@skylabs-digital/react-identity-access 2.4.0 → 2.5.0

package/dist/index.es.js

@@ -1,4 +1,4 @@
-import { jsx as n, Fragment as B, jsxs as c } from "react/jsx-runtime";
+import { jsx as n, Fragment as q, jsxs as l } from "react/jsx-runtime";
 import { createContext as he, useMemo as X, useState as v, useCallback as ne, useEffect as te, useContext as ce, useRef as qe } from "react";
 import { useLocation as be, Navigate as pe } from "react-router-dom";
 class re {
@@ -16,27 +16,27 @@ class re {
     return this.executeRequest(e, t, r, s, !1);
   }
   async executeRequest(e, t, r, s, o = !1) {
-    const g = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, w = (s == null ? void 0 : s.timeout) || this.timeout;
-    let x = {
+    const h = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, w = (s == null ? void 0 : s.timeout) || this.timeout;
+    let k = {
       "Content-Type": "application/json",
       ...s == null ? void 0 : s.headers
     };
     if (!(s != null && s.skipAuth) && this.sessionManager)
       try {
         const m = await this.sessionManager.getAuthHeaders();
-        x = { ...x, ...m };
+        k = { ...k, ...m };
       } catch (m) {
         console.warn("Failed to inject auth headers:", m);
       }
-    const b = new AbortController(), A = setTimeout(() => b.abort(), w);
+    const b = new AbortController(), P = setTimeout(() => b.abort(), w);
     try {
-      const m = await fetch(g, {
+      const m = await fetch(h, {
         method: e,
-        headers: x,
+        headers: k,
         body: r ? JSON.stringify(r) : void 0,
         signal: b.signal
       });
-      if (clearTimeout(A), m.status === 401 && !(s != null && s.skipRetry) && !o && this.sessionManager)
+      if (clearTimeout(P), m.status === 401 && !(s != null && s.skipRetry) && !o && this.sessionManager)
         try {
           const u = this.sessionManager.getTokens();
           if (u != null && u.refreshToken)
@@ -46,10 +46,10 @@ class re {
         }
       if (!m.ok)
         throw new Error(`HTTP ${m.status}: ${m.statusText}`);
-      const f = m.headers.get("content-type");
-      return !f || !f.includes("application/json") ? {} : await m.json();
+      const p = m.headers.get("content-type");
+      return !p || !p.includes("application/json") ? {} : await m.json();
     } catch (m) {
-      throw clearTimeout(A), m instanceof Error && m.name === "AbortError" ? new Error(`Request timeout after ${w}ms`) : m;
+      throw clearTimeout(P), m instanceof Error && m.name === "AbortError" ? new Error(`Request timeout after ${w}ms`) : m;
     }
   }
   async get(e, t) {
@@ -128,9 +128,9 @@ const Pe = he(null);
 function Ct({ config: i, children: e }) {
   const t = X(
     () => {
-      var f, u, y;
+      var p, u, y;
       return {
-        enabled: ((f = i.cache) == null ? void 0 : f.enabled) ?? !0,
+        enabled: ((p = i.cache) == null ? void 0 : p.enabled) ?? !0,
         ttl: ((u = i.cache) == null ? void 0 : u.ttl) ?? 3e5,
         // 5 minutes default
         storageKey: ((y = i.cache) == null ? void 0 : y.storageKey) ?? `app_cache_${i.appId}`
@@ -140,16 +140,16 @@ function Ct({ config: i, children: e }) {
   ), [r, s] = v(() => {
     if (!t.enabled) return null;
     try {
-      const f = localStorage.getItem(t.storageKey);
-      if (!f) return null;
-      const u = JSON.parse(f);
+      const p = localStorage.getItem(t.storageKey);
+      if (!p) return null;
+      const u = JSON.parse(p);
       return Date.now() - u.timestamp < t.ttl && u.appId === i.appId ? u.data : (localStorage.removeItem(t.storageKey), null);
     } catch {
       return null;
     }
-  }), [o, g] = v(!r), [w, x] = v(null), b = X(() => {
-    const f = () => {
-      A();
+  }), [o, h] = v(!r), [w, k] = v(null), b = X(() => {
+    const p = () => {
+      P();
     };
     return {
       appId: i.appId,
@@ -158,55 +158,55 @@ function Ct({ config: i, children: e }) {
       appInfo: r,
       isAppLoading: o,
       appError: w,
-      retryApp: f
+      retryApp: p
     };
-  }, [i, r, o, w]), A = ne(
-    async (f = !1) => {
-      if (!(!f && t.enabled && r))
+  }, [i, r, o, w]), P = ne(
+    async (p = !1) => {
+      if (!(!p && t.enabled && r))
         try {
-          g(!0), x(null);
-          const u = new re(i.baseUrl), E = await new ve(u, {}).getPublicAppInfo(i.appId);
-          if (s(E), t.enabled)
+          h(!0), k(null);
+          const u = new re(i.baseUrl), L = await new ve(u, {}).getPublicAppInfo(i.appId);
+          if (s(L), t.enabled)
             try {
-              const C = {
-                data: E,
+              const R = {
+                data: L,
                 timestamp: Date.now(),
                 appId: i.appId
               };
-              localStorage.setItem(t.storageKey, JSON.stringify(C));
-            } catch (C) {
-              console.warn("Failed to cache app info:", C);
+              localStorage.setItem(t.storageKey, JSON.stringify(R));
+            } catch (R) {
+              console.warn("Failed to cache app info:", R);
             }
         } catch (u) {
           const y = u instanceof Error ? u : new Error("Failed to load app information");
-          x(y), s(null);
+          k(y), s(null);
         } finally {
-          g(!1);
+          h(!1);
         }
     },
     [i.baseUrl, i.appId, t, r]
   ), m = ne(async () => {
     if (!(!t.enabled || !r))
       try {
-        const f = localStorage.getItem(t.storageKey);
-        if (!f) return;
-        const u = JSON.parse(f);
+        const p = localStorage.getItem(t.storageKey);
+        if (!p) return;
+        const u = JSON.parse(p);
         if (Date.now() - u.timestamp > t.ttl * 0.5) {
-          const E = new re(i.baseUrl), q = await new ve(E, {}).getPublicAppInfo(i.appId);
-          s(q);
-          const T = {
-            data: q,
+          const L = new re(i.baseUrl), z = await new ve(L, {}).getPublicAppInfo(i.appId);
+          s(z);
+          const M = {
+            data: z,
             timestamp: Date.now(),
             appId: i.appId
           };
-          localStorage.setItem(t.storageKey, JSON.stringify(T));
+          localStorage.setItem(t.storageKey, JSON.stringify(M));
         }
-      } catch (f) {
-        console.warn("Background app refresh failed:", f);
+      } catch (p) {
+        console.warn("Background app refresh failed:", p);
       }
   }, [i, t, r]);
   return te(() => {
-    r ? m() : A();
+    r ? m() : P();
   }, []), /* @__PURE__ */ n(Pe.Provider, { value: b, children: e });
 }
 function oe() {
@@ -215,7 +215,7 @@ function oe() {
     throw new Error("useApp must be used within an AppProvider");
   return i;
 }
-const $t = oe;
+const Ft = oe;
 class we {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey);
@@ -414,7 +414,7 @@ class ze {
     });
   }
 }
-class xe {
+class ke {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -481,12 +481,12 @@ class xe {
       throw new Error("SessionManager is required for private endpoints");
     const r = await this.sessionManager.getAuthHeaders(), s = new URLSearchParams();
     t != null && t.page && s.append("page", t.page.toString()), t != null && t.limit && s.append("limit", t.limit.toString()), t != null && t.sortBy && s.append("sortBy", t.sortBy), t != null && t.sortOrder && s.append("sortOrder", t.sortOrder);
-    const o = `/roles/user/${e}${s.toString() ? `?${s.toString()}` : ""}`, g = await this.httpService.get(o, {
+    const o = `/roles/user/${e}${s.toString() ? `?${s.toString()}` : ""}`, h = await this.httpService.get(o, {
       headers: r
     });
     return {
-      roles: g.data,
-      meta: g.meta
+      roles: h.data,
+      meta: h.meta
     };
   }
 }
@@ -616,8 +616,8 @@ function We(i, e) {
     if (o === s || o === `www.${s}`)
       return null;
     if (o.endsWith(`.${s}`)) {
-      const g = o.slice(0, -(s.length + 1));
-      return g === "www" ? null : g;
+      const h = o.slice(0, -(s.length + 1));
+      return h === "www" ? null : h;
     }
     return null;
   }
@@ -680,7 +680,7 @@ function Ye() {
   }), window.history.replaceState({}, "", i.toString());
 }
 const Se = he(null);
-function Dt({ config: i, children: e }) {
+function $t({ config: i, children: e }) {
   const { baseUrl: t, appInfo: r, appId: s } = oe(), o = ne(() => typeof window > "u" ? null : je(
     {
       tenantMode: i.tenantMode || "selector",
@@ -692,114 +692,114 @@ function Dt({ config: i, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [i.tenantMode, i.baseDomain, i.selectorParam]), [g, w] = v(() => o()), x = X(
+  ), [i.tenantMode, i.baseDomain, i.selectorParam]), [h, w] = v(() => o()), k = X(
     () => {
-      var l, I, k;
+      var c, I, S;
       return {
-        enabled: ((l = i.cache) == null ? void 0 : l.enabled) ?? !0,
+        enabled: ((c = i.cache) == null ? void 0 : c.enabled) ?? !0,
         ttl: ((I = i.cache) == null ? void 0 : I.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
-        storageKey: ((k = i.cache) == null ? void 0 : k.storageKey) ?? `tenant_cache_${g || "default"}`
+        storageKey: ((S = i.cache) == null ? void 0 : S.storageKey) ?? `tenant_cache_${h || "default"}`
       };
     },
-    [i.cache, g]
-  ), [b, A] = v(() => {
+    [i.cache, h]
+  ), [b, P] = v(() => {
     if (i.initialTenant) return i.initialTenant;
-    if (!x.enabled || !g) return null;
+    if (!k.enabled || !h) return null;
     try {
-      const l = localStorage.getItem(x.storageKey);
-      if (!l) return null;
-      const I = JSON.parse(l);
-      return Date.now() - I.timestamp < x.ttl && I.tenantSlug === g ? I.data : (localStorage.removeItem(x.storageKey), null);
+      const c = localStorage.getItem(k.storageKey);
+      if (!c) return null;
+      const I = JSON.parse(c);
+      return Date.now() - I.timestamp < k.ttl && I.tenantSlug === h ? I.data : (localStorage.removeItem(k.storageKey), null);
     } catch {
       return null;
     }
-  }), [m, f] = v(!b && !i.initialTenant), [u, y] = v(null), [E, C] = v(null), [q, T] = v(!1), [d, P] = v(null);
+  }), [m, p] = v(!b && !i.initialTenant), [u, y] = v(null), [L, R] = v(null), [z, M] = v(!1), [A, d] = v(null);
   te(() => {
-    const l = o();
-    w(l);
+    const c = o();
+    w(c);
   }, [o]);
-  const R = (r == null ? void 0 : r.settingsSchema) || null, z = ne(
-    async (l, I = !1) => {
-      if (!(!I && x.enabled && b && b.domain === l))
+  const C = (r == null ? void 0 : r.settingsSchema) || null, F = ne(
+    async (c, I = !1) => {
+      if (!(!I && k.enabled && b && b.domain === c))
         try {
-          f(!0), y(null);
-          const k = new re(t), a = await new ue(k, s).getPublicTenantInfo(l);
-          if (A(a), x.enabled)
+          p(!0), y(null);
+          const S = new re(t), a = await new ue(S, s).getPublicTenantInfo(c);
+          if (P(a), k.enabled)
             try {
-              const p = {
+              const f = {
                 data: a,
                 timestamp: Date.now(),
-                tenantSlug: l
+                tenantSlug: c
               };
-              localStorage.setItem(x.storageKey, JSON.stringify(p));
-            } catch (p) {
-              console.warn("Failed to cache tenant info:", p);
+              localStorage.setItem(k.storageKey, JSON.stringify(f));
+            } catch (f) {
+              console.warn("Failed to cache tenant info:", f);
             }
-        } catch (k) {
-          const h = k instanceof Error ? k : new Error("Failed to load tenant information");
-          y(h), A(null);
+        } catch (S) {
+          const g = S instanceof Error ? S : new Error("Failed to load tenant information");
+          y(g), P(null);
         } finally {
-          f(!1);
+          p(!1);
         }
     },
-    [t, s, x, b]
+    [t, s, k, b]
   ), G = ne(async () => {
-    if (!(!x.enabled || !b || !g))
+    if (!(!k.enabled || !b || !h))
       try {
-        const l = localStorage.getItem(x.storageKey);
-        if (!l) return;
-        const I = JSON.parse(l);
-        if (Date.now() - I.timestamp > x.ttl * 0.5) {
-          const h = new re(t), p = await new ue(h, s).getPublicTenantInfo(g);
-          A(p);
+        const c = localStorage.getItem(k.storageKey);
+        if (!c) return;
+        const I = JSON.parse(c);
+        if (Date.now() - I.timestamp > k.ttl * 0.5) {
+          const g = new re(t), f = await new ue(g, s).getPublicTenantInfo(h);
+          P(f);
           const O = {
-            data: p,
+            data: f,
             timestamp: Date.now(),
-            tenantSlug: g
+            tenantSlug: h
           };
-          localStorage.setItem(x.storageKey, JSON.stringify(O));
+          localStorage.setItem(k.storageKey, JSON.stringify(O));
         }
-      } catch (l) {
-        console.warn("Background tenant refresh failed:", l);
+      } catch (c) {
+        console.warn("Background tenant refresh failed:", c);
       }
-  }, [t, s, x, b, g]), $ = ne(async () => {
+  }, [t, s, k, b, h]), U = ne(async () => {
