@skylabs-digital/react-identity-access 2.27.0 → 2.29.0

package/dist/index.es.js

@@ -1,5 +1,5 @@
-import { jsx as s, Fragment as _, jsxs as u } from "react/jsx-runtime";
-import { createContext as ye, useMemo as Z, useState as x, useCallback as ie, useEffect as ne, useContext as le, useRef as Ne } from "react";
+import { jsx as s, Fragment as _, jsxs as h } from "react/jsx-runtime";
+import { createContext as ye, useMemo as Z, useState as x, useCallback as oe, useEffect as ne, useContext as le, useRef as Ne } from "react";
 import { useLocation as xe, Navigate as Se, useNavigate as mt, useSearchParams as yt } from "react-router-dom";
 class de {
   constructor(e, t = 1e4) {
@@ -13,28 +13,28 @@ class de {
   }
   async executeRequest(e, t, r, i) {
     const o = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, a = (i == null ? void 0 : i.timeout) || this.timeout;
-    let c = {
+    let d = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
-      const f = await this.sessionManager.getValidAccessToken();
-      c = { ...c, Authorization: `Bearer ${f}` };
+      const g = await this.sessionManager.getValidAccessToken();
+      d = { ...d, Authorization: `Bearer ${g}` };
     }
-    const m = new AbortController(), y = setTimeout(() => m.abort(), a);
+    const c = new AbortController(), y = setTimeout(() => c.abort(), a);
     try {
-      const f = await fetch(o, {
+      const g = await fetch(o, {
         method: e,
-        headers: c,
+        headers: d,
         body: r ? JSON.stringify(r) : void 0,
-        signal: m.signal
+        signal: c.signal
       });
-      if (clearTimeout(y), !f.ok)
-        throw new Error(`HTTP ${f.status}: ${f.statusText}`);
-      const D = f.headers.get("content-type");
-      return !D || !D.includes("application/json") ? {} : await f.json();
-    } catch (f) {
-      throw clearTimeout(y), f instanceof Error && f.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : f;
+      if (clearTimeout(y), !g.ok)
+        throw new Error(`HTTP ${g.status}: ${g.statusText}`);
+      const F = g.headers.get("content-type");
+      return !F || !F.includes("application/json") ? {} : await g.json();
+    } catch (g) {
+      throw clearTimeout(y), g instanceof Error && g.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : g;
     }
   }
   async get(e, t) {
@@ -109,13 +109,13 @@ class Ve {
     })).data;
   }
 }
-const De = ye(null);
+const Fe = ye(null);
 function br({ config: n, children: e }) {
   const t = Z(
     () => {
-      var g, T, A;
+      var m, T, A;
       return {
-        enabled: ((g = n.cache) == null ? void 0 : g.enabled) ?? !0,
+        enabled: ((m = n.cache) == null ? void 0 : m.enabled) ?? !0,
         ttl: ((T = n.cache) == null ? void 0 : T.ttl) ?? 3e5,
         // 5 minutes default
         storageKey: ((A = n.cache) == null ? void 0 : A.storageKey) ?? `app_cache_${n.appId}`
@@ -125,16 +125,16 @@ function br({ config: n, children: e }) {
   ), [r, i] = x(() => {
     if (!t.enabled) return null;
     try {
-      const g = localStorage.getItem(t.storageKey);
-      if (!g) return null;
-      const T = JSON.parse(g);
+      const m = localStorage.getItem(t.storageKey);
+      if (!m) return null;
+      const T = JSON.parse(m);
       return Date.now() - T.timestamp < t.ttl && T.appId === n.appId ? T.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, a] = x(!r), [c, m] = x(null), y = Z(() => {
-    const g = () => {
-      f();
+  }), [o, a] = x(!r), [d, c] = x(null), y = Z(() => {
+    const m = () => {
+      g();
     };
     return {
       appId: n.appId,
@@ -142,14 +142,14 @@ function br({ config: n, children: e }) {
       // App info
       appInfo: r,
       isAppLoading: o,
-      appError: c,
-      retryApp: g
+      appError: d,
+      retryApp: m
     };
-  }, [n, r, o, c]), f = ie(
-    async (g = !1) => {
-      if (!(!g && t.enabled && r))
+  }, [n, r, o, d]), g = oe(
+    async (m = !1) => {
+      if (!(!m && t.enabled && r))
         try {
-          a(!0), m(null);
+          a(!0), c(null);
           const T = new de(n.baseUrl), L = await new Ve(T, {}).getPublicAppInfo(n.appId);
           if (i(L), t.enabled)
             try {
@@ -164,44 +164,44 @@ function br({ config: n, children: e }) {
             }
         } catch (T) {
           const A = T instanceof Error ? T : new Error("Failed to load app information");
-          m(A), i(null);
+          c(A), i(null);
         } finally {
           a(!1);
         }
     },
     [n.baseUrl, n.appId, t, r]
-  ), D = ie(async () => {
+  ), F = oe(async () => {
     if (!(!t.enabled || !r))
       try {
-        const g = localStorage.getItem(t.storageKey);
-        if (!g) return;
-        const T = JSON.parse(g);
+        const m = localStorage.getItem(t.storageKey);
+        if (!m) return;
+        const T = JSON.parse(m);
         if (Date.now() - T.timestamp > t.ttl * 0.5) {
           const L = new de(n.baseUrl), P = await new Ve(L, {}).getPublicAppInfo(n.appId);
           i(P);
-          const d = {
+          const u = {
             data: P,
             timestamp: Date.now(),
             appId: n.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(d));
+          localStorage.setItem(t.storageKey, JSON.stringify(u));
         }
-      } catch (g) {
-        process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", g);
+      } catch (m) {
+        process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", m);
       }
   }, [n, t, r]);
   return ne(() => {
-    r ? D() : f();
-  }, []), /* @__PURE__ */ s(De.Provider, { value: y, children: e });
+    r ? F() : g();
+  }, []), /* @__PURE__ */ s(Fe.Provider, { value: y, children: e });
 }
 function Ae() {
-  const n = le(De);
+  const n = le(Fe);
   if (!n)
     throw new Error("useApp must be used within an AppProvider");
   return n;
 }
-function Fe() {
-  return le(De);
+function De() {
+  return le(Fe);
 }
 const vr = Ae;
 class se extends Error {
@@ -226,9 +226,9 @@ class bt extends Error {
     ), this.name = "TokenRefreshError", this.attempts = e, this.lastError = t;
   }
 }
-const oe = class oe {
+const ie = class ie {
   constructor(e = {}) {
-    this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
+    this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, this.consecutiveBackgroundFailures = 0, e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
   }
   /**
    * Get or create a SessionManager instance for the given config.
@@ -236,17 +236,17 @@ const oe = class oe {
    * Mutable config (callbacks, baseUrl) is updated on the existing instance.
    */
   static getInstance(e = {}) {
-    const t = oe.resolveStorageKey(e), r = oe.instances.get(t);
+    const t = ie.resolveStorageKey(e), r = ie.instances.get(t);
     if (r)
       return r.updateConfig(e), r;
-    const i = new oe(e);
-    return oe.instances.set(t, i), i;
+    const i = new ie(e);
+    return ie.instances.set(t, i), i;
   }
   /** Reset all singleton instances. For testing only. */
   static resetAllInstances() {
-    for (const e of oe.instances.values())
+    for (const e of ie.instances.values())
       e.destroy();
-    oe.instances.clear();
+    ie.instances.clear();
   }
   static resolveStorageKey(e) {
     return e.storageKey ? e.storageKey : e.tenantSlug !== void 0 && e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens";
@@ -296,7 +296,7 @@ const oe = class oe {
     }
   }
   setTokens(e) {
-    const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || oe.extractJwtExpiry(e.accessToken), r = {
+    const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || ie.extractJwtExpiry(e.accessToken), r = {
       ...e,
       expiresAt: t
     }, i = this.tokenStorage.get() || {};
@@ -306,7 +306,7 @@ const oe = class oe {
     const { accessToken: e, refreshToken: t, expiresAt: r, expiresIn: i, tokenType: o } = this.tokenStorage.get() || {};
     if (!e)
       return null;
-    const a = r || oe.extractJwtExpiry(e);
+    const a = r || ie.extractJwtExpiry(e);
     return {
       accessToken: e,
       refreshToken: t,
@@ -353,13 +353,26 @@ const oe = class oe {
     if (!(e != null && e.refreshToken) || this.refreshPromise) return;
     const t = this.sessionGeneration;
     this.startRefreshAndResolveQueue(e.refreshToken).then(() => {
+      this.consecutiveBackgroundFailures = 0;
     }).catch((r) => {
-      r instanceof se || this.sessionGeneration === t && (process.env.NODE_ENV === "development" && console.warn(
-        "[SessionManager] Background refresh failed, retrying in 30s:",
-        r.message
-      ), this.backgroundRetryTimerId = setTimeout(() => {
-        this.backgroundRefresh();
-      }, 3e4));
+      if (!(r instanceof se)) {
+        if (this.sessionGeneration === t) {
+          if (this.consecutiveBackgroundFailures++, this.consecutiveBackgroundFailures >= ie.MAX_BACKGROUND_FAILURES) {
+            process.env.NODE_ENV === "development" && console.error(
+              `[SessionManager] Background refresh failed ${this.consecutiveBackgroundFailures} consecutive times — expiring session`
+            ), this.consecutiveBackgroundFailures = 0, this.handleSessionExpired(
+              new se("token_invalid", "Background refresh failed repeatedly")
+            );
+            return;
+          }
+          process.env.NODE_ENV === "development" && console.warn(
+            "[SessionManager] Background refresh failed, retrying in 30s:",
+            r.message
+          ), this.backgroundRetryTimerId = setTimeout(() => {
+            this.backgroundRefresh();
+          }, 3e4);
+        }
+      }
     });
   }
   /**
@@ -456,8 +469,8 @@ const oe = class oe {
         if (a instanceof se)
           throw a;
         if (t = a, i < this.maxRefreshRetries) {
-          const c = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(c);
+          const d = this.retryBackoffBase * Math.pow(2, i);
+          await this.sleep(d);
         }
       }
     }
@@ -469,36 +482,45 @@ const oe = class oe {
    * Throws generic Error for transient errors (will be retried).
    */
   async performTokenRefresh(e, t) {
+    return typeof navigator < "u" && navigator.locks ? navigator.locks.request(
+      `session-refresh:${this.storageKey}`,
+      () => this.performTokenRefreshInner(e, t)
+    ) : this.performTokenRefreshInner(e, t);
+  }
+  async performTokenRefreshInner(e, t) {
     if (!this.baseUrl)
       throw new Error("Base URL not configured for token refresh");
-    const r = `${this.baseUrl}/auth/refresh`;
-    let i;
+    const r = this.getTokens();
+    if (r != null && r.accessToken && !this.isTokenExpired(r) && !this.shouldRefreshToken(r))
+      return;
+    const i = (r == null ? void 0 : r.refreshToken) || e, o = `${this.baseUrl}/auth/refresh`;
+    let a;
     try {
-      i = await fetch(r, {
+      a = await fetch(o, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ refreshToken: e })
+        body: JSON.stringify({ refreshToken: i })
       });
-    } catch (a) {
-      throw a instanceof Error ? a : new Error("Network error during token refresh");
+    } catch (c) {
+      throw c instanceof Error ? c : new Error("Network error during token refresh");
     }
-    if (!i.ok) {
-      let a = "";
+    if (!a.ok) {
+      let c = "";
       try {
-        const c = await i.json();
-        a = (c.message || c.error || "").toLowerCase();
+        const y = await a.json();
+        c = (y.message || y.error || "").toLowerCase();
       } catch {
-        a = i.statusText.toLowerCase();
+        c = a.statusText.toLowerCase();
       }
-      throw i.status === 401 ? a.includes("expired") ? new se("token_expired") : a.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${a}`) : i.status === 400 ? a.includes("inactive") ? new se("user_inactive") : a.includes("expired") || a.includes("invalid") ? new se("token_invalid", a) : new Error(`Token refresh failed (400): ${a}`) : new Error(`Token refresh failed: ${i.status} ${a}`);
+      throw a.status === 401 ? c.includes("expired") ? new se("token_expired") : c.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${c}`) : a.status === 400 ? c.includes("inactive") ? new se("user_inactive") : c.includes("expired") || c.includes("invalid") ? new se("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new se("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${a.status} ${c}`);
     }
     if (this.sessionGeneration !== t)
       throw new se("token_invalid", "Session cleared during refresh");
-    const o = await i.json();
+    const d = await a.json();
     this.setTokens({
-      accessToken: o.accessToken,
-      refreshToken: o.refreshToken || e,
-      expiresIn: o.expiresIn
+      accessToken: d.accessToken,
+      refreshToken: d.refreshToken || i,
+      expiresIn: d.expiresIn
     });
   }
   // --- Session expiry handler ---
@@ -529,7 +551,7 @@ const oe = class oe {
    * Cancels all timers and rejects pending queue entries.
