@skylabs-digital/react-identity-access 2.31.0 → 2.32.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
-import { jsx as s, Fragment as _, jsxs as h } from "react/jsx-runtime";
-import { createContext as ye, useMemo as J, useState as x, useCallback as oe, useEffect as ne, useContext as le, useRef as Ne } from "react";
-import { useLocation as xe, Navigate as Se, useNavigate as mt, useSearchParams as yt } from "react-router-dom";
-class de {
+import { jsx as s, Fragment as z, jsxs as u } from "react/jsx-runtime";
+import { createContext as me, useMemo as K, useState as x, useCallback as ie, useEffect as te, useContext as ae, useRef as Me } from "react";
+import { useLocation as Te, Navigate as be, useNavigate as gt, useSearchParams as mt } from "react-router-dom";
+class ce {
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
   }
@@ -13,19 +13,19 @@ class de {
   }
   async executeRequest(e, t, r, i) {
     const o = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, a = (i == null ? void 0 : i.timeout) || this.timeout;
-    let d = {
+    let h = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
       const c = await this.sessionManager.getValidAccessToken();
-      d = { ...d, Authorization: `Bearer ${c}` };
+      h = { ...h, Authorization: `Bearer ${c}` };
     }
     const f = new AbortController(), y = setTimeout(() => f.abort(), a);
     try {
       const c = await fetch(o, {
         method: e,
-        headers: d,
+        headers: h,
         body: r ? JSON.stringify(r) : void 0,
         signal: f.signal
       });
@@ -50,7 +50,7 @@ class de {
     return this.executeRequest("DELETE", e, void 0, t);
   }
 }
-class Ve {
+class _e {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -109,9 +109,9 @@ class Ve {
     })).data;
   }
 }
-const Fe = ye(null);
-function br({ config: n, children: e }) {
-  const t = J(
+const Ne = me(null);
+function wr({ config: n, children: e }) {
+  const t = K(
     () => {
       var m, T, A;
       return {
@@ -132,7 +132,7 @@ function br({ config: n, children: e }) {
     } catch {
       return null;
     }
-  }), [o, a] = x(!r), [d, f] = x(null), y = J(() => {
+  }), [o, a] = x(!r), [h, f] = x(null), y = K(() => {
     const m = () => {
       c();
     };
@@ -142,15 +142,15 @@ function br({ config: n, children: e }) {
       // App info
       appInfo: r,
       isAppLoading: o,
-      appError: d,
+      appError: h,
       retryApp: m
     };
-  }, [n, r, o, d]), c = oe(
+  }, [n, r, o, h]), c = ie(
     async (m = !1) => {
       if (!(!m && t.enabled && r))
         try {
           a(!0), f(null);
-          const T = new de(n.baseUrl), N = await new Ve(T, {}).getPublicAppInfo(n.appId);
+          const T = new ce(n.baseUrl), N = await new _e(T, {}).getPublicAppInfo(n.appId);
           if (i(N), t.enabled)
             try {
               const M = {
@@ -170,41 +170,41 @@ function br({ config: n, children: e }) {
         }
     },
     [n.baseUrl, n.appId, t, r]
-  ), L = oe(async () => {
+  ), L = ie(async () => {
     if (!(!t.enabled || !r))
       try {
         const m = localStorage.getItem(t.storageKey);
         if (!m) return;
         const T = JSON.parse(m);
         if (Date.now() - T.timestamp > t.ttl * 0.5) {
-          const N = new de(n.baseUrl), P = await new Ve(N, {}).getPublicAppInfo(n.appId);
+          const N = new ce(n.baseUrl), P = await new _e(N, {}).getPublicAppInfo(n.appId);
           i(P);
-          const u = {
+          const d = {
             data: P,
             timestamp: Date.now(),
             appId: n.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(u));
+          localStorage.setItem(t.storageKey, JSON.stringify(d));
         }
       } catch (m) {
         process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", m);
       }
   }, [n, t, r]);
-  return ne(() => {
+  return te(() => {
     r ? L() : c();
-  }, []), /* @__PURE__ */ s(Fe.Provider, { value: y, children: e });
+  }, []), /* @__PURE__ */ s(Ne.Provider, { value: y, children: e });
 }
-function Ae() {
-  const n = le(Fe);
+function ke() {
+  const n = ae(Ne);
   if (!n)
     throw new Error("useApp must be used within an AppProvider");
   return n;
 }
-function De() {
-  return le(Fe);
+function Fe() {
+  return ae(Ne);
 }
-const vr = Ae;
-class se extends Error {
+const br = ke;
+class ne extends Error {
   constructor(e, t) {
     const r = {
       token_expired: "Refresh token has expired",
@@ -214,21 +214,21 @@ class se extends Error {
     super(t || r[e]), this.name = "SessionExpiredError", this.reason = e;
   }
 }
-class wt extends Error {
+class yt extends Error {
   constructor(e) {
     super(`Token refresh timed out after ${e}ms`), this.name = "TokenRefreshTimeoutError", this.timeoutMs = e;
   }
 }
-class bt extends Error {
+class wt extends Error {
   constructor(e, t) {
     super(
       `Token refresh failed after ${e} attempts: ${(t == null ? void 0 : t.message) || "Unknown error"}`
     ), this.name = "TokenRefreshError", this.attempts = e, this.lastError = t;
   }
 }
-const ie = class ie {
+const se = class se {
   constructor(e = {}) {
-    this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, this.consecutiveBackgroundFailures = 0, e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
+    this.refreshPromise = null, this.refreshQueue = [], this.proactiveTimerId = null, this.backgroundRetryTimerId = null, this.isDestroyed = !1, this.sessionGeneration = 0, this.consecutiveBackgroundFailures = 0, this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.onSessionExpired = e.onSessionExpired, this.baseUrl = e.baseUrl || "", this.enableCookieSession = e.enableCookieSession ?? !1, this.proactiveRefreshMargin = e.proactiveRefreshMargin ?? 6e4, this.refreshQueueTimeout = e.refreshQueueTimeout ?? 1e4, this.maxRefreshRetries = e.maxRefreshRetries ?? 3, this.retryBackoffBase = e.retryBackoffBase ?? 1e3, this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey), this.scheduleProactiveRefresh();
   }
   /**
    * Get or create a SessionManager instance for the given config.
@@ -236,24 +236,24 @@ const ie = class ie {
    * Mutable config (callbacks, baseUrl) is updated on the existing instance.
    */
   static getInstance(e = {}) {
-    const t = ie.resolveStorageKey(e), r = ie.instances.get(t);
+    const t = se.resolveStorageKey(e), r = se.instances.get(t);
     if (r)
       return r.updateConfig(e), r;
-    const i = new ie(e);
-    return ie.instances.set(t, i), i;
+    const i = new se(e);
+    return se.instances.set(t, i), i;
   }
   /** Reset all singleton instances. For testing only. */
   static resetAllInstances() {
-    for (const e of ie.instances.values())
+    for (const e of se.instances.values())
       e.destroy();
-    ie.instances.clear();
+    se.instances.clear();
   }
   static resolveStorageKey(e) {
-    return e.storageKey ? e.storageKey : e.tenantSlug !== void 0 && e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens";
+    return e.storageKey || "auth_tokens";
   }
   /** Update mutable config (callbacks, baseUrl) on an existing instance. */
   updateConfig(e) {
-    e.onSessionExpired !== void 0 && (this.onSessionExpired = e.onSessionExpired), e.onRefreshFailed !== void 0 && (this.onRefreshFailed = e.onRefreshFailed), e.baseUrl && (this.baseUrl = e.baseUrl);
+    e.onSessionExpired !== void 0 && (this.onSessionExpired = e.onSessionExpired), e.onRefreshFailed !== void 0 && (this.onRefreshFailed = e.onRefreshFailed), e.baseUrl && (this.baseUrl = e.baseUrl), e.enableCookieSession !== void 0 && (this.enableCookieSession = e.enableCookieSession);
   }
   // --- Storage helpers ---
   createTokenStorage(e) {
@@ -310,7 +310,7 @@ const ie = class ie {
     }
   }
   setTokens(e) {
-    const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || ie.extractJwtExpiry(e.accessToken), r = {
+    const t = e.expiresAt || (e.expiresIn ? Date.now() + e.expiresIn * 1e3 : void 0) || se.extractJwtExpiry(e.accessToken), r = {
       ...e,
       expiresAt: t
     }, i = this.tokenStorage.get() || {};
@@ -320,7 +320,7 @@ const ie = class ie {
     const { accessToken: e, refreshToken: t, expiresAt: r, expiresIn: i, tokenType: o } = this.tokenStorage.get() || {};
     if (!e)
       return null;
-    const a = r || ie.extractJwtExpiry(e);
+    const a = r || se.extractJwtExpiry(e);
     return {
       accessToken: e,
       refreshToken: t,
@@ -369,13 +369,13 @@ const ie = class ie {
     this.startRefreshAndResolveQueue(e.refreshToken).then(() => {
       this.consecutiveBackgroundFailures = 0;
     }).catch((r) => {
-      if (!(r instanceof se)) {
+      if (!(r instanceof ne)) {
         if (this.sessionGeneration === t) {
-          if (this.consecutiveBackgroundFailures++, this.consecutiveBackgroundFailures >= ie.MAX_BACKGROUND_FAILURES) {
+          if (this.consecutiveBackgroundFailures++, this.consecutiveBackgroundFailures >= se.MAX_BACKGROUND_FAILURES) {
             process.env.NODE_ENV === "development" && console.error(
               `[SessionManager] Background refresh failed ${this.consecutiveBackgroundFailures} consecutive times — expiring session`
             ), this.consecutiveBackgroundFailures = 0, this.handleSessionExpired(
-              new se("token_invalid", "Background refresh failed repeatedly")
+              new ne("token_invalid", "Background refresh failed repeatedly")
             );
             return;
           }
@@ -401,6 +401,35 @@ const ie = class ie {
       return !1;
     }
   }
+  /**
+   * Attempt to restore a session using a backend-set HttpOnly cookie.
+   * Sends a refresh request with credentials: 'include' but without a refresh token in the body.
+   * If the backend responds with tokens (cookie carried the refresh token), stores them and returns true.
+   * If it fails (no cookie, expired, etc.), returns false — this is a normal outcome, not an error.
+   *
+   * Only works when enableCookieSession is true.
+   */
+  async attemptCookieSessionRestore() {
+    if (!this.enableCookieSession || !this.baseUrl) return !1;
+    const e = `${this.baseUrl}/auth/refresh`;
+    try {
+      const t = await fetch(e, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({}),
+        credentials: "include"
+      });
+      if (!t.ok) return !1;
+      const r = await t.json();
+      return r.accessToken ? (this.setTokens({
+        accessToken: r.accessToken,
+        refreshToken: r.refreshToken || "",
+        expiresIn: r.expiresIn
+      }), !0) : !1;
+    } catch {
+      return !1;
+    }
+  }
   // --- Core: getValidAccessToken with queue + timeout ---
   /**
    * Get a valid access token. If the token needs refresh, handles the refresh
@@ -413,13 +442,13 @@ const ie = class ie {
   async getValidAccessToken() {
     const e = this.getTokens();
     if (!(e != null && e.accessToken)) {
-      const t = new se("token_invalid", "No tokens available");
+      const t = new ne("token_invalid", "No tokens available");
       throw this.handleSessionExpired(t), t;
     }
     if (!this.shouldRefreshToken(e) && !this.isTokenExpired(e))
       return e.accessToken;
     if (!e.refreshToken) {
-      const t = new se("token_invalid", "No refresh token available");
+      const t = new ne("token_invalid", "No refresh token available");
       throw this.handleSessionExpired(t), t;
     }
     return this.refreshPromise ? this.enqueueForToken() : this.startRefreshAndResolveQueue(e.refreshToken);
@@ -431,14 +460,14 @@ const ie = class ie {
     try {
       return { Authorization: `Bearer ${await this.getValidAccessToken()}` };
     } catch (e) {
-      return e instanceof se && this.onRefreshFailed && this.onRefreshFailed(), {};
+      return e instanceof ne && this.onRefreshFailed && this.onRefreshFailed(), {};
     }
   }
   enqueueForToken() {
     return new Promise((e, t) => {
       const r = setTimeout(() => {
         const i = this.refreshQueue.findIndex((o) => o.timeoutId === r);
-        i !== -1 && this.refreshQueue.splice(i, 1), t(new wt(this.refreshQueueTimeout));
+        i !== -1 && this.refreshQueue.splice(i, 1), t(new yt(this.refreshQueueTimeout));
       }, this.refreshQueueTimeout);
       this.refreshQueue.push({ resolve: e, reject: t, timeoutId: r });
     });
@@ -451,7 +480,7 @@ const ie = class ie {
       return this.resolveQueue(r), r;
     } catch (t) {
       const r = t instanceof Error ? t : new Error("Token refresh failed");
-      throw r instanceof se ? (this.rejectQueue(r), this.handleSessionExpired(r)) : this.rejectQueue(r), r;
+      throw r instanceof ne ? (this.rejectQueue(r), this.handleSessionExpired(r)) : this.rejectQueue(r), r;
     } finally {
       this.refreshPromise = null;
     }
@@ -474,21 +503,21 @@ const ie = class ie {
     const r = this.sessionGeneration;
     for (let i = 0; i <= this.maxRefreshRetries; i++) {
       if (this.sessionGeneration !== r)
-        throw new se("token_invalid", "Session cleared during refresh");
+        throw new ne("token_invalid", "Session cleared during refresh");
       try {
         await this.performTokenRefresh(e, r);
         return;
       } catch (o) {
         const a = o instanceof Error ? o : new Error(String(o));
-        if (a instanceof se)
+        if (a instanceof ne)
           throw a;
         if (t = a, i < this.maxRefreshRetries) {
-          const d = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(d);
+          const h = this.retryBackoffBase * Math.pow(2, i);
+          await this.sleep(h);
         }
       }
     }
-    throw new bt(this.maxRefreshRetries + 1, t);
+    throw new wt(this.maxRefreshRetries + 1, t);
   }
   /**
    * Single refresh attempt with error classification.
@@ -507,14 +536,15 @@ const ie = class ie {
     const r = this.getTokens();
     if (r != null && r.accessToken && !this.isTokenExpired(r) && !this.shouldRefreshToken(r))
       return;
-    const i = (r == null ? void 0 : r.refreshToken) || e, o = `${this.baseUrl}/auth/refresh`, a = ie.extractJwtClaim(i, "deviceId"), d = { refreshToken: i };
-    a && (d.deviceId = a);
+    const i = (r == null ? void 0 : r.refreshToken) || e, o = `${this.baseUrl}/auth/refresh`, a = se.extractJwtClaim(i, "deviceId"), h = { refreshToken: i };
+    a && (h.deviceId = a);
     let f;
     try {
       f = await fetch(o, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(d)
+        body: JSON.stringify(h),
+        ...this.enableCookieSession && { credentials: "include" }
       });
     } catch (c) {
       throw c instanceof Error ? c : new Error("Network error during token refresh");
@@ -527,10 +557,10 @@ const ie = class ie {
       } catch {
         c = f.statusText.toLowerCase();
       }
-      throw f.status === 401 ? c.includes("expired") ? new se("token_expired") : c.includes("invalid") ? new se("token_invalid") : new se("token_invalid", `Unauthorized: ${c}`) : f.status === 400 ? c.includes("inactive") ? new se("user_inactive") : c.includes("expired") || c.includes("invalid") ? new se("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new se("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${f.status} ${c}`);
+      throw f.status === 401 ? c.includes("expired") ? new ne("token_expired") : c.includes("invalid") ? new ne("token_invalid") : new ne("token_invalid", `Unauthorized: ${c}`) : f.status === 400 ? c.includes("inactive") ? new ne("user_inactive") : c.includes("expired") || c.includes("invalid") ? new ne("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new ne("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${f.status} ${c}`);
     }
     if (this.sessionGeneration !== t)
-      throw new se("token_invalid", "Session cleared during refresh");
+      throw new ne("token_invalid", "Session cleared during refresh");
     const y = await f.json();
     this.setTokens({
       accessToken: y.accessToken,
@@ -558,7 +588,7 @@ const ie = class ie {
   // --- Session lifecycle ---
   clearSession() {
     this.sessionGeneration++, this.cancelProactiveTimer(), this.clearTokens();
-    const e = new se("token_invalid", "Session cleared");
+    const e = new ne("token_invalid", "Session cleared");
     this.rejectQueue(e);
   }
   /**
@@ -566,8 +596,8 @@ const ie = class ie {
    * Cancels all timers and rejects pending queue entries.