     if (b != null && b.id)
       try {
-        T(!0), P(null);
-        const l = new re(t), k = await new ue(l, b.appId).getTenantSettings(b.id);
-        C(k);
-      } catch (l) {
-        const I = l instanceof Error ? l : new Error("Failed to load tenant settings");
-        P(I), C(null);
+        M(!0), d(null);
+        const c = new re(t), S = await new ue(c, b.appId).getTenantSettings(b.id);
+        R(S);
+      } catch (c) {
+        const I = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        d(I), R(null);
       } finally {
-        T(!1);
+        M(!1);
       }
   }, [t, b]), _ = ne(() => {
-    $();
-  }, [$]), S = ne(
-    (l) => {
-      if (!R)
+    U();
+  }, [U]), x = ne(
+    (c) => {
+      if (!C)
         return { isValid: !0, errors: [] };
       const I = [];
       try {
-        return R.properties && Object.entries(R.properties).forEach(([k, h]) => {
-          var p;
-          const a = l[k];
-          if ((p = R.required) != null && p.includes(k) && a == null) {
-            I.push(`Field '${k}' is required`);
+        return C.properties && Object.entries(C.properties).forEach(([S, g]) => {
+          var f;
+          const a = c[S];
+          if ((f = C.required) != null && f.includes(S) && a == null) {
+            I.push(`Field '${S}' is required`);
             return;
           }
           if (a != null) {
-            if (h.type) {
-              const O = h.type, K = typeof a;
-              O === "string" && K !== "string" ? I.push(`Field '${k}' must be a string`) : (O === "number" || O === "integer") && K !== "number" ? I.push(`Field '${k}' must be a number`) : O === "boolean" && K !== "boolean" ? I.push(`Field '${k}' must be a boolean`) : O === "array" && !Array.isArray(a) && I.push(`Field '${k}' must be an array`);
+            if (g.type) {
+              const O = g.type, K = typeof a;
+              O === "string" && K !== "string" ? I.push(`Field '${S}' must be a string`) : (O === "number" || O === "integer") && K !== "number" ? I.push(`Field '${S}' must be a number`) : O === "boolean" && K !== "boolean" ? I.push(`Field '${S}' must be a boolean`) : O === "array" && !Array.isArray(a) && I.push(`Field '${S}' must be an array`);
             }
-            h.minLength !== void 0 && typeof a == "string" && a.length < h.minLength && I.push(
-              `Field '${k}' must be at least ${h.minLength} characters long`
-            ), h.maxLength !== void 0 && typeof a == "string" && a.length > h.maxLength && I.push(
-              `Field '${k}' must be no more than ${h.maxLength} characters long`
-            ), h.minimum !== void 0 && typeof a == "number" && a < h.minimum && I.push(`Field '${k}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof a == "number" && a > h.maximum && I.push(`Field '${k}' must be no more than ${h.maximum}`), h.pattern && typeof a == "string" && (new RegExp(h.pattern).test(a) || I.push(`Field '${k}' does not match the required pattern`)), h.enum && !h.enum.includes(a) && I.push(`Field '${k}' must be one of: ${h.enum.join(", ")}`);
+            g.minLength !== void 0 && typeof a == "string" && a.length < g.minLength && I.push(
+              `Field '${S}' must be at least ${g.minLength} characters long`
+            ), g.maxLength !== void 0 && typeof a == "string" && a.length > g.maxLength && I.push(
+              `Field '${S}' must be no more than ${g.maxLength} characters long`
+            ), g.minimum !== void 0 && typeof a == "number" && a < g.minimum && I.push(`Field '${S}' must be at least ${g.minimum}`), g.maximum !== void 0 && typeof a == "number" && a > g.maximum && I.push(`Field '${S}' must be no more than ${g.maximum}`), g.pattern && typeof a == "string" && (new RegExp(g.pattern).test(a) || I.push(`Field '${S}' does not match the required pattern`)), g.enum && !g.enum.includes(a) && I.push(`Field '${S}' must be one of: ${g.enum.join(", ")}`);
           }
         }), {
           isValid: I.length === 0,
@@ -812,19 +812,19 @@ function Dt({ config: i, children: e }) {
         };
       }
     },
-    [R]
+    [C]
   );
   te(() => {
-    !i.initialTenant && g ? b ? G() : z(g) : !i.initialTenant && !g && (A(null), y(null), f(!1));
-  }, [i.initialTenant, g, b, z, G]), te(() => {
-    b != null && b.id ? $() : (C(null), P(null), T(!1));
-  }, [b == null ? void 0 : b.id, $]);
-  const M = ne(
-    (l, I) => {
-      const { mode: k = "reload", tokens: h, redirectPath: a } = I || {}, p = i.tenantMode || "selector";
-      if (localStorage.setItem("tenant", l), p === "subdomain") {
+    !i.initialTenant && h ? b ? G() : F(h) : !i.initialTenant && !h && (P(null), y(null), p(!1));
+  }, [i.initialTenant, h, b, F, G]), te(() => {
+    b != null && b.id ? U() : (R(null), d(null), M(!1));
+  }, [b == null ? void 0 : b.id, U]);
+  const T = ne(
+    (c, I) => {
+      const { mode: S = "reload", tokens: g, redirectPath: a } = I || {}, f = i.tenantMode || "selector";
+      if (localStorage.setItem("tenant", c), f === "subdomain") {
         const O = window.location.hostname, K = _e(
-          l,
+          c,
           O,
           i.baseDomain
         );
@@ -836,54 +836,54 @@ function Dt({ config: i, children: e }) {
           return;
         }
         const H = a || window.location.pathname, N = new URL(`${window.location.protocol}//${K}${H}`);
-        new URLSearchParams(window.location.search).forEach((D, J) => {
-          J !== fe && N.searchParams.set(J, D);
-        }), h && N.searchParams.set(fe, Ge(h)), window.location.href = N.toString();
-      } else if (p === "selector") {
+        new URLSearchParams(window.location.search).forEach(($, J) => {
+          J !== fe && N.searchParams.set(J, $);
+        }), g && N.searchParams.set(fe, Ge(g)), window.location.href = N.toString();
+      } else if (f === "selector") {
         const O = a || window.location.pathname, K = new URLSearchParams(window.location.search);
-        if (K.set(i.selectorParam || "tenant", l), k === "reload") {
+        if (K.set(i.selectorParam || "tenant", c), S === "reload") {
           const H = `${O}?${K.toString()}${window.location.hash}`;
           window.location.href = H;
         } else {
           const H = `${O}?${K.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", H), w(l), z(l);
+          window.history.pushState({}, "", H), w(c), F(c);
         }
       }
     },
-    [i.tenantMode, i.selectorParam, i.baseDomain, z]
-  ), L = X(() => ({
+    [i.tenantMode, i.selectorParam, i.baseDomain, F]
+  ), E = X(() => ({
     // Tenant info
     tenant: b,
-    tenantSlug: g,
+    tenantSlug: h,
     isTenantLoading: m,
     tenantError: u,
     retryTenant: () => {
-      g && z(g);
+      h && F(h);
     },
     // Settings
-    settings: E,
-    settingsSchema: R,
-    isSettingsLoading: q,
-    settingsError: d,
+    settings: L,
+    settingsSchema: C,
+    isSettingsLoading: z,
+    settingsError: A,
     // Actions
     refreshSettings: _,
-    switchTenant: M,
+    switchTenant: T,
     // Validation
-    validateSettings: S
+    validateSettings: x
   }), [
     b,
-    g,
+    h,
     m,
     u,
-    E,
-    R,
-    q,
-    d,
+    L,
+    C,
+    z,
+    A,
     _,
-    M,
-    S
+    T,
+    x
   ]);
-  return /* @__PURE__ */ n(Se.Provider, { value: L, children: e });
+  return /* @__PURE__ */ n(Se.Provider, { value: E, children: e });
 }
 function me() {
   const i = ce(Se);
@@ -894,7 +894,7 @@ function me() {
 function Me() {
   return ce(Se);
 }
-const Ft = me;
+const Dt = me;
 function Ht() {
   const { settings: i, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: s } = me();
   return {
@@ -917,44 +917,62 @@ function se() {
 }
 const Ie = he(null);
 function Nt({ config: i = {}, children: e }) {
-  const { appId: t, baseUrl: r } = oe(), { tenant: s, tenantSlug: o, switchTenant: g } = me(), [w, x] = v(i.initialRoles || []), [b, A] = v(!i.initialRoles), [m, f] = v(null), [u, y] = v(!1), [E, C] = v(null), [q, T] = v(0), d = X(() => new we({
-    tenantSlug: o,
-    // SessionManager will generate storageKey internally
-    onRefreshFailed: i.onRefreshFailed,
-    baseUrl: r
-  }), [o, r, i.onRefreshFailed]), P = X(() => {
+  const { appId: t, baseUrl: r } = oe(), { tenant: s, tenantSlug: o, switchTenant: h } = me(), [w, k] = v(i.initialRoles || []), [b, P] = v(!i.initialRoles), [m, p] = v(null), [u, y] = v(!1), [L, R] = v(null), [z, M] = v(0), A = qe({
+    processed: !1,
+    tokens: null
+  });
+  A.current.processed || (A.current.processed = !0, A.current.tokens = Je(), console.log("[AuthProvider] SYNC: URL tokens extracted on init", {
+    found: !!A.current.tokens,
+    url: typeof window < "u" ? window.location.href : "SSR"
+  }));
+  const d = X(() => {
+    const a = new we({
+      tenantSlug: o,
+      // SessionManager will generate storageKey internally
+      onRefreshFailed: i.onRefreshFailed,
+      baseUrl: r
+    });
+    return A.current.tokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), a.setTokens({
+      accessToken: A.current.tokens.accessToken,
+      refreshToken: A.current.tokens.refreshToken,
+      expiresIn: A.current.tokens.expiresIn
+    }), console.log(
+      "[AuthProvider] SYNC: Session valid after saving tokens:",
+      a.hasValidSession()
+    )), a;
+  }, [o, r, i.onRefreshFailed]), C = X(() => {
     const a = new re(r);
     return a.setSessionManager(d), a;
-  }, [r, d]), R = X(() => new ze(new re(r)), [r]), z = X(() => new Oe(P, d), [P, d]), G = X(() => new xe(new re(r)), [r]), $ = X(() => m || d.getUser(), [m, d]), _ = X(() => $ != null && $.roleId && w.find((a) => a.id === $.roleId) || null, [$, w]), S = X(() => (_ == null ? void 0 : _.permissions) || [], [_]), M = X(() => d.hasValidSession() && m !== null, [d, m]), L = 5 * 60 * 1e3, l = X(() => {
-    const a = async (F = !1) => {
+  }, [r, d]), F = X(() => new ze(new re(r)), [r]), G = X(() => new Oe(C, d), [C, d]), U = X(() => new ke(new re(r)), [r]), _ = X(() => m || d.getUser(), [m, d]), x = X(() => _ != null && _.roleId && w.find((a) => a.id === _.roleId) || null, [_, w]), T = X(() => (x == null ? void 0 : x.permissions) || [], [x]), E = X(() => d.hasValidSession() && m !== null, [d, m]), c = 5 * 60 * 1e3, I = X(() => {
+    const a = async (D = !1) => {
       try {
         if (!d.hasValidSession())
           return;
-        const U = Date.now();
-        if (!F && U - q < L && m)
+        const B = Date.now();
+        if (!D && B - z < c && m)
           return;
         const V = d.getUserId();
         if (!V) {
           console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        y(!0), C(null);
-        const Z = await z.getUserById(V);
-        f(Z), d.setUser(Z), T(Date.now());
-      } catch (U) {
-        const Y = U instanceof Error ? U : new Error("Failed to load user data");
-        C(Y), console.error("[AuthProvider] Failed to load user data:", Y);
+        y(!0), R(null);
+        const Z = await G.getUserById(V);
+        p(Z), d.setUser(Z), M(Date.now());
+      } catch (B) {
+        const Y = B instanceof Error ? B : new Error("Failed to load user data");
+        R(Y), console.error("[AuthProvider] Failed to load user data:", Y);
       } finally {
         y(!1);
       }
-    }, p = async () => {
+    }, f = async () => {
       await a();
-    }, O = async (F) => {
-      const { username: U, password: Y, tenantSlug: V } = F;
+    }, O = async (D) => {
+      const { username: B, password: Y, tenantSlug: V } = D;
       let Z = s == null ? void 0 : s.id, Q = o, ee = d;
-      V && (Z = (await new ue(P, t).getPublicTenantInfo(V)).id, Q = V);
-      const j = await R.login({
-        username: U,
+      V && (Z = (await new ue(C, t).getPublicTenantInfo(V)).id, Q = V);
+      const j = await F.login({
+        username: B,
         password: Y,
         appId: t,
         tenantId: Z
@@ -967,29 +985,29 @@ function Nt({ config: i = {}, children: e }) {
         refreshToken: j.refreshToken,
         expiresIn: j.expiresIn
       }), j.user) {
-        ee.setUser(j.user), f(j.user);
+        ee.setUser(j.user), p(j.user);
         try {
           await a();
         } catch (de) {
           console.warn("Failed to load complete user data after login:", de);
         }
       }
-      return le && Q && Q !== o && g(Q, {
+      return le && Q && Q !== o && h(Q, {
         tokens: {
           accessToken: j.accessToken,
           refreshToken: j.refreshToken,
           expiresIn: j.expiresIn
         }
       }), j;
-    }, K = async (F) => {
-      const { email: U, phoneNumber: Y, name: V, password: Z, lastName: Q, tenantId: ee } = F;
-      if (!U && !Y)
+    }, K = async (D) => {
+      const { email: B, phoneNumber: Y, name: V, password: Z, lastName: Q, tenantId: ee } = D;
+      if (!B && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!V || !Z)
         throw new Error("Name and password are required");
       const j = ee ?? (s == null ? void 0 : s.id);
-      return await R.signup({
-        email: U,
