-  error: /* @__PURE__ */ s(tr, {})
+), ir = {
+  loading: /* @__PURE__ */ s(rr, {}),
+  success: /* @__PURE__ */ s(nr, {}),
+  error: /* @__PURE__ */ s(sr, {})
 };
-function Vr({
+function Kr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -3450,102 +3470,102 @@ function Vr({
   onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: p,
-  token: w,
+  className: c,
+  token: m,
   email: y,
   appId: f,
-  tenantSlug: x,
-  autoRedirectDelay: h = 3e3
+  tenantSlug: F,
+  autoRedirectDelay: g = 3e3
 }) {
-  const [R, N] = k("verifying"), [D, E] = k(""), { verifyMagicLink: P } = ue(), u = { ...Yt, ...n }, S = { ...Ye, ...e }, C = { ...rr, ...t }, M = () => {
+  const [T, A] = x("verifying"), [L, M] = x(""), { verifyMagicLink: P } = he(), d = { ...tr, ...n }, v = { ...tt, ...e }, N = { ...ir, ...t }, B = () => {
     if (typeof window > "u") return {};
-    const b = new URLSearchParams(window.location.search);
+    const l = new URLSearchParams(window.location.search);
     return {
-      token: w || b.get("token") || "",
-      email: y || b.get("email") || "",
-      appId: f || b.get("appId") || "",
-      tenantSlug: x || b.get("tenantSlug") || void 0
+      token: m || l.get("token") || "",
+      email: y || l.get("email") || "",
+      appId: f || l.get("appId") || "",
+      tenantSlug: F || l.get("tenantSlug") || void 0
     };
-  }, T = async () => {
-    N("verifying"), E("");
+  }, w = async () => {
+    A("verifying"), M("");
     try {
-      const b = M();
-      if (!b.token || !b.email)
-        throw new Error(u.missingParamsError);
-      const L = await P({
-        token: b.token,
-        email: b.email,
-        tenantSlug: b.tenantSlug
+      const l = B();
+      if (!l.token || !l.email)
+        throw new Error(d.missingParamsError);
+      const z = await P({
+        token: l.token,
+        email: l.email,
+        tenantSlug: l.tenantSlug
       });
-      N("success"), r == null || r(L), h > 0 && setTimeout(() => {
-        N("redirecting");
-      }, h);
-    } catch (b) {
-      const L = b.message || u.errorMessage;
-      E(L), N("error"), i == null || i(L);
+      A("success"), r == null || r(z), g > 0 && setTimeout(() => {
+        A("redirecting");
+      }, g);
+    } catch (l) {
+      const z = l.message || d.errorMessage;
+      M(z), A("error"), i == null || i(z);
     }
-  }, $ = () => {
-    o == null || o(), T();
-  }, l = () => {
+  }, R = () => {
+    o == null || o(), w();
+  }, k = () => {
     a == null || a();
   };
-  re(() => {
-    T();
+  ne(() => {
+    w();
   }, []);
-  const U = () => {
-    switch (R) {
+  const I = () => {
+    switch (T) {
       case "verifying":
-        return /* @__PURE__ */ d("div", { style: S.message, children: [
-          C.loading,
-          u.verifyingMessage
+        return /* @__PURE__ */ u("div", { style: v.message, children: [
+          N.loading,
+          d.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ d(_, { children: [
-          C.success,
-          /* @__PURE__ */ s("div", { style: S.successMessage, children: u.successMessage })
+        return /* @__PURE__ */ u(_, { children: [
+          N.success,
+          /* @__PURE__ */ s("div", { style: v.successMessage, children: d.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ d(_, { children: [
-          C.loading,
-          /* @__PURE__ */ s("div", { style: S.message, children: u.redirectingMessage })
+        return /* @__PURE__ */ u(_, { children: [
+          N.loading,
+          /* @__PURE__ */ s("div", { style: v.message, children: d.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ d(_, { children: [
-          C.error,
-          /* @__PURE__ */ s("div", { style: S.errorMessage, children: D || u.errorMessage }),
-          /* @__PURE__ */ d("div", { style: S.buttonContainer, children: [
+        return /* @__PURE__ */ u(_, { children: [
+          N.error,
+          /* @__PURE__ */ s("div", { style: v.errorMessage, children: L || d.errorMessage }),
+          /* @__PURE__ */ u("div", { style: v.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: $,
-                style: S.retryButton,
