npm - @skylabs-digital/react-identity-access - Versions diffs - 3.2.2 → 3.3.0 - Mend

@skylabs-digital/react-identity-access 3.2.2 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/index.es.js +487 -457
package/dist/index.es.js.map +1 -1
package/dist/index.js +2 -2
package/dist/index.js.map +1 -1
package/dist/services/HttpService.d.ts.map +1 -1
package/dist/services/SessionManager.d.ts +12 -0
package/dist/services/SessionManager.d.ts.map +1 -1
package/package.json +1 -1

package/dist/index.es.js CHANGED Viewed

@@ -11,30 +11,37 @@ class he {
   getBaseUrl() {
     return this.baseUrl;
   }
-  async executeRequest(e, t, n, i) {
-    const a = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, l = (i == null ? void 0 : i.timeout) || this.timeout;
-    let d = {
+  async executeRequest(e, t, n, i, a = !1) {
+    const l = `${this.baseUrl}${t.startsWith("/") ? t : `/${t}`}`, h = (i == null ? void 0 : i.timeout) || this.timeout;
+    let S = {
       "Content-Type": "application/json",
       ...i == null ? void 0 : i.headers
     };
     if (!(i != null && i.skipAuth) && this.sessionManager) {
       const c = await this.sessionManager.getValidAccessToken();
-      d = { ...d, Authorization: `Bearer ${c}` };
+      S = { ...S, Authorization: `Bearer ${c}` };
     }
-    const T = new AbortController(), A = setTimeout(() => T.abort(), l);
+    const k = new AbortController(), T = setTimeout(() => k.abort(), h);
     try {
-      const c = await fetch(a, {
+      const c = await fetch(l, {
         method: e,
-        headers: d,
+        headers: S,
         body: n ? JSON.stringify(n) : void 0,
-        signal: T.signal
+        signal: k.signal
       });
-      if (clearTimeout(A), !c.ok)
+      if (clearTimeout(T), c.status === 401 && !(i != null && i.skipAuth) && this.sessionManager && !a) {
+        try {
+          await c.text();
+        } catch {
+        }
+        return await this.sessionManager.forceRefresh(), this.executeRequest(e, t, n, i, !0);
+      }
+      if (!c.ok)
         throw new Error(`HTTP ${c.status}: ${c.statusText}`);
-      const S = c.headers.get("content-type");
-      return !S || !S.includes("application/json") ? {} : await c.json();
+      const d = c.headers.get("content-type");
+      return !d || !d.includes("application/json") ? {} : await c.json();
     } catch (c) {
-      throw clearTimeout(A), c instanceof Error && c.name === "AbortError" ? new Error(`Request timeout after ${l}ms`) : c;
+      throw clearTimeout(T), c instanceof Error && c.name === "AbortError" ? new Error(`Request timeout after ${h}ms`) : c;
     }
   }
   async get(e, t) {
@@ -100,8 +107,8 @@ class Je {
 }
 const $e = fe(null), St = 5 * 60 * 1e3;
 function kr({ config: r, children: e }) {
-  var k, m, g;
-  const { appId: t, baseUrl: n } = r, i = (((k = r.cache) == null ? void 0 : k.enabled) ?? !0) && !!t, a = ((m = r.cache) == null ? void 0 : m.ttl) ?? St, l = ((g = r.cache) == null ? void 0 : g.storageKey) ?? (t ? `app_cache_${t}` : ""), [d, T] = N(() => {
+  var E, m, g;
+  const { appId: t, baseUrl: n } = r, i = (((E = r.cache) == null ? void 0 : E.enabled) ?? !0) && !!t, a = ((m = r.cache) == null ? void 0 : m.ttl) ?? St, l = ((g = r.cache) == null ? void 0 : g.storageKey) ?? (t ? `app_cache_${t}` : ""), [h, S] = N(() => {
     if (!i) return null;
     try {
       const b = localStorage.getItem(l);
@@ -111,15 +118,15 @@ function kr({ config: r, children: e }) {
     } catch {
       return null;
     }
-  }), [A, c] = N(!!t && !d), [S, h] = N(null), x = ye(d);
-  x.current = d;
+  }), [k, T] = N(!!t && !h), [c, d] = N(null), A = ye(h);
+  A.current = h;
   const P = te(
     async (b = !1) => {
-      if (t && !(!b && i && x.current))
+      if (t && !(!b && i && A.current))
         try {
-          c(!0), h(null);
+          T(!0), d(null);
           const o = await new Je(new he(n)).getPublicAppInfo(t);
-          if (T(o), i)
+          if (S(o), i)
             try {
               const p = {
                 data: o,
@@ -132,27 +139,27 @@ function kr({ config: r, children: e }) {
             }
         } catch (C) {
           const o = C instanceof Error ? C : new Error("Failed to load app information");
-          h(o), T(null);
+          d(o), S(null);
         } finally {
-          c(!1);
+          T(!1);
         }
     },
     [n, t, i, l]
   ), I = te(async () => {
-    if (!(!t || !i || !x.current))
+    if (!(!t || !i || !A.current))
       try {
         const b = localStorage.getItem(l);
         if (!b) return;
         const C = JSON.parse(b);
         if (Date.now() - C.timestamp <= a * 0.5) return;
         const p = await new Je(new he(n)).getPublicAppInfo(t);
-        T(p);
-        const E = {
+        S(p);
+        const x = {
           data: p,
           timestamp: Date.now(),
           appId: t
         };
-        localStorage.setItem(l, JSON.stringify(E));
+        localStorage.setItem(l, JSON.stringify(x));
       } catch (b) {
         process.env.NODE_ENV === "development" && console.warn("[AppProvider] Background app refresh failed:", b);
       }
@@ -160,17 +167,17 @@ function kr({ config: r, children: e }) {
     () => ({
       appId: t,
       baseUrl: n,
-      appInfo: d,
-      isAppLoading: A,
-      appError: S,
+      appInfo: h,
+      isAppLoading: k,
+      appError: c,
       retryApp: () => {
         P(!0);
       }
     }),
-    [t, n, d, A, S, P]
+    [t, n, h, k, c, P]
   );
   return re(() => {
-    t && (x.current ? I() : P());
+    t && (A.current ? I() : P());
   }, []), /* @__PURE__ */ s($e.Provider, { value: R, children: e });
 }
 function Ae() {
@@ -183,7 +190,7 @@ function Ue() {
   return ne($e);
 }
 const Er = Ae;
-class ee extends Error {
+class Z extends Error {
   constructor(e, t) {
     const n = {
       token_expired: "Refresh token has expired",
@@ -472,13 +479,13 @@ const ie = class ie {
     this.startRefreshAndResolveQueue(e.refreshToken).then(() => {
       this.consecutiveBackgroundFailures = 0;
     }).catch((n) => {
-      if (!(n instanceof ee)) {
+      if (!(n instanceof Z)) {
         if (this.sessionGeneration === t) {
           if (this.consecutiveBackgroundFailures++, this.consecutiveBackgroundFailures >= ie.MAX_BACKGROUND_FAILURES) {
             process.env.NODE_ENV === "development" && console.error(
               `[SessionManager] Background refresh failed ${this.consecutiveBackgroundFailures} consecutive times — expiring session`
             ), this.consecutiveBackgroundFailures = 0, this.handleSessionExpired(
-              new ee("token_invalid", "Background refresh failed repeatedly")
+              new Z("token_invalid", "Background refresh failed repeatedly")
             );
             return;
           }
@@ -545,17 +552,40 @@ const ie = class ie {
   async getValidAccessToken() {
     const e = this.getTokens();
     if (!(e != null && e.accessToken)) {
-      const t = new ee("token_invalid", "No tokens available");
+      const t = new Z("token_invalid", "No tokens available");
       throw this.handleSessionExpired(t), t;
     }
     if (!this.shouldRefreshToken(e) && !this.isTokenExpired(e))
       return e.accessToken;
     if (!e.refreshToken) {
-      const t = new ee("token_invalid", "No refresh token available");
+      const t = new Z("token_invalid", "No refresh token available");
       throw this.handleSessionExpired(t), t;
     }
     return this.refreshPromise ? this.enqueueForToken() : this.startRefreshAndResolveQueue(e.refreshToken);
   }
+  /**
+   * Force a refresh ignoring local expiry heuristics. Callers (e.g. HttpService
+   * retrying a 401) use this when the backend rejected the current access token
+   * as invalid even though `expiresAt` claims it's still valid. Shares the same
+   * refreshPromise/queue as getValidAccessToken, so concurrent forceRefresh
+   * calls deduplicate to a single refresh network call.
+   *
+   * @throws {SessionExpiredError} if no refresh token → caller should logout
+   * @throws {TokenRefreshTimeoutError} if queue wait exceeds timeout
+   * @throws {TokenRefreshError} if refresh fails after all retries
+   */
+  async forceRefresh() {
+    const e = this.getTokens();
+    if (!(e != null && e.accessToken)) {
+      const t = new Z("token_invalid", "No tokens available");
+      throw this.handleSessionExpired(t), t;
+    }
+    if (!e.refreshToken) {
+      const t = new Z("token_invalid", "No refresh token available");
+      throw this.handleSessionExpired(t), t;
+    }
+    return this.refreshPromise ? this.enqueueForToken() : this.startRefreshAndResolveQueue(e.refreshToken, !0);
+  }
   /**
    * Backward-compatible getAuthHeaders — now delegates to getValidAccessToken.
    */
@@ -563,7 +593,7 @@ const ie = class ie {
     try {
       return { Authorization: `Bearer ${await this.getValidAccessToken()}` };
     } catch (e) {
-      return e instanceof ee && this.onRefreshFailed && this.onRefreshFailed(), {};
+      return e instanceof Z && this.onRefreshFailed && this.onRefreshFailed(), {};
     }
   }
   enqueueForToken() {
@@ -575,15 +605,15 @@ const ie = class ie {
       this.refreshQueue.push({ resolve: e, reject: t, timeoutId: n });
     });
   }
-  async startRefreshAndResolveQueue(e) {
-    this.refreshPromise = this.executeRefreshWithRetry(e);
+  async startRefreshAndResolveQueue(e, t = !1) {
+    this.refreshPromise = this.executeRefreshWithRetry(e, t);
     try {
       await this.refreshPromise;
-      const t = this.getTokens(), n = (t == null ? void 0 : t.accessToken) || "";
-      return this.resolveQueue(n), n;
-    } catch (t) {
-      const n = t instanceof Error ? t : new Error("Token refresh failed");
-      throw n instanceof ee ? (this.rejectQueue(n), this.handleSessionExpired(n)) : this.rejectQueue(n), n;
+      const n = this.getTokens(), i = (n == null ? void 0 : n.accessToken) || "";
+      return this.resolveQueue(i), i;
+    } catch (n) {
+      const i = n instanceof Error ? n : new Error("Token refresh failed");
+      throw i instanceof Z ? (this.rejectQueue(i), this.handleSessionExpired(i)) : this.rejectQueue(i), i;
     } finally {
       this.refreshPromise = null;
     }
@@ -601,74 +631,74 @@ const ie = class ie {
       clearTimeout(n.timeoutId), n.reject(e);
   }
   // --- Refresh with retry + error classification ---
-  async executeRefreshWithRetry(e) {
-    let t;
-    const n = this.sessionGeneration;
-    for (let i = 0; i <= this.maxRefreshRetries; i++) {
-      if (this.sessionGeneration !== n)
-        throw new ee("token_invalid", "Session cleared during refresh");
+  async executeRefreshWithRetry(e, t = !1) {
+    let n;
+    const i = this.sessionGeneration;
+    for (let a = 0; a <= this.maxRefreshRetries; a++) {
+      if (this.sessionGeneration !== i)
+        throw new Z("token_invalid", "Session cleared during refresh");
       try {
-        await this.performTokenRefresh(e, n);
+        await this.performTokenRefresh(e, i, t);
         return;
-      } catch (a) {
-        const l = a instanceof Error ? a : new Error(String(a));
-        if (l instanceof ee)
-          throw l;
-        if (t = l, i < this.maxRefreshRetries) {
-          const d = this.retryBackoffBase * Math.pow(2, i);
-          await this.sleep(d);
+      } catch (l) {
+        const h = l instanceof Error ? l : new Error(String(l));
+        if (h instanceof Z)
+          throw h;
+        if (n = h, a < this.maxRefreshRetries) {
+          const S = this.retryBackoffBase * Math.pow(2, a);
+          await this.sleep(S);
         }
       }
     }
-    throw new Et(this.maxRefreshRetries + 1, t);
+    throw new Et(this.maxRefreshRetries + 1, n);
   }
   /**
    * Single refresh attempt with error classification.
