Bump the dev-patch-updates group across 1 directory with 5 updates

Bumps the dev-patch-updates group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.91.1` | `5.91.3` | | [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.8` | `0.31.9` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.27.3` | | [prettier](https://github.com/prettier/prettier) | `3.8.0` | `3.8.1` | | [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email) | `5.2.5` | `5.2.8` | Updates `@tanstack/react-query-devtools` from 5.91.1 to 5.91.3 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.91.3/packages/react-query-devtools) Updates `drizzle-kit` from 0.31.8 to 0.31.9 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.8...drizzle-kit@0.31.9) Updates `esbuild` from 0.27.2 to 0.27.3 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](https://github.com/evanw/esbuild/compare/v0.27.2...v0.27.3) Updates `prettier` from 3.8.0 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.0...3.8.1) Updates `react-email` from 5.2.5 to 5.2.8 - [Release notes](https://github.com/resend/react-email/releases) - [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md) - [Commits](https://github.com/resend/react-email/commits/react-email@5.2.8/packages/react-email) --- updated-dependencies: - dependency-name: "@tanstack/react-query-devtools" dependency-version: 5.91.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: drizzle-kit dependency-version: 0.31.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: esbuild dependency-version: 0.27.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: react-email dependency-version: 5.2.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>
Merge branch 'dev'
2026-02-10 20:02:26 +00:00 · 2026-02-10 02:45:08 +00:00 · 2026-02-04 21:44:07 -08:00 · 2026-02-02 18:19:13 -08:00 · 2026-02-02 16:46:48 -08:00 · 2026-01-29 10:01:30 -08:00
37 changed files with 901 additions and 942 deletions
--- a/messages/de-DE.json
+++ b/messages/de-DE.json
@@ -97,7 +97,7 @@
    "siteGeneralDescription": "Allgemeine Einstellungen für diesen Standort konfigurieren",
    "siteSettingDescription": "Standorteinstellungen konfigurieren",
    "siteSetting": "{siteName} Einstellungen",
-    "siteNewtTunnel": "Neuer Standort (empfohlen)",
+    "siteNewtTunnel": "Newt Standort (empfohlen)",
    "siteNewtTunnelDescription": "Einfachster Weg, einen Einstiegspunkt in jedes Netzwerk zu erstellen. Keine zusätzliche Einrichtung.",
    "siteWg": "Einfacher WireGuard Tunnel",
    "siteWgDescription": "Verwende jeden WireGuard-Client, um einen Tunnel einzurichten. Manuelles NAT-Setup erforderlich.",
@@ -107,7 +107,7 @@
    "siteSeeAll": "Alle Standorte anzeigen",
    "siteTunnelDescription": "Legen Sie fest, wie Sie sich mit dem Standort verbinden möchten",
    "siteNewtCredentials": "Zugangsdaten",
-    "siteNewtCredentialsDescription": "So wird sich die Seite mit dem Server authentifizieren",
+    "siteNewtCredentialsDescription": "So wird sich der Standort mit dem Server authentifizieren",
    "remoteNodeCredentialsDescription": "So wird sich der entfernte Node mit dem Server authentifizieren",
    "siteCredentialsSave": "Anmeldedaten speichern",
    "siteCredentialsSaveDescription": "Du kannst das nur einmal sehen. Stelle sicher, dass du es an einen sicheren Ort kopierst.",
@@ -2503,7 +2503,7 @@
    "deviceModel": "Gerätemodell",
    "serialNumber": "Seriennummer",
    "hostname": "Hostname",
-    "firstSeen": "Erster Blick",
+    "firstSeen": "Zuerst gesehen",
    "lastSeen": "Zuletzt gesehen",
    "biometricsEnabled": "Biometrie aktiviert",
    "diskEncrypted": "Festplatte verschlüsselt",
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -55,7 +55,7 @@
    "siteDescription": "Create and manage sites to enable connectivity to private networks",
    "sitesBannerTitle": "Connect Any Network",
    "sitesBannerDescription": "A site is a connection to a remote network that allows Pangolin to provide access to resources, whether public or private, to users anywhere. Install the site network connector (Newt) anywhere you can run a binary or container to establish the connection.",
-    "sitesBannerButtonText": "Install Site Connector",
+    "sitesBannerButtonText": "Install Site",
    "approvalsBannerTitle": "Approve or Deny Device Access",
    "approvalsBannerDescription": "Review and approve or deny device access requests from users. When device approvals are required, users must get admin approval before their devices can connect to your organization's resources.",
    "approvalsBannerButtonText": "Learn More",
@@ -79,8 +79,8 @@
    "siteConfirmCopy": "I have copied the config",
    "searchSitesProgress": "Search sites...",
    "siteAdd": "Add Site",
-    "siteInstallNewt": "Install Site",
-    "siteInstallNewtDescription": "Install the site connector for your system",
+    "siteInstallNewt": "Install Newt",
+    "siteInstallNewtDescription": "Get Newt running on your system",
    "WgConfiguration": "WireGuard Configuration",
    "WgConfigurationDescription": "Use the following configuration to connect to the network",
    "operatingSystem": "Operating System",
@@ -1545,8 +1545,8 @@
    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
    "selectSites": "Select sites",
    "sitesDescription": "The client will have connectivity to the selected sites",
-    "clientInstallOlm": "Install Machine Client",
-    "clientInstallOlmDescription": "Install the machine client for your system",
+    "clientInstallOlm": "Install Olm",
+    "clientInstallOlmDescription": "Get Olm running on your system",
    "clientOlmCredentials": "Credentials",
    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
    "olmEndpoint": "Endpoint",
@@ -2247,7 +2247,6 @@
    "actionLogsDescription": "View a history of actions performed in this organization",
    "accessLogsDescription": "View access auth requests for resources in this organization",
    "licenseRequiredToUse": "An Enterprise license is required to use this feature.",
-    "ossEnterpriseEditionRequired": "The <enterpriseEditionLink>Enterprise Edition</enterpriseEditionLink> is required to use this feature.",
    "certResolver": "Certificate Resolver",
    "certResolverDescription": "Select the certificate resolver to use for this resource.",
    "selectCertResolver": "Select Certificate Resolver",
--- a/package-lock.json
+++ b/package-lock.json
@@ -112,7 +112,7 @@
                "@dotenvx/dotenvx": "1.51.2",
                "@esbuild-plugins/tsconfig-paths": "0.1.2",
                "@tailwindcss/postcss": "4.1.18",
-                "@tanstack/react-query-devtools": "5.91.1",
+                "@tanstack/react-query-devtools": "5.91.3",
                "@types/better-sqlite3": "7.6.13",
                "@types/cookie-parser": "1.4.10",
                "@types/cors": "2.8.19",
@@ -135,12 +135,12 @@
                "@types/ws": "8.18.1",
                "@types/yargs": "17.0.35",
                "babel-plugin-react-compiler": "1.0.0",
-                "drizzle-kit": "0.31.8",
-                "esbuild": "0.27.2",
+                "drizzle-kit": "0.31.9",
+                "esbuild": "0.27.3",
                "esbuild-node-externals": "1.20.1",
                "postcss": "8.5.6",
-                "prettier": "3.8.0",
-                "react-email": "5.2.5",
+                "prettier": "3.8.1",
+                "react-email": "5.2.8",
                "tailwindcss": "4.1.18",
                "tsc-alias": "1.8.16",
                "tsx": "4.21.0",
@@ -1813,7 +1813,6 @@
            "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.26.10.tgz",
            "integrity": "sha512-vMqyb7XCDMPvJFFOaT9kxtiRh42GwlZEg1/uIgtZshS5a/8OaduUfCi7kynKgc3Tw/6Uo2D+db9qBttghhmxwQ==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@ampproject/remapping": "^2.2.0",
                "@babel/code-frame": "^7.26.2",
@@ -2689,9 +2688,9 @@
            }
        },
        "node_modules/@esbuild/aix-ppc64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.2.tgz",
-            "integrity": "sha512-GZMB+a0mOMZs4MpDbj8RJp4cw+w1WV5NYD6xzgvzUJ5Ek2jerwfO2eADyI6ExDSUED+1X8aMbegahsJi+8mgpw==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.3.tgz",
+            "integrity": "sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==",
            "cpu": [
                "ppc64"
            ],
@@ -2706,9 +2705,9 @@
            }
        },
        "node_modules/@esbuild/android-arm": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.27.2.tgz",
-            "integrity": "sha512-DVNI8jlPa7Ujbr1yjU2PfUSRtAUZPG9I1RwW4F4xFB1Imiu2on0ADiI/c3td+KmDtVKNbi+nffGDQMfcIMkwIA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.27.3.tgz",
+            "integrity": "sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==",
            "cpu": [
                "arm"
            ],
@@ -2723,9 +2722,9 @@
            }
        },
        "node_modules/@esbuild/android-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.27.2.tgz",
-            "integrity": "sha512-pvz8ZZ7ot/RBphf8fv60ljmaoydPU12VuXHImtAs0XhLLw+EXBi2BLe3OYSBslR4rryHvweW5gmkKFwTiFy6KA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.27.3.tgz",
+            "integrity": "sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==",
            "cpu": [
                "arm64"
            ],
@@ -2740,9 +2739,9 @@
            }
        },
        "node_modules/@esbuild/android-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.27.2.tgz",
-            "integrity": "sha512-z8Ank4Byh4TJJOh4wpz8g2vDy75zFL0TlZlkUkEwYXuPSgX8yzep596n6mT7905kA9uHZsf/o2OJZubl2l3M7A==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.27.3.tgz",
+            "integrity": "sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==",
            "cpu": [
                "x64"
            ],
@@ -2757,9 +2756,9 @@
            }
        },
        "node_modules/@esbuild/darwin-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.27.2.tgz",
-            "integrity": "sha512-davCD2Zc80nzDVRwXTcQP/28fiJbcOwvdolL0sOiOsbwBa72kegmVU0Wrh1MYrbuCL98Omp5dVhQFWRKR2ZAlg==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.27.3.tgz",
+            "integrity": "sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==",
            "cpu": [
                "arm64"
            ],
@@ -2774,9 +2773,9 @@
            }
        },
        "node_modules/@esbuild/darwin-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.27.2.tgz",
-            "integrity": "sha512-ZxtijOmlQCBWGwbVmwOF/UCzuGIbUkqB1faQRf5akQmxRJ1ujusWsb3CVfk/9iZKr2L5SMU5wPBi1UWbvL+VQA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.27.3.tgz",
+            "integrity": "sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==",
            "cpu": [
                "x64"
            ],
@@ -2791,9 +2790,9 @@
            }
        },
        "node_modules/@esbuild/freebsd-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.2.tgz",
-            "integrity": "sha512-lS/9CN+rgqQ9czogxlMcBMGd+l8Q3Nj1MFQwBZJyoEKI50XGxwuzznYdwcav6lpOGv5BqaZXqvBSiB/kJ5op+g==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.3.tgz",
+            "integrity": "sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==",
            "cpu": [
                "arm64"
            ],
@@ -2808,9 +2807,9 @@
            }
        },
        "node_modules/@esbuild/freebsd-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.27.2.tgz",
-            "integrity": "sha512-tAfqtNYb4YgPnJlEFu4c212HYjQWSO/w/h/lQaBK7RbwGIkBOuNKQI9tqWzx7Wtp7bTPaGC6MJvWI608P3wXYA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.27.3.tgz",
+            "integrity": "sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==",
            "cpu": [
                "x64"
            ],
@@ -2825,9 +2824,9 @@
            }
        },
        "node_modules/@esbuild/linux-arm": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.27.2.tgz",
-            "integrity": "sha512-vWfq4GaIMP9AIe4yj1ZUW18RDhx6EPQKjwe7n8BbIecFtCQG4CfHGaHuh7fdfq+y3LIA2vGS/o9ZBGVxIDi9hw==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.27.3.tgz",
+            "integrity": "sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==",
            "cpu": [
                "arm"
            ],
@@ -2842,9 +2841,9 @@
            }
        },
        "node_modules/@esbuild/linux-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.27.2.tgz",
-            "integrity": "sha512-hYxN8pr66NsCCiRFkHUAsxylNOcAQaxSSkHMMjcpx0si13t1LHFphxJZUiGwojB1a/Hd5OiPIqDdXONia6bhTw==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.27.3.tgz",
+            "integrity": "sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==",
            "cpu": [
                "arm64"
            ],
@@ -2859,9 +2858,9 @@
            }
        },
        "node_modules/@esbuild/linux-ia32": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.27.2.tgz",
-            "integrity": "sha512-MJt5BRRSScPDwG2hLelYhAAKh9imjHK5+NE/tvnRLbIqUWa+0E9N4WNMjmp/kXXPHZGqPLxggwVhz7QP8CTR8w==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.27.3.tgz",