    */
   destroy() {
-    this.isDestroyed = !0, ie.instances.delete(this.storageKey), this.cancelProactiveTimer();
-    const e = new se("token_invalid", "SessionManager destroyed");
+    this.isDestroyed = !0, se.instances.delete(this.storageKey), this.cancelProactiveTimer();
+    const e = new ne("token_invalid", "SessionManager destroyed");
     this.rejectQueue(e);
   }
   // --- JWT helpers ---
@@ -605,10 +635,10 @@ const ie = class ie {
     return new Promise((t) => setTimeout(t, e));
   }
 };
-ie.instances = /* @__PURE__ */ new Map(), ie.MAX_BACKGROUND_FAILURES = 3;
-let be = ie;
-const Ie = /* @__PURE__ */ new Map();
-class vt {
+se.instances = /* @__PURE__ */ new Map(), se.MAX_BACKGROUND_FAILURES = 3;
+let Le = se;
+const Re = /* @__PURE__ */ new Map();
+class bt {
   constructor(e) {
     this.httpService = e;
   }
@@ -649,12 +679,12 @@ class vt {
     );
   }
   async verifyMagicLink(e) {
-    const t = e.token, r = Ie.get(t);
+    const t = e.token, r = Re.get(t);
     if (r) return r;
     const i = this.httpService.post("/auth/magic-link/verify", e).finally(() => {
-      Ie.delete(t);
+      Re.delete(t);
     });
-    return Ie.set(t, i), i;
+    return Re.set(t, i), i;
   }
   async confirmPasswordReset(e) {
     await this.httpService.post("/auth/password-reset/confirm", e);
@@ -666,7 +696,7 @@ class vt {
     });
   }
 }
-class We {
+class Ve {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -742,7 +772,7 @@ class We {
     };
   }
 }
-class St {
+class vt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -782,7 +812,7 @@ class St {
     });
   }
 }
-class ve {
+class we {
   constructor(e, t, r) {
     this.httpService = e, this.appId = t, this.sessionManager = r;
   }
@@ -860,7 +890,7 @@ class ve {
     )).data;
   }
 }
-function Tt(n, e) {
+function St(n, e) {
   if (n === "localhost" || n.startsWith("127.") || n.startsWith("192.168."))
     return null;
   if (e) {
@@ -876,26 +906,26 @@ function Tt(n, e) {
   const r = n.split(".");
   return r.length >= 3 && r[0] !== "www" ? r[0] : null;
 }
-function kt(n, e = "tenant", t) {
+function Tt(n, e = "tenant", t) {
   const i = new URLSearchParams(n).get(e);
   return i ? (t && t.setItem("tenant", i), i) : t ? t.getItem("tenant") : null;
 }
-function xt(n, e, t) {
+function kt(n, e, t) {
   const { tenantMode: r, baseDomain: i, selectorParam: o, fixedTenantSlug: a } = n;
-  return r === "fixed" ? a || null : r === "subdomain" ? Tt(e.hostname, i) : r === "selector" ? kt(e.search, o, t) : null;
+  return r === "fixed" ? a || null : r === "subdomain" ? St(e.hostname, i) : r === "selector" ? Tt(e.search, o, t) : null;
 }
-function At(n, e, t) {
+function xt(n, e, t) {
   if (t)
     return `${n}.${t}`;
   const r = e.split(".");
   return r.length === 2 ? `${n}.${e}` : r.length >= 3 ? (r[0] = n, r.join(".")) : null;
 }
-const me = "_auth";
-function je(n) {
+const ge = "_auth";
+function We(n) {
   const e = JSON.stringify(n);
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function Pt(n) {
+function At(n) {
   try {
     let e = n.replace(/-/g, "+").replace(/_/g, "/");
     for (; e.length % 4; )
@@ -906,20 +936,20 @@ function Pt(n) {
     return null;
   }
 }
-function Rt() {
+function Pt() {
   if (typeof window > "u")
     return null;
-  const e = new URLSearchParams(window.location.search).get(me);
-  return e ? Pt(e) : null;
+  const e = new URLSearchParams(window.location.search).get(ge);
+  return e ? At(e) : null;
 }
-function Et() {
+function Rt() {
   if (typeof window > "u") return;
   const n = new URL(window.location.href);
-  n.searchParams.delete(me), window.history.replaceState({}, "", n.toString());
+  n.searchParams.delete(ge), window.history.replaceState({}, "", n.toString());
 }
-const Ue = ye(null);
-function Sr({ config: n, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: i } = Ae(), o = oe(() => typeof window > "u" ? null : xt(
+const De = me(null);
+function vr({ config: n, children: e }) {
+  const { baseUrl: t, appInfo: r, appId: i } = ke(), o = ie(() => typeof window > "u" ? null : kt(
     {
       tenantMode: n.tenantMode || "selector",
       baseDomain: n.baseDomain,
@@ -931,12 +961,12 @@ function Sr({ config: n, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, d] = x(() => o()), f = J(
+  ), [n.tenantMode, n.baseDomain, n.selectorParam, n.fixedTenantSlug]), [a, h] = x(() => o()), f = K(
     () => {
-      var g, U, b;
+      var g, C, b;
       return {
         enabled: ((g = n.cache) == null ? void 0 : g.enabled) ?? !0,
-        ttl: ((U = n.cache) == null ? void 0 : U.ttl) ?? 5 * 60 * 1e3,
+        ttl: ((C = n.cache) == null ? void 0 : C.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
         storageKey: ((b = n.cache) == null ? void 0 : b.storageKey) ?? `tenant_cache_${a || "default"}`
       };
@@ -948,23 +978,23 @@ function Sr({ config: n, children: e }) {
     try {
       const g = localStorage.getItem(f.storageKey);
       if (!g) return null;
-      const U = JSON.parse(g);
-      return Date.now() - U.timestamp < f.ttl && U.tenantSlug === a ? U.data : (localStorage.removeItem(f.storageKey), null);
+      const C = JSON.parse(g);
+      return Date.now() - C.timestamp < f.ttl && C.tenantSlug === a ? C.data : (localStorage.removeItem(f.storageKey), null);
     } catch {
       return null;
     }
-  }), [L, m] = x(!y && !n.initialTenant), [T, A] = x(null), [N, M] = x(null), [P, u] = x(!1), [v, F] = x(null);
-  ne(() => {
+  }), [L, m] = x(!y && !n.initialTenant), [T, A] = x(null), [N, M] = x(null), [P, d] = x(!1), [v, F] = x(null);
+  te(() => {
     if (n.tenantMode === "fixed") return;
     const g = o();
-    d(g);
+    h(g);
   }, [o, n.tenantMode]);
-  const B = (r == null ? void 0 : r.settingsSchema) || null, w = oe(
-    async (g, U = !1) => {
-      if (!(!U && f.enabled && y && y.domain === g))
+  const U = (r == null ? void 0 : r.settingsSchema) || null, w = ie(
+    async (g, C = !1) => {
+      if (!(!C && f.enabled && y && y.domain === g))
         try {
           m(!0), A(null);
-          const b = new de(t), S = await new ve(b, i).getPublicTenantInfo(g);
+          const b = new ce(t), S = await new we(b, i).getPublicTenantInfo(g);
           if (c(S), f.enabled)
             try {
               const E = {
@@ -984,66 +1014,66 @@ function Sr({ config: n, children: e }) {
         }
     },
     [t, i, f, y]
-  ), R = oe(async () => {
+  ), R = ie(async () => {
     if (!(!f.enabled || !y || !a))
       try {
         const g = localStorage.getItem(f.storageKey);
         if (!g) return;
-        const U = JSON.parse(g);
-        if (Date.now() - U.timestamp > f.ttl * 0.5) {
-          const p = new de(t), E = await new ve(p, i).getPublicTenantInfo(a);
+        const C = JSON.parse(g);
+        if (Date.now() - C.timestamp > f.ttl * 0.5) {
+          const p = new ce(t), E = await new we(p, i).getPublicTenantInfo(a);
           c(E);
-          const K = {
+          const Q = {
             data: E,
             timestamp: Date.now(),
             tenantSlug: a
           };
-          localStorage.setItem(f.storageKey, JSON.stringify(K));
+          localStorage.setItem(f.storageKey, JSON.stringify(Q));
         }
       } catch (g) {
         process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", g);
       }
-  }, [t, i, f, y, a]), k = oe(async () => {
+  }, [t, i, f, y, a]), k = ie(async () => {
     if (y != null && y.id)
       try {
-        u(!0), F(null);
-        const g = new de(t), b = await new ve(g, y.appId).getTenantSettings(y.id);
+        d(!0), F(null);
+        const g = new ce(t), b = await new we(g, y.appId).getTenantSettings(y.id);
         M(b);
       } catch (g) {
-        const U = g instanceof Error ? g : new Error("Failed to load tenant settings");
-        F(U), M(null);
+        const C = g instanceof Error ? g : new Error("Failed to load tenant settings");
+        F(C), M(null);
       } finally {
-        u(!1);
+        d(!1);
       }
-  }, [t, y]), I = oe(() => {
+  }, [t, y]), I = ie(() => {
     k();
-  }, [k]), l = oe(
+  }, [k]), l = ie(
     (g) => {
-      if (!B)
+      if (!U)
         return { isValid: !0, errors: [] };
-      const U = [];
+      const C = [];
       try {
-        return B.properties && Object.entries(B.properties).forEach(([b, p]) => {
+        return U.properties && Object.entries(U.properties).forEach(([b, p]) => {
           var E;
           const S = g[b];
-          if ((E = B.required) != null && E.includes(b) && S == null) {
-            U.push(`Field '${b}' is required`);
+          if ((E = U.required) != null && E.includes(b) && S == null) {
+            C.push(`Field '${b}' is required`);
             return;
           }
           if (S != null) {
             if (p.type) {
-              const K = p.type, G = typeof S;
-              K === "string" && G !== "string" ? U.push(`Field '${b}' must be a string`) : (K === "number" || K === "integer") && G !== "number" ? U.push(`Field '${b}' must be a number`) : K === "boolean" && G !== "boolean" ? U.push(`Field '${b}' must be a boolean`) : K === "array" && !Array.isArray(S) && U.push(`Field '${b}' must be an array`);
+              const Q = p.type, J = typeof S;
+              Q === "string" && J !== "string" ? C.push(`Field '${b}' must be a string`) : (Q === "number" || Q === "integer") && J !== "number" ? C.push(`Field '${b}' must be a number`) : Q === "boolean" && J !== "boolean" ? C.push(`Field '${b}' must be a boolean`) : Q === "array" && !Array.isArray(S) && C.push(`Field '${b}' must be an array`);
             }
-            p.minLength !== void 0 && typeof S == "string" && S.length < p.minLength && U.push(
+            p.minLength !== void 0 && typeof S == "string" && S.length < p.minLength && C.push(
               `Field '${b}' must be at least ${p.minLength} characters long`
-            ), p.maxLength !== void 0 && typeof S == "string" && S.length > p.maxLength && U.push(
+            ), p.maxLength !== void 0 && typeof S == "string" && S.length > p.maxLength && C.push(
               `Field '${b}' must be no more than ${p.maxLength} characters long`
-            ), p.minimum !== void 0 && typeof S == "number" && S < p.minimum && U.push(`Field '${b}' must be at least ${p.minimum}`), p.maximum !== void 0 && typeof S == "number" && S > p.maximum && U.push(`Field '${b}' must be no more than ${p.maximum}`), p.pattern && typeof S == "string" && (new RegExp(p.pattern).test(S) || U.push(`Field '${b}' does not match the required pattern`)), p.enum && !p.enum.includes(S) && U.push(`Field '${b}' must be one of: ${p.enum.join(", ")}`);
+            ), p.minimum !== void 0 && typeof S == "number" && S < p.minimum && C.push(`Field '${b}' must be at least ${p.minimum}`), p.maximum !== void 0 && typeof S == "number" && S > p.maximum && C.push(`Field '${b}' must be no more than ${p.maximum}`), p.pattern && typeof S == "string" && (new RegExp(p.pattern).test(S) || C.push(`Field '${b}' does not match the required pattern`)), p.enum && !p.enum.includes(S) && C.push(`Field '${b}' must be one of: ${p.enum.join(", ")}`);
           }
         }), {
-          isValid: U.length === 0,
-          errors: U
+          isValid: C.length === 0,
+          errors: C
         };
       } catch {
         return {
@@ -1052,16 +1082,16 @@ function Sr({ config: n, children: e }) {
         };
       }
     },
-    [B]
+    [U]
   );
-  ne(() => {
+  te(() => {
     !n.initialTenant && a ? y ? R() : w(a) : !n.initialTenant && !a && (c(null), A(null), m(!1));
-  }, [n.initialTenant, a, y, w, R]), ne(() => {
-    y != null && y.id ? k() : (M(null), F(null), u(!1));
+  }, [n.initialTenant, a, y, w, R]), te(() => {
+    y != null && y.id ? k() : (M(null), F(null), d(!1));
   }, [y == null ? void 0 : y.id, k]);
-  const z = oe(
-    (g, U) => {
-      const { mode: b = "reload", tokens: p, redirectPath: S } = U || {}, E = n.tenantMode || "selector";
+  const _ = ie(
+    (g, C) => {
+      const { mode: b = "reload", tokens: p, redirectPath: S } = C || {}, E = n.tenantMode || "selector";
       if (E === "fixed") {
         process.env.NODE_ENV === "development" && console.warn(
           "[TenantProvider] switchTenant is a no-op in fixed mode. Tenant is always:",
@@ -1070,35 +1100,35 @@ function Sr({ config: n, children: e }) {
         return;
       }
       if (localStorage.setItem("tenant", g), E === "subdomain") {
-        const K = window.location.hostname, G = At(
+        const Q = window.location.hostname, J = xt(
           g,
-          K,
+          Q,
           n.baseDomain
         );
-        if (!G) {
+        if (!J) {
           process.env.NODE_ENV === "development" && console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            K
+            Q
           );
           return;
         }
-        const X = S || window.location.pathname, W = new URL(`${window.location.protocol}//${G}${X}`);
+        const ee = S || window.location.pathname, W = new URL(`${window.location.protocol}//${J}${ee}`);
         new URLSearchParams(window.location.search).forEach((V, H) => {
-          H !== me && W.searchParams.set(H, V);
-        }), p && W.searchParams.set(me, je(p)), window.location.href = W.toString();
+          H !== ge && W.searchParams.set(H, V);
+        }), p && W.searchParams.set(ge, We(p)), window.location.href = W.toString();
       } else if (E === "selector") {
-        const K = S || window.location.pathname, G = new URLSearchParams(window.location.search);
-        if (G.set(n.selectorParam || "tenant", g), G.delete(me), p && G.set(me, je(p)), b === "reload") {
-          const X = `${K}?${G.toString()}${window.location.hash}`;
-          window.location.href = X;
+        const Q = S || window.location.pathname, J = new URLSearchParams(window.location.search);
+        if (J.set(n.selectorParam || "tenant", g), J.delete(ge), p && J.set(ge, We(p)), b === "reload") {
+          const ee = `${Q}?${J.toString()}${window.location.hash}`;
+          window.location.href = ee;
         } else {
-          const X = `${K}?${G.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", X), d(g), w(g);
+          const ee = `${Q}?${J.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", ee), h(g), w(g);
         }
       }
     },
     [n.tenantMode, n.selectorParam, n.baseDomain, w]
-  ), D = J(() => ({
+  ), D = K(() => ({
     // Tenant info
     tenant: y,
     tenantSlug: a,
@@ -1109,12 +1139,12 @@ function Sr({ config: n, children: e }) {
     },
     // Settings
     settings: N,
-    settingsSchema: B,
+    settingsSchema: U,
     isSettingsLoading: P,
     settingsError: v,
     // Actions
     refreshSettings: I,
-    switchTenant: z,
+    switchTenant: _,
     // Validation
     validateSettings: l
   }), [
@@ -1123,27 +1153,27 @@ function Sr({ config: n, children: e }) {
     L,
     T,
     N,
-    B,
+    U,
     P,
     v,
     I,
-    z,
+    _,
     l
   ]);
-  return /* @__PURE__ */ s(Ue.Provider, { value: D, children: e });
+  return /* @__PURE__ */ s(De.Provider, { value: D, children: e });
 }
-function Te() {
-  const n = le(Ue);
+function ve() {
+  const n = ae(De);
   if (!n)
     throw new Error("useTenant must be used within a TenantProvider");
   return n;
 }
-function pe() {
-  return le(Ue);
+function he() {
+  return ae(De);
 }
-const Tr = Te;
-function kr() {
-  const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = Te();
+const Sr = ve;
+function Tr() {
+  const { settings: n, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: i } = ve();
   return {
     settings: n,
     settingsSchema: e,
@@ -1152,8 +1182,8 @@ function kr() {
     validateSettings: i
   };
 }
-function Ze() {
-  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = Te();
+function Ke() {
+  const { tenant: n, tenantSlug: e, isTenantLoading: t, tenantError: r, retryTenant: i } = ve();
   return {
     tenant: n,
     tenantSlug: e,
@@ -1162,319 +1192,318 @@ function Ze() {
     retry: i
   };
 }
-const Be = ye(null);
-function xr({ config: n = {}, children: e }) {
-  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, d = (r == null ? void 0 : r.tenantSlug) ?? null, f = (r == null ? void 0 : r.switchTenant) ?? (() => {
+const Ce = me(null);
+function kr({ config: n = {}, children: e }) {
+  const t = Fe(), r = he(), i = (t == null ? void 0 : t.baseUrl) ?? n.baseUrl ?? "", o = (t == null ? void 0 : t.appId) ?? n.appId, a = (r == null ? void 0 : r.tenant) ?? null, h = (r == null ? void 0 : r.tenantSlug) ?? null, f = (r == null ? void 0 : r.switchTenant) ?? (() => {
   });
   if (!i)
     throw new Error(
       "[AuthProvider] baseUrl is required. Provide it via AppProvider or AuthConfig.baseUrl."