    * Throws SessionExpiredError for fatal errors (no retry).
    * Throws generic Error for transient errors (will be retried).
    */
-  async performTokenRefresh(e, t) {
+  async performTokenRefresh(e, t, n = !1) {
     return typeof navigator < "u" && navigator.locks ? navigator.locks.request(
       `session-refresh:${this.storageKey}`,
-      () => this.performTokenRefreshInner(e, t)
-    ) : this.performTokenRefreshInner(e, t);
+      () => this.performTokenRefreshInner(e, t, n)
+    ) : this.performTokenRefreshInner(e, t, n);
   }
-  async performTokenRefreshInner(e, t) {
+  async performTokenRefreshInner(e, t, n = !1) {
     if (!this.baseUrl)
       throw new Error("Base URL not configured for token refresh");
-    const n = this.getTokens();
-    if (n != null && n.accessToken && !this.isTokenExpired(n) && !this.shouldRefreshToken(n))
+    const i = this.getTokens();
+    if (!n && (i != null && i.accessToken) && !this.isTokenExpired(i) && !this.shouldRefreshToken(i))
       return;
-    const i = (n == null ? void 0 : n.refreshToken) || e, a = `${this.baseUrl}/auth/refresh`, l = At(i, "deviceId"), d = { refreshToken: i };
-    l && (d.deviceId = l);
-    let T;
+    const a = (i == null ? void 0 : i.refreshToken) || e, l = `${this.baseUrl}/auth/refresh`, h = At(a, "deviceId"), S = { refreshToken: a };
+    h && (S.deviceId = h);
+    let k;
     try {
-      T = await fetch(a, {
+      k = await fetch(l, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(d),
+        body: JSON.stringify(S),
         ...this.enableCookieSession && { credentials: "include" }
       });
     } catch (c) {
       throw c instanceof Error ? c : new Error("Network error during token refresh");
     }
-    if (!T.ok) {
+    if (!k.ok) {
       let c = "";
       try {
-        const S = await T.json();
-        c = (S.message || S.error || "").toLowerCase();
+        const d = await k.json();
+        c = (d.message || d.error || "").toLowerCase();
       } catch {
-        c = T.statusText.toLowerCase();
+        c = k.statusText.toLowerCase();
       }
-      throw T.status === 401 ? c.includes("expired") ? new ee("token_expired") : c.includes("invalid") ? new ee("token_invalid") : new ee("token_invalid", `Unauthorized: ${c}`) : T.status === 400 ? c.includes("inactive") ? new ee("user_inactive") : c.includes("expired") || c.includes("invalid") ? new ee("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new ee("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${T.status} ${c}`);
+      throw k.status === 401 ? c.includes("expired") ? new Z("token_expired") : c.includes("invalid") ? new Z("token_invalid") : new Z("token_invalid", `Unauthorized: ${c}`) : k.status === 400 ? c.includes("inactive") ? new Z("user_inactive") : c.includes("expired") || c.includes("invalid") ? new Z("token_invalid", c) : c.includes("reuse") || c.includes("revoked") ? new Z("token_invalid", c) : new Error(`Token refresh failed (400): ${c}`) : new Error(`Token refresh failed: ${k.status} ${c}`);
     }
     if (this.sessionGeneration !== t)
-      throw new ee("token_invalid", "Session cleared during refresh");
-    const A = await T.json();
+      throw new Z("token_invalid", "Session cleared during refresh");
+    const T = await k.json();
     this.setTokens({
-      accessToken: A.accessToken,
-      refreshToken: A.refreshToken || i,
-      expiresIn: A.expiresIn
+      accessToken: T.accessToken,
+      refreshToken: T.refreshToken || a,
+      expiresIn: T.expiresIn
     });
   }
   // --- Session expiry handler ---
@@ -691,7 +721,7 @@ const ie = class ie {
   // --- Session lifecycle ---
   clearSession() {
     this.sessionGeneration++, this.cancelProactiveTimer(), this.clearTokens();
-    const e = new ee("token_invalid", "Session cleared");
+    const e = new Z("token_invalid", "Session cleared");
     this.rejectQueue(e);
   }
   /**
@@ -700,7 +730,7 @@ const ie = class ie {
    */
   destroy() {
     this.isDestroyed = !0, ie.instances.delete(this.storageKey), this.cancelProactiveTimer(), this.detachVisibilityListener();
-    const e = new ee("token_invalid", "SessionManager destroyed");
+    const e = new Z("token_invalid", "SessionManager destroyed");
     this.rejectQueue(e);
   }
   // --- JWT helpers ---
@@ -941,7 +971,7 @@ function _t(r, e, t) {
 }
 const Be = fe(null);
 function xr({ config: r, children: e }) {
-  var j, Z, $;
+  var j, K, $;
   const { baseUrl: t, appInfo: n, appId: i } = Ae(), a = te(() => typeof window > "u" ? null : Bt(
     {
       tenantMode: r.tenantMode || "selector",
@@ -954,75 +984,75 @@ function xr({ config: r, children: e }) {
       search: window.location.search
     },
     window.localStorage
-  ), [r.tenantMode, r.baseDomain, r.selectorParam, r.fixedTenantSlug]), [l, d] = N(() => a()), T = ((j = r.cache) == null ? void 0 : j.enabled) ?? !0, A = ((Z = r.cache) == null ? void 0 : Z.ttl) ?? 5 * 60 * 1e3, c = (($ = r.cache) == null ? void 0 : $.storageKey) ?? `tenant_cache_${l || "default"}`, S = V(
-    () => ({ enabled: T, ttl: A, storageKey: c }),
-    [T, A, c]
-  ), [h, x] = N(() => {
+  ), [r.tenantMode, r.baseDomain, r.selectorParam, r.fixedTenantSlug]), [l, h] = N(() => a()), S = ((j = r.cache) == null ? void 0 : j.enabled) ?? !0, k = ((K = r.cache) == null ? void 0 : K.ttl) ?? 5 * 60 * 1e3, T = (($ = r.cache) == null ? void 0 : $.storageKey) ?? `tenant_cache_${l || "default"}`, c = V(
+    () => ({ enabled: S, ttl: k, storageKey: T }),
+    [S, k, T]
+  ), [d, A] = N(() => {
     if (r.initialTenant) return r.initialTenant;
-    if (!S.enabled || !l) return null;
+    if (!c.enabled || !l) return null;
     try {
-      const B = localStorage.getItem(S.storageKey);
+      const B = localStorage.getItem(c.storageKey);
       if (!B) return null;
       const L = JSON.parse(B);
-      return Date.now() - L.timestamp < S.ttl && L.tenantSlug === l ? L.data : (localStorage.removeItem(S.storageKey), null);
+      return Date.now() - L.timestamp < c.ttl && L.tenantSlug === l ? L.data : (localStorage.removeItem(c.storageKey), null);
     } catch {
       return null;
     }
-  }), [P, I] = N(!h && !r.initialTenant), [R, k] = N(null), [m, g] = N(null), [b, C] = N(!1), [o, p] = N(null);
+  }), [P, I] = N(!d && !r.initialTenant), [R, E] = N(null), [m, g] = N(null), [b, C] = N(!1), [o, p] = N(null);
   re(() => {
     if (r.tenantMode === "fixed") return;
     const B = a();
-    d(B);
+    h(B);
   }, [a, r.tenantMode]);
-  const E = (n == null ? void 0 : n.settingsSchema) || null, y = te(
+  const x = (n == null ? void 0 : n.settingsSchema) || null, y = te(
     async (B, L = !1) => {
-      if (!(!L && S.enabled && h && h.subdomain === B))
+      if (!(!L && c.enabled && d && d.subdomain === B))
         try {
-          I(!0), k(null);
+          I(!0), E(null);
           const q = new he(t), W = await new be(q, i).getPublicTenantInfo(B);
-          if (x(W), S.enabled)
+          if (A(W), c.enabled)
             try {
-              const K = {
+              const Y = {
                 data: W,
                 timestamp: Date.now(),
                 tenantSlug: B
               };
-              localStorage.setItem(S.storageKey, JSON.stringify(K));
-            } catch (K) {
-              process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", K);
+              localStorage.setItem(c.storageKey, JSON.stringify(Y));
+            } catch (Y) {
+              process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Failed to cache tenant info:", Y);
             }
         } catch (q) {
           const _ = q instanceof Error ? q : new Error("Failed to load tenant information");
-          k(_), x(null);
+          E(_), A(null);
         } finally {
           I(!1);
         }
     },
-    [t, i, S, h]
+    [t, i, c, d]
   ), u = te(async () => {
-    if (!(!S.enabled || !h || !l))
+    if (!(!c.enabled || !d || !l))
       try {
-        const B = localStorage.getItem(S.storageKey);
+        const B = localStorage.getItem(c.storageKey);
         if (!B) return;
         const L = JSON.parse(B);
-        if (Date.now() - L.timestamp > S.ttl * 0.5) {
-          const _ = new he(t), K = await new be(_, i).getPublicTenantInfo(l);
-          x(K);
-          const Y = {
-            data: K,
+        if (Date.now() - L.timestamp > c.ttl * 0.5) {
+          const _ = new he(t), Y = await new be(_, i).getPublicTenantInfo(l);
+          A(Y);
+          const X = {
+            data: Y,
             timestamp: Date.now(),
             tenantSlug: l
           };
-          localStorage.setItem(S.storageKey, JSON.stringify(Y));
+          localStorage.setItem(c.storageKey, JSON.stringify(X));
         }
       } catch (B) {
         process.env.NODE_ENV === "development" && console.warn("[TenantProvider] Background tenant refresh failed:", B);
       }
-  }, [t, i, S, h, l]), v = te(async () => {
-    if (h != null && h.id)
+  }, [t, i, c, d, l]), v = te(async () => {
+    if (d != null && d.id)
       try {
         C(!0), p(null);
-        const B = new he(t), q = await new be(B, h.appId).getTenantSettings(h.id);
+        const B = new he(t), q = await new be(B, d.appId).getTenantSettings(d.id);
         g(q);
       } catch (B) {
         const L = B instanceof Error ? B : new Error("Failed to load tenant settings");
@@ -1030,25 +1060,25 @@ function xr({ config: r, children: e }) {
       } finally {
         C(!1);
       }
-  }, [t, h]), D = te(() => {
+  }, [t, d]), D = te(() => {
     v();
   }, [v]), se = te(
     (B) => {
-      if (!E)
+      if (!x)
         return { isValid: !0, errors: [] };
       const L = [];
       try {
-        return E.properties && Object.entries(E.properties).forEach(([q, _]) => {
-          var K;
+        return x.properties && Object.entries(x.properties).forEach(([q, _]) => {
+          var Y;
           const W = B[q];
-          if ((K = E.required) != null && K.includes(q) && W == null) {
+          if ((Y = x.required) != null && Y.includes(q) && W == null) {
             L.push(`Field '${q}' is required`);
             return;
           }
           if (W != null) {
             if (_.type) {
-              const Y = _.type, le = typeof W;
-              Y === "string" && le !== "string" ? L.push(`Field '${q}' must be a string`) : (Y === "number" || Y === "integer") && le !== "number" ? L.push(`Field '${q}' must be a number`) : Y === "boolean" && le !== "boolean" ? L.push(`Field '${q}' must be a boolean`) : Y === "array" && !Array.isArray(W) && L.push(`Field '${q}' must be an array`);
+              const X = _.type, le = typeof W;
+              X === "string" && le !== "string" ? L.push(`Field '${q}' must be a string`) : (X === "number" || X === "integer") && le !== "number" ? L.push(`Field '${q}' must be a number`) : X === "boolean" && le !== "boolean" ? L.push(`Field '${q}' must be a boolean`) : X === "array" && !Array.isArray(W) && L.push(`Field '${q}' must be an array`);
             }
             _.minLength !== void 0 && typeof W == "string" && W.length < _.minLength && L.push(