    */
   destroy() {
-    this.isDestroyed = !0, oe.instances.delete(this.storageKey), this.cancelProactiveTimer();
+    this.isDestroyed = !0, ie.instances.delete(this.storageKey), this.cancelProactiveTimer();
     const e = new se("token_invalid", "SessionManager destroyed");
     this.rejectQueue(e);
   }
@@ -568,8 +590,8 @@ const oe = class oe {
     return new Promise((t) => setTimeout(t, e));
   }
 };
-oe.instances = /* @__PURE__ */ new Map();
-let be = oe;
+ie.instances = /* @__PURE__ */ new Map(), ie.MAX_BACKGROUND_FAILURES = 3;
+let be = ie;
 const Ie = /* @__PURE__ */ new Map();
 class vt {
   constructor(e) {
@@ -882,7 +904,7 @@ function Et() {
 }
 const Ue = ye(null);
 function Sr({ config: n, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: i } = Ae(), o = ie(() => typeof window > "u" ? null : xt(
+  const { baseUrl: t, appInfo: r, appId: i } = Ae(), o = oe(() => typeof window > "u" ? null : xt(
     {
       tenantMode: n.tenantMode || "selector",
       baseDomain: n.baseDomain,
@@ -894,115 +916,115 @@ function Sr({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, c] = x(() => o()), m = Z(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, d] = x(() => o()), c = Z(
     () => {
-      var p, U, b;
+      var f, U, b;
       return {
-        enabled: ((p = n.cache) == null ? void 0 : p.enabled) ?? !0,
+        enabled: ((f = n.cache) == null ? void 0 : f.enabled) ?? !0,
         ttl: ((U = n.cache) == null ? void 0 : U.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
         storageKey: ((b = n.cache) == null ? void 0 : b.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [n.cache, a]
-  ), [y, f] = x(() => {
+  ), [y, g] = x(() => {
     if (n.initialTenant) return n.initialTenant;
-    if (!m.enabled || !a) return null;
+    if (!c.enabled || !a) return null;
     try {
-      const p = localStorage.getItem(m.storageKey);
-      if (!p) return null;
-      const U = JSON.parse(p);
-      return Date.now() - U.timestamp < m.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(m.storageKey), null);
+      const f = localStorage.getItem(c.storageKey);
+      if (!f) return null;
+      const U = JSON.parse(f);
+      return Date.now() - U.timestamp < c.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(c.storageKey), null);
     } catch {
       return null;
     }
-  }), [D, g] = x(!y && !n.initialTenant), [T, A] = x(null), [L, M] = x(null), [P, d] = x(!1), [v, N] = x(null);
+  }), [F, m] = x(!y && !n.initialTenant), [T, A] = x(null), [L, M] = x(null), [P, u] = x(!1), [v, N] = x(null);
   ne(() => {
     if (n.tenantMode === "fixed") return;
-    const p = o();
-    c(p);
+    const f = o();
+    d(f);
   }, [o, n.tenantMode]);
-  const $ = (r == null ? void 0 : r.settingsSchema) || null, w = ie(
-    async (p, U = !1) => {
-      if (!(!U && m.enabled && y && y.domain === p))
+  const $ = (r == null ? void 0 : r.settingsSchema) || null, w = oe(
+    async (f, U = !1) => {
+      if (!(!U && c.enabled && y && y.domain === f))
         try {
-          g(!0), A(null);
-          const b = new de(t), S = await new ve(b, i).getPublicTenantInfo(p);
-          if (f(S), m.enabled)
+          m(!0), A(null);
+          const b = new de(t), S = await new ve(b, i).getPublicTenantInfo(f);
+          if (g(S), c.enabled)
             try {
               const E = {
                 data: S,
                 timestamp: Date.now(),
-                tenantSlug: p
+                tenantSlug: f
               };
-              localStorage.setItem(m.storageKey, JSON.stringify(E));
+              localStorage.setItem(c.storageKey, JSON.stringify(E));
             } catch (E) {
               process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", E);
             }
         } catch (b) {
-          const h = b instanceof Error ? b : new Error("Failed to load tenant information");
-          A(h), f(null);
+          const p = b instanceof Error ? b : new Error("Failed to load tenant information");
+          A(p), g(null);
         } finally {
-          g(!1);
+          m(!1);
         }
     },
-    [t, i, m, y]
-  ), R = ie(async () => {
-    if (!(!m.enabled || !y || !a))
+    [t, i, c, y]
+  ), R = oe(async () => {
+    if (!(!c.enabled || !y || !a))
       try {
-        const p = localStorage.getItem(m.storageKey);
-        if (!p) return;
-        const U = JSON.parse(p);
-        if (Date.now() - U.timestamp > m.ttl * 0.5) {
-          const h = new de(t), E = await new ve(h, i).getPublicTenantInfo(a);
-          f(E);
-          const Q = {
+        const f = localStorage.getItem(c.storageKey);
+        if (!f) return;
+        const U = JSON.parse(f);
+        if (Date.now() - U.timestamp > c.ttl * 0.5) {
+          const p = new de(t), E = await new ve(p, i).getPublicTenantInfo(a);
+          g(E);
+          const K = {
             data: E,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(m.storageKey, JSON.stringify(Q));
+          localStorage.setItem(c.storageKey, JSON.stringify(K));
         }
-      } catch (p) {
-        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", p);
+      } catch (f) {
+        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", f);
       }
-  }, [t, i, m, y, a]), k = ie(async () => {
+  }, [t, i, c, y, a]), k = oe(async () => {
     if (y != null && y.id)
       try {
-        d(!0), N(null);
-        const p = new de(t), b = await new ve(p, y.appId).getTenantSettings(y.id);
+        u(!0), N(null);
+        const f = new de(t), b = await new ve(f, y.appId).getTenantSettings(y.id);
         M(b);
-      } catch (p) {
-        const U = p instanceof Error ? p : new Error("Failed to load tenant settings");
+      } catch (f) {
+        const U = f instanceof Error ? f : new Error("Failed to load tenant settings");
         N(U), M(null);
       } finally {
-        d(!1);
+        u(!1);
       }
-  }, [t, y]), I = ie(() => {
+  }, [t, y]), I = oe(() => {
     k();
-  }, [k]), l = ie(
-    (p) => {
+  }, [k]), l = oe(
+    (f) => {
       if (!$)
         return { isValid: !0, errors: [] };
       const U = [];
       try {
-        return $.properties && Object.entries($.properties).forEach(([b, h]) => {
+        return $.properties && Object.entries($.properties).forEach(([b, p]) => {
           var E;
-          const S = p[b];
+          const S = f[b];
           if ((E = $.required) != null && E.includes(b) && S == null) {
             U.push(`Field '${b}' is required`);
             return;
           }
           if (S != null) {
-            if (h.type) {
-              const Q = h.type, G = typeof S;
-              Q === "string" && G !== "string" ? U.push(`Field '${b}' must be a string`) : (Q === "number" || Q === "integer") && G !== "number" ? U.push(`Field '${b}' must be a number`) : Q === "boolean" && G !== "boolean" ? U.push(`Field '${b}' must be a boolean`) : Q === "array" && !Array.isArray(S) && U.push(`Field '${b}' must be an array`);
+            if (p.type) {
+              const K = p.type, G = typeof S;
+              K === "string" && G !== "string" ? U.push(`Field '${b}' must be a string`) : (K === "number" || K === "integer") && G !== "number" ? U.push(`Field '${b}' must be a number`) : K === "boolean" && G !== "boolean" ? U.push(`Field '${b}' must be a boolean`) : K === "array" && !Array.isArray(S) && U.push(`Field '${b}' must be an array`);
             }
-            h.minLength !== void 0 && typeof S == "string" && S.length < h.minLength && U.push(
-              `Field '${b}' must be at least ${h.minLength} characters long`
-            ), h.maxLength !== void 0 && typeof S == "string" && S.length > h.maxLength && U.push(
-              `Field '${b}' must be no more than ${h.maxLength} characters long`
-            ), h.minimum !== void 0 && typeof S == "number" && S < h.minimum && U.push(`Field '${b}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof S == "number" && S > h.maximum && U.push(`Field '${b}' must be no more than ${h.maximum}`), h.pattern && typeof S == "string" && (new RegExp(h.pattern).test(S) || U.push(`Field '${b}' does not match the required pattern`)), h.enum && !h.enum.includes(S) && U.push(`Field '${b}' must be one of: ${h.enum.join(", ")}`);
+            p.minLength !== void 0 && typeof S == "string" && S.length < p.minLength && U.push(
+              `Field '${b}' must be at least ${p.minLength} characters long`
+            ), p.maxLength !== void 0 && typeof S == "string" && S.length > p.maxLength && U.push(
+              `Field '${b}' must be no more than ${p.maxLength} characters long`
+            ), p.minimum !== void 0 && typeof S == "number" && S < p.minimum && U.push(`Field '${b}' must be at least ${p.minimum}`), p.maximum !== void 0 && typeof S == "number" && S > p.maximum && U.push(`Field '${b}' must be no more than ${p.maximum}`), p.pattern && typeof S == "string" && (new RegExp(p.pattern).test(S) || U.push(`Field '${b}' does not match the required pattern`)), p.enum && !p.enum.includes(S) && U.push(`Field '${b}' must be one of: ${p.enum.join(", ")}`);
           }
         }), {
           isValid: U.length === 0,
@@ -1018,13 +1040,13 @@ function Sr({ config: n, children: e }) {
     [$]
   );
   ne(() => {
-    !n.initialTenant && a ? y ? R() : w(a) : !n.initialTenant && !a && (f(null), A(null), g(!1));
+    !n.initialTenant && a ? y ? R() : w(a) : !n.initialTenant && !a && (g(null), A(null), m(!1));
   }, [n.initialTenant, a, y, w, R]), ne(() => {
-    y != null && y.id ? k() : (M(null), N(null), d(!1));
+    y != null && y.id ? k() : (M(null), N(null), u(!1));
   }, [y == null ? void 0 : y.id, k]);
-  const z = ie(
-    (p, U) => {
-      const { mode: b = "reload", tokens: h, redirectPath: S } = U || {}, E = n.tenantMode || "selector";
+  const z = oe(
+    (f, U) => {
+      const { mode: b = "reload", tokens: p, redirectPath: S } = U || {}, E = n.tenantMode || "selector";
       if (E === "fixed") {
         process.env.NODE_ENV === "development" && console.warn(
           "[TenantProvider] switchTenant is a no-op in fixed mode. Tenant is always:",
@@ -1032,40 +1054,40 @@ function Sr({ config: n, children: e }) {
         ), S && (window.location.href = S);
         return;
       }
-      if (localStorage.setItem("tenant", p), E === "subdomain") {
-        const Q = window.location.hostname, G = At(
-          p,
-          Q,
+      if (localStorage.setItem("tenant", f), E === "subdomain") {
+        const K = window.location.hostname, G = At(
+          f,
+          K,
           n.baseDomain
         );
         if (!G) {
           process.env.NODE_ENV === "development" && console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            Q
+            K
           );
           return;
         }
         const X = S || window.location.pathname, W = new URL(`${window.location.protocol}//${G}${X}`);
-        new URLSearchParams(window.location.search).forEach((V, B) => {
-          B !== me && W.searchParams.set(B, V);
-        }), h && W.searchParams.set(me, je(h)), window.location.href = W.toString();
+        new URLSearchParams(window.location.search).forEach((V, H) => {
+          H !== me && W.searchParams.set(H, V);
+        }), p && W.searchParams.set(me, je(p)), window.location.href = W.toString();
       } else if (E === "selector") {
-        const Q = S || window.location.pathname, G = new URLSearchParams(window.location.search);
-        if (G.set(n.selectorParam || "tenant", p), G.delete(me), h && G.set(me, je(h)), b === "reload") {
-          const X = `${Q}?${G.toString()}${window.location.hash}`;
+        const K = S || window.location.pathname, G = new URLSearchParams(window.location.search);
+        if (G.set(n.selectorParam || "tenant", f), G.delete(me), p && G.set(me, je(p)), b === "reload") {
+          const X = `${K}?${G.toString()}${window.location.hash}`;
           window.location.href = X;
         } else {
-          const X = `${Q}?${G.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", X), c(p), w(p);
+          const X = `${K}?${G.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", X), d(f), w(f);
         }
       }
     },
     [n.tenantMode, n.selectorParam, n.baseDomain, w]
-  ), F = Z(() => ({
+  ), D = Z(() => ({
     // Tenant info
     tenant: y,
     tenantSlug: a,
-    isTenantLoading: D,
+    isTenantLoading: F,
     tenantError: T,
     retryTenant: () => {
       a && w(a);
@@ -1083,7 +1105,7 @@ function Sr({ config: n, children: e }) {
   }), [
     y,
     a,
-    D,
+    F,
     T,
     L,
     $,
@@ -1093,7 +1115,7 @@ function Sr({ config: n, children: e }) {
     z,
     l
   ]);
-  return /* @__PURE__ */ s(Ue.Provider, { value: F, children: e });
+  return /* @__PURE__ */ s(Ue.Provider, { value: D, children: e });
 }
 function Te() {
   const n = le(Ue);
@@ -1127,29 +1149,29 @@ function Je() {
 }
 const $e = ye(null);
 function xr({ config: n = {}, children: e }) {
-  const t = Fe(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, c = (r == null ? void 0 : r.tenantSlug) ?? null, m = (r == null ? void 0 : r.switchTenant) ?? (() => {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, d = (r == null ? void 0 : r.tenantSlug) ?? null, c = (r == null ? void 0 : r.switchTenant) ?? (() => {
   });
   if (!i)
     throw new Error(
       "[AuthProvider] baseUrl is required. Provide it via AppProvider or AuthConfig.baseUrl."