+            "integrity": "sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==",
            "cpu": [
                "ia32"
            ],
@@ -2876,9 +2875,9 @@
            }
        },
        "node_modules/@esbuild/linux-loong64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.27.2.tgz",
-            "integrity": "sha512-lugyF1atnAT463aO6KPshVCJK5NgRnU4yb3FUumyVz+cGvZbontBgzeGFO1nF+dPueHD367a2ZXe1NtUkAjOtg==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.27.3.tgz",
+            "integrity": "sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==",
            "cpu": [
                "loong64"
            ],
@@ -2893,9 +2892,9 @@
            }
        },
        "node_modules/@esbuild/linux-mips64el": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.27.2.tgz",
-            "integrity": "sha512-nlP2I6ArEBewvJ2gjrrkESEZkB5mIoaTswuqNFRv/WYd+ATtUpe9Y09RnJvgvdag7he0OWgEZWhviS1OTOKixw==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.27.3.tgz",
+            "integrity": "sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==",
            "cpu": [
                "mips64el"
            ],
@@ -2910,9 +2909,9 @@
            }
        },
        "node_modules/@esbuild/linux-ppc64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.27.2.tgz",
-            "integrity": "sha512-C92gnpey7tUQONqg1n6dKVbx3vphKtTHJaNG2Ok9lGwbZil6DrfyecMsp9CrmXGQJmZ7iiVXvvZH6Ml5hL6XdQ==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.27.3.tgz",
+            "integrity": "sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==",
            "cpu": [
                "ppc64"
            ],
@@ -2927,9 +2926,9 @@
            }
        },
        "node_modules/@esbuild/linux-riscv64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.27.2.tgz",
-            "integrity": "sha512-B5BOmojNtUyN8AXlK0QJyvjEZkWwy/FKvakkTDCziX95AowLZKR6aCDhG7LeF7uMCXEJqwa8Bejz5LTPYm8AvA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.27.3.tgz",
+            "integrity": "sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==",
            "cpu": [
                "riscv64"
            ],
@@ -2944,9 +2943,9 @@
            }
        },
        "node_modules/@esbuild/linux-s390x": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.27.2.tgz",
-            "integrity": "sha512-p4bm9+wsPwup5Z8f4EpfN63qNagQ47Ua2znaqGH6bqLlmJ4bx97Y9JdqxgGZ6Y8xVTixUnEkoKSHcpRlDnNr5w==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.27.3.tgz",
+            "integrity": "sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==",
            "cpu": [
                "s390x"
            ],
@@ -2961,9 +2960,9 @@
            }
        },
        "node_modules/@esbuild/linux-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.27.2.tgz",
-            "integrity": "sha512-uwp2Tip5aPmH+NRUwTcfLb+W32WXjpFejTIOWZFw/v7/KnpCDKG66u4DLcurQpiYTiYwQ9B7KOeMJvLCu/OvbA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.27.3.tgz",
+            "integrity": "sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==",
            "cpu": [
                "x64"
            ],
@@ -2978,9 +2977,9 @@
            }
        },
        "node_modules/@esbuild/netbsd-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.2.tgz",
-            "integrity": "sha512-Kj6DiBlwXrPsCRDeRvGAUb/LNrBASrfqAIok+xB0LxK8CHqxZ037viF13ugfsIpePH93mX7xfJp97cyDuTZ3cw==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.3.tgz",
+            "integrity": "sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==",
            "cpu": [
                "arm64"
            ],
@@ -2995,9 +2994,9 @@
            }
        },
        "node_modules/@esbuild/netbsd-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.27.2.tgz",
-            "integrity": "sha512-HwGDZ0VLVBY3Y+Nw0JexZy9o/nUAWq9MlV7cahpaXKW6TOzfVno3y3/M8Ga8u8Yr7GldLOov27xiCnqRZf0tCA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.27.3.tgz",
+            "integrity": "sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==",
            "cpu": [
                "x64"
            ],
@@ -3012,9 +3011,9 @@
            }
        },
        "node_modules/@esbuild/openbsd-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.2.tgz",
-            "integrity": "sha512-DNIHH2BPQ5551A7oSHD0CKbwIA/Ox7+78/AWkbS5QoRzaqlev2uFayfSxq68EkonB+IKjiuxBFoV8ESJy8bOHA==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.3.tgz",
+            "integrity": "sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==",
            "cpu": [
                "arm64"
            ],
@@ -3029,9 +3028,9 @@
            }
        },
        "node_modules/@esbuild/openbsd-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.27.2.tgz",
-            "integrity": "sha512-/it7w9Nb7+0KFIzjalNJVR5bOzA9Vay+yIPLVHfIQYG/j+j9VTH84aNB8ExGKPU4AzfaEvN9/V4HV+F+vo8OEg==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.27.3.tgz",
+            "integrity": "sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==",
            "cpu": [
                "x64"
            ],
@@ -3046,9 +3045,9 @@
            }
        },
        "node_modules/@esbuild/openharmony-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.2.tgz",
-            "integrity": "sha512-LRBbCmiU51IXfeXk59csuX/aSaToeG7w48nMwA6049Y4J4+VbWALAuXcs+qcD04rHDuSCSRKdmY63sruDS5qag==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.3.tgz",
+            "integrity": "sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==",
            "cpu": [
                "arm64"
            ],
@@ -3063,9 +3062,9 @@
            }
        },
        "node_modules/@esbuild/sunos-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.27.2.tgz",
-            "integrity": "sha512-kMtx1yqJHTmqaqHPAzKCAkDaKsffmXkPHThSfRwZGyuqyIeBvf08KSsYXl+abf5HDAPMJIPnbBfXvP2ZC2TfHg==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.27.3.tgz",
+            "integrity": "sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==",
            "cpu": [
                "x64"
            ],
@@ -3080,9 +3079,9 @@
            }
        },
        "node_modules/@esbuild/win32-arm64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.27.2.tgz",
-            "integrity": "sha512-Yaf78O/B3Kkh+nKABUF++bvJv5Ijoy9AN1ww904rOXZFLWVc5OLOfL56W+C8F9xn5JQZa3UX6m+IktJnIb1Jjg==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.27.3.tgz",
+            "integrity": "sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==",
            "cpu": [
                "arm64"
            ],
@@ -3097,9 +3096,9 @@
            }
        },
        "node_modules/@esbuild/win32-ia32": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.27.2.tgz",
-            "integrity": "sha512-Iuws0kxo4yusk7sw70Xa2E2imZU5HoixzxfGCdxwBdhiDgt9vX9VUCBhqcwY7/uh//78A1hMkkROMJq9l27oLQ==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.27.3.tgz",
+            "integrity": "sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==",
            "cpu": [
                "ia32"
            ],
@@ -3114,9 +3113,9 @@
            }
        },
        "node_modules/@esbuild/win32-x64": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.27.2.tgz",
-            "integrity": "sha512-sRdU18mcKf7F+YgheI/zGf5alZatMUTKj/jNS6l744f9u3WFu4v7twcUI9vu4mknF4Y9aDlblIie0IM+5xxaqQ==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.27.3.tgz",
+            "integrity": "sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==",
            "cpu": [
                "x64"
            ],
@@ -4200,7 +4199,6 @@
            "integrity": "sha512-2I0gnIVPtfnMw9ee9h1dJG7tp81+8Ob3OJb3Mv37rx5L40/b0i7djjCVvGOVqc9AEIQyvyu1i6ypKdFw8R8gQw==",
            "dev": true,
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": "^14.21.3 || >=16"
            },
@@ -7890,7 +7888,6 @@
            "resolved": "https://registry.npmjs.org/@react-email/text/-/text-0.1.5.tgz",
            "integrity": "sha512-o5PNHFSE085VMXayxH+SJ1LSOtGsTv+RpNKnTiJDrJUwoBu77G3PlKOsZZQHCNyD28WsQpl9v2WcJLbQudqwPg==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=18.0.0"
            },
@@ -9322,9 +9319,9 @@
            }
        },
        "node_modules/@tanstack/query-devtools": {
-            "version": "5.91.1",
-            "resolved": "https://registry.npmjs.org/@tanstack/query-devtools/-/query-devtools-5.91.1.tgz",
-            "integrity": "sha512-l8bxjk6BMsCaVQH6NzQEE/bEgFy1hAs5qbgXl0xhzezlaQbPk6Mgz9BqEg2vTLPOHD8N4k+w/gdgCbEzecGyNg==",
+            "version": "5.93.0",
+            "resolved": "https://registry.npmjs.org/@tanstack/query-devtools/-/query-devtools-5.93.0.tgz",
+            "integrity": "sha512-+kpsx1NQnOFTZsw6HAFCW3HkKg0+2cepGtAWXjiiSOJJ1CtQpt72EE2nyZb+AjAbLRPoeRmPJ8MtQd8r8gsPdg==",
            "dev": true,
            "license": "MIT",
            "funding": {
@@ -9337,7 +9334,6 @@
            "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.90.12.tgz",
            "integrity": "sha512-graRZspg7EoEaw0a8faiUASCyJrqjKPdqJ9EwuDRUF9mEYJ1YPczI9H+/agJ0mOJkPCJDk0lsz5QTrLZ/jQ2rg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@tanstack/query-core": "5.90.12"
            },
@@ -9350,20 +9346,20 @@
            }
        },
        "node_modules/@tanstack/react-query-devtools": {
-            "version": "5.91.1",
-            "resolved": "https://registry.npmjs.org/@tanstack/react-query-devtools/-/react-query-devtools-5.91.1.tgz",
-            "integrity": "sha512-tRnJYwEbH0kAOuToy8Ew7bJw1lX3AjkkgSlf/vzb+NpnqmHPdWM+lA2DSdGQSLi1SU0PDRrrCI1vnZnci96CsQ==",
+            "version": "5.91.3",
+            "resolved": "https://registry.npmjs.org/@tanstack/react-query-devtools/-/react-query-devtools-5.91.3.tgz",
+            "integrity": "sha512-nlahjMtd/J1h7IzOOfqeyDh5LNfG0eULwlltPEonYy0QL+nqrBB+nyzJfULV+moL7sZyxc2sHdNJki+vLA9BSA==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
-                "@tanstack/query-devtools": "5.91.1"
+                "@tanstack/query-devtools": "5.93.0"
            },
            "funding": {
                "type": "github",
                "url": "https://github.com/sponsors/tannerlinsley"
            },
            "peerDependencies": {
-                "@tanstack/react-query": "^5.90.10",
+                "@tanstack/react-query": "^5.90.20",
                "react": "^18 || ^19"
            }
        },
@@ -9443,7 +9439,6 @@
            "integrity": "sha512-NMv9ASNARoKksWtsq/SHakpYAYnhBrQgGD8zkLYk/jaK8jUGn08CfEdTRgYhMypUQAfzSP8W6gNLe0q19/t4VA==",
            "devOptional": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@types/node": "*"
            }
@@ -9783,7 +9778,6 @@
            "integrity": "sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==",
            "dev": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@types/body-parser": "*",
                "@types/express-serve-static-core": "^5.0.0",
@@ -9877,7 +9871,6 @@
            "integrity": "sha512-WOhQTZ4G8xZ1tjJTvKOpyEVSGgOTvJAfDK3FNFgELyaTpzhdgHVHeqW8V+UJvzF5BT+/B54T/1S2K6gd9c7bbA==",
            "devOptional": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "undici-types": "~7.16.0"
            }
@@ -9906,7 +9899,6 @@
            "integrity": "sha512-RmhMd/wD+CF8Dfo+cVIy3RR5cl8CyfXQ0tGgW6XBL8L4LM/UTEbNXYRbLwU6w+CgrKBNbrQWt4FUtTfaU5jSYQ==",
            "devOptional": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@types/node": "*",
                "pg-protocol": "*",
@@ -9933,7 +9925,6 @@
            "integrity": "sha512-MWtvHrGZLFttgeEj28VXHxpmwYbor/ATPYbBfSFZEIRK0ecCFLl2Qo55z52Hss+UV9CRN7trSeq1zbgx7YDWWg==",
            "devOptional": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "csstype": "^3.2.2"
            }
@@ -9944,7 +9935,6 @@
            "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
            "devOptional": true,
            "license": "MIT",
-            "peer": true,
            "peerDependencies": {
                "@types/react": "^19.2.0"
            }
@@ -10020,7 +10010,8 @@
            "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
            "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
            "license": "MIT",
-            "optional": true
+            "optional": true,
+            "peer": true
        },
        "node_modules/@types/ws": {
            "version": "8.18.1",
@@ -10091,7 +10082,6 @@
            "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.53.1.tgz",
            "integrity": "sha512-nm3cvFN9SqZGXjmw5bZ6cGmvJSyJPn0wU9gHAZZHDnZl2wF9PhHv78Xf06E0MaNk4zLVHL8hb2/c32XvyJOLQg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@typescript-eslint/scope-manager": "8.53.1",
                "@typescript-eslint/types": "8.53.1",
@@ -10561,7 +10551,6 @@
            "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
            "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
            "license": "MIT",
-            "peer": true,
            "bin": {
                "acorn": "bin/acorn"
            },
@@ -10992,7 +10981,6 @@
            "integrity": "sha512-Ixm8tFfoKKIPYdCCKYTsqv+Fd4IJ0DQqMyEimo+pxUOMUR9cVPlwTrFt9Avu+3cb6Zp3mAzl+t1MrG2fxxKsxw==",
            "devOptional": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@babel/types": "^7.26.0"