     );
-  const [y, c] = x(n.initialRoles || []), [L, m] = x(!n.initialRoles), [T, A] = x(null), [N, M] = x(!1), [P, u] = x(null), [v, F] = x(() => {
+  const [y, c] = x(n.initialRoles || []), [L, m] = x(!n.initialRoles), [T, A] = x(null), [N, M] = x(!1), [P, d] = x(null), [v, F] = x(() => {
     try {
-      const $ = localStorage.getItem("userTenants");
-      return $ ? JSON.parse($) : [];
+      const B = localStorage.getItem("userTenants");
+      return B ? JSON.parse(B) : [];
     } catch {
       return [];
     }
-  }), [B, w] = x(!1), R = Ne({ done: !1, urlTokens: null });
-  R.current.done || (R.current.done = !0, R.current.urlTokens = Rt());
-  const [k, I] = x(() => R.current.urlTokens !== null), l = J(() => {
-    const $ = be.getInstance({
-      tenantSlug: d,
+  }), [U, w] = x(!1), R = Me({ done: !1, urlTokens: null });
+  R.current.done || (R.current.done = !0, R.current.urlTokens = Pt());
+  const [k, I] = x(() => R.current.urlTokens !== null), l = K(() => {
+    const B = Le.getInstance({
       baseUrl: i,
+      enableCookieSession: n.enableCookieSession,
       refreshQueueTimeout: n.refreshQueueTimeout,
       proactiveRefreshMargin: n.proactiveRefreshMargin,
-      onSessionExpired: (ce) => {
-        A(null), u(null), F([]), w(!1);
+      onSessionExpired: (le) => {
+        A(null), d(null), F([]), w(!1);
         try {
           localStorage.removeItem("userTenants");
         } catch {
         }
-        n.onSessionExpired ? n.onSessionExpired(ce) : n.onRefreshFailed && n.onRefreshFailed();
+        n.onSessionExpired ? n.onSessionExpired(le) : n.onRefreshFailed && n.onRefreshFailed();
       }
     });
-    return R.current.urlTokens && $.setTokens({
+    return R.current.urlTokens && B.setTokens({
       accessToken: R.current.urlTokens.accessToken,
       refreshToken: R.current.urlTokens.refreshToken,
       expiresIn: R.current.urlTokens.expiresIn
-    }), $;
-  }, [d, i, n.refreshQueueTimeout, n.proactiveRefreshMargin]), [z, D] = x(() => {
+    }), B;
+  }, [
+    i,
+    n.enableCookieSession,
+    n.refreshQueueTimeout,
+    n.proactiveRefreshMargin
+  ]), [_, D] = x(() => {
     if (R.current.urlTokens) return !1;
-    const $ = l.getTokens();
-    return $ ? l.hasValidSession() || !!$.refreshToken : !1;
-  }), g = R.current.done && !k && !z, U = J(() => {
-    const $ = new de(i);
-    return $.setSessionManager(l), $;
-  }, [i, l]), b = J(() => new vt(new de(i)), [i]), p = J(() => new St(U, l), [U, l]), S = J(() => new We(new de(i)), [i]), E = J(() => T || l.getUser(), [T, l]), K = J(() => E != null && E.roleId && y.find(($) => $.id === E.roleId) || null, [E, y]), G = J(() => (K == null ? void 0 : K.permissions) || [], [K]), X = J(() => l.hasValidSession() && T !== null, [l, T]), W = Ne(async () => {
-  }), q = J(() => {
-    const $ = async (C = !1) => {
+    const B = l.getTokens();
+    return B ? l.hasValidSession() || !!B.refreshToken : !!n.enableCookieSession;
+  }), g = R.current.done && !k && !_, C = K(() => {
+    const B = new ce(i);
+    return B.setSessionManager(l), B;
+  }, [i, l]), b = K(() => new bt(new ce(i)), [i]), p = K(() => new vt(C, l), [C, l]), S = K(() => new Ve(new ce(i)), [i]), E = K(() => T || l.getUser(), [T, l]), Q = K(() => E != null && E.roleId && y.find((B) => B.id === E.roleId) || null, [E, y]), J = K(() => (Q == null ? void 0 : Q.permissions) || [], [Q]), ee = K(() => l.hasValidSession() && T !== null, [l, T]), W = Me(async () => {
+  }), q = K(() => {
+    const B = async ($ = !1) => {
       try {
-        if (!l.hasValidSession() || !C && T)
+        if (!l.hasValidSession() || !$ && T)
           return;
         const O = l.getUserId();
         if (!O) {
           process.env.NODE_ENV === "development" && console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        M(!0), u(null);
+        M(!0), d(null);
         const Z = await p.getUserById(O);
         A(Z), l.setUser(Z);
       } catch (O) {
         const Z = O instanceof Error ? O : new Error("Failed to load user data");
-        u(Z), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", Z);
+        d(Z), process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data:", Z);
       } finally {
         M(!1);
       }
-    }, ce = async () => {
-      await $();
-    }, fe = async (C) => {
-      var _e;
-      const { username: O, password: Z, tenantSlug: j, redirectPath: Y } = C;
-      let ee = a == null ? void 0 : a.id, te = d, re = l;
-      j && (ee = (await new ve(U, o).getPublicTenantInfo(j)).id, te = j);
-      const Q = await b.login({
+    }, le = async () => {
+      await B();
+    }, pe = async ($) => {
+      var qe;
+      const { username: O, password: Z, tenantSlug: j, redirectPath: X } = $;
+      let re = a == null ? void 0 : a.id, Y = h;
+      j && (re = (await new we(C, o).getPublicTenantInfo(j)).id, Y = j);
+      const G = await b.login({
         username: O,
         password: Z,
         appId: o,
-        tenantId: ee
-      }), we = j && j !== d;
-      if (we && (re = new be({
-        tenantSlug: te,
-        baseUrl: i
-      })), re.setTokens({
-        accessToken: Q.accessToken,
-        refreshToken: Q.refreshToken,
-        expiresIn: Q.expiresIn
-      }), Q.user) {
-        re.setUser(Q.user), A(Q.user);
+        tenantId: re
+      }), ye = j && j !== h;
+      if (l.setTokens({
+        accessToken: G.accessToken,
+        refreshToken: G.refreshToken,
+        expiresIn: G.expiresIn
+      }), G.user) {
+        l.setUser(G.user), A(G.user);
         try {
-          await $();
-        } catch (ke) {
-          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", ke);
+          await B();
+        } catch (Se) {
+          process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after login:", Se);
         }
       }
-      if (Q.tenants && Q.tenants.length > 0) {
-        F(Q.tenants);
+      if (G.tenants && G.tenants.length > 0) {
+        F(G.tenants);
         try {
-          localStorage.setItem("userTenants", JSON.stringify(Q.tenants));
+          localStorage.setItem("userTenants", JSON.stringify(G.tenants));
         } catch {
         }
       }
-      const Re = ((_e = Q.user) == null ? void 0 : _e.tenantId) !== null;
-      w(Re);
-      const Ee = {
-        accessToken: Q.accessToken,
-        refreshToken: Q.refreshToken,
-        expiresIn: Q.expiresIn
+      const Ae = ((qe = G.user) == null ? void 0 : qe.tenantId) !== null;
+      w(Ae);
+      const Pe = {
+        accessToken: G.accessToken,
+        refreshToken: G.refreshToken,
+        expiresIn: G.expiresIn
       };
-      if (we && te)
-        return f(te, { tokens: Ee, redirectPath: Y }), Q;
-      if (Y && Y !== window.location.pathname)
-        return f(te || d || "", { tokens: Ee, redirectPath: Y }), Q;
-      if (!Re && Q.tenants && Q.tenants.length > 0) {
-        const ke = C.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
-        if (Q.tenants.length === 1 && ke) {
-          const ze = Q.tenants[0];
-          return f(ze.subdomain, { tokens: Ee, redirectPath: Y }), Q;
-        } else Q.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(Q.tenants);
+      if (ye && Y)
+        return f(Y, { tokens: Pe, redirectPath: X }), G;
+      if (X && X !== window.location.pathname)
+        return f(Y || h || "", { tokens: Pe, redirectPath: X }), G;
+      if (!Ae && G.tenants && G.tenants.length > 0) {
+        const Se = $.autoSwitch !== !1 && n.autoSwitchSingleTenant !== !1;
+        if (G.tenants.length === 1 && Se) {
+          const ze = G.tenants[0];
+          return f(ze.subdomain, { tokens: Pe, redirectPath: X }), G;
+        } else G.tenants.length > 1 && n.onTenantSelectionRequired && n.onTenantSelectionRequired(G.tenants);
       }
-      return Q;
-    }, ge = async (C) => {
-      const { email: O, phoneNumber: Z, name: j, password: Y, lastName: ee, tenantId: te } = C;
+      return G;
+    }, fe = async ($) => {
+      const { email: O, phoneNumber: Z, name: j, password: X, lastName: re, tenantId: Y } = $;
       if (!O && !Z)
         throw new Error("Either email or phoneNumber is required");
-      if (!j || !Y)
+      if (!j || !X)
         throw new Error("Name and password are required");
-      const re = te ?? (a == null ? void 0 : a.id);
+      const G = Y ?? (a == null ? void 0 : a.id);
       return await b.signup({
         email: O,
         phoneNumber: Z,
         name: j,
-        password: Y,
-        tenantId: re,
-        lastName: ee,
+        password: X,
+        tenantId: G,
+        lastName: re,
         appId: o
       });
-    }, nt = async (C) => {
-      const { email: O, phoneNumber: Z, name: j, password: Y, tenantName: ee, lastName: te } = C;
+    }, rt = async ($) => {
+      const { email: O, phoneNumber: Z, name: j, password: X, tenantName: re, lastName: Y } = $;
       if (!O && !Z)
         throw new Error("Either email or phoneNumber is required");
-      if (!j || !Y || !ee)
+      if (!j || !X || !re)
         throw new Error("Name, password, and tenantName are required");
       return await b.signupTenantAdmin({
         email: O,
         phoneNumber: Z,
         name: j,
-        password: Y,
-        tenantName: ee,
+        password: X,
+        tenantName: re,
         appId: o,
-        lastName: te
+        lastName: Y
       });
-    }, st = async (C) => {
-      const { currentPassword: O, newPassword: Z } = C, j = await l.getAuthHeaders();
+    }, nt = async ($) => {
+      const { currentPassword: O, newPassword: Z } = $, j = await l.getAuthHeaders();
       await b.changePassword({ currentPassword: O, newPassword: Z }, j);
-    }, it = async (C) => {
-      const { email: O, tenantId: Z } = C, j = Z ?? (a == null ? void 0 : a.id);
+    }, st = async ($) => {
+      const { email: O, tenantId: Z } = $, j = Z ?? (a == null ? void 0 : a.id);
       if (!j)
         throw new Error("tenantId is required for password reset");
       await b.requestPasswordReset({ email: O, tenantId: j });
-    }, ot = async (C) => {
-      const { token: O, newPassword: Z } = C;
+    }, it = async ($) => {
+      const { token: O, newPassword: Z } = $;
       await b.confirmPasswordReset({ token: O, newPassword: Z });
-    }, at = async (C) => {
-      const { email: O, frontendUrl: Z, name: j, lastName: Y, tenantId: ee } = C, te = ee ?? (a == null ? void 0 : a.id);
-      if (!te)
+    }, ot = async ($) => {
+      const { email: O, frontendUrl: Z, name: j, lastName: X, tenantId: re } = $, Y = re ?? (a == null ? void 0 : a.id);
+      if (!Y)
         throw new Error("tenantId is required for magic link authentication");
       return await b.sendMagicLink({
         email: O,
-        tenantId: te,
+        tenantId: Y,
         frontendUrl: Z,
         name: j,
-        lastName: Y,
+        lastName: X,
         appId: o
       });
-    }, lt = async (C) => {
-      const { token: O, email: Z, tenantSlug: j } = C;
-      let Y = a == null ? void 0 : a.id, ee = d, te = l;
-      j && (Y = (await new ve(U, o).getPublicTenantInfo(j)).id, ee = j);
-      const re = await b.verifyMagicLink({
+    }, at = async ($) => {
+      const { token: O, email: Z, tenantSlug: j } = $;
+      let X = a == null ? void 0 : a.id, re = h;
+      j && (X = (await new we(C, o).getPublicTenantInfo(j)).id, re = j);
+      const Y = await b.verifyMagicLink({
         token: O,
         email: Z,
         appId: o,
-        tenantId: Y
-      }), Q = j && j !== d;
-      if (Q && (te = new be({
-        tenantSlug: ee,
-        baseUrl: i
-      })), te.setTokens({
-        accessToken: re.accessToken,
-        refreshToken: re.refreshToken,
-        expiresIn: re.expiresIn
-      }), re.user) {
-        te.setUser(re.user), A(re.user);
+        tenantId: X
+      }), G = j && j !== h;
+      if (l.setTokens({
+        accessToken: Y.accessToken,
+        refreshToken: Y.refreshToken,
+        expiresIn: Y.expiresIn
+      }), Y.user) {
+        l.setUser(Y.user), A(Y.user);
         try {
-          await $();
-        } catch (we) {
+          await B();
+        } catch (ye) {
           process.env.NODE_ENV === "development" && console.warn(
             "[AuthProvider] Failed to load complete user data after magic link:",
-            we
+            ye
           );
         }
       }
-      return Q && ee && ee !== d && f(ee, {
+      return G && re && re !== h && f(re, {
         tokens: {
-          accessToken: re.accessToken,
-          refreshToken: re.refreshToken,
-          expiresIn: re.expiresIn
+          accessToken: Y.accessToken,
+          refreshToken: Y.refreshToken,
+          expiresIn: Y.expiresIn
         }
-      }), re;
-    }, ct = async () => {
-      const C = l.getTokens();
-      if (!(C != null && C.refreshToken))
+      }), Y;
+    }, lt = async () => {
+      const $ = l.getTokens();
+      if (!($ != null && $.refreshToken))
         throw new Error("No refresh token available");
       const O = await b.refreshToken({
-        refreshToken: C.refreshToken
+        refreshToken: $.refreshToken
       });
       l.setTokens({
         accessToken: O.accessToken,
-        refreshToken: O.refreshToken || C.refreshToken,
+        refreshToken: O.refreshToken || $.refreshToken,
         expiresIn: O.expiresIn
       });
-    }, dt = () => {
-      l.clearSession(), A(null), u(null), F([]), w(!1);
+    }, ct = () => {
+      l.clearSession(), A(null), d(null), F([]), w(!1);
       try {
         localStorage.removeItem("userTenants");
       } catch {
       }
-    }, ut = (C) => {
-      l.setTokens(C);
-    }, ht = () => l.hasValidSession(), pt = () => {
-      l.clearSession(), A(null), u(null);
-    }, ft = async () => {
+    }, dt = ($) => {
+      l.setTokens($);
+    }, ut = () => l.hasValidSession(), ht = () => {
+      l.clearSession(), A(null), d(null);
+    }, pt = async () => {
       if (o)
         try {
           m(!0);
-          const { roles: C } = await S.getRolesByApp(o);
-          c(C);
-        } catch (C) {
-          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", C);
+          const { roles: $ } = await S.getRolesByApp(o);
+          c($);
+        } catch ($) {
+          process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", $);
         } finally {
           m(!1);
         }
-    }, gt = async () => {
-      await ft();
-    }, Pe = (C) => {
-      if (!G || G.length === 0)
+    }, ft = async () => {
+      await pt();
+    }, xe = ($) => {
+      if (!J || J.length === 0)
         return !1;
-      if (typeof C == "string")
-        return G.includes(C);
-      const O = `${C.resource}.${C.action}`;
-      return G.includes(O);
+      if (typeof $ == "string")
+        return J.includes($);
+      const O = `${$.resource}.${$.action}`;
+      return J.includes(O);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: X,
+      isAuthenticated: ee,
       sessionManager: l,
-      authenticatedHttpService: U,
-      login: fe,
-      signup: ge,
-      signupTenantAdmin: nt,
-      sendMagicLink: at,
-      verifyMagicLink: lt,
-      changePassword: st,
-      requestPasswordReset: it,
-      confirmPasswordReset: ot,
-      refreshToken: ct,
-      logout: dt,
-      setTokens: ut,
-      hasValidSession: ht,
-      clearSession: pt,
+      authenticatedHttpService: C,
+      login: pe,
+      signup: fe,
+      signupTenantAdmin: rt,
+      sendMagicLink: ot,
+      verifyMagicLink: at,
+      changePassword: nt,
+      requestPasswordReset: st,
+      confirmPasswordReset: it,
+      refreshToken: lt,
+      logout: ct,
+      setTokens: dt,
+      hasValidSession: ut,
+      clearSession: ht,
       currentUser: T,
       isUserLoading: N,
       userError: P,
-      loadUserData: $,
-      refreshUser: ce,
+      loadUserData: B,
+      refreshUser: le,
       isAuthInitializing: !g,
       isAuthReady: g,
-      userRole: K,
-      userPermissions: G,
+      userRole: Q,
+      userPermissions: J,
       availableRoles: y,
       rolesLoading: L,
-      hasPermission: Pe,
-      hasAnyPermission: (C) => C.some((O) => Pe(O)),
-      hasAllPermissions: (C) => C.every((O) => Pe(O)),
-      getUserPermissionStrings: () => G || [],
-      refreshRoles: gt,
+      hasPermission: xe,
+      hasAnyPermission: ($) => $.some((O) => xe(O)),
+      hasAllPermissions: ($) => $.every((O) => xe(O)),
+      getUserPermissionStrings: () => J || [],
+      refreshRoles: ft,
       // RFC-004: Multi-tenant user membership
       userTenants: v,
-      hasTenantContext: B,
-      switchToTenant: async (C, O) => {
+      hasTenantContext: U,
+      switchToTenant: async ($, O) => {
         const { redirectPath: Z } = O || {}, j = l.getTokens();
         if (!(j != null && j.refreshToken))