-                onMouseOver: (b) => {
-                  Object.assign(b.currentTarget.style, S.retryButtonHover);
+                onClick: R,
+                style: v.retryButton,
+                onMouseOver: (l) => {
+                  Object.assign(l.currentTarget.style, v.retryButtonHover);
                 },
-                onMouseOut: (b) => {
-                  const L = S.retryButton || {};
-                  Object.keys(S.retryButtonHover || {}).forEach((F) => {
-                    b.currentTarget.style[F] = L[F] ?? "";
+                onMouseOut: (l) => {
+                  const z = v.retryButton || {};
+                  Object.keys(v.retryButtonHover || {}).forEach((D) => {
+                    l.currentTarget.style[D] = z[D] ?? "";
                   });
                 },
-                children: u.retryButton
+                children: d.retryButton
               }
             ),
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: l,
-                style: S.backButton,
-                onMouseOver: (b) => {
-                  Object.assign(b.currentTarget.style, S.backButtonHover);
+                onClick: k,
+                style: v.backButton,
+                onMouseOver: (l) => {
+                  Object.assign(l.currentTarget.style, v.backButtonHover);
                 },
-                onMouseOut: (b) => {
-                  const L = S.backButton || {};
-                  Object.keys(S.backButtonHover || {}).forEach((F) => {
-                    b.currentTarget.style[F] = L[F] ?? "";
+                onMouseOut: (l) => {
+                  const z = v.backButton || {};
+                  Object.keys(v.backButtonHover || {}).forEach((D) => {
+                    l.currentTarget.style[D] = z[D] ?? "";
                   });
                 },
-                children: u.backToLoginButton
+                children: d.backToLoginButton
               }
             )
           ] })
@@ -3554,18 +3574,18 @@ function Vr({
         return null;
     }
   };
-  return /* @__PURE__ */ d("div", { style: S.container, className: p, children: [
+  return /* @__PURE__ */ u("div", { style: v.container, className: c, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ s("h1", { style: S.title, children: u.title }),
-    U()
+    /* @__PURE__ */ s("h1", { style: v.title, children: d.title }),
+    I()
   ] });
 }
-const nr = {
+const or = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3591,7 +3611,7 @@ const nr = {
   haveTokenLink: "I have a token",
   tenantNotFoundError: "Tenant not found",
   dividerBullet: "•"
-}, sr = {
+}, ar = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3687,7 +3707,7 @@ const nr = {
     color: "#6b7280"
   }
 };
-function jr({
+function Qr({
   copy: n = {},
   styles: e = {},
   mode: t = "request",
@@ -3695,104 +3715,105 @@ function jr({
   onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: p,
-  className: w
+  onModeChange: c,
+  className: m
 }) {
-  const [y, f] = k(""), [x, h] = k(r), [R, N] = k(""), [D, E] = k(""), [P, u] = k(!1), [S, C] = k(""), [M, T] = k(""), [$, l] = k({}), { requestPasswordReset: U, confirmPasswordReset: b } = ue(), { tenant: L } = me(), F = { ...nr, ...n }, c = { ...sr, ...e }, H = () => {
-    const O = {};
-    return y.trim() || (O.email = !0), l(O), Object.keys(O).length === 0;
-  }, I = () => {
-    const O = {};
-    return x.trim() || (O.token = !0), R.trim() || (O.newPassword = !0), D.trim() || (O.confirmPassword = !0), l(O), Object.keys(O).length === 0;
-  }, g = async (O) => {
-    if (O.preventDefault(), !!H()) {
-      if (!(L != null && L.id)) {
-        C(F.tenantNotFoundError);
+  var X;
+  const [y, f] = x(""), [F, g] = x(r), [T, A] = x(""), [L, M] = x(""), [P, d] = x(!1), [v, N] = x(""), [B, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = he(), z = ((X = pe()) == null ? void 0 : X.tenant) ?? null, D = { ...or, ...n }, p = { ...ar, ...e }, U = () => {
+    const W = {};
+    return y.trim() || (W.email = !0), k(W), Object.keys(W).length === 0;
+  }, b = () => {
+    const W = {};