            }
@@ -11048,7 +11036,6 @@
            "integrity": "sha512-Ba0KR+Fzxh2jDRhdg6TSH0SJGzb8C0aBY4hR8w8madIdIzzC6Y1+kx5qR6eS1Z+Gy20h6ZU28aeyg0z1VIrShQ==",
            "hasInstallScript": true,
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "bindings": "^1.5.0",
                "prebuild-install": "^7.1.1"
@@ -11174,7 +11161,6 @@
                }
            ],
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "baseline-browser-mapping": "^2.9.0",
                "caniuse-lite": "^1.0.30001759",
@@ -12117,7 +12103,6 @@
            "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz",
            "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
            "license": "ISC",
-            "peer": true,
            "engines": {
                "node": ">=12"
            }
@@ -12538,6 +12523,7 @@
            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
            "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
            "license": "(MPL-2.0 OR Apache-2.0)",
+            "peer": true,
            "optionalDependencies": {
                "@types/trusted-types": "^2.0.7"
            }
@@ -12586,9 +12572,9 @@
            }
        },
        "node_modules/drizzle-kit": {
-            "version": "0.31.8",
-            "resolved": "https://registry.npmjs.org/drizzle-kit/-/drizzle-kit-0.31.8.tgz",
-            "integrity": "sha512-O9EC/miwdnRDY10qRxM8P3Pg8hXe3LyU4ZipReKOgTwn4OqANmftj8XJz1UPUAS6NMHf0E2htjsbQujUTkncCg==",
+            "version": "0.31.9",
+            "resolved": "https://registry.npmjs.org/drizzle-kit/-/drizzle-kit-0.31.9.tgz",
+            "integrity": "sha512-GViD3IgsXn7trFyBUUHyTFBpH/FsHTxYJ66qdbVggxef4UBPHRYxQaRzYLTuekYnk9i5FIEL9pbBIwMqX/Uwrg==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
@@ -13637,13 +13623,12 @@
            }
        },
        "node_modules/esbuild": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.2.tgz",
-            "integrity": "sha512-HyNQImnsOC7X9PMNaCIeAm4ISCQXs5a5YasTXVliKv4uuBo1dKrG0A+uQS8M5eXjVMnLg3WgXaKvprHlFJQffw==",
+            "version": "0.27.3",
+            "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.3.tgz",
+            "integrity": "sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==",
            "dev": true,
            "hasInstallScript": true,
            "license": "MIT",
-            "peer": true,
            "bin": {
                "esbuild": "bin/esbuild"
            },
@@ -13651,32 +13636,32 @@
                "node": ">=18"
            },
            "optionalDependencies": {
-                "@esbuild/aix-ppc64": "0.27.2",
-                "@esbuild/android-arm": "0.27.2",
-                "@esbuild/android-arm64": "0.27.2",
-                "@esbuild/android-x64": "0.27.2",
-                "@esbuild/darwin-arm64": "0.27.2",
-                "@esbuild/darwin-x64": "0.27.2",
-                "@esbuild/freebsd-arm64": "0.27.2",
-                "@esbuild/freebsd-x64": "0.27.2",
-                "@esbuild/linux-arm": "0.27.2",
-                "@esbuild/linux-arm64": "0.27.2",
-                "@esbuild/linux-ia32": "0.27.2",
-                "@esbuild/linux-loong64": "0.27.2",
-                "@esbuild/linux-mips64el": "0.27.2",
-                "@esbuild/linux-ppc64": "0.27.2",
-                "@esbuild/linux-riscv64": "0.27.2",
-                "@esbuild/linux-s390x": "0.27.2",
-                "@esbuild/linux-x64": "0.27.2",
-                "@esbuild/netbsd-arm64": "0.27.2",
-                "@esbuild/netbsd-x64": "0.27.2",
-                "@esbuild/openbsd-arm64": "0.27.2",
-                "@esbuild/openbsd-x64": "0.27.2",
-                "@esbuild/openharmony-arm64": "0.27.2",
-                "@esbuild/sunos-x64": "0.27.2",
-                "@esbuild/win32-arm64": "0.27.2",
-                "@esbuild/win32-ia32": "0.27.2",
-                "@esbuild/win32-x64": "0.27.2"
+                "@esbuild/aix-ppc64": "0.27.3",
+                "@esbuild/android-arm": "0.27.3",
+                "@esbuild/android-arm64": "0.27.3",
+                "@esbuild/android-x64": "0.27.3",
+                "@esbuild/darwin-arm64": "0.27.3",
+                "@esbuild/darwin-x64": "0.27.3",
+                "@esbuild/freebsd-arm64": "0.27.3",
+                "@esbuild/freebsd-x64": "0.27.3",
+                "@esbuild/linux-arm": "0.27.3",
+                "@esbuild/linux-arm64": "0.27.3",
+                "@esbuild/linux-ia32": "0.27.3",
+                "@esbuild/linux-loong64": "0.27.3",
+                "@esbuild/linux-mips64el": "0.27.3",
+                "@esbuild/linux-ppc64": "0.27.3",
+                "@esbuild/linux-riscv64": "0.27.3",
+                "@esbuild/linux-s390x": "0.27.3",
+                "@esbuild/linux-x64": "0.27.3",
+                "@esbuild/netbsd-arm64": "0.27.3",
+                "@esbuild/netbsd-x64": "0.27.3",
+                "@esbuild/openbsd-arm64": "0.27.3",
+                "@esbuild/openbsd-x64": "0.27.3",
+                "@esbuild/openharmony-arm64": "0.27.3",
+                "@esbuild/sunos-x64": "0.27.3",
+                "@esbuild/win32-arm64": "0.27.3",
+                "@esbuild/win32-ia32": "0.27.3",
+                "@esbuild/win32-x64": "0.27.3"
            }
        },
        "node_modules/esbuild-node-externals": {
@@ -13740,7 +13725,6 @@
            "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.39.2.tgz",
            "integrity": "sha512-LEyamqS7W5HB3ujJyvi0HQK/dtVINZvd5mAAp9eT5S/ujByGjiZLCzPcHVzuXbpJDJF/cxwHlfceVUDZ2lnSTw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@eslint-community/eslint-utils": "^4.8.0",
                "@eslint-community/regexpp": "^4.12.1",
@@ -13918,7 +13902,6 @@
            "resolved": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.32.0.tgz",
            "integrity": "sha512-whOE1HFo/qJDyX4SnXzP4N6zOWn79WhnCUY/iDR0mPfQZO8wcYE4JClzI2oZrhBnnMUCBCHZhO6VQyoBU95mZA==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@rtsao/scc": "^1.1.0",
                "array-includes": "^3.1.9",
@@ -14223,7 +14206,6 @@
            "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
            "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "accepts": "^2.0.0",
                "body-parser": "^2.2.1",
@@ -16626,6 +16608,7 @@
            "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.55.1.tgz",
            "integrity": "sha512-jz4x+TJNFHwHtwuV9vA9rMujcZRb0CEilTEwG2rRSpe/A7Jdkuj8xPKttCgOh+v/lkHy7HsZ64oj+q3xoAFl9A==",
            "license": "MIT",
+            "peer": true,
            "dependencies": {
                "dompurify": "3.2.7",
                "marked": "14.0.0"
@@ -16636,6 +16619,7 @@
            "resolved": "https://registry.npmjs.org/marked/-/marked-14.0.0.tgz",
            "integrity": "sha512-uIj4+faQ+MgHgwUW1l2PsPglZLOLOT1uErt06dAPtx2kjteLAkbsd/0FiYg/MGS+i7ZKLb7w2WClxHkzOOuryQ==",
            "license": "MIT",
+            "peer": true,
            "bin": {
                "marked": "bin/marked.js"
            },
@@ -16722,7 +16706,6 @@
            "resolved": "https://registry.npmjs.org/next/-/next-15.5.9.tgz",
            "integrity": "sha512-agNLK89seZEtC5zUHwtut0+tNrc0Xw4FT/Dg+B/VLEo9pAcS9rtTKpek3V6kVcVwsB2YlqMaHdfZL4eLEVYuCg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@next/env": "15.5.9",
                "@swc/helpers": "0.5.15",
@@ -17643,7 +17626,6 @@
            "resolved": "https://registry.npmjs.org/pg/-/pg-8.17.1.tgz",
            "integrity": "sha512-EIR+jXdYNSMOrpRp7g6WgQr7SaZNZfS7IzZIO0oTNEeibq956JxeD15t3Jk3zZH0KH8DmOIx38qJfQenoE8bXQ==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "pg-connection-string": "^2.10.0",
                "pg-pool": "^3.11.0",
@@ -17902,9 +17884,9 @@
            }
        },
        "node_modules/prettier": {
-            "version": "3.8.0",
-            "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.8.0.tgz",
-            "integrity": "sha512-yEPsovQfpxYfgWNhCfECjG5AQaO+K3dp6XERmOepyPDVqcJm+bjyCVO3pmU+nAPe0N5dDvekfGezt/EIiRe1TA==",
+            "version": "3.8.1",
+            "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.8.1.tgz",
+            "integrity": "sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==",
            "license": "MIT",
            "bin": {
                "prettier": "bin/prettier.cjs"
@@ -18129,7 +18111,6 @@
            "resolved": "https://registry.npmjs.org/react/-/react-19.2.3.tgz",
            "integrity": "sha512-Ku/hhYbVjOQnXDZFv2+RibmLFGwFdeeKHFcOTlrt7xplBnya5OGn/hIRDsqDiSUcfORsDC7MPxwork8jBwsIWA==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=0.10.0"
            }
@@ -18160,7 +18141,6 @@
            "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.3.tgz",
            "integrity": "sha512-yELu4WmLPw5Mr/lmeEpox5rw3RETacE++JgHqQzd2dg+YbJuat3jH4ingc+WPZhxaoFzdv9y33G+F7Nl5O0GBg==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "scheduler": "^0.27.0"
            },
@@ -18185,9 +18165,9 @@
            }
        },
        "node_modules/react-email": {
-            "version": "5.2.5",
-            "resolved": "https://registry.npmjs.org/react-email/-/react-email-5.2.5.tgz",
-            "integrity": "sha512-YaCp5n/0czviN4lFndsYongiI0IJOMFtFoRVIPJc9+WPJejJEvzJO94r31p3Cz9swDuV0RhEhH1W0lJFAXntHA==",
+            "version": "5.2.8",
+            "resolved": "https://registry.npmjs.org/react-email/-/react-email-5.2.8.tgz",
+            "integrity": "sha512-noPcnpl78vsyBnhiKCzxK9Mdsv7ncAYI80osS5kbMgaKH2IgPtPab5BzLJX6INXuiNk5ju+9YRnCjPoPTOHZjA==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
@@ -18977,7 +18957,6 @@
            "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.71.1.tgz",
            "integrity": "sha512-9SUJKCGKo8HUSsCO+y0CtqkqI5nNuaDqTxyqPsZPqIwudpj4rCrAz/jZV+jn57bx5gtZKOh3neQu94DXMc+w5w==",
            "license": "MIT",
-            "peer": true,
            "engines": {
                "node": ">=18.0.0"
            },
@@ -20489,8 +20468,7 @@
            "version": "4.1.18",
            "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.1.18.tgz",
            "integrity": "sha512-4+Z+0yiYyEtUVCScyfHCxOYP06L5Ne+JiHhY2IjR2KWMIWhJOYZKLSGZaP5HkZ8+bY0cxfzwDE5uOmzFXyIwxw==",
-            "license": "MIT",
-            "peer": true
+            "license": "MIT"
        },
        "node_modules/tapable": {
            "version": "2.3.0",
@@ -20949,7 +20927,6 @@
            "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
            "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
            "license": "Apache-2.0",
-            "peer": true,
            "bin": {
                "tsc": "bin/tsc",
                "tsserver": "bin/tsserver"
@@ -21349,7 +21326,6 @@
            "resolved": "https://registry.npmjs.org/winston/-/winston-3.19.0.tgz",
            "integrity": "sha512-LZNJgPzfKR+/J3cHkxcpHKpKKvGfDZVPS4hfJCc4cCG0CgYzvlD6yE/S3CIL/Yt91ak327YCpiF/0MyeZHEHKA==",
            "license": "MIT",
-            "peer": true,
            "dependencies": {
                "@colors/colors": "^1.6.0",
                "@dabh/diagnostics": "^2.0.8",
@@ -21648,7 +21624,6 @@
            "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.5.tgz",
            "integrity": "sha512-k7Nwx6vuWx1IJ9Bjuf4Zt1PEllcwe7cls3VNzm4CQ1/hgtFUK2bRNG3rvnpPUhFjmqJKAKtjV576KnUkHocg/g==",
            "license": "MIT",
-            "peer": true,
            "funding": {
                "url": "https://github.com/sponsors/colinhacks"
            }
--- a/package.json
+++ b/package.json
@@ -136,7 +136,7 @@
        "@dotenvx/dotenvx": "1.51.2",
        "@esbuild-plugins/tsconfig-paths": "0.1.2",
        "@tailwindcss/postcss": "4.1.18",
-        "@tanstack/react-query-devtools": "5.91.1",
+        "@tanstack/react-query-devtools": "5.91.3",
        "@types/better-sqlite3": "7.6.13",
        "@types/cookie-parser": "1.4.10",
        "@types/cors": "2.8.19",
@@ -159,12 +159,12 @@
        "@types/yargs": "17.0.35",
        "@types/js-yaml": "4.0.9",
        "babel-plugin-react-compiler": "1.0.0",
-        "drizzle-kit": "0.31.8",
-        "esbuild": "0.27.2",
+        "drizzle-kit": "0.31.9",
+        "esbuild": "0.27.3",
        "esbuild-node-externals": "1.20.1",
        "postcss": "8.5.6",
-        "prettier": "3.8.0",
-        "react-email": "5.2.5",
+        "prettier": "3.8.1",
+        "react-email": "5.2.8",
        "tailwindcss": "4.1.18",
        "tsc-alias": "1.8.16",
        "tsx": "4.21.0",
--- a/server/routers/badger/logRequestAudit.ts
+++ b/server/routers/badger/logRequestAudit.ts
@@ -1,6 +1,6 @@
 import { db, orgs, requestAuditLog } from "@server/db";
 import logger from "@server/logger";
-import { and, eq, lt, sql } from "drizzle-orm";
+import { and, eq, lt } from "drizzle-orm";
 import cache from "@server/lib/cache";
 import { calculateCutoffTimestamp } from "@server/lib/cleanupLogs";
 import { stripPortFromHost } from "@server/lib/ip";
@@ -67,27 +67,17 @@ async function flushAuditLogs() {
    const logsToWrite = auditLogBuffer.splice(0, auditLogBuffer.length);

