npm - @skylabs-digital/react-identity-access - Versions diffs - 2.29.0 → 2.30.0 - Mend

@skylabs-digital/react-identity-access 2.29.0 → 2.30.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/index.es.js +428 -413
package/dist/index.es.js.map +1 -1
package/dist/index.js +2 -2
package/dist/index.js.map +1 -1
package/dist/services/SessionManager.d.ts +5 -0
package/dist/services/SessionManager.d.ts.map +1 -1
package/package.json +1 -1

package/dist/index.es.js CHANGED Viewed

@@ -1,5 +1,5 @@
 import { jsx as s, Fragment as _, jsxs as h } from "react/jsx-runtime";
-import { createContext as ye, useMemo as Z, useState as x, useCallback as oe, useEffect as ne, useContext as le, useRef as Ne } from "react";
+import { createContext as ye, useMemo as J, useState as x, useCallback as oe, useEffect as ne, useContext as le, useRef as Ne } from "react";
 import { useLocation as xe, Navigate as Se, useNavigate as mt, useSearchParams as yt } from "react-router-dom";
 class de {
   constructor(e, t = 1e4) {
@@ -18,23 +18,23 @@ class de {
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
-      const g = await this.sessionManager.getValidAccessToken();
-      d = { ...d, Authorization: `Bearer ${g}` };
+      const c = await this.sessionManager.getValidAccessToken();
+      d = { ...d, Authorization: `Bearer ${c}` };
     }
-    const c = new AbortController(), y = setTimeout(() => c.abort(), a);
+    const f = new AbortController(), y = setTimeout(() => f.abort(), a);
     try {
-      const g = await fetch(o, {
+      const c = await fetch(o, {
         method: e,
         headers: d,
         body: r ? JSON.stringify(r) : void 0,
-        signal: c.signal
+        signal: f.signal
       });
-      if (clearTimeout(y), !g.ok)
-        throw new Error(`HTTP ${g.status}: ${g.statusText}`);
-      const F = g.headers.get("content-type");
-      return !F || !F.includes("application/json") ? {} : await g.json();
-    } catch (g) {
-      throw clearTimeout(y), g instanceof Error && g.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : g;
+      if (clearTimeout(y), !c.ok)
+        throw new Error(`HTTP ${c.status}: ${c.statusText}`);
+      const L = c.headers.get("content-type");
+      return !L || !L.includes("application/json") ? {} : await c.json();
+    } catch (c) {
+      throw clearTimeout(y), c instanceof Error && c.name === "AbortError" ? new Error(`Request timeout after ${a}ms`) : c;
     }
   }
   async get(e, t) {
@@ -111,7 +111,7 @@ class Ve {
 }
 const Fe = ye(null);
 function br({ config: n, children: e }) {
-  const t = Z(
+  const t = J(
     () => {
       var m, T, A;
       return {
@@ -132,9 +132,9 @@ function br({ config: n, children: e }) {
     } catch {
       return null;
     }
-  }), [o, a] = x(!r), [d, c] = x(null), y = Z(() => {
+  }), [o, a] = x(!r), [d, f] = x(null), y = J(() => {
     const m = () => {
-      g();
+      c();
     };
     return {
       appId: n.appId,
@@ -145,16 +145,16 @@ function br({ config: n, children: e }) {
       appError: d,
       retryApp: m
     };
-  }, [n, r, o, d]), g = oe(
+  }, [n, r, o, d]), c = oe(
     async (m = !1) => {
       if (!(!m && t.enabled && r))
         try {
-          a(!0), c(null);
-          const T = new de(n.baseUrl), L = await new Ve(T, {}).getPublicAppInfo(n.appId);
-          if (i(L), t.enabled)
+          a(!0), f(null);
+          const T = new de(n.baseUrl), N = await new Ve(T, {}).getPublicAppInfo(n.appId);
+          if (i(N), t.enabled)
             try {
               const M = {
-                data: L,
+                data: N,
                 timestamp: Date.now(),
                 appId: n.appId
               };
@@ -164,20 +164,20 @@ function br({ config: n, children: e }) {
             }
         } catch (T) {
           const A = T instanceof Error ? T : new Error("Failed to load app information");
-          c(A), i(null);
+          f(A), i(null);
         } finally {
           a(!1);
         }
     },
     [n.baseUrl, n.appId, t, r]
-  ), F = oe(async () => {
+  ), L = oe(async () => {
     if (!(!t.enabled || !r))
       try {
         const m = localStorage.getItem(t.storageKey);
         if (!m) return;
         const T = JSON.parse(m);
         if (Date.now() - T.timestamp > t.ttl * 0.5) {
-          const L = new de(n.baseUrl), P = await new Ve(L, {}).getPublicAppInfo(n.appId);
+          const N = new de(n.baseUrl), P = await new Ve(N, {}).getPublicAppInfo(n.appId);
           i(P);
           const u = {
             data: P,
@@ -191,7 +191,7 @@ function br({ config: n, children: e }) {
       }
   }, [n, t, r]);
   return ne(() => {
-    r ? F() : g();
+    r ? L() : c();
   }, []), /* @__PURE__ */ s(Fe.Provider, { value: y, children: e });
 }
 function Ae() {
@@ -295,6 +295,20 @@ const ie = class ie {
       return;
     }
   }
+  /**
+   * Extract an arbitrary claim from a JWT token.
+   * Returns undefined if the token cannot be decoded or the claim is missing.
+   */
+  static extractJwtClaim(e, t) {
+    try {
+      const r = e.split(".");
+      if (r.length !== 3) return;
+      const i = JSON.parse(atob(r[1].replace(/-/g, "+").replace(/_/g, "/")));
+      return typeof i[t] == "string" ? i[t] : void 0;
+    } catch {
+      return;
+    }
+  }
   setTokens(e) {
     const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || ie.extractJwtExpiry(e.accessToken), r = {
       ...e,
@@ -493,34 +507,35 @@ const ie = class ie {
     const r = this.getTokens();
     if (r != null && r.accessToken && !this.isTokenExpired(r) && !this.shouldRefreshToken(r))
       return;
-    const i = (r == null ? void 0 : r.refreshToken) || e, o = `${this.baseUrl}/auth/refresh`;
-    let a;
+    const i = (r == null ? void 0 : r.refreshToken) || e, o = `${this.baseUrl}/auth/refresh`, a = ie.extractJwtClaim(i, "deviceId"), d = { refreshToken: i };
+    a && (d.deviceId = a);
+    let f;
     try {
-      a = await fetch(o, {
+      f = await fetch(o, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ refreshToken: i })
+        body: JSON.stringify(d)
       });
     } catch (c) {
       throw c instanceof Error ? c : new Error("Network error during token refresh");
     }
-    if (!a.ok) {
+    if (!f.ok) {
       let c = "";
       try {
-        const y = await a.json();
-        c = (y.message || y.error || "").toLowerCase();
+        const L = await f.json();
+        c = (L.message || L.error || "").toLowerCase();
       } catch {
-        c = a.statusText.toLowerCase();
+        c = f.statusText.toLowerCase();
       }
-      throw a.status === 401 ? c.includes("expired") ? new se("token_expired") : c.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${c}`) : a.status === 400 ? c.includes("inactive") ? new se("user_inactive") : c.includes("expired") || c.includes("invalid") ? new se("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new se("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${a.status} ${c}`);
+      throw f.status === 401 ? c.includes("expired") ? new se("token_expired") : c.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${c}`) : f.status === 400 ? c.includes("inactive") ? new se("user_inactive") : c.includes("expired") || c.includes("invalid") ? new se("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new se("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${f.status} ${c}`);
     }
     if (this.sessionGeneration !== t)
       throw new se("token_invalid", "Session cleared during refresh");
-    const d = await a.json();
+    const y = await f.json();
     this.setTokens({
-      accessToken: d.accessToken,
-      refreshToken: d.refreshToken || i,
-      expiresIn: d.expiresIn
+      accessToken: y.accessToken,
+      refreshToken: y.refreshToken || i,
+      expiresIn: y.expiresIn
     });
   }
   // --- Session expiry handler ---
@@ -916,102 +931,102 @@ function Sr({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, d] = x(() => o()), c = Z(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, d] = x(() => o()), f = J(
     () => {
-      var f, U, b;
+      var g, U, b;
       return {
-        enabled: ((f = n.cache) == null ? void 0 : f.enabled) ?? !0,
+        enabled: ((g = n.cache) == null ? void 0 : g.enabled) ?? !0,
         ttl: ((U = n.cache) == null ? void 0 : U.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
         storageKey: ((b = n.cache) == null ? void 0 : b.storageKey) ?? `tenant_cache_${a || "default"}`
       };
     },
     [n.cache, a]
-  ), [y, g] = x(() => {
+  ), [y, c] = x(() => {
     if (n.initialTenant) return n.initialTenant;
-    if (!c.enabled || !a) return null;
+    if (!f.enabled || !a) return null;
     try {
-      const f = localStorage.getItem(c.storageKey);
-      if (!f) return null;
-      const U = JSON.parse(f);
-      return Date.now() - U.timestamp < c.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(c.storageKey), null);
+      const g = localStorage.getItem(f.storageKey);
+      if (!g) return null;
+      const U = JSON.parse(g);
+      return Date.now() - U.timestamp < f.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(f.storageKey), null);
     } catch {
       return null;
     }
-  }), [F, m] = x(!y && !n.initialTenant), [T, A] = x(null), [L, M] = x(null), [P, u] = x(!1), [v, N] = x(null);
+  }), [L, m] = x(!y && !n.initialTenant), [T, A] = x(null), [N, M] = x(null), [P, u] = x(!1), [v, F] = x(null);
   ne(() => {
     if (n.tenantMode === "fixed") return;
-    const f = o();
-    d(f);
+    const g = o();
+    d(g);
   }, [o, n.tenantMode]);
-  const $ = (r == null ? void 0 : r.settingsSchema) || null, w = oe(
-    async (f, U = !1) => {
-      if (!(!U && c.enabled && y && y.domain === f))
+  const B = (r == null ? void 0 : r.settingsSchema) || null, w = oe(
+    async (g, U = !1) => {
+      if (!(!U && f.enabled && y && y.domain === g))
         try {
           m(!0), A(null);
-          const b = new de(t), S = await new ve(b, i).getPublicTenantInfo(f);
-          if (g(S), c.enabled)
+          const b = new de(t), S = await new ve(b, i).getPublicTenantInfo(g);
+          if (c(S), f.enabled)
             try {
               const E = {