               `Field '${q}' must be at least ${_.minLength} characters long`
@@ -1067,13 +1097,13 @@ function xr({ config: r, children: e }) {
         };
       }
     },
-    [E]
+    [x]
   );
   re(() => {
-    !r.initialTenant && l ? h ? u() : y(l) : !r.initialTenant && !l && (x(null), k(null), I(!1));
-  }, [r.initialTenant, l, h, y, u]), re(() => {
-    h != null && h.id ? v() : (g(null), p(null), C(!1));
-  }, [h == null ? void 0 : h.id, v]);
+    !r.initialTenant && l ? d ? u() : y(l) : !r.initialTenant && !l && (A(null), E(null), I(!1));
+  }, [r.initialTenant, l, d, y, u]), re(() => {
+    d != null && d.id ? v() : (g(null), p(null), C(!1));
+  }, [d == null ? void 0 : d.id, v]);
   const F = te(
     (B, L) => {
       const { mode: q = "reload", redirectPath: _ } = L || {}, W = r.tenantMode || "selector";
@@ -1085,37 +1115,37 @@ function xr({ config: r, children: e }) {
         return;
       }
       if (localStorage.setItem("tenant", B), W === "subdomain") {
-        const K = window.location.hostname, Y = _t(
+        const Y = window.location.hostname, X = _t(
           B,
-          K,
+          Y,
           r.baseDomain
         );
-        if (!Y) {
+        if (!X) {
           process.env.NODE_ENV === "development" && console.warn(
             "[TenantProvider] Cannot switch subdomain, invalid hostname:",
-            K
+            Y
           );
           return;
         }
-        const le = _ || window.location.pathname, Se = new URL(`${window.location.protocol}//${Y}${le}`);
+        const le = _ || window.location.pathname, Se = new URL(`${window.location.protocol}//${X}${le}`);
         new URLSearchParams(window.location.search).forEach((Fe, Ne) => {
           Se.searchParams.set(Ne, Fe);
         }), window.location.href = Se.toString();
       } else if (W === "selector") {
-        const K = _ || window.location.pathname, Y = new URLSearchParams(window.location.search);
-        if (Y.set(r.selectorParam || "tenant", B), q === "reload") {
-          const le = `${K}?${Y.toString()}${window.location.hash}`;
+        const Y = _ || window.location.pathname, X = new URLSearchParams(window.location.search);
+        if (X.set(r.selectorParam || "tenant", B), q === "reload") {
+          const le = `${Y}?${X.toString()}${window.location.hash}`;
           window.location.href = le;
         } else {
-          const le = `${K}?${Y.toString()}${window.location.hash}`;
-          window.history.pushState({}, "", le), d(B), y(B);
+          const le = `${Y}?${X.toString()}${window.location.hash}`;
+          window.history.pushState({}, "", le), h(B), y(B);
         }
       }
     },
     [r.tenantMode, r.selectorParam, r.baseDomain, r.fixedTenantSlug, y]
   ), H = V(() => ({
     // Tenant info
-    tenant: h,
+    tenant: d,
     tenantSlug: l,
     isTenantLoading: P,
     tenantError: R,
@@ -1124,7 +1154,7 @@ function xr({ config: r, children: e }) {
     },
     // Settings
     settings: m,
-    settingsSchema: E,
+    settingsSchema: x,
     isSettingsLoading: b,
     settingsError: o,
     // Actions
@@ -1133,12 +1163,12 @@ function xr({ config: r, children: e }) {
     // Validation
     validateSettings: se
   }), [
-    h,
+    d,
     l,
     P,
     R,
     m,
-    E,
+    x,
     b,
     o,
     D,
@@ -1200,13 +1230,13 @@ function et() {
 }
 const Pe = fe(null), Ie = fe(null);
 function Pr({ config: r = {}, children: e }) {
-  const t = Ue(), n = pe(), i = (t == null ? void 0 : t.baseUrl) ?? r.baseUrl ?? "", a = (t == null ? void 0 : t.appId) ?? r.appId, l = (n == null ? void 0 : n.tenant) ?? null, d = (n == null ? void 0 : n.tenantSlug) ?? null, T = (n == null ? void 0 : n.switchTenant) ?? (() => {
+  const t = Ue(), n = pe(), i = (t == null ? void 0 : t.baseUrl) ?? r.baseUrl ?? "", a = (t == null ? void 0 : t.appId) ?? r.appId, l = (n == null ? void 0 : n.tenant) ?? null, h = (n == null ? void 0 : n.tenantSlug) ?? null, S = (n == null ? void 0 : n.switchTenant) ?? (() => {
   });
   if (!i)
     throw new Error(
       "[AuthProvider] baseUrl is required. Provide it via AppProvider or AuthConfig.baseUrl."
     );
-  const [A, c] = N(r.initialRoles || []), [S, h] = N(!r.initialRoles), [x, P] = N(null), [I, R] = N(!1), [k, m] = N(null), [g, b] = N(() => Ot()), C = ye({ done: !1 });
+  const [k, T] = N(r.initialRoles || []), [c, d] = N(!r.initialRoles), [A, P] = N(null), [I, R] = N(!1), [E, m] = N(null), [g, b] = N(() => Ot()), C = ye({ done: !1 });
   C.current.done || (C.current.done = !0);
   const o = V(() => Me.getInstance({
     baseUrl: i,
@@ -1221,7 +1251,7 @@ function Pr({ config: r = {}, children: e }) {
     r.enableCookieSession,
     r.refreshQueueTimeout,
     r.proactiveRefreshMargin
-  ]), [p, E] = N(() => {
+  ]), [p, x] = N(() => {
     const w = o.getTokens();
     return w ? o.hasValidSession() || !!w.refreshToken : !!r.enableCookieSession;
   }), y = C.current.done && !p, u = V(() => {
@@ -1236,12 +1266,12 @@ function Pr({ config: r = {}, children: e }) {
   ), se = V(
     () => new Dt(u),
     [u]
-  ), F = V(() => x != null && x.roleId && A.find((w) => w.id === x.roleId) || null, [x, A]), H = V(() => (F == null ? void 0 : F.permissions) || [], [F]), j = V(
-    () => o.hasValidSession() && x !== null,
-    [o, x]
-  ), Z = V(() => (x == null ? void 0 : x.tenantId) != null, [x]), $ = ye(null), B = ye(/* @__PURE__ */ new Set()), L = async (w = !1) => {
+  ), F = V(() => A != null && A.roleId && k.find((w) => w.id === A.roleId) || null, [A, k]), H = V(() => (F == null ? void 0 : F.permissions) || [], [F]), j = V(
+    () => o.hasValidSession() && A !== null,
+    [o, A]
+  ), K = V(() => (A == null ? void 0 : A.tenantId) != null, [A]), $ = ye(null), B = ye(/* @__PURE__ */ new Set()), L = async (w = !1) => {
     try {
-      if (!o.hasValidSession() || !w && x) return;
+      if (!o.hasValidSession() || !w && A) return;
       const M = o.getUserId();
       if (!M) {
         process.env.NODE_ENV === "development" && console.warn("[AuthProvider] No userId available in token or storage");
@@ -1259,14 +1289,14 @@ function Pr({ config: r = {}, children: e }) {
   }, q = async (w) => {
     var He;
     const { username: M, password: z, tenantSlug: O, redirectPath: J } = w;
-    let X = l == null ? void 0 : l.id, Q = d;
-    O && (X = (await new be(u, a).getPublicTenantInfo(O)).id, Q = O);
+    let ee = l == null ? void 0 : l.id, Q = h;
+    O && (ee = (await new be(u, a).getPublicTenantInfo(O)).id, Q = O);
     const G = await v.login({
       username: M,
       password: z,
       appId: a,
-      tenantId: X
-    }), ke = O && O !== d;
+      tenantId: ee
+    }), ke = O && O !== h;
     if (o.setTokens({
       accessToken: G.accessToken,
       refreshToken: G.refreshToken,
@@ -1282,19 +1312,19 @@ function Pr({ config: r = {}, children: e }) {
     G.tenants && G.tenants.length > 0 && (b(G.tenants), Xe(G.tenants));
     const Ge = ((He = G.user) == null ? void 0 : He.tenantId) !== null;
     if (ke && Q)
-      return T(Q, { redirectPath: J }), G;
+      return S(Q, { redirectPath: J }), G;
     if (J && J !== window.location.pathname)
-      return T(Q || d || "", { redirectPath: J }), G;
+      return S(Q || h || "", { redirectPath: J }), G;
     if (!Ge && G.tenants && G.tenants.length > 0) {
       const Ee = w.autoSwitch !== !1 && r.autoSwitchSingleTenant !== !1;
       if (G.tenants.length === 1 && Ee) {
         const Qe = G.tenants[0];
-        return T(Qe.subdomain, { redirectPath: J }), G;
+        return S(Qe.subdomain, { redirectPath: J }), G;
       } else G.tenants.length > 1 && r.onTenantSelectionRequired && r.onTenantSelectionRequired(G.tenants);
     }
     return G;
   }, _ = async (w) => {
-    const { email: M, phoneNumber: z, name: O, password: J, lastName: X, tenantId: Q } = w;
+    const { email: M, phoneNumber: z, name: O, password: J, lastName: ee, tenantId: Q } = w;
     if (!M && !z)
       throw new Error("Either email or phoneNumber is required");
     if (!O || !J)
@@ -1305,27 +1335,27 @@ function Pr({ config: r = {}, children: e }) {
       name: O,
       password: J,
       tenantId: Q ?? (l == null ? void 0 : l.id),
-      lastName: X,
+      lastName: ee,
       appId: a
     });
   }, W = async (w) => {
-    const { email: M, phoneNumber: z, name: O, password: J, tenantName: X, lastName: Q } = w;
+    const { email: M, phoneNumber: z, name: O, password: J, tenantName: ee, lastName: Q } = w;
     if (!M && !z)
       throw new Error("Either email or phoneNumber is required");
-    if (!O || !J || !X)
+    if (!O || !J || !ee)
       throw new Error("Name, password, and tenantName are required");
     return v.signupTenantAdmin({
       email: M,
       phoneNumber: z,
       name: O,
       password: J,
-      tenantName: X,
+      tenantName: ee,
       appId: a,
       lastName: Q
     });
-  }, K = async (w) => {
-    await v.changePassword(w);
   }, Y = async (w) => {
+    await v.changePassword(w);
+  }, X = async (w) => {
     const { email: M, tenantId: z } = w, O = z ?? (l == null ? void 0 : l.id);
     if (!O)
       throw new Error("tenantId is required for password reset");
@@ -1333,7 +1363,7 @@ function Pr({ config: r = {}, children: e }) {
   }, le = async (w) => {
     await v.confirmPasswordReset(w);
   }, Se = async (w) => {
-    const { email: M, frontendUrl: z, name: O, lastName: J, tenantId: X } = w, Q = X ?? (l == null ? void 0 : l.id);
+    const { email: M, frontendUrl: z, name: O, lastName: J, tenantId: ee } = w, Q = ee ?? (l == null ? void 0 : l.id);
     if (!Q)
       throw new Error("tenantId is required for magic link authentication");
     return v.sendMagicLink({
@@ -1346,8 +1376,8 @@ function Pr({ config: r = {}, children: e }) {
     });
   }, We = async (w) => {
     const { token: M, email: z, tenantSlug: O } = w;
-    let J = l == null ? void 0 : l.id, X = d;
-    O && (J = (await new be(u, a).getPublicTenantInfo(O)).id, X = O);
+    let J = l == null ? void 0 : l.id, ee = h;
+    O && (J = (await new be(u, a).getPublicTenantInfo(O)).id, ee = O);
     const Q = await v.verifyMagicLink({
       token: M,
       email: z,
@@ -1357,7 +1387,7 @@ function Pr({ config: r = {}, children: e }) {
     if (B.current.has(M))
       return Q;
     B.current.add(M);
-    const G = O && O !== d;
+    const G = O && O !== h;
     if (o.setTokens({
       accessToken: Q.accessToken,
       refreshToken: Q.refreshToken,
@@ -1370,7 +1400,7 @@ function Pr({ config: r = {}, children: e }) {
         process.env.NODE_ENV === "development" && console.warn("[AuthProvider] Failed to load complete user data after magic link:", ke);
       }
     }
-    return G && X && X !== d && T(X), Q;
+    return G && ee && ee !== h && S(ee), Q;
   }, Fe = async () => {
     const w = o.getTokens();
     if (!(w != null && w.refreshToken))
@@ -1392,13 +1422,13 @@ function Pr({ config: r = {}, children: e }) {
   }, mt = async () => {
     if (a)
       try {
-        h(!0);
+        d(!0);
         const { roles: w } = await se.getRolesByApp(a);
-        c(w);
+        T(w);