    try {
-        // Use a transaction to ensure all inserts succeed or fail together
-        // This prevents index corruption from partial writes
-        await db.transaction(async (tx) => {
-            // Batch insert logs in groups of 25 to avoid overwhelming the database
-            const BATCH_DB_SIZE = 25;
-            for (let i = 0; i < logsToWrite.length; i += BATCH_DB_SIZE) {
-                const batch = logsToWrite.slice(i, i + BATCH_DB_SIZE);
-                await tx.insert(requestAuditLog).values(batch);
-            }
-        });
+        // Batch insert logs in groups of 25 to avoid overwhelming the database
+        const BATCH_DB_SIZE = 25;
+        for (let i = 0; i < logsToWrite.length; i += BATCH_DB_SIZE) {
+            const batch = logsToWrite.slice(i, i + BATCH_DB_SIZE);
+            await db.insert(requestAuditLog).values(batch);
+        }
        logger.debug(`Flushed ${logsToWrite.length} audit logs to database`);
    } catch (error) {
        logger.error("Error flushing audit logs:", error);
-        // On transaction error, put logs back at the front of the buffer to retry
-        // but only if buffer isn't too large
-        if (auditLogBuffer.length < MAX_BUFFER_SIZE - logsToWrite.length) {
-            auditLogBuffer.unshift(...logsToWrite);
-            logger.info(`Re-queued ${logsToWrite.length} audit logs for retry`);
-        } else {
-            logger.error(`Buffer full, dropped ${logsToWrite.length} audit logs`);
-        }
+        // On error, we lose these logs - consider a fallback strategy if needed
+        // (e.g., write to file, or put back in buffer with retry limit)
    } finally {
        isFlushInProgress = false;
        // If buffer filled up while we were flushing, flush again
--- a/server/routers/client/getClient.ts
+++ b/server/routers/client/getClient.ts
@@ -56,29 +56,19 @@ async function query(clientId?: number, niceId?: string, orgId?: string) {
 }