                 data: S,
                 timestamp: Date.now(),
-                tenantSlug: f
+                tenantSlug: g
               };
-              localStorage.setItem(c.storageKey, JSON.stringify(E));
+              localStorage.setItem(f.storageKey, JSON.stringify(E));
             } catch (E) {
               process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", E);
             }
         } catch (b) {
           const p = b instanceof Error ? b : new Error("Failed to load tenant information");
-          A(p), g(null);
+          A(p), c(null);
         } finally {
           m(!1);
         }
     },
-    [t, i, c, y]
+    [t, i, f, y]
   ), R = oe(async () => {
-    if (!(!c.enabled || !y || !a))
+    if (!(!f.enabled || !y || !a))
       try {
-        const f = localStorage.getItem(c.storageKey);
-        if (!f) return;
-        const U = JSON.parse(f);
-        if (Date.now() - U.timestamp > c.ttl * 0.5) {
+        const g = localStorage.getItem(f.storageKey);
+        if (!g) return;
+        const U = JSON.parse(g);
+        if (Date.now() - U.timestamp > f.ttl * 0.5) {
           const p = new de(t), E = await new ve(p, i).getPublicTenantInfo(a);
-          g(E);
+          c(E);
           const K = {
             data: E,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(c.storageKey, JSON.stringify(K));
+          localStorage.setItem(f.storageKey, JSON.stringify(K));
         }
-      } catch (f) {
-        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", f);
+      } catch (g) {
+        process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", g);
       }
-  }, [t, i, c, y, a]), k = oe(async () => {
+  }, [t, i, f, y, a]), k = oe(async () => {
     if (y != null && y.id)
       try {
-        u(!0), N(null);
-        const f = new de(t), b = await new ve(f, y.appId).getTenantSettings(y.id);
+        u(!0), F(null);
+        const g = new de(t), b = await new ve(g, y.appId).getTenantSettings(y.id);
         M(b);
-      } catch (f) {
-        const U = f instanceof Error ? f : new Error("Failed to load tenant settings");
-        N(U), M(null);
+      } catch (g) {
+        const U = g instanceof Error ? g : new Error("Failed to load tenant settings");
+        F(U), M(null);
       } finally {
         u(!1);
       }
   }, [t, y]), I = oe(() => {
     k();
   }, [k]), l = oe(
-    (f) => {
-      if (!$)
+    (g) => {
+      if (!B)
         return { isValid: !0, errors: [] };
       const U = [];
       try {
-        return $.properties && Object.entries($.properties).forEach(([b, p]) => {
+        return B.properties && Object.entries(B.properties).forEach(([b, p]) => {
           var E;
-          const S = f[b];
-          if ((E = $.required) != null && E.includes(b) && S == null) {
+          const S = g[b];
+          if ((E = B.required) != null && E.includes(b) && S == null) {
             U.push(`Field '${b}' is required`);
             return;
           }
@@ -1037,15 +1052,15 @@ function Sr({ config: n, children: e }) {
         };
       }
     },
-    [$]
+    [B]
   );
   ne(() => {
-    !n.initialTenant && a ? y ? R() : w(a) : !n.initialTenant && !a && (g(null), A(null), m(!1));
+    !n.initialTenant && a ? y ? R() : w(a) : !n.initialTenant && !a && (c(null), A(null), m(!1));
   }, [n.initialTenant, a, y, w, R]), ne(() => {
-    y != null && y.id ? k() : (M(null), N(null), u(!1));
+    y != null && y.id ? k() : (M(null), F(null), u(!1));
   }, [y == null ? void 0 : y.id, k]);
   const z = oe(
-    (f, U) => {
+    (g, U) => {
       const { mode: b = "reload", tokens: p, redirectPath: S } = U || {}, E = n.tenantMode || "selector";
       if (E === "fixed") {
         process.env.NODE_ENV === "development" && console.warn(
@@ -1054,9 +1069,9 @@ function Sr({ config: n, children: e }) {
         ), S && (window.location.href = S);
         return;
       }
-      if (localStorage.setItem("tenant", f), E === "subdomain") {
+      if (localStorage.setItem("tenant", g), E === "subdomain") {
         const K = window.location.hostname, G = At(
-          f,
+          g,
           K,
           n.baseDomain
         );
@@ -1073,28 +1088,28 @@ function Sr({ config: n, children: e }) {
         }), p && W.searchParams.set(me, je(p)), window.location.href = W.toString();
       } else if (E === "selector") {
         const K = S || window.location.pathname, G = new URLSearchParams(window.location.search);
-        if (G.set(n.selectorParam || "tenant", f), G.delete(me), p && G.set(me, je(p)), b === "reload") {
+        if (G.set(n.selectorParam || "tenant", g), G.delete(me), p && G.set(me, je(p)), b === "reload") {
           const X = `${K}?${G.toString()}${window.location.hash}`;
           window.location.href = X;
         } else {
           const X = `${K}?${G.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", X), d(f), w(f);
+          window.history.pushState({}, "", X), d(g), w(g);
         }
       }
     },
     [n.tenantMode, n.selectorParam, n.baseDomain, w]
-  ), D = Z(() => ({
+  ), D = J(() => ({
     // Tenant info
     tenant: y,
     tenantSlug: a,
-    isTenantLoading: F,
+    isTenantLoading: L,
     tenantError: T,
     retryTenant: () => {
       a && w(a);
     },
     // Settings
-    settings: L,
-    settingsSchema: $,
+    settings: N,
+    settingsSchema: B,
     isSettingsLoading: P,
     settingsError: v,
     // Actions
@@ -1105,10 +1120,10 @@ function Sr({ config: n, children: e }) {
   }), [
     y,
     a,
-    F,
-    T,
     L,
-    $,
+    T,
+    N,
+    B,
     P,
     v,
     I,
@@ -1137,7 +1152,7 @@ function kr() {
     validateSettings: i
   };
 }
-function Je() {
+function Ze() {
   const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = Te();
   return {
     tenant: n,
@@ -1147,31 +1162,31 @@ function Je() {
     retry: i
   };
 }
-const $e = ye(null);
+const Be = ye(null);
 function xr({ config: n = {}, children: e }) {
-  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, d = (r == null ? void 0 : r.tenantSlug) ?? null, c = (r == null ? void 0 : r.switchTenant) ?? (() => {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, d = (r == null ? void 0 : r.tenantSlug) ?? null, f = (r == null ? void 0 : r.switchTenant) ?? (() => {
   });
   if (!i)
     throw new Error(
       "[AuthProvider] baseUrl is required. Provide it via AppProvider or AuthConfig.baseUrl."
     );
-  const [y, g] = x(n.initialRoles || []), [F, m] = x(!n.initialRoles), [T, A] = x(null), [L, M] = x(!1), [P, u] = x(null), [v, N] = x(() => {
+  const [y, c] = x(n.initialRoles || []), [L, m] = x(!n.initialRoles), [T, A] = x(null), [N, M] = x(!1), [P, u] = x(null), [v, F] = x(() => {
     try {
-      const B = localStorage.getItem("userTenants");
-      return B ? JSON.parse(B) : [];
+      const $ = localStorage.getItem("userTenants");
+      return $ ? JSON.parse($) : [];
     } catch {
       return [];
     }
-  }), [$, w] = x(!1), R = Ne({ done: !1, urlTokens: null });
+  }), [B, w] = x(!1), R = Ne({ done: !1, urlTokens: null });
   R.current.done || (R.current.done = !0, R.current.urlTokens = Rt());
-  const [k, I] = x(() => R.current.urlTokens !== null), l = Z(() => {
-    const B = be.getInstance({
+  const [k, I] = x(() => R.current.urlTokens !== null), l = J(() => {
+    const $ = be.getInstance({
       tenantSlug: d,
       baseUrl: i,
       refreshQueueTimeout: n.refreshQueueTimeout,
       proactiveRefreshMargin: n.proactiveRefreshMargin,
       onSessionExpired: (ce) => {
-        A(null), u(null), N([]), w(!1);
+        A(null), u(null), F([]), w(!1);
         try {
           localStorage.removeItem("userTenants");
         } catch {
@@ -1179,21 +1194,21 @@ function xr({ config: n = {}, children: e }) {
         n.onSessionExpired ? n.onSessionExpired(ce) : n.onRefreshFailed && n.onRefreshFailed();
       }
     });
-    return R.current.urlTokens && B.setTokens({
+    return R.current.urlTokens && $.setTokens({
       accessToken: R.current.urlTokens.accessToken,
       refreshToken: R.current.urlTokens.refreshToken,
       expiresIn: R.current.urlTokens.expiresIn
-    }), B;
+    }), $;
   }, [d, i, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [z, D] = x(() => {
     if (R.current.urlTokens) return !1;
-    const B = l.getTokens();
-    return B ? l.hasValidSession() || !!B.refreshToken : !1;
-  }), f = R.current.done && !k && !z, U = Z(() => {
-    const B = new de(i);
-    return B.setSessionManager(l), B;
-  }, [i, l]), b = Z(() => new vt(new de(i)), [i]), p = Z(() => new St(U, l), [U, l]), S = Z(() => new We(new de(i)), [i]), E = Z(() => T || l.getUser(), [T, l]), K = Z(() => E != null && E.roleId && y.find((B) => B.id === E.roleId) || null, [E, y]), G = Z(() => (K == null ? void 0 : K.permissions) || [], [K]), X = Z(() => l.hasValidSession() && T !== null, [l, T]), W = Ne(async () => {
-  }), q = Z(() => {
-    const B = async (C = !1) => {
+    const $ = l.getTokens();
+    return $ ? l.hasValidSession() || !!$.refreshToken : !1;
+  }), g = R.current.done && !k && !z, U = J(() => {
+    const $ = new de(i);
+    return $.setSessionManager(l), $;
+  }, [i, l]), b = J(() => new vt(new de(i)), [i]), p = J(() => new St(U, l), [U, l]), S = J(() => new We(new de(i)), [i]), E = J(() => T || l.getUser(), [T, l]), K = J(() => E != null && E.roleId && y.find(($) => $.id === E.roleId) || null, [E, y]), G = J(() => (K == null ? void 0 : K.permissions) || [], [K]), X = J(() => l.hasValidSession() && T !== null, [l, T]), W = Ne(async () => {
+  }), q = J(() => {
+    const $ = async (C = !1) => {
       try {
         if (!l.hasValidSession() || !C && T)
           return;
@@ -1203,24 +1218,24 @@ function xr({ config: n = {}, children: e }) {
           return;
         }
         M(!0), u(null);
-        const J = await p.getUserById(O);
-        A(J), l.setUser(J);
+        const Z = await p.getUserById(O);
+        A(Z), l.setUser(Z);
       } catch (O) {
-        const J = O instanceof Error ? O : new Error("Failed to load user data");
-        u(J), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", J);
+        const Z = O instanceof Error ? O : new Error("Failed to load user data");