+      return await F.signup({
+        email: B,
         phoneNumber: Y,
         name: V,
         password: Z,
@@ -997,14 +1015,14 @@ function Nt({ config: i = {}, children: e }) {
         lastName: Q,
         appId: t
       });
-    }, H = async (F) => {
-      const { email: U, phoneNumber: Y, name: V, password: Z, tenantName: Q, lastName: ee } = F;
-      if (!U && !Y)
+    }, H = async (D) => {
+      const { email: B, phoneNumber: Y, name: V, password: Z, tenantName: Q, lastName: ee } = D;
+      if (!B && !Y)
         throw new Error("Either email or phoneNumber is required");
       if (!V || !Z || !Q)
         throw new Error("Name, password, and tenantName are required");
-      return await R.signupTenantAdmin({
-        email: U,
+      return await F.signupTenantAdmin({
+        email: B,
         phoneNumber: Y,
         name: V,
         password: Z,
@@ -1012,35 +1030,35 @@ function Nt({ config: i = {}, children: e }) {
         appId: t,
         lastName: ee
       });
-    }, N = async (F) => {
-      const { currentPassword: U, newPassword: Y } = F, V = await d.getAuthHeaders();
-      await R.changePassword({ currentPassword: U, newPassword: Y }, V);
-    }, W = async (F) => {
-      const { email: U, tenantId: Y } = F, V = Y ?? (s == null ? void 0 : s.id);
+    }, N = async (D) => {
+      const { currentPassword: B, newPassword: Y } = D, V = await d.getAuthHeaders();
+      await F.changePassword({ currentPassword: B, newPassword: Y }, V);
+    }, W = async (D) => {
+      const { email: B, tenantId: Y } = D, V = Y ?? (s == null ? void 0 : s.id);
       if (!V)
         throw new Error("tenantId is required for password reset");
-      await R.requestPasswordReset({ email: U, tenantId: V });
-    }, D = async (F) => {
-      const { token: U, newPassword: Y } = F;
-      await R.confirmPasswordReset({ token: U, newPassword: Y });
-    }, J = async (F) => {
-      const { email: U, frontendUrl: Y, name: V, lastName: Z, tenantId: Q } = F, ee = Q ?? (s == null ? void 0 : s.id);
+      await F.requestPasswordReset({ email: B, tenantId: V });
+    }, $ = async (D) => {
+      const { token: B, newPassword: Y } = D;
+      await F.confirmPasswordReset({ token: B, newPassword: Y });
+    }, J = async (D) => {
+      const { email: B, frontendUrl: Y, name: V, lastName: Z, tenantId: Q } = D, ee = Q ?? (s == null ? void 0 : s.id);
       if (!ee)
         throw new Error("tenantId is required for magic link authentication");
-      return await R.sendMagicLink({
-        email: U,
+      return await F.sendMagicLink({
+        email: B,
         tenantId: ee,
         frontendUrl: Y,
         name: V,
         lastName: Z,
         appId: t
       });
-    }, ge = async (F) => {
-      const { token: U, email: Y, tenantSlug: V } = F;
+    }, ge = async (D) => {
+      const { token: B, email: Y, tenantSlug: V } = D;
       let Z = s == null ? void 0 : s.id, Q = o, ee = d;
-      V && (Z = (await new ue(P, t).getPublicTenantInfo(V)).id, Q = V);
-      const j = await R.verifyMagicLink({
-        token: U,
+      V && (Z = (await new ue(C, t).getPublicTenantInfo(V)).id, Q = V);
+      const j = await F.verifyMagicLink({
+        token: B,
         email: Y,
         appId: t,
         tenantId: Z
@@ -1053,14 +1071,14 @@ function Nt({ config: i = {}, children: e }) {
         refreshToken: j.refreshToken,
         expiresIn: j.expiresIn
       }), j.user) {
-        ee.setUser(j.user), f(j.user);
+        ee.setUser(j.user), p(j.user);
         try {
           await a();
         } catch (de) {
           console.warn("Failed to load complete user data after magic link login:", de);
         }
       }
-      return le && Q && Q !== o && g(Q, {
+      return le && Q && Q !== o && h(Q, {
         tokens: {
           accessToken: j.accessToken,
           refreshToken: j.refreshToken,
@@ -1068,49 +1086,49 @@ function Nt({ config: i = {}, children: e }) {
         }
       }), j;
     }, Ce = async () => {
-      const F = d.getTokens();
-      if (!(F != null && F.refreshToken))
+      const D = d.getTokens();
+      if (!(D != null && D.refreshToken))
         throw new Error("No refresh token available");
-      const U = await R.refreshToken({
-        refreshToken: F.refreshToken
+      const B = await F.refreshToken({
+        refreshToken: D.refreshToken
       });
       d.setTokens({
-        accessToken: U.accessToken,
-        refreshToken: U.refreshToken || F.refreshToken,
-        expiresIn: U.expiresIn
+        accessToken: B.accessToken,
+        refreshToken: B.refreshToken || D.refreshToken,
+        expiresIn: B.expiresIn
       });
-    }, $e = () => {
-      d.clearSession(), f(null), C(null);
-    }, De = (F) => {
-      d.setTokens(F);
-    }, Fe = () => d.hasValidSession(), He = () => {
-      d.clearSession(), f(null), C(null);
+    }, Fe = () => {
+      d.clearSession(), p(null), R(null);
+    }, $e = (D) => {
+      d.setTokens(D);
+    }, De = () => d.hasValidSession(), He = () => {
+      d.clearSession(), p(null), R(null);
     }, Ne = async () => {
       if (t)
         try {
-          A(!0);
-          const { roles: F } = await G.getRolesByApp(t);
-          x(F);
-        } catch (F) {
-          console.error("Failed to fetch roles:", F);
+          P(!0);
+          const { roles: D } = await U.getRolesByApp(t);
+          k(D);
+        } catch (D) {
+          console.error("Failed to fetch roles:", D);
         } finally {
-          A(!1);
+          P(!1);
         }
     }, Ue = async () => {
       await Ne();
-    }, ye = (F) => {
-      if (!S || S.length === 0)
+    }, ye = (D) => {
+      if (!T || T.length === 0)
         return !1;
-      if (typeof F == "string")
-        return S.includes(F);
-      const U = `${F.resource}.${F.action}`;
-      return S.includes(U);
+      if (typeof D == "string")
+        return T.includes(D);
+      const B = `${D.resource}.${D.action}`;
+      return T.includes(B);
     };
     return {
       // RFC-003: Authentication state
-      isAuthenticated: M,
+      isAuthenticated: E,
       sessionManager: d,
-      authenticatedHttpService: P,
+      authenticatedHttpService: C,
       login: O,
       signup: K,
       signupTenantAdmin: H,
@@ -1118,112 +1136,97 @@ function Nt({ config: i = {}, children: e }) {
       verifyMagicLink: ge,
       changePassword: N,
       requestPasswordReset: W,
-      confirmPasswordReset: D,
+      confirmPasswordReset: $,
       refreshToken: Ce,
-      logout: $e,
-      setTokens: De,
-      hasValidSession: Fe,
+      logout: Fe,
+      setTokens: $e,
+      hasValidSession: De,
       clearSession: He,
       currentUser: m,
       isUserLoading: u,
-      userError: E,
+      userError: L,
       loadUserData: a,
-      refreshUser: p,
-      userRole: _,
-      userPermissions: S,
+      refreshUser: f,
+      userRole: x,
+      userPermissions: T,
       availableRoles: w,
       rolesLoading: b,
       hasPermission: ye,
-      hasAnyPermission: (F) => F.some((U) => ye(U)),
-      hasAllPermissions: (F) => F.every((U) => ye(U)),
-      getUserPermissionStrings: () => S || [],
+      hasAnyPermission: (D) => D.some((B) => ye(B)),
+      hasAllPermissions: (D) => D.every((B) => ye(B)),
+      getUserPermissionStrings: () => T || [],
       refreshRoles: Ue
     };
   }, [
-    M,
+    E,
     d,
-    P,
-    R,
-    z,
+    C,
+    F,
     G,
+    U,
     t,
     s,
     o,
-    g,
+    h,
     w,
     m,
     u,
-    E,
-    _,
-    S,
-    q,
-    L
+    L,
+    x,
+    T,
+    z,
+    c
   ]);
   te(() => {
     !i.initialRoles && t && (async () => {
       try {
-        A(!0);
-        const p = new re(r), O = new xe(p), { roles: K } = await O.getRolesByApp(t);
-        x(K);
-      } catch (p) {
-        console.error("Failed to fetch roles:", p);
+        P(!0);
+        const f = new re(r), O = new ke(f), { roles: K } = await O.getRolesByApp(t);
+        k(K);
+      } catch (f) {
+        console.error("Failed to fetch roles:", f);
       } finally {
-        A(!1);
+        P(!1);
       }
     })();
   }, [t, r, i.initialRoles]);
-  const [I, k] = v(!1), h = qe(!1);
+  const [S, g] = v(!1);
   return te(() => {
-    if (console.log("[AuthProvider] Cross-subdomain auth effect running", {
-      alreadyChecked: I,
-      alreadyProcessed: h.current,
-      currentUrl: typeof window < "u" ? window.location.href : "SSR"
-    }), I) {
-      console.log("[AuthProvider] URL tokens already checked, skipping");
-      return;
-    }
-    k(!0);
-    const a = Je();
-    console.log("[AuthProvider] URL tokens extraction result:", {
-      found: !!a,
-      hasAccessToken: !!(a != null && a.accessToken)
-    }), a && (h.current = !0, console.log("[AuthProvider] Saving URL tokens to session..."), d.setTokens({
-      accessToken: a.accessToken,
-      refreshToken: a.refreshToken,
-      expiresIn: a.expiresIn
-    }), console.log("[AuthProvider] Tokens saved, verifying session validity:", {
-      hasValidSession: d.hasValidSession()
-    }), Ye(), console.log("[AuthProvider] Loading user data after URL token consumption..."), l.loadUserData().catch((p) => {
+    S || (g(!0), A.current.tokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), Ye(), console.log("[AuthProvider] EFFECT: Loading user data after URL token consumption..."), I.loadUserData().catch((a) => {
       console.error(
         "[AuthProvider] Failed to load user data after URL token consumption:",
-        p
+        a
       );
-    }));
-  }, [d, l, I]), te(() => {
+    })));
+  }, [I, S]), te(() => {
     const a = d.getUser();
-    a && d.hasValidSession() && f(a);
+    a && d.hasValidSession() && p(a);
   }, [d]), te(() => {
     if (console.log("[AuthProvider] Auto-load effect running", {
       hasCurrentUser: !!m,
       isUserLoading: u,
       hasValidSession: d.hasValidSession(),
-      urlTokensChecked: I,
-      urlTokensProcessed: h.current
-    }), !I) {
-      console.log("[AuthProvider] Waiting for URL tokens check before auto-load");
+      urlTokensCleanedUp: S,
+      hadUrlTokens: !!A.current.tokens
+    }), !S) {
+      console.log("[AuthProvider] Waiting for URL tokens cleanup before auto-load");
       return;
     }
-    !m && !u && (console.log("[AuthProvider] Auto-loading user data..."), l.loadUserData().catch(() => {
+    if (A.current.tokens) {
+      console.log("[AuthProvider] URL tokens present, skipping auto-load (already handled)");
+      return;
+    }
+    !m && !u && (console.log("[AuthProvider] Auto-loading user data..."), I.loadUserData().catch(() => {
     }));
-  }, [m, u, l, d, I]), te(() => {
+  }, [m, u, I, d, S]), te(() => {
     if (!d.hasValidSession() || !m)
       return;
     const a = setInterval(() => {
-      l.loadUserData().catch(() => {
+      I.loadUserData().catch(() => {
       });
-    }, L);
+    }, c);
     return () => clearInterval(a);
-  }, [d, m, l, L]), /* @__PURE__ */ n(Ie.Provider, { value: l, children: e });
+  }, [d, m, I, c]), /* @__PURE__ */ n(Ie.Provider, { value: I, children: e });
 }
 function ae() {
   const i = ce(Ie);
@@ -1313,45 +1316,45 @@ class Qe {
 }
 const Le = he(null);
 function Ut({ config: i = {}, children: e }) {
-  const { baseUrl: t, appId: r } = oe(), { tenant: s } = se(), [o, g] = v([]), [w, x] = v(!1), [b, A] = v(null), m = X(() => {
+  const { baseUrl: t, appId: r } = oe(), { tenant: s } = se(), [o, h] = v([]), [w, k] = v(!1), [b, P] = v(null), m = X(() => {
     const y = new re(t);
     return new Qe(y);
-  }, [t]), f = async () => {
+  }, [t]), p = async () => {
     if (!(s != null && s.id)) {
-      g([]);
+      h([]);
       return;
     }
-    x(!0), A(null);
+    k(!0), P(null);
     try {
       const y = await m.getTenantFeatureFlags(s.id, r);
-      g(y);
+      h(y);
     } catch (y) {
-      const E = y instanceof Error ? y.message : "Failed to fetch feature flags";
-      A(E), i.onError && i.onError(y instanceof Error ? y : new Error(E));
+      const L = y instanceof Error ? y.message : "Failed to fetch feature flags";
+      P(L), i.onError && i.onError(y instanceof Error ? y : new Error(L));
     } finally {
-      x(!1);
+      k(!1);
     }
   };
   te(() => {
-    f();
-    const y = i.refreshInterval || 5 * 60 * 1e3, E = setInterval(f, y);
-    return () => clearInterval(E);
+    p();
+    const y = i.refreshInterval || 5 * 60 * 1e3, L = setInterval(p, y);
+    return () => clearInterval(L);
   }, [s == null ? void 0 : s.id, i.refreshInterval]);
   const u = X(() => ({
     featureFlags: o,
     loading: w,
     error: b,
-    isEnabled: (T) => {
-      const d = o.find((P) => P.key === T);
-      return (d == null ? void 0 : d.value) === !0;
+    isEnabled: (M) => {
+      const A = o.find((d) => d.key === M);
+      return (A == null ? void 0 : A.value) === !0;
     },
-    getFlag: (T) => o.find((d) => d.key === T),
-    getFlagState: (T) => {
-      const d = o.find((P) => P.key === T);
-      return d ? d.value ? "enabled" : "disabled" : "not_found";