+    return F.trim() || (W.token = !0), T.trim() || (W.newPassword = !0), L.trim() || (W.confirmPassword = !0), k(W), Object.keys(W).length === 0;
+  }, h = async (W) => {
+    if (W.preventDefault(), !!U()) {
+      if (!(z != null && z.id)) {
+        N(D.tenantNotFoundError);
         return;
       }
-      u(!0), C(""), T("");
+      d(!0), N(""), w("");
       try {
-        await U({ email: y, tenantId: L.id }), T(F.successMessage), i == null || i();
+        await I({ email: y, tenantId: z.id }), w(D.successMessage), i == null || i();
       } catch (q) {
-        const j = q.message || F.errorMessage;
-        C(j), o == null || o(j);
+        const V = q.message || D.errorMessage;
+        N(V), o == null || o(V);
       } finally {
-        u(!1);
+        d(!1);
       }
     }
-  }, m = async (O) => {
-    if (O.preventDefault(), !!I()) {
-      if (R !== D) {
-        C(F.passwordMismatchError), l({ confirmPassword: !0 });
+  }, S = async (W) => {
+    if (W.preventDefault(), !!b()) {
+      if (T !== L) {
+        N(D.passwordMismatchError), k({ confirmPassword: !0 });
         return;
       }
-      u(!0), C(""), T("");
+      d(!0), N(""), w("");
       try {
-        await b({ token: x, newPassword: R }), T(F.resetSuccessMessage), i == null || i();
+        await l({ token: F, newPassword: T }), w(D.resetSuccessMessage), i == null || i();
       } catch (q) {
-        const j = q.message || F.errorMessage;
-        C(j), o == null || o(j);
+        const V = q.message || D.errorMessage;
+        N(V), o == null || o(V);
       } finally {
-        u(!1);
+        d(!1);
       }
     }
-  }, v = (O) => ({
-    ...c.input,
-    ...$[O] ? c.inputError : {}
-  }), Q = () => ({
-    ...c.button,
-    ...P ? c.buttonLoading : {}
+  }, E = (W) => ({
+    ...p.input,
+    ...R[W] ? p.inputError : {}
+  }), K = () => ({
+    ...p.button,
+    ...P ? p.buttonLoading : {}
   });
   if (t === "reset") {
-    const O = x && R && D;
-    return /* @__PURE__ */ d("div", { className: w, style: c.container, children: [
-      /* @__PURE__ */ s("h2", { style: c.title, children: F.resetTitle }),
-      /* @__PURE__ */ s("p", { style: c.subtitle, children: F.resetSubtitle }),
-      /* @__PURE__ */ d("form", { onSubmit: m, style: c.form, children: [
-        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: F.tokenLabel }),
+    const W = F && T && L;
+    return /* @__PURE__ */ u("div", { className: m, style: p.container, children: [
+      /* @__PURE__ */ s("h2", { style: p.title, children: D.resetTitle }),
+      /* @__PURE__ */ s("p", { style: p.subtitle, children: D.resetSubtitle }),
+      /* @__PURE__ */ u("form", { onSubmit: S, style: p.form, children: [
+        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: p.label, children: D.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: x,
+              value: F,
               onChange: (q) => {
-                h(q.target.value), $.token && l((j) => ({ ...j, token: !1 }));
+                g(q.target.value), R.token && k((V) => ({ ...V, token: !1 }));
               },
-              placeholder: F.tokenPlaceholder,
-              style: v("token"),
+              placeholder: D.tokenPlaceholder,
+              style: E("token"),
               disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: F.newPasswordLabel }),
+        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: p.label, children: D.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: R,
+              value: T,
               onChange: (q) => {
-                N(q.target.value), $.newPassword && l((j) => ({ ...j, newPassword: !1 }));
+                A(q.target.value), R.newPassword && k((V) => ({ ...V, newPassword: !1 }));
               },
-              placeholder: F.newPasswordPlaceholder,
-              style: v("newPassword"),
+              placeholder: D.newPasswordPlaceholder,
+              style: E("newPassword"),
               disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: c.label, children: F.confirmPasswordLabel }),
+        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: p.label, children: D.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: D,