     );
-  const [y, f] = x(n.initialRoles || []), [D, g] = x(!n.initialRoles), [T, A] = x(null), [L, M] = x(!1), [P, d] = x(null), [v, N] = x(() => {
+  const [y, g] = x(n.initialRoles || []), [F, m] = x(!n.initialRoles), [T, A] = x(null), [L, M] = x(!1), [P, u] = x(null), [v, N] = x(() => {
     try {
-      const C = localStorage.getItem("userTenants");
-      return C ? JSON.parse(C) : [];
+      const B = localStorage.getItem("userTenants");
+      return B ? JSON.parse(B) : [];
     } catch {
       return [];
     }
   }), [$, w] = x(!1), R = Ne({ done: !1, urlTokens: null });
   R.current.done || (R.current.done = !0, R.current.urlTokens = Rt());
   const [k, I] = x(() => R.current.urlTokens !== null), l = Z(() => {
-    const C = be.getInstance({
-      tenantSlug: c,
+    const B = be.getInstance({
+      tenantSlug: d,
       baseUrl: i,
       refreshQueueTimeout: n.refreshQueueTimeout,
       proactiveRefreshMargin: n.proactiveRefreshMargin,
       onSessionExpired: (ce) => {
-        A(null), d(null), N([]), w(!1);
+        A(null), u(null), N([]), w(!1);
         try {
           localStorage.removeItem("userTenants");
         } catch {
@@ -1157,94 +1179,94 @@ function xr({ config: n = {}, children: e }) {
         n.onSessionExpired ? n.onSessionExpired(ce) : n.onRefreshFailed && n.onRefreshFailed();
       }
     });
-    return R.current.urlTokens && C.setTokens({
+    return R.current.urlTokens && B.setTokens({
       accessToken: R.current.urlTokens.accessToken,
       refreshToken: R.current.urlTokens.refreshToken,
       expiresIn: R.current.urlTokens.expiresIn
-    }), C;
-  }, [c, i, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [z, F] = x(() => {
+    }), B;
+  }, [d, i, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [z, D] = x(() => {
     if (R.current.urlTokens) return !1;
-    const C = l.getTokens();
-    return C ? l.hasValidSession() || !!C.refreshToken : !1;
-  }), p = R.current.done && !k && !z, U = Z(() => {
-    const C = new de(i);
-    return C.setSessionManager(l), C;
-  }, [i, l]), b = Z(() => new vt(new de(i)), [i]), h = Z(() => new St(U, l), [U, l]), S = Z(() => new We(new de(i)), [i]), E = Z(() => T || l.getUser(), [T, l]), Q = Z(() => E != null && E.roleId && y.find((C) => C.id === E.roleId) || null, [E, y]), G = Z(() => (Q == null ? void 0 : Q.permissions) || [], [Q]), X = Z(() => l.hasValidSession() && T !== null, [l, T]), W = Ne(async () => {
+    const B = l.getTokens();
+    return B ? l.hasValidSession() || !!B.refreshToken : !1;
+  }), f = R.current.done && !k && !z, U = Z(() => {
+    const B = new de(i);
+    return B.setSessionManager(l), B;
+  }, [i, l]), b = Z(() => new vt(new de(i)), [i]), p = Z(() => new St(U, l), [U, l]), S = Z(() => new We(new de(i)), [i]), E = Z(() => T || l.getUser(), [T, l]), K = Z(() => E != null && E.roleId && y.find((B) => B.id === E.roleId) || null, [E, y]), G = Z(() => (K == null ? void 0 : K.permissions) || [], [K]), X = Z(() => l.hasValidSession() && T !== null, [l, T]), W = Ne(async () => {
   }), q = Z(() => {
-    const C = async (H = !1) => {
+    const B = async (C = !1) => {
       try {
-        if (!l.hasValidSession() || !H && T)
+        if (!l.hasValidSession() || !C && T)
           return;
         const O = l.getUserId();
         if (!O) {
           process.env.NODE_ENV === "development" && console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        M(!0), d(null);
-        const J = await h.getUserById(O);
+        M(!0), u(null);
+        const J = await p.getUserById(O);
         A(J), l.setUser(J);
       } catch (O) {
         const J = O instanceof Error ? O : new Error("Failed to load user data");
-        d(J), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", J);
+        u(J), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", J);
       } finally {
         M(!1);
       }
     }, ce = async () => {
-      await C();
-    }, fe = async (H) => {
+      await B();
+    }, fe = async (C) => {
       var _e;
-      const { username: O, password: J, tenantSlug: j, redirectPath: Y } = H;
-      let ee = a == null ? void 0 : a.id, te = c, re = l;
+      const { username: O, password: J, tenantSlug: j, redirectPath: Y } = C;
+      let ee = a == null ? void 0 : a.id, te = d, re = l;
       j && (ee = (await new ve(U, o).getPublicTenantInfo(j)).id, te = j);
-      const K = await b.login({
+      const Q = await b.login({
         username: O,
         password: J,
         appId: o,
         tenantId: ee
-      }), we = j && j !== c;
+      }), we = j && j !== d;
       if (we && (re = new be({
         tenantSlug: te,
         baseUrl: i
       })), re.setTokens({
-        accessToken: K.accessToken,
-        refreshToken: K.refreshToken,
-        expiresIn: K.expiresIn
-      }), K.user) {
-        re.setUser(K.user), A(K.user);
+        accessToken: Q.accessToken,
+        refreshToken: Q.refreshToken,
+        expiresIn: Q.expiresIn
+      }), Q.user) {
+        re.setUser(Q.user), A(Q.user);
         try {
-          await C();
+          await B();
         } catch (ke) {
           process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", ke);
         }
       }
-      if (K.tenants && K.tenants.length > 0) {
-        N(K.tenants);
+      if (Q.tenants && Q.tenants.length > 0) {
+        N(Q.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(K.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(Q.tenants));
         } catch {
         }
       }
-      const Re = ((_e = K.user) == null ? void 0 : _e.tenantId) !== null;
+      const Re = ((_e = Q.user) == null ? void 0 : _e.tenantId) !== null;
       w(Re);
       const Ee = {
-        accessToken: K.accessToken,
-        refreshToken: K.refreshToken,
-        expiresIn: K.expiresIn
+        accessToken: Q.accessToken,
+        refreshToken: Q.refreshToken,
+        expiresIn: Q.expiresIn
       };
       if (we && te)
-        return m(te, { tokens: Ee, redirectPath: Y }), K;
+        return c(te, { tokens: Ee, redirectPath: Y }), Q;
       if (Y && Y !== window.location.pathname)
-        return m(te || c || "", { tokens: Ee, redirectPath: Y }), K;
-      if (!Re && K.tenants && K.tenants.length > 0) {
-        const ke = H.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
-        if (K.tenants.length === 1 && ke) {
-          const ze = K.tenants[0];
-          return m(ze.subdomain, { tokens: Ee, redirectPath: Y }), K;
-        } else K.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(K.tenants);
+        return c(te || d || "", { tokens: Ee, redirectPath: Y }), Q;
+      if (!Re && Q.tenants && Q.tenants.length > 0) {
+        const ke = C.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
+        if (Q.tenants.length === 1 && ke) {
+          const ze = Q.tenants[0];
+          return c(ze.subdomain, { tokens: Ee, redirectPath: Y }), Q;
+        } else Q.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(Q.tenants);
       }
-      return K;
-    }, ge = async (H) => {
-      const { email: O, phoneNumber: J, name: j, password: Y, lastName: ee, tenantId: te } = H;
+      return Q;
+    }, ge = async (C) => {
+      const { email: O, phoneNumber: J, name: j, password: Y, lastName: ee, tenantId: te } = C;
       if (!O && !J)
         throw new Error("Either email or phoneNumber is required");
       if (!j || !Y)
@@ -1259,8 +1281,8 @@ function xr({ config: n = {}, children: e }) {
         lastName: ee,
         appId: o
       });
-    }, nt = async (H) => {
-      const { email: O, phoneNumber: J, name: j, password: Y, tenantName: ee, lastName: te } = H;
+    }, nt = async (C) => {
+      const { email: O, phoneNumber: J, name: j, password: Y, tenantName: ee, lastName: te } = C;
       if (!O && !J)
         throw new Error("Either email or phoneNumber is required");
       if (!j || !Y || !ee)
@@ -1274,19 +1296,19 @@ function xr({ config: n = {}, children: e }) {
         appId: o,
         lastName: te
       });
-    }, st = async (H) => {
-      const { currentPassword: O, newPassword: J } = H, j = await l.getAuthHeaders();
+    }, st = async (C) => {
+      const { currentPassword: O, newPassword: J } = C, j = await l.getAuthHeaders();
       await b.changePassword({ currentPassword: O, newPassword: J }, j);
-    }, it = async (H) => {
-      const { email: O, tenantId: J } = H, j = J ?? (a == null ? void 0 : a.id);
+    }, it = async (C) => {
+      const { email: O, tenantId: J } = C, j = J ?? (a == null ? void 0 : a.id);
       if (!j)
         throw new Error("tenantId is required for password reset");
       await b.requestPasswordReset({ email: O, tenantId: j });
-    }, ot = async (H) => {
-      const { token: O, newPassword: J } = H;
+    }, ot = async (C) => {
+      const { token: O, newPassword: J } = C;
       await b.confirmPasswordReset({ token: O, newPassword: J });
-    }, at = async (H) => {
-      const { email: O, frontendUrl: J, name: j, lastName: Y, tenantId: ee } = H, te = ee ?? (a == null ? void 0 : a.id);
+    }, at = async (C) => {
+      const { email: O, frontendUrl: J, name: j, lastName: Y, tenantId: ee } = C, te = ee ?? (a == null ? void 0 : a.id);
       if (!te)
         throw new Error("tenantId is required for magic link authentication");
       return await b.sendMagicLink({
@@ -1297,17 +1319,17 @@ function xr({ config: n = {}, children: e }) {
         lastName: Y,
         appId: o
       });
-    }, lt = async (H) => {
-      const { token: O, email: J, tenantSlug: j } = H;
-      let Y = a == null ? void 0 : a.id, ee = c, te = l;
+    }, lt = async (C) => {
+      const { token: O, email: J, tenantSlug: j } = C;
+      let Y = a == null ? void 0 : a.id, ee = d, te = l;
       j && (Y = (await new ve(U, o).getPublicTenantInfo(j)).id, ee = j);
       const re = await b.verifyMagicLink({
         token: O,
         email: J,
         appId: o,
         tenantId: Y
-      }), K = j && j !== c;
-      if (K && (te = new be({
+      }), Q = j && j !== d;
+      if (Q && (te = new be({
         tenantSlug: ee,
         baseUrl: i
       })), te.setTokens({
@@ -1317,7 +1339,7 @@ function xr({ config: n = {}, children: e }) {
       }), re.user) {
         te.setUser(re.user), A(re.user);
         try {
-          await C();
+          await B();
         } catch (we) {
           process.env.NODE_ENV === "development" && console.warn(
             "[AuthProvider] Failed to load complete user data after magic link:",
@@ -1325,7 +1347,7 @@ function xr({ config: n = {}, children: e }) {
           );
         }
       }
-      return K && ee && ee !== c && m(ee, {
+      return Q && ee && ee !== d && c(ee, {
         tokens: {
           accessToken: re.accessToken,
           refreshToken: re.refreshToken,
@@ -1333,46 +1355,46 @@ function xr({ config: n = {}, children: e }) {
         }
       }), re;
     }, ct = async () => {
-      const H = l.getTokens();
-      if (!(H != null && H.refreshToken))
+      const C = l.getTokens();
+      if (!(C != null && C.refreshToken))
         throw new Error("No refresh token available");
       const O = await b.refreshToken({
-        refreshToken: H.refreshToken
+        refreshToken: C.refreshToken
       });
       l.setTokens({
         accessToken: O.accessToken,
-        refreshToken: O.refreshToken || H.refreshToken,
+        refreshToken: O.refreshToken || C.refreshToken,
         expiresIn: O.expiresIn
       });
     }, dt = () => {
-      l.clearSession(), A(null), d(null), N([]), w(!1);
+      l.clearSession(), A(null), u(null), N([]), w(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, ut = (H) => {
-      l.setTokens(H);
+    }, ut = (C) => {
+      l.setTokens(C);
     }, ht = () => l.hasValidSession(), pt = () => {
-      l.clearSession(), A(null), d(null);
+      l.clearSession(), A(null), u(null);
     }, ft = async () => {
       if (o)
         try {
-          g(!0);
-          const { roles: H } = await S.getRolesByApp(o);
-          f(H);
-        } catch (H) {
-          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", H);
+          m(!0);
+          const { roles: C } = await S.getRolesByApp(o);
+          g(C);
+        } catch (C) {
+          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", C);
         } finally {
-          g(!1);
+          m(!1);
         }
     }, gt = async () => {
       await ft();
-    }, Pe = (H) => {
+    }, Pe = (C) => {
       if (!G || G.length === 0)
         return !1;
-      if (typeof H == "string")
-        return G.includes(H);
-      const O = `${H.resource}.${H.action}`;
+      if (typeof C == "string")
+        return G.includes(C);
+      const O = `${C.resource}.${C.action}`;
       return G.includes(O);
     };
     return {
@@ -1396,29 +1418,29 @@ function xr({ config: n = {}, children: e }) {
       currentUser: T,
       isUserLoading: L,
       userError: P,
-      loadUserData: C,
+      loadUserData: B,
       refreshUser: ce,
-      isAuthInitializing: !p,
-      isAuthReady: p,
-      userRole: Q,
+      isAuthInitializing: !f,
+      isAuthReady: f,
+      userRole: K,
       userPermissions: G,
       availableRoles: y,
-      rolesLoading: D,
+      rolesLoading: F,
       hasPermission: Pe,
-      hasAnyPermission: (H) => H.some((O) => Pe(O)),
-      hasAllPermissions: (H) => H.every((O) => Pe(O)),
+      hasAnyPermission: (C) => C.some((O) => Pe(O)),
+      hasAllPermissions: (C) => C.every((O) => Pe(O)),
       getUserPermissionStrings: () => G || [],
       refreshRoles: gt,
       // RFC-004: Multi-tenant user membership
       userTenants: v,
       hasTenantContext: $,
-      switchToTenant: async (H, O) => {
+      switchToTenant: async (C, O) => {
         const { redirectPath: J } = O || {}, j = l.getTokens();
         if (!(j != null && j.refreshToken))
           throw new Error("No refresh token available for tenant switch");
         const Y = await b.switchTenant({
           refreshToken: j.refreshToken,
-          tenantId: H
+          tenantId: C
         });
         l.setTokens({
           accessToken: Y.accessToken,
@@ -1426,8 +1448,8 @@ function xr({ config: n = {}, children: e }) {
           // Keep the same refresh token
           expiresIn: Y.expiresIn
         }), A(Y.user), l.setUser(Y.user), w(!0);
-        const ee = v.find((te) => te.id === H);
-        ee && m(ee.subdomain, {
+        const ee = v.find((te) => te.id === C);
+        ee && c(ee.subdomain, {
           tokens: {
             accessToken: Y.accessToken,
             refreshToken: j.refreshToken,
