@skylabs-digital/react-identity-access 2.7.0 → 2.9.0

package/dist/index.es.js

@@ -1,7 +1,7 @@
 import { jsx as n, Fragment as j, jsxs as l } from "react/jsx-runtime";
-import { createContext as ue, useMemo as X, useState as S, useCallback as se, useEffect as te, useContext as ne, useRef as Ge } from "react";
-import { useLocation as Se, Navigate as pe } from "react-router-dom";
-class re {
+import { createContext as ue, useMemo as Q, useState as S, useCallback as ie, useEffect as re, useContext as se, useRef as Ge } from "react";
+import { useLocation as ve, Navigate as pe } from "react-router-dom";
+class ne {
   // SessionManager instance
   constructor(e, t = 1e4) {
     this.baseUrl = e.replace(/\/$/, ""), this.timeout = t;
@@ -65,7 +65,7 @@ class re {
     return this.request("DELETE", e, void 0, t);
   }
 }
-class Pe {
+class Me {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -124,16 +124,16 @@ class Pe {
     })).data;
   }
 }
-const ve = ue(null);
-function Bt({ config: i, children: e }) {
-  const t = X(
+const ke = ue(null);
+function qt({ config: i, children: e }) {
+  const t = Q(
     () => {
-      var f, A, L;
+      var f, A, E;
       return {
         enabled: ((f = i.cache) == null ? void 0 : f.enabled) ?? !0,
         ttl: ((A = i.cache) == null ? void 0 : A.ttl) ?? 3e5,
         // 5 minutes default
-        storageKey: ((L = i.cache) == null ? void 0 : L.storageKey) ?? `app_cache_${i.appId}`
+        storageKey: ((E = i.cache) == null ? void 0 : E.storageKey) ?? `app_cache_${i.appId}`
       };
     },
     [i.cache, i.appId]
@@ -147,7 +147,7 @@ function Bt({ config: i, children: e }) {
     } catch {
       return null;
     }
-  }), [o, a] = S(!r), [g, w] = S(null), m = X(() => {
+  }), [o, a] = S(!r), [g, w] = S(null), m = Q(() => {
     const f = () => {
       k();
     };
@@ -160,39 +160,39 @@ function Bt({ config: i, children: e }) {
       appError: g,
       retryApp: f
     };
-  }, [i, r, o, g]), k = se(
+  }, [i, r, o, g]), k = ie(
     async (f = !1) => {
       if (!(!f && t.enabled && r))
         try {
           a(!0), w(null);
-          const A = new re(i.baseUrl), D = await new Pe(A, {}).getPublicAppInfo(i.appId);
-          if (s(D), t.enabled)
+          const A = new ne(i.baseUrl), $ = await new Me(A, {}).getPublicAppInfo(i.appId);
+          if (s($), t.enabled)
             try {
-              const R = {
-                data: D,
+              const L = {
+                data: $,
                 timestamp: Date.now(),
                 appId: i.appId
               };
-              localStorage.setItem(t.storageKey, JSON.stringify(R));
-            } catch (R) {
-              console.warn("Failed to cache app info:", R);
+              localStorage.setItem(t.storageKey, JSON.stringify(L));
+            } catch (L) {
+              console.warn("Failed to cache app info:", L);
             }
         } catch (A) {
-          const L = A instanceof Error ? A : new Error("Failed to load app information");
-          w(L), s(null);
+          const E = A instanceof Error ? A : new Error("Failed to load app information");
+          w(E), s(null);
         } finally {
           a(!1);
         }
     },
     [i.baseUrl, i.appId, t, r]
-  ), b = se(async () => {
+  ), b = ie(async () => {
     if (!(!t.enabled || !r))
       try {
         const f = localStorage.getItem(t.storageKey);
         if (!f) return;
         const A = JSON.parse(f);
         if (Date.now() - A.timestamp > t.ttl * 0.5) {
-          const D = new re(i.baseUrl), P = await new Pe(D, {}).getPublicAppInfo(i.appId);
+          const $ = new ne(i.baseUrl), P = await new Me($, {}).getPublicAppInfo(i.appId);
           s(P);
           const u = {
             data: P,
@@ -205,21 +205,21 @@ function Bt({ config: i, children: e }) {
         console.warn("Background app refresh failed:", f);
       }
   }, [i, t, r]);
-  return te(() => {
+  return re(() => {
     r ? b() : k();
-  }, []), /* @__PURE__ */ n(ve.Provider, { value: m, children: e });
+  }, []), /* @__PURE__ */ n(ke.Provider, { value: m, children: e });
 }
 function he() {
-  const i = ne(ve);
+  const i = se(ke);
   if (!i)
     throw new Error("useApp must be used within an AppProvider");
   return i;
 }
-function Ee() {
-  return ne(ve);
+function Fe() {
+  return se(ke);
 }
-const qt = he;
-class be {
+const zt = he;
+class Se {
   constructor(e = {}) {
     this.refreshPromise = null, this.refreshQueue = [], e.tenantSlug !== void 0 ? this.storageKey = e.tenantSlug ? `auth_tokens_${e.tenantSlug}` : "auth_tokens" : this.storageKey = e.storageKey || "auth_tokens", this.autoRefresh = e.autoRefresh ?? !0, this.refreshThreshold = e.refreshThreshold || 3e5, this.onRefreshFailed = e.onRefreshFailed, this.baseUrl = e.baseUrl || "", this.tokenStorage = e.tokenStorage || this.createTokenStorage(this.storageKey);
   }
@@ -417,7 +417,7 @@ class Ke {
     });
   }
 }
-class Me {
+class Ie {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -682,9 +682,9 @@ function nt() {
     newUrl: i.toString()
   }), window.history.replaceState({}, "", i.toString());
 }
-const ke = ue(null);
-function zt({ config: i, children: e }) {
-  const { baseUrl: t, appInfo: r, appId: s } = he(), o = se(() => typeof window > "u" ? null : Xe(
+const xe = ue(null);
+function Ot({ config: i, children: e }) {
+  const { baseUrl: t, appInfo: r, appId: s } = he(), o = ie(() => typeof window > "u" ? null : Xe(
     {
       tenantMode: i.tenantMode || "selector",
       baseDomain: i.baseDomain,
@@ -695,12 +695,12 @@ function zt({ config: i, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [i.tenantMode, i.baseDomain, i.selectorParam]), [a, g] = S(() => o()), w = X(
+  ), [i.tenantMode, i.baseDomain, i.selectorParam]), [a, g] = S(() => o()), w = Q(
     () => {
-      var c, I, T;
+      var c, R, T;
       return {
         enabled: ((c = i.cache) == null ? void 0 : c.enabled) ?? !0,
-        ttl: ((I = i.cache) == null ? void 0 : I.ttl) ?? 5 * 60 * 1e3,
+        ttl: ((R = i.cache) == null ? void 0 : R.ttl) ?? 5 * 60 * 1e3,
         // 5 minutes default
         storageKey: ((T = i.cache) == null ? void 0 : T.storageKey) ?? `tenant_cache_${a || "default"}`
       };
@@ -712,22 +712,22 @@ function zt({ config: i, children: e }) {
     try {
       const c = localStorage.getItem(w.storageKey);
       if (!c) return null;
-      const I = JSON.parse(c);
-      return Date.now() - I.timestamp < w.ttl && I.tenantSlug === a ? I.data : (localStorage.removeItem(w.storageKey), null);
+      const R = JSON.parse(c);
+      return Date.now() - R.timestamp < w.ttl && R.tenantSlug === a ? R.data : (localStorage.removeItem(w.storageKey), null);
     } catch {
       return null;
     }
-  }), [b, f] = S(!m && !i.initialTenant), [A, L] = S(null), [D, R] = S(null), [P, u] = S(!1), [N, z] = S(null);
-  te(() => {
+  }), [b, f] = S(!m && !i.initialTenant), [A, E] = S(null), [$, L] = S(null), [P, u] = S(!1), [M, z] = S(null);
+  re(() => {
     const c = o();
     g(c);
   }, [o]);
-  const E = (r == null ? void 0 : r.settingsSchema) || null, p = se(
-    async (c, I = !1) => {
-      if (!(!I && w.enabled && m && m.domain === c))
+  const N = (r == null ? void 0 : r.settingsSchema) || null, p = ie(
+    async (c, R = !1) => {
+      if (!(!R && w.enabled && m && m.domain === c))
         try {
-          f(!0), L(null);
-          const T = new re(t), d = await new de(T, s).getPublicTenantInfo(c);
+          f(!0), E(null);
+          const T = new ne(t), d = await new de(T, s).getPublicTenantInfo(c);
           if (k(d), w.enabled)
             try {
               const y = {
@@ -741,20 +741,20 @@ function zt({ config: i, children: e }) {
             }
         } catch (T) {
           const h = T instanceof Error ? T : new Error("Failed to load tenant information");
-          L(h), k(null);
+          E(h), k(null);
         } finally {
           f(!1);
         }
     },
     [t, s, w, m]
-  ), O = se(async () => {
+  ), O = ie(async () => {
     if (!(!w.enabled || !m || !a))
       try {
         const c = localStorage.getItem(w.storageKey);
         if (!c) return;
-        const I = JSON.parse(c);
-        if (Date.now() - I.timestamp > w.ttl * 0.5) {
-          const h = new re(t), y = await new de(h, s).getPublicTenantInfo(a);
+        const R = JSON.parse(c);
+        if (Date.now() - R.timestamp > w.ttl * 0.5) {
+          const h = new ne(t), y = await new de(h, s).getPublicTenantInfo(a);
           k(y);
           const G = {
             data: y,
@@ -766,47 +766,47 @@ function zt({ config: i, children: e }) {
       } catch (c) {
         console.warn("Background tenant refresh failed:", c);
       }
-  }, [t, s, w, m, a]), v = se(async () => {
+  }, [t, s, w, m, a]), v = ie(async () => {
     if (m != null && m.id)
       try {
         u(!0), z(null);
-        const c = new re(t), T = await new de(c, m.appId).getTenantSettings(m.id);
-        R(T);
+        const c = new ne(t), T = await new de(c, m.appId).getTenantSettings(m.id);
+        L(T);
       } catch (c) {
-        const I = c instanceof Error ? c : new Error("Failed to load tenant settings");
-        z(I), R(null);
+        const R = c instanceof Error ? c : new Error("Failed to load tenant settings");
+        z(R), L(null);
       } finally {
         u(!1);
       }
-  }, [t, m]), C = se(() => {
+  }, [t, m]), C = ie(() => {
     v();
-  }, [v]), x = se(
+  }, [v]), x = ie(
     (c) => {
-      if (!E)
+      if (!N)
         return { isValid: !0, errors: [] };
-      const I = [];
+      const R = [];
       try {
-        return E.properties && Object.entries(E.properties).forEach(([T, h]) => {
+        return N.properties && Object.entries(N.properties).forEach(([T, h]) => {
           var y;