       } catch (w) {
         process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", w);
       } finally {
-        h(!1);
+        d(!1);
       }
   }, gt = async (w, M) => {
     const { redirectPath: z } = M || {}, O = o.getTokens();
@@ -1413,8 +1443,8 @@ function Pr({ config: r = {}, children: e }) {
       refreshToken: O.refreshToken,
       expiresIn: J.expiresIn
     }), P(J.user), o.setUser(J.user);
-    const X = g.find((Q) => Q.id === w);
-    X && T(X.subdomain, { redirectPath: z });
+    const ee = g.find((Q) => Q.id === w);
+    ee && S(ee.subdomain, { redirectPath: z });
   }, yt = async () => {
     const w = await v.getUserTenants();
     return b(w), Xe(w), w;
@@ -1425,8 +1455,8 @@ function Pr({ config: r = {}, children: e }) {
     signupTenantAdmin: W,
     sendMagicLink: Se,
     verifyMagicLink: We,
-    changePassword: K,
-    requestPasswordReset: Y,
+    changePassword: Y,
+    requestPasswordReset: X,
     confirmPasswordReset: le,
     refreshToken: Fe,
     logout: Ne,
@@ -1467,15 +1497,15 @@ function Pr({ config: r = {}, children: e }) {
       isAuthenticated: j,
       isAuthInitializing: !y,
       isAuthReady: y,
-      currentUser: x,
+      currentUser: A,
       isUserLoading: I,
-      userError: k,
+      userError: E,
       userRole: F,
       userPermissions: H,
-      availableRoles: A,
-      rolesLoading: S,
+      availableRoles: k,
+      rolesLoading: c,
       userTenants: g,
-      hasTenantContext: Z,
+      hasTenantContext: K,
       sessionManager: o,
       authenticatedHttpService: u,
       hasPermission: w,
@@ -1486,27 +1516,27 @@ function Pr({ config: r = {}, children: e }) {
   }, [
     j,
     y,
-    x,
+    A,
     I,
-    k,
+    E,
     F,
     H,
-    A,
-    S,
+    k,
+    c,
     g,
-    Z,
+    K,
     o,
     u
   ]);
   return re(() => {
     if (r.initialRoles || !a) return;
     let w = !1;
-    return h(!0), se.getRolesByApp(a).then(({ roles: M }) => {
-      w || c(M);
+    return d(!0), se.getRolesByApp(a).then(({ roles: M }) => {
+      w || T(M);
     }).catch((M) => {
       process.env.NODE_ENV === "development" && console.error("[AuthProvider] Failed to fetch roles:", M);
     }).finally(() => {
-      w || h(!1);
+      w || d(!1);
     }), () => {
       w = !0;
     };
@@ -1517,16 +1547,16 @@ function Pr({ config: r = {}, children: e }) {
       if (!o.hasValidSession() && ((O = o.getTokens()) != null && O.refreshToken) && await o.waitForPendingRefresh(), w || !o.hasValidSession() && !o.getTokens() && r.enableCookieSession && (await o.attemptCookieSessionRestore(), w))
         return;
       const z = o.getUser();
-      z && o.hasValidSession() && P(z), E(!1);
+      z && o.hasValidSession() && P(z), x(!1);
     })(), () => {
       w = !0;
     };
   }, [o, r.enableCookieSession]), re(() => {
-    !x && !I && !k && o.hasValidSession() ? $.current.loadUserData().catch(() => {
+    !A && !I && !E && o.hasValidSession() ? $.current.loadUserData().catch(() => {
     }).finally(() => {
-      E(!1);
-    }) : E(!1);
-  }, [x, I, k, o]), /* @__PURE__ */ s(Ie.Provider, { value: bt, children: /* @__PURE__ */ s(Pe.Provider, { value: wt, children: e }) });
+      x(!1);
+    }) : x(!1);
+  }, [A, I, E, o]), /* @__PURE__ */ s(Ie.Provider, { value: bt, children: /* @__PURE__ */ s(Pe.Provider, { value: wt, children: e }) });
 }
 function Ir() {
   const r = ne(Pe);
@@ -1599,23 +1629,23 @@ class Vt {
 }
 const Ve = fe(null);
 function Fr({ config: r = {}, children: e }) {
-  const t = Ue(), n = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", a = (t == null ? void 0 : t.appId) ?? "", l = (n == null ? void 0 : n.tenant) ?? null, [d, T] = N([]), [A, c] = N(!1), [S, h] = N(null), [x, P] = N(!1), I = V(() => {
+  const t = Ue(), n = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", a = (t == null ? void 0 : t.appId) ?? "", l = (n == null ? void 0 : n.tenant) ?? null, [h, S] = N([]), [k, T] = N(!1), [c, d] = N(null), [A, P] = N(!1), I = V(() => {
     const m = new he(i);
     return new Vt(m);
   }, [i]), R = async () => {
     if (!(l != null && l.id)) {
-      T([]);
+      S([]);
       return;
     }
-    c(!0), h(null);
+    T(!0), d(null);
     try {
       const m = await I.getTenantFeatureFlags(l.id, a);
-      T(m);
+      S(m);
     } catch (m) {
       const g = m instanceof Error ? m.message : "Failed to fetch feature flags";
-      h(g), r.onError && r.onError(m instanceof Error ? m : new Error(g));
+      d(g), r.onError && r.onError(m instanceof Error ? m : new Error(g));
     } finally {
-      c(!1);
+      T(!1);
     }
   };
   re(() => {
@@ -1624,28 +1654,28 @@ function Fr({ config: r = {}, children: e }) {
     const m = r.refreshInterval || 5 * 60 * 1e3, g = setInterval(R, m);
     return () => clearInterval(g);
   }, [l == null ? void 0 : l.id, i, a, r.refreshInterval]);
-  const k = V(() => {
+  const E = V(() => {
     const m = (p) => {
-      const E = d.find((y) => y.key === p);
-      return (E == null ? void 0 : E.value) === !0;
-    }, g = (p) => d.find((E) => E.key === p), b = (p) => {
-      const E = d.find((y) => y.key === p);
-      return E ? E.value ? "enabled" : "disabled" : "not_found";
+      const x = h.find((y) => y.key === p);
+      return (x == null ? void 0 : x.value) === !0;
+    }, g = (p) => h.find((x) => x.key === p), b = (p) => {
+      const x = h.find((y) => y.key === p);
+      return x ? x.value ? "enabled" : "disabled" : "not_found";
     }, C = async () => {
       await R();
-    }, o = !!(i && a) && (x || !(l != null && l.id));
+    }, o = !!(i && a) && (A || !(l != null && l.id));
     return {
-      featureFlags: d,
-      loading: A,
-      error: S,
+      featureFlags: h,
+      loading: k,
+      error: c,
       isReady: o,
       isEnabled: m,
       getFlag: g,
       getFlagState: b,
       refresh: C
     };
-  }, [d, A, S, i, a, l == null ? void 0 : l.id, x]);
-  return /* @__PURE__ */ s(Ve.Provider, { value: k, children: e });
+  }, [h, k, c, i, a, l == null ? void 0 : l.id, A]);
+  return /* @__PURE__ */ s(Ve.Provider, { value: E, children: e });
 }
 function qt() {
   const r = ne(Ve);
@@ -1698,45 +1728,45 @@ class zt {
 }
 const qe = fe(void 0);
 function Nr({ config: r = {}, children: e }) {
-  const t = Ue(), n = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [l, d] = N(null), [T, A] = N(!1), [c, S] = N(null), [h, x] = N(!1), P = V(() => {
-    const k = new he(i);
-    return new zt(k);
+  const t = Ue(), n = pe(), i = (t == null ? void 0 : t.baseUrl) ?? "", a = (n == null ? void 0 : n.tenant) ?? null, [l, h] = N(null), [S, k] = N(!1), [T, c] = N(null), [d, A] = N(!1), P = V(() => {
+    const E = new he(i);
+    return new zt(E);
   }, [i]), I = async () => {
     if (!(a != null && a.id)) {
-      d(null);
+      h(null);
       return;
     }
-    A(!0), S(null);
+    k(!0), c(null);
     try {
-      const k = await P.getTenantSubscriptionFeatures(a.id);
-      d(k);
-    } catch (k) {
-      const m = k instanceof Error ? k.message : "Failed to fetch subscription";
-      S(m), r.onError && r.onError(k instanceof Error ? k : new Error(m));
+      const E = await P.getTenantSubscriptionFeatures(a.id);
+      h(E);
+    } catch (E) {
+      const m = E instanceof Error ? E.message : "Failed to fetch subscription";
+      c(m), r.onError && r.onError(E instanceof Error ? E : new Error(m));
     } finally {
-      A(!1);
+      k(!1);
     }
   };
   re(() => {
-    if (!i || (I().finally(() => x(!0)), !r.refreshInterval)) return;
-    const k = r.refreshInterval || 10 * 60 * 1e3, m = setInterval(I, k);
+    if (!i || (I().finally(() => A(!0)), !r.refreshInterval)) return;
+    const E = r.refreshInterval || 10 * 60 * 1e3, m = setInterval(I, E);
     return () => clearInterval(m);
   }, [a == null ? void 0 : a.id, i, r.refreshInterval]);
   const R = V(() => {
-    const k = (l == null ? void 0 : l.features) || [], m = (E) => {
-      const y = k.find((u) => u.key === E);
+    const E = (l == null ? void 0 : l.features) || [], m = (x) => {
+      const y = E.find((u) => u.key === x);
       return y ? y.type === "BOOLEAN" || y.type === "boolean" ? y.value === !0 : !!y.value : !1;
-    }, g = (E) => k.find((y) => y.key === E), b = (E, y) => {
-      const u = k.find((v) => v.key === E);
+    }, g = (x) => E.find((y) => y.key === x), b = (x, y) => {
+      const u = E.find((v) => v.key === x);
       return u ? u.value : y;
-    }, C = (E) => !l || !l.isActive ? !1 : E.includes(l.planId), o = async () => {
+    }, C = (x) => !l || !l.isActive ? !1 : x.includes(l.planId), o = async () => {
       await I();
-    }, p = !!i && (h || !(a != null && a.id));
+    }, p = !!i && (d || !(a != null && a.id));
     return {
       subscription: l,
-      features: k,
-      loading: T,
-      error: c,
+      features: E,
+      loading: S,
+      error: T,
       isReady: p,
       isFeatureEnabled: m,
       getFeature: g,
@@ -1744,7 +1774,7 @@ function Nr({ config: r = {}, children: e }) {
       hasAllowedPlan: C,
       refresh: o
     };
-  }, [l, T, c, i, a == null ? void 0 : a.id, h]);
+  }, [l, S, T, i, a == null ? void 0 : a.id, d]);
   return /* @__PURE__ */ s(qe.Provider, { value: R, children: e });
 }
 function jt() {
@@ -1914,17 +1944,17 @@ function Mr({
   requiredPermissions: n,
   requireAllPermissions: i = !1
 }) {
-  const { hasValidSession: a, sessionManager: l, hasPermission: d, hasAnyPermission: T, hasAllPermissions: A } = de();
+  const { hasValidSession: a, sessionManager: l, hasPermission: h, hasAnyPermission: S, hasAllPermissions: k } = de();
   if (!a())
     return /* @__PURE__ */ s(U, { children: e || /* @__PURE__ */ s(tt, {}) });
-  const c = l.getUser();
-  if (!c)
+  const T = l.getUser();
+  if (!T)
     return /* @__PURE__ */ s(U, { children: e || /* @__PURE__ */ s(tt, {}) });
-  if (t && !Ht(c.userType, t))
-    return /* @__PURE__ */ s(rt, { userType: c.userType, minUserType: t });
-  if (n && n.length > 0 && !(i ? A(n) : T(n))) {
-    const h = n.filter((x) => !d(x)).map((x) => typeof x == "string" ? x : x.name);
-    return /* @__PURE__ */ s(rt, { missingPermissions: h });
+  if (t && !Ht(T.userType, t))
+    return /* @__PURE__ */ s(rt, { userType: T.userType, minUserType: t });
+  if (n && n.length > 0 && !(i ? k(n) : S(n))) {
+    const d = n.filter((A) => !h(A)).map((A) => typeof A == "string" ? A : A.name);
+    return /* @__PURE__ */ s(rt, { missingPermissions: d });
   }
   return /* @__PURE__ */ s(U, { children: r });
 }
@@ -2024,7 +2054,7 @@ function $r({
   requireAllPermissions: i = !1,
   fallback: a
 }) {
-  const { hasValidSession: l, sessionManager: d, hasPermission: T, hasAnyPermission: A, hasAllPermissions: c } = de(), S = xe();
+  const { hasValidSession: l, sessionManager: h, hasPermission: S, hasAnyPermission: k, hasAllPermissions: T } = de(), c = xe();
   if (re(() => {
     process.env.NODE_ENV === "development" && console.warn(
       "[react-identity-access] ProtectedRoute is deprecated. Use AuthenticatedZone or AdminZone from ZoneRoute instead."