+              value: L,
               onChange: (q) => {
-                E(q.target.value), $.confirmPassword && l((j) => ({ ...j, confirmPassword: !1 })), S === F.passwordMismatchError && C("");
+                M(q.target.value), R.confirmPassword && k((V) => ({ ...V, confirmPassword: !1 })), v === D.passwordMismatchError && N("");
               },
-              placeholder: F.confirmPasswordPlaceholder,
-              style: v("confirmPassword"),
+              placeholder: D.confirmPasswordPlaceholder,
+              style: E("confirmPassword"),
               disabled: P
             }
           )
@@ -3801,43 +3822,43 @@ function jr({
           "button",
           {
             type: "submit",
-            disabled: !O || P,
+            disabled: !W || P,
             style: {
-              ...Q(),
-              ...!O || P ? c.buttonDisabled : {}
+              ...K(),
+              ...!W || P ? p.buttonDisabled : {}
             },
-            children: P ? F.resetLoadingText : F.resetSubmitButton
+            children: P ? D.resetLoadingText : D.resetSubmitButton
           }
         ),
-        S && /* @__PURE__ */ s("div", { style: c.errorText, children: S }),
-        M && /* @__PURE__ */ s("div", { style: c.successText, children: M })
+        v && /* @__PURE__ */ s("div", { style: p.errorText, children: v }),
+        B && /* @__PURE__ */ s("div", { style: p.successText, children: B })
       ] }),
-      /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
-        p && /* @__PURE__ */ d(_, { children: [
-          /* @__PURE__ */ s("span", { style: c.modeSwitchDivider, children: F.dividerBullet }),
-          /* @__PURE__ */ s("a", { onClick: () => p("request"), style: c.link, children: F.requestNewLinkLink })
+      /* @__PURE__ */ u("div", { style: p.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: p.link, children: D.backToLoginLink }),
+        c && /* @__PURE__ */ u(_, { children: [
+          /* @__PURE__ */ s("span", { style: p.modeSwitchDivider, children: D.dividerBullet }),
+          /* @__PURE__ */ s("a", { onClick: () => c("request"), style: p.link, children: D.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
-  const J = y;
-  return /* @__PURE__ */ d("div", { className: w, style: c.container, children: [
-    /* @__PURE__ */ s("h2", { style: c.title, children: F.title }),
-    /* @__PURE__ */ s("p", { style: c.subtitle, children: F.subtitle }),
-    /* @__PURE__ */ d("form", { onSubmit: g, style: c.form, children: [
-      /* @__PURE__ */ d("div", { style: c.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: c.label, children: F.emailLabel }),
+  const G = y;
+  return /* @__PURE__ */ u("div", { className: m, style: p.container, children: [
+    /* @__PURE__ */ s("h2", { style: p.title, children: D.title }),
+    /* @__PURE__ */ s("p", { style: p.subtitle, children: D.subtitle }),
+    /* @__PURE__ */ u("form", { onSubmit: h, style: p.form, children: [
+      /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: p.label, children: D.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
             value: y,
-            onChange: (O) => {
-              f(O.target.value), $.email && l((q) => ({ ...q, email: !1 }));
+            onChange: (W) => {
+              f(W.target.value), R.email && k((q) => ({ ...q, email: !1 }));
             },
-            placeholder: F.emailPlaceholder,
-            style: v("email"),
+            placeholder: D.emailPlaceholder,
+            style: E("email"),
             disabled: P
           }
         )
@@ -3846,27 +3867,27 @@ function jr({
         "button",
         {
           type: "submit",
-          disabled: !J || P,
+          disabled: !G || P,
           style: {
-            ...Q(),
-            ...!J || P ? c.buttonDisabled : {}
+            ...K(),
+            ...!G || P ? p.buttonDisabled : {}
           },
-          children: P ? F.loadingText : F.submitButton
+          children: P ? D.loadingText : D.submitButton
         }
       ),
-      S && /* @__PURE__ */ s("div", { style: c.errorText, children: S }),