 type PostureData = {
-    biometricsEnabled?: boolean | null | "-";
-    diskEncrypted?: boolean | null | "-";
-    firewallEnabled?: boolean | null | "-";
-    autoUpdatesEnabled?: boolean | null | "-";
-    tpmAvailable?: boolean | null | "-";
-    windowsAntivirusEnabled?: boolean | null | "-";
-    macosSipEnabled?: boolean | null | "-";
-    macosGatekeeperEnabled?: boolean | null | "-";
-    macosFirewallStealthMode?: boolean | null | "-";
-    linuxAppArmorEnabled?: boolean | null | "-";
-    linuxSELinuxEnabled?: boolean | null | "-";
+    biometricsEnabled?: boolean | null;
+    diskEncrypted?: boolean | null;
+    firewallEnabled?: boolean | null;
+    autoUpdatesEnabled?: boolean | null;
+    tpmAvailable?: boolean | null;
+    windowsAntivirusEnabled?: boolean | null;
+    macosSipEnabled?: boolean | null;
+    macosGatekeeperEnabled?: boolean | null;
+    macosFirewallStealthMode?: boolean | null;
+    linuxAppArmorEnabled?: boolean | null;
+    linuxSELinuxEnabled?: boolean | null;
 };

-function maskPostureDataWithPlaceholder(posture: PostureData): PostureData {
-    const masked: PostureData = {};
-    for (const key of Object.keys(posture) as (keyof PostureData)[]) {
-        if (posture[key] !== undefined && posture[key] !== null) {
-            (masked as Record<keyof PostureData, "-">)[key] = "-";
-        }
-    }
-    return masked;
-}
-
 function getPlatformPostureData(
    platform: string | null | undefined,
    fingerprint: typeof currentFingerprint.$inferSelect | null
@@ -294,11 +284,9 @@ export async function getClient(
            );
        }

-        const isUserDevice = client.user !== null && client.user !== undefined;
-
        // Replace name with device name if OLM exists
        let clientName = client.clients.name;
-        if (client.olms && isUserDevice) {
+        if (client.olms) {
            const model = client.currentFingerprint?.deviceModel || null;
            clientName = getUserDeviceName(model, client.clients.name);
        }
@@ -306,34 +294,32 @@ export async function getClient(
        // Build fingerprint data if available
        const fingerprintData = client.currentFingerprint
            ? {
-                username: client.currentFingerprint.username || null,
-                hostname: client.currentFingerprint.hostname || null,
-                platform: client.currentFingerprint.platform || null,
-                osVersion: client.currentFingerprint.osVersion || null,
-                kernelVersion:
-                    client.currentFingerprint.kernelVersion || null,
-                arch: client.currentFingerprint.arch || null,
-                deviceModel: client.currentFingerprint.deviceModel || null,
-                serialNumber: client.currentFingerprint.serialNumber || null,
-                firstSeen: client.currentFingerprint.firstSeen || null,
-                lastSeen: client.currentFingerprint.lastSeen || null
-            }
+                  username: client.currentFingerprint.username || null,
+                  hostname: client.currentFingerprint.hostname || null,
+                  platform: client.currentFingerprint.platform || null,
+                  osVersion: client.currentFingerprint.osVersion || null,
+                  kernelVersion:
+                      client.currentFingerprint.kernelVersion || null,
+                  arch: client.currentFingerprint.arch || null,
+                  deviceModel: client.currentFingerprint.deviceModel || null,
+                  serialNumber: client.currentFingerprint.serialNumber || null,
+                  firstSeen: client.currentFingerprint.firstSeen || null,
+                  lastSeen: client.currentFingerprint.lastSeen || null
+              }
            : null;

        // Build posture data if available (platform-specific)
-        // Licensed: real values; not licensed: same keys but values set to "-"
-        const rawPosture = getPlatformPostureData(
-            client.currentFingerprint?.platform || null,
-            client.currentFingerprint
-        );
+        // Only return posture data if org is licensed/subscribed
+        let postureData: PostureData | null = null;
        const isOrgLicensed = await isLicensedOrSubscribed(
            client.clients.orgId
        );
-        const postureData: PostureData | null = rawPosture
-            ? isOrgLicensed
-                ? rawPosture
-                : maskPostureDataWithPlaceholder(rawPosture)
-            : null;
+        if (isOrgLicensed) {
+            postureData = getPlatformPostureData(
+                client.currentFingerprint?.platform || null,
+                client.currentFingerprint
+            );
+        }

        const data: GetClientResponse = {
            ...client.clients,
--- a/server/routers/client/listClients.ts
+++ b/server/routers/client/listClients.ts
@@ -320,10 +320,7 @@ export async function listClients(
        // Merge clients with their site associations and replace name with device name
        const clientsWithSites = clientsList.map((client) => {
            const model = client.deviceModel || null;
-            let newName = client.name;
-            if (filter === "user") {
-                newName = getUserDeviceName(model, client.name);
-            }
+            const newName = getUserDeviceName(model, client.name);
            return {
                ...client,
                name: newName,
--- a/server/routers/olm/handleOlmPingMessage.ts
+++ b/server/routers/olm/handleOlmPingMessage.ts
@@ -117,8 +117,6 @@ export const handleOlmPingMessage: MessageHandler = async (context) => {
        return;
    }