           const d = c[T];
-          if ((y = E.required) != null && y.includes(T) && d == null) {
-            I.push(`Field '${T}' is required`);
+          if ((y = N.required) != null && y.includes(T) && d == null) {
+            R.push(`Field '${T}' is required`);
             return;
           }
           if (d != null) {
             if (h.type) {
-              const G = h.type, $ = typeof d;
-              G === "string" && $ !== "string" ? I.push(`Field '${T}' must be a string`) : (G === "number" || G === "integer") && $ !== "number" ? I.push(`Field '${T}' must be a number`) : G === "boolean" && $ !== "boolean" ? I.push(`Field '${T}' must be a boolean`) : G === "array" && !Array.isArray(d) && I.push(`Field '${T}' must be an array`);
+              const G = h.type, D = typeof d;
+              G === "string" && D !== "string" ? R.push(`Field '${T}' must be a string`) : (G === "number" || G === "integer") && D !== "number" ? R.push(`Field '${T}' must be a number`) : G === "boolean" && D !== "boolean" ? R.push(`Field '${T}' must be a boolean`) : G === "array" && !Array.isArray(d) && R.push(`Field '${T}' must be an array`);
             }
-            h.minLength !== void 0 && typeof d == "string" && d.length < h.minLength && I.push(
+            h.minLength !== void 0 && typeof d == "string" && d.length < h.minLength && R.push(
               `Field '${T}' must be at least ${h.minLength} characters long`
-            ), h.maxLength !== void 0 && typeof d == "string" && d.length > h.maxLength && I.push(
+            ), h.maxLength !== void 0 && typeof d == "string" && d.length > h.maxLength && R.push(
               `Field '${T}' must be no more than ${h.maxLength} characters long`
-            ), h.minimum !== void 0 && typeof d == "number" && d < h.minimum && I.push(`Field '${T}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof d == "number" && d > h.maximum && I.push(`Field '${T}' must be no more than ${h.maximum}`), h.pattern && typeof d == "string" && (new RegExp(h.pattern).test(d) || I.push(`Field '${T}' does not match the required pattern`)), h.enum && !h.enum.includes(d) && I.push(`Field '${T}' must be one of: ${h.enum.join(", ")}`);
+            ), h.minimum !== void 0 && typeof d == "number" && d < h.minimum && R.push(`Field '${T}' must be at least ${h.minimum}`), h.maximum !== void 0 && typeof d == "number" && d > h.maximum && R.push(`Field '${T}' must be no more than ${h.maximum}`), h.pattern && typeof d == "string" && (new RegExp(h.pattern).test(d) || R.push(`Field '${T}' does not match the required pattern`)), h.enum && !h.enum.includes(d) && R.push(`Field '${T}' must be one of: ${h.enum.join(", ")}`);
           }
         }), {
-          isValid: I.length === 0,
-          errors: I
+          isValid: R.length === 0,
+          errors: R
         };
       } catch {
         return {
@@ -815,46 +815,46 @@ function zt({ config: i, children: e }) {
         };
       }
     },
-    [E]
+    [N]
   );
-  te(() => {
-    !i.initialTenant && a ? m ? O() : p(a) : !i.initialTenant && !a && (k(null), L(null), f(!1));
-  }, [i.initialTenant, a, m, p, O]), te(() => {
-    m != null && m.id ? v() : (R(null), z(null), u(!1));
+  re(() => {
+    !i.initialTenant && a ? m ? O() : p(a) : !i.initialTenant && !a && (k(null), E(null), f(!1));
+  }, [i.initialTenant, a, m, p, O]), re(() => {
+    m != null && m.id ? v() : (L(null), z(null), u(!1));
   }, [m == null ? void 0 : m.id, v]);
-  const M = se(
-    (c, I) => {
-      const { mode: T = "reload", tokens: h, redirectPath: d } = I || {}, y = i.tenantMode || "selector";
+  const I = ie(
+    (c, R) => {
+      const { mode: T = "reload", tokens: h, redirectPath: d } = R || {}, y = i.tenantMode || "selector";
       if (localStorage.setItem("tenant", c), y === "subdomain") {
-        const G = window.location.hostname, $ = Ze(
+        const G = window.location.hostname, D = Ze(
           c,
           G,
           i.baseDomain
         );
-        if (!$) {
+        if (!D) {
           console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
             G
           );
           return;
         }
-        const H = d || window.location.pathname, U = new URL(`${window.location.protocol}//${$}${H}`);
-        new URLSearchParams(window.location.search).forEach((B, J) => {
-          J !== fe && U.searchParams.set(J, B);
+        const H = d || window.location.pathname, U = new URL(`${window.location.protocol}//${D}${H}`);
+        new URLSearchParams(window.location.search).forEach((B, K) => {
+          K !== fe && U.searchParams.set(K, B);
         }), h && U.searchParams.set(fe, et(h)), window.location.href = U.toString();
       } else if (y === "selector") {
-        const G = d || window.location.pathname, $ = new URLSearchParams(window.location.search);
-        if ($.set(i.selectorParam || "tenant", c), T === "reload") {
-          const H = `${G}?${$.toString()}${window.location.hash}`;
+        const G = d || window.location.pathname, D = new URLSearchParams(window.location.search);
+        if (D.set(i.selectorParam || "tenant", c), T === "reload") {
+          const H = `${G}?${D.toString()}${window.location.hash}`;
           window.location.href = H;
         } else {
-          const H = `${G}?${$.toString()}${window.location.hash}`;
+          const H = `${G}?${D.toString()}${window.location.hash}`;
           window.history.pushState({}, "", H), g(c), p(c);
         }
       }
     },
     [i.tenantMode, i.selectorParam, i.baseDomain, p]
-  ), F = X(() => ({
+  ), F = Q(() => ({
     // Tenant info
     tenant: m,
     tenantSlug: a,
@@ -864,13 +864,13 @@ function zt({ config: i, children: e }) {
       a && p(a);
     },
     // Settings
-    settings: D,
-    settingsSchema: E,
+    settings: $,
+    settingsSchema: N,
     isSettingsLoading: P,
-    settingsError: N,
+    settingsError: M,
     // Actions
     refreshSettings: C,
-    switchTenant: M,
+    switchTenant: I,
     // Validation
     validateSettings: x
   }), [
@@ -878,27 +878,27 @@ function zt({ config: i, children: e }) {
     a,
     b,
     A,
-    D,
-    E,
-    P,
+    $,
     N,
-    C,
+    P,
     M,
+    C,
+    I,
     x
   ]);
-  return /* @__PURE__ */ n(ke.Provider, { value: F, children: e });
+  return /* @__PURE__ */ n(xe.Provider, { value: F, children: e });
 }
 function me() {
-  const i = ne(ke);
+  const i = se(xe);
   if (!i)
     throw new Error("useTenant must be used within a TenantProvider");
   return i;
 }
 function ye() {
-  return ne(ke);
+  return se(xe);
 }
-const Ot = me;
-function Wt() {
+const Wt = me;
+function jt() {
   const { settings: i, settingsSchema: e, isSettingsLoading: t, settingsError: r, validateSettings: s } = me();
   return {
     settings: i,
@@ -918,26 +918,31 @@ function le() {
     retry: s
   };
 }
-const xe = ue(null);
-function jt({ config: i = {}, children: e }) {
-  const { appId: t, baseUrl: r } = he(), { tenant: s, tenantSlug: o, switchTenant: a } = me(), [g, w] = S(i.initialRoles || []), [m, k] = S(!i.initialRoles), [b, f] = S(null), [A, L] = S(!1), [D, R] = S(null), [P, u] = S(0), [N, z] = S(!1), E = Ge({ done: !1, urlTokens: null });
-  E.current.done || (E.current.done = !0, E.current.urlTokens = rt(), E.current.urlTokens && console.log("[AuthProvider] SYNC: URL tokens found"));
-  const p = X(() => {
-    const $ = new be({
+const Ae = ue(null);
+function Vt({ config: i = {}, children: e }) {
+  const { appId: t, baseUrl: r } = he(), { tenant: s, tenantSlug: o, switchTenant: a } = me(), [g, w] = S(i.initialRoles || []), [m, k] = S(!i.initialRoles), [b, f] = S(null), [A, E] = S(!1), [$, L] = S(null), [P, u] = S(0), M = Ge({ done: !1, urlTokens: null });
+  M.current.done || (M.current.done = !0, M.current.urlTokens = rt(), M.current.urlTokens && console.log(
+    "[AuthProvider] SYNC: URL tokens found, will block isAuthReady until user loaded"
+  ));
+  const [z, N] = S(() => {
+    const D = M.current.urlTokens !== null;
+    return console.log("[AuthProvider] SYNC: isLoadingAfterUrlTokens initial:", D), D;
+  }), p = Q(() => {
+    const D = new Se({
       tenantSlug: o,
       onRefreshFailed: i.onRefreshFailed,
       baseUrl: r
     });
-    return E.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), $.setTokens({
-      accessToken: E.current.urlTokens.accessToken,
-      refreshToken: E.current.urlTokens.refreshToken,
-      expiresIn: E.current.urlTokens.expiresIn
-    }), console.log("[AuthProvider] SYNC: Session valid:", $.hasValidSession())), $;
-  }, [o, r, i.onRefreshFailed]), O = E.current.done && !N, v = X(() => {
-    const $ = new re(r);
-    return $.setSessionManager(p), $;
-  }, [r, p]), C = X(() => new Ke(new re(r)), [r]), x = X(() => new Je(v, p), [v, p]), M = X(() => new Me(new re(r)), [r]), F = X(() => b || p.getUser(), [b, p]), c = X(() => F != null && F.roleId && g.find(($) => $.id === F.roleId) || null, [F, g]), I = X(() => (c == null ? void 0 : c.permissions) || [], [c]), T = X(() => p.hasValidSession() && b !== null, [p, b]), h = 5 * 60 * 1e3, d = X(() => {
-    const $ = async (q = !1) => {
+    return M.current.urlTokens && (console.log("[AuthProvider] SYNC: Saving URL tokens to session manager"), D.setTokens({
+      accessToken: M.current.urlTokens.accessToken,
+      refreshToken: M.current.urlTokens.refreshToken,
+      expiresIn: M.current.urlTokens.expiresIn
+    }), console.log("[AuthProvider] SYNC: Session valid:", D.hasValidSession())), D;
+  }, [o, r, i.onRefreshFailed]), O = M.current.done && !z, v = Q(() => {
+    const D = new ne(r);
+    return D.setSessionManager(p), D;