+    getFlag: (M) => o.find((A) => A.key === M),
+    getFlagState: (M) => {
+      const A = o.find((d) => d.key === M);
+      return A ? A.value ? "enabled" : "disabled" : "not_found";
     },
     refresh: async () => {
-      await f();
+      await p();
     }
   }), [o, w, b]);
   return /* @__PURE__ */ n(Le.Provider, { value: u, children: e });
@@ -1430,7 +1433,7 @@ class Ze {
 }
 const Re = he(void 0);
 function Bt({ config: i = {}, children: e }) {
-  const { baseUrl: t } = oe(), { tenant: r } = se(), [s, o] = v(null), [g, w] = v(!1), [x, b] = v(null), A = X(() => {
+  const { baseUrl: t } = oe(), { tenant: r } = se(), [s, o] = v(null), [h, w] = v(!1), [k, b] = v(null), P = X(() => {
     const u = new re(t);
     return new Ze(u);
   }, [t]), m = async () => {
@@ -1440,7 +1443,7 @@ function Bt({ config: i = {}, children: e }) {
     }
     w(!0), b(null);
     try {
-      const u = await A.getTenantSubscriptionFeatures(r.id);
+      const u = await P.getTenantSubscriptionFeatures(r.id);
       o(u);
     } catch (u) {
       const y = u instanceof Error ? u.message : "Failed to fetch subscription";
@@ -1454,29 +1457,29 @@ function Bt({ config: i = {}, children: e }) {
     const u = i.refreshInterval || 10 * 60 * 1e3, y = setInterval(m, u);
     return () => clearInterval(y);
   }, [r == null ? void 0 : r.id, i.refreshInterval]);
-  const f = X(() => {
+  const p = X(() => {
     const u = (s == null ? void 0 : s.features) || [];
     return {
       subscription: s,
       features: u,
-      loading: g,
-      error: x,
-      isFeatureEnabled: (d) => {
-        const P = u.find((R) => R.key === d);
-        return P ? P.type === "BOOLEAN" || P.type === "boolean" ? P.value === !0 : !!P.value : !1;
+      loading: h,
+      error: k,
+      isFeatureEnabled: (A) => {
+        const d = u.find((C) => C.key === A);
+        return d ? d.type === "BOOLEAN" || d.type === "boolean" ? d.value === !0 : !!d.value : !1;
       },
-      getFeature: (d) => u.find((P) => P.key === d),
-      getFeatureValue: (d, P) => {
-        const R = u.find((z) => z.key === d);
-        return R ? R.value : P;
+      getFeature: (A) => u.find((d) => d.key === A),
+      getFeatureValue: (A, d) => {
+        const C = u.find((F) => F.key === A);
+        return C ? C.value : d;
       },
-      hasAllowedPlan: (d) => !s || !s.isActive ? !1 : d.includes(s.planId),
+      hasAllowedPlan: (A) => !s || !s.isActive ? !1 : A.includes(s.planId),
       refresh: async () => {
         await m();
       }
     };
-  }, [s, g, x]);
-  return /* @__PURE__ */ n(Re.Provider, { value: f, children: e });
+  }, [s, h, k]);
+  return /* @__PURE__ */ n(Re.Provider, { value: p, children: e });
 }
 function et() {
   const i = ce(Re);
@@ -1485,7 +1488,7 @@ function et() {
   return i;
 }
 var ie = /* @__PURE__ */ ((i) => (i.SUPERUSER = "SUPERUSER", i.TENANT_ADMIN = "TENANT_ADMIN", i.USER = "USER", i))(ie || {});
-const ke = () => /* @__PURE__ */ c(
+const xe = () => /* @__PURE__ */ l(
   "div",
   {
     style: {
@@ -1526,7 +1529,7 @@ const ke = () => /* @__PURE__ */ c(
   userType: i,
   minUserType: e,
   missingPermissions: t
-}) => /* @__PURE__ */ c(
+}) => /* @__PURE__ */ l(
   "div",
   {
     style: {
@@ -1544,19 +1547,19 @@ const ke = () => /* @__PURE__ */ c(
     children: [
       /* @__PURE__ */ n("div", { style: { fontSize: "2rem", marginBottom: "10px" }, children: "⚠️" }),
       /* @__PURE__ */ n("h3", { style: { color: "#856404", marginBottom: "10px" }, children: "Insufficient Permissions" }),
-      e && i ? /* @__PURE__ */ c(B, { children: [
-        /* @__PURE__ */ c("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
+      e && i ? /* @__PURE__ */ l(q, { children: [
+        /* @__PURE__ */ l("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: [
           "This content requires ",
           /* @__PURE__ */ n("strong", { children: e }),
           " access level or higher."
         ] }),
-        /* @__PURE__ */ c("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        /* @__PURE__ */ l("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Your current access level: ",
           /* @__PURE__ */ n("strong", { children: i })
         ] })
-      ] }) : /* @__PURE__ */ c(B, { children: [
+      ] }) : /* @__PURE__ */ l(q, { children: [
         /* @__PURE__ */ n("p", { style: { color: "#856404", fontSize: "14px", marginBottom: "10px" }, children: "You don't have the required permissions to view this content." }),
-        t && t.length > 0 && /* @__PURE__ */ c("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
+        t && t.length > 0 && /* @__PURE__ */ l("p", { style: { color: "#6c757d", fontSize: "12px" }, children: [
           "Required permissions: ",
           /* @__PURE__ */ n("strong", { children: t.join(", ") })
         ] })
@@ -1578,19 +1581,19 @@ function qt({
   requiredPermissions: r,
   requireAllPermissions: s = !1
 }) {
-  const { hasValidSession: o, sessionManager: g, hasPermission: w, hasAnyPermission: x, hasAllPermissions: b } = ae();
+  const { hasValidSession: o, sessionManager: h, hasPermission: w, hasAnyPermission: k, hasAllPermissions: b } = ae();
   if (!o())
-    return /* @__PURE__ */ n(B, { children: e || /* @__PURE__ */ n(ke, {}) });
-  const A = g.getUser();
-  if (!A)
-    return /* @__PURE__ */ n(B, { children: e || /* @__PURE__ */ n(ke, {}) });
-  if (t && !tt(A.userType, t))
-    return /* @__PURE__ */ n(Ae, { userType: A.userType, minUserType: t });
-  if (r && r.length > 0 && !(s ? b(r) : x(r))) {
-    const f = r.filter((u) => !w(u)).map((u) => typeof u == "string" ? u : u.name);
-    return /* @__PURE__ */ n(Ae, { missingPermissions: f });
-  }
-  return /* @__PURE__ */ n(B, { children: i });
+    return /* @__PURE__ */ n(q, { children: e || /* @__PURE__ */ n(xe, {}) });
+  const P = h.getUser();
+  if (!P)
+    return /* @__PURE__ */ n(q, { children: e || /* @__PURE__ */ n(xe, {}) });
+  if (t && !tt(P.userType, t))
+    return /* @__PURE__ */ n(Ae, { userType: P.userType, minUserType: t });
+  if (r && r.length > 0 && !(s ? b(r) : k(r))) {
+    const p = r.filter((u) => !w(u)).map((u) => typeof u == "string" ? u : u.name);
+    return /* @__PURE__ */ n(Ae, { missingPermissions: p });
+  }
+  return /* @__PURE__ */ n(q, { children: i });
 }
 const rt = ({ redirectPath: i }) => /* @__PURE__ */ n(
   "div",
@@ -1605,7 +1608,7 @@ const rt = ({ redirectPath: i }) => /* @__PURE__ */ n(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ c(
+    children: /* @__PURE__ */ l(
       "div",
       {
         style: {
@@ -1619,7 +1622,7 @@ const rt = ({ redirectPath: i }) => /* @__PURE__ */ n(
           /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🔒" }),
           /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Access Required" }),
           /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You need to be signed in to access this page." }),
-          /* @__PURE__ */ c("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ l("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             i,
             "..."
@@ -1645,7 +1648,7 @@ const rt = ({ redirectPath: i }) => /* @__PURE__ */ n(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ c(
+    children: /* @__PURE__ */ l(
       "div",
       {
         style: {
@@ -1658,19 +1661,19 @@ const rt = ({ redirectPath: i }) => /* @__PURE__ */ n(
         children: [
           /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "⚠️" }),
           /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Insufficient Permissions" }),
-          e && i ? /* @__PURE__ */ c(B, { children: [
-            /* @__PURE__ */ c("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
+          e && i ? /* @__PURE__ */ l(q, { children: [
+            /* @__PURE__ */ l("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: [
               "This page requires ",
               /* @__PURE__ */ n("strong", { children: e }),
               " access level or higher."
             ] }),
-            /* @__PURE__ */ c("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            /* @__PURE__ */ l("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Your current access level: ",
               /* @__PURE__ */ n("strong", { children: i })
             ] })
-          ] }) : /* @__PURE__ */ c(B, { children: [
+          ] }) : /* @__PURE__ */ l(q, { children: [
             /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1rem" }, children: "You don't have the required permissions to access this page." }),
-            t && t.length > 0 && /* @__PURE__ */ c("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
+            t && t.length > 0 && /* @__PURE__ */ l("p", { style: { color: "#9ca3af", fontSize: "0.875rem" }, children: [
               "Required permissions: ",
               /* @__PURE__ */ n("strong", { children: t.join(", ") })
             ] })
@@ -1695,22 +1698,22 @@ function zt({
   requireAllPermissions: s = !1,
   fallback: o
 }) {
-  const { hasValidSession: g, sessionManager: w, hasPermission: x, hasAnyPermission: b, hasAllPermissions: A } = ae(), m = be();
-  if (!g())
-    return o ? /* @__PURE__ */ n(B, { children: o }) : /* @__PURE__ */ c(B, { children: [
+  const { hasValidSession: h, sessionManager: w, hasPermission: k, hasAnyPermission: b, hasAllPermissions: P } = ae(), m = be();
+  if (!h())
+    return o ? /* @__PURE__ */ n(q, { children: o }) : /* @__PURE__ */ l(q, { children: [
       /* @__PURE__ */ n(rt, { redirectPath: e }),
       /* @__PURE__ */ n(pe, { to: e, state: { from: m.pathname }, replace: !0 })
     ] });
-  const f = w.getUser();
-  if (!f)
+  const p = w.getUser();
+  if (!p)
     return /* @__PURE__ */ n(pe, { to: e, state: { from: m.pathname }, replace: !0 });
-  if (t && !nt(f.userType, t))
-    return /* @__PURE__ */ n(Te, { userType: f.userType, minUserType: t });
-  if (r && r.length > 0 && !(s ? A(r) : b(r))) {
-    const y = r.filter((E) => !x(E)).map((E) => typeof E == "string" ? E : E.name);
+  if (t && !nt(p.userType, t))
+    return /* @__PURE__ */ n(Te, { userType: p.userType, minUserType: t });
+  if (r && r.length > 0 && !(s ? P(r) : b(r))) {
+    const y = r.filter((L) => !k(L)).map((L) => typeof L == "string" ? L : L.name);
     return /* @__PURE__ */ n(Te, { missingPermissions: y });
   }
-  return /* @__PURE__ */ n(B, { children: i });
+  return /* @__PURE__ */ n(q, { children: i });
 }
 const st = ({ redirectPath: i }) => /* @__PURE__ */ n(
   "div",
@@ -1725,7 +1728,7 @@ const st = ({ redirectPath: i }) => /* @__PURE__ */ n(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ c(
+    children: /* @__PURE__ */ l(
       "div",
       {
         style: {
@@ -1739,7 +1742,7 @@ const st = ({ redirectPath: i }) => /* @__PURE__ */ n(
           /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🏢" }),
           /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Required" }),
           /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "This page requires a tenant context to access." }),
-          /* @__PURE__ */ c("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ l("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             i,
             "..."
@@ -1750,10 +1753,10 @@ const st = ({ redirectPath: i }) => /* @__PURE__ */ n(
   }
 );
 function Ot({ children: i, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = se(), g = be();
-  return s || o ? null : r ? /* @__PURE__ */ n(B, { children: i }) : t ? /* @__PURE__ */ n(B, { children: t }) : /* @__PURE__ */ c(B, { children: [
+  const { tenant: r, isLoading: s, error: o } = se(), h = be();
+  return s || o ? null : r ? /* @__PURE__ */ n(q, { children: i }) : t ? /* @__PURE__ */ n(q, { children: t }) : /* @__PURE__ */ l(q, { children: [
     /* @__PURE__ */ n(st, { redirectPath: e }),
-    /* @__PURE__ */ n(pe, { to: e, state: { from: g.pathname }, replace: !0 })
+    /* @__PURE__ */ n(pe, { to: e, state: { from: h.pathname }, replace: !0 })
   ] });
 }
 const it = ({ redirectPath: i }) => /* @__PURE__ */ n(
@@ -1769,7 +1772,7 @@ const it = ({ redirectPath: i }) => /* @__PURE__ */ n(
       backgroundColor: "#f9fafb",
       textAlign: "center"
     },
-    children: /* @__PURE__ */ c(
+    children: /* @__PURE__ */ l(
       "div",
       {
         style: {
@@ -1783,7 +1786,7 @@ const it = ({ redirectPath: i }) => /* @__PURE__ */ n(
           /* @__PURE__ */ n("div", { style: { fontSize: "3rem", marginBottom: "1rem" }, children: "🚀" }),
           /* @__PURE__ */ n("h2", { style: { color: "#374151", marginBottom: "1rem" }, children: "Tenant Detected" }),
           /* @__PURE__ */ n("p", { style: { color: "#6b7280", marginBottom: "1.5rem" }, children: "You are accessing a tenant-specific context. Redirecting to the appropriate page." }),
-          /* @__PURE__ */ c("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
+          /* @__PURE__ */ l("p", { style: { fontSize: "0.875rem", color: "#9ca3af" }, children: [
             "Redirecting to ",
             i,
             "..."