           throw new Error("No refresh token available for tenant switch");
-        const Y = await b.switchTenant({
+        const X = await b.switchTenant({
           refreshToken: j.refreshToken,
-          tenantId: C
+          tenantId: $
         });
         l.setTokens({
-          accessToken: Y.accessToken,
+          accessToken: X.accessToken,
           refreshToken: j.refreshToken,
           // Keep the same refresh token
-          expiresIn: Y.expiresIn
-        }), A(Y.user), l.setUser(Y.user), w(!0);
-        const ee = v.find((te) => te.id === C);
-        ee && f(ee.subdomain, {
+          expiresIn: X.expiresIn
+        }), A(X.user), l.setUser(X.user), w(!0);
+        const re = v.find((Y) => Y.id === $);
+        re && f(re.subdomain, {
           tokens: {
-            accessToken: Y.accessToken,
+            accessToken: X.accessToken,
             refreshToken: j.refreshToken,
-            expiresIn: Y.expiresIn
+            expiresIn: X.expiresIn
           },
           redirectPath: Z
         });
       },
       refreshUserTenants: async () => {
-        const C = await l.getAuthHeaders(), O = await b.getUserTenants(C);
+        const $ = await l.getAuthHeaders(), O = await b.getUserTenants($);
         F(O);
         try {
           localStorage.setItem("userTenants", JSON.stringify(O));
@@ -1484,73 +1513,74 @@ function xr({ config: n = {}, children: e }) {
       }
     };
   }, [
-    X,
+    ee,
     l,
-    U,
+    C,
     b,
     p,
     S,
     o,
     a,
-    d,
+    h,
     f,
     y,
     T,
     N,
     P,
     v,
-    B,
+    U,
     g,
-    K,
-    G
+    Q,
+    J
   ]);
-  W.current = q.loadUserData, ne(() => {
+  W.current = q.loadUserData, te(() => {
     !n.initialRoles && o && (async () => {
       try {
         m(!0);
-        const ce = new de(i), fe = new We(ce), { roles: ge } = await fe.getRolesByApp(o);
-        c(ge);
-      } catch (ce) {
-        process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", ce);
+        const le = new ce(i), pe = new Ve(le), { roles: fe } = await pe.getRolesByApp(o);
+        c(fe);
+      } catch (le) {
+        process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", le);
       } finally {
         m(!1);
       }
     })();
   }, [o, i, n.initialRoles]);
   const [V, H] = x(!1);
-  return ne(() => {
-    V || (H(!0), R.current.urlTokens && (Et(), I(!0), q.loadUserData().catch(($) => {
-      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", $);
+  return te(() => {
+    V || (H(!0), R.current.urlTokens && (Rt(), I(!0), q.loadUserData().catch((B) => {
+      process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to load user data after URL tokens:", B);
     }).finally(() => {
       I(!1);
     })));
-  }, [q, V]), ne(() => {
-    let $ = !1;
+  }, [q, V]), te(() => {
+    let B = !1;
     return (async () => {
-      var ge;
-      if (!l.hasValidSession() && ((ge = l.getTokens()) != null && ge.refreshToken) && await l.waitForPendingRefresh(), $) return;
-      const fe = l.getUser();
-      fe && l.hasValidSession() && A(fe), D(!1);
+      var fe;
+      if (!l.hasValidSession() && ((fe = l.getTokens()) != null && fe.refreshToken) && await l.waitForPendingRefresh(), B || !l.hasValidSession() && !l.getTokens() && n.enableCookieSession && (await l.attemptCookieSessionRestore(), B))
+        return;
+      const pe = l.getUser();
+      pe && l.hasValidSession() && A(pe), D(!1);
     })(), () => {
-      $ = !0;
+      B = !0;
     };
-  }, [l]), ne(() => {
+  }, [l, n.enableCookieSession]), te(() => {
     V && (R.current.urlTokens || (!T && !N && !P && l.hasValidSession() ? W.current().catch(() => {
     }).finally(() => {
       D(!1);
     }) : D(!1)));
-  }, [T, N, P, l, V]), /* @__PURE__ */ s(Be.Provider, { value: q, children: e });
+  }, [T, N, P, l, V]), /* @__PURE__ */ s(Ce.Provider, { value: q, children: e });
 }
-function he() {
-  const n = le(Be);
+function ue() {
+  const n = ae(Ce);
   if (!n)
     throw new Error("useAuth must be used within an AuthProvider");
   return n;
 }
-function $e() {
-  return le(Be);
+function Ue() {
+  return ae(Ce);
 }
-class It {
+class Et {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1630,11 +1660,11 @@ class It {
     })).data;
   }
 }
-const Ce = ye(null);
-function Ar({ config: n = {}, children: e }) {
-  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [d, f] = x([]), [y, c] = x(!1), [L, m] = x(null), [T, A] = x(!1), N = J(() => {
-    const u = new de(i);
-    return new It(u);
+const Be = me(null);
+function xr({ config: n = {}, children: e }) {
+  const t = Fe(), r = he(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [h, f] = x([]), [y, c] = x(!1), [L, m] = x(null), [T, A] = x(!1), N = K(() => {
+    const d = new ce(i);
+    return new Et(d);
   }, [i]), M = async () => {
     if (!(a != null && a.id)) {
       f([]);
@@ -1642,54 +1672,54 @@ function Ar({ config: n = {}, children: e }) {
     }
     c(!0), m(null);
     try {
-      const u = await N.getTenantFeatureFlags(a.id, o);
-      f(u);
-    } catch (u) {
-      const v = u instanceof Error ? u.message : "Failed to fetch feature flags";
-      m(v), n.onError && n.onError(u instanceof Error ? u : new Error(v));
+      const d = await N.getTenantFeatureFlags(a.id, o);
+      f(d);
+    } catch (d) {
+      const v = d instanceof Error ? d.message : "Failed to fetch feature flags";
+      m(v), n.onError && n.onError(d instanceof Error ? d : new Error(v));
     } finally {
       c(!1);
     }
   };
-  ne(() => {
+  te(() => {
     if (!i || !o) return;
     M().finally(() => A(!0));
-    const u = n.refreshInterval || 5 * 60 * 1e3, v = setInterval(M, u);
+    const d = n.refreshInterval || 5 * 60 * 1e3, v = setInterval(M, d);
     return () => clearInterval(v);
   }, [a == null ? void 0 : a.id, i, o, n.refreshInterval]);
-  const P = J(() => {
-    const u = (R) => {
-      const k = d.find((I) => I.key === R);
+  const P = K(() => {
+    const d = (R) => {
+      const k = h.find((I) => I.key === R);
       return (k == null ? void 0 : k.value) === !0;
-    }, v = (R) => d.find((k) => k.key === R), F = (R) => {
-      const k = d.find((I) => I.key === R);
+    }, v = (R) => h.find((k) => k.key === R), F = (R) => {
+      const k = h.find((I) => I.key === R);
       return k ? k.value ? "enabled" : "disabled" : "not_found";
-    }, B = async () => {
+    }, U = async () => {
       await M();
     }, w = !!(i && o) && (T || !(a != null && a.id));
     return {
-      featureFlags: d,
+      featureFlags: h,
       loading: y,
       error: L,
       isReady: w,
-      isEnabled: u,
+      isEnabled: d,
       getFlag: v,
       getFlagState: F,
-      refresh: B
+      refresh: U
     };
-  }, [d, y, L, i, o, a == null ? void 0 : a.id, T]);
-  return /* @__PURE__ */ s(Ce.Provider, { value: P, children: e });
+  }, [h, y, L, i, o, a == null ? void 0 : a.id, T]);
+  return /* @__PURE__ */ s(Be.Provider, { value: P, children: e });
 }
-function Mt() {
-  const n = le(Ce);
+function It() {
+  const n = ae(Be);
   if (!n)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return n;
 }
-function Ye() {
-  return le(Ce);
+function Ze() {
+  return ae(Be);
 }
-class Lt {
+class Mt {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -1755,40 +1785,40 @@ class Lt {
     )).data;
   }
 }
-const He = ye(void 0);
-function Pr({ config: n = {}, children: e }) {
-  const t = De(), r = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, d] = x(null), [f, y] = x(!1), [c, L] = x(null), [m, T] = x(!1), A = J(() => {
-    const P = new de(i);
-    return new Lt(P);
+const $e = me(void 0);
+function Ar({ config: n = {}, children: e }) {
+  const t = Fe(), r = he(), i = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, h] = x(null), [f, y] = x(!1), [c, L] = x(null), [m, T] = x(!1), A = K(() => {
+    const P = new ce(i);
+    return new Mt(P);
   }, [i]), N = async () => {
     if (!(o != null && o.id)) {
-      d(null);
+      h(null);
       return;
     }
     y(!0), L(null);
     try {
       const P = await A.getTenantSubscriptionFeatures(o.id);
-      d(P);
+      h(P);
     } catch (P) {
-      const u = P instanceof Error ? P.message : "Failed to fetch subscription";
-      L(u), n.onError && n.onError(P instanceof Error ? P : new Error(u));
+      const d = P instanceof Error ? P.message : "Failed to fetch subscription";
+      L(d), n.onError && n.onError(P instanceof Error ? P : new Error(d));
     } finally {
       y(!1);
     }
   };
-  ne(() => {
+  te(() => {
     if (!i || (N().finally(() => T(!0)), !n.refreshInterval)) return;
-    const P = n.refreshInterval || 10 * 60 * 1e3, u = setInterval(N, P);
-    return () => clearInterval(u);
+    const P = n.refreshInterval || 10 * 60 * 1e3, d = setInterval(N, P);
+    return () => clearInterval(d);
   }, [o == null ? void 0 : o.id, i, n.refreshInterval]);
-  const M = J(() => {
-    const P = (a == null ? void 0 : a.features) || [], u = (k) => {
+  const M = K(() => {
+    const P = (a == null ? void 0 : a.features) || [], d = (k) => {
       const I = P.find((l) => l.key === k);
       return I ? I.type === "BOOLEAN" || I.type === "boolean" ? I.value === !0 : !!I.value : !1;
     }, v = (k) => P.find((I) => I.key === k), F = (k, I) => {
-      const l = P.find((z) => z.key === k);
+      const l = P.find((_) => _.key === k);
       return l ? l.value : I;
-    }, B = (k) => !a || !a.isActive ? !1 : k.includes(a.planId), w = async () => {
+    }, U = (k) => !a || !a.isActive ? !1 : k.includes(a.planId), w = async () => {
       await N();
     }, R = !!i && (m || !(o != null && o.id));
     return {
@@ -1797,26 +1827,26 @@ function Pr({ config: n = {}, children: e }) {
       loading: f,
       error: c,
       isReady: R,
-      isFeatureEnabled: u,
+      isFeatureEnabled: d,
       getFeature: v,
       getFeatureValue: F,
-      hasAllowedPlan: B,
+      hasAllowedPlan: U,
       refresh: w
     };
   }, [a, f, c, i, o == null ? void 0 : o.id, m]);
-  return /* @__PURE__ */ s(He.Provider, { value: M, children: e });
+  return /* @__PURE__ */ s($e.Provider, { value: M, children: e });
 }
-function Nt() {
-  const n = le(He);
+function Lt() {
+  const n = ae($e);
   if (n === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return n;
 }
-function Xe() {
-  return le(He) ?? null;
+function Ye() {
+  return ae($e) ?? null;
 }
-var ae = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(ae || {});
-const Oe = {
+var oe = /* @__PURE__ */ ((n) => (n.SUPERUSER = "SUPERUSER", n.TENANT_ADMIN = "TENANT_ADMIN", n.USER = "USER", n))(oe || {});
+const He = {
   publicGuest: "/",
   publicUser: "/account",
   publicAdmin: "/admin",
@@ -1824,7 +1854,7 @@ const Oe = {
   tenantUser: "/dashboard",
   tenantAdmin: "/admin/dashboard",
   default: "/"
-}, et = {
+}, Xe = {
   // Public/Landing zones
   landing: { tenant: "forbidden", auth: "optional" },
   publicOnly: { tenant: "forbidden", auth: "forbidden" },
@@ -1837,18 +1867,18 @@ const Oe = {
   tenantOpen: { tenant: "required", auth: "optional" },
   tenantAuth: { tenant: "required", auth: "required" },
   // User type zones
-  user: { tenant: "required", auth: "required", userType: ae.USER },
-  admin: { tenant: "required", auth: "required", userType: ae.TENANT_ADMIN },
+  user: { tenant: "required", auth: "required", userType: oe.USER },
+  admin: { tenant: "required", auth: "required", userType: oe.TENANT_ADMIN },
   // Fully open
   open: { tenant: "optional", auth: "optional" }
-}, qe = ye(null);
-function Rr({ config: n = {}, children: e }) {
-  const t = J(() => {
+}, Oe = me(null);
+function Pr({ config: n = {}, children: e }) {
+  const t = K(() => {
     const r = {
-      ...Oe,
+      ...He,
       ...n.zoneRoots
     }, i = {
-      ...et,
+      ...Xe,
       ...n.presets
     };
     return {
@@ -1861,19 +1891,19 @@ function Rr({ config: n = {}, children: e }) {
       returnToStorage: n.returnToStorage ?? "url"
     };
   }, [n]);
-  return /* @__PURE__ */ s(qe.Provider, { value: t, children: e });
+  return /* @__PURE__ */ s(Oe.Provider, { value: t, children: e });
 }
-function Er() {
-  const n = le(qe);
+function Rr() {
+  const n = ae(Oe);
   if (!n)
     throw new Error("useRouting must be used within a RoutingProvider");
   return n;
 }
-function Ft() {
-  const n = le(qe);
+function Nt() {
+  const n = ae(Oe);
   return n || {
-    zoneRoots: Oe,
-    presets: et,
+    zoneRoots: He,
+    presets: Xe,
     loadingFallback: null,
     accessDeniedFallback: null,
     onAccessDenied: void 0,
@@ -1881,7 +1911,7 @@ function Ft() {
     returnToStorage: "url"
   };
 }
-const Ge = () => /* @__PURE__ */ h(
+const je = () => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -1918,11 +1948,11 @@ const Ge = () => /* @__PURE__ */ h(
       )
     ]
   }
-), Ke = ({
+), Ge = ({
   userType: n,
   minUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ h(
+}) => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -1940,55 +1970,55 @@ const Ge = () => /* @__PURE__ */ h(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
       /* @__PURE__ */ s("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && n ? /* @__PURE__ */ h(_, { children: [
-        /* @__PURE__ */ h("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+      e && n ? /* @__PURE__ */ u(z, { children: [
+        /* @__PURE__ */ u("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
           /* @__PURE__ */ s("strong", { children: e }),
           " access level or higher."
         ] }),
-        /* @__PURE__ */ h("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
           /* @__PURE__ */ s("strong", { children: n })
         ] })
-      ] }) : /* @__PURE__ */ h(_, { children: [
+      ] }) : /* @__PURE__ */ u(z, { children: [
         /* @__PURE__ */ s("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
-        t && t.length > 0 && /* @__PURE__ */ h("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
           /* @__PURE__ */ s("strong", { children: t.join(", ") })
         ] })
       ] })
     ]
   }
-), Dt = (n, e) => {
+), Ft = (n, e) => {
   const t = {
-    [ae.USER]: 1,
-    [ae.TENANT_ADMIN]: 2,
-    [ae.SUPERUSER]: 3
+    [oe.USER]: 1,
+    [oe.TENANT_ADMIN]: 2,
+    [oe.SUPERUSER]: 3
   };
   return t[n] >= t[e];
 };
-function Ir({
+function Er({
   children: n,
   fallback: e,
   minUserType: t,
   requiredPermissions: r,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: d, hasAnyPermission: f, hasAllPermissions: y } = he();
+  const { hasValidSession: o, sessionManager: a, hasPermission: h, hasAnyPermission: f, hasAllPermissions: y } = ue();
   if (!o())
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
+    return /* @__PURE__ */ s(z, { children: e || /* @__PURE__ */ s(je, {}) });
   const c = a.getUser();
   if (!c)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(Ge, {}) });
-  if (t && !Dt(c.userType, t))
-    return /* @__PURE__ */ s(Ke, { userType: c.userType, minUserType: t });
+    return /* @__PURE__ */ s(z, { children: e || /* @__PURE__ */ s(je, {}) });
+  if (t && !Ft(c.userType, t))
+    return /* @__PURE__ */ s(Ge, { userType: c.userType, minUserType: t });
   if (r && r.length > 0 && !(i ? y(r) : f(r))) {
-    const m = r.filter((T) => !d(T)).map((T) => typeof T == "string" ? T : T.name);
-    return /* @__PURE__ */ s(Ke, { missingPermissions: m });
+    const m = r.filter((T) => !h(T)).map((T) => typeof T == "string" ? T : T.name);
+    return /* @__PURE__ */ s(Ge, { missingPermissions: m });
   }
-  return /* @__PURE__ */ s(_, { children: n });
+  return /* @__PURE__ */ s(z, { children: n });
 }
-const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Dt = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2001,7 +2031,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ h(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2015,7 +2045,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
-          /* @__PURE__ */ h("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2024,7 +2054,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Qe = ({
+), Je = ({
   userType: n,
   requiredUserType: e,
   missingPermissions: t
@@ -2041,7 +2071,7 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ h(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2054,19 +2084,19 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
         children: [
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && n ? /* @__PURE__ */ h(_, { children: [
-            /* @__PURE__ */ h("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+          e && n ? /* @__PURE__ */ u(z, { children: [
+            /* @__PURE__ */ u("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
               /* @__PURE__ */ s("strong", { children: e }),
               " access."