@@ -1437,7 +1459,7 @@ function xr({ config: n = {}, children: e }) {
         });
       },
       refreshUserTenants: async () => {
-        const H = await l.getAuthHeaders(), O = await b.getUserTenants(H);
+        const C = await l.getAuthHeaders(), O = await b.getUserTenants(C);
         N(O);
         try {
           localStorage.setItem("userTenants", JSON.stringify(O));
@@ -1451,57 +1473,57 @@ function xr({ config: n = {}, children: e }) {
     l,
     U,
     b,
-    h,
+    p,
     S,
     o,
     a,
+    d,
     c,
-    m,
     y,
     T,
     L,
     P,
     v,
     $,
-    p,
-    Q,
+    f,
+    K,
     G
   ]);
   W.current = q.loadUserData, ne(() => {
     !n.initialRoles && o && (async () => {
       try {
-        g(!0);
+        m(!0);
         const ce = new de(i), fe = new We(ce), { roles: ge } = await fe.getRolesByApp(o);
-        f(ge);
+        g(ge);
       } catch (ce) {
         process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", ce);
       } finally {
-        g(!1);
+        m(!1);
       }
     })();
   }, [o, i, n.initialRoles]);
-  const [V, B] = x(!1);
+  const [V, H] = x(!1);
   return ne(() => {
-    V || (B(!0), R.current.urlTokens && (Et(), I(!0), q.loadUserData().catch((C) => {
-      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", C);
+    V || (H(!0), R.current.urlTokens && (Et(), I(!0), q.loadUserData().catch((B) => {
+      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", B);
     }).finally(() => {
       I(!1);
     })));
   }, [q, V]), ne(() => {
-    let C = !1;
+    let B = !1;
     return (async () => {
       var ge;
-      if (!l.hasValidSession() && ((ge = l.getTokens()) != null && ge.refreshToken) && await l.waitForPendingRefresh(), C) return;
+      if (!l.hasValidSession() && ((ge = l.getTokens()) != null && ge.refreshToken) && await l.waitForPendingRefresh(), B) return;
       const fe = l.getUser();
-      fe && l.hasValidSession() && A(fe), F(!1);
+      fe && l.hasValidSession() && A(fe), D(!1);
     })(), () => {
-      C = !0;
+      B = !0;
     };
   }, [l]), ne(() => {
     V && (R.current.urlTokens || (!T && !L && !P && l.hasValidSession() ? W.current().catch(() => {
     }).finally(() => {
-      F(!1);
-    }) : F(!1)));
+      D(!1);
+    }) : D(!1)));
   }, [T, L, P, l, V]), /* @__PURE__ */ s($e.Provider, { value: q, children: e });
 }
 function he() {
@@ -1510,7 +1532,7 @@ function he() {
     throw new Error("useAuth must be used within an AuthProvider");
   return n;
 }
-function Ce() {
+function Be() {
   return le($e);
 }
 class It {
@@ -1593,64 +1615,64 @@ class It {
     })).data;
   }
 }
-const He = ye(null);
+const Ce = ye(null);
 function Ar({ config: n = {}, children: e }) {
-  const t = Fe(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [c, m] = x([]), [y, f] = x(!1), [D, g] = x(null), [T, A] = x(!1), L = Z(() => {
-    const d = new de(i);
-    return new It(d);
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [d, c] = x([]), [y, g] = x(!1), [F, m] = x(null), [T, A] = x(!1), L = Z(() => {
+    const u = new de(i);
+    return new It(u);
   }, [i]), M = async () => {
     if (!(a != null && a.id)) {
-      m([]);
+      c([]);
       return;
     }
-    f(!0), g(null);
+    g(!0), m(null);
     try {
-      const d = await L.getTenantFeatureFlags(a.id, o);
-      m(d);
-    } catch (d) {
-      const v = d instanceof Error ? d.message : "Failed to fetch feature flags";
-      g(v), n.onError && n.onError(d instanceof Error ? d : new Error(v));
+      const u = await L.getTenantFeatureFlags(a.id, o);
+      c(u);
+    } catch (u) {
+      const v = u instanceof Error ? u.message : "Failed to fetch feature flags";
+      m(v), n.onError && n.onError(u instanceof Error ? u : new Error(v));
     } finally {
-      f(!1);
+      g(!1);
     }
   };
   ne(() => {
     if (!i || !o) return;
     M().finally(() => A(!0));
-    const d = n.refreshInterval || 5 * 60 * 1e3, v = setInterval(M, d);
+    const u = n.refreshInterval || 5 * 60 * 1e3, v = setInterval(M, u);
     return () => clearInterval(v);
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
   const P = Z(() => {
-    const d = (R) => {
-      const k = c.find((I) => I.key === R);
+    const u = (R) => {
+      const k = d.find((I) => I.key === R);
       return (k == null ? void 0 : k.value) === !0;
-    }, v = (R) => c.find((k) => k.key === R), N = (R) => {
-      const k = c.find((I) => I.key === R);
+    }, v = (R) => d.find((k) => k.key === R), N = (R) => {
+      const k = d.find((I) => I.key === R);
       return k ? k.value ? "enabled" : "disabled" : "not_found";
     }, $ = async () => {
       await M();
     }, w = !!(i && o) && (T || !(a != null && a.id));
     return {
-      featureFlags: c,
+      featureFlags: d,
       loading: y,
-      error: D,
+      error: F,
       isReady: w,
-      isEnabled: d,
+      isEnabled: u,
       getFlag: v,
       getFlagState: N,
       refresh: $
     };
-  }, [c, y, D, i, o, a == null ? void 0 : a.id, T]);
-  return /* @__PURE__ */ s(He.Provider, { value: P, children: e });
+  }, [d, y, F, i, o, a == null ? void 0 : a.id, T]);
+  return /* @__PURE__ */ s(Ce.Provider, { value: P, children: e });
 }
 function Mt() {
-  const n = le(He);
+  const n = le(Ce);
   if (!n)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return n;
 }
 function Ye() {
-  return le(He);
+  return le(Ce);
 }
 class Lt {
   constructor(e, t) {
@@ -1718,34 +1740,34 @@ class Lt {
     )).data;
   }
 }
-const Be = ye(void 0);
+const He = ye(void 0);
 function Pr({ config: n = {}, children: e }) {
-  const t = Fe(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, c] = x(null), [m, y] = x(!1), [f, D] = x(null), [g, T] = x(!1), A = Z(() => {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, d] = x(null), [c, y] = x(!1), [g, F] = x(null), [m, T] = x(!1), A = Z(() => {
     const P = new de(i);
     return new Lt(P);
   }, [i]), L = async () => {
     if (!(o != null && o.id)) {
-      c(null);
+      d(null);
       return;
     }
-    y(!0), D(null);
+    y(!0), F(null);
     try {
       const P = await A.getTenantSubscriptionFeatures(o.id);
-      c(P);
+      d(P);
     } catch (P) {
-      const d = P instanceof Error ? P.message : "Failed to fetch subscription";
-      D(d), n.onError && n.onError(P instanceof Error ? P : new Error(d));
+      const u = P instanceof Error ? P.message : "Failed to fetch subscription";
+      F(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
     } finally {
       y(!1);
     }
   };
   ne(() => {
     if (!i || (L().finally(() => T(!0)), !n.refreshInterval)) return;
-    const P = n.refreshInterval || 10 * 60 * 1e3, d = setInterval(L, P);
-    return () => clearInterval(d);
+    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(L, P);
+    return () => clearInterval(u);
   }, [o == null ? void 0 : o.id, i, n.refreshInterval]);
   const M = Z(() => {
-    const P = (a == null ? void 0 : a.features) || [], d = (k) => {
+    const P = (a == null ? void 0 : a.features) || [], u = (k) => {
       const I = P.find((l) => l.key === k);
       return I ? I.type === "BOOLEAN" || I.type === "boolean" ? I.value === !0 : !!I.value : !1;
     }, v = (k) => P.find((I) => I.key === k), N = (k, I) => {
@@ -1753,30 +1775,30 @@ function Pr({ config: n = {}, children: e }) {
       return l ? l.value : I;
     }, $ = (k) => !a || !a.isActive ? !1 : k.includes(a.planId), w = async () => {
       await L();
-    }, R = !!i && (g || !(o != null && o.id));
+    }, R = !!i && (m || !(o != null && o.id));
     return {
       subscription: a,
       features: P,
-      loading: m,
-      error: f,
+      loading: c,
+      error: g,
       isReady: R,
-      isFeatureEnabled: d,
+      isFeatureEnabled: u,
       getFeature: v,
       getFeatureValue: N,
       hasAllowedPlan: $,
       refresh: w
     };
-  }, [a, m, f, i, o == null ? void 0 : o.id, g]);
-  return /* @__PURE__ */ s(Be.Provider, { value: M, children: e });
+  }, [a, c, g, i, o == null ? void 0 : o.id, m]);
+  return /* @__PURE__ */ s(He.Provider, { value: M, children: e });
 }
 function Nt() {
-  const n = le(Be);
+  const n = le(He);
   if (n === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return n;
 }
 function Xe() {
-  return le(Be) ?? null;
+  return le(He) ?? null;
 }
 var ae = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(ae || {});
 const Oe = {
@@ -1832,7 +1854,7 @@ function Er() {
     throw new Error("useRouting must be used within a RoutingProvider");
   return n;
 }
-function Dt() {
+function Ft() {
   const n = le(qe);
   return n || {
     zoneRoots: Oe,
@@ -1844,7 +1866,7 @@ function Dt() {
     returnToStorage: "url"
   };
 }
-const Ge = () => /* @__PURE__ */ u(
+const Ge = () => /* @__PURE__ */ h(
   "div",
   {
     style: {
@@ -1881,11 +1903,11 @@ const Ge = () => /* @__PURE__ */ u(
       )
     ]
   }
-), Qe = ({
+), Ke = ({
   userType: n,
   minUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ u(
+}) => /* @__PURE__ */ h(
   "div",
   {
     style: {
@@ -1903,26 +1925,26 @@ const Ge = () => /* @__PURE__ */ u(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
       /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && n ? /* @__PURE__ */ u(_, { children: [
-        /* @__PURE__ */ u("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+      e && n ? /* @__PURE__ */ h(_, { children: [
+        /* @__PURE__ */ h("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
           /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
-        /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        /* @__PURE__ */ h("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
           /* @__PURE__ */ s("strong", { children: n })
         ] })
-      ] }) : /* @__PURE__ */ u(_, { children: [
+      ] }) : /* @__PURE__ */ h(_, { children: [
         /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
-        t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        t && t.length > 0 && /* @__PURE__ */ h("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
           /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
       ] })
     ]
   }
-), Ft = (n, e) => {
+), Dt = (n, e) => {
   const t = {
     [ae.USER]: 1,
     [ae.TENANT_ADMIN]: 2,
@@ -1937,17 +1959,17 @@ function Ir({
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: c, hasAnyPermission: m, hasAllPermissions: y } = he();
+  const { hasValidSession: o, sessionManager: a, hasPermission: d, hasAnyPermission: c, hasAllPermissions: y } = he();
   if (!o())
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
-  const f = a.getUser();
-  if (!f)
+  const g = a.getUser();
+  if (!g)
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
-  if (t && !Ft(f.userType, t))
-    return /* @__PURE__ */ s(Qe, { userType: f.userType, minUserType: t });
-  if (r && r.length > 0 && !(i ? y(r) : m(r))) {
-    const g = r.filter((T) => !c(T)).map((T) => typeof T == "string" ? T : T.name);
-    return /* @__PURE__ */ s(Qe, { missingPermissions: g });
+  if (t && !Dt(g.userType, t))
+    return /* @__PURE__ */ s(Ke, { userType: g.userType, minUserType: t });
+  if (r && r.length > 0 && !(i ? y(r) : c(r))) {
+    const m = r.filter((T) => !d(T)).map((T) => typeof T == "string" ? T : T.name);
+    return /* @__PURE__ */ s(Ke, { missingPermissions: m });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
@@ -1964,7 +1986,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ h(
       "div",
       {
         style: {
@@ -1978,7 +2000,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
-          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ h("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -1987,7 +2009,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Ke = ({
+), Qe = ({
   userType: n,
   requiredUserType: e,
   missingPermissions: t
@@ -2004,7 +2026,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ h(
       "div",
       {
         style: {
@@ -2017,19 +2039,19 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
         children: [
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && n ? /* @__PURE__ */ u(_, { children: [
-            /* @__PURE__ */ u("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+          e && n ? /* @__PURE__ */ h(_, { children: [
+            /* @__PURE__ */ h("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
               /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
-            /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ h("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
               /* @__PURE__ */ s("strong", { children: n })
             ] })
-          ] }) : /* @__PURE__ */ u(_, { children: [
+          ] }) : /* @__PURE__ */ h(_, { children: [
             /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
-            t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            t && t.length > 0 && /* @__PURE__ */ h("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
               /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
@@ -2047,34 +2069,34 @@ function Mr({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: c, hasPermission: m, hasAnyPermission: y, hasAllPermissions: f } = he(), D = xe();
+  const { hasValidSession: a, sessionManager: d, hasPermission: c, hasAnyPermission: y, hasAllPermissions: g } = he(), F = xe();
   if (ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
-    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ u(_, { children: [
+    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ h(_, { children: [
       /* @__PURE__ */ s(Ut, { redirectPath: e }),
-      /* @__PURE__ */ s(Se, { to: e, state: { from: D.pathname }, replace: !0 })
+      /* @__PURE__ */ s(Se, { to: e, state: { from: F.pathname }, replace: !0 })
     ] });
-  const g = c.getUser();
-  if (!g)
-    return /* @__PURE__ */ s(Se, { to: e, state: { from: D.pathname }, replace: !0 });
-  if (t && !$t(g.userType, t))
+  const m = d.getUser();
+  if (!m)
+    return /* @__PURE__ */ s(Se, { to: e, state: { from: F.pathname }, replace: !0 });
+  if (t && !$t(m.userType, t))
     return /* @__PURE__ */ s(
-      Ke,
+      Qe,
       {
-        userType: g.userType,
+        userType: m.userType,
         requiredUserType: t
       }
     );
-  if (r && r.length > 0 && !(i ? f(r) : y(r))) {
-    const A = r.filter((L) => !m(L)).map((L) => typeof L == "string" ? L : L.name);
-    return /* @__PURE__ */ s(Ke, { missingPermissions: A });