+  }, [r, p]), C = Q(() => new Ke(new ne(r)), [r]), x = Q(() => new Je(v, p), [v, p]), I = Q(() => new Ie(new ne(r)), [r]), F = Q(() => b || p.getUser(), [b, p]), c = Q(() => F != null && F.roleId && g.find((D) => D.id === F.roleId) || null, [F, g]), R = Q(() => (c == null ? void 0 : c.permissions) || [], [c]), T = Q(() => p.hasValidSession() && b !== null, [p, b]), h = 5 * 60 * 1e3, d = Q(() => {
+    const D = async (q = !1) => {
       try {
         if (!p.hasValidSession())
           return;
@@ -949,136 +954,137 @@ function jt({ config: i = {}, children: e }) {
           console.warn("[AuthProvider] No userId available in token or storage");
           return;
         }
-        L(!0), R(null);
+        E(!0), L(null);
         const Z = await x.getUserById(_);
         f(Z), p.setUser(Z), u(Date.now());
       } catch (W) {
-        const Y = W instanceof Error ? W : new Error("Failed to load user data");
-        R(Y), console.error("[AuthProvider] Failed to load user data:", Y);
+        const J = W instanceof Error ? W : new Error("Failed to load user data");
+        L(J), console.error("[AuthProvider] Failed to load user data:", J);
       } finally {
-        L(!1);
+        E(!1);
       }
     }, H = async () => {
-      await $();
+      await D();
     }, U = async (q) => {
-      const { username: W, password: Y, tenantSlug: _ } = q;
-      let Z = s == null ? void 0 : s.id, Q = o, ee = p;
-      _ && (Z = (await new de(v, t).getPublicTenantInfo(_)).id, Q = _);
-      const K = await C.login({
+      const { username: W, password: J, tenantSlug: _, redirectPath: Z } = q;
+      let ee = s == null ? void 0 : s.id, X = o, Y = p;
+      _ && (ee = (await new de(v, t).getPublicTenantInfo(_)).id, X = _);
+      const te = await C.login({
         username: W,
-        password: Y,
+        password: J,
         appId: t,
-        tenantId: Z
-      }), ae = _ && _ !== o;
-      if (ae && (ee = new be({
-        tenantSlug: Q,
+        tenantId: ee
+      }), ce = _ && _ !== o;
+      if (ce && (Y = new Se({
+        tenantSlug: X,
         baseUrl: r
-      })), ee.setTokens({
-        accessToken: K.accessToken,
-        refreshToken: K.refreshToken,
-        expiresIn: K.expiresIn
-      }), K.user) {
-        ee.setUser(K.user), f(K.user);
+      })), Y.setTokens({
+        accessToken: te.accessToken,
+        refreshToken: te.refreshToken,
+        expiresIn: te.expiresIn
+      }), te.user) {
+        Y.setUser(te.user), f(te.user);
         try {
-          await $();
-        } catch (ce) {
-          console.warn("Failed to load complete user data after login:", ce);
+          await D();
+        } catch (be) {
+          console.warn("Failed to load complete user data after login:", be);
         }
       }
-      return ae && Q && Q !== o && a(Q, {
+      return ce && X && X !== o && a(X, {
         tokens: {
-          accessToken: K.accessToken,
-          refreshToken: K.refreshToken,
-          expiresIn: K.expiresIn
-        }
-      }), K;
+          accessToken: te.accessToken,
+          refreshToken: te.refreshToken,
+          expiresIn: te.expiresIn
+        },
+        redirectPath: Z
+      }), te;
     }, V = async (q) => {
-      const { email: W, phoneNumber: Y, name: _, password: Z, lastName: Q, tenantId: ee } = q;
-      if (!W && !Y)
+      const { email: W, phoneNumber: J, name: _, password: Z, lastName: ee, tenantId: X } = q;
+      if (!W && !J)
         throw new Error("Either email or phoneNumber is required");
       if (!_ || !Z)
         throw new Error("Name and password are required");
-      const K = ee ?? (s == null ? void 0 : s.id);
+      const Y = X ?? (s == null ? void 0 : s.id);
       return await C.signup({
         email: W,
-        phoneNumber: Y,
+        phoneNumber: J,
         name: _,
         password: Z,
-        tenantId: K,
-        lastName: Q,
+        tenantId: Y,
+        lastName: ee,
         appId: t
       });
     }, B = async (q) => {
-      const { email: W, phoneNumber: Y, name: _, password: Z, tenantName: Q, lastName: ee } = q;
-      if (!W && !Y)
+      const { email: W, phoneNumber: J, name: _, password: Z, tenantName: ee, lastName: X } = q;
+      if (!W && !J)
         throw new Error("Either email or phoneNumber is required");
-      if (!_ || !Z || !Q)
+      if (!_ || !Z || !ee)
         throw new Error("Name, password, and tenantName are required");
       return await C.signupTenantAdmin({
         email: W,
-        phoneNumber: Y,
+        phoneNumber: J,
         name: _,
         password: Z,
-        tenantName: Q,
+        tenantName: ee,
         appId: t,
-        lastName: ee
+        lastName: X
       });
-    }, J = async (q) => {
-      const { currentPassword: W, newPassword: Y } = q, _ = await p.getAuthHeaders();
-      await C.changePassword({ currentPassword: W, newPassword: Y }, _);
+    }, K = async (q) => {
+      const { currentPassword: W, newPassword: J } = q, _ = await p.getAuthHeaders();
+      await C.changePassword({ currentPassword: W, newPassword: J }, _);
     }, ge = async (q) => {
-      const { email: W, tenantId: Y } = q, _ = Y ?? (s == null ? void 0 : s.id);
+      const { email: W, tenantId: J } = q, _ = J ?? (s == null ? void 0 : s.id);
       if (!_)
         throw new Error("tenantId is required for password reset");
       await C.requestPasswordReset({ email: W, tenantId: _ });
-    }, He = async (q) => {
-      const { token: W, newPassword: Y } = q;
-      await C.confirmPasswordReset({ token: W, newPassword: Y });
     }, Ne = async (q) => {
-      const { email: W, frontendUrl: Y, name: _, lastName: Z, tenantId: Q } = q, ee = Q ?? (s == null ? void 0 : s.id);
-      if (!ee)
+      const { token: W, newPassword: J } = q;
+      await C.confirmPasswordReset({ token: W, newPassword: J });
+    }, Ue = async (q) => {
+      const { email: W, frontendUrl: J, name: _, lastName: Z, tenantId: ee } = q, X = ee ?? (s == null ? void 0 : s.id);
+      if (!X)
         throw new Error("tenantId is required for magic link authentication");
       return await C.sendMagicLink({
         email: W,
-        tenantId: ee,
-        frontendUrl: Y,
+        tenantId: X,
+        frontendUrl: J,
         name: _,
         lastName: Z,
         appId: t
       });
-    }, Ue = async (q) => {
-      const { token: W, email: Y, tenantSlug: _ } = q;
-      let Z = s == null ? void 0 : s.id, Q = o, ee = p;
-      _ && (Z = (await new de(v, t).getPublicTenantInfo(_)).id, Q = _);
-      const K = await C.verifyMagicLink({
+    }, Be = async (q) => {
+      const { token: W, email: J, tenantSlug: _ } = q;
+      let Z = s == null ? void 0 : s.id, ee = o, X = p;
+      _ && (Z = (await new de(v, t).getPublicTenantInfo(_)).id, ee = _);
+      const Y = await C.verifyMagicLink({
         token: W,
-        email: Y,
+        email: J,
         appId: t,
         tenantId: Z
-      }), ae = _ && _ !== o;
-      if (ae && (ee = new be({
-        tenantSlug: Q,
+      }), te = _ && _ !== o;
+      if (te && (X = new Se({
+        tenantSlug: ee,
         baseUrl: r
-      })), ee.setTokens({
-        accessToken: K.accessToken,
-        refreshToken: K.refreshToken,
-        expiresIn: K.expiresIn
-      }), K.user) {
-        ee.setUser(K.user), f(K.user);
+      })), X.setTokens({
+        accessToken: Y.accessToken,
+        refreshToken: Y.refreshToken,
+        expiresIn: Y.expiresIn
+      }), Y.user) {
+        X.setUser(Y.user), f(Y.user);
         try {
-          await $();
+          await D();
         } catch (ce) {
           console.warn("Failed to load complete user data after magic link login:", ce);
         }
       }
-      return ae && Q && Q !== o && a(Q, {
+      return te && ee && ee !== o && a(ee, {
         tokens: {
-          accessToken: K.accessToken,
-          refreshToken: K.refreshToken,
-          expiresIn: K.expiresIn
+          accessToken: Y.accessToken,
+          refreshToken: Y.refreshToken,
+          expiresIn: Y.expiresIn
         }
-      }), K;
-    }, Be = async () => {
+      }), Y;
+    }, qe = async () => {
       const q = p.getTokens();
       if (!(q != null && q.refreshToken))
         throw new Error("No refresh token available");
@@ -1090,32 +1096,32 @@ function jt({ config: i = {}, children: e }) {
         refreshToken: W.refreshToken || q.refreshToken,
         expiresIn: W.expiresIn
       });
-    }, qe = () => {
-      p.clearSession(), f(null), R(null);
-    }, ze = (q) => {
+    }, ze = () => {
+      p.clearSession(), f(null), L(null);
+    }, Oe = (q) => {
       p.setTokens(q);
-    }, Oe = () => p.hasValidSession(), We = () => {
-      p.clearSession(), f(null), R(null);
-    }, je = async () => {
+    }, We = () => p.hasValidSession(), je = () => {
+      p.clearSession(), f(null), L(null);
+    }, Ve = async () => {
       if (t)
         try {
           k(!0);
-          const { roles: q } = await M.getRolesByApp(t);
+          const { roles: q } = await I.getRolesByApp(t);
           w(q);
         } catch (q) {
           console.error("Failed to fetch roles:", q);
         } finally {
           k(!1);
         }
-    }, Ve = async () => {
-      await je();
+    }, _e = async () => {
+      await Ve();
     }, we = (q) => {
-      if (!I || I.length === 0)
+      if (!R || R.length === 0)
         return !1;
       if (typeof q == "string")
-        return I.includes(q);
+        return R.includes(q);
       const W = `${q.resource}.${q.action}`;
-      return I.includes(W);
+      return R.includes(W);
     };
     return {
       // RFC-003: Authentication state
@@ -1125,32 +1131,32 @@ function jt({ config: i = {}, children: e }) {
       login: U,
       signup: V,
       signupTenantAdmin: B,
-      sendMagicLink: Ne,
-      verifyMagicLink: Ue,
-      changePassword: J,
+      sendMagicLink: Ue,
+      verifyMagicLink: Be,
+      changePassword: K,
       requestPasswordReset: ge,