@@ -1794,13 +1797,13 @@ const it = ({ redirectPath: i }) => /* @__PURE__ */ n(
   }
 );
 function Wt({ children: i, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = se(), g = be();
-  return s || o ? null : r ? t ? /* @__PURE__ */ n(B, { children: t }) : /* @__PURE__ */ c(B, { children: [
+  const { tenant: r, isLoading: s, error: o } = se(), h = be();
+  return s || o ? null : r ? t ? /* @__PURE__ */ n(q, { children: t }) : /* @__PURE__ */ l(q, { children: [
     /* @__PURE__ */ n(it, { redirectPath: e }),
-    /* @__PURE__ */ n(pe, { to: e, state: { from: g.pathname }, replace: !0 })
-  ] }) : /* @__PURE__ */ n(B, { children: i });
+    /* @__PURE__ */ n(pe, { to: e, state: { from: h.pathname }, replace: !0 })
+  ] }) : /* @__PURE__ */ n(q, { children: i });
 }
-const ot = () => /* @__PURE__ */ c(
+const ot = () => /* @__PURE__ */ l(
   "div",
   {
     style: {
@@ -1823,7 +1826,7 @@ function Vt({
   allowedPlans: t,
   requiredFeature: r
 }) {
-  const { subscription: s, hasAllowedPlan: o, isFeatureEnabled: g, loading: w } = et();
+  const { subscription: s, hasAllowedPlan: o, isFeatureEnabled: h, loading: w } = et();
   return w ? /* @__PURE__ */ n(
     "div",
     {
@@ -1834,9 +1837,9 @@ function Vt({
       },
       children: "Loading subscription..."
     }
-  ) : s ? s.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ n(B, { children: e }) : r && !g(r) ? /* @__PURE__ */ n(B, { children: e }) : /* @__PURE__ */ n(B, { children: i }) : /* @__PURE__ */ n(B, { children: e }) : /* @__PURE__ */ n(B, { children: e });
+  ) : s ? s.isActive ? t && t.length > 0 && !o(t) ? /* @__PURE__ */ n(q, { children: e }) : r && !h(r) ? /* @__PURE__ */ n(q, { children: e }) : /* @__PURE__ */ n(q, { children: i }) : /* @__PURE__ */ n(q, { children: e }) : /* @__PURE__ */ n(q, { children: e });
 }
-const at = ({ flagName: i }) => /* @__PURE__ */ c(
+const at = ({ flagName: i }) => /* @__PURE__ */ l(
   "div",
   {
     style: {
@@ -1855,7 +1858,7 @@ const at = ({ flagName: i }) => /* @__PURE__ */ c(
     children: [
       /* @__PURE__ */ n("div", { style: { fontSize: "24px", marginBottom: "8px" }, children: "🚧" }),
       /* @__PURE__ */ n("div", { style: { fontSize: "14px", fontWeight: "500", marginBottom: "4px" }, children: "Feature Not Available" }),
-      /* @__PURE__ */ c("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
+      /* @__PURE__ */ l("div", { style: { fontSize: "12px", opacity: 0.7 }, children: [
         'Feature flag "',
         i,
         '" is disabled'
@@ -1878,9 +1881,9 @@ function jt({ name: i, children: e, fallback: t }) {
       },
       children: "Loading feature flags..."
     }
-  ) : r(i) ? /* @__PURE__ */ n(B, { children: e }) : /* @__PURE__ */ n(B, { children: t || /* @__PURE__ */ n(at, { flagName: i }) });
+  ) : r(i) ? /* @__PURE__ */ n(q, { children: e }) : /* @__PURE__ */ n(q, { children: t || /* @__PURE__ */ n(at, { flagName: i }) });
 }
-const lt = () => /* @__PURE__ */ c(
+const lt = () => /* @__PURE__ */ l(
   "svg",
   {
     width: "16",
@@ -1897,7 +1900,7 @@ const lt = () => /* @__PURE__ */ c(
       /* @__PURE__ */ n("circle", { cx: "12", cy: "12", r: "3" })
     ]
   }
-), ct = () => /* @__PURE__ */ c(
+), ct = () => /* @__PURE__ */ l(
   "svg",
   {
     width: "16",
@@ -2045,121 +2048,121 @@ function _t({
   onSuccess: r,
   onError: s,
   onForgotPassword: o,
-  onSignupClick: g,
+  onSignupClick: h,
   onMagicLinkClick: w,
-  showForgotPassword: x = !0,
+  showForgotPassword: k = !0,
   showSignupLink: b = !0,
-  showMagicLinkOption: A = !0,
+  showMagicLinkOption: P = !0,
   className: m
 }) {
-  const [f, u] = v(""), [y, E] = v(""), [C, q] = v(!1), [T, d] = v(!1), [P, R] = v(""), [z, G] = v({}), { login: $ } = ae(), { tenant: _ } = se(), S = { ...ut, ...i }, M = { ...ht, ...e }, L = { ...dt, ...t }, l = () => {
+  const [p, u] = v(""), [y, L] = v(""), [R, z] = v(!1), [M, A] = v(!1), [d, C] = v(""), [F, G] = v({}), { login: U } = ae(), { tenant: _ } = se(), x = { ...ut, ...i }, T = { ...ht, ...e }, E = { ...dt, ...t }, c = () => {
     const a = {};
-    return f.trim() || (a.username = !0), y.trim() || (a.password = !0), G(a), Object.keys(a).length === 0;
+    return p.trim() || (a.username = !0), y.trim() || (a.password = !0), G(a), Object.keys(a).length === 0;
   }, I = async (a) => {
-    if (a.preventDefault(), !!l()) {
+    if (a.preventDefault(), !!c()) {
       if (!(_ != null && _.id)) {
-        R("Tenant not found");
+        C("Tenant not found");
         return;
       }
-      d(!0), R("");
+      A(!0), C("");
       try {
-        const p = await $({
-          username: f,
+        const f = await U({
+          username: p,
           password: y
           // tenantId inferred from context automatically
         });
-        r == null || r(p);
-      } catch (p) {
-        const O = p.message || S.errorMessage;
-        R(O), s == null || s(O);
+        r == null || r(f);
+      } catch (f) {
+        const O = f.message || x.errorMessage;
+        C(O), s == null || s(O);
       } finally {
-        d(!1);
+        A(!1);
       }
     }
-  }, k = (a) => ({
-    ...M.input,
-    ...z[a] ? M.inputError : {}
-  }), h = () => ({
-    ...M.button,
-    ...T ? M.buttonLoading : {},
-    ...!f || !y || T ? M.buttonDisabled : {}
+  }, S = (a) => ({
+    ...T.input,
+    ...F[a] ? T.inputError : {}
+  }), g = () => ({
+    ...T.button,
+    ...M ? T.buttonLoading : {},
+    ...!p || !y || M ? T.buttonDisabled : {}
   });
-  return /* @__PURE__ */ c("div", { className: m, style: M.container, children: [
-    /* @__PURE__ */ n("h2", { style: M.title, children: S.title }),
-    /* @__PURE__ */ c("form", { onSubmit: I, style: M.form, children: [
-      /* @__PURE__ */ c("div", { style: M.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: M.label, children: S.usernameLabel }),
+  return /* @__PURE__ */ l("div", { className: m, style: T.container, children: [
+    /* @__PURE__ */ n("h2", { style: T.title, children: x.title }),
+    /* @__PURE__ */ l("form", { onSubmit: I, style: T.form, children: [
+      /* @__PURE__ */ l("div", { style: T.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: T.label, children: x.usernameLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "username",
             name: "username",
             type: "text",
-            value: f,
+            value: p,
             onChange: (a) => {
-              u(a.target.value), z.username && G((p) => ({ ...p, username: !1 }));
+              u(a.target.value), F.username && G((f) => ({ ...f, username: !1 }));
             },
-            placeholder: S.usernamePlaceholder,
-            style: k("username"),
-            disabled: T
+            placeholder: x.usernamePlaceholder,
+            style: S("username"),
+            disabled: M
           }
         )
       ] }),
-      /* @__PURE__ */ c("div", { style: M.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: M.label, children: S.passwordLabel }),
-        /* @__PURE__ */ c("div", { style: M.inputContainer, children: [
+      /* @__PURE__ */ l("div", { style: T.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: T.label, children: x.passwordLabel }),
+        /* @__PURE__ */ l("div", { style: T.inputContainer, children: [
           /* @__PURE__ */ n(
             "input",
             {
               id: "password",
               name: "password",
-              type: C ? "text" : "password",
+              type: R ? "text" : "password",
               value: y,
               onChange: (a) => {
-                E(a.target.value), z.password && G((p) => ({ ...p, password: !1 }));
+                L(a.target.value), F.password && G((f) => ({ ...f, password: !1 }));
               },
-              placeholder: S.passwordPlaceholder,
+              placeholder: x.passwordPlaceholder,
               style: {
-                ...k("password"),
+                ...S("password"),
                 paddingRight: "2.5rem"
                 // Make room for the icon
               },
-              disabled: T
+              disabled: M
             }
           ),
           /* @__PURE__ */ n(
             "button",
             {
               type: "button",
-              onClick: () => q(!C),
-              style: M.passwordToggle,
-              disabled: T,
-              "aria-label": C ? "Hide password" : "Show password",
-              children: C ? L.hidePassword : L.showPassword
+              onClick: () => z(!R),
+              style: T.passwordToggle,
+              disabled: M,
+              "aria-label": R ? "Hide password" : "Show password",
+              children: R ? E.hidePassword : E.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !f || !y || T, style: h(), children: T ? S.loadingText : S.submitButton }),
-      P && /* @__PURE__ */ n("div", { style: M.errorText, children: P })
+      /* @__PURE__ */ n("button", { type: "submit", disabled: !p || !y || M, style: g(), children: M ? x.loadingText : x.submitButton }),
+      d && /* @__PURE__ */ n("div", { style: T.errorText, children: d })
     ] }),
-    (x || b || A) && /* @__PURE__ */ c("div", { style: M.linkContainer, children: [
-      A && /* @__PURE__ */ c("div", { children: [
-        /* @__PURE__ */ c("span", { style: M.divider, children: [
-          S.magicLinkText,
+    (k || b || P) && /* @__PURE__ */ l("div", { style: T.linkContainer, children: [
+      P && /* @__PURE__ */ l("div", { children: [
+        /* @__PURE__ */ l("span", { style: T.divider, children: [
+          x.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: w, style: M.link, children: S.magicLinkLink })
+        /* @__PURE__ */ n("a", { onClick: w, style: T.link, children: x.magicLinkLink })
       ] }),
-      A && (x || b) && /* @__PURE__ */ n("div", { style: M.divider, children: "•" }),
-      x && /* @__PURE__ */ n("a", { onClick: o, style: M.link, children: S.forgotPasswordLink }),
-      x && b && /* @__PURE__ */ n("div", { style: M.divider, children: "•" }),
-      b && /* @__PURE__ */ c("div", { children: [
-        /* @__PURE__ */ c("span", { style: M.divider, children: [
-          S.signupText,
+      P && (k || b) && /* @__PURE__ */ n("div", { style: T.divider, children: "•" }),
+      k && /* @__PURE__ */ n("a", { onClick: o, style: T.link, children: x.forgotPasswordLink }),
+      k && b && /* @__PURE__ */ n("div", { style: T.divider, children: "•" }),
+      b && /* @__PURE__ */ l("div", { children: [
+        /* @__PURE__ */ l("span", { style: T.divider, children: [
+          x.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: g, style: M.link, children: S.signupLink })
+        /* @__PURE__ */ n("a", { onClick: h, style: T.link, children: x.signupLink })
       ] })
     ] })
   ] });
@@ -2296,96 +2299,96 @@ function Gt({
   onSuccess: r,
   onError: s,
   onLoginClick: o,
-  onMagicLinkClick: g,
+  onMagicLinkClick: h,
   showLoginLink: w = !0,
-  showMagicLinkOption: x = !0,
+  showMagicLinkOption: k = !0,
   className: b
 }) {
-  const [A, m] = v(""), [f, u] = v(""), [y, E] = v(""), [C, q] = v(""), [T, d] = v(""), [P, R] = v(""), [z, G] = v(""), [$, _] = v(!1), [S, M] = v(""), [L, l] = v({}), { signup: I, signupTenantAdmin: k } = ae(), { tenant: h } = se(), a = { ...gt, ...i }, p = { ...pt, ...e }, O = () => {
-    const D = {};
-    return A.trim() || (D.name = !0), !y.trim() && !C.trim() && (D.email = !0, D.phoneNumber = !0), T.trim() || (D.password = !0), P.trim() || (D.confirmPassword = !0), t === "tenant" && !z.trim() && (D.tenantName = !0), l(D), Object.keys(D).length === 0;
-  }, K = async (D) => {
-    if (D.preventDefault(), !!O()) {
-      if (T !== P) {
-        M(a.passwordMismatchError), l({ confirmPassword: !0 });
+  const [P, m] = v(""), [p, u] = v(""), [y, L] = v(""), [R, z] = v(""), [M, A] = v(""), [d, C] = v(""), [F, G] = v(""), [U, _] = v(!1), [x, T] = v(""), [E, c] = v({}), { signup: I, signupTenantAdmin: S } = ae(), { tenant: g } = se(), a = { ...gt, ...i }, f = { ...pt, ...e }, O = () => {
+    const $ = {};
+    return P.trim() || ($.name = !0), !y.trim() && !R.trim() && ($.email = !0, $.phoneNumber = !0), M.trim() || ($.password = !0), d.trim() || ($.confirmPassword = !0), t === "tenant" && !F.trim() && ($.tenantName = !0), c($), Object.keys($).length === 0;
+  }, K = async ($) => {
+    if ($.preventDefault(), !!O()) {
+      if (M !== d) {
+        T(a.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
-      if (t === "user" && !(h != null && h.id)) {
-        M("Tenant not found");
+      if (t === "user" && !(g != null && g.id)) {
+        T("Tenant not found");
         return;
       }
-      _(!0), M("");
+      _(!0), T("");
       try {
         let J;
-        t === "tenant" ? J = await k({
+        t === "tenant" ? J = await S({
           email: y || void 0,
-          phoneNumber: C || void 0,
-          name: A,
-          password: T,
-          tenantName: z,
-          lastName: f || void 0
+          phoneNumber: R || void 0,
+          name: P,
+          password: M,
+          tenantName: F,
+          lastName: p || void 0
         }) : J = await I({
           email: y || void 0,
-          phoneNumber: C || void 0,
-          name: A,
-          password: T,
-          tenantId: h.id,
-          lastName: f || void 0
+          phoneNumber: R || void 0,