+        u(Z), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", Z);
       } finally {
         M(!1);
       }
     }, ce = async () => {
-      await B();
+      await $();
     }, fe = async (C) => {
       var _e;
-      const { username: O, password: J, tenantSlug: j, redirectPath: Y } = C;
+      const { username: O, password: Z, tenantSlug: j, redirectPath: Y } = C;
       let ee = a == null ? void 0 : a.id, te = d, re = l;
       j && (ee = (await new ve(U, o).getPublicTenantInfo(j)).id, te = j);
       const Q = await b.login({
         username: O,
-        password: J,
+        password: Z,
         appId: o,
         tenantId: ee
       }), we = j && j !== d;
@@ -1234,13 +1249,13 @@ function xr({ config: n = {}, children: e }) {
       }), Q.user) {
         re.setUser(Q.user), A(Q.user);
         try {
-          await B();
+          await $();
         } catch (ke) {
           process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", ke);
         }
       }
       if (Q.tenants && Q.tenants.length > 0) {
-        N(Q.tenants);
+        F(Q.tenants);
         try {
           localStorage.setItem("userTenants", JSON.stringify(Q.tenants));
         } catch {
@@ -1254,27 +1269,27 @@ function xr({ config: n = {}, children: e }) {
         expiresIn: Q.expiresIn
       };
       if (we && te)
-        return c(te, { tokens: Ee, redirectPath: Y }), Q;
+        return f(te, { tokens: Ee, redirectPath: Y }), Q;
       if (Y && Y !== window.location.pathname)
-        return c(te || d || "", { tokens: Ee, redirectPath: Y }), Q;
+        return f(te || d || "", { tokens: Ee, redirectPath: Y }), Q;
       if (!Re && Q.tenants && Q.tenants.length > 0) {
         const ke = C.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
         if (Q.tenants.length === 1 && ke) {
           const ze = Q.tenants[0];
-          return c(ze.subdomain, { tokens: Ee, redirectPath: Y }), Q;
+          return f(ze.subdomain, { tokens: Ee, redirectPath: Y }), Q;
         } else Q.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(Q.tenants);
       }
       return Q;
     }, ge = async (C) => {
-      const { email: O, phoneNumber: J, name: j, password: Y, lastName: ee, tenantId: te } = C;
-      if (!O && !J)
+      const { email: O, phoneNumber: Z, name: j, password: Y, lastName: ee, tenantId: te } = C;
+      if (!O && !Z)
         throw new Error("Either email or phoneNumber is required");
       if (!j || !Y)
         throw new Error("Name and password are required");
       const re = te ?? (a == null ? void 0 : a.id);
       return await b.signup({
         email: O,
-        phoneNumber: J,
+        phoneNumber: Z,
         name: j,
         password: Y,
         tenantId: re,
@@ -1282,14 +1297,14 @@ function xr({ config: n = {}, children: e }) {
         appId: o
       });
     }, nt = async (C) => {
-      const { email: O, phoneNumber: J, name: j, password: Y, tenantName: ee, lastName: te } = C;
-      if (!O && !J)
+      const { email: O, phoneNumber: Z, name: j, password: Y, tenantName: ee, lastName: te } = C;
+      if (!O && !Z)
         throw new Error("Either email or phoneNumber is required");
       if (!j || !Y || !ee)
         throw new Error("Name, password, and tenantName are required");
       return await b.signupTenantAdmin({
         email: O,
-        phoneNumber: J,
+        phoneNumber: Z,
         name: j,
         password: Y,
         tenantName: ee,
@@ -1297,35 +1312,35 @@ function xr({ config: n = {}, children: e }) {
         lastName: te
       });
     }, st = async (C) => {
-      const { currentPassword: O, newPassword: J } = C, j = await l.getAuthHeaders();
-      await b.changePassword({ currentPassword: O, newPassword: J }, j);
+      const { currentPassword: O, newPassword: Z } = C, j = await l.getAuthHeaders();
+      await b.changePassword({ currentPassword: O, newPassword: Z }, j);
     }, it = async (C) => {
-      const { email: O, tenantId: J } = C, j = J ?? (a == null ? void 0 : a.id);
+      const { email: O, tenantId: Z } = C, j = Z ?? (a == null ? void 0 : a.id);
       if (!j)
         throw new Error("tenantId is required for password reset");
       await b.requestPasswordReset({ email: O, tenantId: j });
     }, ot = async (C) => {
-      const { token: O, newPassword: J } = C;
-      await b.confirmPasswordReset({ token: O, newPassword: J });
+      const { token: O, newPassword: Z } = C;
+      await b.confirmPasswordReset({ token: O, newPassword: Z });
     }, at = async (C) => {
-      const { email: O, frontendUrl: J, name: j, lastName: Y, tenantId: ee } = C, te = ee ?? (a == null ? void 0 : a.id);
+      const { email: O, frontendUrl: Z, name: j, lastName: Y, tenantId: ee } = C, te = ee ?? (a == null ? void 0 : a.id);
       if (!te)
         throw new Error("tenantId is required for magic link authentication");
       return await b.sendMagicLink({
         email: O,
         tenantId: te,
-        frontendUrl: J,
+        frontendUrl: Z,
         name: j,
         lastName: Y,
         appId: o
       });
     }, lt = async (C) => {
-      const { token: O, email: J, tenantSlug: j } = C;
+      const { token: O, email: Z, tenantSlug: j } = C;
       let Y = a == null ? void 0 : a.id, ee = d, te = l;
       j && (Y = (await new ve(U, o).getPublicTenantInfo(j)).id, ee = j);
       const re = await b.verifyMagicLink({
         token: O,
-        email: J,
+        email: Z,
         appId: o,
         tenantId: Y
       }), Q = j && j !== d;
@@ -1339,7 +1354,7 @@ function xr({ config: n = {}, children: e }) {
       }), re.user) {
         te.setUser(re.user), A(re.user);
         try {
-          await B();
+          await $();
         } catch (we) {
           process.env.NODE_ENV === "development" && console.warn(
             "[AuthProvider] Failed to load complete user data after magic link:",
@@ -1347,7 +1362,7 @@ function xr({ config: n = {}, children: e }) {
           );
         }
       }
-      return Q && ee && ee !== d && c(ee, {
+      return Q && ee && ee !== d && f(ee, {
         tokens: {
           accessToken: re.accessToken,
           refreshToken: re.refreshToken,
@@ -1367,7 +1382,7 @@ function xr({ config: n = {}, children: e }) {
         expiresIn: O.expiresIn
       });
     }, dt = () => {
-      l.clearSession(), A(null), u(null), N([]), w(!1);
+      l.clearSession(), A(null), u(null), F([]), w(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
@@ -1381,7 +1396,7 @@ function xr({ config: n = {}, children: e }) {
         try {
           m(!0);
           const { roles: C } = await S.getRolesByApp(o);
-          g(C);
+          c(C);
         } catch (C) {
           process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", C);
         } finally {
@@ -1416,16 +1431,16 @@ function xr({ config: n = {}, children: e }) {
       hasValidSession: ht,
       clearSession: pt,
       currentUser: T,
-      isUserLoading: L,
+      isUserLoading: N,
       userError: P,
-      loadUserData: B,
+      loadUserData: $,
       refreshUser: ce,
-      isAuthInitializing: !f,
-      isAuthReady: f,
+      isAuthInitializing: !g,
+      isAuthReady: g,
       userRole: K,
       userPermissions: G,
       availableRoles: y,
-      rolesLoading: F,
+      rolesLoading: L,
       hasPermission: Pe,
       hasAnyPermission: (C) => C.some((O) => Pe(O)),
       hasAllPermissions: (C) => C.every((O) => Pe(O)),
@@ -1433,9 +1448,9 @@ function xr({ config: n = {}, children: e }) {
       refreshRoles: gt,
       // RFC-004: Multi-tenant user membership
       userTenants: v,
-      hasTenantContext: $,
+      hasTenantContext: B,
       switchToTenant: async (C, O) => {
-        const { redirectPath: J } = O || {}, j = l.getTokens();
+        const { redirectPath: Z } = O || {}, j = l.getTokens();
         if (!(j != null && j.refreshToken))
           throw new Error("No refresh token available for tenant switch");
         const Y = await b.switchTenant({
@@ -1449,18 +1464,18 @@ function xr({ config: n = {}, children: e }) {
           expiresIn: Y.expiresIn
         }), A(Y.user), l.setUser(Y.user), w(!0);
         const ee = v.find((te) => te.id === C);
-        ee && c(ee.subdomain, {
+        ee && f(ee.subdomain, {
           tokens: {
             accessToken: Y.accessToken,
             refreshToken: j.refreshToken,
             expiresIn: Y.expiresIn
           },
-          redirectPath: J
+          redirectPath: Z
         });
       },
       refreshUserTenants: async () => {
         const C = await l.getAuthHeaders(), O = await b.getUserTenants(C);
-        N(O);
+        F(O);
         try {
           localStorage.setItem("userTenants", JSON.stringify(O));
         } catch {
@@ -1478,14 +1493,14 @@ function xr({ config: n = {}, children: e }) {
     o,
     a,
     d,
-    c,
+    f,
     y,
     T,
-    L,
+    N,
     P,
     v,
-    $,
-    f,
+    B,
+    g,
     K,
     G
   ]);
@@ -1494,7 +1509,7 @@ function xr({ config: n = {}, children: e }) {
       try {
         m(!0);
         const ce = new de(i), fe = new We(ce), { roles: ge } = await fe.getRolesByApp(o);
-        g(ge);
+        c(ge);
       } catch (ce) {
         process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", ce);
       } finally {
@@ -1504,36 +1519,36 @@ function xr({ config: n = {}, children: e }) {
   }, [o, i, n.initialRoles]);
   const [V, H] = x(!1);
   return ne(() => {
-    V || (H(!0), R.current.urlTokens && (Et(), I(!0), q.loadUserData().catch((B) => {
-      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", B);
+    V || (H(!0), R.current.urlTokens && (Et(), I(!0), q.loadUserData().catch(($) => {
+      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", $);
     }).finally(() => {
       I(!1);
     })));
   }, [q, V]), ne(() => {
-    let B = !1;
+    let $ = !1;
     return (async () => {
       var ge;
-      if (!l.hasValidSession() && ((ge = l.getTokens()) != null && ge.refreshToken) && await l.waitForPendingRefresh(), B) return;
+      if (!l.hasValidSession() && ((ge = l.getTokens()) != null && ge.refreshToken) && await l.waitForPendingRefresh(), $) return;