-      confirmPasswordReset: He,
-      refreshToken: Be,
-      logout: qe,
-      setTokens: ze,
-      hasValidSession: Oe,
-      clearSession: We,
+      confirmPasswordReset: Ne,
+      refreshToken: qe,
+      logout: ze,
+      setTokens: Oe,
+      hasValidSession: We,
+      clearSession: je,
       currentUser: b,
       isUserLoading: A,
-      userError: D,
-      loadUserData: $,
+      userError: $,
+      loadUserData: D,
       refreshUser: H,
       isAuthInitializing: !O,
       isAuthReady: O,
       userRole: c,
-      userPermissions: I,
+      userPermissions: R,
       availableRoles: g,
       rolesLoading: m,
       hasPermission: we,
       hasAnyPermission: (q) => q.some((W) => we(W)),
       hasAllPermissions: (q) => q.every((W) => we(W)),
-      getUserPermissionStrings: () => I || [],
-      refreshRoles: Ve
+      getUserPermissionStrings: () => R || [],
+      refreshRoles: _e
     };
   }, [
     T,
@@ -1158,7 +1164,7 @@ function jt({ config: i = {}, children: e }) {
     v,
     C,
     x,
-    M,
+    I,
     t,
     s,
     o,
@@ -1166,18 +1172,18 @@ function jt({ config: i = {}, children: e }) {
     g,
     b,
     A,
-    D,
+    $,
     O,
     c,
-    I,
+    R,
     P,
     h
   ]);
-  te(() => {
+  re(() => {
     !i.initialRoles && t && (async () => {
       try {
         k(!0);
-        const H = new re(r), U = new Me(H), { roles: V } = await U.getRolesByApp(t);
+        const H = new ne(r), U = new Ie(H), { roles: V } = await U.getRolesByApp(t);
         w(V);
       } catch (H) {
         console.error("Failed to fetch roles:", H);
@@ -1187,36 +1193,36 @@ function jt({ config: i = {}, children: e }) {
     })();
   }, [t, r, i.initialRoles]);
   const [y, G] = S(!1);
-  return te(() => {
-    y || (G(!0), E.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), nt(), z(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), d.loadUserData().catch(($) => {
-      console.error("[AuthProvider] Failed to load user data:", $);
+  return re(() => {
+    y || (G(!0), M.current.urlTokens && (console.log("[AuthProvider] EFFECT: Cleaning up URL after sync token processing"), nt(), N(!0), console.log("[AuthProvider] EFFECT: Loading user data (blocking isAuthReady)..."), d.loadUserData().catch((D) => {
+      console.error("[AuthProvider] Failed to load user data:", D);
     }).finally(() => {
-      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), z(!1);
+      console.log("[AuthProvider] EFFECT: User data loaded, releasing isAuthReady"), N(!1);
     })));
-  }, [d, y]), te(() => {
-    const $ = p.getUser();
-    $ && p.hasValidSession() && f($);
-  }, [p]), te(() => {
-    y && (E.current.urlTokens || !b && !A && p.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), d.loadUserData().catch(() => {
+  }, [d, y]), re(() => {
+    const D = p.getUser();
+    D && p.hasValidSession() && f(D);
+  }, [p]), re(() => {
+    y && (M.current.urlTokens || !b && !A && p.hasValidSession() && (console.log("[AuthProvider] Auto-loading user data..."), d.loadUserData().catch(() => {
     })));
-  }, [b, A, d, p, y]), te(() => {
+  }, [b, A, d, p, y]), re(() => {
     if (!p.hasValidSession() || !b)
       return;
-    const $ = setInterval(() => {
+    const D = setInterval(() => {
       d.loadUserData().catch(() => {
       });
     }, h);
-    return () => clearInterval($);
-  }, [p, b, d, h]), /* @__PURE__ */ n(xe.Provider, { value: d, children: e });
+    return () => clearInterval(D);
+  }, [p, b, d, h]), /* @__PURE__ */ n(Ae.Provider, { value: d, children: e });
 }
-function oe() {
-  const i = ne(xe);
+function ae() {
+  const i = se(Ae);
   if (!i)
     throw new Error("useAuth must be used within an AuthProvider");
   return i;
 }
-function Fe() {
-  return ne(xe);
+function Ce() {
+  return se(Ae);
 }
 class st {
   constructor(e, t) {
@@ -1298,42 +1304,42 @@ class st {
     })).data;
   }
 }
-const Ae = ue(null);
-function Vt({ config: i = {}, children: e }) {
-  const t = Ee(), r = ye(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [g, w] = S([]), [m, k] = S(!1), [b, f] = S(null), [A, L] = S(!1), D = X(() => {
-    const u = new re(s);
+const Te = ue(null);
+function _t({ config: i = {}, children: e }) {
+  const t = Fe(), r = ye(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (t == null ? void 0 : t.appId) ?? "", a = (r == null ? void 0 : r.tenant) ?? null, [g, w] = S([]), [m, k] = S(!1), [b, f] = S(null), [A, E] = S(!1), $ = Q(() => {
+    const u = new ne(s);
     return new st(u);
-  }, [s]), R = async () => {
+  }, [s]), L = async () => {
     if (!(a != null && a.id)) {
       w([]);
       return;
     }
     k(!0), f(null);
     try {
-      const u = await D.getTenantFeatureFlags(a.id, o);
+      const u = await $.getTenantFeatureFlags(a.id, o);
       w(u);
     } catch (u) {
-      const N = u instanceof Error ? u.message : "Failed to fetch feature flags";
-      f(N), i.onError && i.onError(u instanceof Error ? u : new Error(N));
+      const M = u instanceof Error ? u.message : "Failed to fetch feature flags";
+      f(M), i.onError && i.onError(u instanceof Error ? u : new Error(M));
     } finally {
       k(!1);
     }
   };
-  te(() => {
+  re(() => {
     if (!s || !o) return;
-    R().finally(() => L(!0));
-    const u = i.refreshInterval || 5 * 60 * 1e3, N = setInterval(R, u);
-    return () => clearInterval(N);
+    L().finally(() => E(!0));
+    const u = i.refreshInterval || 5 * 60 * 1e3, M = setInterval(L, u);
+    return () => clearInterval(M);
   }, [a == null ? void 0 : a.id, s, o, i.refreshInterval]);
-  const P = X(() => {
+  const P = Q(() => {
     const u = (O) => {
       const v = g.find((C) => C.key === O);
       return (v == null ? void 0 : v.value) === !0;
-    }, N = (O) => g.find((v) => v.key === O), z = (O) => {
+    }, M = (O) => g.find((v) => v.key === O), z = (O) => {
       const v = g.find((C) => C.key === O);
       return v ? v.value ? "enabled" : "disabled" : "not_found";
-    }, E = async () => {
-      await R();
+    }, N = async () => {
+      await L();
     }, p = !!(s && o) && (A || !(a != null && a.id));
     return {
       featureFlags: g,
@@ -1341,21 +1347,21 @@ function Vt({ config: i = {}, children: e }) {
       error: b,
       isReady: p,
       isEnabled: u,
-      getFlag: N,
+      getFlag: M,
       getFlagState: z,
-      refresh: E
+      refresh: N
     };
   }, [g, m, b, s, o, a == null ? void 0 : a.id, A]);
-  return /* @__PURE__ */ n(Ae.Provider, { value: P, children: e });
+  return /* @__PURE__ */ n(Te.Provider, { value: P, children: e });
 }
 function it() {
-  const i = ne(Ae);
+  const i = se(Te);
   if (!i)
     throw new Error("useFeatureFlags must be used within a FeatureFlagProvider");
   return i;
 }
-function Ce() {
-  return ne(Ae);
+function De() {
+  return se(Te);
 }
 class ot {
   constructor(e, t) {
@@ -1423,19 +1429,19 @@ class ot {
     )).data;
   }
 }
-const Te = ue(void 0);
-function _t({ config: i = {}, children: e }) {
-  const t = Ee(), r = ye(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, g] = S(null), [w, m] = S(!1), [k, b] = S(null), [f, A] = S(!1), L = X(() => {
-    const P = new re(s);
+const Pe = ue(void 0);
+function Gt({ config: i = {}, children: e }) {
+  const t = Fe(), r = ye(), s = (t == null ? void 0 : t.baseUrl) ?? "", o = (r == null ? void 0 : r.tenant) ?? null, [a, g] = S(null), [w, m] = S(!1), [k, b] = S(null), [f, A] = S(!1), E = Q(() => {
+    const P = new ne(s);
     return new ot(P);
-  }, [s]), D = async () => {
+  }, [s]), $ = async () => {
     if (!(o != null && o.id)) {
       g(null);
       return;
     }
     m(!0), b(null);
     try {
-      const P = await L.getTenantSubscriptionFeatures(o.id);
+      const P = await E.getTenantSubscriptionFeatures(o.id);
       g(P);
     } catch (P) {
       const u = P instanceof Error ? P.message : "Failed to fetch subscription";
@@ -1444,20 +1450,20 @@ function _t({ config: i = {}, children: e }) {
       m(!1);
     }
   };
-  te(() => {
-    if (!s || (D().finally(() => A(!0)), !i.refreshInterval)) return;
-    const P = i.refreshInterval || 10 * 60 * 1e3, u = setInterval(D, P);
+  re(() => {
+    if (!s || ($().finally(() => A(!0)), !i.refreshInterval)) return;
+    const P = i.refreshInterval || 10 * 60 * 1e3, u = setInterval($, P);
     return () => clearInterval(u);
   }, [o == null ? void 0 : o.id, s, i.refreshInterval]);
-  const R = X(() => {
+  const L = Q(() => {
     const P = (a == null ? void 0 : a.features) || [], u = (v) => {
       const C = P.find((x) => x.key === v);
       return C ? C.type === "BOOLEAN" || C.type === "boolean" ? C.value === !0 : !!C.value : !1;
-    }, N = (v) => P.find((C) => C.key === v), z = (v, C) => {
-      const x = P.find((M) => M.key === v);
+    }, M = (v) => P.find((C) => C.key === v), z = (v, C) => {
+      const x = P.find((I) => I.key === v);
       return x ? x.value : C;
-    }, E = (v) => !a || !a.isActive ? !1 : v.includes(a.planId), p = async () => {
-      await D();
+    }, N = (v) => !a || !a.isActive ? !1 : v.includes(a.planId), p = async () => {
+      await $();
     }, O = !!s && (f || !(o != null && o.id));
     return {
       subscription: a,
@@ -1466,25 +1472,25 @@ function _t({ config: i = {}, children: e }) {
       error: k,
       isReady: O,
       isFeatureEnabled: u,
-      getFeature: N,
+      getFeature: M,
       getFeatureValue: z,
-      hasAllowedPlan: E,
+      hasAllowedPlan: N,
       refresh: p
     };
   }, [a, w, k, s, o == null ? void 0 : o.id, f]);
-  return /* @__PURE__ */ n(Te.Provider, { value: R, children: e });
+  return /* @__PURE__ */ n(Pe.Provider, { value: L, children: e });
 }
 function at() {
-  const i = ne(Te);
+  const i = se(Pe);
   if (i === void 0)
     throw new Error("useSubscription must be used within a SubscriptionProvider");