+          name: P,
+          password: M,
+          tenantId: g.id,
+          lastName: p || void 0
         }), r == null || r(J);
       } catch (J) {
         const ge = J.message || a.errorMessage;
-        M(ge), s == null || s(ge);
+        T(ge), s == null || s(ge);
       } finally {
         _(!1);
       }
     }
-  }, H = (D) => ({
-    ...p.input,
-    ...L[D] ? p.inputError : {}
+  }, H = ($) => ({
+    ...f.input,
+    ...E[$] ? f.inputError : {}
   }), N = () => ({
-    ...p.button,
-    ...$ ? p.buttonLoading : {},
-    ...!A || !y && !C || !T || !P || $ || t === "tenant" && !z ? p.buttonDisabled : {}
-  }), W = A && (y || C) && T && P && (t === "user" || z);
-  return /* @__PURE__ */ c("div", { className: b, style: p.container, children: [
-    /* @__PURE__ */ n("h2", { style: p.title, children: a.title }),
-    /* @__PURE__ */ c("form", { onSubmit: K, style: p.form, children: [
-      /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.nameLabel }),
+    ...f.button,
+    ...U ? f.buttonLoading : {},
+    ...!P || !y && !R || !M || !d || U || t === "tenant" && !F ? f.buttonDisabled : {}
+  }), W = P && (y || R) && M && d && (t === "user" || F);
+  return /* @__PURE__ */ l("div", { className: b, style: f.container, children: [
+    /* @__PURE__ */ n("h2", { style: f.title, children: a.title }),
+    /* @__PURE__ */ l("form", { onSubmit: K, style: f.form, children: [
+      /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.nameLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "name",
             name: "name",
             type: "text",
-            value: A,
-            onChange: (D) => {
-              m(D.target.value), L.name && l((J) => ({ ...J, name: !1 }));
+            value: P,
+            onChange: ($) => {
+              m($.target.value), E.name && c((J) => ({ ...J, name: !1 }));
             },
             placeholder: a.namePlaceholder,
             style: H("name"),
-            disabled: $
+            disabled: U
           }
         )
       ] }),
-      /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.lastNameLabel }),
+      /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.lastNameLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: f,
-            onChange: (D) => u(D.target.value),
+            value: p,
+            onChange: ($) => u($.target.value),
             placeholder: a.lastNamePlaceholder,
-            style: p.input,
-            disabled: $
+            style: f.input,
+            disabled: U
           }
         )
       ] }),
-      /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.emailLabel }),
+      /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.emailLabel }),
         /* @__PURE__ */ n(
           "input",
           {
@@ -2393,30 +2396,30 @@ function Gt({
             name: "email",
             type: "email",
             value: y,
-            onChange: (D) => {
-              E(D.target.value), L.email && l((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+            onChange: ($) => {
+              L($.target.value), E.email && c((J) => ({ ...J, email: !1, phoneNumber: !1 }));
             },
             placeholder: a.emailPlaceholder,
             style: H("email"),
-            disabled: $
+            disabled: U
           }
         )
       ] }),
-      /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.phoneNumberLabel }),
+      /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.phoneNumberLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "phoneNumber",
             name: "phoneNumber",
             type: "tel",
-            value: C,
-            onChange: (D) => {
-              q(D.target.value), L.phoneNumber && l((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+            value: R,
+            onChange: ($) => {
+              z($.target.value), E.phoneNumber && c((J) => ({ ...J, email: !1, phoneNumber: !1 }));
             },
             placeholder: a.phoneNumberPlaceholder,
             style: H("phoneNumber"),
-            disabled: $
+            disabled: U
           }
         )
       ] }),
@@ -2432,78 +2435,78 @@ function Gt({
           children: "At least one contact method (email or phone) is required"
         }
       ),
-      /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.passwordLabel }),
+      /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.passwordLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "password",
             name: "password",
             type: "password",
-            value: T,
-            onChange: (D) => {
-              d(D.target.value), L.password && l((J) => ({ ...J, password: !1 }));
+            value: M,
+            onChange: ($) => {
+              A($.target.value), E.password && c((J) => ({ ...J, password: !1 }));
             },
             placeholder: a.passwordPlaceholder,
             style: H("password"),
-            disabled: $
+            disabled: U
           }
         )
       ] }),
-      /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.confirmPasswordLabel }),
+      /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.confirmPasswordLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "confirmPassword",
             name: "confirmPassword",
             type: "password",
-            value: P,
-            onChange: (D) => {
-              R(D.target.value), L.confirmPassword && l((J) => ({ ...J, confirmPassword: !1 })), S === a.passwordMismatchError && M("");
+            value: d,
+            onChange: ($) => {
+              C($.target.value), E.confirmPassword && c((J) => ({ ...J, confirmPassword: !1 })), x === a.passwordMismatchError && T("");
             },
             placeholder: a.confirmPasswordPlaceholder,
             style: H("confirmPassword"),
-            disabled: $
+            disabled: U
           }
         )
       ] }),
-      t === "tenant" && /* @__PURE__ */ c("div", { style: p.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: p.label, children: a.tenantNameLabel }),
+      t === "tenant" && /* @__PURE__ */ l("div", { style: f.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: f.label, children: a.tenantNameLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "tenantName",
             name: "tenantName",
             type: "text",
-            value: z,
-            onChange: (D) => {
-              G(D.target.value), L.tenantName && l((J) => ({ ...J, tenantName: !1 }));
+            value: F,
+            onChange: ($) => {
+              G($.target.value), E.tenantName && c((J) => ({ ...J, tenantName: !1 }));
             },
             placeholder: a.tenantNamePlaceholder,
             style: H("tenantName"),
-            disabled: $
+            disabled: U
           }
         )
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !W || $, style: N(), children: $ ? a.loadingText : a.submitButton }),
-      S && /* @__PURE__ */ n("div", { style: p.errorText, children: S })
+      /* @__PURE__ */ n("button", { type: "submit", disabled: !W || U, style: N(), children: U ? a.loadingText : a.submitButton }),
+      x && /* @__PURE__ */ n("div", { style: f.errorText, children: x })
     ] }),
-    (w || x) && /* @__PURE__ */ c("div", { style: p.linkContainer, children: [
-      x && /* @__PURE__ */ c("div", { children: [
-        /* @__PURE__ */ c("span", { style: p.divider, children: [
+    (w || k) && /* @__PURE__ */ l("div", { style: f.linkContainer, children: [
+      k && /* @__PURE__ */ l("div", { children: [
+        /* @__PURE__ */ l("span", { style: f.divider, children: [
           a.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: g, style: p.link, children: a.magicLinkLink })
+        /* @__PURE__ */ n("a", { onClick: h, style: f.link, children: a.magicLinkLink })
       ] }),
-      x && w && /* @__PURE__ */ n("div", { style: p.divider, children: "•" }),
-      w && /* @__PURE__ */ c("div", { children: [
-        /* @__PURE__ */ c("span", { style: p.divider, children: [
+      k && w && /* @__PURE__ */ n("div", { style: f.divider, children: "•" }),
+      w && /* @__PURE__ */ l("div", { children: [
+        /* @__PURE__ */ l("span", { style: f.divider, children: [
           a.loginText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: o, style: p.link, children: a.loginLink })
+        /* @__PURE__ */ n("a", { onClick: o, style: f.link, children: a.loginLink })
       ] })
     ] })
   ] });
@@ -2636,98 +2639,98 @@ function Kt({
   onError: r,
   onLoginClick: s,
   onSignupClick: o,
-  showTraditionalLinks: g = !0,
+  showTraditionalLinks: h = !0,
   className: w,
-  verifyToken: x,
+  verifyToken: k,
   frontendUrl: b
 }) {
-  const [A, m] = v(""), [f, u] = v(""), [y, E] = v(""), [C, q] = v(!1), [T, d] = v(!1), [P, R] = v(""), [z, G] = v(""), [$, _] = v({}), [S, M] = v(!1), { sendMagicLink: L, verifyMagicLink: l } = ae(), { tenant: I } = se(), k = { ...ft, ...i }, h = { ...mt, ...e };
+  const [P, m] = v(""), [p, u] = v(""), [y, L] = v(""), [R, z] = v(!1), [M, A] = v(!1), [d, C] = v(""), [F, G] = v(""), [U, _] = v({}), [x, T] = v(!1), { sendMagicLink: E, verifyMagicLink: c } = ae(), { tenant: I } = se(), S = { ...ft, ...i }, g = { ...mt, ...e };
   te(() => {
-    x && a(x);
-  }, [x]);
+    k && a(k);
+  }, [k]);
   const a = async (N) => {
-    if (!I || !A) {
-      R("Missing tenant or email");
+    if (!I || !P) {
+      C("Missing tenant or email");
       return;
     }
-    d(!0), R("");
+    A(!0), C("");
     try {
-      const W = await l({
+      const W = await c({
         token: N,
-        email: A
+        email: P
         // tenantId inferred from context automatically
       });
       t == null || t(W);
     } catch (W) {
-      const D = W.message || "Failed to verify magic link";
-      R(D), r == null || r(D);
+      const $ = W.message || "Failed to verify magic link";
+      C($), r == null || r($);
     } finally {
-      d(!1);
+      A(!1);
     }
-  }, p = () => {
+  }, f = () => {
     const N = {};
-    return A.trim() || (N.email = !0), S && !f.trim() && (N.name = !0), _(N), Object.keys(N).length === 0;
+    return P.trim() || (N.email = !0), x && !p.trim() && (N.name = !0), _(N), Object.keys(N).length === 0;
   }, O = async (N) => {
-    if (N.preventDefault(), !!p()) {
+    if (N.preventDefault(), !!f()) {
       if (!(I != null && I.id)) {
-        R("Tenant not found");
+        C("Tenant not found");
         return;
       }
-      q(!0), R(""), G("");
+      z(!0), C(""), G("");
       try {
-        const W = b || (typeof window < "u" ? window.location.origin : ""), D = await L({
-          email: A,
+        const W = b || (typeof window < "u" ? window.location.origin : ""), $ = await E({
+          email: P,
           tenantId: I.id,
           frontendUrl: W,
-          name: S ? f : void 0,
-          lastName: S ? y : void 0
+          name: x ? p : void 0,
+          lastName: x ? y : void 0
         });
-        G(k.successMessage), t == null || t(D);
+        G(S.successMessage), t == null || t($);
       } catch (W) {
-        const D = W.message || k.errorMessage;
-        R(D), r == null || r(D);
+        const $ = W.message || S.errorMessage;
+        C($), r == null || r($);
       } finally {
-        q(!1);
+        z(!1);
       }
     }
   }, K = (N) => ({
-    ...h.input,
-    ...$[N] ? h.inputError : {}
+    ...g.input,
+    ...U[N] ? g.inputError : {}
   }), H = () => ({
-    ...h.button,
-    ...C || T ? h.buttonLoading : {},
-    ...!A || C || T ? h.buttonDisabled : {}
+    ...g.button,
+    ...R || M ? g.buttonLoading : {},
+    ...!P || R || M ? g.buttonDisabled : {}
   });
-  return T ? /* @__PURE__ */ c("div", { className: w, style: h.container, children: [
-    /* @__PURE__ */ n("h2", { style: h.title, children: k.verifyingText }),
+  return M ? /* @__PURE__ */ l("div", { className: w, style: g.container, children: [
+    /* @__PURE__ */ n("h2", { style: g.title, children: S.verifyingText }),
     /* @__PURE__ */ n("div", { style: { textAlign: "center", padding: "2rem" }, children: /* @__PURE__ */ n("div", { style: { fontSize: "1rem", color: "#6b7280" }, children: "Please wait while we verify your magic link..." }) })
-  ] }) : /* @__PURE__ */ c("div", { className: w, style: h.container, children: [
-    /* @__PURE__ */ n("h2", { style: h.title, children: k.title }),
-    /* @__PURE__ */ n("p", { style: h.description, children: k.description }),
-    /* @__PURE__ */ c("form", { onSubmit: O, style: h.form, children: [
-      /* @__PURE__ */ c("div", { style: h.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: h.label, children: k.emailLabel }),
+  ] }) : /* @__PURE__ */ l("div", { className: w, style: g.container, children: [
+    /* @__PURE__ */ n("h2", { style: g.title, children: S.title }),
+    /* @__PURE__ */ n("p", { style: g.description, children: S.description }),
+    /* @__PURE__ */ l("form", { onSubmit: O, style: g.form, children: [
+      /* @__PURE__ */ l("div", { style: g.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: g.label, children: S.emailLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             id: "email",
             name: "email",
             type: "email",
-            value: A,
+            value: P,
             onChange: (N) => {