+  if (r && r.length > 0 && !(i ? g(r) : y(r))) {
+    const A = r.filter((L) => !c(L)).map((L) => typeof L == "string" ? L : L.name);
+    return /* @__PURE__ */ s(Qe, { missingPermissions: A });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Bt = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2087,7 +2109,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ h(
       "div",
       {
         style: {
@@ -2101,7 +2123,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
-          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ h("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2117,12 +2139,12 @@ function Lr({ children: n, redirectTo: e = "/", fallback: t }) {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ u(_, { children: [
-    /* @__PURE__ */ s(Ct, { redirectPath: e }),
+  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ h(_, { children: [
+    /* @__PURE__ */ s(Bt, { redirectPath: e }),
     /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const Ht = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2135,7 +2157,7 @@ const Ht = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ u(
+    children: /* @__PURE__ */ h(
       "div",
       {
         style: {
@@ -2149,7 +2171,7 @@ const Ht = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
-          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ h("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2165,19 +2187,19 @@ function Nr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ u(_, { children: [
-    /* @__PURE__ */ s(Ht, { redirectPath: e }),
+  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ h(_, { children: [
+    /* @__PURE__ */ s(Ct, { redirectPath: e }),
     /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
   ] }) : /* @__PURE__ */ s(_, { children: n });
 }
-function Bt(n, e) {
+function Ht(n, e) {
   return e ? n ? Array.isArray(e) ? e.includes(n) : n === e : !1 : !0;
 }
 function Ze(n, e) {
   return !n || n === "optional" ? "skip" : n === "required" ? e ? "pass" : "fail" : n === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
 function Ot(n, e) {
-  return Ze(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ze(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Bt(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
+  return Ze(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ze(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ht(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
 }
 function qt(n, e) {
   return n.hasTenant ? n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
@@ -2201,13 +2223,13 @@ const ue = ({
   userType: i,
   requiredPermissions: o,
   requireAllPermissions: a = !0,
-  returnTo: c,
-  onAccessDenied: m,
+  returnTo: d,
+  onAccessDenied: c,
   redirectTo: y,
-  loadingFallback: f,
-  accessDeniedFallback: D
+  loadingFallback: g,
+  accessDeniedFallback: F
 }) => {
-  const g = xe(), { isAuthenticated: T, isAuthInitializing: A, currentUser: L, userPermissions: M } = he(), { tenant: P, isTenantLoading: d } = Te(), v = Dt(), N = Z(() => {
+  const m = xe(), { isAuthenticated: T, isAuthInitializing: A, currentUser: L, userPermissions: M } = he(), { tenant: P, isTenantLoading: u } = Te(), v = Ft(), N = Z(() => {
     if (e)
       return v.presets[e];
   }, [e, v.presets]), $ = Z(
@@ -2225,7 +2247,7 @@ const ue = ({
       isAuthenticated: T,
       userType: L == null ? void 0 : L.userType,
       permissions: M,
-      isLoading: A || d
+      isLoading: A || u
     }),
     [
       P,
@@ -2233,7 +2255,7 @@ const ue = ({
       L == null ? void 0 : L.userType,
       M,
       A,
-      d
+      u
     ]
   ), R = Z(() => w.isLoading ? null : Ot($, w), [$, w]), k = Z(() => R ? y || qt(w, v.zoneRoots) : null, [R, y, w, v.zoneRoots]), I = Z(() => !R || !k ? null : {
     type: R,
@@ -2252,32 +2274,32 @@ const ue = ({
     redirectTo: k
   }, [R, k, $, w]);
   if (ne(() => {
-    I && (m ? m(I) : v.onAccessDenied && v.onAccessDenied(I));
-  }, [I, m, v]), ne(() => {
-    I && c && zt(c, g.pathname + g.search, v.returnToStorage);
+    I && (c ? c(I) : v.onAccessDenied && v.onAccessDenied(I));
+  }, [I, c, v]), ne(() => {
+    I && d && zt(d, m.pathname + m.search, v.returnToStorage);
   }, [
     I,
-    c,
-    g.pathname,
-    g.search,
+    d,
+    m.pathname,
+    m.search,
     v.returnToStorage
   ]), w.isLoading)
-    return /* @__PURE__ */ s(_, { children: f ?? v.loadingFallback ?? null });
+    return /* @__PURE__ */ s(_, { children: g ?? v.loadingFallback ?? null });
   if (I && k) {
-    const l = D ?? v.accessDeniedFallback;
+    const l = F ?? v.accessDeniedFallback;
     if (l)
       return /* @__PURE__ */ s(_, { children: l });
     const z = _t(
       k,
-      c,
-      g.pathname + g.search,
+      d,
+      m.pathname + m.search,
       v.returnToParam,
       v.returnToStorage
     );
     return /* @__PURE__ */ s(Se, { to: z, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: n });
-}, Dr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", ...n }), Fr = (n) => /* @__PURE__ */ s(ue, { tenant: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(ue, { auth: "required", ...n }), $r = (n) => /* @__PURE__ */ s(ue, { auth: "forbidden", ...n }), Cr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Hr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.USER, ...n }), Br = (n) => /* @__PURE__ */ s(ue, { tenant: "optional", auth: "optional", ...n }), Or = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "required", ...n }), qr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "optional", ...n }), _r = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "forbidden", ...n }), Vt = () => /* @__PURE__ */ u(
+}, Fr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ue, { tenant: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(ue, { auth: "required", ...n }), $r = (n) => /* @__PURE__ */ s(ue, { auth: "forbidden", ...n }), Br = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.USER, ...n }), Hr = (n) => /* @__PURE__ */ s(ue, { tenant: "optional", auth: "optional", ...n }), Or = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "required", ...n }), qr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "optional", ...n }), _r = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "forbidden", ...n }), Vt = () => /* @__PURE__ */ h(
   "div",
   {
     style: {
@@ -2300,8 +2322,8 @@ function zr({
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: c } = Nt();
-  return c ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: d } = Nt();
+  return d ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2313,7 +2335,7 @@ function zr({
     }
   ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : r && !a(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: n }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
 }
-const Wt = ({ flagName: n }) => /* @__PURE__ */ u(
+const Wt = ({ flagName: n }) => /* @__PURE__ */ h(
   "div",
   {
     style: {
@@ -2332,7 +2354,7 @@ const Wt = ({ flagName: n }) => /* @__PURE__ */ u(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
       /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
-      /* @__PURE__ */ u("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+      /* @__PURE__ */ h("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
         n,
         '" is disabled'
@@ -2357,7 +2379,7 @@ function Vr({ name: n, children: e, fallback: t }) {
     }
   ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Wt, { flagName: n }) });
 }
-const jt = () => /* @__PURE__ */ u(
+const jt = () => /* @__PURE__ */ h(
   "svg",
   {
     width: "16",
@@ -2374,7 +2396,7 @@ const jt = () => /* @__PURE__ */ u(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Gt = () => /* @__PURE__ */ u(
+), Gt = () => /* @__PURE__ */ h(
   "svg",
   {
     width: "16",
@@ -2391,10 +2413,10 @@ const jt = () => /* @__PURE__ */ u(
       /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), Qt = {
+), Kt = {
   showPassword: /* @__PURE__ */ s(jt, {}),
   hidePassword: /* @__PURE__ */ s(Gt, {})
-}, Kt = {
+}, Qt = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2530,21 +2552,21 @@ function Wr({
   onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: c,
-  showForgotPassword: m = !0,
+  onMagicLinkClick: d,
+  showForgotPassword: c = !0,
   showSignupLink: y = !0,
-  showMagicLinkOption: f = !0,
-  className: D
+  showMagicLinkOption: g = !0,
+  className: F
 }) {
-  const [g, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [d, v] = x(!1), [N, $] = x(""), [w, R] = x({}), { login: k } = he(), I = { ...Kt, ...n }, l = { ...Zt, ...e }, z = { ...Qt, ...t }, F = () => {
-    const h = {};
-    return g.trim() || (h.username = !0), A.trim() || (h.password = !0), R(h), Object.keys(h).length === 0;
-  }, p = async (h) => {
-    if (h.preventDefault(), !!F()) {
+  const [m, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [u, v] = x(!1), [N, $] = x(""), [w, R] = x({}), { login: k } = he(), I = { ...Qt, ...n }, l = { ...Zt, ...e }, z = { ...Kt, ...t }, D = () => {
+    const p = {};
+    return m.trim() || (p.username = !0), A.trim() || (p.password = !0), R(p), Object.keys(p).length === 0;
+  }, f = async (p) => {
+    if (p.preventDefault(), !!D()) {
       v(!0), $("");
       try {
         const S = await k({
-          username: g,
+          username: m,
           password: A
           // tenantId inferred from context automatically
         });
@@ -2556,18 +2578,18 @@ function Wr({
         v(!1);
       }
     }
-  }, U = (h) => ({
+  }, U = (p) => ({
     ...l.input,
-    ...w[h] ? l.inputError : {}
+    ...w[p] ? l.inputError : {}
   }), b = () => ({
     ...l.button,
-    ...d ? l.buttonLoading : {},
-    ...!g || !A || d ? l.buttonDisabled : {}
+    ...u ? l.buttonLoading : {},
+    ...!m || !A || u ? l.buttonDisabled : {}
   });
-  return /* @__PURE__ */ u("div", { className: D, style: l.container, children: [
+  return /* @__PURE__ */ h("div", { className: F, style: l.container, children: [
     /* @__PURE__ */ s("h2", { style: l.title, children: I.title }),
-    /* @__PURE__ */ u("form", { onSubmit: p, style: l.form, children: [
-      /* @__PURE__ */ u("div", { style: l.fieldGroup, children: [
+    /* @__PURE__ */ h("form", { onSubmit: f, style: l.form, children: [
+      /* @__PURE__ */ h("div", { style: l.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: l.label, children: I.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2575,19 +2597,19 @@ function Wr({
             id: "username",
             name: "username",
             type: "text",
-            value: g,
-            onChange: (h) => {
-              T(h.target.value), w.username && R((S) => ({ ...S, username: !1 }));
+            value: m,
+            onChange: (p) => {
+              T(p.target.value), w.username && R((S) => ({ ...S, username: !1 }));
             },
             placeholder: I.usernamePlaceholder,
             style: U("username"),
-            disabled: d
+            disabled: u
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: l.fieldGroup, children: [
+      /* @__PURE__ */ h("div", { style: l.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: l.label, children: I.passwordLabel }),
-        /* @__PURE__ */ u("div", { style: l.inputContainer, children: [
+        /* @__PURE__ */ h("div", { style: l.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
@@ -2595,15 +2617,15 @@ function Wr({
               name: "password",
               type: M ? "text" : "password",
               value: A,
-              onChange: (h) => {
-                L(h.target.value), w.password && R((S) => ({ ...S, password: !1 }));
+              onChange: (p) => {
+                L(p.target.value), w.password && R((S) => ({ ...S, password: !1 }));
               },
               placeholder: I.passwordPlaceholder,
               style: {
                 ...U("password"),
                 ...l.inputWithIcon
               },
-              disabled: d
+              disabled: u
             }
           ),
           /* @__PURE__ */ s(
@@ -2612,29 +2634,29 @@ function Wr({
               type: "button",
               onClick: () => P(!M),
               style: l.passwordToggle,
-              disabled: d,
+              disabled: u,
               "aria-label": M ? I.hidePasswordAriaLabel : I.showPasswordAriaLabel,
               children: M ? z.hidePassword : z.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || !A || d, style: b(), children: d ? I.loadingText : I.submitButton }),
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !m || !A || u, style: b(), children: u ? I.loadingText : I.submitButton }),
       N && /* @__PURE__ */ s("div", { style: l.errorText, children: N })
     ] }),
-    (m || y || f) && /* @__PURE__ */ u("div", { style: l.linkContainer, children: [
-      f && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: l.divider, children: [
+    (c || y || g) && /* @__PURE__ */ h("div", { style: l.linkContainer, children: [
+      g && /* @__PURE__ */ h("div", { children: [
+        /* @__PURE__ */ h("span", { style: l.divider, children: [
           I.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: c, style: l.link, children: I.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: d, style: l.link, children: I.magicLinkLink })
       ] }),
-      f && (m || y) && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
-      m && /* @__PURE__ */ s("a", { onClick: o, style: l.link, children: I.forgotPasswordLink }),
-      m && y && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
-      y && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: l.divider, children: [
+      g && (c || y) && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
+      c && /* @__PURE__ */ s("a", { onClick: o, style: l.link, children: I.forgotPasswordLink }),
+      c && y && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
+      y && /* @__PURE__ */ h("div", { children: [
+        /* @__PURE__ */ h("span", { style: l.divider, children: [
           I.signupText,
           " "
         ] }),
@@ -2785,61 +2807,61 @@ function jr({
   onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: c = !0,
-  showMagicLinkOption: m = !0,
+  showLoginLink: d = !0,
+  showMagicLinkOption: c = !0,
   className: y
 }) {
   var V;
-  const [f, D] = x(""), [g, T] = x(""), [A, L] = x(""), [M, P] = x(""), [d, v] = x(""), [N, $] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, z] = x(""), [F, p] = x({}), { signup: U, signupTenantAdmin: b } = he(), h = ((V = pe()) == null ? void 0 : V.tenant) ?? null, S = { ...Jt, ...n }, E = { ...Yt, ...e }, Q = () => {