       const fe = l.getUser();
       fe && l.hasValidSession() && A(fe), D(!1);
     })(), () => {
-      B = !0;
+      $ = !0;
     };
   }, [l]), ne(() => {
-    V && (R.current.urlTokens || (!T && !L && !P && l.hasValidSession() ? W.current().catch(() => {
+    V && (R.current.urlTokens || (!T && !N && !P && l.hasValidSession() ? W.current().catch(() => {
     }).finally(() => {
       D(!1);
     }) : D(!1)));
-  }, [T, L, P, l, V]), /* @__PURE__ */ s($e.Provider, { value: q, children: e });
+  }, [T, N, P, l, V]), /* @__PURE__ */ s(Be.Provider, { value: q, children: e });
 }
 function he() {
-  const n = le($e);
+  const n = le(Be);
   if (!n)
     throw new Error("useAuth must be used within an AuthProvider");
   return n;
 }
-function Be() {
-  return le($e);
+function $e() {
+  return le(Be);
 }
 class It {
   constructor(e, t) {
@@ -1617,23 +1632,23 @@ class It {
 }
 const Ce = ye(null);
 function Ar({ config: n = {}, children: e }) {
-  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [d, c] = x([]), [y, g] = x(!1), [F, m] = x(null), [T, A] = x(!1), L = Z(() => {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [d, f] = x([]), [y, c] = x(!1), [L, m] = x(null), [T, A] = x(!1), N = J(() => {
     const u = new de(i);
     return new It(u);
   }, [i]), M = async () => {
     if (!(a != null && a.id)) {
-      c([]);
+      f([]);
       return;
     }
-    g(!0), m(null);
+    c(!0), m(null);
     try {
-      const u = await L.getTenantFeatureFlags(a.id, o);
-      c(u);
+      const u = await N.getTenantFeatureFlags(a.id, o);
+      f(u);
     } catch (u) {
       const v = u instanceof Error ? u.message : "Failed to fetch feature flags";
       m(v), n.onError && n.onError(u instanceof Error ? u : new Error(v));
     } finally {
-      g(!1);
+      c(!1);
     }
   };
   ne(() => {
@@ -1642,27 +1657,27 @@ function Ar({ config: n = {}, children: e }) {
     const u = n.refreshInterval || 5 * 60 * 1e3, v = setInterval(M, u);
     return () => clearInterval(v);
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
-  const P = Z(() => {
+  const P = J(() => {
     const u = (R) => {
       const k = d.find((I) => I.key === R);
       return (k == null ? void 0 : k.value) === !0;
-    }, v = (R) => d.find((k) => k.key === R), N = (R) => {
+    }, v = (R) => d.find((k) => k.key === R), F = (R) => {
       const k = d.find((I) => I.key === R);
       return k ? k.value ? "enabled" : "disabled" : "not_found";
-    }, $ = async () => {
+    }, B = async () => {
       await M();
     }, w = !!(i && o) && (T || !(a != null && a.id));
     return {
       featureFlags: d,
       loading: y,
-      error: F,
+      error: L,
       isReady: w,
       isEnabled: u,
       getFlag: v,
-      getFlagState: N,
-      refresh: $
+      getFlagState: F,
+      refresh: B
     };
-  }, [d, y, F, i, o, a == null ? void 0 : a.id, T]);
+  }, [d, y, L, i, o, a == null ? void 0 : a.id, T]);
   return /* @__PURE__ */ s(Ce.Provider, { value: P, children: e });
 }
 function Mt() {
@@ -1742,53 +1757,53 @@ class Lt {
 }
 const He = ye(void 0);
 function Pr({ config: n = {}, children: e }) {
-  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, d] = x(null), [c, y] = x(!1), [g, F] = x(null), [m, T] = x(!1), A = Z(() => {
+  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, d] = x(null), [f, y] = x(!1), [c, L] = x(null), [m, T] = x(!1), A = J(() => {
     const P = new de(i);
     return new Lt(P);
-  }, [i]), L = async () => {
+  }, [i]), N = async () => {
     if (!(o != null && o.id)) {
       d(null);
       return;
     }
-    y(!0), F(null);
+    y(!0), L(null);
     try {
       const P = await A.getTenantSubscriptionFeatures(o.id);
       d(P);
     } catch (P) {
       const u = P instanceof Error ? P.message : "Failed to fetch subscription";
-      F(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
+      L(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
     } finally {
       y(!1);
     }
   };
   ne(() => {
-    if (!i || (L().finally(() => T(!0)), !n.refreshInterval)) return;
-    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(L, P);
+    if (!i || (N().finally(() => T(!0)), !n.refreshInterval)) return;
+    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(N, P);
     return () => clearInterval(u);
   }, [o == null ? void 0 : o.id, i, n.refreshInterval]);
-  const M = Z(() => {
+  const M = J(() => {
     const P = (a == null ? void 0 : a.features) || [], u = (k) => {
       const I = P.find((l) => l.key === k);
       return I ? I.type === "BOOLEAN" || I.type === "boolean" ? I.value === !0 : !!I.value : !1;
-    }, v = (k) => P.find((I) => I.key === k), N = (k, I) => {
+    }, v = (k) => P.find((I) => I.key === k), F = (k, I) => {
       const l = P.find((z) => z.key === k);
       return l ? l.value : I;
-    }, $ = (k) => !a || !a.isActive ? !1 : k.includes(a.planId), w = async () => {
-      await L();
+    }, B = (k) => !a || !a.isActive ? !1 : k.includes(a.planId), w = async () => {
+      await N();
     }, R = !!i && (m || !(o != null && o.id));
     return {
       subscription: a,
       features: P,
-      loading: c,
-      error: g,
+      loading: f,
+      error: c,
       isReady: R,
       isFeatureEnabled: u,
       getFeature: v,
-      getFeatureValue: N,
-      hasAllowedPlan: $,
+      getFeatureValue: F,
+      hasAllowedPlan: B,
       refresh: w
     };
-  }, [a, c, g, i, o == null ? void 0 : o.id, m]);
+  }, [a, f, c, i, o == null ? void 0 : o.id, m]);
   return /* @__PURE__ */ s(He.Provider, { value: M, children: e });
 }
 function Nt() {
@@ -1828,7 +1843,7 @@ const Oe = {
   open: { tenant: "optional", auth: "optional" }
 }, qe = ye(null);
 function Rr({ config: n = {}, children: e }) {
-  const t = Z(() => {
+  const t = J(() => {
     const r = {
       ...Oe,
       ...n.zoneRoots
@@ -1959,15 +1974,15 @@ function Ir({
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: d, hasAnyPermission: c, hasAllPermissions: y } = he();
+  const { hasValidSession: o, sessionManager: a, hasPermission: d, hasAnyPermission: f, hasAllPermissions: y } = he();
   if (!o())
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
-  const g = a.getUser();
-  if (!g)
+  const c = a.getUser();
+  if (!c)
     return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
-  if (t && !Dt(g.userType, t))
-    return /* @__PURE__ */ s(Ke, { userType: g.userType, minUserType: t });
-  if (r && r.length > 0 && !(i ? y(r) : c(r))) {
+  if (t && !Dt(c.userType, t))
+    return /* @__PURE__ */ s(Ke, { userType: c.userType, minUserType: t });
+  if (r && r.length > 0 && !(i ? y(r) : f(r))) {
     const m = r.filter((T) => !d(T)).map((T) => typeof T == "string" ? T : T.name);
     return /* @__PURE__ */ s(Ke, { missingPermissions: m });
   }
@@ -2060,7 +2075,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), $t = (n, e) => n === e;
+), Bt = (n, e) => n === e;
 function Mr({
   children: n,
   redirectTo: e = "/login",
@@ -2069,7 +2084,7 @@ function Mr({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: d, hasPermission: c, hasAnyPermission: y, hasAllPermissions: g } = he(), F = xe();
+  const { hasValidSession: a, sessionManager: d, hasPermission: f, hasAnyPermission: y, hasAllPermissions: c } = he(), L = xe();
   if (ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
@@ -2077,12 +2092,12 @@ function Mr({
   }, []), !a())
     return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ h(_, { children: [
       /* @__PURE__ */ s(Ut, { redirectPath: e }),
-      /* @__PURE__ */ s(Se, { to: e, state: { from: F.pathname }, replace: !0 })
+      /* @__PURE__ */ s(Se, { to: e, state: { from: L.pathname }, replace: !0 })
     ] });
   const m = d.getUser();
   if (!m)
-    return /* @__PURE__ */ s(Se, { to: e, state: { from: F.pathname }, replace: !0 });
-  if (t && !$t(m.userType, t))
+    return /* @__PURE__ */ s(Se, { to: e, state: { from: L.pathname }, replace: !0 });
+  if (t && !Bt(m.userType, t))
     return /* @__PURE__ */ s(
       Qe,
       {
@@ -2090,13 +2105,13 @@ function Mr({
         requiredUserType: t
       }
     );
-  if (r && r.length > 0 && !(i ? g(r) : y(r))) {
-    const A = r.filter((L) => !c(L)).map((L) => typeof L == "string" ? L : L.name);
+  if (r && r.length > 0 && !(i ? c(r) : y(r))) {
+    const A = r.filter((N) => !f(N)).map((N) => typeof N == "string" ? N : N.name);
     return /* @__PURE__ */ s(Qe, { missingPermissions: A });
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-const Bt = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2134,13 +2149,13 @@ const Bt = ({ redirectPath: n }) => /* @__PURE__ */ s(
   }
 );
 function Lr({ children: n, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = Je(), a = xe();
+  const { tenant: r, isLoading: i, error: o } = Ze(), a = xe();
   return ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
   }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ h(_, { children: [
-    /* @__PURE__ */ s(Bt, { redirectPath: e }),
+    /* @__PURE__ */ s($t, { redirectPath: e }),
     /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
@@ -2182,7 +2197,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
   }
 );
 function Nr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = Je(), a = xe();
+  const { tenant: r, isLoading: i, error: o } = Ze(), a = xe();
   return ne(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
@@ -2195,11 +2210,11 @@ function Nr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
 function Ht(n, e) {
   return e ? n ? Array.isArray(e) ? e.includes(n) : n === e : !1 : !0;
 }
-function Ze(n, e) {
+function Je(n, e) {
   return !n || n === "optional" ? "skip" : n === "required" ? e ? "pass" : "fail" : n === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
 function Ot(n, e) {
-  return Ze(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Ze(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ht(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
+  return Je(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Je(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ht(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
 }
 function qt(n, e) {