             ] }),
-            /* @__PURE__ */ h("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current user type: ",
               /* @__PURE__ */ s("strong", { children: n })
             ] })
-          ] }) : /* @__PURE__ */ h(_, { children: [
+          ] }) : /* @__PURE__ */ u(z, { children: [
             /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
-            t && t.length > 0 && /* @__PURE__ */ h("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            t && t.length > 0 && /* @__PURE__ */ u("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
               /* @__PURE__ */ s("strong", { children: t.join(", ") })
             ] })
@@ -2075,8 +2105,8 @@ const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
       }
     )
   }
-), Bt = (n, e) => n === e;
-function Mr({
+), Ct = (n, e) => n === e;
+function Ir({
   children: n,
   redirectTo: e = "/login",
   requiredUserType: t,
@@ -2084,22 +2114,22 @@ function Mr({
   requireAllPermissions: i = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: d, hasPermission: f, hasAnyPermission: y, hasAllPermissions: c } = he(), L = xe();
-  if (ne(() => {
+  const { hasValidSession: a, sessionManager: h, hasPermission: f, hasAnyPermission: y, hasAllPermissions: c } = ue(), L = Te();
+  if (te(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
     );
   }, []), !a())
-    return o ? /* @__PURE__ */ s(_, { children: o }) : /* @__PURE__ */ h(_, { children: [
-      /* @__PURE__ */ s(Ut, { redirectPath: e }),
-      /* @__PURE__ */ s(Se, { to: e, state: { from: L.pathname }, replace: !0 })
+    return o ? /* @__PURE__ */ s(z, { children: o }) : /* @__PURE__ */ u(z, { children: [
+      /* @__PURE__ */ s(Dt, { redirectPath: e }),
+      /* @__PURE__ */ s(be, { to: e, state: { from: L.pathname }, replace: !0 })
     ] });
-  const m = d.getUser();
+  const m = h.getUser();
   if (!m)
-    return /* @__PURE__ */ s(Se, { to: e, state: { from: L.pathname }, replace: !0 });
-  if (t && !Bt(m.userType, t))
+    return /* @__PURE__ */ s(be, { to: e, state: { from: L.pathname }, replace: !0 });
+  if (t && !Ct(m.userType, t))
     return /* @__PURE__ */ s(
-      Qe,
+      Je,
       {
         userType: m.userType,
         requiredUserType: t
@@ -2107,11 +2137,11 @@ function Mr({
     );
   if (r && r.length > 0 && !(i ? c(r) : y(r))) {
     const A = r.filter((N) => !f(N)).map((N) => typeof N == "string" ? N : N.name);
-    return /* @__PURE__ */ s(Qe, { missingPermissions: A });
+    return /* @__PURE__ */ s(Je, { missingPermissions: A });
   }
-  return /* @__PURE__ */ s(_, { children: n });
+  return /* @__PURE__ */ s(z, { children: n });
 }
-const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Ut = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2124,7 +2154,7 @@ const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ h(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2138,7 +2168,7 @@ const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
-          /* @__PURE__ */ h("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2148,18 +2178,18 @@ const $t = ({ redirectPath: n }) => /* @__PURE__ */ s(
     )
   }
 );
-function Lr({ children: n, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = Ze(), a = xe();
-  return ne(() => {
+function Mr({ children: n, redirectTo: e = "/", fallback: t }) {
+  const { tenant: r, isLoading: i, error: o } = Ke(), a = Te();
+  return te(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] TenantRoute is deprecated. Use TenantZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? /* @__PURE__ */ s(_, { children: n }) : t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ h(_, { children: [
-    /* @__PURE__ */ s($t, { redirectPath: e }),
-    /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
+  }, []), i || o ? null : r ? /* @__PURE__ */ s(z, { children: n }) : t ? /* @__PURE__ */ s(z, { children: t }) : /* @__PURE__ */ u(z, { children: [
+    /* @__PURE__ */ s(Ut, { redirectPath: e }),
+    /* @__PURE__ */ s(be, { to: e, state: { from: a.pathname }, replace: !0 })
   ] });
 }
-const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
+const Bt = ({ redirectPath: n }) => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -2172,7 +2202,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ h(
+    children: /* @__PURE__ */ u(
       "div",
       {
         style: {
@@ -2186,7 +2216,7 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
           /* @__PURE__ */ s("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
           /* @__PURE__ */ s("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
           /* @__PURE__ */ s("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
-          /* @__PURE__ */ h("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ u("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             n,
             "..."
@@ -2196,30 +2226,30 @@ const Ct = ({ redirectPath: n }) => /* @__PURE__ */ s(
     )
   }
 );
-function Nr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: i, error: o } = Ze(), a = xe();
-  return ne(() => {
+function Lr({ children: n, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: r, isLoading: i, error: o } = Ke(), a = Te();
+  return te(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] LandingRoute is deprecated. Use PublicZone from ZoneRoute instead."
     );
-  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(_, { children: t }) : /* @__PURE__ */ h(_, { children: [
-    /* @__PURE__ */ s(Ct, { redirectPath: e }),
-    /* @__PURE__ */ s(Se, { to: e, state: { from: a.pathname }, replace: !0 })
-  ] }) : /* @__PURE__ */ s(_, { children: n });
+  }, []), i || o ? null : r ? t ? /* @__PURE__ */ s(z, { children: t }) : /* @__PURE__ */ u(z, { children: [
+    /* @__PURE__ */ s(Bt, { redirectPath: e }),
+    /* @__PURE__ */ s(be, { to: e, state: { from: a.pathname }, replace: !0 })
+  ] }) : /* @__PURE__ */ s(z, { children: n });
 }
-function Ht(n, e) {
+function $t(n, e) {
   return e ? n ? Array.isArray(e) ? e.includes(n) : n === e : !1 : !0;
 }
-function Je(n, e) {
+function Qe(n, e) {
   return !n || n === "optional" ? "skip" : n === "required" ? e ? "pass" : "fail" : n === "forbidden" ? e ? "fail" : "pass" : "skip";
 }
-function Ot(n, e) {
-  return Je(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Je(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !Ht(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
+function Ht(n, e) {
+  return Qe(n.tenant, e.hasTenant) === "fail" ? e.hasTenant ? "has_tenant" : "no_tenant" : Qe(n.auth, e.isAuthenticated) === "fail" ? e.isAuthenticated ? "already_authenticated" : "not_authenticated" : n.userType && e.isAuthenticated && !$t(e.userType, n.userType) ? "wrong_user_type" : n.permissions && n.permissions.length > 0 && !(n.requireAllPermissions !== !1 ? (o) => o.every((a) => e.permissions.includes(a)) : (o) => o.some((a) => e.permissions.includes(a)))(n.permissions) ? "missing_permissions" : null;
 }
-function qt(n, e) {
-  return n.hasTenant ? n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === ae.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
+function Ot(n, e) {
+  return n.hasTenant ? n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.tenantAdmin : e.tenantUser : e.tenantGuest : n.isAuthenticated ? n.userType === oe.TENANT_ADMIN ? e.publicAdmin : e.publicUser : e.publicGuest;
 }
-function _t(n, e, t, r, i) {
+function qt(n, e, t, r, i) {
   if (!e || i !== "url")
     return n;
   const o = typeof e == "string" ? e : t, a = n.includes("?") ? "&" : "?";
@@ -2230,7 +2260,7 @@ function zt(n, e, t) {
   const r = typeof n == "string" ? n : e, i = "zone_return_to";
   t === "session" ? sessionStorage.setItem(i, r) : t === "local" && localStorage.setItem(i, r);
 }
-const ue = ({
+const de = ({
   children: n,
   preset: e,
   tenant: t,
@@ -2238,16 +2268,16 @@ const ue = ({
   userType: i,
   requiredPermissions: o,
   requireAllPermissions: a = !0,
-  returnTo: d,
+  returnTo: h,
   onAccessDenied: f,
   redirectTo: y,
   loadingFallback: c,
   accessDeniedFallback: L
 }) => {
-  const m = xe(), { isAuthenticated: T, isAuthInitializing: A, currentUser: N, userPermissions: M } = he(), { tenant: P, isTenantLoading: u } = Te(), v = Ft(), F = J(() => {
+  const m = Te(), { isAuthenticated: T, isAuthInitializing: A, currentUser: N, userPermissions: M } = ue(), { tenant: P, isTenantLoading: d } = ve(), v = Nt(), F = K(() => {
     if (e)
       return v.presets[e];
-  }, [e, v.presets]), B = J(
+  }, [e, v.presets]), U = K(
     () => ({
       tenant: t ?? (F == null ? void 0 : F.tenant),
       auth: r ?? (F == null ? void 0 : F.auth),
@@ -2256,13 +2286,13 @@ const ue = ({
       requireAllPermissions: a
     }),
     [t, r, i, o, F, a]
-  ), w = J(
+  ), w = K(
     () => ({
       hasTenant: !!P,
       isAuthenticated: T,
       userType: N == null ? void 0 : N.userType,
       permissions: M,
-      isLoading: A || u
+      isLoading: A || d
     }),
     [
       P,
@@ -2270,15 +2300,15 @@ const ue = ({
       N == null ? void 0 : N.userType,
       M,
       A,
-      u
+      d
     ]
-  ), R = J(() => w.isLoading ? null : Ot(B, w), [B, w]), k = J(() => R ? y || qt(w, v.zoneRoots) : null, [R, y, w, v.zoneRoots]), I = J(() => !R || !k ? null : {
+  ), R = K(() => w.isLoading ? null : Ht(U, w), [U, w]), k = K(() => R ? y || Ot(w, v.zoneRoots) : null, [R, y, w, v.zoneRoots]), I = K(() => !R || !k ? null : {
     type: R,
     required: {
-      tenant: B.tenant,
-      auth: B.auth,
-      userType: B.userType,
-      permissions: B.permissions
+      tenant: U.tenant,
+      auth: U.auth,
+      userType: U.userType,
+      permissions: U.permissions
     },
     current: {
       hasTenant: w.hasTenant,
@@ -2287,34 +2317,34 @@ const ue = ({
       permissions: w.permissions
     },
     redirectTo: k
-  }, [R, k, B, w]);
-  if (ne(() => {
+  }, [R, k, U, w]);
+  if (te(() => {
     I && (f ? f(I) : v.onAccessDenied && v.onAccessDenied(I));
-  }, [I, f, v]), ne(() => {
-    I && d && zt(d, m.pathname + m.search, v.returnToStorage);
+  }, [I, f, v]), te(() => {
+    I && h && zt(h, m.pathname + m.search, v.returnToStorage);
   }, [
     I,
-    d,
+    h,
     m.pathname,
     m.search,
     v.returnToStorage
   ]), w.isLoading)
-    return /* @__PURE__ */ s(_, { children: c ?? v.loadingFallback ?? null });
+    return /* @__PURE__ */ s(z, { children: c ?? v.loadingFallback ?? null });
   if (I && k) {
     const l = L ?? v.accessDeniedFallback;
     if (l)
-      return /* @__PURE__ */ s(_, { children: l });
-    const z = _t(
+      return /* @__PURE__ */ s(z, { children: l });
+    const _ = qt(
       k,
-      d,
+      h,
       m.pathname + m.search,
       v.returnToParam,
       v.returnToStorage
     );
-    return /* @__PURE__ */ s(Se, { to: z, replace: !0 });
+    return /* @__PURE__ */ s(be, { to: _, replace: !0 });
   }
-  return /* @__PURE__ */ s(_, { children: n });
-}, Fr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", ...n }), Dr = (n) => /* @__PURE__ */ s(ue, { tenant: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(ue, { auth: "required", ...n }), Br = (n) => /* @__PURE__ */ s(ue, { auth: "forbidden", ...n }), $r = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.TENANT_ADMIN, ...n }), Cr = (n) => /* @__PURE__ */ s(ue, { auth: "required", userType: ae.USER, ...n }), Hr = (n) => /* @__PURE__ */ s(ue, { tenant: "optional", auth: "optional", ...n }), Or = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "required", ...n }), qr = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "optional", ...n }), _r = (n) => /* @__PURE__ */ s(ue, { tenant: "required", auth: "forbidden", ...n }), Vt = () => /* @__PURE__ */ h(
+  return /* @__PURE__ */ s(z, { children: n });
+}, Nr = (n) => /* @__PURE__ */ s(de, { tenant: "required", ...n }), Fr = (n) => /* @__PURE__ */ s(de, { tenant: "forbidden", ...n }), Dr = (n) => /* @__PURE__ */ s(de, { auth: "required", ...n }), Cr = (n) => /* @__PURE__ */ s(de, { auth: "forbidden", ...n }), Ur = (n) => /* @__PURE__ */ s(de, { auth: "required", userType: oe.TENANT_ADMIN, ...n }), Br = (n) => /* @__PURE__ */ s(de, { auth: "required", userType: oe.USER, ...n }), $r = (n) => /* @__PURE__ */ s(de, { tenant: "optional", auth: "optional", ...n }), Hr = (n) => /* @__PURE__ */ s(de, { tenant: "required", auth: "required", ...n }), Or = (n) => /* @__PURE__ */ s(de, { tenant: "required", auth: "optional", ...n }), qr = (n) => /* @__PURE__ */ s(de, { tenant: "required", auth: "forbidden", ...n }), _t = () => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -2333,12 +2363,12 @@ const ue = ({
 );
 function zr({
   children: n,
-  fallback: e = /* @__PURE__ */ s(Vt, {}),
+  fallback: e = /* @__PURE__ */ s(_t, {}),
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: d } = Nt();
-  return d ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: o, isFeatureEnabled: a, loading: h } = Lt();
+  return h ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2348,9 +2378,9 @@ function zr({
       },
       children: "Loading subscription..."