   return i;
 }
-function De() {
-  return ne(Te) ?? null;
+function $e() {
+  return se(Pe) ?? null;
 }
-var ie = /* @__PURE__ */ ((i) => (i.SUPERUSER = "SUPERUSER", i.TENANT_ADMIN = "TENANT_ADMIN", i.USER = "USER", i))(ie || {});
-const Ie = () => /* @__PURE__ */ l(
+var oe = /* @__PURE__ */ ((i) => (i.SUPERUSER = "SUPERUSER", i.TENANT_ADMIN = "TENANT_ADMIN", i.USER = "USER", i))(oe || {});
+const Re = () => /* @__PURE__ */ l(
   "div",
   {
     style: {
@@ -1521,7 +1527,7 @@ const Ie = () => /* @__PURE__ */ l(
       )
     ]
   }
-), Re = ({
+), Le = ({
   userType: i,
   minUserType: e,
   missingPermissions: t
@@ -1564,30 +1570,30 @@ const Ie = () => /* @__PURE__ */ l(
   }
 ), lt = (i, e) => {
   const t = {
-    [ie.USER]: 1,
-    [ie.TENANT_ADMIN]: 2,
-    [ie.SUPERUSER]: 3
+    [oe.USER]: 1,
+    [oe.TENANT_ADMIN]: 2,
+    [oe.SUPERUSER]: 3
   };
   return t[i] >= t[e];
 };
-function Gt({
+function Kt({
   children: i,
   fallback: e,
   minUserType: t,
   requiredPermissions: r,
   requireAllPermissions: s = !1
 }) {
-  const { hasValidSession: o, sessionManager: a, hasPermission: g, hasAnyPermission: w, hasAllPermissions: m } = oe();
+  const { hasValidSession: o, sessionManager: a, hasPermission: g, hasAnyPermission: w, hasAllPermissions: m } = ae();
   if (!o())
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Ie, {}) });
+    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Re, {}) });
   const k = a.getUser();
   if (!k)
-    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Ie, {}) });
+    return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Re, {}) });
   if (t && !lt(k.userType, t))
-    return /* @__PURE__ */ n(Re, { userType: k.userType, minUserType: t });
+    return /* @__PURE__ */ n(Le, { userType: k.userType, minUserType: t });
   if (r && r.length > 0 && !(s ? m(r) : w(r))) {
     const f = r.filter((A) => !g(A)).map((A) => typeof A == "string" ? A : A.name);
-    return /* @__PURE__ */ n(Re, { missingPermissions: f });
+    return /* @__PURE__ */ n(Le, { missingPermissions: f });
   }
   return /* @__PURE__ */ n(j, { children: i });
 }
@@ -1627,7 +1633,7 @@ const ct = ({ redirectPath: i }) => /* @__PURE__ */ n(
       }
     )
   }
-), Le = ({
+), Ee = ({
   userType: i,
   minUserType: e,
   missingPermissions: t
@@ -1680,13 +1686,13 @@ const ct = ({ redirectPath: i }) => /* @__PURE__ */ n(
   }
 ), dt = (i, e) => {
   const t = {
-    [ie.USER]: 1,
-    [ie.TENANT_ADMIN]: 2,
-    [ie.SUPERUSER]: 3
+    [oe.USER]: 1,
+    [oe.TENANT_ADMIN]: 2,
+    [oe.SUPERUSER]: 3
   };
   return t[i] >= t[e];
 };
-function Kt({
+function Jt({
   children: i,
   redirectTo: e = "/login",
   minUserType: t,
@@ -1694,7 +1700,7 @@ function Kt({
   requireAllPermissions: s = !1,
   fallback: o
 }) {
-  const { hasValidSession: a, sessionManager: g, hasPermission: w, hasAnyPermission: m, hasAllPermissions: k } = oe(), b = Se();
+  const { hasValidSession: a, sessionManager: g, hasPermission: w, hasAnyPermission: m, hasAllPermissions: k } = ae(), b = ve();
   if (!a())
     return o ? /* @__PURE__ */ n(j, { children: o }) : /* @__PURE__ */ l(j, { children: [
       /* @__PURE__ */ n(ct, { redirectPath: e }),
@@ -1704,10 +1710,10 @@ function Kt({
   if (!f)
     return /* @__PURE__ */ n(pe, { to: e, state: { from: b.pathname }, replace: !0 });
   if (t && !dt(f.userType, t))
-    return /* @__PURE__ */ n(Le, { userType: f.userType, minUserType: t });
+    return /* @__PURE__ */ n(Ee, { userType: f.userType, minUserType: t });
   if (r && r.length > 0 && !(s ? k(r) : m(r))) {
-    const L = r.filter((D) => !w(D)).map((D) => typeof D == "string" ? D : D.name);
-    return /* @__PURE__ */ n(Le, { missingPermissions: L });
+    const E = r.filter(($) => !w($)).map(($) => typeof $ == "string" ? $ : $.name);
+    return /* @__PURE__ */ n(Ee, { missingPermissions: E });
   }
   return /* @__PURE__ */ n(j, { children: i });
 }
@@ -1748,8 +1754,8 @@ const ut = ({ redirectPath: i }) => /* @__PURE__ */ n(
     )
   }
 );
-function Jt({ children: i, redirectTo: e = "/", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = le(), a = Se();
+function Yt({ children: i, redirectTo: e = "/", fallback: t }) {
+  const { tenant: r, isLoading: s, error: o } = le(), a = ve();
   return s || o ? null : r ? /* @__PURE__ */ n(j, { children: i }) : t ? /* @__PURE__ */ n(j, { children: t }) : /* @__PURE__ */ l(j, { children: [
     /* @__PURE__ */ n(ut, { redirectPath: e }),
     /* @__PURE__ */ n(pe, { to: e, state: { from: a.pathname }, replace: !0 })
@@ -1792,8 +1798,8 @@ const ht = ({ redirectPath: i }) => /* @__PURE__ */ n(
     )
   }
 );
-function Yt({ children: i, redirectTo: e = "/dashboard", fallback: t }) {
-  const { tenant: r, isLoading: s, error: o } = le(), a = Se();
+function Qt({ children: i, redirectTo: e = "/dashboard", fallback: t }) {
+  const { tenant: r, isLoading: s, error: o } = le(), a = ve();
   return s || o ? null : r ? t ? /* @__PURE__ */ n(j, { children: t }) : /* @__PURE__ */ l(j, { children: [
     /* @__PURE__ */ n(ht, { redirectPath: e }),
     /* @__PURE__ */ n(pe, { to: e, state: { from: a.pathname }, replace: !0 })
@@ -1816,7 +1822,7 @@ const gt = () => /* @__PURE__ */ l(
     ]
   }
 );
-function Qt({
+function Xt({
   children: i,
   fallback: e = /* @__PURE__ */ n(gt, {}),
   allowedPlans: t,
@@ -1862,7 +1868,7 @@ const pt = ({ flagName: i }) => /* @__PURE__ */ l(
     ]
   }
 );
-function Xt({ name: i, children: e, fallback: t }) {
+function Zt({ name: i, children: e, fallback: t }) {
   const { isEnabled: r, loading: s } = it();
   return s ? /* @__PURE__ */ n(
     "div",
@@ -2037,7 +2043,7 @@ const ft = () => /* @__PURE__ */ l(
     fontSize: "0.875rem"
   }
 };
-function Zt({
+function er({
   copy: i = {},
   styles: e = {},
   icons: t = {},
@@ -2051,43 +2057,43 @@ function Zt({
   showMagicLinkOption: k = !0,
   className: b
 }) {
-  const [f, A] = S(""), [L, D] = S(""), [R, P] = S(!1), [u, N] = S(!1), [z, E] = S(""), [p, O] = S({}), { login: v } = oe(), { tenant: C } = le(), x = { ...wt, ...i }, M = { ...bt, ...e }, F = { ...yt, ...t }, c = () => {
+  const [f, A] = S(""), [E, $] = S(""), [L, P] = S(!1), [u, M] = S(!1), [z, N] = S(""), [p, O] = S({}), { login: v } = ae(), { tenant: C } = le(), x = { ...wt, ...i }, I = { ...bt, ...e }, F = { ...yt, ...t }, c = () => {
     const d = {};
-    return f.trim() || (d.username = !0), L.trim() || (d.password = !0), O(d), Object.keys(d).length === 0;
-  }, I = async (d) => {
+    return f.trim() || (d.username = !0), E.trim() || (d.password = !0), O(d), Object.keys(d).length === 0;
+  }, R = async (d) => {
     if (d.preventDefault(), !!c()) {
       if (!(C != null && C.id)) {
-        E("Tenant not found");
+        N("Tenant not found");
         return;
       }
-      N(!0), E("");
+      M(!0), N("");
       try {
         const y = await v({
           username: f,
-          password: L
+          password: E
           // tenantId inferred from context automatically
         });
         r == null || r(y);
       } catch (y) {
         const G = y.message || x.errorMessage;
-        E(G), s == null || s(G);
+        N(G), s == null || s(G);
       } finally {
-        N(!1);
+        M(!1);
       }
     }
   }, T = (d) => ({
-    ...M.input,
-    ...p[d] ? M.inputError : {}
+    ...I.input,
+    ...p[d] ? I.inputError : {}
   }), h = () => ({
-    ...M.button,
-    ...u ? M.buttonLoading : {},
-    ...!f || !L || u ? M.buttonDisabled : {}
+    ...I.button,
+    ...u ? I.buttonLoading : {},
+    ...!f || !E || u ? I.buttonDisabled : {}
   });
-  return /* @__PURE__ */ l("div", { className: b, style: M.container, children: [
-    /* @__PURE__ */ n("h2", { style: M.title, children: x.title }),
-    /* @__PURE__ */ l("form", { onSubmit: I, style: M.form, children: [
-      /* @__PURE__ */ l("div", { style: M.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: M.label, children: x.usernameLabel }),
+  return /* @__PURE__ */ l("div", { className: b, style: I.container, children: [
+    /* @__PURE__ */ n("h2", { style: I.title, children: x.title }),
+    /* @__PURE__ */ l("form", { onSubmit: R, style: I.form, children: [
+      /* @__PURE__ */ l("div", { style: I.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: I.label, children: x.usernameLabel }),
         /* @__PURE__ */ n(
           "input",
           {
@@ -2104,18 +2110,18 @@ function Zt({
           }
         )
       ] }),
-      /* @__PURE__ */ l("div", { style: M.fieldGroup, children: [
-        /* @__PURE__ */ n("label", { style: M.label, children: x.passwordLabel }),
-        /* @__PURE__ */ l("div", { style: M.inputContainer, children: [
+      /* @__PURE__ */ l("div", { style: I.fieldGroup, children: [
+        /* @__PURE__ */ n("label", { style: I.label, children: x.passwordLabel }),
+        /* @__PURE__ */ l("div", { style: I.inputContainer, children: [
           /* @__PURE__ */ n(
             "input",
             {
               id: "password",
               name: "password",
-              type: R ? "text" : "password",
-              value: L,
+              type: L ? "text" : "password",
+              value: E,
               onChange: (d) => {
-                D(d.target.value), p.password && O((y) => ({ ...y, password: !1 }));
+                $(d.target.value), p.password && O((y) => ({ ...y, password: !1 }));
               },
               placeholder: x.passwordPlaceholder,
               style: {
@@ -2130,35 +2136,35 @@ function Zt({
             "button",
             {
               type: "button",
-              onClick: () => P(!R),
-              style: M.passwordToggle,
+              onClick: () => P(!L),
+              style: I.passwordToggle,
               disabled: u,