-              m(N.target.value), $.email && _((W) => ({ ...W, email: !1 }));
+              m(N.target.value), U.email && _((W) => ({ ...W, email: !1 }));
             },
-            placeholder: k.emailPlaceholder,
+            placeholder: S.emailPlaceholder,
             style: K("email"),
-            disabled: C || T
+            disabled: R || M
           }
         )
       ] }),
-      !S && /* @__PURE__ */ n("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ n(
+      !x && /* @__PURE__ */ n("div", { style: { textAlign: "center", marginTop: "0.5rem" }, children: /* @__PURE__ */ n(
         "button",
         {
           type: "button",
-          onClick: () => M(!0),
+          onClick: () => T(!0),
           style: {
             background: "none",
             border: "none",
@@ -2739,27 +2742,27 @@ function Kt({
           children: "New user? Add your name"
         }
       ) }),
-      S && /* @__PURE__ */ c(B, { children: [
-        /* @__PURE__ */ c("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: h.label, children: k.nameLabel }),
+      x && /* @__PURE__ */ l(q, { children: [
+        /* @__PURE__ */ l("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ n("label", { style: g.label, children: S.nameLabel }),
           /* @__PURE__ */ n(
             "input",
             {
               id: "name",
               name: "name",
               type: "text",
-              value: f,
+              value: p,
               onChange: (N) => {
-                u(N.target.value), $.name && _((W) => ({ ...W, name: !1 }));
+                u(N.target.value), U.name && _((W) => ({ ...W, name: !1 }));
               },
-              placeholder: k.namePlaceholder,
+              placeholder: S.namePlaceholder,
               style: K("name"),
-              disabled: C || T
+              disabled: R || M
             }
           )
         ] }),
-        /* @__PURE__ */ c("div", { style: h.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: h.label, children: k.lastNameLabel }),
+        /* @__PURE__ */ l("div", { style: g.fieldGroup, children: [
+          /* @__PURE__ */ n("label", { style: g.label, children: S.lastNameLabel }),
           /* @__PURE__ */ n(
             "input",
             {
@@ -2767,10 +2770,10 @@ function Kt({
               name: "lastName",
               type: "text",
               value: y,
-              onChange: (N) => E(N.target.value),
-              placeholder: k.lastNamePlaceholder,
-              style: h.input,
-              disabled: C || T
+              onChange: (N) => L(N.target.value),
+              placeholder: S.lastNamePlaceholder,
+              style: g.input,
+              disabled: R || M
             }
           )
         ] }),
@@ -2779,7 +2782,7 @@ function Kt({
           {
             type: "button",
             onClick: () => {
-              M(!1), u(""), E("");
+              T(!1), u(""), L("");
             },
             style: {
               background: "none",
@@ -2793,25 +2796,25 @@ function Kt({
           }
         ) })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !A || C || T, style: H(), children: C ? k.loadingText : k.submitButton }),
-      P && /* @__PURE__ */ n("div", { style: h.errorText, children: P }),
-      z && /* @__PURE__ */ n("div", { style: h.successText, children: z })
+      /* @__PURE__ */ n("button", { type: "submit", disabled: !P || R || M, style: H(), children: R ? S.loadingText : S.submitButton }),
+      d && /* @__PURE__ */ n("div", { style: g.errorText, children: d }),
+      F && /* @__PURE__ */ n("div", { style: g.successText, children: F })
     ] }),
-    g && /* @__PURE__ */ c("div", { style: h.linkContainer, children: [
-      /* @__PURE__ */ c("div", { children: [
-        /* @__PURE__ */ c("span", { style: h.divider, children: [
-          k.loginText,
+    h && /* @__PURE__ */ l("div", { style: g.linkContainer, children: [
+      /* @__PURE__ */ l("div", { children: [
+        /* @__PURE__ */ l("span", { style: g.divider, children: [
+          S.loginText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: s, style: h.link, children: k.loginLink })
+        /* @__PURE__ */ n("a", { onClick: s, style: g.link, children: S.loginLink })
       ] }),
-      /* @__PURE__ */ n("div", { style: h.divider, children: "•" }),
-      /* @__PURE__ */ c("div", { children: [
-        /* @__PURE__ */ c("span", { style: h.divider, children: [
-          k.signupText,
+      /* @__PURE__ */ n("div", { style: g.divider, children: "•" }),
+      /* @__PURE__ */ l("div", { children: [
+        /* @__PURE__ */ l("span", { style: g.divider, children: [
+          S.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: o, style: h.link, children: k.signupLink })
+        /* @__PURE__ */ n("a", { onClick: o, style: g.link, children: S.signupLink })
       ] })
     ] })
   ] });
@@ -2911,7 +2914,7 @@ const yt = {
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
   }
-}, wt = () => /* @__PURE__ */ n("div", { style: Ee.spinner }), bt = () => /* @__PURE__ */ c(
+}, wt = () => /* @__PURE__ */ n("div", { style: Ee.spinner }), bt = () => /* @__PURE__ */ l(
   "svg",
   {
     width: "48",
@@ -2928,7 +2931,7 @@ const yt = {
       /* @__PURE__ */ n("polyline", { points: "22,4 12,14.01 9,11.01" })
     ]
   }
-), St = () => /* @__PURE__ */ c(
+), St = () => /* @__PURE__ */ l(
   "svg",
   {
     width: "48",
@@ -2958,97 +2961,97 @@ function Jt({
   onSuccess: r,
   onError: s,
   onRetry: o,
-  onBackToLogin: g,
+  onBackToLogin: h,
   className: w,
-  token: x,
+  token: k,
   email: b,
-  appId: A,
+  appId: P,
   tenantSlug: m,
-  autoRedirectDelay: f = 3e3
+  autoRedirectDelay: p = 3e3
 }) {
-  const [u, y] = v("verifying"), [E, C] = v(""), { verifyMagicLink: q } = ae(), T = { ...yt, ...i }, d = { ...Ee, ...e }, P = { ...vt, ...t }, R = () => {
+  const [u, y] = v("verifying"), [L, R] = v(""), { verifyMagicLink: z } = ae(), M = { ...yt, ...i }, A = { ...Ee, ...e }, d = { ...vt, ...t }, C = () => {
     if (typeof window > "u") return {};
-    const S = new URLSearchParams(window.location.search);
+    const x = new URLSearchParams(window.location.search);
     return {
-      token: x || S.get("token") || "",
-      email: b || S.get("email") || "",
-      appId: A || S.get("appId") || "",
-      tenantSlug: m || S.get("tenantSlug") || void 0
+      token: k || x.get("token") || "",
+      email: b || x.get("email") || "",
+      appId: P || x.get("appId") || "",
+      tenantSlug: m || x.get("tenantSlug") || void 0
     };
-  }, z = async () => {
-    y("verifying"), C("");
+  }, F = async () => {
+    y("verifying"), R("");
     try {
-      const S = R();
-      if (!S.token || !S.email)
+      const x = C();
+      if (!x.token || !x.email)
         throw new Error("Missing required parameters: token or email");
-      const M = await q({
-        token: S.token,
-        email: S.email,
-        tenantSlug: S.tenantSlug
+      const T = await z({
+        token: x.token,
+        email: x.email,
+        tenantSlug: x.tenantSlug
       });
-      y("success"), r == null || r(M), f > 0 && setTimeout(() => {
+      y("success"), r == null || r(T), p > 0 && setTimeout(() => {
         y("redirecting");
-      }, f);
-    } catch (S) {
-      const M = S.message || T.errorMessage;
-      C(M), y("error"), s == null || s(M);
+      }, p);
+    } catch (x) {
+      const T = x.message || M.errorMessage;
+      R(T), y("error"), s == null || s(T);
     }
   }, G = () => {
-    o == null || o(), z();
-  }, $ = () => {
-    g == null || g();
+    o == null || o(), F();
+  }, U = () => {
+    h == null || h();
   };
   te(() => {
-    z();
+    F();
   }, []);
   const _ = () => {
     switch (u) {
       case "verifying":
-        return /* @__PURE__ */ c("div", { style: d.message, children: [
-          P.loading,
-          T.verifyingMessage
+        return /* @__PURE__ */ l("div", { style: A.message, children: [
+          d.loading,
+          M.verifyingMessage
         ] });
       case "success":
-        return /* @__PURE__ */ c(B, { children: [
-          P.success,
-          /* @__PURE__ */ n("div", { style: d.successMessage, children: T.successMessage })
+        return /* @__PURE__ */ l(q, { children: [
+          d.success,
+          /* @__PURE__ */ n("div", { style: A.successMessage, children: M.successMessage })
         ] });
       case "redirecting":
-        return /* @__PURE__ */ c(B, { children: [
-          P.loading,
-          /* @__PURE__ */ n("div", { style: d.message, children: T.redirectingMessage })
+        return /* @__PURE__ */ l(q, { children: [
+          d.loading,
+          /* @__PURE__ */ n("div", { style: A.message, children: M.redirectingMessage })
         ] });
       case "error":
-        return /* @__PURE__ */ c(B, { children: [
-          P.error,
-          /* @__PURE__ */ n("div", { style: d.errorMessage, children: E || T.errorMessage }),
-          /* @__PURE__ */ c("div", { style: d.buttonContainer, children: [
+        return /* @__PURE__ */ l(q, { children: [
+          d.error,
+          /* @__PURE__ */ n("div", { style: A.errorMessage, children: L || M.errorMessage }),
+          /* @__PURE__ */ l("div", { style: A.buttonContainer, children: [
             /* @__PURE__ */ n(
               "button",
               {
                 onClick: G,
-                style: d.retryButton,
-                onMouseOver: (S) => {
-                  S.currentTarget.style.backgroundColor = "#2563eb";
+                style: A.retryButton,
+                onMouseOver: (x) => {
+                  x.currentTarget.style.backgroundColor = "#2563eb";
                 },
-                onMouseOut: (S) => {
-                  S.currentTarget.style.backgroundColor = "#3b82f6";
+                onMouseOut: (x) => {
+                  x.currentTarget.style.backgroundColor = "#3b82f6";
                 },
-                children: T.retryButton
+                children: M.retryButton
               }
             ),
             /* @__PURE__ */ n(
               "button",
               {
-                onClick: $,
-                style: d.backButton,
-                onMouseOver: (S) => {
-                  S.currentTarget.style.backgroundColor = "#e5e7eb";
+                onClick: U,
+                style: A.backButton,
+                onMouseOver: (x) => {
+                  x.currentTarget.style.backgroundColor = "#e5e7eb";
                 },
-                onMouseOut: (S) => {
-                  S.currentTarget.style.backgroundColor = "#f3f4f6";
+                onMouseOut: (x) => {
+                  x.currentTarget.style.backgroundColor = "#f3f4f6";
                 },
-                children: T.backToLoginButton
+                children: M.backToLoginButton
               }
             )
           ] })
@@ -3057,18 +3060,18 @@ function Jt({
         return null;
     }
   };
-  return /* @__PURE__ */ c("div", { style: d.container, className: w, children: [
+  return /* @__PURE__ */ l("div", { style: A.container, className: w, children: [
     /* @__PURE__ */ n("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ n("h1", { style: d.title, children: T.title }),
+    /* @__PURE__ */ n("h1", { style: A.title, children: M.title }),
     _()
   ] });
 }
-const xt = {
+const kt = {
   title: "Reset Password",
   subtitle: "Enter your email address and we'll send you a link to reset your password.",
   emailLabel: "Email",
@@ -3090,7 +3093,7 @@ const xt = {
   resetLoadingText: "Resetting...",
   resetSuccessMessage: "Password reset successfully!",
   passwordMismatchError: "Passwords do not match"
-}, kt = {
+}, xt = {
   container: {
     maxWidth: "400px",
     margin: "0 auto",
@@ -3189,106 +3192,106 @@ function Yt({
   token: r = "",
   onSuccess: s,
   onError: o,
-  onBackToLogin: g,
+  onBackToLogin: h,
   onModeChange: w,
-  className: x
+  className: k
 }) {
-  const [b, A] = v(""), [m, f] = v(r), [u, y] = v(""), [E, C] = v(""), [q, T] = v(!1), [d, P] = v(""), [R, z] = v(""), [G, $] = v({}), { requestPasswordReset: _, confirmPasswordReset: S } = ae(), { tenant: M } = se(), L = { ...xt, ...i }, l = { ...kt, ...e }, I = () => {
+  const [b, P] = v(""), [m, p] = v(r), [u, y] = v(""), [L, R] = v(""), [z, M] = v(!1), [A, d] = v(""), [C, F] = v(""), [G, U] = v({}), { requestPasswordReset: _, confirmPasswordReset: x } = ae(), { tenant: T } = se(), E = { ...kt, ...i }, c = { ...xt, ...e }, I = () => {
     const H = {};
-    return b.trim() || (H.email = !0), $(H), Object.keys(H).length === 0;
-  }, k = () => {
+    return b.trim() || (H.email = !0), U(H), Object.keys(H).length === 0;
+  }, S = () => {
     const H = {};
-    return m.trim() || (H.token = !0), u.trim() || (H.newPassword = !0), E.trim() || (H.confirmPassword = !0), $(H), Object.keys(H).length === 0;
-  }, h = async (H) => {
+    return m.trim() || (H.token = !0), u.trim() || (H.newPassword = !0), L.trim() || (H.confirmPassword = !0), U(H), Object.keys(H).length === 0;
+  }, g = async (H) => {
     if (H.preventDefault(), !!I()) {
-      if (!(M != null && M.id)) {
-        P("Tenant not found");
+      if (!(T != null && T.id)) {
+        d("Tenant not found");
         return;
       }
-      T(!0), P(""), z("");
+      M(!0), d(""), F("");
       try {