     }
-  ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(_, { children: e }) : r && !a(r) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: n }) : /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: e });
+  ) : i ? i.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ s(z, { children: e }) : r && !a(r) ? /* @__PURE__ */ s(z, { children: e }) : /* @__PURE__ */ s(z, { children: n }) : /* @__PURE__ */ s(z, { children: e }) : /* @__PURE__ */ s(z, { children: e });
 }
-const Wt = ({ flagName: n }) => /* @__PURE__ */ h(
+const Vt = ({ flagName: n }) => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -2369,7 +2399,7 @@ const Wt = ({ flagName: n }) => /* @__PURE__ */ h(
     children: [
       /* @__PURE__ */ s("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
       /* @__PURE__ */ s("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
-      /* @__PURE__ */ h("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+      /* @__PURE__ */ u("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
         n,
         '" is disabled'
@@ -2377,8 +2407,8 @@ const Wt = ({ flagName: n }) => /* @__PURE__ */ h(
     ]
   }
 );
-function Vr({ name: n, children: e, fallback: t }) {
-  const { isEnabled: r, loading: i } = Mt();
+function _r({ name: n, children: e, fallback: t }) {
+  const { isEnabled: r, loading: i } = It();
   return i ? /* @__PURE__ */ s(
     "div",
     {
@@ -2392,9 +2422,9 @@ function Vr({ name: n, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : r(n) ? /* @__PURE__ */ s(_, { children: e }) : /* @__PURE__ */ s(_, { children: t || /* @__PURE__ */ s(Wt, { flagName: n }) });
+  ) : r(n) ? /* @__PURE__ */ s(z, { children: e }) : /* @__PURE__ */ s(z, { children: t || /* @__PURE__ */ s(Vt, { flagName: n }) });
 }
-const jt = () => /* @__PURE__ */ h(
+const Wt = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "16",
@@ -2411,7 +2441,7 @@ const jt = () => /* @__PURE__ */ h(
       /* @__PURE__ */ s("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), Gt = () => /* @__PURE__ */ h(
+), jt = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "16",
@@ -2428,10 +2458,10 @@ const jt = () => /* @__PURE__ */ h(
       /* @__PURE__ */ s("line", { x1: "1", y1: "1", x2: "23", y2: "23" })
     ]
   }
-), Kt = {
-  showPassword: /* @__PURE__ */ s(jt, {}),
-  hidePassword: /* @__PURE__ */ s(Gt, {})
-}, Qt = {
+), Gt = {
+  showPassword: /* @__PURE__ */ s(Wt, {}),
+  hidePassword: /* @__PURE__ */ s(jt, {})
+}, Jt = {
   title: "Sign In",
   usernameLabel: "Email or Phone",
   usernamePlaceholder: "Enter your email or phone number",
@@ -2449,7 +2479,7 @@ const jt = () => /* @__PURE__ */ h(
   dividerBullet: "•",
   showPasswordAriaLabel: "Show password",
   hidePasswordAriaLabel: "Hide password"
-}, Jt = {
+}, Qt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2559,7 +2589,7 @@ const jt = () => /* @__PURE__ */ h(
     paddingRight: "2.5rem"
   }
 };
-function Wr({
+function Vr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -2567,18 +2597,18 @@ function Wr({
   onError: i,
   onForgotPassword: o,
   onSignupClick: a,
-  onMagicLinkClick: d,
+  onMagicLinkClick: h,
   showForgotPassword: f = !0,
   showSignupLink: y = !0,
   showMagicLinkOption: c = !0,
   className: L
 }) {
-  const [m, T] = x(""), [A, N] = x(""), [M, P] = x(!1), [u, v] = x(!1), [F, B] = x(""), [w, R] = x({}), { login: k } = he(), I = { ...Qt, ...n }, l = { ...Jt, ...e }, z = { ...Kt, ...t }, D = () => {
+  const [m, T] = x(""), [A, N] = x(""), [M, P] = x(!1), [d, v] = x(!1), [F, U] = x(""), [w, R] = x({}), { login: k } = ue(), I = { ...Jt, ...n }, l = { ...Qt, ...e }, _ = { ...Gt, ...t }, D = () => {
     const p = {};
     return m.trim() || (p.username = !0), A.trim() || (p.password = !0), R(p), Object.keys(p).length === 0;
   }, g = async (p) => {
     if (p.preventDefault(), !!D()) {
-      v(!0), B("");
+      v(!0), U("");
       try {
         const S = await k({
           username: m,
@@ -2588,23 +2618,23 @@ function Wr({
         r == null || r(S);
       } catch (S) {
         const E = S.message || I.errorMessage;
-        B(E), i == null || i(E);
+        U(E), i == null || i(E);
       } finally {
         v(!1);
       }
     }
-  }, U = (p) => ({
+  }, C = (p) => ({
     ...l.input,
     ...w[p] ? l.inputError : {}
   }), b = () => ({
     ...l.button,
-    ...u ? l.buttonLoading : {},
-    ...!m || !A || u ? l.buttonDisabled : {}
+    ...d ? l.buttonLoading : {},
+    ...!m || !A || d ? l.buttonDisabled : {}
   });
-  return /* @__PURE__ */ h("div", { className: L, style: l.container, children: [
+  return /* @__PURE__ */ u("div", { className: L, style: l.container, children: [
     /* @__PURE__ */ s("h2", { style: l.title, children: I.title }),
-    /* @__PURE__ */ h("form", { onSubmit: g, style: l.form, children: [
-      /* @__PURE__ */ h("div", { style: l.fieldGroup, children: [
+    /* @__PURE__ */ u("form", { onSubmit: g, style: l.form, children: [
+      /* @__PURE__ */ u("div", { style: l.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: l.label, children: I.usernameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2617,14 +2647,14 @@ function Wr({
               T(p.target.value), w.username && R((S) => ({ ...S, username: !1 }));
             },
             placeholder: I.usernamePlaceholder,
-            style: U("username"),
-            disabled: u
+            style: C("username"),
+            disabled: d
           }
         )
       ] }),
-      /* @__PURE__ */ h("div", { style: l.fieldGroup, children: [
+      /* @__PURE__ */ u("div", { style: l.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: l.label, children: I.passwordLabel }),
-        /* @__PURE__ */ h("div", { style: l.inputContainer, children: [
+        /* @__PURE__ */ u("div", { style: l.inputContainer, children: [
           /* @__PURE__ */ s(
             "input",
             {
@@ -2637,10 +2667,10 @@ function Wr({
               },
               placeholder: I.passwordPlaceholder,
               style: {
-                ...U("password"),
+                ...C("password"),
                 ...l.inputWithIcon
               },
-              disabled: u
+              disabled: d
             }
           ),
           /* @__PURE__ */ s(
@@ -2649,29 +2679,29 @@ function Wr({
               type: "button",
               onClick: () => P(!M),
               style: l.passwordToggle,
-              disabled: u,
+              disabled: d,
               "aria-label": M ? I.hidePasswordAriaLabel : I.showPasswordAriaLabel,
-              children: M ? z.hidePassword : z.showPassword
+              children: M ? _.hidePassword : _.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !m || !A || u, style: b(), children: u ? I.loadingText : I.submitButton }),
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !m || !A || d, style: b(), children: d ? I.loadingText : I.submitButton }),
       F && /* @__PURE__ */ s("div", { style: l.errorText, children: F })
     ] }),
-    (f || y || c) && /* @__PURE__ */ h("div", { style: l.linkContainer, children: [
-      c && /* @__PURE__ */ h("div", { children: [
-        /* @__PURE__ */ h("span", { style: l.divider, children: [
+    (f || y || c) && /* @__PURE__ */ u("div", { style: l.linkContainer, children: [
+      c && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: l.divider, children: [
           I.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: d, style: l.link, children: I.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: h, style: l.link, children: I.magicLinkLink })
       ] }),
       c && (f || y) && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
       f && /* @__PURE__ */ s("a", { onClick: o, style: l.link, children: I.forgotPasswordLink }),
       f && y && /* @__PURE__ */ s("div", { style: l.divider, children: I.dividerBullet }),
-      y && /* @__PURE__ */ h("div", { children: [
-        /* @__PURE__ */ h("span", { style: l.divider, children: [
+      y && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: l.divider, children: [
           I.signupText,
           " "
         ] }),
@@ -2680,7 +2710,7 @@ function Wr({
     ] })
   ] });
 }
-const Zt = {
+const Kt = {
   title: "Create Account",
   nameLabel: "First Name",
   namePlaceholder: "Enter your first name",
@@ -2709,7 +2739,7 @@ const Zt = {
   contactMethodHint: "At least one contact method (email or phone) is required",
   tenantNotFoundError: "Tenant not found",
   dividerBullet: "•"
-}, Yt = {
+}, Zt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2814,7 +2844,7 @@ const Zt = {
     margin: "0.5rem 0"
   }
 };
-function jr({
+function Wr({
   copy: n = {},
   styles: e = {},
   signupType: t = "user",
@@ -2822,61 +2852,61 @@ function jr({
   onError: i,
   onLoginClick: o,
   onMagicLinkClick: a,
-  showLoginLink: d = !0,
+  showLoginLink: h = !0,
   showMagicLinkOption: f = !0,
   className: y
 }) {
   var V;
-  const [c, L] = x(""), [m, T] = x(""), [A, N] = x(""), [M, P] = x(""), [u, v] = x(""), [F, B] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, z] = x(""), [D, g] = x({}), { signup: U, signupTenantAdmin: b } = he(), p = ((V = pe()) == null ? void 0 : V.tenant) ?? null, S = { ...Zt, ...n }, E = { ...Yt, ...e }, K = () => {
+  const [c, L] = x(""), [m, T] = x(""), [A, N] = x(""), [M, P] = x(""), [d, v] = x(""), [F, U] = x(""), [w, R] = x(""), [k, I] = x(!1), [l, _] = x(""), [D, g] = x({}), { signup: C, signupTenantAdmin: b } = ue(), p = ((V = he()) == null ? void 0 : V.tenant) ?? null, S = { ...Kt, ...n }, E = { ...Zt, ...e }, Q = () => {
     const H = {};
-    return c.trim() || (H.name = !0), !A.trim() && !M.trim() && (H.email = !0, H.phoneNumber = !0), u.trim() || (H.password = !0), F.trim() || (H.confirmPassword = !0), t === "tenant" && !w.trim() && (H.tenantName = !0), g(H), Object.keys(H).length === 0;
-  }, G = async (H) => {
-    if (H.preventDefault(), !!K()) {
-      if (u !== F) {
-        z(S.passwordMismatchError), g({ confirmPassword: !0 });
+    return c.trim() || (H.name = !0), !A.trim() && !M.trim() && (H.email = !0, H.phoneNumber = !0), d.trim() || (H.password = !0), F.trim() || (H.confirmPassword = !0), t === "tenant" && !w.trim() && (H.tenantName = !0), g(H), Object.keys(H).length === 0;
+  }, J = async (H) => {
+    if (H.preventDefault(), !!Q()) {
+      if (d !== F) {
+        _(S.passwordMismatchError), g({ confirmPassword: !0 });
         return;
       }
       if (t === "user" && !(p != null && p.id)) {
-        z(S.tenantNotFoundError);
+        _(S.tenantNotFoundError);
         return;
       }
-      I(!0), z("");
+      I(!0), _("");
       try {
-        let $;
-        t === "tenant" ? $ = await b({
+        let B;
+        t === "tenant" ? B = await b({
           email: A || void 0,
           phoneNumber: M || void 0,
           name: c,
-          password: u,
+          password: d,
           tenantName: w,
           lastName: m || void 0
-        }) : $ = await U({
+        }) : B = await C({
           email: A || void 0,
           phoneNumber: M || void 0,
           name: c,
-          password: u,
+          password: d,
           tenantId: p.id,
           lastName: m || void 0
-        }), r == null || r($);
-      } catch ($) {
-        const ce = $.message || S.errorMessage;
-        z(ce), i == null || i(ce);
+        }), r == null || r(B);
+      } catch (B) {
+        const le = B.message || S.errorMessage;
+        _(le), i == null || i(le);
       } finally {
         I(!1);
       }
     }
-  }, X = (H) => ({
+  }, ee = (H) => ({
     ...E.input,
     ...D[H] ? E.inputError : {}
   }), W = () => ({
     ...E.button,
     ...k ? E.buttonLoading : {},
-    ...!c || !A && !M || !u || !F || k || t === "tenant" && !w ? E.buttonDisabled : {}
-  }), q = c && (A || M) && u && F && (t === "user" || w);
-  return /* @__PURE__ */ h("div", { className: y, style: E.container, children: [
+    ...!c || !A && !M || !d || !F || k || t === "tenant" && !w ? E.buttonDisabled : {}
+  }), q = c && (A || M) && d && F && (t === "user" || w);
+  return /* @__PURE__ */ u("div", { className: y, style: E.container, children: [
     /* @__PURE__ */ s("h2", { style: E.title, children: S.title }),
-    /* @__PURE__ */ h("form", { onSubmit: G, style: E.form, children: [
-      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+    /* @__PURE__ */ u("form", { onSubmit: J, style: E.form, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.nameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2886,15 +2916,15 @@ function jr({
             type: "text",
             value: c,
             onChange: (H) => {
-              L(H.target.value), D.name && g(($) => ({ ...$, name: !1 }));
+              L(H.target.value), D.name && g((B) => ({ ...B, name: !1 }));
             },
             placeholder: S.namePlaceholder,
-            style: X("name"),
+            style: ee("name"),
             disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.lastNameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2910,7 +2940,7 @@ function jr({
           }
         )
       ] }),
-      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.emailLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2920,15 +2950,15 @@ function jr({
             type: "email",
             value: A,
             onChange: (H) => {
-              N(H.target.value), D.email && g(($) => ({ ...$, email: !1, phoneNumber: !1 }));
+              N(H.target.value), D.email && g((B) => ({ ...B, email: !1, phoneNumber: !1 }));
             },
             placeholder: S.emailPlaceholder,
-            style: X("email"),
+            style: ee("email"),
             disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.phoneNumberLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2938,16 +2968,16 @@ function jr({
             type: "tel",
             value: M,
             onChange: (H) => {
-              P(H.target.value), D.phoneNumber && g(($) => ({ ...$, email: !1, phoneNumber: !1 }));
+              P(H.target.value), D.phoneNumber && g((B) => ({ ...B, email: !1, phoneNumber: !1 }));
             },
             placeholder: S.phoneNumberPlaceholder,
-            style: X("phoneNumber"),
+            style: ee("phoneNumber"),
             disabled: k
           }
         )
       ] }),
       /* @__PURE__ */ s("div", { style: E.hintText, children: S.contactMethodHint }),
-      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.passwordLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2955,17 +2985,17 @@ function jr({
             id: "password",
             name: "password",
             type: "password",
-            value: u,
+            value: d,
             onChange: (H) => {
-              v(H.target.value), D.password && g(($) => ({ ...$, password: !1 }));
+              v(H.target.value), D.password && g((B) => ({ ...B, password: !1 }));
             },
             placeholder: S.passwordPlaceholder,
-            style: X("password"),
+            style: ee("password"),
             disabled: k
           }
         )
       ] }),
-      /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+      /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.confirmPasswordLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2975,15 +3005,15 @@ function jr({
             type: "password",
             value: F,
             onChange: (H) => {
-              B(H.target.value), D.confirmPassword && g(($) => ({ ...$, confirmPassword: !1 })), l === S.passwordMismatchError && z("");
+              U(H.target.value), D.confirmPassword && g((B) => ({ ...B, confirmPassword: !1 })), l === S.passwordMismatchError && _("");
             },
             placeholder: S.confirmPasswordPlaceholder,
-            style: X("confirmPassword"),
+            style: ee("confirmPassword"),
             disabled: k
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ h("div", { style: E.fieldGroup, children: [
+      t === "tenant" && /* @__PURE__ */ u("div", { style: E.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: E.label, children: S.tenantNameLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -2993,10 +3023,10 @@ function jr({
             type: "text",
             value: w,
             onChange: (H) => {
-              R(H.target.value), D.tenantName && g(($) => ({ ...$, tenantName: !1 }));
+              R(H.target.value), D.tenantName && g((B) => ({ ...B, tenantName: !1 }));
             },
             placeholder: S.tenantNamePlaceholder,
-            style: X("tenantName"),
+            style: ee("tenantName"),
             disabled: k
           }
         )
@@ -3004,17 +3034,17 @@ function jr({
       /* @__PURE__ */ s("button", { type: "submit", disabled: !q || k, style: W(), children: k ? S.loadingText : S.submitButton }),
       l && /* @__PURE__ */ s("div", { style: E.errorText, children: l })
     ] }),
-    (d || f) && /* @__PURE__ */ h("div", { style: E.linkContainer, children: [
-      f && /* @__PURE__ */ h("div", { children: [
-        /* @__PURE__ */ h("span", { style: E.divider, children: [
+    (h || f) && /* @__PURE__ */ u("div", { style: E.linkContainer, children: [
+      f && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: E.divider, children: [
           S.magicLinkText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: a, style: E.link, children: S.magicLinkLink })
       ] }),
-      f && d && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
-      d && /* @__PURE__ */ h("div", { children: [