   return n.hasTenant ? n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
@@ -2224,46 +2239,46 @@ const ue = ({
   requiredPermissions: o,
   requireAllPermissions: a = !0,
   returnTo: d,
-  onAccessDenied: c,
+  onAccessDenied: f,
   redirectTo: y,
-  loadingFallback: g,
-  accessDeniedFallback: F
+  loadingFallback: c,
+  accessDeniedFallback: L
 }) => {
-  const m = xe(), { isAuthenticated: T, isAuthInitializing: A, currentUser: L, userPermissions: M } = he(), { tenant: P, isTenantLoading: u } = Te(), v = Ft(), N = Z(() => {
+  const m = xe(), { isAuthenticated: T, isAuthInitializing: A, currentUser: N, userPermissions: M } = he(), { tenant: P, isTenantLoading: u } = Te(), v = Ft(), F = J(() => {
     if (e)
       return v.presets[e];
-  }, [e, v.presets]), $ = Z(
+  }, [e, v.presets]), B = J(
     () => ({
-      tenant: t ?? (N == null ? void 0 : N.tenant),
-      auth: r ?? (N == null ? void 0 : N.auth),
-      userType: i ?? (N == null ? void 0 : N.userType),
-      permissions: o ?? (N == null ? void 0 : N.requiredPermissions),
+      tenant: t ?? (F == null ? void 0 : F.tenant),
+      auth: r ?? (F == null ? void 0 : F.auth),
+      userType: i ?? (F == null ? void 0 : F.userType),
+      permissions: o ?? (F == null ? void 0 : F.requiredPermissions),
       requireAllPermissions: a
     }),
-    [t, r, i, o, N, a]
-  ), w = Z(
+    [t, r, i, o, F, a]
+  ), w = J(
     () => ({
       hasTenant: !!P,
       isAuthenticated: T,
-      userType: L == null ? void 0 : L.userType,
+      userType: N == null ? void 0 : N.userType,
       permissions: M,
       isLoading: A || u
     }),
     [
       P,
       T,
-      L == null ? void 0 : L.userType,
+      N == null ? void 0 : N.userType,
       M,
       A,
       u
     ]
-  ), R = Z(() => w.isLoading ? null : Ot($, w), [$, w]), k = Z(() => R ? y || qt(w, v.zoneRoots) : null, [R, y, w, v.zoneRoots]), I = Z(() => !R || !k ? null : {
+  ), R = J(() => w.isLoading ? null : Ot(B, w), [B, w]), k = J(() => R ? y || qt(w, v.zoneRoots) : null, [R, y, w, v.zoneRoots]), I = J(() => !R || !k ? null : {
     type: R,
     required: {
-      tenant: $.tenant,
-      auth: $.auth,
-      userType: $.userType,
-      permissions: $.permissions
+      tenant: B.tenant,
+      auth: B.auth,
+      userType: B.userType,
+      permissions: B.permissions
     },
     current: {
       hasTenant: w.hasTenant,
@@ -2272,10 +2287,10 @@ const ue = ({
       permissions: w.permissions
     },
     redirectTo: k
-  }, [R, k, $, w]);
+  }, [R, k, B, w]);
   if (ne(() => {
-    I && (c ? c(I) : v.onAccessDenied && v.onAccessDenied(I));
-  }, [I, c, v]), ne(() => {
+    I && (f ? f(I) : v.onAccessDenied && v.onAccessDenied(I));
+  }, [I, f, v]), ne(() => {
     I && d && zt(d, m.pathname + m.search, v.returnToStorage);
   }, [
     I,
@@ -2284,9 +2299,9 @@ const ue = ({
     m.search,
     v.returnToStorage
   ]), w.isLoading)
-    return /* @__PURE__ */ s(_, { children: g ?? v.loadingFallback ?? null });
+    return /* @__PURE__ */ s(_, { children: c ?? v.loadingFallback ?? null });
   if (I && k) {
-    const l = F ?? v.accessDeniedFallback;
+    const l = L ?? v.accessDeniedFallback;
     if (l)
       return /* @__PURE__ */ s(_, { children: l });
     const z = _t(
@@ -2299,7 +2314,7 @@ const ue = ({
     return /* @__PURE__ */ s(Se, { to: z, replace: !0 });
   }
   return /* @__PURE__ */ s(_, { children: n });
-}, Fr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ue, { tenant: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(ue, { auth: "required", ...n }), $r = (n) => /* @__PURE__ */ s(ue, { auth: "forbidden", ...n }), Br = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.USER, ...n }), Hr = (n) => /* @__PURE__ */ s(ue, { tenant: "optional", auth: "optional", ...n }), Or = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "required", ...n }), qr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "optional", ...n }), _r = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "forbidden", ...n }), Vt = () => /* @__PURE__ */ h(
+}, Fr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ue, { tenant: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(ue, { auth: "required", ...n }), Br = (n) => /* @__PURE__ */ s(ue, { auth: "forbidden", ...n }), $r = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.USER, ...n }), Hr = (n) => /* @__PURE__ */ s(ue, { tenant: "optional", auth: "optional", ...n }), Or = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "required", ...n }), qr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "optional", ...n }), _r = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "forbidden", ...n }), Vt = () => /* @__PURE__ */ h(
   "div",
   {
     style: {
@@ -2434,7 +2449,7 @@ const jt = () => /* @__PURE__ */ h(
   dividerBullet: "•",
   showPasswordAriaLabel: "Show password",
   hidePasswordAriaLabel: "Hide password"
-}, Zt = {
+}, Jt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2553,17 +2568,17 @@ function Wr({
   onForgotPassword: o,
   onSignupClick: a,
   onMagicLinkClick: d,
-  showForgotPassword: c = !0,
+  showForgotPassword: f = !0,
   showSignupLink: y = !0,
-  showMagicLinkOption: g = !0,
-  className: F
+  showMagicLinkOption: c = !0,
+  className: L
 }) {
-  const [m, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [u, v] = x(!1), [N, $] = x(""), [w, R] = x({}), { login: k } = he(), I = { ...Qt, ...n }, l = { ...Zt, ...e }, z = { ...Kt, ...t }, D = () => {
+  const [m, T] = x(""), [A, N] = x(""), [M, P] = x(!1), [u, v] = x(!1), [F, B] = x(""), [w, R] = x({}), { login: k } = he(), I = { ...Qt, ...n }, l = { ...Jt, ...e }, z = { ...Kt, ...t }, D = () => {
     const p = {};
     return m.trim() || (p.username = !0), A.trim() || (p.password = !0), R(p), Object.keys(p).length === 0;
-  }, f = async (p) => {
+  }, g = async (p) => {
     if (p.preventDefault(), !!D()) {
-      v(!0), $("");
+      v(!0), B("");
       try {
         const S = await k({
           username: m,
@@ -2573,7 +2588,7 @@ function Wr({
         r == null || r(S);
       } catch (S) {
         const E = S.message || I.errorMessage;
-        $(E), i == null || i(E);
+        B(E), i == null || i(E);
       } finally {
         v(!1);
       }
@@ -2586,9 +2601,9 @@ function Wr({
     ...u ? l.buttonLoading : {},
     ...!m || !A || u ? l.buttonDisabled : {}
   });
-  return /* @__PURE__ */ h("div", { className: F, style: l.container, children: [
+  return /* @__PURE__ */ h("div", { className: L, style: l.container, children: [
     /* @__PURE__ */ s("h2", { style: l.title, children: I.title }),
-    /* @__PURE__ */ h("form", { onSubmit: f, style: l.form, children: [
+    /* @__PURE__ */ h("form", { onSubmit: g, style: l.form, children: [
       /* @__PURE__ */ h("div", { style: l.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: l.label, children: I.usernameLabel }),
         /* @__PURE__ */ s(
@@ -2618,7 +2633,7 @@ function Wr({
               type: M ? "text" : "password",
               value: A,
               onChange: (p) => {
-                L(p.target.value), w.password && R((S) => ({ ...S, password: !1 }));
+                N(p.target.value), w.password && R((S) => ({ ...S, password: !1 }));
               },
               placeholder: I.passwordPlaceholder,
               style: {
@@ -2642,19 +2657,19 @@ function Wr({
         ] })
       ] }),
       /* @__PURE__ */ s("button", { type: "submit", disabled: !m || !A || u, style: b(), children: u ? I.loadingText : I.submitButton }),
-      N && /* @__PURE__ */ s("div", { style: l.errorText, children: N })
+      F && /* @__PURE__ */ s("div", { style: l.errorText, children: F })
     ] }),
-    (c || y || g) && /* @__PURE__ */ h("div", { style: l.linkContainer, children: [
-      g && /* @__PURE__ */ h("div", { children: [
+    (f || y || c) && /* @__PURE__ */ h("div", { style: l.linkContainer, children: [
+      c && /* @__PURE__ */ h("div", { children: [
         /* @__PURE__ */ h("span", { style: l.divider, children: [
           I.magicLinkText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: d, style: l.link, children: I.magicLinkLink })
       ] }),
-      g && (c || y) && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
-      c && /* @__PURE__ */ s("a", { onClick: o, style: l.link, children: I.forgotPasswordLink }),
-      c && y && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
+      c && (f || y) && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
+      f && /* @__PURE__ */ s("a", { onClick: o, style: l.link, children: I.forgotPasswordLink }),
+      f && y && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
       y && /* @__PURE__ */ h("div", { children: [
         /* @__PURE__ */ h("span", { style: l.divider, children: [
           I.signupText,
@@ -2665,7 +2680,7 @@ function Wr({
     ] })
   ] });
 }
-const Jt = {
+const Zt = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2808,17 +2823,17 @@ function jr({
   onLoginClick: o,
   onMagicLinkClick: a,
   showLoginLink: d = !0,
-  showMagicLinkOption: c = !0,
+  showMagicLinkOption: f = !0,
   className: y
 }) {
   var V;
-  const [g, F] = x(""), [m, T] = x(""), [A, L] = x(""), [M, P] = x(""), [u, v] = x(""), [N, $] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, z] = x(""), [D, f] = x({}), { signup: U, signupTenantAdmin: b } = he(), p = ((V = pe()) == null ? void 0 : V.tenant) ?? null, S = { ...Jt, ...n }, E = { ...Yt, ...e }, K = () => {
+  const [c, L] = x(""), [m, T] = x(""), [A, N] = x(""), [M, P] = x(""), [u, v] = x(""), [F, B] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, z] = x(""), [D, g] = x({}), { signup: U, signupTenantAdmin: b } = he(), p = ((V = pe()) == null ? void 0 : V.tenant) ?? null, S = { ...Zt, ...n }, E = { ...Yt, ...e }, K = () => {
     const H = {};
-    return g.trim() || (H.name = !0), !A.trim() && !M.trim() && (H.email = !0, H.phoneNumber = !0), u.trim() || (H.password = !0), N.trim() || (H.confirmPassword = !0), t === "tenant" && !w.trim() && (H.tenantName = !0), f(H), Object.keys(H).length === 0;