-      M && /* @__PURE__ */ s("div", { style: c.successText, children: M })
+      v && /* @__PURE__ */ s("div", { style: p.errorText, children: v }),
+      B && /* @__PURE__ */ s("div", { style: p.successText, children: B })
     ] }),
-    /* @__PURE__ */ d("div", { style: c.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
-      p && /* @__PURE__ */ d(_, { children: [
-        /* @__PURE__ */ s("span", { style: c.modeSwitchDivider, children: F.dividerBullet }),
-        /* @__PURE__ */ s("a", { onClick: () => p("reset"), style: c.link, children: F.haveTokenLink })
+    /* @__PURE__ */ u("div", { style: p.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: p.link, children: D.backToLoginLink }),
+      c && /* @__PURE__ */ u(_, { children: [
+        /* @__PURE__ */ s("span", { style: p.modeSwitchDivider, children: D.dividerBullet }),
+        /* @__PURE__ */ s("a", { onClick: () => c("reset"), style: p.link, children: D.haveTokenLink })
       ] })
     ] })
   ] });
 }
-const ir = () => /* @__PURE__ */ s(
+const lr = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3878,7 +3899,7 @@ const ir = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), or = ({ error: n, retry: e }) => /* @__PURE__ */ d(
+), cr = ({ error: n, retry: e }) => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -3912,43 +3933,43 @@ const ir = () => /* @__PURE__ */ s(
     ]
   }
 );
-function Gr({
+function Zr({
   children: n,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = Se(), p = xe(), w = Fe(), y = Ke(), f = Ze(), x = (p == null ? void 0 : p.isTenantLoading) ?? !1, h = (p == null ? void 0 : p.tenantError) ?? null, R = (p == null ? void 0 : p.tenantSlug) ?? null, N = (p == null ? void 0 : p.retryTenant) ?? (() => {
-  }), D = (w == null ? void 0 : w.isAuthReady) ?? !0, E = (y == null ? void 0 : y.isReady) ?? !0, P = (f == null ? void 0 : f.isReady) ?? !0, u = r && p && R, T = i || u && x || w && !D || y && !E || f && !P, $ = o || (u ? h : null), l = () => {
-    o && a(), h && p && N();
+  const { isAppLoading: i, appError: o, retryApp: a } = Ae(), c = pe(), m = $e(), y = Ye(), f = Xe(), F = (c == null ? void 0 : c.isTenantLoading) ?? !1, g = (c == null ? void 0 : c.tenantError) ?? null, T = (c == null ? void 0 : c.tenantSlug) ?? null, A = (c == null ? void 0 : c.retryTenant) ?? (() => {
+  }), L = (m == null ? void 0 : m.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (f == null ? void 0 : f.isReady) ?? !0, d = r && c && T, w = i || d && F || m && !L || y && !M || f && !P, R = o || (d ? g : null), k = () => {
+    o && a(), g && c && A();
   };
-  if (T)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(ir, {}) });
-  if ($) {
-    const U = typeof t == "function" ? t($, l) : t || /* @__PURE__ */ s(or, { error: $, retry: l });
-    return /* @__PURE__ */ s(_, { children: U });
+  if (w)
+    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(lr, {}) });
+  if (R) {
+    const I = typeof t == "function" ? t(R, k) : t || /* @__PURE__ */ s(cr, { error: R, retry: k });
+    return /* @__PURE__ */ s(_, { children: I });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-function Qr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Se(), o = xe(), a = Fe(), p = Ke(), w = Ze(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, f = (o == null ? void 0 : o.tenantError) ?? null, x = (o == null ? void 0 : o.tenant) ?? null, h = (o == null ? void 0 : o.tenantSlug) ?? null, R = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), N = (a == null ? void 0 : a.isAuthReady) ?? !0, D = (p == null ? void 0 : p.isReady) ?? !0, E = (w == null ? void 0 : w.isReady) ?? !0, P = n && o && h, M = e || P && y || a && !N || p && !D || w && !E, T = t || (P ? f : null);
+function Jr(n = !0) {
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Ae(), o = pe(), a = $e(), c = Ye(), m = Xe(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, f = (o == null ? void 0 : o.tenantError) ?? null, F = (o == null ? void 0 : o.tenant) ?? null, g = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, L = (c == null ? void 0 : c.isReady) ?? !0, M = (m == null ? void 0 : m.isReady) ?? !0, P = n && o && g, B = e || P && y || a && !A || c && !L || m && !M, w = t || (P ? f : null);