-        /* @__PURE__ */ h("span", { style: E.divider, children: [
+      f && h && /* @__PURE__ */ s("div", { style: E.divider, children: S.dividerBullet }),
+      h && /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: E.divider, children: [
           S.loginText,
           " "
         ] }),
@@ -3023,7 +3053,7 @@ function jr({
     ] })
   ] });
 }
-const Xt = {
+const Yt = {
   title: "Sign In with Magic Link",
   emailLabel: "Email",
   emailPlaceholder: "Enter your email",
@@ -3047,7 +3077,7 @@ const Xt = {
   tenantNotFoundError: "Tenant not found",
   missingTenantOrEmailError: "Missing tenant or email",
   dividerBullet: "•"
-}, er = {
+}, Xt = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3170,7 +3200,7 @@ const Xt = {
     textDecoration: "underline"
   }
 };
-function Gr({
+function jr({
   copy: n = {},
   styles: e = {},
   onSuccess: t,
@@ -3178,21 +3208,21 @@ function Gr({
   onLoginClick: i,
   onSignupClick: o,
   showTraditionalLinks: a = !0,
-  className: d,
+  className: h,
   verifyToken: f,
   frontendUrl: y
 }) {
   var W;
-  const [c, L] = x(""), [m, T] = x(""), [A, N] = x(""), [M, P] = x(!1), [u, v] = x(!1), [F, B] = x(""), [w, R] = x(""), [k, I] = x({}), [l, z] = x(!1), { sendMagicLink: D, verifyMagicLink: g } = he(), U = ((W = pe()) == null ? void 0 : W.tenant) ?? null, b = { ...Xt, ...n }, p = { ...er, ...e };
-  ne(() => {
+  const [c, L] = x(""), [m, T] = x(""), [A, N] = x(""), [M, P] = x(!1), [d, v] = x(!1), [F, U] = x(""), [w, R] = x(""), [k, I] = x({}), [l, _] = x(!1), { sendMagicLink: D, verifyMagicLink: g } = ue(), C = ((W = he()) == null ? void 0 : W.tenant) ?? null, b = { ...Yt, ...n }, p = { ...Xt, ...e };
+  te(() => {
     f && S(f);
   }, [f]);
   const S = async (q) => {
-    if (!U || !c) {
-      B(b.missingTenantOrEmailError);
+    if (!C || !c) {
+      U(b.missingTenantOrEmailError);
       return;
     }
-    v(!0), B("");
+    v(!0), U("");
     try {
       const V = await g({
         token: q,
@@ -3202,24 +3232,24 @@ function Gr({
       t == null || t(V);
     } catch (V) {
       const H = V.message || "Failed to verify magic link";
-      B(H), r == null || r(H);
+      U(H), r == null || r(H);
     } finally {
       v(!1);
     }
   }, E = () => {
     const q = {};
     return c.trim() || (q.email = !0), l && !m.trim() && (q.name = !0), I(q), Object.keys(q).length === 0;
-  }, K = async (q) => {
+  }, Q = async (q) => {
     if (q.preventDefault(), !!E()) {
-      if (!(U != null && U.id)) {
-        B(b.tenantNotFoundError);
+      if (!(C != null && C.id)) {
+        U(b.tenantNotFoundError);
         return;
       }
-      P(!0), B(""), R("");
+      P(!0), U(""), R("");
       try {
         const V = y || (typeof window < "u" ? window.location.origin : ""), H = await D({
           email: c,
-          tenantId: U.id,
+          tenantId: C.id,
           frontendUrl: V,
           name: l ? m : void 0,
           lastName: l ? A : void 0
@@ -3227,27 +3257,27 @@ function Gr({
         R(b.successMessage), t == null || t(H);
       } catch (V) {
         const H = V.message || b.errorMessage;
-        B(H), r == null || r(H);
+        U(H), r == null || r(H);
       } finally {
         P(!1);
       }
     }
-  }, G = (q) => ({
+  }, J = (q) => ({
     ...p.input,
     ...k[q] ? p.inputError : {}
-  }), X = () => ({
+  }), ee = () => ({
     ...p.button,
-    ...M || u ? p.buttonLoading : {},
-    ...!c || M || u ? p.buttonDisabled : {}
+    ...M || d ? p.buttonLoading : {},
+    ...!c || M || d ? p.buttonDisabled : {}
   });
-  return u ? /* @__PURE__ */ h("div", { className: d, style: p.container, children: [
+  return d ? /* @__PURE__ */ u("div", { className: h, style: p.container, children: [
     /* @__PURE__ */ s("h2", { style: p.title, children: b.verifyingText }),
     /* @__PURE__ */ s("div", { style: p.verifyingContainer, children: /* @__PURE__ */ s("div", { style: p.verifyingText, children: b.verifyingDescription }) })
-  ] }) : /* @__PURE__ */ h("div", { className: d, style: p.container, children: [
+  ] }) : /* @__PURE__ */ u("div", { className: h, style: p.container, children: [
     /* @__PURE__ */ s("h2", { style: p.title, children: b.title }),
     /* @__PURE__ */ s("p", { style: p.description, children: b.description }),
-    /* @__PURE__ */ h("form", { onSubmit: K, style: p.form, children: [
-      /* @__PURE__ */ h("div", { style: p.fieldGroup, children: [
+    /* @__PURE__ */ u("form", { onSubmit: Q, style: p.form, children: [
+      /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: p.label, children: b.emailLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -3260,8 +3290,8 @@ function Gr({
               L(q.target.value), k.email && I((V) => ({ ...V, email: !1 }));
             },
             placeholder: b.emailPlaceholder,
-            style: G("email"),
-            disabled: M || u
+            style: J("email"),
+            disabled: M || d
           }
         )
       ] }),
@@ -3269,13 +3299,13 @@ function Gr({
         "button",
         {
           type: "button",
-          onClick: () => z(!0),
+          onClick: () => _(!0),
           style: p.toggleLink,
           children: b.showNameToggle
         }
       ) }),
-      l && /* @__PURE__ */ h(_, { children: [
-        /* @__PURE__ */ h("div", { style: p.fieldGroup, children: [
+      l && /* @__PURE__ */ u(z, { children: [
+        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
           /* @__PURE__ */ s("label", { style: p.label, children: b.nameLabel }),
           /* @__PURE__ */ s(
             "input",
@@ -3288,12 +3318,12 @@ function Gr({
                 T(q.target.value), k.name && I((V) => ({ ...V, name: !1 }));
               },
               placeholder: b.namePlaceholder,
-              style: G("name"),
-              disabled: M || u
+              style: J("name"),
+              disabled: M || d
             }
           )
         ] }),
-        /* @__PURE__ */ h("div", { style: p.fieldGroup, children: [
+        /* @__PURE__ */ u("div", { style: p.fieldGroup, children: [
           /* @__PURE__ */ s("label", { style: p.label, children: b.lastNameLabel }),
           /* @__PURE__ */ s(
             "input",
@@ -3305,7 +3335,7 @@ function Gr({
               onChange: (q) => N(q.target.value),
               placeholder: b.lastNamePlaceholder,
               style: p.input,
-              disabled: M || u
+              disabled: M || d
             }
           )
         ] }),
@@ -3314,28 +3344,28 @@ function Gr({
           {
             type: "button",
             onClick: () => {
-              z(!1), T(""), N("");
+              _(!1), T(""), N("");
             },
             style: p.toggleLink,
             children: b.hideNameToggle
           }
         ) })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: !c || M || u, style: X(), children: M ? b.loadingText : b.submitButton }),
+      /* @__PURE__ */ s("button", { type: "submit", disabled: !c || M || d, style: ee(), children: M ? b.loadingText : b.submitButton }),
       F && /* @__PURE__ */ s("div", { style: p.errorText, children: F }),
       w && /* @__PURE__ */ s("div", { style: p.successText, children: w })
     ] }),
-    a && /* @__PURE__ */ h("div", { style: p.linkContainer, children: [
-      /* @__PURE__ */ h("div", { children: [
-        /* @__PURE__ */ h("span", { style: p.divider, children: [
+    a && /* @__PURE__ */ u("div", { style: p.linkContainer, children: [
+      /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: p.divider, children: [
           b.loginText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: i, style: p.link, children: b.loginLink })
       ] }),
       /* @__PURE__ */ s("div", { style: p.divider, children: b.dividerBullet }),
-      /* @__PURE__ */ h("div", { children: [
-        /* @__PURE__ */ h("span", { style: p.divider, children: [
+      /* @__PURE__ */ u("div", { children: [
+        /* @__PURE__ */ u("span", { style: p.divider, children: [
           b.signupText,
           " "
         ] }),
@@ -3344,7 +3374,7 @@ function Gr({
     ] })
   ] });
 }
-const tr = {
+const er = {
   title: "Verifying Magic Link",
   verifyingMessage: "Please wait while we verify your magic link...",
   successMessage: "Magic link verified successfully! You are now logged in.",
@@ -3353,7 +3383,7 @@ const tr = {
   retryButton: "Try Again",
   backToLoginButton: "Back to Login",
   missingParamsError: "Missing required parameters: token or email"
-}, tt = {
+}, et = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -3446,7 +3476,7 @@ const tr = {
   backButtonHover: {
     backgroundColor: "#e5e7eb"
   }
-}, rr = () => /* @__PURE__ */ s("div", { style: tt.spinner }), nr = () => /* @__PURE__ */ h(
+}, tr = () => /* @__PURE__ */ s("div", { style: et.spinner }), rr = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "48",
@@ -3463,7 +3493,7 @@ const tr = {
       /* @__PURE__ */ s("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), sr = () => /* @__PURE__ */ h(
+), nr = () => /* @__PURE__ */ u(
   "svg",
   {
     width: "48",
@@ -3481,12 +3511,12 @@ const tr = {
       /* @__PURE__ */ s("line", { x1: "9", y1: "9", x2: "15", y2: "15" })
     ]
   }
-), ir = {
-  loading: /* @__PURE__ */ s(rr, {}),
-  success: /* @__PURE__ */ s(nr, {}),
-  error: /* @__PURE__ */ s(sr, {})
+), sr = {
+  loading: /* @__PURE__ */ s(tr, {}),
+  success: /* @__PURE__ */ s(rr, {}),
+  error: /* @__PURE__ */ s(nr, {})
 };
-function Kr({
+function Gr({
   copy: n = {},
   styles: e = {},
   icons: t = {},
@@ -3494,14 +3524,14 @@ function Kr({
   onError: i,
   onRetry: o,
   onBackToLogin: a,
-  className: d,
+  className: h,
   token: f,
   email: y,
   appId: c,
   tenantSlug: L,
   autoRedirectDelay: m = 3e3
 }) {
-  const [T, A] = x("verifying"), [N, M] = x(""), { verifyMagicLink: P } = he(), u = { ...tr, ...n }, v = { ...tt, ...e }, F = { ...ir, ...t }, B = () => {
+  const [T, A] = x("verifying"), [N, M] = x(""), { verifyMagicLink: P } = ue(), d = { ...er, ...n }, v = { ...et, ...e }, F = { ...sr, ...t }, U = () => {
     if (typeof window > "u") return {};
     const l = new URLSearchParams(window.location.search);
     return {
@@ -3513,51 +3543,51 @@ function Kr({
   }, w = async () => {
     A("verifying"), M("");
     try {
-      const l = B();
+      const l = U();
       if (!l.token || !l.email)
-        throw new Error(u.missingParamsError);
-      const z = await P({
+        throw new Error(d.missingParamsError);
+      const _ = await P({
         token: l.token,
         email: l.email,
         tenantSlug: l.tenantSlug
       });
-      A("success"), r == null || r(z), m > 0 && setTimeout(() => {
+      A("success"), r == null || r(_), m > 0 && setTimeout(() => {
         A("redirecting");
       }, m);
     } catch (l) {
-      const z = l.message || u.errorMessage;
-      M(z), A("error"), i == null || i(z);
+      const _ = l.message || d.errorMessage;
+      M(_), A("error"), i == null || i(_);
     }
   }, R = () => {
     o == null || o(), w();
   }, k = () => {
     a == null || a();
   };
-  ne(() => {
+  te(() => {
     w();
   }, []);
   const I = () => {
     switch (T) {
       case "verifying":
-        return /* @__PURE__ */ h("div", { style: v.message, children: [
+        return /* @__PURE__ */ u("div", { style: v.message, children: [
           F.loading,
-          u.verifyingMessage
+          d.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ h(_, { children: [
+        return /* @__PURE__ */ u(z, { children: [
           F.success,
-          /* @__PURE__ */ s("div", { style: v.successMessage, children: u.successMessage })
+          /* @__PURE__ */ s("div", { style: v.successMessage, children: d.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ h(_, { children: [
+        return /* @__PURE__ */ u(z, { children: [
           F.loading,
-          /* @__PURE__ */ s("div", { style: v.message, children: u.redirectingMessage })
+          /* @__PURE__ */ s("div", { style: v.message, children: d.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ h(_, { children: [
+        return /* @__PURE__ */ u(z, { children: [
           F.error,
-          /* @__PURE__ */ s("div", { style: v.errorMessage, children: N || u.errorMessage }),
-          /* @__PURE__ */ h("div", { style: v.buttonContainer, children: [
+          /* @__PURE__ */ s("div", { style: v.errorMessage, children: N || d.errorMessage }),
+          /* @__PURE__ */ u("div", { style: v.buttonContainer, children: [
             /* @__PURE__ */ s(
               "button",
               {
@@ -3567,12 +3597,12 @@ function Kr({
                   Object.assign(l.currentTarget.style, v.retryButtonHover);
                 },
                 onMouseOut: (l) => {
-                  const z = v.retryButton || {};
+                  const _ = v.retryButton || {};
                   Object.keys(v.retryButtonHover || {}).forEach((D) => {
-                    l.currentTarget.style[D] = z[D] ?? "";
+                    l.currentTarget.style[D] = _[D] ?? "";
                   });
                 },
-                children: u.retryButton
+                children: d.retryButton
               }
             ),
             /* @__PURE__ */ s(
@@ -3584,12 +3614,12 @@ function Kr({
                   Object.assign(l.currentTarget.style, v.backButtonHover);
                 },
                 onMouseOut: (l) => {
-                  const z = v.backButton || {};
+                  const _ = v.backButton || {};
                   Object.keys(v.backButtonHover || {}).forEach((D) => {
-                    l.currentTarget.style[D] = z[D] ?? "";
+                    l.currentTarget.style[D] = _[D] ?? "";
                   });
                 },
-                children: u.backToLoginButton
+                children: d.backToLoginButton
               }
             )
           ] })
@@ -3598,18 +3628,18 @@ function Kr({
         return null;
     }
   };
-  return /* @__PURE__ */ h("div", { style: v.container, className: d, children: [
+  return /* @__PURE__ */ u("div", { style: v.container, className: h, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ s("h1", { style: v.title, children: u.title }),
+    /* @__PURE__ */ s("h1", { style: v.title, children: d.title }),
     I()
   ] });
 }
-const or = {
+const ir = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3635,7 +3665,7 @@ const or = {
   haveTokenLink: "I have a token",
   tenantNotFoundError: "Tenant not found",
   dividerBullet: "•"
-}, ar = {
+}, or = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3731,7 +3761,7 @@ const or = {
     color: "#6b7280"
   }
 };
-function Qr({
+function Jr({
   copy: n = {},
   styles: e = {},
   mode: t = "request",
@@ -3739,30 +3769,30 @@ function Qr({
   onSuccess: i,
   onError: o,
   onBackToLogin: a,
-  onModeChange: d,
+  onModeChange: h,
   className: f
 }) {
-  var X;
-  const [y, c] = x(""), [L, m] = x(r), [T, A] = x(""), [N, M] = x(""), [P, u] = x(!1), [v, F] = x(""), [B, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = he(), z = ((X = pe()) == null ? void 0 : X.tenant) ?? null, D = { ...or, ...n }, g = { ...ar, ...e }, U = () => {
+  var ee;
+  const [y, c] = x(""), [L, m] = x(r), [T, A] = x(""), [N, M] = x(""), [P, d] = x(!1), [v, F] = x(""), [U, w] = x(""), [R, k] = x({}), { requestPasswordReset: I, confirmPasswordReset: l } = ue(), _ = ((ee = he()) == null ? void 0 : ee.tenant) ?? null, D = { ...ir, ...n }, g = { ...or, ...e }, C = () => {
     const W = {};
     return y.trim() || (W.email = !0), k(W), Object.keys(W).length === 0;
   }, b = () => {
     const W = {};
     return L.trim() || (W.token = !0), T.trim() || (W.newPassword = !0), N.trim() || (W.confirmPassword = !0), k(W), Object.keys(W).length === 0;
   }, p = async (W) => {
-    if (W.preventDefault(), !!U()) {
-      if (!(z != null && z.id)) {
+    if (W.preventDefault(), !!C()) {
+      if (!(_ != null && _.id)) {
         F(D.tenantNotFoundError);
         return;
       }
-      u(!0), F(""), w("");
+      d(!0), F(""), w("");
       try {
-        await I({ email: y, tenantId: z.id }), w(D.successMessage), i == null || i();
+        await I({ email: y, tenantId: _.id }), w(D.successMessage), i == null || i();
       } catch (q) {
         const V = q.message || D.errorMessage;
         F(V), o == null || o(V);
       } finally {
-        u(!1);
+        d(!1);
       }
     }
   }, S = async (W) => {
@@ -3771,30 +3801,30 @@ function Qr({
         F(D.passwordMismatchError), k({ confirmPassword: !0 });
         return;
       }
-      u(!0), F(""), w("");
+      d(!0), F(""), w("");
       try {
         await l({ token: L, newPassword: T }), w(D.resetSuccessMessage), i == null || i();
       } catch (q) {
         const V = q.message || D.errorMessage;
         F(V), o == null || o(V);
       } finally {
-        u(!1);
+        d(!1);
       }
     }
   }, E = (W) => ({
     ...g.input,
     ...R[W] ? g.inputError : {}
-  }), K = () => ({
+  }), Q = () => ({
     ...g.button,
     ...P ? g.buttonLoading : {}
   });
   if (t === "reset") {
     const W = L && T && N;
-    return /* @__PURE__ */ h("div", { className: f, style: g.container, children: [
+    return /* @__PURE__ */ u("div", { className: f, style: g.container, children: [
       /* @__PURE__ */ s("h2", { style: g.title, children: D.resetTitle }),
       /* @__PURE__ */ s("p", { style: g.subtitle, children: D.resetSubtitle }),