+    return c.trim() || (H.name = !0), !A.trim() && !M.trim() && (H.email = !0, H.phoneNumber = !0), u.trim() || (H.password = !0), F.trim() || (H.confirmPassword = !0), t === "tenant" && !w.trim() && (H.tenantName = !0), g(H), Object.keys(H).length === 0;
   }, G = async (H) => {
     if (H.preventDefault(), !!K()) {
-      if (u !== N) {
-        z(S.passwordMismatchError), f({ confirmPassword: !0 });
+      if (u !== F) {
+        z(S.passwordMismatchError), g({ confirmPassword: !0 });
         return;
       }
       if (t === "user" && !(p != null && p.id)) {
@@ -2827,24 +2842,24 @@ function jr({
       }
       I(!0), z("");
       try {
-        let B;
-        t === "tenant" ? B = await b({
+        let $;
+        t === "tenant" ? $ = await b({
           email: A || void 0,
           phoneNumber: M || void 0,
-          name: g,
+          name: c,
           password: u,
           tenantName: w,
           lastName: m || void 0
-        }) : B = await U({
+        }) : $ = await U({
           email: A || void 0,
           phoneNumber: M || void 0,
-          name: g,
+          name: c,
           password: u,
           tenantId: p.id,
           lastName: m || void 0
-        }), r == null || r(B);
-      } catch (B) {
-        const ce = B.message || S.errorMessage;
+        }), r == null || r($);
+      } catch ($) {
+        const ce = $.message || S.errorMessage;
         z(ce), i == null || i(ce);
       } finally {
         I(!1);
@@ -2856,8 +2871,8 @@ function jr({
   }), W = () => ({
     ...E.button,
     ...k ? E.buttonLoading : {},
-    ...!g || !A && !M || !u || !N || k || t === "tenant" && !w ? E.buttonDisabled : {}
-  }), q = g && (A || M) && u && N && (t === "user" || w);
+    ...!c || !A && !M || !u || !F || k || t === "tenant" && !w ? E.buttonDisabled : {}
+  }), q = c && (A || M) && u && F && (t === "user" || w);
   return /* @__PURE__ */ h("div", { className: y, style: E.container, children: [
     /* @__PURE__ */ s("h2", { style: E.title, children: S.title }),
     /* @__PURE__ */ h("form", { onSubmit: G, style: E.form, children: [
@@ -2869,9 +2884,9 @@ function jr({
             id: "name",
             name: "name",
             type: "text",
-            value: g,
+            value: c,
             onChange: (H) => {
-              F(H.target.value), D.name && f((B) => ({ ...B, name: !1 }));
+              L(H.target.value), D.name && g(($) => ({ ...$, name: !1 }));
             },
             placeholder: S.namePlaceholder,
             style: X("name"),
@@ -2905,7 +2920,7 @@ function jr({
             type: "email",
             value: A,
             onChange: (H) => {
-              L(H.target.value), D.email && f((B) => ({ ...B, email: !1, phoneNumber: !1 }));
+              N(H.target.value), D.email && g(($) => ({ ...$, email: !1, phoneNumber: !1 }));
             },
             placeholder: S.emailPlaceholder,
             style: X("email"),
@@ -2923,7 +2938,7 @@ function jr({
             type: "tel",
             value: M,
             onChange: (H) => {
-              P(H.target.value), D.phoneNumber && f((B) => ({ ...B, email: !1, phoneNumber: !1 }));
+              P(H.target.value), D.phoneNumber && g(($) => ({ ...$, email: !1, phoneNumber: !1 }));
             },
             placeholder: S.phoneNumberPlaceholder,
             style: X("phoneNumber"),
@@ -2942,7 +2957,7 @@ function jr({
             type: "password",
             value: u,
             onChange: (H) => {
-              v(H.target.value), D.password && f((B) => ({ ...B, password: !1 }));
+              v(H.target.value), D.password && g(($) => ({ ...$, password: !1 }));
             },
             placeholder: S.passwordPlaceholder,
             style: X("password"),
@@ -2958,9 +2973,9 @@ function jr({
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: N,
+            value: F,
             onChange: (H) => {
-              $(H.target.value), D.confirmPassword && f((B) => ({ ...B, confirmPassword: !1 })), l === S.passwordMismatchError && z("");
+              B(H.target.value), D.confirmPassword && g(($) => ({ ...$, confirmPassword: !1 })), l === S.passwordMismatchError && z("");
             },
             placeholder: S.confirmPasswordPlaceholder,
             style: X("confirmPassword"),
@@ -2978,7 +2993,7 @@ function jr({
             type: "text",
             value: w,
             onChange: (H) => {
-              R(H.target.value), D.tenantName && f((B) => ({ ...B, tenantName: !1 }));
+              R(H.target.value), D.tenantName && g(($) => ({ ...$, tenantName: !1 }));
             },
             placeholder: S.tenantNamePlaceholder,
             style: X("tenantName"),
@@ -2989,15 +3004,15 @@ function jr({
       /* @__PURE__ */ s("button", { type: "submit", disabled: !q || k, style: W(), children: k ? S.loadingText : S.submitButton }),
       l && /* @__PURE__ */ s("div", { style: E.errorText, children: l })
     ] }),
-    (d || c) && /* @__PURE__ */ h("div", { style: E.linkContainer, children: [
-      c && /* @__PURE__ */ h("div", { children: [
+    (d || f) && /* @__PURE__ */ h("div", { style: E.linkContainer, children: [
+      f && /* @__PURE__ */ h("div", { children: [
         /* @__PURE__ */ h("span", { style: E.divider, children: [
           S.magicLinkText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: a, style: E.link, children: S.magicLinkLink })
       ] }),
-      c && d && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
+      f && d && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
       d && /* @__PURE__ */ h("div", { children: [
         /* @__PURE__ */ h("span", { style: E.divider, children: [
           S.loginText,
@@ -3164,46 +3179,46 @@ function Gr({
   onSignupClick: o,
   showTraditionalLinks: a = !0,
   className: d,
-  verifyToken: c,
+  verifyToken: f,
   frontendUrl: y
 }) {
   var W;
-  const [g, F] = x(""), [m, T] = x(""), [A, L] = x(""), [M, P] = x(!1), [u, v] = x(!1), [N, $] = x(""), [w, R] = x(""), [k, I] = x({}), [l, z] = x(!1), { sendMagicLink: D, verifyMagicLink: f } = he(), U = ((W = pe()) == null ? void 0 : W.tenant) ?? null, b = { ...Xt, ...n }, p = { ...er, ...e };
+  const [c, L] = x(""), [m, T] = x(""), [A, N] = x(""), [M, P] = x(!1), [u, v] = x(!1), [F, B] = x(""), [w, R] = x(""), [k, I] = x({}), [l, z] = x(!1), { sendMagicLink: D, verifyMagicLink: g } = he(), U = ((W = pe()) == null ? void 0 : W.tenant) ?? null, b = { ...Xt, ...n }, p = { ...er, ...e };
   ne(() => {
-    c && S(c);
-  }, [c]);
+    f && S(f);
+  }, [f]);
   const S = async (q) => {
-    if (!U || !g) {
-      $(b.missingTenantOrEmailError);
+    if (!U || !c) {
+      B(b.missingTenantOrEmailError);
       return;
     }
-    v(!0), $("");
+    v(!0), B("");
     try {
-      const V = await f({
+      const V = await g({
         token: q,
-        email: g
+        email: c
         // tenantId inferred from context automatically
       });
       t == null || t(V);
     } catch (V) {
       const H = V.message || "Failed to verify magic link";
-      $(H), r == null || r(H);
+      B(H), r == null || r(H);
     } finally {
       v(!1);
     }
   }, E = () => {
     const q = {};
-    return g.trim() || (q.email = !0), l && !m.trim() && (q.name = !0), I(q), Object.keys(q).length === 0;
+    return c.trim() || (q.email = !0), l && !m.trim() && (q.name = !0), I(q), Object.keys(q).length === 0;
   }, K = async (q) => {
     if (q.preventDefault(), !!E()) {
       if (!(U != null && U.id)) {
-        $(b.tenantNotFoundError);
+        B(b.tenantNotFoundError);
         return;
       }
-      P(!0), $(""), R("");
+      P(!0), B(""), R("");
       try {
         const V = y || (typeof window < "u" ? window.location.origin : ""), H = await D({
-          email: g,
+          email: c,
           tenantId: U.id,
           frontendUrl: V,
           name: l ? m : void 0,
@@ -3212,7 +3227,7 @@ function Gr({
         R(b.successMessage), t == null || t(H);
       } catch (V) {
         const H = V.message || b.errorMessage;
-        $(H), r == null || r(H);
+        B(H), r == null || r(H);
       } finally {
         P(!1);
       }
@@ -3223,7 +3238,7 @@ function Gr({
   }), X = () => ({
     ...p.button,
     ...M || u ? p.buttonLoading : {},
-    ...!g || M || u ? p.buttonDisabled : {}
+    ...!c || M || u ? p.buttonDisabled : {}
   });
   return u ? /* @__PURE__ */ h("div", { className: d, style: p.container, children: [
     /* @__PURE__ */ s("h2", { style: p.title, children: b.verifyingText }),
@@ -3240,9 +3255,9 @@ function Gr({
             id: "email",
             name: "email",
             type: "email",
-            value: g,
+            value: c,
             onChange: (q) => {
-              F(q.target.value), k.email && I((V) => ({ ...V, email: !1 }));
+              L(q.target.value), k.email && I((V) => ({ ...V, email: !1 }));
             },
             placeholder: b.emailPlaceholder,
             style: G("email"),
@@ -3287,7 +3302,7 @@ function Gr({
               name: "lastName",
               type: "text",
               value: A,
-              onChange: (q) => L(q.target.value),
+              onChange: (q) => N(q.target.value),
               placeholder: b.lastNamePlaceholder,
               style: p.input,
               disabled: M || u
@@ -3299,15 +3314,15 @@ function Gr({
           {
             type: "button",
             onClick: () => {
-              z(!1), T(""), L("");
+              z(!1), T(""), N("");
             },
             style: p.toggleLink,
             children: b.hideNameToggle
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !g || M || u, style: X(), children: M ? b.loadingText : b.submitButton }),
-      N && /* @__PURE__ */ s("div", { style: p.errorText, children: N }),
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !c || M || u, style: X(), children: M ? b.loadingText : b.submitButton }),
+      F && /* @__PURE__ */ s("div", { style: p.errorText, children: F }),
       w && /* @__PURE__ */ s("div", { style: p.successText, children: w })
     ] }),
     a && /* @__PURE__ */ h("div", { style: p.linkContainer, children: [
@@ -3480,25 +3495,25 @@ function Kr({
   onRetry: o,
   onBackToLogin: a,
   className: d,
-  token: c,
+  token: f,
   email: y,
-  appId: g,