-    const isUserDevice = olm.userId !== null && olm.userId !== undefined;
-
    try {
        // get the client
        const [client] = await db
@@ -221,9 +219,7 @@ export const handleOlmPingMessage: MessageHandler = async (context) => {
        logger.error("Error handling ping message", { error });
    }

-    if (isUserDevice) {
-        await handleFingerprintInsertion(olm, fingerprint, postures);
-    }
+    await handleFingerprintInsertion(olm, fingerprint, postures);

    return {
        message: {
--- a/server/routers/olm/handleOlmRegisterMessage.ts
+++ b/server/routers/olm/handleOlmRegisterMessage.ts
@@ -53,11 +53,7 @@ export const handleOlmRegisterMessage: MessageHandler = async (context) => {
        postures
    });

-    const isUserDevice = olm.userId !== null && olm.userId !== undefined;
-
-    if (isUserDevice) {
-        await handleFingerprintInsertion(olm, fingerprint, postures);
-    }
+    await handleFingerprintInsertion(olm, fingerprint, postures);

    if (
        (olmVersion && olm.version !== olmVersion) ||
--- a/server/routers/site/createSite.ts
+++ b/server/routers/site/createSite.ts
@@ -17,7 +17,6 @@ import { hashPassword } from "@server/auth/password";
 import { isValidIP } from "@server/lib/validators";
 import { isIpInCidr } from "@server/lib/ip";
 import { verifyExitNodeOrgAccess } from "#dynamic/lib/exitNodes";
-import { build } from "@server/build";

 const createSiteParamsSchema = z.strictObject({
    orgId: z.string()
@@ -259,7 +258,19 @@ export async function createSite(
        let newSite: Site;

        await db.transaction(async (trx) => {
-            if (type == "wireguard" || type == "newt") {
+            if (type == "newt") {
+                [newSite] = await trx
+                    .insert(sites)
+                    .values({
+                        orgId,
+                        name,
+                        niceId,
+                        address: updatedAddress || null,
+                        type,
+                        dockerSocketEnabled: true
+                    })
+                    .returning();
+            } else if (type == "wireguard") {
                // we are creating a site with an exit node (tunneled)
                if (!subnet) {
                    return next(
@@ -311,11 +322,9 @@ export async function createSite(
                        exitNodeId,
                        name,
                        niceId,
-                        address: updatedAddress || null,
                        subnet,
                        type,
-                        dockerSocketEnabled: type == "newt",
-                        ...(pubKey && type == "wireguard" && { pubKey })
+                        pubKey: pubKey || null
                    })
                    .returning();
            } else if (type == "local") {
--- a/src/app/[orgId]/settings/(private)/idp/create/page.tsx
+++ b/src/app/[orgId]/settings/(private)/idp/create/page.tsx
@@ -27,7 +27,6 @@ import {
 import { Input } from "@app/components/ui/input";
 import { useEnvContext } from "@app/hooks/useEnvContext";
 import { useLicenseStatusContext } from "@app/hooks/useLicenseStatusContext";
-import { usePaidStatus } from "@app/hooks/usePaidStatus";
 import { toast } from "@app/hooks/useToast";
 import { createApiClient, formatAxiosError } from "@app/lib/api";
 import { zodResolver } from "@hookform/resolvers/zod";
@@ -52,7 +51,6 @@ export default function Page() {
    >("role");
    const { isUnlocked } = useLicenseStatusContext();
    const t = useTranslations();
-    const { isPaidUser } = usePaidStatus();

    const params = useParams();

@@ -808,7 +806,7 @@ export default function Page() {
                </Button>
                <Button
                    type="submit"
-                    disabled={createLoading || !isPaidUser}
+                    disabled={createLoading}
                    loading={createLoading}
                    onClick={() => {
                        // log any issues with the form
--- a/src/app/[orgId]/settings/(private)/idp/layout.tsx
+++ b/src/app/[orgId]/settings/(private)/idp/layout.tsx
@@ -1,8 +1,18 @@
+import { pullEnv } from "@app/lib/pullEnv";
+import { build } from "@server/build";
+import { redirect } from "next/navigation";
+
 interface LayoutProps {
    children: React.ReactNode;
    params: Promise<{}>;
 }

 export default async function Layout(props: LayoutProps) {
+    const env = pullEnv();
+
+    if (build !== "saas" && !env.flags.useOrgOnlyIdp) {
+        redirect("/");
+    }
+
    return props.children;
 }
--- a/src/app/[orgId]/settings/(private)/remote-exit-nodes/[remoteExitNodeId]/credentials/page.tsx
+++ b/src/app/[orgId]/settings/(private)/remote-exit-nodes/[remoteExitNodeId]/credentials/page.tsx
@@ -195,27 +195,29 @@ export default function CredentialsPage() {
                            </Alert>
                        )}
                    </SettingsSectionBody>
-                    <SettingsSectionFooter>
-                        <Button
-                            variant="outline"
-                            onClick={() => {
-                                setShouldDisconnect(false);
-                                setModalOpen(true);
-                            }}
-                            disabled={isSecurityFeatureDisabled()}
-                        >
-                            {t("regenerateCredentialsButton")}
-                        </Button>
-                        <Button
-                            onClick={() => {
-                                setShouldDisconnect(true);
-                                setModalOpen(true);
-                            }}
-                            disabled={isSecurityFeatureDisabled()}
-                        >
-                            {t("remoteExitNodeRegenerateAndDisconnect")}
-                        </Button>
-                    </SettingsSectionFooter>
+                    {build !== "oss" && (
+                        <SettingsSectionFooter>
+                            <Button
+                                variant="outline"
+                                onClick={() => {
+                                    setShouldDisconnect(false);
+                                    setModalOpen(true);
+                                }}
+                                disabled={isSecurityFeatureDisabled()}
+                            >
+                                {t("regenerateCredentialsButton")}
+                            </Button>
+                            <Button
+                                onClick={() => {
+                                    setShouldDisconnect(true);
+                                    setModalOpen(true);
+                                }}
+                                disabled={isSecurityFeatureDisabled()}
+                            >
+                                {t("remoteExitNodeRegenerateAndDisconnect")}
+                            </Button>
+                        </SettingsSectionFooter>
+                    )}
                </SettingsSection>
            </SettingsContainer>

--- a/src/app/[orgId]/settings/clients/machine/[niceId]/credentials/page.tsx
+++ b/src/app/[orgId]/settings/clients/machine/[niceId]/credentials/page.tsx
@@ -61,9 +61,7 @@ export default function CredentialsPage() {
        const isEnterpriseNotLicensed = build === "enterprise" && !isUnlocked();
        const isSaasNotSubscribed =
            build === "saas" && !subscription?.isSubscribed();
-        return (
-            isEnterpriseNotLicensed || isSaasNotSubscribed || build === "oss"
-        );
+        return isEnterpriseNotLicensed || isSaasNotSubscribed;
    };

    const handleConfirmRegenerate = async () => {
@@ -183,27 +181,29 @@ export default function CredentialsPage() {
                            </Alert>
                        )}
                    </SettingsSectionBody>
-                    <SettingsSectionFooter>
-                        <Button
-                            variant="outline"
-                            onClick={() => {
-                                setShouldDisconnect(false);
-                                setModalOpen(true);
-                            }}
-                            disabled={isSecurityFeatureDisabled()}
-                        >
-                            {t("regenerateCredentialsButton")}
-                        </Button>
-                        <Button
-                            onClick={() => {
-                                setShouldDisconnect(true);
-                                setModalOpen(true);
-                            }}
-                            disabled={isSecurityFeatureDisabled()}
-                        >
-                            {t("clientRegenerateAndDisconnect")}
-                        </Button>
-                    </SettingsSectionFooter>
+                    {build !== "oss" && (
+                        <SettingsSectionFooter>
+                            <Button
+                                variant="outline"
+                                onClick={() => {
+                                    setShouldDisconnect(false);
+                                    setModalOpen(true);
+                                }}
+                                disabled={isSecurityFeatureDisabled()}
+                            >
+                                {t("regenerateCredentialsButton")}
+                            </Button>
+                            <Button
+                                onClick={() => {
+                                    setShouldDisconnect(true);
+                                    setModalOpen(true);
+                                }}
+                                disabled={isSecurityFeatureDisabled()}
+                            >
+                                {t("clientRegenerateAndDisconnect")}
+                            </Button>
+                        </SettingsSectionFooter>
+                    )}
                </SettingsSection>

                <OlmInstallCommands
--- a/src/app/[orgId]/settings/clients/user/[niceId]/general/page.tsx
+++ b/src/app/[orgId]/settings/clients/user/[niceId]/general/page.tsx
@@ -28,15 +28,7 @@ import { createApiClient, formatAxiosError } from "@app/lib/api";
 import { toast } from "@app/hooks/useToast";
 import { useRouter } from "next/navigation";
 import { useState, useEffect, useTransition } from "react";
-import {
-    Check,
-    Ban,
-    Shield,
-    ShieldOff,
-    Clock,
-    CheckCircle2,
-    XCircle
-} from "lucide-react";
+import { Check, Ban, Shield, ShieldOff, Clock, CheckCircle2, XCircle } from "lucide-react";
 import { useParams } from "next/navigation";
 import { FaApple, FaWindows, FaLinux } from "react-icons/fa";
 import { SiAndroid } from "react-icons/si";
@@ -119,13 +111,13 @@ function getPlatformFieldConfig(
            osVersion: { show: true, labelKey: "iosVersion" },
            kernelVersion: { show: false, labelKey: "kernelVersion" },
            arch: { show: true, labelKey: "architecture" },
-            deviceModel: { show: true, labelKey: "deviceModel" }
+            deviceModel: { show: true, labelKey: "deviceModel" },
        },
        android: {
            osVersion: { show: true, labelKey: "androidVersion" },
            kernelVersion: { show: true, labelKey: "kernelVersion" },
            arch: { show: true, labelKey: "architecture" },
-            deviceModel: { show: true, labelKey: "deviceModel" }
+            deviceModel: { show: true, labelKey: "deviceModel" },
        },
        unknown: {
            osVersion: { show: true, labelKey: "osVersion" },
@@ -141,6 +133,7 @@ function getPlatformFieldConfig(
    return configs[normalizedPlatform] || configs.unknown;
 }