-      /* @__PURE__ */ h("form", { onSubmit: S, style: g.form, children: [
-        /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+      /* @__PURE__ */ u("form", { onSubmit: S, style: g.form, children: [
+        /* @__PURE__ */ u("div", { style: g.fieldGroup, children: [
           /* @__PURE__ */ s("label", { style: g.label, children: D.tokenLabel }),
           /* @__PURE__ */ s(
             "input",
@@ -3810,7 +3840,7 @@ function Qr({
             }
           )
         ] }),
-        /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ u("div", { style: g.fieldGroup, children: [
           /* @__PURE__ */ s("label", { style: g.label, children: D.newPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
@@ -3826,7 +3856,7 @@ function Qr({
             }
           )
         ] }),
-        /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ u("div", { style: g.fieldGroup, children: [
           /* @__PURE__ */ s("label", { style: g.label, children: D.confirmPasswordLabel }),
           /* @__PURE__ */ s(
             "input",
@@ -3848,30 +3878,30 @@ function Qr({
             type: "submit",
             disabled: !W || P,
             style: {
-              ...K(),
+              ...Q(),
               ...!W || P ? g.buttonDisabled : {}
             },
             children: P ? D.resetLoadingText : D.resetSubmitButton
           }
         ),
         v && /* @__PURE__ */ s("div", { style: g.errorText, children: v }),
-        B && /* @__PURE__ */ s("div", { style: g.successText, children: B })
+        U && /* @__PURE__ */ s("div", { style: g.successText, children: U })
       ] }),
-      /* @__PURE__ */ h("div", { style: g.linkContainer, children: [
+      /* @__PURE__ */ u("div", { style: g.linkContainer, children: [
         /* @__PURE__ */ s("a", { onClick: a, style: g.link, children: D.backToLoginLink }),
-        d && /* @__PURE__ */ h(_, { children: [
+        h && /* @__PURE__ */ u(z, { children: [
           /* @__PURE__ */ s("span", { style: g.modeSwitchDivider, children: D.dividerBullet }),
-          /* @__PURE__ */ s("a", { onClick: () => d("request"), style: g.link, children: D.requestNewLinkLink })
+          /* @__PURE__ */ s("a", { onClick: () => h("request"), style: g.link, children: D.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
-  const G = y;
-  return /* @__PURE__ */ h("div", { className: f, style: g.container, children: [
+  const J = y;
+  return /* @__PURE__ */ u("div", { className: f, style: g.container, children: [
     /* @__PURE__ */ s("h2", { style: g.title, children: D.title }),
     /* @__PURE__ */ s("p", { style: g.subtitle, children: D.subtitle }),
-    /* @__PURE__ */ h("form", { onSubmit: p, style: g.form, children: [
-      /* @__PURE__ */ h("div", { style: g.fieldGroup, children: [
+    /* @__PURE__ */ u("form", { onSubmit: p, style: g.form, children: [
+      /* @__PURE__ */ u("div", { style: g.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: g.label, children: D.emailLabel }),
         /* @__PURE__ */ s(
           "input",
@@ -3891,27 +3921,27 @@ function Qr({
         "button",
         {
           type: "submit",
-          disabled: !G || P,
+          disabled: !J || P,
           style: {
-            ...K(),
-            ...!G || P ? g.buttonDisabled : {}
+            ...Q(),
+            ...!J || P ? g.buttonDisabled : {}
           },
           children: P ? D.loadingText : D.submitButton
         }
       ),
       v && /* @__PURE__ */ s("div", { style: g.errorText, children: v }),
-      B && /* @__PURE__ */ s("div", { style: g.successText, children: B })
+      U && /* @__PURE__ */ s("div", { style: g.successText, children: U })
     ] }),
-    /* @__PURE__ */ h("div", { style: g.linkContainer, children: [
+    /* @__PURE__ */ u("div", { style: g.linkContainer, children: [
       /* @__PURE__ */ s("a", { onClick: a, style: g.link, children: D.backToLoginLink }),
-      d && /* @__PURE__ */ h(_, { children: [
+      h && /* @__PURE__ */ u(z, { children: [
         /* @__PURE__ */ s("span", { style: g.modeSwitchDivider, children: D.dividerBullet }),
-        /* @__PURE__ */ s("a", { onClick: () => d("reset"), style: g.link, children: D.haveTokenLink })
+        /* @__PURE__ */ s("a", { onClick: () => h("reset"), style: g.link, children: D.haveTokenLink })
       ] })
     ] })
   ] });
 }
-const lr = () => /* @__PURE__ */ s(
+const ar = () => /* @__PURE__ */ s(
   "div",
   {
     style: {
@@ -3923,7 +3953,7 @@ const lr = () => /* @__PURE__ */ s(
     },
     children: /* @__PURE__ */ s("div", { children: "Loading..." })
   }
-), cr = ({ error: n, retry: e }) => /* @__PURE__ */ h(
+), lr = ({ error: n, retry: e }) => /* @__PURE__ */ u(
   "div",
   {
     style: {
@@ -3957,31 +3987,31 @@ const lr = () => /* @__PURE__ */ s(
     ]
   }
 );
-function Jr({
+function Qr({
   children: n,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: i, appError: o, retryApp: a } = Ae(), d = pe(), f = $e(), y = Ye(), c = Xe(), L = (d == null ? void 0 : d.isTenantLoading) ?? !1, m = (d == null ? void 0 : d.tenantError) ?? null, T = (d == null ? void 0 : d.tenantSlug) ?? null, A = (d == null ? void 0 : d.retryTenant) ?? (() => {
-  }), N = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (c == null ? void 0 : c.isReady) ?? !0, u = r && d && T, w = i || u && L || f && !N || y && !M || c && !P, R = o || (u ? m : null), k = () => {
-    o && a(), m && d && A();
+  const { isAppLoading: i, appError: o, retryApp: a } = ke(), h = he(), f = Ue(), y = Ze(), c = Ye(), L = (h == null ? void 0 : h.isTenantLoading) ?? !1, m = (h == null ? void 0 : h.tenantError) ?? null, T = (h == null ? void 0 : h.tenantSlug) ?? null, A = (h == null ? void 0 : h.retryTenant) ?? (() => {
+  }), N = (f == null ? void 0 : f.isAuthReady) ?? !0, M = (y == null ? void 0 : y.isReady) ?? !0, P = (c == null ? void 0 : c.isReady) ?? !0, d = r && h && T, w = i || d && L || f && !N || y && !M || c && !P, R = o || (d ? m : null), k = () => {
+    o && a(), m && h && A();
   };
   if (w)
-    return /* @__PURE__ */ s(_, { children: e || /* @__PURE__ */ s(lr, {}) });
+    return /* @__PURE__ */ s(z, { children: e || /* @__PURE__ */ s(ar, {}) });
   if (R) {
-    const I = typeof t == "function" ? t(R, k) : t || /* @__PURE__ */ s(cr, { error: R, retry: k });
-    return /* @__PURE__ */ s(_, { children: I });
+    const I = typeof t == "function" ? t(R, k) : t || /* @__PURE__ */ s(lr, { error: R, retry: k });
+    return /* @__PURE__ */ s(z, { children: I });
   }
-  return /* @__PURE__ */ s(_, { children: n });
+  return /* @__PURE__ */ s(z, { children: n });
 }
-function Zr(n = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = Ae(), o = pe(), a = $e(), d = Ye(), f = Xe(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, L = (o == null ? void 0 : o.tenant) ?? null, m = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, N = (d == null ? void 0 : d.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = n && o && m, B = e || P && y || a && !A || d && !N || f && !M, w = t || (P ? c : null);
+function Kr(n = !0) {
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: i } = ke(), o = he(), a = Ue(), h = Ze(), f = Ye(), y = (o == null ? void 0 : o.isTenantLoading) ?? !1, c = (o == null ? void 0 : o.tenantError) ?? null, L = (o == null ? void 0 : o.tenant) ?? null, m = (o == null ? void 0 : o.tenantSlug) ?? null, T = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), A = (a == null ? void 0 : a.isAuthReady) ?? !0, N = (h == null ? void 0 : h.isReady) ?? !0, M = (f == null ? void 0 : f.isReady) ?? !0, P = n && o && m, U = e || P && y || a && !A || h && !N || f && !M, w = t || (P ? c : null);
   return {
-    isLoading: B,
+    isLoading: U,
     error: w,
-    isReady: !B && !w && i !== null && (!P || L !== null),
+    isReady: !U && !w && i !== null && (!P || L !== null),
     retry: () => {
       t && r(), c && o && T();
     },
@@ -3989,11 +4019,11 @@ function Zr(n = !0) {
     app: { isLoading: e, error: t, data: i },
     tenant: o ? { isLoading: y, error: c, data: L } : null,
     auth: a ? { isReady: A } : null,
-    featureFlags: d ? { isReady: N } : null,
+    featureFlags: h ? { isReady: N } : null,
     subscription: f ? { isReady: M } : null
   };
 }
-const dr = {
+const cr = {
   wrapper: {
     position: "relative"
   },
@@ -4037,7 +4067,7 @@ const dr = {
     marginLeft: 8
   }
 };
-function Yr({
+function Zr({
   tenants: n,
   currentTenantId: e,
   onSelect: t,
@@ -4045,16 +4075,16 @@ function Yr({
   className: i = "",
   dropdownClassName: o = "",
   itemClassName: a = "",
-  renderItem: d,
+  renderItem: h,
   placeholder: f = "Select tenant",
   disabled: y = !1,
   showCurrentTenant: c = !0
 }) {
-  var B;
-  const L = { ...dr, ...r }, m = $e(), [T, A] = x(!1), N = Ne(null), M = n ?? (m == null ? void 0 : m.userTenants) ?? [], P = e ?? ((B = m == null ? void 0 : m.currentUser) == null ? void 0 : B.tenantId) ?? null, u = async (w) => {
+  var U;
+  const L = { ...cr, ...r }, m = Ue(), [T, A] = x(!1), N = Me(null), M = n ?? (m == null ? void 0 : m.userTenants) ?? [], P = e ?? ((U = m == null ? void 0 : m.currentUser) == null ? void 0 : U.tenantId) ?? null, d = async (w) => {
     A(!1), t ? t(w) : m != null && m.switchToTenant && await m.switchToTenant(w);
   };
-  ne(() => {
+  te(() => {
     const w = (R) => {
       N.current && !N.current.contains(R.target) && A(!1);
     };
@@ -4065,16 +4095,16 @@ function Yr({
     return null;
   if (M.length === 1 && c)
     return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: M[0].name }) });
-  const F = (w, R) => /* @__PURE__ */ h("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
+  const F = (w, R) => /* @__PURE__ */ u("span", { style: { fontWeight: R ? "bold" : "normal" }, children: [
     w.name,
-    w.role && /* @__PURE__ */ h("span", { style: L.itemRole, children: [
+    w.role && /* @__PURE__ */ u("span", { style: L.itemRole, children: [
       "(",
       w.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ h("div", { ref: N, className: i, style: L.wrapper, children: [
-    /* @__PURE__ */ h(
+  return /* @__PURE__ */ u("div", { ref: N, className: i, style: L.wrapper, children: [
+    /* @__PURE__ */ u(
       "button",
       {
         type: "button",
@@ -4096,7 +4126,7 @@ function Yr({
         "div",
         {
           className: a,
-          onClick: () => u(w.id),
+          onClick: () => d(w.id),
           style: {
             ...L.item,
             ...R ? L.itemSelected : {}
@@ -4112,14 +4142,14 @@ function Yr({
               });
             }
           },
-          children: d ? d(w, R) : F(w, R)
+          children: h ? h(w, R) : F(w, R)
         },
         w.id
       );
     }) })
   ] });
 }
-class Xr {
+class Yr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4187,7 +4217,7 @@ class Xr {
     };
   }
 }
-class en {
+class Xr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -4238,7 +4268,7 @@ class en {
     });
   }
 }
-class tn {
+class en {
   constructor(e) {
     this.httpService = e;
   }
@@ -4247,7 +4277,7 @@ class tn {
     return await this.httpService.get("/health");
   }
 }
-class rn {
+class tn {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -4369,61 +4399,61 @@ class rn {
     }), t;
   }
 }
-const rt = "returnTo", Me = "zone_return_to", Le = "zone_return_to";
-function nn(n = {}) {
+const tt = "returnTo", Ee = "zone_return_to", Ie = "zone_return_to";
+function rn(n = {}) {
   const {
     zoneRoots: e = {},
-    returnToParam: t = rt,
+    returnToParam: t = tt,
     returnToStorage: r = "url"
-  } = n, i = mt(), [o, a] = yt(), { isAuthenticated: d, currentUser: f } = he(), { tenant: y } = Te(), c = J(() => ({ ...Oe, ...e }), [e]), L = !!y, m = f == null ? void 0 : f.userType, T = J(() => {
+  } = n, i = gt(), [o, a] = mt(), { isAuthenticated: h, currentUser: f } = ue(), { tenant: y } = ve(), c = K(() => ({ ...He, ...e }), [e]), L = !!y, m = f == null ? void 0 : f.userType, T = K(() => {
     switch (r) {
       case "url":
         return o.get(t);
       case "session":
-        return sessionStorage.getItem(Me);
+        return sessionStorage.getItem(Ee);
       case "local":
-        return localStorage.getItem(Le);
+        return localStorage.getItem(Ie);
       default:
         return null;
     }
-  }, [r, o, t]), A = oe(() => {
+  }, [r, o, t]), A = ie(() => {
     switch (r) {
       case "url": {
-        const u = new URLSearchParams(o);
-        u.delete(t), a(u, { replace: !0 });
+        const d = new URLSearchParams(o);
+        d.delete(t), a(d, { replace: !0 });
         break;
       }
       case "session":
-        sessionStorage.removeItem(Me);
+        sessionStorage.removeItem(Ee);
         break;
       case "local":
-        localStorage.removeItem(Le);
+        localStorage.removeItem(Ie);
         break;
     }
-  }, [r, o, t, a]), N = oe(
-    (u) => {
+  }, [r, o, t, a]), N = ie(
+    (d) => {
       switch (r) {
         case "url": {
           const v = new URLSearchParams(o);
-          v.set(t, u), a(v, { replace: !0 });
+          v.set(t, d), a(v, { replace: !0 });
           break;
         }
         case "session":
-          sessionStorage.setItem(Me, u);
+          sessionStorage.setItem(Ee, d);
           break;
         case "local":
-          localStorage.setItem(Le, u);
+          localStorage.setItem(Ie, d);
           break;
       }
     },
     [r, o, t, a]
-  ), M = oe(
-    (u) => {
-      const v = c[u] || c.default;
+  ), M = ie(
+    (d) => {
+      const v = c[d] || c.default;
       i(v);
     },
     [i, c]
-  ), P = oe(() => L ? d ? m === ae.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : d ? m === ae.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [L, d, m, c]);
+  ), P = ie(() => L ? h ? m === oe.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : h ? m === oe.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [L, h, m, c]);
   return {
     returnToUrl: T,
     clearReturnTo: A,
@@ -4432,76 +4462,76 @@ function nn(n = {}) {
     getSmartRedirect: P
   };
 }
-function sn(n, e, t = rt, r = "url") {
+function nn(n, e, t = tt, r = "url") {
   if (!e || r !== "url")
     return n;
   const i = new URL(n, window.location.origin);
   return i.searchParams.set(t, e), i.pathname + i.search;
 }
 export {
-  $r as AdminZone,
-  rn as ApiMappers,
-  Ve as AppApiService,
-  Jr as AppLoader,
-  br as AppProvider,
-  vt as AuthApiService,
-  xr as AuthProvider,
-  Ur as AuthenticatedZone,
-  et as DEFAULT_ZONE_PRESETS,
-  Oe as DEFAULT_ZONE_ROOTS,
-  Vr as FeatureFlag,
-  It as FeatureFlagApiService,
-  Ar as FeatureFlagProvider,
-  Br as GuestZone,
-  tn as HealthApiService,
-  de as HttpService,
-  Nr as LandingRoute,
-  Wr as LoginForm,
-  Gr as MagicLinkForm,
-  Kr as MagicLinkVerify,
-  Hr as OpenZone,
-  Qr as PasswordRecoveryForm,
-  Xr as PermissionApiService,
-  Ir as Protected,
-  Mr as ProtectedRoute,
-  Dr as PublicZone,
-  We as RoleApiService,
-  Rr as RoutingProvider,
-  se as SessionExpiredError,
-  be as SessionManager,
-  jr as SignupForm,
-  Lt as SubscriptionApiService,
+  Ur as AdminZone,
+  tn as ApiMappers,
+  _e as AppApiService,
+  Qr as AppLoader,
+  wr as AppProvider,
+  bt as AuthApiService,
+  kr as AuthProvider,
+  Dr as AuthenticatedZone,
+  Xe as DEFAULT_ZONE_PRESETS,
+  He as DEFAULT_ZONE_ROOTS,
+  _r as FeatureFlag,
+  Et as FeatureFlagApiService,
+  xr as FeatureFlagProvider,
+  Cr as GuestZone,
+  en as HealthApiService,
+  ce as HttpService,
+  Lr as LandingRoute,
+  Vr as LoginForm,
+  jr as MagicLinkForm,
+  Gr as MagicLinkVerify,
+  $r as OpenZone,
+  Jr as PasswordRecoveryForm,
+  Yr as PermissionApiService,
+  Er as Protected,
+  Ir as ProtectedRoute,
+  Fr as PublicZone,
+  Ve as RoleApiService,
+  Pr as RoutingProvider,
+  ne as SessionExpiredError,
+  Le as SessionManager,
+  Wr as SignupForm,
+  Mt as SubscriptionApiService,
   zr as SubscriptionGuard,
-  en as SubscriptionPlanApiService,
-  Pr as SubscriptionProvider,
-  ve as TenantApiService,
-  Or as TenantAuthenticatedZone,
-  _r as TenantGuestZone,
-  qr as TenantOpenZone,
-  Sr as TenantProvider,
-  Lr as TenantRoute,
-  Yr as TenantSelector,
-  Fr as TenantZone,
-  bt as TokenRefreshError,
-  wt as TokenRefreshTimeoutError,
-  St as UserApiService,
-  ae as UserType,
-  Cr as UserZone,
-  ue as ZoneRoute,
-  sn as buildRedirectUrl,
-  vr as useApi,
-  Ae as useApp,
-  Zr as useAppLoaderState,
-  he as useAuth,
-  Mt as useFeatureFlags,
-  Er as useRouting,
-  Ft as useRoutingOptional,
-  kr as useSettings,
-  Nt as useSubscription,
-  Te as useTenant,
-  Ze as useTenantInfo,
-  pe as useTenantOptional,
-  Tr as useTenantSettings,
-  nn as useZoneNavigation
+  Xr as SubscriptionPlanApiService,
+  Ar as SubscriptionProvider,
+  we as TenantApiService,
+  Hr as TenantAuthenticatedZone,
+  qr as TenantGuestZone,
+  Or as TenantOpenZone,
+  vr as TenantProvider,
+  Mr as TenantRoute,
+  Zr as TenantSelector,
+  Nr as TenantZone,
+  wt as TokenRefreshError,
+  yt as TokenRefreshTimeoutError,
+  vt as UserApiService,
+  oe as UserType,
+  Br as UserZone,
+  de as ZoneRoute,
+  nn as buildRedirectUrl,
+  br as useApi,
+  ke as useApp,
+  Kr as useAppLoaderState,
+  ue as useAuth,
+  It as useFeatureFlags,
+  Rr as useRouting,
+  Nt as useRoutingOptional,
+  Tr as useSettings,
+  Lt as useSubscription,
+  ve as useTenant,
+  Ke as useTenantInfo,
+  he as useTenantOptional,
+  Sr as useTenantSettings,
+  rn as useZoneNavigation
 };
 //# sourceMappingURL=index.es.js.map