@@ -2032,21 +2062,21 @@ function $r({
   }, []), !l())
     return a ? /* @__PURE__ */ s(U, { children: a }) : /* @__PURE__ */ f(U, { children: [
       /* @__PURE__ */ s(Qt, { redirectPath: e }),
-      /* @__PURE__ */ s(we, { to: e, state: { from: S.pathname }, replace: !0 })
+      /* @__PURE__ */ s(we, { to: e, state: { from: c.pathname }, replace: !0 })
     ] });
-  const h = d.getUser();
-  if (!h)
-    return /* @__PURE__ */ s(we, { to: e, state: { from: S.pathname }, replace: !0 });
-  if (t && !Jt(h.userType, t))
+  const d = h.getUser();
+  if (!d)
+    return /* @__PURE__ */ s(we, { to: e, state: { from: c.pathname }, replace: !0 });
+  if (t && !Jt(d.userType, t))
     return /* @__PURE__ */ s(
       nt,
       {
-        userType: h.userType,
+        userType: d.userType,
         requiredUserType: t
       }
     );
-  if (n && n.length > 0 && !(i ? c(n) : A(n))) {
-    const P = n.filter((I) => !T(I)).map((I) => typeof I == "string" ? I : I.name);
+  if (n && n.length > 0 && !(i ? T(n) : k(n))) {
+    const P = n.filter((I) => !S(I)).map((I) => typeof I == "string" ? I : I.name);
     return /* @__PURE__ */ s(nt, { missingPermissions: P });
   }
   return /* @__PURE__ */ s(U, { children: r });
@@ -2178,13 +2208,13 @@ const ue = ({
   userType: i,
   requiredPermissions: a,
   requireAllPermissions: l = !0,
-  returnTo: d,
-  onAccessDenied: T,
-  redirectTo: A,
-  loadingFallback: c,
-  accessDeniedFallback: S
+  returnTo: h,
+  onAccessDenied: S,
+  redirectTo: k,
+  loadingFallback: T,
+  accessDeniedFallback: c
 }) => {
-  const h = xe(), { isAuthenticated: x, isAuthInitializing: P, currentUser: I, userPermissions: R } = de(), { tenant: k, isTenantLoading: m } = Te(), g = Gt(), b = V(() => {
+  const d = xe(), { isAuthenticated: A, isAuthInitializing: P, currentUser: I, userPermissions: R } = de(), { tenant: E, isTenantLoading: m } = Te(), g = Gt(), b = V(() => {
     if (e)
       return g.presets[e];
   }, [e, g.presets]), C = V(
@@ -2198,21 +2228,21 @@ const ue = ({
     [t, n, i, a, b, l]
   ), o = V(
     () => ({
-      hasTenant: !!k,
-      isAuthenticated: x,
+      hasTenant: !!E,
+      isAuthenticated: A,
       userType: I == null ? void 0 : I.userType,
       permissions: R,
       isLoading: P || m
     }),
     [
-      k,
-      x,
+      E,
+      A,
       I == null ? void 0 : I.userType,
       R,
       P,
       m
     ]
-  ), p = V(() => o.isLoading ? null : Xt(C, o), [C, o]), E = V(() => p ? A || er(o, g.zoneRoots) : null, [p, A, o, g.zoneRoots]), y = V(() => !p || !E ? null : {
+  ), p = V(() => o.isLoading ? null : Xt(C, o), [C, o]), x = V(() => p ? k || er(o, g.zoneRoots) : null, [p, k, o, g.zoneRoots]), y = V(() => !p || !x ? null : {
     type: p,
     required: {
       tenant: C.tenant,
@@ -2226,28 +2256,28 @@ const ue = ({
       userType: o.userType,
       permissions: o.permissions
     },
-    redirectTo: E
-  }, [p, E, C, o]);
+    redirectTo: x
+  }, [p, x, C, o]);
   if (re(() => {
-    y && (T ? T(y) : g.onAccessDenied && g.onAccessDenied(y));
-  }, [y, T, g]), re(() => {
-    y && d && rr(d, h.pathname + h.search, g.returnToStorage);
+    y && (S ? S(y) : g.onAccessDenied && g.onAccessDenied(y));
+  }, [y, S, g]), re(() => {
+    y && h && rr(h, d.pathname + d.search, g.returnToStorage);
   }, [
     y,
-    d,
-    h.pathname,
-    h.search,
+    h,
+    d.pathname,
+    d.search,
     g.returnToStorage
   ]), o.isLoading)
-    return /* @__PURE__ */ s(U, { children: c ?? g.loadingFallback ?? null });
-  if (y && E) {
-    const u = S ?? g.accessDeniedFallback;
+    return /* @__PURE__ */ s(U, { children: T ?? g.loadingFallback ?? null });
+  if (y && x) {
+    const u = c ?? g.accessDeniedFallback;
     if (u)
       return /* @__PURE__ */ s(U, { children: u });
     const v = tr(
-      E,
-      d,
-      h.pathname + h.search,
+      x,
+      h,
+      d.pathname + d.search,
       g.returnToParam,
       g.returnToStorage
     );
@@ -2277,8 +2307,8 @@ function Jr({
   allowedPlans: t,
   requiredFeature: n
 }) {
-  const { subscription: i, hasAllowedPlan: a, isFeatureEnabled: l, loading: d } = jt();
-  return d ? /* @__PURE__ */ s(
+  const { subscription: i, hasAllowedPlan: a, isFeatureEnabled: l, loading: h } = jt();
+  return h ? /* @__PURE__ */ s(
     "div",
     {
       style: {
@@ -2335,29 +2365,29 @@ function Zr({ name: r, children: e, fallback: t }) {
   ) : n(r) ? /* @__PURE__ */ s(U, { children: e }) : /* @__PURE__ */ s(U, { children: t || /* @__PURE__ */ s(sr, { flagName: r }) });
 }
 function ve(r) {
-  const { submit: e, defaultErrorMessage: t, validate: n, onSuccess: i, onError: a } = r, [l, d] = N(!1), [T, A] = N(""), [c, S] = N({}), h = te((R, k) => {
-    S((m) => ({ ...m, [R]: k }));
-  }, []), x = te((R) => {
-    S((k) => {
-      if (!k[R]) return k;
-      const m = { ...k };
+  const { submit: e, defaultErrorMessage: t, validate: n, onSuccess: i, onError: a } = r, [l, h] = N(!1), [S, k] = N(""), [T, c] = N({}), d = te((R, E) => {
+    c((m) => ({ ...m, [R]: E }));
+  }, []), A = te((R) => {
+    c((E) => {
+      if (!E[R]) return E;
+      const m = { ...E };
       return delete m[R], m;
     });
   }, []), P = te(() => {
-    A(""), S({});
+    k(""), c({});
   }, []), I = te(
     async (R) => {
       if (R && R.preventDefault(), !(n && !n())) {
-        d(!0), A("");
+        h(!0), k("");
         try {
-          const k = await e();
-          return i == null || i(k), k;
-        } catch (k) {
-          const m = k instanceof Error ? k.message : t;
-          A(m), a == null || a(m);
+          const E = await e();
+          return i == null || i(E), E;
+        } catch (E) {
+          const m = E instanceof Error ? E.message : t;
+          k(m), a == null || a(m);
           return;
         } finally {
-          d(!1);
+          h(!1);
         }
       }
     },
@@ -2365,11 +2395,11 @@ function ve(r) {
   );
   return {
     loading: l,
-    error: T,
-    setError: A,
-    fieldErrors: c,
-    setFieldError: h,
-    clearFieldError: x,
+    error: S,
+    setError: k,
+    fieldErrors: T,
+    setFieldError: d,
+    clearFieldError: A,
     resetErrors: P,
     handleSubmit: I
   };
@@ -2611,30 +2641,30 @@ function Kr({
   onError: i,
   onForgotPassword: a,
   onSignupClick: l,
-  onMagicLinkClick: d,
-  showForgotPassword: T = !0,
-  showSignupLink: A = !0,
-  showMagicLinkOption: c = !0,
-  className: S
+  onMagicLinkClick: h,
+  showForgotPassword: S = !0,
+  showSignupLink: k = !0,
+  showMagicLinkOption: T = !0,
+  className: c
 }) {
-  const [h, x] = N(""), [P, I] = N(""), [R, k] = N(!1), { login: m } = de(), g = { ...lr, ...r }, b = Le("#3b82f6", e), C = { ...ar, ...t }, o = ve({
+  const [d, A] = N(""), [P, I] = N(""), [R, E] = N(!1), { login: m } = de(), g = { ...lr, ...r }, b = Le("#3b82f6", e), C = { ...ar, ...t }, o = ve({
     defaultErrorMessage: g.errorMessage,
     validate: () => {
       const u = [];
-      return h.trim() || u.push("username"), P.trim() || u.push("password"), u.forEach((v) => o.setFieldError(v, !0)), u.length === 0;
+      return d.trim() || u.push("username"), P.trim() || u.push("password"), u.forEach((v) => o.setFieldError(v, !0)), u.length === 0;
     },
-    submit: () => m({ username: h, password: P }),
+    submit: () => m({ username: d, password: P }),
     onSuccess: n,
     onError: i
   }), p = (u) => ({
     ...b.input,
     ...o.fieldErrors[u] ? b.inputError : {}
-  }), E = !h || !P || o.loading, y = {
+  }), x = !d || !P || o.loading, y = {
     ...b.button,
     ...o.loading ? b.buttonLoading : {},
-    ...E ? b.buttonDisabled : {}
+    ...x ? b.buttonDisabled : {}
   };
-  return /* @__PURE__ */ f("div", { className: S, style: b.container, children: [
+  return /* @__PURE__ */ f("div", { className: c, style: b.container, children: [
     /* @__PURE__ */ s("h2", { style: b.title, children: g.title }),
     /* @__PURE__ */ f("form", { onSubmit: o.handleSubmit, style: b.form, children: [
       /* @__PURE__ */ f("div", { style: b.fieldGroup, children: [
@@ -2645,9 +2675,9 @@ function Kr({
             id: "username",
             name: "username",
             type: "text",
-            value: h,
+            value: d,
             onChange: (u) => {
-              x(u.target.value), o.clearFieldError("username");
+              A(u.target.value), o.clearFieldError("username");
             },
             placeholder: g.usernamePlaceholder,
             style: p("username"),
@@ -2677,7 +2707,7 @@ function Kr({
             "button",
             {
               type: "button",
-              onClick: () => k(!R),
+              onClick: () => E(!R),
               style: b.passwordToggle,
               disabled: o.loading,
               "aria-label": R ? g.hidePasswordAriaLabel : g.showPasswordAriaLabel,
@@ -2686,21 +2716,21 @@ function Kr({
           )
         ] })
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: E, style: y, children: o.loading ? g.loadingText : g.submitButton }),
+      /* @__PURE__ */ s("button", { type: "submit", disabled: x, style: y, children: o.loading ? g.loadingText : g.submitButton }),
       o.error && /* @__PURE__ */ s("div", { style: b.errorText, children: o.error })
     ] }),
-    (T || A || c) && /* @__PURE__ */ f("div", { style: b.linkContainer, children: [
-      c && /* @__PURE__ */ f("div", { children: [
+    (S || k || T) && /* @__PURE__ */ f("div", { style: b.linkContainer, children: [
+      T && /* @__PURE__ */ f("div", { children: [
         /* @__PURE__ */ f("span", { style: b.divider, children: [
           g.magicLinkText,
           " "
         ] }),
-        /* @__PURE__ */ s("a", { onClick: d, style: b.link, children: g.magicLinkLink })
+        /* @__PURE__ */ s("a", { onClick: h, style: b.link, children: g.magicLinkLink })
       ] }),
-      c && (T || A) && /* @__PURE__ */ s("div", { style: b.divider, children: g.dividerBullet }),
-      T && /* @__PURE__ */ s("a", { onClick: a, style: b.link, children: g.forgotPasswordLink }),
-      T && A && /* @__PURE__ */ s("div", { style: b.divider, children: g.dividerBullet }),