   return {
-    isLoading: M,
-    error: T,
-    isReady: !M && !T && i !== null && (!P || x !== null),
+    isLoading: B,
+    error: w,
+    isReady: !B && !w && i !== null && (!P || F !== null),
     retry: () => {
-      t && r(), f && o && R();
+      t && r(), f && o && T();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: y, error: f, data: x } : null,
-    auth: a ? { isReady: N } : null,
-    featureFlags: p ? { isReady: D } : null,
-    subscription: w ? { isReady: E } : null
+    tenant: o ? { isLoading: y, error: f, data: F } : null,
+    auth: a ? { isReady: A } : null,
+    featureFlags: c ? { isReady: L } : null,
+    subscription: m ? { isReady: M } : null
   };
 }
-const ar = {
+const dr = {
   wrapper: {
     position: "relative"
   },
@@ -3992,7 +4013,7 @@ const ar = {
     marginLeft: 8
   }
 };
-function Kr({
+function Yr({
   tenants: n,
   currentTenantId: e,
   onSelect: t,
@@ -4000,81 +4021,81 @@ function Kr({
   className: i = "",
   dropdownClassName: o = "",
   itemClassName: a = "",
-  renderItem: p,
-  placeholder: w = "Select tenant",
+  renderItem: c,
+  placeholder: m = "Select tenant",
   disabled: y = !1,
   showCurrentTenant: f = !0
 }) {
-  var M;
-  const x = { ...ar, ...r }, h = Fe(), [R, N] = k(!1), D = Me(null), E = n ?? (h == null ? void 0 : h.userTenants) ?? [], P = e ?? ((M = h == null ? void 0 : h.currentUser) == null ? void 0 : M.tenantId) ?? null, u = async (T) => {
-    N(!1), t ? t(T) : h != null && h.switchToTenant && await h.switchToTenant(T);
+  var B;
+  const F = { ...dr, ...r }, g = $e(), [T, A] = x(!1), L = Ne(null), M = n ?? (g == null ? void 0 : g.userTenants) ?? [], P = e ?? ((B = g == null ? void 0 : g.currentUser) == null ? void 0 : B.tenantId) ?? null, d = async (w) => {
+    A(!1), t ? t(w) : g != null && g.switchToTenant && await g.switchToTenant(w);
   };
-  re(() => {
-    const T = ($) => {
-      D.current && !D.current.contains($.target) && N(!1);
+  ne(() => {
+    const w = (R) => {
+      L.current && !L.current.contains(R.target) && A(!1);
     };
-    return document.addEventListener("mousedown", T), () => document.removeEventListener("mousedown", T);
+    return document.addEventListener("mousedown", w), () => document.removeEventListener("mousedown", w);
   }, []);
-  const S = E.find((T) => T.id === P);
-  if (E.length === 0)
+  const v = M.find((w) => w.id === P);
+  if (M.length === 0)
     return null;
-  if (E.length === 1 && f)
-    return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: E[0].name }) });
-  const C = (T, $) => /* @__PURE__ */ d("span", { style: { fontWeight: $ ? "bold" : "normal" }, children: [
-    T.name,
-    T.role && /* @__PURE__ */ d("span", { style: x.itemRole, children: [
+  if (M.length === 1 && f)
+    return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: M[0].name }) });
+  const N = (w, R) => /* @__PURE__ */ u("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
+    w.name,
+    w.role && /* @__PURE__ */ u("span", { style: F.itemRole, children: [
       "(",
-      T.role,
+      w.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ d("div", { ref: D, className: i, style: x.wrapper, children: [
-    /* @__PURE__ */ d(
+  return /* @__PURE__ */ u("div", { ref: L, className: i, style: F.wrapper, children: [
+    /* @__PURE__ */ u(
       "button",
       {
         type: "button",
-        onClick: () => !y && N(!R),
+        onClick: () => !y && A(!T),
         disabled: y,
         style: {
-          ...x.button,
-          ...y ? x.buttonDisabled : {}
+          ...F.button,
+          ...y ? F.buttonDisabled : {}
         },
         children: [
-          S ? S.name : w,
-          /* @__PURE__ */ s("span", { style: x.arrow, children: R ? "▲" : "▼" })
+          v ? v.name : m,
+          /* @__PURE__ */ s("span", { style: F.arrow, children: T ? "▲" : "▼" })
         ]
       }
     ),
-    R && /* @__PURE__ */ s("div", { className: o, style: x.dropdown, children: E.map((T) => {
-      const $ = T.id === P;