-  tenantSlug: F,
+  appId: c,
+  tenantSlug: L,
   autoRedirectDelay: m = 3e3
 }) {
-  const [T, A] = x("verifying"), [L, M] = x(""), { verifyMagicLink: P } = he(), u = { ...tr, ...n }, v = { ...tt, ...e }, N = { ...ir, ...t }, $ = () => {
+  const [T, A] = x("verifying"), [N, M] = x(""), { verifyMagicLink: P } = he(), u = { ...tr, ...n }, v = { ...tt, ...e }, F = { ...ir, ...t }, B = () => {
     if (typeof window > "u") return {};
     const l = new URLSearchParams(window.location.search);
     return {
-      token: c || l.get("token") || "",
+      token: f || l.get("token") || "",
       email: y || l.get("email") || "",
-      appId: g || l.get("appId") || "",
-      tenantSlug: F || l.get("tenantSlug") || void 0
+      appId: c || l.get("appId") || "",
+      tenantSlug: L || l.get("tenantSlug") || void 0
     };
   }, w = async () => {
     A("verifying"), M("");
     try {
-      const l = $();
+      const l = B();
       if (!l.token || !l.email)
         throw new Error(u.missingParamsError);
       const z = await P({
@@ -3525,23 +3540,23 @@ function Kr({
     switch (T) {
       case "verifying":
         return /* @__PURE__ */ h("div", { style: v.message, children: [
-          N.loading,
+          F.loading,
           u.verifyingMessage
         ] });
       case "success":
         return /* @__PURE__ */ h(_, { children: [
-          N.success,
+          F.success,
           /* @__PURE__ */ s("div", { style: v.successMessage, children: u.successMessage })
         ] });
       case "redirecting":
         return /* @__PURE__ */ h(_, { children: [
-          N.loading,
+          F.loading,
           /* @__PURE__ */ s("div", { style: v.message, children: u.redirectingMessage })
         ] });
       case "error":
         return /* @__PURE__ */ h(_, { children: [
-          N.error,
-          /* @__PURE__ */ s("div", { style: v.errorMessage, children: L || u.errorMessage }),
+          F.error,
+          /* @__PURE__ */ s("div", { style: v.errorMessage, children: N || u.errorMessage }),
           /* @__PURE__ */ h("div", { style: v.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
@@ -3725,67 +3740,67 @@ function Qr({
   onError: o,
   onBackToLogin: a,
   onModeChange: d,
-  className: c
+  className: f
 }) {
   var X;
-  const [y, g] = x(""), [F, m] = x(r), [T, A] = x(""), [L, M] = x(""), [P, u] = x(!1), [v, N] = x(""), [$, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = he(), z = ((X = pe()) == null ? void 0 : X.tenant) ?? null, D = { ...or, ...n }, f = { ...ar, ...e }, U = () => {
+  const [y, c] = x(""), [L, m] = x(r), [T, A] = x(""), [N, M] = x(""), [P, u] = x(!1), [v, F] = x(""), [B, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = he(), z = ((X = pe()) == null ? void 0 : X.tenant) ?? null, D = { ...or, ...n }, g = { ...ar, ...e }, U = () => {
     const W = {};
     return y.trim() || (W.email = !0), k(W), Object.keys(W).length === 0;
   }, b = () => {
     const W = {};
-    return F.trim() || (W.token = !0), T.trim() || (W.newPassword = !0), L.trim() || (W.confirmPassword = !0), k(W), Object.keys(W).length === 0;
+    return L.trim() || (W.token = !0), T.trim() || (W.newPassword = !0), N.trim() || (W.confirmPassword = !0), k(W), Object.keys(W).length === 0;
   }, p = async (W) => {
     if (W.preventDefault(), !!U()) {
       if (!(z != null && z.id)) {
-        N(D.tenantNotFoundError);
+        F(D.tenantNotFoundError);
         return;
       }
-      u(!0), N(""), w("");
+      u(!0), F(""), w("");
       try {
         await I({ email: y, tenantId: z.id }), w(D.successMessage), i == null || i();
       } catch (q) {
         const V = q.message || D.errorMessage;
-        N(V), o == null || o(V);
+        F(V), o == null || o(V);
       } finally {
         u(!1);
       }
     }
   }, S = async (W) => {
     if (W.preventDefault(), !!b()) {
-      if (T !== L) {
-        N(D.passwordMismatchError), k({ confirmPassword: !0 });
+      if (T !== N) {
+        F(D.passwordMismatchError), k({ confirmPassword: !0 });
         return;
       }
-      u(!0), N(""), w("");
+      u(!0), F(""), w("");
       try {
-        await l({ token: F, newPassword: T }), w(D.resetSuccessMessage), i == null || i();
+        await l({ token: L, newPassword: T }), w(D.resetSuccessMessage), i == null || i();
       } catch (q) {
         const V = q.message || D.errorMessage;
-        N(V), o == null || o(V);
+        F(V), o == null || o(V);
       } finally {
         u(!1);
       }
     }
   }, E = (W) => ({
-    ...f.input,
-    ...R[W] ? f.inputError : {}
+    ...g.input,
+    ...R[W] ? g.inputError : {}
   }), K = () => ({
-    ...f.button,
-    ...P ? f.buttonLoading : {}
+    ...g.button,
+    ...P ? g.buttonLoading : {}
   });
   if (t === "reset") {
-    const W = F && T && L;
-    return /* @__PURE__ */ h("div", { className: c, style: f.container, children: [
-      /* @__PURE__ */ s("h2", { style: f.title, children: D.resetTitle }),
-      /* @__PURE__ */ s("p", { style: f.subtitle, children: D.resetSubtitle }),
-      /* @__PURE__ */ h("form", { onSubmit: S, style: f.form, children: [
-        /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: f.label, children: D.tokenLabel }),
+    const W = L && T && N;
+    return /* @__PURE__ */ h("div", { className: f, style: g.container, children: [
+      /* @__PURE__ */ s("h2", { style: g.title, children: D.resetTitle }),
+      /* @__PURE__ */ s("p", { style: g.subtitle, children: D.resetSubtitle }),
+      /* @__PURE__ */ h("form", { onSubmit: S, style: g.form, children: [
+        /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: D.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "text",
-              value: F,
+              value: L,
               onChange: (q) => {
                 m(q.target.value), R.token && k((V) => ({ ...V, token: !1 }));
               },
@@ -3795,8 +3810,8 @@ function Qr({
             }
           )
         ] }),
-        /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: f.label, children: D.newPasswordLabel }),
+        /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: D.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
@@ -3811,15 +3826,15 @@ function Qr({
             }
           )
         ] }),
-        /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
-          /* @__PURE__ */ s("label", { style: f.label, children: D.confirmPasswordLabel }),
+        /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ s("label", { style: g.label, children: D.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
             {
               type: "password",
-              value: L,
+              value: N,
               onChange: (q) => {
-                M(q.target.value), R.confirmPassword && k((V) => ({ ...V, confirmPassword: !1 })), v === D.passwordMismatchError && N("");
+                M(q.target.value), R.confirmPassword && k((V) => ({ ...V, confirmPassword: !1 })), v === D.passwordMismatchError && F("");
               },
               placeholder: D.confirmPasswordPlaceholder,
               style: E("confirmPassword"),
@@ -3834,37 +3849,37 @@ function Qr({
             disabled: !W || P,
             style: {
               ...K(),
-              ...!W || P ? f.buttonDisabled : {}
+              ...!W || P ? g.buttonDisabled : {}
             },
             children: P ? D.resetLoadingText : D.resetSubmitButton
           }
         ),
-        v && /* @__PURE__ */ s("div", { style: f.errorText, children: v }),
-        $ && /* @__PURE__ */ s("div", { style: f.successText, children: $ })
+        v && /* @__PURE__ */ s("div", { style: g.errorText, children: v }),
+        B && /* @__PURE__ */ s("div", { style: g.successText, children: B })
       ] }),
-      /* @__PURE__ */ h("div", { style: f.linkContainer, children: [
-        /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: D.backToLoginLink }),
+      /* @__PURE__ */ h("div", { style: g.linkContainer, children: [
+        /* @__PURE__ */ s("a", { onClick: a, style: g.link, children: D.backToLoginLink }),
         d && /* @__PURE__ */ h(_, { children: [
-          /* @__PURE__ */ s("span", { style: f.modeSwitchDivider, children: D.dividerBullet }),
-          /* @__PURE__ */ s("a", { onClick: () => d("request"), style: f.link, children: D.requestNewLinkLink })
+          /* @__PURE__ */ s("span", { style: g.modeSwitchDivider, children: D.dividerBullet }),
+          /* @__PURE__ */ s("a", { onClick: () => d("request"), style: g.link, children: D.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
   const G = y;
-  return /* @__PURE__ */ h("div", { className: c, style: f.container, children: [
-    /* @__PURE__ */ s("h2", { style: f.title, children: D.title }),
-    /* @__PURE__ */ s("p", { style: f.subtitle, children: D.subtitle }),
-    /* @__PURE__ */ h("form", { onSubmit: p, style: f.form, children: [
-      /* @__PURE__ */ h("div", { style: f.fieldGroup, children: [
-        /* @__PURE__ */ s("label", { style: f.label, children: D.emailLabel }),
+  return /* @__PURE__ */ h("div", { className: f, style: g.container, children: [
+    /* @__PURE__ */ s("h2", { style: g.title, children: D.title }),
+    /* @__PURE__ */ s("p", { style: g.subtitle, children: D.subtitle }),
+    /* @__PURE__ */ h("form", { onSubmit: p, style: g.form, children: [
+      /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ s("label", { style: g.label, children: D.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
             value: y,
             onChange: (W) => {
-              g(W.target.value), R.email && k((q) => ({ ...q, email: !1 }));
+              c(W.target.value), R.email && k((q) => ({ ...q, email: !1 }));
             },
             placeholder: D.emailPlaceholder,
             style: E("email"),
@@ -3879,19 +3894,19 @@ function Qr({
           disabled: !G || P,
           style: {
             ...K(),
-            ...!G || P ? f.buttonDisabled : {}
+            ...!G || P ? g.buttonDisabled : {}
           },
           children: P ? D.loadingText : D.submitButton
         }
       ),
-      v && /* @__PURE__ */ s("div", { style: f.errorText, children: v }),