-      A && /* @__PURE__ */ f("div", { children: [
+      T && (S || k) && /* @__PURE__ */ s("div", { style: b.divider, children: g.dividerBullet }),
+      S && /* @__PURE__ */ s("a", { onClick: a, style: b.link, children: g.forgotPasswordLink }),
+      S && k && /* @__PURE__ */ s("div", { style: b.divider, children: g.dividerBullet }),
+      k && /* @__PURE__ */ f("div", { children: [
         /* @__PURE__ */ f("span", { style: b.divider, children: [
           g.signupText,
           " "
@@ -2748,45 +2778,45 @@ function Yr({
   onError: i,
   onLoginClick: a,
   onMagicLinkClick: l,
-  showLoginLink: d = !0,
-  showMagicLinkOption: T = !0,
-  className: A
+  showLoginLink: h = !0,
+  showMagicLinkOption: S = !0,
+  className: k
 }) {
   var B;
-  const [c, S] = N(""), [h, x] = N(""), [P, I] = N(""), [R, k] = N(""), [m, g] = N(""), [b, C] = N(""), [o, p] = N(""), { signup: E, signupTenantAdmin: y } = de(), u = ((B = pe()) == null ? void 0 : B.tenant) ?? null, v = { ...cr, ...r }, D = Le("#10b981", e), se = !!c && (!!P || !!R) && !!m && !!b && (t === "user" || !!o), F = ve({
+  const [T, c] = N(""), [d, A] = N(""), [P, I] = N(""), [R, E] = N(""), [m, g] = N(""), [b, C] = N(""), [o, p] = N(""), { signup: x, signupTenantAdmin: y } = de(), u = ((B = pe()) == null ? void 0 : B.tenant) ?? null, v = { ...cr, ...r }, D = Le("#10b981", e), se = !!T && (!!P || !!R) && !!m && !!b && (t === "user" || !!o), F = ve({
     defaultErrorMessage: v.errorMessage,
     validate: () => {
       const L = [];
-      return c.trim() || L.push("name"), !P.trim() && !R.trim() && (L.push("email"), L.push("phoneNumber")), m.trim() || L.push("password"), b.trim() || L.push("confirmPassword"), t === "tenant" && !o.trim() && L.push("tenantName"), L.forEach((q) => F.setFieldError(q, !0)), L.length > 0 ? !1 : m !== b ? (F.setError(v.passwordMismatchError), F.setFieldError("confirmPassword", !0), !1) : t === "user" && !(u != null && u.id) ? (F.setError(v.tenantNotFoundError), !1) : !0;
+      return T.trim() || L.push("name"), !P.trim() && !R.trim() && (L.push("email"), L.push("phoneNumber")), m.trim() || L.push("password"), b.trim() || L.push("confirmPassword"), t === "tenant" && !o.trim() && L.push("tenantName"), L.forEach((q) => F.setFieldError(q, !0)), L.length > 0 ? !1 : m !== b ? (F.setError(v.passwordMismatchError), F.setFieldError("confirmPassword", !0), !1) : t === "user" && !(u != null && u.id) ? (F.setError(v.tenantNotFoundError), !1) : !0;
     },
     submit: async () => t === "tenant" ? y({
       email: P || void 0,
       phoneNumber: R || void 0,
-      name: c,
+      name: T,
       password: m,
       tenantName: o,
-      lastName: h || void 0
-    }) : E({
+      lastName: d || void 0
+    }) : x({
       email: P || void 0,
       phoneNumber: R || void 0,
-      name: c,
+      name: T,
       password: m,
       tenantId: u.id,
-      lastName: h || void 0
+      lastName: d || void 0
     }),
     onSuccess: n,
     onError: i
   }), H = (L) => ({
     ...D.input,
     ...F.fieldErrors[L] ? D.inputError : {}
-  }), j = !se || F.loading, Z = {
+  }), j = !se || F.loading, K = {
     ...D.button,
     ...F.loading ? D.buttonLoading : {},
     ...j ? D.buttonDisabled : {}
   }, $ = () => {
     F.clearFieldError("email"), F.clearFieldError("phoneNumber");
   };
-  return /* @__PURE__ */ f("div", { className: A, style: D.container, children: [
+  return /* @__PURE__ */ f("div", { className: k, style: D.container, children: [
     /* @__PURE__ */ s("h2", { style: D.title, children: v.title }),
     /* @__PURE__ */ f("form", { onSubmit: F.handleSubmit, style: D.form, children: [
       /* @__PURE__ */ f("div", { style: D.fieldGroup, children: [
@@ -2797,9 +2827,9 @@ function Yr({
             id: "name",
             name: "name",
             type: "text",
-            value: c,
+            value: T,
             onChange: (L) => {
-              S(L.target.value), F.clearFieldError("name");
+              c(L.target.value), F.clearFieldError("name");
             },
             placeholder: v.namePlaceholder,
             style: H("name"),
@@ -2815,8 +2845,8 @@ function Yr({
             id: "lastName",
             name: "lastName",
             type: "text",
-            value: h,
-            onChange: (L) => x(L.target.value),
+            value: d,
+            onChange: (L) => A(L.target.value),
             placeholder: v.lastNamePlaceholder,
             style: D.input,
             disabled: F.loading
@@ -2851,7 +2881,7 @@ function Yr({
             type: "tel",
             value: R,
             onChange: (L) => {
-              k(L.target.value), $();
+              E(L.target.value), $();
             },
             placeholder: v.phoneNumberPlaceholder,
             style: H("phoneNumber"),
@@ -2914,19 +2944,19 @@ function Yr({
           }
         )
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: j, style: Z, children: F.loading ? v.loadingText : v.submitButton }),
+      /* @__PURE__ */ s("button", { type: "submit", disabled: j, style: K, children: F.loading ? v.loadingText : v.submitButton }),
       F.error && /* @__PURE__ */ s("div", { style: D.errorText, children: F.error })
     ] }),
-    (d || T) && /* @__PURE__ */ f("div", { style: D.linkContainer, children: [
-      T && /* @__PURE__ */ f("div", { children: [
+    (h || S) && /* @__PURE__ */ f("div", { style: D.linkContainer, children: [
+      S && /* @__PURE__ */ f("div", { children: [
         /* @__PURE__ */ f("span", { style: D.divider, children: [
           v.magicLinkText,
           " "
         ] }),
         /* @__PURE__ */ s("a", { onClick: l, style: D.link, children: v.magicLinkLink })
       ] }),
-      T && d && /* @__PURE__ */ s("div", { style: D.divider, children: v.dividerBullet }),
-      d && /* @__PURE__ */ f("div", { children: [
+      S && h && /* @__PURE__ */ s("div", { style: D.divider, children: v.dividerBullet }),
+      h && /* @__PURE__ */ f("div", { children: [
         /* @__PURE__ */ f("span", { style: D.divider, children: [
           v.loginText,
           " "
@@ -2969,62 +2999,62 @@ function Xr({
   onLoginClick: i,
   onSignupClick: a,
   showTraditionalLinks: l = !0,
-  className: d,
-  verifyToken: T,
-  frontendUrl: A
+  className: h,
+  verifyToken: S,
+  frontendUrl: k
 }) {
   var H;
-  const [c, S] = N(""), [h, x] = N(""), [P, I] = N(""), [R, k] = N(!1), [m, g] = N(""), [b, C] = N(!1), { sendMagicLink: o, verifyMagicLink: p } = de(), E = ((H = pe()) == null ? void 0 : H.tenant) ?? null, y = { ...ur, ...r }, u = Le("#3b82f6", e), v = ve({
+  const [T, c] = N(""), [d, A] = N(""), [P, I] = N(""), [R, E] = N(!1), [m, g] = N(""), [b, C] = N(!1), { sendMagicLink: o, verifyMagicLink: p } = de(), x = ((H = pe()) == null ? void 0 : H.tenant) ?? null, y = { ...ur, ...r }, u = Le("#3b82f6", e), v = ve({
     defaultErrorMessage: y.errorMessage,
     validate: () => {
       const j = [];
-      return c.trim() || j.push("email"), b && !h.trim() && j.push("name"), j.forEach((Z) => v.setFieldError(Z, !0)), j.length > 0 ? !1 : E != null && E.id ? !0 : (v.setError(y.tenantNotFoundError), !1);
+      return T.trim() || j.push("email"), b && !d.trim() && j.push("name"), j.forEach((K) => v.setFieldError(K, !0)), j.length > 0 ? !1 : x != null && x.id ? !0 : (v.setError(y.tenantNotFoundError), !1);
     },
     submit: async () => {
       g("");
-      const j = A || (typeof window < "u" ? window.location.origin : ""), Z = await o({
-        email: c,
-        tenantId: E.id,
+      const j = k || (typeof window < "u" ? window.location.origin : ""), K = await o({
+        email: T,
+        tenantId: x.id,
         frontendUrl: j,
-        name: b ? h : void 0,
+        name: b ? d : void 0,
         lastName: b ? P : void 0
       });
-      return g(y.successMessage), Z;
+      return g(y.successMessage), K;
     },
     onSuccess: t,
     onError: n
   });
   re(() => {
-    if (!T) return;
+    if (!S) return;
     (async () => {
-      if (!E || !c) {
+      if (!x || !T) {
         v.setError(y.missingTenantOrEmailError);
         return;
       }
-      k(!0), v.setError("");
+      E(!0), v.setError("");
       try {
-        const Z = await p({ token: T, email: c });
-        t == null || t(Z);
-      } catch (Z) {
-        const $ = Z instanceof Error ? Z.message : "Failed to verify magic link";
+        const K = await p({ token: S, email: T });
+        t == null || t(K);
+      } catch (K) {
+        const $ = K instanceof Error ? K.message : "Failed to verify magic link";
         v.setError($), n == null || n($);
       } finally {
-        k(!1);
+        E(!1);
       }
     })();
-  }, [T]);
+  }, [S]);
   const D = (j) => ({
     ...u.input,
     ...v.fieldErrors[j] ? u.inputError : {}
-  }), se = !c || v.loading || R, F = {
+  }), se = !T || v.loading || R, F = {
     ...u.button,
     ...v.loading || R ? u.buttonLoading : {},
     ...se ? u.buttonDisabled : {}
   };
-  return R ? /* @__PURE__ */ f("div", { className: d, style: u.container, children: [
+  return R ? /* @__PURE__ */ f("div", { className: h, style: u.container, children: [
     /* @__PURE__ */ s("h2", { style: u.title, children: y.verifyingText }),
     /* @__PURE__ */ s("div", { style: u.verifyingContainer, children: /* @__PURE__ */ s("div", { style: u.verifyingText, children: y.verifyingDescription }) })
-  ] }) : /* @__PURE__ */ f("div", { className: d, style: u.container, children: [
+  ] }) : /* @__PURE__ */ f("div", { className: h, style: u.container, children: [
     /* @__PURE__ */ s("h2", { style: u.title, children: y.title }),
     /* @__PURE__ */ s("p", { style: u.description, children: y.description }),
     /* @__PURE__ */ f("form", { onSubmit: v.handleSubmit, style: u.form, children: [
@@ -3036,9 +3066,9 @@ function Xr({
             id: "email",
             name: "email",
             type: "email",
-            value: c,
+            value: T,
             onChange: (j) => {
-              S(j.target.value), v.clearFieldError("email");
+              c(j.target.value), v.clearFieldError("email");