+    T && /* @__PURE__ */ s("div", { className: o, style: F.dropdown, children: M.map((w) => {
+      const R = w.id === P;
       return /* @__PURE__ */ s(
         "div",
         {
           className: a,
-          onClick: () => u(T.id),
+          onClick: () => d(w.id),
           style: {
-            ...x.item,
-            ...$ ? x.itemSelected : {}
+            ...F.item,
+            ...R ? F.itemSelected : {}
           },
-          onMouseEnter: (l) => {
-            $ || Object.assign(l.currentTarget.style, x.itemHover);
+          onMouseEnter: (k) => {
+            R || Object.assign(k.currentTarget.style, F.itemHover);
           },
-          onMouseLeave: (l) => {
-            if (!$) {
-              const U = x.item || {};
-              Object.keys(x.itemHover || {}).forEach((b) => {
-                l.currentTarget.style[b] = U[b] ?? "";
+          onMouseLeave: (k) => {
+            if (!R) {
+              const I = F.item || {};
+              Object.keys(F.itemHover || {}).forEach((l) => {
+                k.currentTarget.style[l] = I[l] ?? "";
               });
             }
           },
-          children: p ? p(T, $) : C(T, $)
+          children: c ? c(w, R) : N(w, R)
         },
-        T.id
+        w.id
       );
     }) })
   ] });
 }
-class Zr {
+class Xr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4142,7 +4163,7 @@ class Zr {
     };
   }
 }
-class Jr {
+class en {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4193,7 +4214,7 @@ class Jr {
     });
   }
 }
-class Yr {
+class tn {
   constructor(e) {
     this.httpService = e;
   }
@@ -4202,7 +4223,7 @@ class Yr {
     return await this.httpService.get("/health");
   }
 }
-class Xr {
+class rn {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -4324,139 +4345,139 @@ class Xr {
     }), t;
   }
 }
-const Xe = "returnTo", Ee = "zone_return_to", Ie = "zone_return_to";
-function en(n = {}) {
+const rt = "returnTo", Me = "zone_return_to", Le = "zone_return_to";
+function nn(n = {}) {
   const {
     zoneRoots: e = {},
-    returnToParam: t = Xe,
+    returnToParam: t = rt,
     returnToStorage: r = "url"
-  } = n, i = pt(), [o, a] = ft(), { isAuthenticated: p, currentUser: w } = ue(), { tenant: y } = ge(), f = K(() => ({ ...Ue, ...e }), [e]), x = !!y, h = w == null ? void 0 : w.userType, R = K(() => {
+  } = n, i = mt(), [o, a] = yt(), { isAuthenticated: c, currentUser: m } = he(), { tenant: y } = Te(), f = Z(() => ({ ...Oe, ...e }), [e]), F = !!y, g = m == null ? void 0 : m.userType, T = Z(() => {
     switch (r) {
       case "url":
         return o.get(t);
       case "session":
-        return sessionStorage.getItem(Ee);
+        return sessionStorage.getItem(Me);
       case "local":
-        return localStorage.getItem(Ie);
+        return localStorage.getItem(Le);
       default:
         return null;
     }
-  }, [r, o, t]), N = se(() => {
+  }, [r, o, t]), A = oe(() => {
     switch (r) {
       case "url": {
-        const u = new URLSearchParams(o);
-        u.delete(t), a(u, { replace: !0 });
+        const d = new URLSearchParams(o);
+        d.delete(t), a(d, { replace: !0 });
         break;
       }
       case "session":
-        sessionStorage.removeItem(Ee);
+        sessionStorage.removeItem(Me);
         break;
       case "local":
-        localStorage.removeItem(Ie);
+        localStorage.removeItem(Le);
         break;
     }
-  }, [r, o, t, a]), D = se(
-    (u) => {
+  }, [r, o, t, a]), L = oe(
+    (d) => {
       switch (r) {
         case "url": {
-          const S = new URLSearchParams(o);
-          S.set(t, u), a(S, { replace: !0 });
+          const v = new URLSearchParams(o);
+          v.set(t, d), a(v, { replace: !0 });
           break;
         }
         case "session":
-          sessionStorage.setItem(Ee, u);
+          sessionStorage.setItem(Me, d);
           break;
         case "local":
-          localStorage.setItem(Ie, u);
+          localStorage.setItem(Le, d);
           break;
       }
     },
     [r, o, t, a]
-  ), E = se(
-    (u) => {
-      const S = f[u] || f.default;
-      i(S);