-    const B = {};
-    return f.trim() || (B.name = !0), !A.trim() && !M.trim() && (B.email = !0, B.phoneNumber = !0), d.trim() || (B.password = !0), N.trim() || (B.confirmPassword = !0), t === "tenant" && !w.trim() && (B.tenantName = !0), p(B), Object.keys(B).length === 0;
-  }, G = async (B) => {
-    if (B.preventDefault(), !!Q()) {
-      if (d !== N) {
-        z(S.passwordMismatchError), p({ confirmPassword: !0 });
+  const [g, F] = x(""), [m, T] = x(""), [A, L] = x(""), [M, P] = x(""), [u, v] = x(""), [N, $] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, z] = x(""), [D, f] = x({}), { signup: U, signupTenantAdmin: b } = he(), p = ((V = pe()) == null ? void 0 : V.tenant) ?? null, S = { ...Jt, ...n }, E = { ...Yt, ...e }, K = () => {
+    const H = {};
+    return g.trim() || (H.name = !0), !A.trim() && !M.trim() && (H.email = !0, H.phoneNumber = !0), u.trim() || (H.password = !0), N.trim() || (H.confirmPassword = !0), t === "tenant" && !w.trim() && (H.tenantName = !0), f(H), Object.keys(H).length === 0;
+  }, G = async (H) => {
+    if (H.preventDefault(), !!K()) {
+      if (u !== N) {
+        z(S.passwordMismatchError), f({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(h != null && h.id)) {
+      if (t === "user" && !(p != null && p.id)) {
         z(S.tenantNotFoundError);
         return;
       }
       I(!0), z("");
       try {
-        let C;
-        t === "tenant" ? C = await b({
+        let B;
+        t === "tenant" ? B = await b({
           email: A || void 0,
           phoneNumber: M || void 0,
-          name: f,
-          password: d,
+          name: g,
+          password: u,
           tenantName: w,
-          lastName: g || void 0
-        }) : C = await U({
+          lastName: m || void 0
+        }) : B = await U({
           email: A || void 0,
           phoneNumber: M || void 0,
-          name: f,
-          password: d,
-          tenantId: h.id,
-          lastName: g || void 0
-        }), r == null || r(C);
-      } catch (C) {
-        const ce = C.message || S.errorMessage;
+          name: g,
+          password: u,
+          tenantId: p.id,
+          lastName: m || void 0
+        }), r == null || r(B);
+      } catch (B) {
+        const ce = B.message || S.errorMessage;
         z(ce), i == null || i(ce);
       } finally {
         I(!1);
       }
     }
-  }, X = (B) => ({
+  }, X = (H) => ({
     ...E.input,
-    ...F[B] ? E.inputError : {}
+    ...D[H] ? E.inputError : {}
   }), W = () => ({
     ...E.button,
     ...k ? E.buttonLoading : {},
-    ...!f || !A && !M || !d || !N || k || t === "tenant" && !w ? E.buttonDisabled : {}
-  }), q = f && (A || M) && d && N && (t === "user" || w);
-  return /* @__PURE__ */ u("div", { className: y, style: E.container, children: [
+    ...!g || !A && !M || !u || !N || k || t === "tenant" && !w ? E.buttonDisabled : {}
+  }), q = g && (A || M) && u && N && (t === "user" || w);
+  return /* @__PURE__ */ h("div", { className: y, style: E.container, children: [
     /* @__PURE__ */ s("h2", { style: E.title, children: S.title }),
-    /* @__PURE__ */ u("form", { onSubmit: G, style: E.form, children: [
-      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+    /* @__PURE__ */ h("form", { onSubmit: G, style: E.form, children: [
+      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.nameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2847,9 +2869,9 @@ function jr({
             id: "name",
             name: "name",
             type: "text",
-            value: f,
-            onChange: (B) => {
-              D(B.target.value), F.name && p((C) => ({ ...C, name: !1 }));
+            value: g,
+            onChange: (H) => {
+              F(H.target.value), D.name && f((B) => ({ ...B, name: !1 }));
             },
             placeholder: S.namePlaceholder,
             style: X("name"),
@@ -2857,7 +2879,7 @@ function jr({
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2865,15 +2887,15 @@ function jr({
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: g,
-            onChange: (B) => T(B.target.value),
+            value: m,
+            onChange: (H) => T(H.target.value),
             placeholder: S.lastNamePlaceholder,
             style: E.input,
             disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.emailLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2882,8 +2904,8 @@ function jr({
             name: "email",
             type: "email",
             value: A,
-            onChange: (B) => {
-              L(B.target.value), F.email && p((C) => ({ ...C, email: !1, phoneNumber: !1 }));
+            onChange: (H) => {
+              L(H.target.value), D.email && f((B) => ({ ...B, email: !1, phoneNumber: !1 }));
             },
             placeholder: S.emailPlaceholder,
             style: X("email"),
@@ -2891,7 +2913,7 @@ function jr({
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2900,8 +2922,8 @@ function jr({
             name: "phoneNumber",
             type: "tel",
             value: M,
-            onChange: (B) => {
-              P(B.target.value), F.phoneNumber && p((C) => ({ ...C, email: !1, phoneNumber: !1 }));
+            onChange: (H) => {
+              P(H.target.value), D.phoneNumber && f((B) => ({ ...B, email: !1, phoneNumber: !1 }));
             },
             placeholder: S.phoneNumberPlaceholder,
             style: X("phoneNumber"),
@@ -2910,7 +2932,7 @@ function jr({
         )
       ] }),
       /* @__PURE__ */ s("div", { style: E.hintText, children: S.contactMethodHint }),
-      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2918,9 +2940,9 @@ function jr({
             id: "password",
             name: "password",
             type: "password",
-            value: d,
-            onChange: (B) => {
-              v(B.target.value), F.password && p((C) => ({ ...C, password: !1 }));
+            value: u,
+            onChange: (H) => {
+              v(H.target.value), D.password && f((B) => ({ ...B, password: !1 }));
             },
             placeholder: S.passwordPlaceholder,
             style: X("password"),
@@ -2928,7 +2950,7 @@ function jr({
           }
         )
       ] }),
-      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2937,8 +2959,8 @@ function jr({
             name: "confirmPassword",
             type: "password",
             value: N,
-            onChange: (B) => {
-              $(B.target.value), F.confirmPassword && p((C) => ({ ...C, confirmPassword: !1 })), l === S.passwordMismatchError && z("");
+            onChange: (H) => {
+              $(H.target.value), D.confirmPassword && f((B) => ({ ...B, confirmPassword: !1 })), l === S.passwordMismatchError && z("");
             },
             placeholder: S.confirmPasswordPlaceholder,
             style: X("confirmPassword"),
@@ -2946,7 +2968,7 @@ function jr({
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
+      t === "tenant" && /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2955,8 +2977,8 @@ function jr({
             name: "tenantName",
             type: "text",
             value: w,
-            onChange: (B) => {
-              R(B.target.value), F.tenantName && p((C) => ({ ...C, tenantName: !1 }));
+            onChange: (H) => {
+              R(H.target.value), D.tenantName && f((B) => ({ ...B, tenantName: !1 }));
             },
             placeholder: S.tenantNamePlaceholder,
             style: X("tenantName"),
@@ -2967,17 +2989,17 @@ function jr({
       /* @__PURE__ */ s("button", { type: "submit", disabled: !q || k, style: W(), children: k ? S.loadingText : S.submitButton }),
       l && /* @__PURE__ */ s("div", { style: E.errorText, children: l })
     ] }),
-    (c || m) && /* @__PURE__ */ u("div", { style: E.linkContainer, children: [
-      m && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: E.divider, children: [
+    (d || c) && /* @__PURE__ */ h("div", { style: E.linkContainer, children: [
+      c && /* @__PURE__ */ h("div", { children: [
+        /* @__PURE__ */ h("span", { style: E.divider, children: [
           S.magicLinkText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: a, style: E.link, children: S.magicLinkLink })
       ] }),
-      m && c && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
-      c && /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: E.divider, children: [
+      c && d && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
+      d && /* @__PURE__ */ h("div", { children: [
+        /* @__PURE__ */ h("span", { style: E.divider, children: [
           S.loginText,
           " "
         ] }),
@@ -3141,38 +3163,38 @@ function Gr({
   onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: c,
-  verifyToken: m,
+  className: d,
+  verifyToken: c,
   frontendUrl: y
 }) {
   var W;
-  const [f, D] = x(""), [g, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [d, v] = x(!1), [N, $] = x(""), [w, R] = x(""), [k, I] = x({}), [l, z] = x(!1), { sendMagicLink: F, verifyMagicLink: p } = he(), U = ((W = pe()) == null ? void 0 : W.tenant) ?? null, b = { ...Xt, ...n }, h = { ...er, ...e };
+  const [g, F] = x(""), [m, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [u, v] = x(!1), [N, $] = x(""), [w, R] = x(""), [k, I] = x({}), [l, z] = x(!1), { sendMagicLink: D, verifyMagicLink: f } = he(), U = ((W = pe()) == null ? void 0 : W.tenant) ?? null, b = { ...Xt, ...n }, p = { ...er, ...e };
   ne(() => {
-    m && S(m);
-  }, [m]);
+    c && S(c);
+  }, [c]);
   const S = async (q) => {
-    if (!U || !f) {
+    if (!U || !g) {
       $(b.missingTenantOrEmailError);
       return;
     }
     v(!0), $("");
     try {
-      const V = await p({
+      const V = await f({
         token: q,
-        email: f
+        email: g
         // tenantId inferred from context automatically
       });
       t == null || t(V);
     } catch (V) {
-      const B = V.message || "Failed to verify magic link";
-      $(B), r == null || r(B);
+      const H = V.message || "Failed to verify magic link";
+      $(H), r == null || r(H);
     } finally {
       v(!1);
     }
   }, E = () => {
     const q = {};
-    return f.trim() || (q.email = !0), l && !g.trim() && (q.name = !0), I(q), Object.keys(q).length === 0;
-  }, Q = async (q) => {
+    return g.trim() || (q.email = !0), l && !m.trim() && (q.name = !0), I(q), Object.keys(q).length === 0;
+  }, K = async (q) => {
     if (q.preventDefault(), !!E()) {
       if (!(U != null && U.id)) {
         $(b.tenantNotFoundError);
@@ -3180,84 +3202,84 @@ function Gr({
       }
       P(!0), $(""), R("");
       try {
-        const V = y || (typeof window < "u" ? window.location.origin : ""), B = await F({
-          email: f,
+        const V = y || (typeof window < "u" ? window.location.origin : ""), H = await D({
+          email: g,
           tenantId: U.id,
           frontendUrl: V,
-          name: l ? g : void 0,
+          name: l ? m : void 0,
           lastName: l ? A : void 0
         });
-        R(b.successMessage), t == null || t(B);
+        R(b.successMessage), t == null || t(H);
       } catch (V) {
-        const B = V.message || b.errorMessage;
-        $(B), r == null || r(B);
+        const H = V.message || b.errorMessage;
+        $(H), r == null || r(H);
       } finally {
         P(!1);
       }
     }
   }, G = (q) => ({
-    ...h.input,
-    ...k[q] ? h.inputError : {}
+    ...p.input,
+    ...k[q] ? p.inputError : {}
   }), X = () => ({
-    ...h.button,
-    ...M || d ? h.buttonLoading : {},
-    ...!f || M || d ? h.buttonDisabled : {}
+    ...p.button,
+    ...M || u ? p.buttonLoading : {},
+    ...!g || M || u ? p.buttonDisabled : {}
   });
-  return d ? /* @__PURE__ */ u("div", { className: c, style: h.container, children: [
-    /* @__PURE__ */ s("h2", { style: h.title, children: b.verifyingText }),
-    /* @__PURE__ */ s("div", { style: h.verifyingContainer, children: /* @__PURE__ */ s("div", { style: h.verifyingText, children: b.verifyingDescription }) })
-  ] }) : /* @__PURE__ */ u("div", { className: c, style: h.container, children: [
-    /* @__PURE__ */ s("h2", { style: h.title, children: b.title }),
-    /* @__PURE__ */ s("p", { style: h.description, children: b.description }),
-    /* @__PURE__ */ u("form", { onSubmit: Q, style: h.form, children: [
-      /* @__PURE__ */ u("div", { style: h.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: h.label, children: b.emailLabel }),
+  return u ? /* @__PURE__ */ h("div", { className: d, style: p.container, children: [
+    /* @__PURE__ */ s("h2", { style: p.title, children: b.verifyingText }),
+    /* @__PURE__ */ s("div", { style: p.verifyingContainer, children: /* @__PURE__ */ s("div", { style: p.verifyingText, children: b.verifyingDescription }) })
+  ] }) : /* @__PURE__ */ h("div", { className: d, style: p.container, children: [
+    /* @__PURE__ */ s("h2", { style: p.title, children: b.title }),
+    /* @__PURE__ */ s("p", { style: p.description, children: b.description }),
+    /* @__PURE__ */ h("form", { onSubmit: K, style: p.form, children: [
+      /* @__PURE__ */ h("div", { style: p.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: p.label, children: b.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: f,
+            value: g,
             onChange: (q) => {
-              D(q.target.value), k.email && I((V) => ({ ...V, email: !1 }));
+              F(q.target.value), k.email && I((V) => ({ ...V, email: !1 }));
             },
             placeholder: b.emailPlaceholder,
             style: G("email"),
-            disabled: M || d
+            disabled: M || u
           }
         )
       ] }),
-      !l && /* @__PURE__ */ s("div", { style: h.toggleContainer, children: /* @__PURE__ */ s(
+      !l && /* @__PURE__ */ s("div", { style: p.toggleContainer, children: /* @__PURE__ */ s(
         "button",
         {
           type: "button",
           onClick: () => z(!0),
-          style: h.toggleLink,
+          style: p.toggleLink,
           children: b.showNameToggle
         }
       ) }),
-      l && /* @__PURE__ */ u(_, { children: [
-        /* @__PURE__ */ u("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: h.label, children: b.nameLabel }),
+      l && /* @__PURE__ */ h(_, { children: [
+        /* @__PURE__ */ h("div", { style: p.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: p.label, children: b.nameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: g,