-        await _({ email: b, tenantId: M.id }), z(L.successMessage), s == null || s();
+        await _({ email: b, tenantId: T.id }), F(E.successMessage), s == null || s();
       } catch (N) {
-        const W = N.message || L.errorMessage;
-        P(W), o == null || o(W);
+        const W = N.message || E.errorMessage;
+        d(W), o == null || o(W);
       } finally {
-        T(!1);
+        M(!1);
       }
     }
   }, a = async (H) => {
-    if (H.preventDefault(), !!k()) {
-      if (u !== E) {
-        P(L.passwordMismatchError), $({ confirmPassword: !0 });
+    if (H.preventDefault(), !!S()) {
+      if (u !== L) {
+        d(E.passwordMismatchError), U({ confirmPassword: !0 });
         return;
       }
-      T(!0), P(""), z("");
+      M(!0), d(""), F("");
       try {
-        await S({ token: m, newPassword: u }), z(L.resetSuccessMessage), s == null || s();
+        await x({ token: m, newPassword: u }), F(E.resetSuccessMessage), s == null || s();
       } catch (N) {
-        const W = N.message || L.errorMessage;
-        P(W), o == null || o(W);
+        const W = N.message || E.errorMessage;
+        d(W), o == null || o(W);
       } finally {
-        T(!1);
+        M(!1);
       }
     }
-  }, p = (H) => ({
-    ...l.input,
-    ...G[H] ? l.inputError : {}
+  }, f = (H) => ({
+    ...c.input,
+    ...G[H] ? c.inputError : {}
   }), O = () => ({
-    ...l.button,
-    ...q ? l.buttonLoading : {}
+    ...c.button,
+    ...z ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const H = m && u && E;
-    return /* @__PURE__ */ c("div", { className: x, style: l.container, children: [
-      /* @__PURE__ */ n("h2", { style: l.title, children: L.resetTitle }),
-      /* @__PURE__ */ n("p", { style: l.subtitle, children: L.resetSubtitle }),
-      /* @__PURE__ */ c("form", { onSubmit: a, style: l.form, children: [
-        /* @__PURE__ */ c("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: L.tokenLabel }),
+    const H = m && u && L;
+    return /* @__PURE__ */ l("div", { className: k, style: c.container, children: [
+      /* @__PURE__ */ n("h2", { style: c.title, children: E.resetTitle }),
+      /* @__PURE__ */ n("p", { style: c.subtitle, children: E.resetSubtitle }),
+      /* @__PURE__ */ l("form", { onSubmit: a, style: c.form, children: [
+        /* @__PURE__ */ l("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ n("label", { style: c.label, children: E.tokenLabel }),
           /* @__PURE__ */ n(
             "input",
             {
               type: "text",
               value: m,
               onChange: (N) => {
-                f(N.target.value), G.token && $((W) => ({ ...W, token: !1 }));
+                p(N.target.value), G.token && U((W) => ({ ...W, token: !1 }));
               },
-              placeholder: L.tokenPlaceholder,
-              style: p("token"),
-              disabled: q
+              placeholder: E.tokenPlaceholder,
+              style: f("token"),
+              disabled: z
             }
           )
         ] }),
-        /* @__PURE__ */ c("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: L.newPasswordLabel }),
+        /* @__PURE__ */ l("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ n("label", { style: c.label, children: E.newPasswordLabel }),
           /* @__PURE__ */ n(
             "input",
             {
               type: "password",
               value: u,
               onChange: (N) => {
-                y(N.target.value), G.newPassword && $((W) => ({ ...W, newPassword: !1 }));
+                y(N.target.value), G.newPassword && U((W) => ({ ...W, newPassword: !1 }));
               },
-              placeholder: L.newPasswordPlaceholder,
-              style: p("newPassword"),
-              disabled: q
+              placeholder: E.newPasswordPlaceholder,
+              style: f("newPassword"),
+              disabled: z
             }
           )
         ] }),
-        /* @__PURE__ */ c("div", { style: l.fieldGroup, children: [
-          /* @__PURE__ */ n("label", { style: l.label, children: L.confirmPasswordLabel }),
+        /* @__PURE__ */ l("div", { style: c.fieldGroup, children: [
+          /* @__PURE__ */ n("label", { style: c.label, children: E.confirmPasswordLabel }),
           /* @__PURE__ */ n(
             "input",
             {
               type: "password",
-              value: E,
+              value: L,
               onChange: (N) => {
-                C(N.target.value), G.confirmPassword && $((W) => ({ ...W, confirmPassword: !1 })), d === L.passwordMismatchError && P("");
+                R(N.target.value), G.confirmPassword && U((W) => ({ ...W, confirmPassword: !1 })), A === E.passwordMismatchError && d("");
               },
-              placeholder: L.confirmPasswordPlaceholder,
-              style: p("confirmPassword"),
-              disabled: q
+              placeholder: E.confirmPasswordPlaceholder,
+              style: f("confirmPassword"),
+              disabled: z
             }
           )
         ] }),
@@ -3296,44 +3299,44 @@ function Yt({
           "button",
           {
             type: "submit",
-            disabled: !H || q,
+            disabled: !H || z,
             style: {
               ...O(),
-              ...!H || q ? l.buttonDisabled : {}
+              ...!H || z ? c.buttonDisabled : {}
             },
-            children: q ? L.resetLoadingText : L.resetSubmitButton
+            children: z ? E.resetLoadingText : E.resetSubmitButton
           }
         ),
-        d && /* @__PURE__ */ n("div", { style: l.errorText, children: d }),
-        R && /* @__PURE__ */ n("div", { style: l.successText, children: R })
+        A && /* @__PURE__ */ n("div", { style: c.errorText, children: A }),
+        C && /* @__PURE__ */ n("div", { style: c.successText, children: C })
       ] }),
-      /* @__PURE__ */ c("div", { style: l.linkContainer, children: [
-        /* @__PURE__ */ n("a", { onClick: g, style: l.link, children: L.backToLoginLink }),
-        w && /* @__PURE__ */ c(B, { children: [
+      /* @__PURE__ */ l("div", { style: c.linkContainer, children: [
+        /* @__PURE__ */ n("a", { onClick: h, style: c.link, children: E.backToLoginLink }),
+        w && /* @__PURE__ */ l(q, { children: [
           /* @__PURE__ */ n("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-          /* @__PURE__ */ n("a", { onClick: () => w("request"), style: l.link, children: "Request New Link" })
+          /* @__PURE__ */ n("a", { onClick: () => w("request"), style: c.link, children: "Request New Link" })
         ] })
       ] })
     ] });
   }
   const K = b;
-  return /* @__PURE__ */ c("div", { className: x, style: l.container, children: [
-    /* @__PURE__ */ n("h2", { style: l.title, children: L.title }),
-    /* @__PURE__ */ n("p", { style: l.subtitle, children: L.subtitle }),
-    /* @__PURE__ */ c("form", { onSubmit: h, style: l.form, children: [
-      /* @__PURE__ */ c("div", { style: l.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: l.label, children: L.emailLabel }),
+  return /* @__PURE__ */ l("div", { className: k, style: c.container, children: [
+    /* @__PURE__ */ n("h2", { style: c.title, children: E.title }),
+    /* @__PURE__ */ n("p", { style: c.subtitle, children: E.subtitle }),
+    /* @__PURE__ */ l("form", { onSubmit: g, style: c.form, children: [
+      /* @__PURE__ */ l("div", { style: c.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: c.label, children: E.emailLabel }),
         /* @__PURE__ */ n(
           "input",
           {
             type: "email",
             value: b,
             onChange: (H) => {
-              A(H.target.value), G.email && $((N) => ({ ...N, email: !1 }));
+              P(H.target.value), G.email && U((N) => ({ ...N, email: !1 }));
             },
-            placeholder: L.emailPlaceholder,
-            style: p("email"),
-            disabled: q
+            placeholder: E.emailPlaceholder,
+            style: f("email"),
+            disabled: z
           }
         )
       ] }),
@@ -3341,22 +3344,22 @@ function Yt({
         "button",
         {
           type: "submit",
-          disabled: !K || q,
+          disabled: !K || z,
           style: {
             ...O(),
-            ...!K || q ? l.buttonDisabled : {}
+            ...!K || z ? c.buttonDisabled : {}
           },
-          children: q ? L.loadingText : L.submitButton
+          children: z ? E.loadingText : E.submitButton
         }
       ),
-      d && /* @__PURE__ */ n("div", { style: l.errorText, children: d }),
-      R && /* @__PURE__ */ n("div", { style: l.successText, children: R })
+      A && /* @__PURE__ */ n("div", { style: c.errorText, children: A }),
+      C && /* @__PURE__ */ n("div", { style: c.successText, children: C })
     ] }),
-    /* @__PURE__ */ c("div", { style: l.linkContainer, children: [
-      /* @__PURE__ */ n("a", { onClick: g, style: l.link, children: L.backToLoginLink }),
-      w && /* @__PURE__ */ c(B, { children: [
+    /* @__PURE__ */ l("div", { style: c.linkContainer, children: [
+      /* @__PURE__ */ n("a", { onClick: h, style: c.link, children: E.backToLoginLink }),
+      w && /* @__PURE__ */ l(q, { children: [
         /* @__PURE__ */ n("span", { style: { margin: "0 0.5rem", color: "#6b7280" }, children: "•" }),
-        /* @__PURE__ */ n("a", { onClick: () => w("reset"), style: l.link, children: "I have a token" })
+        /* @__PURE__ */ n("a", { onClick: () => w("reset"), style: c.link, children: "I have a token" })
       ] })
     ] })
   ] });
@@ -3373,7 +3376,7 @@ const At = () => /* @__PURE__ */ n(
     },
     children: /* @__PURE__ */ n("div", { children: "Loading..." })
   }
-), Tt = ({ error: i, retry: e }) => /* @__PURE__ */ c(
+), Tt = ({ error: i, retry: e }) => /* @__PURE__ */ l(
   "div",
   {
     style: {
@@ -3413,31 +3416,31 @@ function Qt({
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: s, appError: o, retryApp: g } = oe(), w = Me(), x = (w == null ? void 0 : w.isTenantLoading) ?? !1, b = (w == null ? void 0 : w.tenantError) ?? null, A = (w == null ? void 0 : w.tenantSlug) ?? null, m = (w == null ? void 0 : w.retryTenant) ?? (() => {
-  }), f = r && w && A, u = s || f && x, y = o || (f ? b : null), E = () => {
-    o && g(), b && w && m();
+  const { isAppLoading: s, appError: o, retryApp: h } = oe(), w = Me(), k = (w == null ? void 0 : w.isTenantLoading) ?? !1, b = (w == null ? void 0 : w.tenantError) ?? null, P = (w == null ? void 0 : w.tenantSlug) ?? null, m = (w == null ? void 0 : w.retryTenant) ?? (() => {
+  }), p = r && w && P, u = s || p && k, y = o || (p ? b : null), L = () => {
+    o && h(), b && w && m();
   };
   if (u)
-    return /* @__PURE__ */ n(B, { children: e || /* @__PURE__ */ n(At, {}) });
+    return /* @__PURE__ */ n(q, { children: e || /* @__PURE__ */ n(At, {}) });
   if (y) {
-    const C = typeof t == "function" ? t(y, E) : t || /* @__PURE__ */ n(Tt, { error: y, retry: E });
-    return /* @__PURE__ */ n(B, { children: C });
+    const R = typeof t == "function" ? t(y, L) : t || /* @__PURE__ */ n(Tt, { error: y, retry: L });
+    return /* @__PURE__ */ n(q, { children: R });
   }
-  return /* @__PURE__ */ n(B, { children: i });
+  return /* @__PURE__ */ n(q, { children: i });
 }
 function Xt(i = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: s } = oe(), o = Me(), g = (o == null ? void 0 : o.isTenantLoading) ?? !1, w = (o == null ? void 0 : o.tenantError) ?? null, x = (o == null ? void 0 : o.tenant) ?? null, b = (o == null ? void 0 : o.tenantSlug) ?? null, A = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), m = i && o && b, f = e || m && g, u = t || (m ? w : null);
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: s } = oe(), o = Me(), h = (o == null ? void 0 : o.isTenantLoading) ?? !1, w = (o == null ? void 0 : o.tenantError) ?? null, k = (o == null ? void 0 : o.tenant) ?? null, b = (o == null ? void 0 : o.tenantSlug) ?? null, P = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), m = i && o && b, p = e || m && h, u = t || (m ? w : null);
   return {
-    isLoading: f,
+    isLoading: p,
     error: u,
-    isReady: !f && !u && s !== null && (!m || x !== null),
+    isReady: !p && !u && s !== null && (!m || k !== null),
     retry: () => {
-      t && r(), w && o && A();
+      t && r(), w && o && P();
     },
     // Individual states
     app: { isLoading: e, error: t, data: s },
-    tenant: o ? { isLoading: g, error: w, data: x } : null
+    tenant: o ? { isLoading: h, error: w, data: k } : null
   };
 }
 class Zt {
@@ -3710,7 +3713,7 @@ export {
   Zt as PermissionApiService,
   qt as Protected,
   zt as ProtectedRoute,
-  xe as RoleApiService,
+  ke as RoleApiService,
   we as SessionManager,
   Gt as SignupForm,
   Ze as SubscriptionApiService,
@@ -3718,11 +3721,11 @@ export {
   er as SubscriptionPlanApiService,
   Bt as SubscriptionProvider,
   ue as TenantApiService,
-  Dt as TenantProvider,
+  $t as TenantProvider,
   Ot as TenantRoute,
   Oe as UserApiService,
   ie as UserType,
-  $t as useApi,
+  Ft as useApi,
   oe as useApp,
   Xt as useAppLoaderState,
   ae as useAuth,
@@ -3732,6 +3735,6 @@ export {
   me as useTenant,
   se as useTenantInfo,
   Me as useTenantOptional,
-  Ft as useTenantSettings
+  Dt as useTenantSettings
 };
 //# sourceMappingURL=index.es.js.map