+  ), M = oe(
+    (d) => {
+      const v = f[d] || f.default;
+      i(v);
     },
     [i, f]
-  ), P = se(() => x ? p ? h === oe.TENANT_ADMIN ? f.tenantAdmin : f.tenantUser : f.tenantGuest : p ? h === oe.TENANT_ADMIN ? f.publicAdmin : f.publicUser : f.publicGuest, [x, p, h, f]);
+  ), P = oe(() => F ? c ? g === ae.TENANT_ADMIN ? f.tenantAdmin : f.tenantUser : f.tenantGuest : c ? g === ae.TENANT_ADMIN ? f.publicAdmin : f.publicUser : f.publicGuest, [F, c, g, f]);
   return {
-    returnToUrl: R,
-    clearReturnTo: N,
-    setReturnTo: D,
-    navigateToZone: E,
+    returnToUrl: T,
+    clearReturnTo: A,
+    setReturnTo: L,
+    navigateToZone: M,
     getSmartRedirect: P
   };
 }
-function tn(n, e, t = Xe, r = "url") {
+function sn(n, e, t = rt, r = "url") {
   if (!e || r !== "url")
     return n;
   const i = new URL(n, window.location.origin);
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  Fr as AdminZone,
-  Xr as ApiMappers,
-  qe as AppApiService,
-  Gr as AppLoader,
-  mr as AppProvider,
-  yt as AuthApiService,
-  Sr as AuthProvider,
-  Nr as AuthenticatedZone,
-  Je as DEFAULT_ZONE_PRESETS,
-  Ue as DEFAULT_ZONE_ROOTS,
-  qr as FeatureFlag,
-  Pt as FeatureFlagApiService,
-  Tr as FeatureFlagProvider,
-  Dr as GuestZone,
-  Yr as HealthApiService,
-  le as HttpService,
-  Ir as LandingRoute,
-  zr as LoginForm,
-  Wr as MagicLinkForm,
-  Vr as MagicLinkVerify,
-  $r as OpenZone,
-  jr as PasswordRecoveryForm,
-  Zr as PermissionApiService,
-  Pr as Protected,
-  Rr as ProtectedRoute,
-  Lr as PublicZone,
-  ze as RoleApiService,
-  xr as RoutingProvider,
-  ne as SessionExpiredError,
-  we as SessionManager,
-  _r as SignupForm,
-  Et as SubscriptionApiService,
-  Or as SubscriptionGuard,
-  Jr as SubscriptionPlanApiService,
-  kr as SubscriptionProvider,
-  be as TenantApiService,
-  Ur as TenantAuthenticatedZone,
-  Br as TenantGuestZone,
-  Hr as TenantOpenZone,
-  wr as TenantProvider,
-  Er as TenantRoute,
-  Kr as TenantSelector,
-  Mr as TenantZone,
-  mt as TokenRefreshError,
-  gt as TokenRefreshTimeoutError,
-  wt as UserApiService,
-  oe as UserType,
+  $r as AdminZone,
+  rn as ApiMappers,
+  Ve as AppApiService,
+  Zr as AppLoader,
+  br as AppProvider,
+  vt as AuthApiService,
+  xr as AuthProvider,
+  Ur as AuthenticatedZone,
+  et as DEFAULT_ZONE_PRESETS,
+  Oe as DEFAULT_ZONE_ROOTS,
+  Vr as FeatureFlag,
+  It as FeatureFlagApiService,
+  Ar as FeatureFlagProvider,
+  Br as GuestZone,
+  tn as HealthApiService,
+  de as HttpService,
+  Nr as LandingRoute,
+  Wr as LoginForm,
+  Gr as MagicLinkForm,
+  Kr as MagicLinkVerify,
+  Hr as OpenZone,
+  Qr as PasswordRecoveryForm,
+  Xr as PermissionApiService,
+  Ir as Protected,
+  Mr as ProtectedRoute,
+  Dr as PublicZone,
+  We as RoleApiService,
+  Rr as RoutingProvider,
+  se as SessionExpiredError,
+  be as SessionManager,
+  jr as SignupForm,
+  Lt as SubscriptionApiService,
+  zr as SubscriptionGuard,
+  en as SubscriptionPlanApiService,
+  Pr as SubscriptionProvider,
+  ve as TenantApiService,
+  Or as TenantAuthenticatedZone,
+  _r as TenantGuestZone,
+  qr as TenantOpenZone,
+  Sr as TenantProvider,
+  Lr as TenantRoute,
+  Yr as TenantSelector,
+  Fr as TenantZone,
+  bt as TokenRefreshError,
+  wt as TokenRefreshTimeoutError,
+  St as UserApiService,
+  ae as UserType,
   Cr as UserZone,
-  ce as ZoneRoute,
-  tn as buildRedirectUrl,
-  yr as useApi,
-  Se as useApp,
-  Qr as useAppLoaderState,
-  ue as useAuth,
-  Rt as useFeatureFlags,
-  Ar as useRouting,
-  Mt as useRoutingOptional,
-  vr as useSettings,
-  It as useSubscription,
-  ge as useTenant,
-  me as useTenantInfo,
-  xe as useTenantOptional,
-  br as useTenantSettings,
-  en as useZoneNavigation
+  ue as ZoneRoute,
+  sn as buildRedirectUrl,
+  vr as useApi,
+  Ae as useApp,
+  Jr as useAppLoaderState,
+  he as useAuth,
+  Mt as useFeatureFlags,
+  Er as useRouting,
+  Ft as useRoutingOptional,
+  kr as useSettings,
+  Nt as useSubscription,
+  Te as useTenant,
+  Je as useTenantInfo,
+  pe as useTenantOptional,
+  Tr as useTenantSettings,
+  nn as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map