-              "aria-label": R ? "Hide password" : "Show password",
-              children: R ? F.hidePassword : F.showPassword
+              "aria-label": L ? "Hide password" : "Show password",
+              children: L ? F.hidePassword : F.showPassword
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !f || !L || u, style: h(), children: u ? x.loadingText : x.submitButton }),
-      z && /* @__PURE__ */ n("div", { style: M.errorText, children: z })
+      /* @__PURE__ */ n("button", { type: "submit", disabled: !f || !E || u, style: h(), children: u ? x.loadingText : x.submitButton }),
+      z && /* @__PURE__ */ n("div", { style: I.errorText, children: z })
     ] }),
-    (w || m || k) && /* @__PURE__ */ l("div", { style: M.linkContainer, children: [
+    (w || m || k) && /* @__PURE__ */ l("div", { style: I.linkContainer, children: [
       k && /* @__PURE__ */ l("div", { children: [
-        /* @__PURE__ */ l("span", { style: M.divider, children: [
+        /* @__PURE__ */ l("span", { style: I.divider, children: [
           x.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: g, style: M.link, children: x.magicLinkLink })
+        /* @__PURE__ */ n("a", { onClick: g, style: I.link, children: x.magicLinkLink })
       ] }),
-      k && (w || m) && /* @__PURE__ */ n("div", { style: M.divider, children: "•" }),
-      w && /* @__PURE__ */ n("a", { onClick: o, style: M.link, children: x.forgotPasswordLink }),
-      w && m && /* @__PURE__ */ n("div", { style: M.divider, children: "•" }),
+      k && (w || m) && /* @__PURE__ */ n("div", { style: I.divider, children: "•" }),
+      w && /* @__PURE__ */ n("a", { onClick: o, style: I.link, children: x.forgotPasswordLink }),
+      w && m && /* @__PURE__ */ n("div", { style: I.divider, children: "•" }),
       m && /* @__PURE__ */ l("div", { children: [
-        /* @__PURE__ */ l("span", { style: M.divider, children: [
+        /* @__PURE__ */ l("span", { style: I.divider, children: [
           x.signupText,
           " "
         ] }),
-        /* @__PURE__ */ n("a", { onClick: a, style: M.link, children: x.signupLink })
+        /* @__PURE__ */ n("a", { onClick: a, style: I.link, children: x.signupLink })
       ] })
     ] })
   ] });
@@ -2288,7 +2294,7 @@ const St = {
     fontSize: "0.875rem"
   }
 };
-function er({
+function tr({
   copy: i = {},
   styles: e = {},
   signupType: t = "user",
@@ -2300,40 +2306,40 @@ function er({
   showMagicLinkOption: w = !0,
   className: m
 }) {
-  const [k, b] = S(""), [f, A] = S(""), [L, D] = S(""), [R, P] = S(""), [u, N] = S(""), [z, E] = S(""), [p, O] = S(""), [v, C] = S(!1), [x, M] = S(""), [F, c] = S({}), { signup: I, signupTenantAdmin: T } = oe(), { tenant: h } = le(), d = { ...St, ...i }, y = { ...vt, ...e }, G = () => {
+  const [k, b] = S(""), [f, A] = S(""), [E, $] = S(""), [L, P] = S(""), [u, M] = S(""), [z, N] = S(""), [p, O] = S(""), [v, C] = S(!1), [x, I] = S(""), [F, c] = S({}), { signup: R, signupTenantAdmin: T } = ae(), { tenant: h } = le(), d = { ...St, ...i }, y = { ...vt, ...e }, G = () => {
     const B = {};
-    return k.trim() || (B.name = !0), !L.trim() && !R.trim() && (B.email = !0, B.phoneNumber = !0), u.trim() || (B.password = !0), z.trim() || (B.confirmPassword = !0), t === "tenant" && !p.trim() && (B.tenantName = !0), c(B), Object.keys(B).length === 0;
-  }, $ = async (B) => {
+    return k.trim() || (B.name = !0), !E.trim() && !L.trim() && (B.email = !0, B.phoneNumber = !0), u.trim() || (B.password = !0), z.trim() || (B.confirmPassword = !0), t === "tenant" && !p.trim() && (B.tenantName = !0), c(B), Object.keys(B).length === 0;
+  }, D = async (B) => {
     if (B.preventDefault(), !!G()) {
       if (u !== z) {
-        M(d.passwordMismatchError), c({ confirmPassword: !0 });
+        I(d.passwordMismatchError), c({ confirmPassword: !0 });
         return;
       }
       if (t === "user" && !(h != null && h.id)) {
-        M("Tenant not found");
+        I("Tenant not found");
         return;
       }
-      C(!0), M("");
+      C(!0), I("");
       try {
-        let J;
-        t === "tenant" ? J = await T({
-          email: L || void 0,
-          phoneNumber: R || void 0,
+        let K;
+        t === "tenant" ? K = await T({
+          email: E || void 0,
+          phoneNumber: L || void 0,
           name: k,
           password: u,
           tenantName: p,
           lastName: f || void 0
-        }) : J = await I({
-          email: L || void 0,
-          phoneNumber: R || void 0,
+        }) : K = await R({
+          email: E || void 0,
+          phoneNumber: L || void 0,
           name: k,
           password: u,
           tenantId: h.id,
           lastName: f || void 0
-        }), r == null || r(J);
-      } catch (J) {
-        const ge = J.message || d.errorMessage;
-        M(ge), s == null || s(ge);
+        }), r == null || r(K);
+      } catch (K) {
+        const ge = K.message || d.errorMessage;
+        I(ge), s == null || s(ge);
       } finally {
         C(!1);
       }
@@ -2344,11 +2350,11 @@ function er({
   }), U = () => ({
     ...y.button,
     ...v ? y.buttonLoading : {},
-    ...!k || !L && !R || !u || !z || v || t === "tenant" && !p ? y.buttonDisabled : {}
-  }), V = k && (L || R) && u && z && (t === "user" || p);
+    ...!k || !E && !L || !u || !z || v || t === "tenant" && !p ? y.buttonDisabled : {}
+  }), V = k && (E || L) && u && z && (t === "user" || p);
   return /* @__PURE__ */ l("div", { className: m, style: y.container, children: [
     /* @__PURE__ */ n("h2", { style: y.title, children: d.title }),
-    /* @__PURE__ */ l("form", { onSubmit: $, style: y.form, children: [
+    /* @__PURE__ */ l("form", { onSubmit: D, style: y.form, children: [
       /* @__PURE__ */ l("div", { style: y.fieldGroup, children: [
         /* @__PURE__ */ n("label", { style: y.label, children: d.nameLabel }),
         /* @__PURE__ */ n(
@@ -2359,7 +2365,7 @@ function er({
             type: "text",
             value: k,
             onChange: (B) => {
-              b(B.target.value), F.name && c((J) => ({ ...J, name: !1 }));
+              b(B.target.value), F.name && c((K) => ({ ...K, name: !1 }));
             },
             placeholder: d.namePlaceholder,
             style: H("name"),
@@ -2391,9 +2397,9 @@ function er({
             id: "email",
             name: "email",
             type: "email",
-            value: L,
+            value: E,
             onChange: (B) => {
-              D(B.target.value), F.email && c((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+              $(B.target.value), F.email && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
             },
             placeholder: d.emailPlaceholder,
             style: H("email"),
@@ -2409,9 +2415,9 @@ function er({
             id: "phoneNumber",
             name: "phoneNumber",
             type: "tel",
-            value: R,
+            value: L,
             onChange: (B) => {
-              P(B.target.value), F.phoneNumber && c((J) => ({ ...J, email: !1, phoneNumber: !1 }));
+              P(B.target.value), F.phoneNumber && c((K) => ({ ...K, email: !1, phoneNumber: !1 }));
             },
             placeholder: d.phoneNumberPlaceholder,
             style: H("phoneNumber"),
@@ -2441,7 +2447,7 @@ function er({
             type: "password",
             value: u,
             onChange: (B) => {
-              N(B.target.value), F.password && c((J) => ({ ...J, password: !1 }));
+              M(B.target.value), F.password && c((K) => ({ ...K, password: !1 }));
             },
             placeholder: d.passwordPlaceholder,
             style: H("password"),
@@ -2459,7 +2465,7 @@ function er({
             type: "password",
             value: z,
             onChange: (B) => {
-              E(B.target.value), F.confirmPassword && c((J) => ({ ...J, confirmPassword: !1 })), x === d.passwordMismatchError && M("");
+              N(B.target.value), F.confirmPassword && c((K) => ({ ...K, confirmPassword: !1 })), x === d.passwordMismatchError && I("");
             },
             placeholder: d.confirmPasswordPlaceholder,
             style: H("confirmPassword"),
@@ -2477,7 +2483,7 @@ function er({
             type: "text",
             value: p,
             onChange: (B) => {
-              O(B.target.value), F.tenantName && c((J) => ({ ...J, tenantName: !1 }));
+              O(B.target.value), F.tenantName && c((K) => ({ ...K, tenantName: !1 }));
             },
             placeholder: d.tenantNamePlaceholder,
             style: H("tenantName"),
@@ -2628,7 +2634,7 @@ const kt = {
     fontSize: "0.875rem"
   }
 };
-function tr({
+function rr({
   copy: i = {},
   styles: e = {},
   onSuccess: t,
@@ -2640,16 +2646,16 @@ function tr({
   verifyToken: w,
   frontendUrl: m
 }) {
-  const [k, b] = S(""), [f, A] = S(""), [L, D] = S(""), [R, P] = S(!1), [u, N] = S(!1), [z, E] = S(""), [p, O] = S(""), [v, C] = S({}), [x, M] = S(!1), { sendMagicLink: F, verifyMagicLink: c } = oe(), { tenant: I } = le(), T = { ...kt, ...i }, h = { ...xt, ...e };
-  te(() => {
+  const [k, b] = S(""), [f, A] = S(""), [E, $] = S(""), [L, P] = S(!1), [u, M] = S(!1), [z, N] = S(""), [p, O] = S(""), [v, C] = S({}), [x, I] = S(!1), { sendMagicLink: F, verifyMagicLink: c } = ae(), { tenant: R } = le(), T = { ...kt, ...i }, h = { ...xt, ...e };
+  re(() => {
     w && d(w);
   }, [w]);
   const d = async (U) => {
-    if (!I || !k) {
-      E("Missing tenant or email");
+    if (!R || !k) {
+      N("Missing tenant or email");
       return;
     }
-    N(!0), E("");
+    M(!0), N("");
     try {
       const V = await c({
         token: U,
@@ -2659,43 +2665,43 @@ function tr({
       t == null || t(V);
     } catch (V) {
       const B = V.message || "Failed to verify magic link";