+              value: m,
               onChange: (q) => {
                 T(q.target.value), k.name && I((V) => ({ ...V, name: !1 }));
               },
               placeholder: b.namePlaceholder,
               style: G("name"),
-              disabled: M || d
+              disabled: M || u
             }
           )
         ] }),
-        /* @__PURE__ */ u("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: h.label, children: b.lastNameLabel }),
+        /* @__PURE__ */ h("div", { style: p.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: p.label, children: b.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -3267,42 +3289,42 @@ function Gr({
               value: A,
               onChange: (q) => L(q.target.value),
               placeholder: b.lastNamePlaceholder,
-              style: h.input,
-              disabled: M || d
+              style: p.input,
+              disabled: M || u
             }
           )
         ] }),
-        /* @__PURE__ */ s("div", { style: h.toggleContainer, children: /* @__PURE__ */ s(
+        /* @__PURE__ */ s("div", { style: p.toggleContainer, children: /* @__PURE__ */ s(
           "button",
           {
             type: "button",
             onClick: () => {
               z(!1), T(""), L("");
             },
-            style: h.toggleLink,
+            style: p.toggleLink,
             children: b.hideNameToggle
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !f || M || d, style: X(), children: M ? b.loadingText : b.submitButton }),
-      N && /* @__PURE__ */ s("div", { style: h.errorText, children: N }),
-      w && /* @__PURE__ */ s("div", { style: h.successText, children: w })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || M || u, style: X(), children: M ? b.loadingText : b.submitButton }),
+      N && /* @__PURE__ */ s("div", { style: p.errorText, children: N }),
+      w && /* @__PURE__ */ s("div", { style: p.successText, children: w })
     ] }),
-    a && /* @__PURE__ */ u("div", { style: h.linkContainer, children: [
-      /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: h.divider, children: [
+    a && /* @__PURE__ */ h("div", { style: p.linkContainer, children: [
+      /* @__PURE__ */ h("div", { children: [
+        /* @__PURE__ */ h("span", { style: p.divider, children: [
           b.loginText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: i, style: h.link, children: b.loginLink })
+        /* @__PURE__ */ s("a", { onClick: i, style: p.link, children: b.loginLink })
       ] }),
-      /* @__PURE__ */ s("div", { style: h.divider, children: b.dividerBullet }),
-      /* @__PURE__ */ u("div", { children: [
-        /* @__PURE__ */ u("span", { style: h.divider, children: [
+      /* @__PURE__ */ s("div", { style: p.divider, children: b.dividerBullet }),
+      /* @__PURE__ */ h("div", { children: [
+        /* @__PURE__ */ h("span", { style: p.divider, children: [
           b.signupText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: o, style: h.link, children: b.signupLink })
+        /* @__PURE__ */ s("a", { onClick: o, style: p.link, children: b.signupLink })
       ] })
     ] })
   ] });
@@ -3409,7 +3431,7 @@ const tr = {
   backButtonHover: {
     backgroundColor: "#e5e7eb"
   }
-}, rr = () => /* @__PURE__ */ s("div", { style: tt.spinner }), nr = () => /* @__PURE__ */ u(
+}, rr = () => /* @__PURE__ */ s("div", { style: tt.spinner }), nr = () => /* @__PURE__ */ h(
   "svg",
   {
     width: "48",
@@ -3426,7 +3448,7 @@ const tr = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), sr = () => /* @__PURE__ */ u(
+), sr = () => /* @__PURE__ */ h(
   "svg",
   {
     width: "48",
@@ -3449,7 +3471,7 @@ const tr = {
   success: /* @__PURE__ */ s(nr, {}),
   error: /* @__PURE__ */ s(sr, {})
 };
-function Qr({
+function Kr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -3457,38 +3479,38 @@ function Qr({
   onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: c,
-  token: m,
+  className: d,
+  token: c,
   email: y,
-  appId: f,
-  tenantSlug: D,
-  autoRedirectDelay: g = 3e3
+  appId: g,
+  tenantSlug: F,
+  autoRedirectDelay: m = 3e3
 }) {
-  const [T, A] = x("verifying"), [L, M] = x(""), { verifyMagicLink: P } = he(), d = { ...tr, ...n }, v = { ...tt, ...e }, N = { ...ir, ...t }, $ = () => {
+  const [T, A] = x("verifying"), [L, M] = x(""), { verifyMagicLink: P } = he(), u = { ...tr, ...n }, v = { ...tt, ...e }, N = { ...ir, ...t }, $ = () => {
     if (typeof window > "u") return {};
     const l = new URLSearchParams(window.location.search);
     return {
-      token: m || l.get("token") || "",
+      token: c || l.get("token") || "",
       email: y || l.get("email") || "",
-      appId: f || l.get("appId") || "",
-      tenantSlug: D || l.get("tenantSlug") || void 0
+      appId: g || l.get("appId") || "",
+      tenantSlug: F || l.get("tenantSlug") || void 0
     };
   }, w = async () => {
     A("verifying"), M("");
     try {
       const l = $();
       if (!l.token || !l.email)
-        throw new Error(d.missingParamsError);
+        throw new Error(u.missingParamsError);
       const z = await P({
         token: l.token,
         email: l.email,
         tenantSlug: l.tenantSlug
       });
-      A("success"), r == null || r(z), g > 0 && setTimeout(() => {
+      A("success"), r == null || r(z), m > 0 && setTimeout(() => {
         A("redirecting");
-      }, g);
+      }, m);
     } catch (l) {
-      const z = l.message || d.errorMessage;
+      const z = l.message || u.errorMessage;
       M(z), A("error"), i == null || i(z);
     }
   }, R = () => {
@@ -3502,25 +3524,25 @@ function Qr({
   const I = () => {
     switch (T) {
       case "verifying":
-        return /* @__PURE__ */ u("div", { style: v.message, children: [
+        return /* @__PURE__ */ h("div", { style: v.message, children: [
           N.loading,
-          d.verifyingMessage
+          u.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ u(_, { children: [
+        return /* @__PURE__ */ h(_, { children: [
           N.success,
-          /* @__PURE__ */ s("div", { style: v.successMessage, children: d.successMessage })
+          /* @__PURE__ */ s("div", { style: v.successMessage, children: u.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ u(_, { children: [
+        return /* @__PURE__ */ h(_, { children: [
           N.loading,
-          /* @__PURE__ */ s("div", { style: v.message, children: d.redirectingMessage })
+          /* @__PURE__ */ s("div", { style: v.message, children: u.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ u(_, { children: [
+        return /* @__PURE__ */ h(_, { children: [
           N.error,
-          /* @__PURE__ */ s("div", { style: v.errorMessage, children: L || d.errorMessage }),
-          /* @__PURE__ */ u("div", { style: v.buttonContainer, children: [
+          /* @__PURE__ */ s("div", { style: v.errorMessage, children: L || u.errorMessage }),
+          /* @__PURE__ */ h("div", { style: v.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
               {
@@ -3531,11 +3553,11 @@ function Qr({
                 },
                 onMouseOut: (l) => {
                   const z = v.retryButton || {};
-                  Object.keys(v.retryButtonHover || {}).forEach((F) => {
-                    l.currentTarget.style[F] = z[F] ?? "";
+                  Object.keys(v.retryButtonHover || {}).forEach((D) => {
+                    l.currentTarget.style[D] = z[D] ?? "";
                   });
                 },
-                children: d.retryButton
+                children: u.retryButton
               }
             ),
             /* @__PURE__ */ s(
@@ -3548,11 +3570,11 @@ function Qr({
                 },
                 onMouseOut: (l) => {
                   const z = v.backButton || {};
-                  Object.keys(v.backButtonHover || {}).forEach((F) => {
-                    l.currentTarget.style[F] = z[F] ?? "";
+                  Object.keys(v.backButtonHover || {}).forEach((D) => {
+                    l.currentTarget.style[D] = z[D] ?? "";
                   });
                 },
-                children: d.backToLoginButton
+                children: u.backToLoginButton
               }
             )
           ] })
@@ -3561,14 +3583,14 @@ function Qr({
         return null;
     }
   };
-  return /* @__PURE__ */ u("div", { style: v.container, className: c, children: [
+  return /* @__PURE__ */ h("div", { style: v.container, className: d, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ s("h1", { style: v.title, children: d.title }),
+    /* @__PURE__ */ s("h1", { style: v.title, children: u.title }),
     I()
   ] });
 }
@@ -3694,7 +3716,7 @@ const or = {
     color: "#6b7280"
   }
 };
-function Kr({
+function Qr({
   copy: n = {},
   styles: e = {},
   mode: t = "request",
@@ -3702,79 +3724,79 @@ function Kr({
   onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: c,
-  className: m
+  onModeChange: d,
+  className: c
 }) {
   var X;
-  const [y, f] = x(""), [D, g] = x(r), [T, A] = x(""), [L, M] = x(""), [P, d] = x(!1), [v, N] = x(""), [$, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = he(), z = ((X = pe()) == null ? void 0 : X.tenant) ?? null, F = { ...or, ...n }, p = { ...ar, ...e }, U = () => {
+  const [y, g] = x(""), [F, m] = x(r), [T, A] = x(""), [L, M] = x(""), [P, u] = x(!1), [v, N] = x(""), [$, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = he(), z = ((X = pe()) == null ? void 0 : X.tenant) ?? null, D = { ...or, ...n }, f = { ...ar, ...e }, U = () => {
     const W = {};
     return y.trim() || (W.email = !0), k(W), Object.keys(W).length === 0;
   }, b = () => {
     const W = {};
-    return D.trim() || (W.token = !0), T.trim() || (W.newPassword = !0), L.trim() || (W.confirmPassword = !0), k(W), Object.keys(W).length === 0;
-  }, h = async (W) => {
+    return F.trim() || (W.token = !0), T.trim() || (W.newPassword = !0), L.trim() || (W.confirmPassword = !0), k(W), Object.keys(W).length === 0;
+  }, p = async (W) => {
     if (W.preventDefault(), !!U()) {
       if (!(z != null && z.id)) {
-        N(F.tenantNotFoundError);
+        N(D.tenantNotFoundError);
         return;
       }
-      d(!0), N(""), w("");
+      u(!0), N(""), w("");
       try {
-        await I({ email: y, tenantId: z.id }), w(F.successMessage), i == null || i();
+        await I({ email: y, tenantId: z.id }), w(D.successMessage), i == null || i();
       } catch (q) {
-        const V = q.message || F.errorMessage;
+        const V = q.message || D.errorMessage;
         N(V), o == null || o(V);
       } finally {
-        d(!1);
+        u(!1);
       }
     }
   }, S = async (W) => {
     if (W.preventDefault(), !!b()) {
       if (T !== L) {
-        N(F.passwordMismatchError), k({ confirmPassword: !0 });
+        N(D.passwordMismatchError), k({ confirmPassword: !0 });
         return;
       }
-      d(!0), N(""), w("");
+      u(!0), N(""), w("");
       try {
-        await l({ token: D, newPassword: T }), w(F.resetSuccessMessage), i == null || i();
+        await l({ token: F, newPassword: T }), w(D.resetSuccessMessage), i == null || i();
       } catch (q) {
-        const V = q.message || F.errorMessage;
+        const V = q.message || D.errorMessage;
         N(V), o == null || o(V);
       } finally {
-        d(!1);
+        u(!1);
       }
     }
   }, E = (W) => ({
-    ...p.input,
-    ...R[W] ? p.inputError : {}
-  }), Q = () => ({
-    ...p.button,
-    ...P ? p.buttonLoading : {}
+    ...f.input,
+    ...R[W] ? f.inputError : {}
+  }), K = () => ({
+    ...f.button,
+    ...P ? f.buttonLoading : {}
   });
   if (t === "reset") {
-    const W = D && T && L;
-    return /* @__PURE__ */ u("div", { className: m, style: p.container, children: [
-      /* @__PURE__ */ s("h2", { style: p.title, children: F.resetTitle }),
-      /* @__PURE__ */ s("p", { style: p.subtitle, children: F.resetSubtitle }),
-      /* @__PURE__ */ u("form", { onSubmit: S, style: p.form, children: [
-        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: p.label, children: F.tokenLabel }),
+    const W = F && T && L;
+    return /* @__PURE__ */ h("div", { className: c, style: f.container, children: [
+      /* @__PURE__ */ s("h2", { style: f.title, children: D.resetTitle }),
+      /* @__PURE__ */ s("p", { style: f.subtitle, children: D.resetSubtitle }),
+      /* @__PURE__ */ h("form", { onSubmit: S, style: f.form, children: [
+        /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: f.label, children: D.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: D,
+              value: F,
               onChange: (q) => {
-                g(q.target.value), R.token && k((V) => ({ ...V, token: !1 }));
+                m(q.target.value), R.token && k((V) => ({ ...V, token: !1 }));
               },
-              placeholder: F.tokenPlaceholder,
+              placeholder: D.tokenPlaceholder,
               style: E("token"),
               disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: p.label, children: F.newPasswordLabel }),
+        /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: f.label, children: D.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -3783,23 +3805,23 @@ function Kr({
               onChange: (q) => {
                 A(q.target.value), R.newPassword && k((V) => ({ ...V, newPassword: !1 }));
               },
-              placeholder: F.newPasswordPlaceholder,
+              placeholder: D.newPasswordPlaceholder,
               style: E("newPassword"),
               disabled: P
             }
           )
         ] }),
-        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: p.label, children: F.confirmPasswordLabel }),
+        /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: f.label, children: D.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
               value: L,
               onChange: (q) => {
-                M(q.target.value), R.confirmPassword && k((V) => ({ ...V, confirmPassword: !1 })), v === F.passwordMismatchError && N("");
+                M(q.target.value), R.confirmPassword && k((V) => ({ ...V, confirmPassword: !1 })), v === D.passwordMismatchError && N("");
               },
-              placeholder: F.confirmPasswordPlaceholder,
+              placeholder: D.confirmPasswordPlaceholder,
               style: E("confirmPassword"),
               disabled: P
             }
@@ -3811,40 +3833,40 @@ function Kr({
             type: "submit",
             disabled: !W || P,
             style: {