+
 export default function GeneralPage() {
    const { client, updateClient } = useClientContext();
    const { isPaidUser } = usePaidStatus();
@@ -430,8 +423,7 @@ export default function GeneralPage() {
                                                        {t(
                                                            fieldConfig
                                                                .osVersion
-                                                                ?.labelKey ||
-                                                                "osVersion"
+                                                                ?.labelKey || "osVersion"
                                                        )}
                                                    </InfoSectionTitle>
                                                    <InfoSectionContent>
@@ -567,231 +559,217 @@ export default function GeneralPage() {
                </SettingsSection>
            )}

-            <SettingsSection>
-                <SettingsSectionHeader>
-                    <SettingsSectionTitle>
-                        {t("deviceSecurity")}
-                    </SettingsSectionTitle>
-                    <SettingsSectionDescription>
-                        {t("deviceSecurityDescription")}
-                    </SettingsSectionDescription>
-                </SettingsSectionHeader>
+            {/* Device Security Section */}
+            {build !== "oss" && (
+                <SettingsSection>
+                    <SettingsSectionHeader>
+                        <SettingsSectionTitle>
+                            {t("deviceSecurity")}
+                        </SettingsSectionTitle>
+                        <SettingsSectionDescription>
+                            {t("deviceSecurityDescription")}
+                        </SettingsSectionDescription>
+                    </SettingsSectionHeader>

-                <SettingsSectionBody>
-                    <PaidFeaturesAlert />
-                    {client.posture &&
-                    Object.keys(client.posture).length > 0 ? (
-                        <>
-                            <InfoSections cols={3}>
-                                {client.posture.biometricsEnabled !== null &&
-                                    client.posture.biometricsEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("biometricsEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .biometricsEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                    <SettingsSectionBody>
+                        {client.posture && Object.keys(client.posture).length > 0 ? (
+                            <>
+                                {!isPaidUser && <PaidFeaturesAlert />}
+                                <InfoSections cols={3}>
+                                    {client.posture.biometricsEnabled !== null &&
+                                        client.posture.biometricsEnabled !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("biometricsEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture.biometricsEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.diskEncrypted !== null &&
-                                    client.posture.diskEncrypted !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("diskEncrypted")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .diskEncrypted
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.diskEncrypted !== null &&
+                                        client.posture.diskEncrypted !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("diskEncrypted")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture.diskEncrypted
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.firewallEnabled !== null &&
-                                    client.posture.firewallEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("firewallEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .firewallEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.firewallEnabled !== null &&
+                                        client.posture.firewallEnabled !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("firewallEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture.firewallEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.autoUpdatesEnabled !== null &&
-                                    client.posture.autoUpdatesEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("autoUpdatesEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .autoUpdatesEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.autoUpdatesEnabled !== null &&
+                                        client.posture.autoUpdatesEnabled !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("autoUpdatesEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture.autoUpdatesEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.tpmAvailable !== null &&
-                                    client.posture.tpmAvailable !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("tpmAvailable")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .tpmAvailable
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.tpmAvailable !== null &&
+                                        client.posture.tpmAvailable !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("tpmAvailable")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture.tpmAvailable
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.windowsAntivirusEnabled !==
-                                    null &&
-                                    client.posture.windowsAntivirusEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("windowsAntivirusEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .windowsAntivirusEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.windowsAntivirusEnabled !== null &&
+                                        client.posture.windowsAntivirusEnabled !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("windowsAntivirusEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture
+                                                                  .windowsAntivirusEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.macosSipEnabled !== null &&
-                                    client.posture.macosSipEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("macosSipEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .macosSipEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.macosSipEnabled !== null &&
+                                        client.posture.macosSipEnabled !== undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("macosSipEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture.macosSipEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.macosGatekeeperEnabled !==
-                                    null &&
-                                    client.posture.macosGatekeeperEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("macosGatekeeperEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .macosGatekeeperEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.macosGatekeeperEnabled !== null &&
+                                        client.posture.macosGatekeeperEnabled !==
+                                            undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("macosGatekeeperEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture
+                                                                  .macosGatekeeperEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.macosFirewallStealthMode !==
-                                    null &&
-                                    client.posture.macosFirewallStealthMode !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("macosFirewallStealthMode")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .macosFirewallStealthMode
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.macosFirewallStealthMode !== null &&
+                                        client.posture.macosFirewallStealthMode !==
+                                            undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("macosFirewallStealthMode")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture
+                                                                  .macosFirewallStealthMode
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.linuxAppArmorEnabled !== null &&
-                                    client.posture.linuxAppArmorEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("linuxAppArmorEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .linuxAppArmorEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
+                                    {client.posture.linuxAppArmorEnabled !== null &&
+                                        client.posture.linuxAppArmorEnabled !==
+                                            undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("linuxAppArmorEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture
+                                                                  .linuxAppArmorEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}

-                                {client.posture.linuxSELinuxEnabled !== null &&
-                                    client.posture.linuxSELinuxEnabled !==
-                                        undefined && (
-                                        <InfoSection>
-                                            <InfoSectionTitle>
-                                                {t("linuxSELinuxEnabled")}
-                                            </InfoSectionTitle>
-                                            <InfoSectionContent>
-                                                {isPaidUser
-                                                    ? formatPostureValue(
-                                                          client.posture
-                                                              .linuxSELinuxEnabled
-                                                      )
-                                                    : "-"}
-                                            </InfoSectionContent>
-                                        </InfoSection>
-                                    )}
-                            </InfoSections>
-                        </>
-                    ) : (
-                        <div className="text-muted-foreground">
-                            {t("noData")}
-                        </div>
-                    )}
-                </SettingsSectionBody>
-            </SettingsSection>
+                                    {client.posture.linuxSELinuxEnabled !== null &&
+                                        client.posture.linuxSELinuxEnabled !==
+                                            undefined && (
+                                            <InfoSection>
+                                                <InfoSectionTitle>
+                                                    {t("linuxSELinuxEnabled")}
+                                                </InfoSectionTitle>
+                                                <InfoSectionContent>
+                                                    {isPaidUser
+                                                        ? formatPostureValue(
+                                                              client.posture
+                                                                  .linuxSELinuxEnabled
+                                                          )
+                                                        : "-"}
+                                                </InfoSectionContent>
+                                            </InfoSection>
+                                        )}
+                                </InfoSections>
+                            </>
+                        ) : (
+                            <div className="text-muted-foreground">
+                                {t("noData")}
+                            </div>
+                        )}
+                    </SettingsSectionBody>
+                </SettingsSection>
+            )}
        </SettingsContainer>
    );
 }
--- a/src/app/[orgId]/settings/general/auth-page/page.tsx
+++ b/src/app/[orgId]/settings/general/auth-page/page.tsx
@@ -20,6 +20,11 @@ export interface AuthPageProps {
 export default async function AuthPage(props: AuthPageProps) {
    const orgId = (await props.params).orgId;

+    // custom auth branding is only available in enterprise and saas
+    if (build === "oss") {
+        redirect(`/${orgId}/settings/general/`);
+    }
+
    let subscriptionStatus: GetOrgTierResponse | null = null;
    try {
        const subRes = await getCachedSubscription(orgId);
--- a/src/app/[orgId]/settings/general/layout.tsx
+++ b/src/app/[orgId]/settings/general/layout.tsx
@@ -55,12 +55,14 @@ export default async function GeneralSettingsPage({
        {
            title: t("security"),
            href: `/{orgId}/settings/general/security`
-        },
-        {
-            title: t("authPage"),
-            href: `/{orgId}/settings/general/auth-page`
        }
    ];
+    if (build !== "oss") {
+        navItems.push({
+            title: t("authPage"),
+            href: `/{orgId}/settings/general/auth-page`
+        });
+    }

    return (
        <>
--- a/src/app/[orgId]/settings/general/security/page.tsx
+++ b/src/app/[orgId]/settings/general/security/page.tsx
@@ -3,7 +3,12 @@ import ConfirmDeleteDialog from "@app/components/ConfirmDeleteDialog";
 import { Button } from "@app/components/ui/button";
 import { useOrgContext } from "@app/hooks/useOrgContext";
 import { toast } from "@app/hooks/useToast";
-import { useState, useRef, useActionState, type ComponentRef } from "react";
+import {
+    useState,
+    useRef,
+    useActionState,
+    type ComponentRef
+} from "react";
 import {
    Form,
    FormControl,
@@ -105,7 +110,7 @@ export default function SecurityPage() {
    return (
        <SettingsContainer>
            <LogRetentionSectionForm org={org.org} />
-            <SecuritySettingsSectionForm org={org.org} />
+            {build !== "oss" && <SecuritySettingsSectionForm org={org.org} />}
        </SettingsContainer>
    );
 }
@@ -238,120 +243,144 @@ function LogRetentionSectionForm({ org }: SectionFormProps) {
                                )}
                            />

-                            <PaidFeaturesAlert />
+                            {build !== "oss" && (
+                                <>
+                                    <PaidFeaturesAlert />

-                            <FormField
-                                control={form.control}
-                                name="settingsLogRetentionDaysAccess"
-                                render={({ field }) => {
-                                    const isDisabled = !isPaidUser;
+                                    <FormField
+                                        control={form.control}
+                                        name="settingsLogRetentionDaysAccess"
+                                        render={({ field }) => {
+                                            const isDisabled = !isPaidUser;