-      E(B), r == null || r(B);
+      N(B), r == null || r(B);
     } finally {
-      N(!1);
+      M(!1);
     }
   }, y = () => {
     const U = {};
     return k.trim() || (U.email = !0), x && !f.trim() && (U.name = !0), C(U), Object.keys(U).length === 0;
   }, G = async (U) => {
     if (U.preventDefault(), !!y()) {
-      if (!(I != null && I.id)) {
-        E("Tenant not found");
+      if (!(R != null && R.id)) {
+        N("Tenant not found");
         return;
       }
-      P(!0), E(""), O("");
+      P(!0), N(""), O("");
       try {
         const V = m || (typeof window < "u" ? window.location.origin : ""), B = await F({
           email: k,
-          tenantId: I.id,
+          tenantId: R.id,
           frontendUrl: V,
           name: x ? f : void 0,
-          lastName: x ? L : void 0
+          lastName: x ? E : void 0
         });
         O(T.successMessage), t == null || t(B);
       } catch (V) {
         const B = V.message || T.errorMessage;
-        E(B), r == null || r(B);
+        N(B), r == null || r(B);
       } finally {
         P(!1);
       }
     }
-  }, $ = (U) => ({
+  }, D = (U) => ({
     ...h.input,
     ...v[U] ? h.inputError : {}
   }), H = () => ({
     ...h.button,
-    ...R || u ? h.buttonLoading : {},
-    ...!k || R || u ? h.buttonDisabled : {}
+    ...L || u ? h.buttonLoading : {},
+    ...!k || L || u ? h.buttonDisabled : {}
   });
   return u ? /* @__PURE__ */ l("div", { className: g, style: h.container, children: [
     /* @__PURE__ */ n("h2", { style: h.title, children: T.verifyingText }),
@@ -2717,8 +2723,8 @@ function tr({
               b(U.target.value), v.email && C((V) => ({ ...V, email: !1 }));
             },
             placeholder: T.emailPlaceholder,
-            style: $("email"),
-            disabled: R || u
+            style: D("email"),
+            disabled: L || u
           }
         )
       ] }),
@@ -2726,7 +2732,7 @@ function tr({
         "button",
         {
           type: "button",
-          onClick: () => M(!0),
+          onClick: () => I(!0),
           style: {
             background: "none",
             border: "none",
@@ -2752,8 +2758,8 @@ function tr({
                 A(U.target.value), v.name && C((V) => ({ ...V, name: !1 }));
               },
               placeholder: T.namePlaceholder,
-              style: $("name"),
-              disabled: R || u
+              style: D("name"),
+              disabled: L || u
             }
           )
         ] }),
@@ -2765,11 +2771,11 @@ function tr({
               id: "lastName",
               name: "lastName",
               type: "text",
-              value: L,
-              onChange: (U) => D(U.target.value),
+              value: E,
+              onChange: (U) => $(U.target.value),
               placeholder: T.lastNamePlaceholder,
               style: h.input,
-              disabled: R || u
+              disabled: L || u
             }
           )
         ] }),
@@ -2778,7 +2784,7 @@ function tr({
           {
             type: "button",
             onClick: () => {
-              M(!1), A(""), D("");
+              I(!1), A(""), $("");
             },
             style: {
               background: "none",
@@ -2792,7 +2798,7 @@ function tr({
           }
         ) })
       ] }),
-      /* @__PURE__ */ n("button", { type: "submit", disabled: !k || R || u, style: H(), children: R ? T.loadingText : T.submitButton }),
+      /* @__PURE__ */ n("button", { type: "submit", disabled: !k || L || u, style: H(), children: L ? T.loadingText : T.submitButton }),
       z && /* @__PURE__ */ n("div", { style: h.errorText, children: z }),
       p && /* @__PURE__ */ n("div", { style: h.successText, children: p })
     ] }),
@@ -2823,7 +2829,7 @@ const At = {
   redirectingMessage: "Redirecting you to the dashboard...",
   retryButton: "Try Again",
   backToLoginButton: "Back to Login"
-}, $e = {
+}, He = {
   container: {
     maxWidth: "400px",
     width: "100%",
@@ -2910,7 +2916,7 @@ const At = {
     cursor: "pointer",
     transition: "all 0.15s ease-in-out"
   }
-}, Tt = () => /* @__PURE__ */ n("div", { style: $e.spinner }), Pt = () => /* @__PURE__ */ l(
+}, Tt = () => /* @__PURE__ */ n("div", { style: He.spinner }), Pt = () => /* @__PURE__ */ l(
   "svg",
   {
     width: "48",
@@ -2950,7 +2956,7 @@ const At = {
   success: /* @__PURE__ */ n(Pt, {}),
   error: /* @__PURE__ */ n(Mt, {})
 };
-function rr({
+function nr({
   copy: i = {},
   styles: e = {},
   icons: t = {},
@@ -2965,7 +2971,7 @@ function rr({
   tenantSlug: b,
   autoRedirectDelay: f = 3e3
 }) {
-  const [A, L] = S("verifying"), [D, R] = S(""), { verifyMagicLink: P } = oe(), u = { ...At, ...i }, N = { ...$e, ...e }, z = { ...It, ...t }, E = () => {
+  const [A, E] = S("verifying"), [$, L] = S(""), { verifyMagicLink: P } = ae(), u = { ...At, ...i }, M = { ...He, ...e }, z = { ...It, ...t }, N = () => {
     if (typeof window > "u") return {};
     const x = new URLSearchParams(window.location.search);
     return {
@@ -2975,58 +2981,58 @@ function rr({
       tenantSlug: b || x.get("tenantSlug") || void 0
     };
   }, p = async () => {
-    L("verifying"), R("");
+    E("verifying"), L("");
     try {
-      const x = E();
+      const x = N();
       if (!x.token || !x.email)
         throw new Error("Missing required parameters: token or email");
-      const M = await P({
+      const I = await P({
         token: x.token,
         email: x.email,
         tenantSlug: x.tenantSlug
       });
-      L("success"), r == null || r(M), f > 0 && setTimeout(() => {
-        L("redirecting");
+      E("success"), r == null || r(I), f > 0 && setTimeout(() => {
+        E("redirecting");
       }, f);
     } catch (x) {
-      const M = x.message || u.errorMessage;
-      R(M), L("error"), s == null || s(M);
+      const I = x.message || u.errorMessage;
+      L(I), E("error"), s == null || s(I);
     }
   }, O = () => {
     o == null || o(), p();
   }, v = () => {
     a == null || a();
   };
-  te(() => {
+  re(() => {
     p();
   }, []);
   const C = () => {
     switch (A) {
       case "verifying":
-        return /* @__PURE__ */ l("div", { style: N.message, children: [
+        return /* @__PURE__ */ l("div", { style: M.message, children: [
           z.loading,
           u.verifyingMessage
         ] });
       case "success":
         return /* @__PURE__ */ l(j, { children: [
           z.success,
-          /* @__PURE__ */ n("div", { style: N.successMessage, children: u.successMessage })
+          /* @__PURE__ */ n("div", { style: M.successMessage, children: u.successMessage })
         ] });
       case "redirecting":
         return /* @__PURE__ */ l(j, { children: [
           z.loading,
-          /* @__PURE__ */ n("div", { style: N.message, children: u.redirectingMessage })
+          /* @__PURE__ */ n("div", { style: M.message, children: u.redirectingMessage })
         ] });
       case "error":
         return /* @__PURE__ */ l(j, { children: [
           z.error,
-          /* @__PURE__ */ n("div", { style: N.errorMessage, children: D || u.errorMessage }),
-          /* @__PURE__ */ l("div", { style: N.buttonContainer, children: [
+          /* @__PURE__ */ n("div", { style: M.errorMessage, children: $ || u.errorMessage }),
+          /* @__PURE__ */ l("div", { style: M.buttonContainer, children: [
             /* @__PURE__ */ n(
               "button",
               {
                 onClick: O,
-                style: N.retryButton,
+                style: M.retryButton,
                 onMouseOver: (x) => {
                   x.currentTarget.style.backgroundColor = "#2563eb";
                 },
@@ -3040,7 +3046,7 @@ function rr({
               "button",
               {
                 onClick: v,
-                style: N.backButton,
+                style: M.backButton,
                 onMouseOver: (x) => {
                   x.currentTarget.style.backgroundColor = "#e5e7eb";
                 },
@@ -3056,14 +3062,14 @@ function rr({
         return null;
     }
   };
-  return /* @__PURE__ */ l("div", { style: N.container, className: g, children: [
+  return /* @__PURE__ */ l("div", { style: M.container, className: g, children: [
     /* @__PURE__ */ n("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
             100% { transform: rotate(360deg); }
           }
         ` }),
-    /* @__PURE__ */ n("h1", { style: N.title, children: u.title }),
+    /* @__PURE__ */ n("h1", { style: M.title, children: u.title }),
     C()
   ] });
 }
@@ -3181,7 +3187,7 @@ const Rt = {
     cursor: "pointer"
   }
 };
-function nr({
+function sr({
   copy: i = {},
   styles: e = {},
   mode: t = "request",
@@ -3192,21 +3198,21 @@ function nr({
   onModeChange: g,
   className: w
 }) {
-  const [m, k] = S(""), [b, f] = S(r), [A, L] = S(""), [D, R] = S(""), [P, u] = S(!1), [N, z] = S(""), [E, p] = S(""), [O, v] = S({}), { requestPasswordReset: C, confirmPasswordReset: x } = oe(), { tenant: M } = le(), F = { ...Rt, ...i }, c = { ...Lt, ...e }, I = () => {
+  const [m, k] = S(""), [b, f] = S(r), [A, E] = S(""), [$, L] = S(""), [P, u] = S(!1), [M, z] = S(""), [N, p] = S(""), [O, v] = S({}), { requestPasswordReset: C, confirmPasswordReset: x } = ae(), { tenant: I } = le(), F = { ...Rt, ...i }, c = { ...Lt, ...e }, R = () => {
     const H = {};
     return m.trim() || (H.email = !0), v(H), Object.keys(H).length === 0;
   }, T = () => {
     const H = {};
-    return b.trim() || (H.token = !0), A.trim() || (H.newPassword = !0), D.trim() || (H.confirmPassword = !0), v(H), Object.keys(H).length === 0;
+    return b.trim() || (H.token = !0), A.trim() || (H.newPassword = !0), $.trim() || (H.confirmPassword = !0), v(H), Object.keys(H).length === 0;
   }, h = async (H) => {
-    if (H.preventDefault(), !!I()) {