-              ...Q(),
-              ...!W || P ? p.buttonDisabled : {}
+              ...K(),
+              ...!W || P ? f.buttonDisabled : {}
             },
-            children: P ? F.resetLoadingText : F.resetSubmitButton
+            children: P ? D.resetLoadingText : D.resetSubmitButton
           }
         ),
-        v && /* @__PURE__ */ s("div", { style: p.errorText, children: v }),
-        $ && /* @__PURE__ */ s("div", { style: p.successText, children: $ })
+        v && /* @__PURE__ */ s("div", { style: f.errorText, children: v }),
+        $ && /* @__PURE__ */ s("div", { style: f.successText, children: $ })
       ] }),
-      /* @__PURE__ */ u("div", { style: p.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: p.link, children: F.backToLoginLink }),
-        c && /* @__PURE__ */ u(_, { children: [
-          /* @__PURE__ */ s("span", { style: p.modeSwitchDivider, children: F.dividerBullet }),
-          /* @__PURE__ */ s("a", { onClick: () => c("request"), style: p.link, children: F.requestNewLinkLink })
+      /* @__PURE__ */ h("div", { style: f.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: D.backToLoginLink }),
+        d && /* @__PURE__ */ h(_, { children: [
+          /* @__PURE__ */ s("span", { style: f.modeSwitchDivider, children: D.dividerBullet }),
+          /* @__PURE__ */ s("a", { onClick: () => d("request"), style: f.link, children: D.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
   const G = y;
-  return /* @__PURE__ */ u("div", { className: m, style: p.container, children: [
-    /* @__PURE__ */ s("h2", { style: p.title, children: F.title }),
-    /* @__PURE__ */ s("p", { style: p.subtitle, children: F.subtitle }),
-    /* @__PURE__ */ u("form", { onSubmit: h, style: p.form, children: [
-      /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: p.label, children: F.emailLabel }),
+  return /* @__PURE__ */ h("div", { className: c, style: f.container, children: [
+    /* @__PURE__ */ s("h2", { style: f.title, children: D.title }),
+    /* @__PURE__ */ s("p", { style: f.subtitle, children: D.subtitle }),
+    /* @__PURE__ */ h("form", { onSubmit: p, style: f.form, children: [
+      /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: f.label, children: D.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
             value: y,
             onChange: (W) => {
-              f(W.target.value), R.email && k((q) => ({ ...q, email: !1 }));
+              g(W.target.value), R.email && k((q) => ({ ...q, email: !1 }));
             },
-            placeholder: F.emailPlaceholder,
+            placeholder: D.emailPlaceholder,
             style: E("email"),
             disabled: P
           }
@@ -3856,20 +3878,20 @@ function Kr({
           type: "submit",
           disabled: !G || P,
           style: {
-            ...Q(),
-            ...!G || P ? p.buttonDisabled : {}
+            ...K(),
+            ...!G || P ? f.buttonDisabled : {}
           },
-          children: P ? F.loadingText : F.submitButton
+          children: P ? D.loadingText : D.submitButton
         }
       ),
-      v && /* @__PURE__ */ s("div", { style: p.errorText, children: v }),
-      $ && /* @__PURE__ */ s("div", { style: p.successText, children: $ })
+      v && /* @__PURE__ */ s("div", { style: f.errorText, children: v }),
+      $ && /* @__PURE__ */ s("div", { style: f.successText, children: $ })
     ] }),
-    /* @__PURE__ */ u("div", { style: p.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: p.link, children: F.backToLoginLink }),
-      c && /* @__PURE__ */ u(_, { children: [
-        /* @__PURE__ */ s("span", { style: p.modeSwitchDivider, children: F.dividerBullet }),
-        /* @__PURE__ */ s("a", { onClick: () => c("reset"), style: p.link, children: F.haveTokenLink })
+    /* @__PURE__ */ h("div", { style: f.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: D.backToLoginLink }),
+      d && /* @__PURE__ */ h(_, { children: [
+        /* @__PURE__ */ s("span", { style: f.modeSwitchDivider, children: D.dividerBullet }),
+        /* @__PURE__ */ s("a", { onClick: () => d("reset"), style: f.link, children: D.haveTokenLink })
       ] })
     ] })
   ] });
@@ -3886,7 +3908,7 @@ const lr = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), cr = ({ error: n, retry: e }) => /* @__PURE__ */ u(
+), cr = ({ error: n, retry: e }) => /* @__PURE__ */ h(
   "div",
   {
     style: {
@@ -3926,9 +3948,9 @@ function Zr({
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = Ae(), c = pe(), m = Ce(), y = Ye(), f = Xe(), D = (c == null ? void 0 : c.isTenantLoading) ?? !1, g = (c == null ? void 0 : c.tenantError) ?? null, T = (c == null ? void 0 : c.tenantSlug) ?? null, A = (c == null ? void 0 : c.retryTenant) ?? (() => {
-  }), L = (m == null ? void 0 : m.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (f == null ? void 0 : f.isReady) ?? !0, d = r && c && T, w = i || d && D || m && !L || y && !M || f && !P, R = o || (d ? g : null), k = () => {
-    o && a(), g && c && A();
+  const { isAppLoading: i, appError: o, retryApp: a } = Ae(), d = pe(), c = Be(), y = Ye(), g = Xe(), F = (d == null ? void 0 : d.isTenantLoading) ?? !1, m = (d == null ? void 0 : d.tenantError) ?? null, T = (d == null ? void 0 : d.tenantSlug) ?? null, A = (d == null ? void 0 : d.retryTenant) ?? (() => {
+  }), L = (c == null ? void 0 : c.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (g == null ? void 0 : g.isReady) ?? !0, u = r && d && T, w = i || u && F || c && !L || y && !M || g && !P, R = o || (u ? m : null), k = () => {
+    o && a(), m && d && A();
   };
   if (w)
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(lr, {}) });
@@ -3939,21 +3961,21 @@ function Zr({
   return /* @__PURE__ */ s(_, { children: n });
 }
 function Jr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Ae(), o = pe(), a = Ce(), c = Ye(), m = Xe(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, f = (o == null ? void 0 : o.tenantError) ?? null, D = (o == null ? void 0 : o.tenant) ?? null, g = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, L = (c == null ? void 0 : c.isReady) ?? !0, M = (m == null ? void 0 : m.isReady) ?? !0, P = n && o && g, $ = e || P && y || a && !A || c && !L || m && !M, w = t || (P ? f : null);
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Ae(), o = pe(), a = Be(), d = Ye(), c = Xe(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, g = (o == null ? void 0 : o.tenantError) ?? null, F = (o == null ? void 0 : o.tenant) ?? null, m = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, L = (d == null ? void 0 : d.isReady) ?? !0, M = (c == null ? void 0 : c.isReady) ?? !0, P = n && o && m, $ = e || P && y || a && !A || d && !L || c && !M, w = t || (P ? g : null);
   return {
     isLoading: $,
     error: w,
-    isReady: !$ && !w && i !== null && (!P || D !== null),
+    isReady: !$ && !w && i !== null && (!P || F !== null),
     retry: () => {
-      t && r(), f && o && T();
+      t && r(), g && o && T();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: y, error: f, data: D } : null,
+    tenant: o ? { isLoading: y, error: g, data: F } : null,
     auth: a ? { isReady: A } : null,
-    featureFlags: c ? { isReady: L } : null,
-    subscription: m ? { isReady: M } : null
+    featureFlags: d ? { isReady: L } : null,
+    subscription: c ? { isReady: M } : null
   };
 }
 const dr = {
@@ -4008,14 +4030,14 @@ function Yr({
   className: i = "",
   dropdownClassName: o = "",
   itemClassName: a = "",
-  renderItem: c,
-  placeholder: m = "Select tenant",
+  renderItem: d,
+  placeholder: c = "Select tenant",
   disabled: y = !1,
-  showCurrentTenant: f = !0
+  showCurrentTenant: g = !0
 }) {
   var $;
-  const D = { ...dr, ...r }, g = Ce(), [T, A] = x(!1), L = Ne(null), M = n ?? (g == null ? void 0 : g.userTenants) ?? [], P = e ?? (($ = g == null ? void 0 : g.currentUser) == null ? void 0 : $.tenantId) ?? null, d = async (w) => {
-    A(!1), t ? t(w) : g != null && g.switchToTenant && await g.switchToTenant(w);
+  const F = { ...dr, ...r }, m = Be(), [T, A] = x(!1), L = Ne(null), M = n ?? (m == null ? void 0 : m.userTenants) ?? [], P = e ?? (($ = m == null ? void 0 : m.currentUser) == null ? void 0 : $.tenantId) ?? null, u = async (w) => {
+    A(!1), t ? t(w) : m != null && m.switchToTenant && await m.switchToTenant(w);
   };
   ne(() => {
     const w = (R) => {
@@ -4026,56 +4048,56 @@ function Yr({
   const v = M.find((w) => w.id === P);
   if (M.length === 0)
     return null;
-  if (M.length === 1 && f)
+  if (M.length === 1 && g)
     return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: M[0].name }) });
-  const N = (w, R) => /* @__PURE__ */ u("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
+  const N = (w, R) => /* @__PURE__ */ h("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
     w.name,
-    w.role && /* @__PURE__ */ u("span", { style: D.itemRole, children: [
+    w.role && /* @__PURE__ */ h("span", { style: F.itemRole, children: [
       "(",
       w.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ u("div", { ref: L, className: i, style: D.wrapper, children: [
-    /* @__PURE__ */ u(
+  return /* @__PURE__ */ h("div", { ref: L, className: i, style: F.wrapper, children: [
+    /* @__PURE__ */ h(
       "button",
       {
         type: "button",
         onClick: () => !y && A(!T),
         disabled: y,
         style: {
-          ...D.button,
-          ...y ? D.buttonDisabled : {}
+          ...F.button,
+          ...y ? F.buttonDisabled : {}
         },
         children: [
-          v ? v.name : m,
-          /* @__PURE__ */ s("span", { style: D.arrow, children: T ? "▲" : "▼" })
+          v ? v.name : c,
+          /* @__PURE__ */ s("span", { style: F.arrow, children: T ? "▲" : "▼" })
         ]
       }
     ),
-    T && /* @__PURE__ */ s("div", { className: o, style: D.dropdown, children: M.map((w) => {
+    T && /* @__PURE__ */ s("div", { className: o, style: F.dropdown, children: M.map((w) => {
       const R = w.id === P;
       return /* @__PURE__ */ s(
         "div",
         {
           className: a,
-          onClick: () => d(w.id),
+          onClick: () => u(w.id),
           style: {
-            ...D.item,
-            ...R ? D.itemSelected : {}
+            ...F.item,
+            ...R ? F.itemSelected : {}
           },
           onMouseEnter: (k) => {
-            R || Object.assign(k.currentTarget.style, D.itemHover);
+            R || Object.assign(k.currentTarget.style, F.itemHover);
           },
           onMouseLeave: (k) => {
             if (!R) {
-              const I = D.item || {};
-              Object.keys(D.itemHover || {}).forEach((l) => {
+              const I = F.item || {};
+              Object.keys(F.itemHover || {}).forEach((l) => {
                 k.currentTarget.style[l] = I[l] ?? "";
               });
             }
           },
-          children: c ? c(w, R) : N(w, R)
+          children: d ? d(w, R) : N(w, R)
         },
         w.id
       );
@@ -4338,7 +4360,7 @@ function nn(n = {}) {
     zoneRoots: e = {},
     returnToParam: t = rt,
     returnToStorage: r = "url"
-  } = n, i = mt(), [o, a] = yt(), { isAuthenticated: c, currentUser: m } = he(), { tenant: y } = Te(), f = Z(() => ({ ...Oe, ...e }), [e]), D = !!y, g = m == null ? void 0 : m.userType, T = Z(() => {
+  } = n, i = mt(), [o, a] = yt(), { isAuthenticated: d, currentUser: c } = he(), { tenant: y } = Te(), g = Z(() => ({ ...Oe, ...e }), [e]), F = !!y, m = c == null ? void 0 : c.userType, T = Z(() => {
     switch (r) {
       case "url":
         return o.get(t);
@@ -4349,11 +4371,11 @@ function nn(n = {}) {
       default:
         return null;
     }
-  }, [r, o, t]), A = ie(() => {
+  }, [r, o, t]), A = oe(() => {
     switch (r) {
       case "url": {
-        const d = new URLSearchParams(o);
-        d.delete(t), a(d, { replace: !0 });
+        const u = new URLSearchParams(o);
+        u.delete(t), a(u, { replace: !0 });
         break;
       }
       case "session":
@@ -4363,30 +4385,30 @@ function nn(n = {}) {
         localStorage.removeItem(Le);
         break;
     }
-  }, [r, o, t, a]), L = ie(
-    (d) => {
+  }, [r, o, t, a]), L = oe(
+    (u) => {
       switch (r) {
         case "url": {
           const v = new URLSearchParams(o);
-          v.set(t, d), a(v, { replace: !0 });
+          v.set(t, u), a(v, { replace: !0 });
           break;
         }
         case "session":
-          sessionStorage.setItem(Me, d);
+          sessionStorage.setItem(Me, u);
           break;
         case "local":
-          localStorage.setItem(Le, d);
+          localStorage.setItem(Le, u);
           break;
       }
     },
     [r, o, t, a]
-  ), M = ie(
-    (d) => {
-      const v = f[d] || f.default;
+  ), M = oe(
+    (u) => {
+      const v = g[u] || g.default;
       i(v);
     },
-    [i, f]
-  ), P = ie(() => D ? c ? g === ae.TENANT_ADMIN ? f.tenantAdmin : f.tenantUser : f.tenantGuest : c ? g === ae.TENANT_ADMIN ? f.publicAdmin : f.publicUser : f.publicGuest, [D, c, g, f]);
+    [i, g]
+  ), P = oe(() => F ? d ? m === ae.TENANT_ADMIN ? g.tenantAdmin : g.tenantUser : g.tenantGuest : d ? m === ae.TENANT_ADMIN ? g.publicAdmin : g.publicUser : g.publicGuest, [F, d, m, g]);
   return {
     returnToUrl: T,
     clearReturnTo: A,
@@ -4402,7 +4424,7 @@ function sn(n, e, t = rt, r = "url") {
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  Cr as AdminZone,
+  Br as AdminZone,
   rn as ApiMappers,
   Ve as AppApiService,
   Zr as AppLoader,
@@ -4421,13 +4443,13 @@ export {
   Nr as LandingRoute,
   Wr as LoginForm,
   Gr as MagicLinkForm,
-  Qr as MagicLinkVerify,
-  Br as OpenZone,
-  Kr as PasswordRecoveryForm,
+  Kr as MagicLinkVerify,
+  Hr as OpenZone,
+  Qr as PasswordRecoveryForm,
   Xr as PermissionApiService,
   Ir as Protected,
   Mr as ProtectedRoute,
-  Fr as PublicZone,
+  Dr as PublicZone,
   We as RoleApiService,
   Rr as RoutingProvider,
   se as SessionExpiredError,
@@ -4444,12 +4466,12 @@ export {
   Sr as TenantProvider,
   Lr as TenantRoute,
   Yr as TenantSelector,
-  Dr as TenantZone,
+  Fr as TenantZone,
   bt as TokenRefreshError,
   wt as TokenRefreshTimeoutError,
   St as UserApiService,
   ae as UserType,
-  Hr as UserZone,
+  Cr as UserZone,
   ue as ZoneRoute,
   sn as buildRedirectUrl,
   vr as useApi,
@@ -4458,7 +4480,7 @@ export {
   he as useAuth,
   Mt as useFeatureFlags,
   Er as useRouting,
-  Dt as useRoutingOptional,
+  Ft as useRoutingOptional,
   kr as useSettings,
   Nt as useSubscription,
   Te as useTenant,