-      $ && /* @__PURE__ */ s("div", { style: f.successText, children: $ })
+      v && /* @__PURE__ */ s("div", { style: g.errorText, children: v }),
+      B && /* @__PURE__ */ s("div", { style: g.successText, children: B })
     ] }),
-    /* @__PURE__ */ h("div", { style: f.linkContainer, children: [
-      /* @__PURE__ */ s("a", { onClick: a, style: f.link, children: D.backToLoginLink }),
+    /* @__PURE__ */ h("div", { style: g.linkContainer, children: [
+      /* @__PURE__ */ s("a", { onClick: a, style: g.link, children: D.backToLoginLink }),
       d && /* @__PURE__ */ h(_, { children: [
-        /* @__PURE__ */ s("span", { style: f.modeSwitchDivider, children: D.dividerBullet }),
-        /* @__PURE__ */ s("a", { onClick: () => d("reset"), style: f.link, children: D.haveTokenLink })
+        /* @__PURE__ */ s("span", { style: g.modeSwitchDivider, children: D.dividerBullet }),
+        /* @__PURE__ */ s("a", { onClick: () => d("reset"), style: g.link, children: D.haveTokenLink })
       ] })
     ] })
   ] });
@@ -3942,14 +3957,14 @@ const lr = () => /* @__PURE__ */ s(
     ]
   }
 );
-function Zr({
+function Jr({
   children: n,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = Ae(), d = pe(), c = Be(), y = Ye(), g = Xe(), F = (d == null ? void 0 : d.isTenantLoading) ?? !1, m = (d == null ? void 0 : d.tenantError) ?? null, T = (d == null ? void 0 : d.tenantSlug) ?? null, A = (d == null ? void 0 : d.retryTenant) ?? (() => {
-  }), L = (c == null ? void 0 : c.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (g == null ? void 0 : g.isReady) ?? !0, u = r && d && T, w = i || u && F || c && !L || y && !M || g && !P, R = o || (u ? m : null), k = () => {
+  const { isAppLoading: i, appError: o, retryApp: a } = Ae(), d = pe(), f = $e(), y = Ye(), c = Xe(), L = (d == null ? void 0 : d.isTenantLoading) ?? !1, m = (d == null ? void 0 : d.tenantError) ?? null, T = (d == null ? void 0 : d.tenantSlug) ?? null, A = (d == null ? void 0 : d.retryTenant) ?? (() => {
+  }), N = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (c == null ? void 0 : c.isReady) ?? !0, u = r && d && T, w = i || u && L || f && !N || y && !M || c && !P, R = o || (u ? m : null), k = () => {
     o && a(), m && d && A();
   };
   if (w)
@@ -3960,22 +3975,22 @@ function Zr({
   }
   return /* @__PURE__ */ s(_, { children: n });
 }
-function Jr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Ae(), o = pe(), a = Be(), d = Ye(), c = Xe(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, g = (o == null ? void 0 : o.tenantError) ?? null, F = (o == null ? void 0 : o.tenant) ?? null, m = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, L = (d == null ? void 0 : d.isReady) ?? !0, M = (c == null ? void 0 : c.isReady) ?? !0, P = n && o && m, $ = e || P && y || a && !A || d && !L || c && !M, w = t || (P ? g : null);
+function Zr(n = !0) {
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Ae(), o = pe(), a = $e(), d = Ye(), f = Xe(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, L = (o == null ? void 0 : o.tenant) ?? null, m = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, N = (d == null ? void 0 : d.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = n && o && m, B = e || P && y || a && !A || d && !N || f && !M, w = t || (P ? c : null);
   return {
-    isLoading: $,
+    isLoading: B,
     error: w,
-    isReady: !$ && !w && i !== null && (!P || F !== null),
+    isReady: !B && !w && i !== null && (!P || L !== null),
     retry: () => {
-      t && r(), g && o && T();
+      t && r(), c && o && T();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: o ? { isLoading: y, error: g, data: F } : null,
+    tenant: o ? { isLoading: y, error: c, data: L } : null,
     auth: a ? { isReady: A } : null,
-    featureFlags: d ? { isReady: L } : null,
-    subscription: c ? { isReady: M } : null
+    featureFlags: d ? { isReady: N } : null,
+    subscription: f ? { isReady: M } : null
   };
 }
 const dr = {
@@ -4031,34 +4046,34 @@ function Yr({
   dropdownClassName: o = "",
   itemClassName: a = "",
   renderItem: d,
-  placeholder: c = "Select tenant",
+  placeholder: f = "Select tenant",
   disabled: y = !1,
-  showCurrentTenant: g = !0
+  showCurrentTenant: c = !0
 }) {
-  var $;
-  const F = { ...dr, ...r }, m = Be(), [T, A] = x(!1), L = Ne(null), M = n ?? (m == null ? void 0 : m.userTenants) ?? [], P = e ?? (($ = m == null ? void 0 : m.currentUser) == null ? void 0 : $.tenantId) ?? null, u = async (w) => {
+  var B;
+  const L = { ...dr, ...r }, m = $e(), [T, A] = x(!1), N = Ne(null), M = n ?? (m == null ? void 0 : m.userTenants) ?? [], P = e ?? ((B = m == null ? void 0 : m.currentUser) == null ? void 0 : B.tenantId) ?? null, u = async (w) => {
     A(!1), t ? t(w) : m != null && m.switchToTenant && await m.switchToTenant(w);
   };
   ne(() => {
     const w = (R) => {
-      L.current && !L.current.contains(R.target) && A(!1);
+      N.current && !N.current.contains(R.target) && A(!1);
     };
     return document.addEventListener("mousedown", w), () => document.removeEventListener("mousedown", w);
   }, []);
   const v = M.find((w) => w.id === P);
   if (M.length === 0)
     return null;
-  if (M.length === 1 && g)
+  if (M.length === 1 && c)
     return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: M[0].name }) });
-  const N = (w, R) => /* @__PURE__ */ h("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
+  const F = (w, R) => /* @__PURE__ */ h("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
     w.name,
-    w.role && /* @__PURE__ */ h("span", { style: F.itemRole, children: [
+    w.role && /* @__PURE__ */ h("span", { style: L.itemRole, children: [
       "(",
       w.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ h("div", { ref: L, className: i, style: F.wrapper, children: [
+  return /* @__PURE__ */ h("div", { ref: N, className: i, style: L.wrapper, children: [
     /* @__PURE__ */ h(
       "button",
       {
@@ -4066,16 +4081,16 @@ function Yr({
         onClick: () => !y && A(!T),
         disabled: y,
         style: {
-          ...F.button,
-          ...y ? F.buttonDisabled : {}
+          ...L.button,
+          ...y ? L.buttonDisabled : {}
         },
         children: [
-          v ? v.name : c,
-          /* @__PURE__ */ s("span", { style: F.arrow, children: T ? "▲" : "▼" })
+          v ? v.name : f,
+          /* @__PURE__ */ s("span", { style: L.arrow, children: T ? "▲" : "▼" })
         ]
       }
     ),
-    T && /* @__PURE__ */ s("div", { className: o, style: F.dropdown, children: M.map((w) => {
+    T && /* @__PURE__ */ s("div", { className: o, style: L.dropdown, children: M.map((w) => {
       const R = w.id === P;
       return /* @__PURE__ */ s(
         "div",
@@ -4083,21 +4098,21 @@ function Yr({
           className: a,
           onClick: () => u(w.id),
           style: {
-            ...F.item,
-            ...R ? F.itemSelected : {}
+            ...L.item,
+            ...R ? L.itemSelected : {}
           },
           onMouseEnter: (k) => {
-            R || Object.assign(k.currentTarget.style, F.itemHover);
+            R || Object.assign(k.currentTarget.style, L.itemHover);
           },
           onMouseLeave: (k) => {
             if (!R) {
-              const I = F.item || {};
-              Object.keys(F.itemHover || {}).forEach((l) => {
+              const I = L.item || {};
+              Object.keys(L.itemHover || {}).forEach((l) => {
                 k.currentTarget.style[l] = I[l] ?? "";
               });
             }
           },
-          children: d ? d(w, R) : N(w, R)
+          children: d ? d(w, R) : F(w, R)
         },
         w.id
       );
@@ -4360,7 +4375,7 @@ function nn(n = {}) {
     zoneRoots: e = {},
     returnToParam: t = rt,
     returnToStorage: r = "url"
-  } = n, i = mt(), [o, a] = yt(), { isAuthenticated: d, currentUser: c } = he(), { tenant: y } = Te(), g = Z(() => ({ ...Oe, ...e }), [e]), F = !!y, m = c == null ? void 0 : c.userType, T = Z(() => {
+  } = n, i = mt(), [o, a] = yt(), { isAuthenticated: d, currentUser: f } = he(), { tenant: y } = Te(), c = J(() => ({ ...Oe, ...e }), [e]), L = !!y, m = f == null ? void 0 : f.userType, T = J(() => {
     switch (r) {
       case "url":
         return o.get(t);
@@ -4385,7 +4400,7 @@ function nn(n = {}) {
         localStorage.removeItem(Le);
         break;
     }
-  }, [r, o, t, a]), L = oe(
+  }, [r, o, t, a]), N = oe(
     (u) => {
       switch (r) {
         case "url": {
@@ -4404,15 +4419,15 @@ function nn(n = {}) {
     [r, o, t, a]
   ), M = oe(
     (u) => {
-      const v = g[u] || g.default;
+      const v = c[u] || c.default;
       i(v);
     },
-    [i, g]
-  ), P = oe(() => F ? d ? m === ae.TENANT_ADMIN ? g.tenantAdmin : g.tenantUser : g.tenantGuest : d ? m === ae.TENANT_ADMIN ? g.publicAdmin : g.publicUser : g.publicGuest, [F, d, m, g]);
+    [i, c]
+  ), P = oe(() => L ? d ? m === ae.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : d ? m === ae.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [L, d, m, c]);
   return {
     returnToUrl: T,
     clearReturnTo: A,
-    setReturnTo: L,
+    setReturnTo: N,
     navigateToZone: M,
     getSmartRedirect: P
   };
@@ -4424,10 +4439,10 @@ function sn(n, e, t = rt, r = "url") {
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  Br as AdminZone,
+  $r as AdminZone,
   rn as ApiMappers,
   Ve as AppApiService,
-  Zr as AppLoader,
+  Jr as AppLoader,
   br as AppProvider,
   vt as AuthApiService,
   xr as AuthProvider,
@@ -4437,7 +4452,7 @@ export {
   Vr as FeatureFlag,
   It as FeatureFlagApiService,
   Ar as FeatureFlagProvider,
-  $r as GuestZone,
+  Br as GuestZone,
   tn as HealthApiService,
   de as HttpService,
   Nr as LandingRoute,
@@ -4476,7 +4491,7 @@ export {
   sn as buildRedirectUrl,
   vr as useApi,
   Ae as useApp,
-  Jr as useAppLoaderState,
+  Zr as useAppLoaderState,
   he as useAuth,
   Mt as useFeatureFlags,
   Er as useRouting,
@@ -4484,7 +4499,7 @@ export {
   kr as useSettings,
   Nt as useSubscription,
   Te as useTenant,
-  Je as useTenantInfo,
+  Ze as useTenantInfo,
   pe as useTenantOptional,
   Tr as useTenantSettings,
   nn as useZoneNavigation