-      if (!(M != null && M.id)) {
+    if (H.preventDefault(), !!R()) {
+      if (!(I != null && I.id)) {
         z("Tenant not found");
         return;
       }
       u(!0), z(""), p("");
       try {
-        await C({ email: m, tenantId: M.id }), p(F.successMessage), s == null || s();
+        await C({ email: m, tenantId: I.id }), p(F.successMessage), s == null || s();
       } catch (U) {
         const V = U.message || F.errorMessage;
         z(V), o == null || o(V);
@@ -3216,7 +3222,7 @@ function nr({
     }
   }, d = async (H) => {
     if (H.preventDefault(), !!T()) {
-      if (A !== D) {
+      if (A !== $) {
         z(F.passwordMismatchError), v({ confirmPassword: !0 });
         return;
       }
@@ -3238,7 +3244,7 @@ function nr({
     ...P ? c.buttonLoading : {}
   });
   if (t === "reset") {
-    const H = b && A && D;
+    const H = b && A && $;
     return /* @__PURE__ */ l("div", { className: w, style: c.container, children: [
       /* @__PURE__ */ n("h2", { style: c.title, children: F.resetTitle }),
       /* @__PURE__ */ n("p", { style: c.subtitle, children: F.resetSubtitle }),
@@ -3267,7 +3273,7 @@ function nr({
               type: "password",
               value: A,
               onChange: (U) => {
-                L(U.target.value), O.newPassword && v((V) => ({ ...V, newPassword: !1 }));
+                E(U.target.value), O.newPassword && v((V) => ({ ...V, newPassword: !1 }));
               },
               placeholder: F.newPasswordPlaceholder,
               style: y("newPassword"),
@@ -3281,9 +3287,9 @@ function nr({
             "input",
             {
               type: "password",
-              value: D,
+              value: $,
               onChange: (U) => {
-                R(U.target.value), O.confirmPassword && v((V) => ({ ...V, confirmPassword: !1 })), N === F.passwordMismatchError && z("");
+                L(U.target.value), O.confirmPassword && v((V) => ({ ...V, confirmPassword: !1 })), M === F.passwordMismatchError && z("");
               },
               placeholder: F.confirmPasswordPlaceholder,
               style: y("confirmPassword"),
@@ -3303,8 +3309,8 @@ function nr({
             children: P ? F.resetLoadingText : F.resetSubmitButton
           }
         ),
-        N && /* @__PURE__ */ n("div", { style: c.errorText, children: N }),
-        E && /* @__PURE__ */ n("div", { style: c.successText, children: E })
+        M && /* @__PURE__ */ n("div", { style: c.errorText, children: M }),
+        N && /* @__PURE__ */ n("div", { style: c.successText, children: N })
       ] }),
       /* @__PURE__ */ l("div", { style: c.linkContainer, children: [
         /* @__PURE__ */ n("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
@@ -3315,7 +3321,7 @@ function nr({
       ] })
     ] });
   }
-  const $ = m;
+  const D = m;
   return /* @__PURE__ */ l("div", { className: w, style: c.container, children: [
     /* @__PURE__ */ n("h2", { style: c.title, children: F.title }),
     /* @__PURE__ */ n("p", { style: c.subtitle, children: F.subtitle }),
@@ -3340,16 +3346,16 @@ function nr({
         "button",
         {
           type: "submit",
-          disabled: !$ || P,
+          disabled: !D || P,
           style: {
             ...G(),
-            ...!$ || P ? c.buttonDisabled : {}
+            ...!D || P ? c.buttonDisabled : {}
           },
           children: P ? F.loadingText : F.submitButton
         }
       ),
-      N && /* @__PURE__ */ n("div", { style: c.errorText, children: N }),
-      E && /* @__PURE__ */ n("div", { style: c.successText, children: E })
+      M && /* @__PURE__ */ n("div", { style: c.errorText, children: M }),
+      N && /* @__PURE__ */ n("div", { style: c.successText, children: N })
     ] }),
     /* @__PURE__ */ l("div", { style: c.linkContainer, children: [
       /* @__PURE__ */ n("a", { onClick: a, style: c.link, children: F.backToLoginLink }),
@@ -3406,15 +3412,15 @@ const Et = () => /* @__PURE__ */ n(
     ]
   }
 );
-function sr({
+function ir({
   children: i,
   loadingFallback: e,
   errorFallback: t,
   requireTenant: r = !0
 }) {
-  const { isAppLoading: s, appError: o, retryApp: a } = he(), g = ye(), w = Fe(), m = Ce(), k = De(), b = (g == null ? void 0 : g.isTenantLoading) ?? !1, f = (g == null ? void 0 : g.tenantError) ?? null, A = (g == null ? void 0 : g.tenantSlug) ?? null, L = (g == null ? void 0 : g.retryTenant) ?? (() => {
-  }), D = (w == null ? void 0 : w.isAuthReady) ?? !0, R = (m == null ? void 0 : m.isReady) ?? !0, P = (k == null ? void 0 : k.isReady) ?? !0, u = r && g && A, p = s || u && b || w && !D || m && !R || k && !P, O = o || (u ? f : null), v = () => {
-    o && a(), f && g && L();
+  const { isAppLoading: s, appError: o, retryApp: a } = he(), g = ye(), w = Ce(), m = De(), k = $e(), b = (g == null ? void 0 : g.isTenantLoading) ?? !1, f = (g == null ? void 0 : g.tenantError) ?? null, A = (g == null ? void 0 : g.tenantSlug) ?? null, E = (g == null ? void 0 : g.retryTenant) ?? (() => {
+  }), $ = (w == null ? void 0 : w.isAuthReady) ?? !0, L = (m == null ? void 0 : m.isReady) ?? !0, P = (k == null ? void 0 : k.isReady) ?? !0, u = r && g && A, p = s || u && b || w && !$ || m && !L || k && !P, O = o || (u ? f : null), v = () => {
+    o && a(), f && g && E();
   };
   if (p)
     return /* @__PURE__ */ n(j, { children: e || /* @__PURE__ */ n(Et, {}) });
@@ -3424,25 +3430,25 @@ function sr({
   }
   return /* @__PURE__ */ n(j, { children: i });
 }
-function ir(i = !0) {
-  const { isAppLoading: e, appError: t, retryApp: r, appInfo: s } = he(), o = ye(), a = Fe(), g = Ce(), w = De(), m = (o == null ? void 0 : o.isTenantLoading) ?? !1, k = (o == null ? void 0 : o.tenantError) ?? null, b = (o == null ? void 0 : o.tenant) ?? null, f = (o == null ? void 0 : o.tenantSlug) ?? null, A = (o == null ? void 0 : o.retryTenant) ?? (() => {
-  }), L = (a == null ? void 0 : a.isAuthReady) ?? !0, D = (g == null ? void 0 : g.isReady) ?? !0, R = (w == null ? void 0 : w.isReady) ?? !0, P = i && o && f, E = e || P && m || a && !L || g && !D || w && !R, p = t || (P ? k : null);
+function or(i = !0) {
+  const { isAppLoading: e, appError: t, retryApp: r, appInfo: s } = he(), o = ye(), a = Ce(), g = De(), w = $e(), m = (o == null ? void 0 : o.isTenantLoading) ?? !1, k = (o == null ? void 0 : o.tenantError) ?? null, b = (o == null ? void 0 : o.tenant) ?? null, f = (o == null ? void 0 : o.tenantSlug) ?? null, A = (o == null ? void 0 : o.retryTenant) ?? (() => {
+  }), E = (a == null ? void 0 : a.isAuthReady) ?? !0, $ = (g == null ? void 0 : g.isReady) ?? !0, L = (w == null ? void 0 : w.isReady) ?? !0, P = i && o && f, N = e || P && m || a && !E || g && !$ || w && !L, p = t || (P ? k : null);
   return {
-    isLoading: E,
+    isLoading: N,
     error: p,
-    isReady: !E && !p && s !== null && (!P || b !== null),
+    isReady: !N && !p && s !== null && (!P || b !== null),
     retry: () => {
       t && r(), k && o && A();
     },
     // Individual states
     app: { isLoading: e, error: t, data: s },
     tenant: o ? { isLoading: m, error: k, data: b } : null,
-    auth: a ? { isReady: L } : null,
-    featureFlags: g ? { isReady: D } : null,
-    subscription: w ? { isReady: R } : null
+    auth: a ? { isReady: E } : null,
+    featureFlags: g ? { isReady: $ } : null,
+    subscription: w ? { isReady: L } : null
   };
 }
-class or {
+class ar {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3510,7 +3516,7 @@ class or {
     };
   }
 }
-class ar {
+class lr {
   constructor(e, t) {
     this.httpService = e, this.sessionManager = t;
   }
@@ -3561,7 +3567,7 @@ class ar {
     });
   }
 }
-class lr {
+class cr {
   constructor(e) {
     this.httpService = e;
   }
@@ -3570,7 +3576,7 @@ class lr {
     return await this.httpService.get("/health");
   }
 }
-class cr {
+class dr {
   // Date string to Date object
   static toDate(e) {
     return new Date(e);
@@ -3693,47 +3699,47 @@ class cr {
   }
 }
 export {
-  cr as ApiMappers,
-  Pe as AppApiService,
-  sr as AppLoader,
-  Bt as AppProvider,
+  dr as ApiMappers,
+  Me as AppApiService,
+  ir as AppLoader,
+  qt as AppProvider,
   Ke as AuthApiService,
-  jt as AuthProvider,
-  Xt as FeatureFlag,
+  Vt as AuthProvider,
+  Zt as FeatureFlag,
   st as FeatureFlagApiService,
-  Vt as FeatureFlagProvider,
-  lr as HealthApiService,
-  re as HttpService,
-  Yt as LandingRoute,
-  Zt as LoginForm,
-  tr as MagicLinkForm,
-  rr as MagicLinkVerify,
-  nr as PasswordRecoveryForm,
-  or as PermissionApiService,
-  Gt as Protected,
-  Kt as ProtectedRoute,
-  Me as RoleApiService,
-  be as SessionManager,
-  er as SignupForm,
+  _t as FeatureFlagProvider,
+  cr as HealthApiService,
+  ne as HttpService,
+  Qt as LandingRoute,
+  er as LoginForm,
+  rr as MagicLinkForm,
+  nr as MagicLinkVerify,
+  sr as PasswordRecoveryForm,
+  ar as PermissionApiService,
+  Kt as Protected,
+  Jt as ProtectedRoute,
+  Ie as RoleApiService,
+  Se as SessionManager,
+  tr as SignupForm,
   ot as SubscriptionApiService,
-  Qt as SubscriptionGuard,
-  ar as SubscriptionPlanApiService,
-  _t as SubscriptionProvider,
+  Xt as SubscriptionGuard,
+  lr as SubscriptionPlanApiService,
+  Gt as SubscriptionProvider,
   de as TenantApiService,
-  zt as TenantProvider,
-  Jt as TenantRoute,
+  Ot as TenantProvider,
+  Yt as TenantRoute,
   Je as UserApiService,
-  ie as UserType,
-  qt as useApi,
+  oe as UserType,
+  zt as useApi,
   he as useApp,
-  ir as useAppLoaderState,
-  oe as useAuth,
+  or as useAppLoaderState,
+  ae as useAuth,
   it as useFeatureFlags,
-  Wt as useSettings,
+  jt as useSettings,
   at as useSubscription,
   me as useTenant,
   le as useTenantInfo,
   ye as useTenantOptional,
-  Ot as useTenantSettings
+  Wt as useTenantSettings
 };
 //# sourceMappingURL=index.es.js.map