             },
             placeholder: y.emailPlaceholder,
             style: D("email"),
@@ -3064,9 +3094,9 @@ function Xr({
               id: "name",
               name: "name",
               type: "text",
-              value: h,
+              value: d,
               onChange: (j) => {
-                x(j.target.value), v.clearFieldError("name");
+                A(j.target.value), v.clearFieldError("name");
               },
               placeholder: y.namePlaceholder,
               style: D("name"),
@@ -3095,7 +3125,7 @@ function Xr({
           {
             type: "button",
             onClick: () => {
-              C(!1), x(""), I("");
+              C(!1), A(""), I("");
             },
             style: u.toggleLink,
             children: y.hideNameToggle
@@ -3275,21 +3305,21 @@ function en({
   onError: i,
   onRetry: a,
   onBackToLogin: l,
-  className: d,
-  token: T,
-  email: A,
-  appId: c,
-  tenantSlug: S,
-  autoRedirectDelay: h = 3e3
+  className: h,
+  token: S,
+  email: k,
+  appId: T,
+  tenantSlug: c,
+  autoRedirectDelay: d = 3e3
 }) {
-  const [x, P] = N("verifying"), [I, R] = N(""), { verifyMagicLink: k } = de(), m = { ...dr, ...r }, g = { ...ut, ...e }, b = { ...mr, ...t }, C = () => {
+  const [A, P] = N("verifying"), [I, R] = N(""), { verifyMagicLink: E } = de(), m = { ...dr, ...r }, g = { ...ut, ...e }, b = { ...mr, ...t }, C = () => {
     if (typeof window > "u") return {};
     const u = new URLSearchParams(window.location.search);
     return {
-      token: T || u.get("token") || "",
-      email: A || u.get("email") || "",
-      appId: c || u.get("appId") || "",
-      tenantSlug: S || u.get("tenantSlug") || void 0
+      token: S || u.get("token") || "",
+      email: k || u.get("email") || "",
+      appId: T || u.get("appId") || "",
+      tenantSlug: c || u.get("tenantSlug") || void 0
     };
   }, o = async () => {
     P("verifying"), R("");
@@ -3297,28 +3327,28 @@ function en({
       const u = C();
       if (!u.token || !u.email)
         throw new Error(m.missingParamsError);
-      const v = await k({
+      const v = await E({
         token: u.token,
         email: u.email,
         tenantSlug: u.tenantSlug
       });
-      P("success"), n == null || n(v), h > 0 && setTimeout(() => {
+      P("success"), n == null || n(v), d > 0 && setTimeout(() => {
         P("redirecting");
-      }, h);
+      }, d);
     } catch (u) {
       const v = u.message || m.errorMessage;
       R(v), P("error"), i == null || i(v);
     }
   }, p = () => {
     a == null || a(), o();
-  }, E = () => {
+  }, x = () => {
     l == null || l();
   };
   re(() => {
     o();
   }, []);
   const y = () => {
-    switch (x) {
+    switch (A) {
       case "verifying":
         return /* @__PURE__ */ f("div", { style: g.message, children: [
           b.loading,
@@ -3359,7 +3389,7 @@ function en({
             /* @__PURE__ */ s(
               "button",
               {
-                onClick: E,
+                onClick: x,
                 style: g.backButton,
                 onMouseOver: (u) => {
                   Object.assign(u.currentTarget.style, g.backButtonHover);
@@ -3379,7 +3409,7 @@ function en({
         return null;
     }
   };
-  return /* @__PURE__ */ f("div", { style: g.container, className: d, children: [
+  return /* @__PURE__ */ f("div", { style: g.container, className: h, children: [
     /* @__PURE__ */ s("style", { children: `
           @keyframes spin {
             0% { transform: rotate(0deg); }
@@ -3425,15 +3455,15 @@ function tn({
   onSuccess: i,
   onError: a,
   onBackToLogin: l,
-  onModeChange: d,
-  className: T
+  onModeChange: h,
+  className: S
 }) {
   var se;
-  const [A, c] = N(""), [S, h] = N(n), [x, P] = N(""), [I, R] = N(""), [k, m] = N(""), { requestPasswordReset: g, confirmPasswordReset: b } = de(), C = ((se = pe()) == null ? void 0 : se.tenant) ?? null, o = { ...gr, ...r }, p = Le("#f59e0b", e), E = ve({
+  const [k, T] = N(""), [c, d] = N(n), [A, P] = N(""), [I, R] = N(""), [E, m] = N(""), { requestPasswordReset: g, confirmPasswordReset: b } = de(), C = ((se = pe()) == null ? void 0 : se.tenant) ?? null, o = { ...gr, ...r }, p = Le("#f59e0b", e), x = ve({
     defaultErrorMessage: o.errorMessage,
-    validate: () => A.trim() ? C != null && C.id ? !0 : (E.setError(o.tenantNotFoundError), !1) : (E.setFieldError("email", !0), !1),
+    validate: () => k.trim() ? C != null && C.id ? !0 : (x.setError(o.tenantNotFoundError), !1) : (x.setFieldError("email", !0), !1),
     submit: async () => {
-      m(""), await g({ email: A, tenantId: C.id }), m(o.successMessage);
+      m(""), await g({ email: k, tenantId: C.id }), m(o.successMessage);
     },
     onSuccess: () => i == null ? void 0 : i(),
     onError: a
@@ -3441,10 +3471,10 @@ function tn({
     defaultErrorMessage: o.errorMessage,
     validate: () => {
       const F = [];
-      return S.trim() || F.push("token"), x.trim() || F.push("newPassword"), I.trim() || F.push("confirmPassword"), F.forEach((H) => y.setFieldError(H, !0)), F.length > 0 ? !1 : x !== I ? (y.setError(o.passwordMismatchError), y.setFieldError("confirmPassword", !0), !1) : !0;
+      return c.trim() || F.push("token"), A.trim() || F.push("newPassword"), I.trim() || F.push("confirmPassword"), F.forEach((H) => y.setFieldError(H, !0)), F.length > 0 ? !1 : A !== I ? (y.setError(o.passwordMismatchError), y.setFieldError("confirmPassword", !0), !1) : !0;
     },
     submit: async () => {
-      m(""), await b({ token: S, newPassword: x }), m(o.resetSuccessMessage);
+      m(""), await b({ token: c, newPassword: A }), m(o.resetSuccessMessage);
     },
     onSuccess: () => i == null ? void 0 : i(),
     onError: a
@@ -3453,12 +3483,12 @@ function tn({
     const F = ($) => ({
       ...p.input,
       ...y.fieldErrors[$] ? p.inputError : {}
-    }), j = !(!!S && !!x && !!I) || y.loading, Z = {
+    }), j = !(!!c && !!A && !!I) || y.loading, K = {
       ...p.button,
       ...y.loading ? p.buttonLoading : {},
       ...j ? p.buttonDisabled : {}
     };
-    return /* @__PURE__ */ f("div", { className: T, style: p.container, children: [
+    return /* @__PURE__ */ f("div", { className: S, style: p.container, children: [
       /* @__PURE__ */ s("h2", { style: p.title, children: o.resetTitle }),
       /* @__PURE__ */ s("p", { style: p.subtitle, children: o.resetSubtitle }),
       /* @__PURE__ */ f("form", { onSubmit: y.handleSubmit, style: p.form, children: [
@@ -3468,9 +3498,9 @@ function tn({
             "input",
             {
               type: "text",
-              value: S,
+              value: c,
               onChange: ($) => {
-                h($.target.value), y.clearFieldError("token");
+                d($.target.value), y.clearFieldError("token");
               },
               placeholder: o.tokenPlaceholder,
               style: F("token"),
@@ -3484,7 +3514,7 @@ function tn({
             "input",
             {
               type: "password",
-              value: x,
+              value: A,
               onChange: ($) => {
                 P($.target.value), y.clearFieldError("newPassword");
               },
@@ -3510,56 +3540,56 @@ function tn({
             }
           )
         ] }),
-        /* @__PURE__ */ s("button", { type: "submit", disabled: j, style: Z, children: y.loading ? o.resetLoadingText : o.resetSubmitButton }),
+        /* @__PURE__ */ s("button", { type: "submit", disabled: j, style: K, children: y.loading ? o.resetLoadingText : o.resetSubmitButton }),
         y.error && /* @__PURE__ */ s("div", { style: p.errorText, children: y.error }),
-        k && /* @__PURE__ */ s("div", { style: p.successText, children: k })
+        E && /* @__PURE__ */ s("div", { style: p.successText, children: E })
       ] }),
       /* @__PURE__ */ f("div", { style: p.linkContainer, children: [
         /* @__PURE__ */ s("a", { onClick: l, style: p.link, children: o.backToLoginLink }),
-        d && /* @__PURE__ */ f(U, { children: [
+        h && /* @__PURE__ */ f(U, { children: [
           /* @__PURE__ */ s("span", { style: p.modeSwitchDivider, children: o.dividerBullet }),
-          /* @__PURE__ */ s("a", { onClick: () => d("request"), style: p.link, children: o.requestNewLinkLink })
+          /* @__PURE__ */ s("a", { onClick: () => h("request"), style: p.link, children: o.requestNewLinkLink })
         ] })
       ] })
     ] });
   }
   const u = (F) => ({
     ...p.input,
-    ...E.fieldErrors[F] ? p.inputError : {}
-  }), v = !A || E.loading, D = {
+    ...x.fieldErrors[F] ? p.inputError : {}
+  }), v = !k || x.loading, D = {
     ...p.button,
-    ...E.loading ? p.buttonLoading : {},
+    ...x.loading ? p.buttonLoading : {},
     ...v ? p.buttonDisabled : {}
   };
-  return /* @__PURE__ */ f("div", { className: T, style: p.container, children: [
+  return /* @__PURE__ */ f("div", { className: S, style: p.container, children: [
     /* @__PURE__ */ s("h2", { style: p.title, children: o.title }),
     /* @__PURE__ */ s("p", { style: p.subtitle, children: o.subtitle }),
-    /* @__PURE__ */ f("form", { onSubmit: E.handleSubmit, style: p.form, children: [
+    /* @__PURE__ */ f("form", { onSubmit: x.handleSubmit, style: p.form, children: [
       /* @__PURE__ */ f("div", { style: p.fieldGroup, children: [
         /* @__PURE__ */ s("label", { style: p.label, children: o.emailLabel }),
         /* @__PURE__ */ s(
           "input",
           {
             type: "email",
-            value: A,
+            value: k,
             onChange: (F) => {
-              c(F.target.value), E.clearFieldError("email");
+              T(F.target.value), x.clearFieldError("email");
             },
             placeholder: o.emailPlaceholder,
             style: u("email"),
-            disabled: E.loading
+            disabled: x.loading
           }
         )
       ] }),
-      /* @__PURE__ */ s("button", { type: "submit", disabled: v, style: D, children: E.loading ? o.loadingText : o.submitButton }),
-      E.error && /* @__PURE__ */ s("div", { style: p.errorText, children: E.error }),
-      k && /* @__PURE__ */ s("div", { style: p.successText, children: k })
+      /* @__PURE__ */ s("button", { type: "submit", disabled: v, style: D, children: x.loading ? o.loadingText : o.submitButton }),
+      x.error && /* @__PURE__ */ s("div", { style: p.errorText, children: x.error }),
+      E && /* @__PURE__ */ s("div", { style: p.successText, children: E })
     ] }),
     /* @__PURE__ */ f("div", { style: p.linkContainer, children: [
       /* @__PURE__ */ s("a", { onClick: l, style: p.link, children: o.backToLoginLink }),
-      d && /* @__PURE__ */ f(U, { children: [
+      h && /* @__PURE__ */ f(U, { children: [
         /* @__PURE__ */ s("span", { style: p.modeSwitchDivider, children: o.dividerBullet }),
-        /* @__PURE__ */ s("a", { onClick: () => d("reset"), style: p.link, children: o.haveTokenLink })
+        /* @__PURE__ */ s("a", { onClick: () => h("reset"), style: p.link, children: o.haveTokenLink })
       ] })
     ] })
   ] });
@@ -3616,34 +3646,34 @@ function rn({
   errorFallback: t,
   requireTenant: n = !0
 }) {
-  const { isAppLoading: i, appError: a, retryApp: l } = Ae(), d = pe(), T = Oe(), A = at(), c = lt(), S = (d == null ? void 0 : d.isTenantLoading) ?? !1, h = (d == null ? void 0 : d.tenantError) ?? null, x = (d == null ? void 0 : d.tenantSlug) ?? null, P = (d == null ? void 0 : d.retryTenant) ?? (() => {
-  }), I = (T == null ? void 0 : T.isAuthReady) ?? !0, R = (A == null ? void 0 : A.isReady) ?? !0, k = (c == null ? void 0 : c.isReady) ?? !0, m = n && d && x, o = i || m && S || T && !I || A && !R || c && !k, p = a || (m ? h : null), E = () => {
-    a && l(), h && d && P();
+  const { isAppLoading: i, appError: a, retryApp: l } = Ae(), h = pe(), S = Oe(), k = at(), T = lt(), c = (h == null ? void 0 : h.isTenantLoading) ?? !1, d = (h == null ? void 0 : h.tenantError) ?? null, A = (h == null ? void 0 : h.tenantSlug) ?? null, P = (h == null ? void 0 : h.retryTenant) ?? (() => {
+  }), I = (S == null ? void 0 : S.isAuthReady) ?? !0, R = (k == null ? void 0 : k.isReady) ?? !0, E = (T == null ? void 0 : T.isReady) ?? !0, m = n && h && A, o = i || m && c || S && !I || k && !R || T && !E, p = a || (m ? d : null), x = () => {
+    a && l(), d && h && P();
   };
   if (o)
     return /* @__PURE__ */ s(U, { children: e || /* @__PURE__ */ s(yr, {}) });
   if (p) {
-    const y = typeof t == "function" ? t(p, E) : t || /* @__PURE__ */ s(br, { error: p, retry: E });
+    const y = typeof t == "function" ? t(p, x) : t || /* @__PURE__ */ s(br, { error: p, retry: x });
     return /* @__PURE__ */ s(U, { children: y });
   }
   return /* @__PURE__ */ s(U, { children: r });
 }
 function nn(r = !0) {
-  const { isAppLoading: e, appError: t, retryApp: n, appInfo: i } = Ae(), a = pe(), l = Oe(), d = at(), T = lt(), A = (a == null ? void 0 : a.isTenantLoading) ?? !1, c = (a == null ? void 0 : a.tenantError) ?? null, S = (a == null ? void 0 : a.tenant) ?? null, h = (a == null ? void 0 : a.tenantSlug) ?? null, x = (a == null ? void 0 : a.retryTenant) ?? (() => {
-  }), P = (l == null ? void 0 : l.isAuthReady) ?? !0, I = (d == null ? void 0 : d.isReady) ?? !0, R = (T == null ? void 0 : T.isReady) ?? !0, k = r && a && h, C = e || k && A || l && !P || d && !I || T && !R, o = t || (k ? c : null);
+  const { isAppLoading: e, appError: t, retryApp: n, appInfo: i } = Ae(), a = pe(), l = Oe(), h = at(), S = lt(), k = (a == null ? void 0 : a.isTenantLoading) ?? !1, T = (a == null ? void 0 : a.tenantError) ?? null, c = (a == null ? void 0 : a.tenant) ?? null, d = (a == null ? void 0 : a.tenantSlug) ?? null, A = (a == null ? void 0 : a.retryTenant) ?? (() => {
+  }), P = (l == null ? void 0 : l.isAuthReady) ?? !0, I = (h == null ? void 0 : h.isReady) ?? !0, R = (S == null ? void 0 : S.isReady) ?? !0, E = r && a && d, C = e || E && k || l && !P || h && !I || S && !R, o = t || (E ? T : null);
   return {
     isLoading: C,
     error: o,
-    isReady: !C && !o && i !== null && (!k || S !== null),
+    isReady: !C && !o && i !== null && (!E || c !== null),
     retry: () => {
-      t && n(), c && a && x();
+      t && n(), T && a && A();
     },
     // Individual states
     app: { isLoading: e, error: t, data: i },
-    tenant: a ? { isLoading: A, error: c, data: S } : null,
+    tenant: a ? { isLoading: k, error: T, data: c } : null,
     auth: l ? { isReady: P } : null,
-    featureFlags: d ? { isReady: I } : null,
-    subscription: T ? { isReady: R } : null
+    featureFlags: h ? { isReady: I } : null,
+    subscription: S ? { isReady: R } : null
   };
 }
 const wr = {
@@ -3698,14 +3728,14 @@ function sn({
   className: i = "",
   dropdownClassName: a = "",
   itemClassName: l = "",
-  renderItem: d,
-  placeholder: T = "Select tenant",
-  disabled: A = !1,
-  showCurrentTenant: c = !0
+  renderItem: h,
+  placeholder: S = "Select tenant",
+  disabled: k = !1,
+  showCurrentTenant: T = !0
 }) {
   var C;
-  const S = { ...wr, ...n }, h = Oe(), [x, P] = N(!1), I = ye(null), R = r ?? (h == null ? void 0 : h.userTenants) ?? [], k = e ?? ((C = h == null ? void 0 : h.currentUser) == null ? void 0 : C.tenantId) ?? null, m = async (o) => {
-    P(!1), t ? t(o) : h != null && h.switchToTenant && await h.switchToTenant(o);
+  const c = { ...wr, ...n }, d = Oe(), [A, P] = N(!1), I = ye(null), R = r ?? (d == null ? void 0 : d.userTenants) ?? [], E = e ?? ((C = d == null ? void 0 : d.currentUser) == null ? void 0 : C.tenantId) ?? null, m = async (o) => {
+    P(!1), t ? t(o) : d != null && d.switchToTenant && await d.switchToTenant(o);
   };
   re(() => {
     const o = (p) => {
@@ -3713,59 +3743,59 @@ function sn({
     };
     return document.addEventListener("mousedown", o), () => document.removeEventListener("mousedown", o);
   }, []);
-  const g = R.find((o) => o.id === k);
+  const g = R.find((o) => o.id === E);
   if (R.length === 0)
     return null;
-  if (R.length === 1 && c)
+  if (R.length === 1 && T)
     return /* @__PURE__ */ s("div", { className: i, children: /* @__PURE__ */ s("span", { children: R[0].name }) });
   const b = (o, p) => /* @__PURE__ */ f("span", { style: { fontWeight: p ? "bold" : "normal" }, children: [
     o.name,
-    o.role && /* @__PURE__ */ f("span", { style: S.itemRole, children: [
+    o.role && /* @__PURE__ */ f("span", { style: c.itemRole, children: [
       "(",
       o.role,
       ")"
     ] })
   ] });
-  return /* @__PURE__ */ f("div", { ref: I, className: i, style: S.wrapper, children: [
+  return /* @__PURE__ */ f("div", { ref: I, className: i, style: c.wrapper, children: [
     /* @__PURE__ */ f(
       "button",
       {
         type: "button",
-        onClick: () => !A && P(!x),
-        disabled: A,
+        onClick: () => !k && P(!A),
+        disabled: k,
         style: {
-          ...S.button,
-          ...A ? S.buttonDisabled : {}
+          ...c.button,
+          ...k ? c.buttonDisabled : {}
         },
         children: [
-          g ? g.name : T,
-          /* @__PURE__ */ s("span", { style: S.arrow, children: x ? "▲" : "▼" })
+          g ? g.name : S,
+          /* @__PURE__ */ s("span", { style: c.arrow, children: A ? "▲" : "▼" })
         ]
       }
     ),
-    x && /* @__PURE__ */ s("div", { className: a, style: S.dropdown, children: R.map((o) => {
-      const p = o.id === k;
+    A && /* @__PURE__ */ s("div", { className: a, style: c.dropdown, children: R.map((o) => {
+      const p = o.id === E;
       return /* @__PURE__ */ s(
         "div",
         {
           className: l,
           onClick: () => m(o.id),
           style: {
-            ...S.item,
-            ...p ? S.itemSelected : {}
+            ...c.item,
+            ...p ? c.itemSelected : {}
           },
-          onMouseEnter: (E) => {
-            p || Object.assign(E.currentTarget.style, S.itemHover);
+          onMouseEnter: (x) => {
+            p || Object.assign(x.currentTarget.style, c.itemHover);
           },
-          onMouseLeave: (E) => {
+          onMouseLeave: (x) => {
             if (!p) {
-              const y = S.item || {};
-              Object.keys(S.itemHover || {}).forEach((u) => {
-                E.currentTarget.style[u] = y[u] ?? "";
+              const y = c.item || {};
+              Object.keys(c.itemHover || {}).forEach((u) => {
+                x.currentTarget.style[u] = y[u] ?? "";
               });
             }
           },
-          children: d ? d(o, p) : b(o, p)
+          children: h ? h(o, p) : b(o, p)
         },
         o.id
       );
@@ -3851,7 +3881,7 @@ function cn(r = {}) {
     zoneRoots: e = {},
     returnToParam: t = dt,
     returnToStorage: n = "url"
-  } = r, i = vt(), [a, l] = Tt(), { isAuthenticated: d, currentUser: T } = de(), { tenant: A } = Te(), c = V(() => ({ ...ze, ...e }), [e]), S = !!A, h = T == null ? void 0 : T.userType, x = V(() => {
+  } = r, i = vt(), [a, l] = Tt(), { isAuthenticated: h, currentUser: S } = de(), { tenant: k } = Te(), T = V(() => ({ ...ze, ...e }), [e]), c = !!k, d = S == null ? void 0 : S.userType, A = V(() => {
     switch (n) {
       case "url":
         return a.get(t);
@@ -3895,17 +3925,17 @@ function cn(r = {}) {
     [n, a, t, l]
   ), R = te(
     (m) => {
-      const g = c[m] || c.default;
+      const g = T[m] || T.default;
       i(g);
     },
-    [i, c]
-  ), k = te(() => S ? d ? h === ae.TENANT_ADMIN ? c.tenantAdmin : c.tenantUser : c.tenantGuest : d ? h === ae.TENANT_ADMIN ? c.publicAdmin : c.publicUser : c.publicGuest, [S, d, h, c]);
+    [i, T]
+  ), E = te(() => c ? h ? d === ae.TENANT_ADMIN ? T.tenantAdmin : T.tenantUser : T.tenantGuest : h ? d === ae.TENANT_ADMIN ? T.publicAdmin : T.publicUser : T.publicGuest, [c, h, d, T]);
   return {
-    returnToUrl: x,
+    returnToUrl: A,
     clearReturnTo: P,
     setReturnTo: I,
     navigateToZone: R,
-    getSmartRedirect: k
+    getSmartRedirect: E
   };
 }
 function un(r, e, t = dt, n = "url") {
@@ -3943,7 +3973,7 @@ export {
   Or as PublicZone,
   Dt as RoleApiService,
   Cr as RoutingProvider,
-  ee as SessionExpiredError,
+  Z as SessionExpiredError,
   Me as SessionManager,
   Yr as SignupForm,
   zt as SubscriptionApiService,