-                                    return (
-                                        <FormItem>
-                                            <FormLabel>
-                                                {t("logRetentionAccessLabel")}
-                                            </FormLabel>
-                                            <FormControl>
-                                                <Select
-                                                    value={field.value.toString()}
-                                                    onValueChange={(value) => {
-                                                        if (!isDisabled) {
-                                                            field.onChange(
-                                                                parseInt(
-                                                                    value,
-                                                                    10
-                                                                )
-                                                            );
-                                                        }
-                                                    }}
-                                                    disabled={isDisabled}
-                                                >
-                                                    <SelectTrigger>
-                                                        <SelectValue
-                                                            placeholder={t(
-                                                                "selectLogRetention"
-                                                            )}
-                                                        />
-                                                    </SelectTrigger>
-                                                    <SelectContent>
-                                                        {LOG_RETENTION_OPTIONS.map(
-                                                            (option) => (
-                                                                <SelectItem
-                                                                    key={
-                                                                        option.value
-                                                                    }
-                                                                    value={option.value.toString()}
-                                                                >
-                                                                    {t(
-                                                                        option.label
-                                                                    )}
-                                                                </SelectItem>
-                                                            )
+                                            return (
+                                                <FormItem>
+                                                    <FormLabel>
+                                                        {t(
+                                                            "logRetentionAccessLabel"
                                                        )}
-                                                    </SelectContent>
-                                                </Select>
-                                            </FormControl>
-                                            <FormMessage />
-                                        </FormItem>
-                                    );
-                                }}
-                            />
-                            <FormField
-                                control={form.control}
-                                name="settingsLogRetentionDaysAction"
-                                render={({ field }) => {
-                                    const isDisabled = !isPaidUser;
-
-                                    return (
-                                        <FormItem>
-                                            <FormLabel>
-                                                {t("logRetentionActionLabel")}
-                                            </FormLabel>
-                                            <FormControl>
-                                                <Select
-                                                    value={field.value.toString()}
-                                                    onValueChange={(value) => {
-                                                        if (!isDisabled) {
-                                                            field.onChange(
-                                                                parseInt(
-                                                                    value,
-                                                                    10
-                                                                )
-                                                            );
-                                                        }
-                                                    }}
-                                                    disabled={isDisabled}
-                                                >
-                                                    <SelectTrigger>
-                                                        <SelectValue
-                                                            placeholder={t(
-                                                                "selectLogRetention"
-                                                            )}
-                                                        />
-                                                    </SelectTrigger>
-                                                    <SelectContent>
-                                                        {LOG_RETENTION_OPTIONS.map(
-                                                            (option) => (
-                                                                <SelectItem
-                                                                    key={
-                                                                        option.value
-                                                                    }
-                                                                    value={option.value.toString()}
-                                                                >
-                                                                    {t(
-                                                                        option.label
+                                                    </FormLabel>
+                                                    <FormControl>
+                                                        <Select
+                                                            value={field.value.toString()}
+                                                            onValueChange={(
+                                                                value
+                                                            ) => {
+                                                                if (
+                                                                    !isDisabled
+                                                                ) {
+                                                                    field.onChange(
+                                                                        parseInt(
+                                                                            value,
+                                                                            10
+                                                                        )
+                                                                    );
+                                                                }
+                                                            }}
+                                                            disabled={
+                                                                isDisabled
+                                                            }
+                                                        >
+                                                            <SelectTrigger>
+                                                                <SelectValue
+                                                                    placeholder={t(
+                                                                        "selectLogRetention"
                                                                    )}
-                                                                </SelectItem>
-                                                            )
+                                                                />
+                                                            </SelectTrigger>
+                                                            <SelectContent>
+                                                                {LOG_RETENTION_OPTIONS.map(
+                                                                    (
+                                                                        option
+                                                                    ) => (
+                                                                        <SelectItem
+                                                                            key={
+                                                                                option.value
+                                                                            }
+                                                                            value={option.value.toString()}
+                                                                        >
+                                                                            {t(
+                                                                                option.label
+                                                                            )}
+                                                                        </SelectItem>
+                                                                    )
+                                                                )}
+                                                            </SelectContent>
+                                                        </Select>
+                                                    </FormControl>
+                                                    <FormMessage />
+                                                </FormItem>
+                                            );
+                                        }}
+                                    />
+                                    <FormField
+                                        control={form.control}
+                                        name="settingsLogRetentionDaysAction"
+                                        render={({ field }) => {
+                                            const isDisabled = !isPaidUser;
+
+                                            return (
+                                                <FormItem>
+                                                    <FormLabel>
+                                                        {t(
+                                                            "logRetentionActionLabel"
                                                        )}
-                                                    </SelectContent>
-                                                </Select>
-                                            </FormControl>
-                                            <FormMessage />
-                                        </FormItem>
-                                    );
-                                }}
-                            />
+                                                    </FormLabel>
+                                                    <FormControl>
+                                                        <Select
+                                                            value={field.value.toString()}
+                                                            onValueChange={(
+                                                                value
+                                                            ) => {
+                                                                if (
+                                                                    !isDisabled
+                                                                ) {
+                                                                    field.onChange(
+                                                                        parseInt(
+                                                                            value,
+                                                                            10
+                                                                        )
+                                                                    );
+                                                                }
+                                                            }}
+                                                            disabled={
+                                                                isDisabled
+                                                            }
+                                                        >
+                                                            <SelectTrigger>
+                                                                <SelectValue
+                                                                    placeholder={t(
+                                                                        "selectLogRetention"
+                                                                    )}
+                                                                />
+                                                            </SelectTrigger>
+                                                            <SelectContent>
+                                                                {LOG_RETENTION_OPTIONS.map(
+                                                                    (
+                                                                        option
+                                                                    ) => (
+                                                                        <SelectItem
+                                                                            key={
+                                                                                option.value
+                                                                            }
+                                                                            value={option.value.toString()}
+                                                                        >
+                                                                            {t(
+                                                                                option.label
+                                                                            )}
+                                                                        </SelectItem>
+                                                                    )
+                                                                )}
+                                                            </SelectContent>
+                                                        </Select>
+                                                    </FormControl>
+                                                    <FormMessage />
+                                                </FormItem>
+                                            );
+                                        }}
+                                    />
+                                </>
+                            )}
                        </form>
                    </Form>
                </SettingsSectionForm>
@@ -711,7 +740,7 @@ function SecuritySettingsSectionForm({ org }: SectionFormProps) {
                        type="submit"
                        form="security-settings-section-form"
                        loading={loadingSave}
-                        disabled={loadingSave || !isPaidUser}
+                        disabled={loadingSave}
                    >
                        {t("saveSettings")}
                    </Button>
--- a/src/app/[orgId]/settings/logs/access/page.tsx
+++ b/src/app/[orgId]/settings/logs/access/page.tsx
@@ -20,7 +20,6 @@ import { Alert, AlertDescription } from "@app/components/ui/alert";
 import { getSevenDaysAgo } from "@app/lib/getSevenDaysAgo";
 import axios from "axios";
 import { useStoredPageSize } from "@app/hooks/useStoredPageSize";
-import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";

 export default function GeneralPage() {
    const router = useRouter();
@@ -210,8 +209,7 @@ export default function GeneralPage() {
        console.log("Date range changed:", { startDate, endDate, page, size });
        if (
            (build == "saas" && !subscription?.subscribed) ||
-            (build == "enterprise" && !isUnlocked()) ||
-            build === "oss"
+            (build == "enterprise" && !isUnlocked())
        ) {
            console.log(
                "Access denied: subscription inactive or license locked"
@@ -613,7 +611,21 @@ export default function GeneralPage() {
                description={t("accessLogsDescription")}
            />

-            <PaidFeaturesAlert />
+            {build == "saas" && !subscription?.subscribed ? (
+                <Alert variant="info" className="mb-6">
+                    <AlertDescription>
+                        {t("subscriptionRequiredToUse")}
+                    </AlertDescription>
+                </Alert>
+            ) : null}
+
+            {build == "enterprise" && !isUnlocked() ? (
+                <Alert variant="info" className="mb-6">
+                    <AlertDescription>
+                        {t("licenseRequiredToUse")}
+                    </AlertDescription>
+                </Alert>
+            ) : null}

            <LogDataTable
                columns={columns}
@@ -644,8 +656,7 @@ export default function GeneralPage() {
                renderExpandedRow={renderExpandedRow}
                disabled={
                    (build == "saas" && !subscription?.subscribed) ||
-                    (build == "enterprise" && !isUnlocked()) ||
-                    build === "oss"
+                    (build == "enterprise" && !isUnlocked())
                }
            />
        </>
--- a/src/app/[orgId]/settings/logs/action/page.tsx
+++ b/src/app/[orgId]/settings/logs/action/page.tsx
@@ -2,7 +2,6 @@
 import { ColumnFilter } from "@app/components/ColumnFilter";
 import { DateTimeValue } from "@app/components/DateTimePicker";
 import { LogDataTable } from "@app/components/LogDataTable";
-import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";
 import SettingsSectionTitle from "@app/components/SettingsSectionTitle";
 import { Alert, AlertDescription } from "@app/components/ui/alert";
 import { useEnvContext } from "@app/hooks/useEnvContext";
@@ -93,9 +92,6 @@ export default function GeneralPage() {

    // Trigger search with default values on component mount
    useEffect(() => {
-        if (build === "oss") {
-            return;
-        }
        const defaultRange = getDefaultDateRange();
        queryDateTime(
            defaultRange.startDate,
@@ -465,7 +461,21 @@ export default function GeneralPage() {
                description={t("actionLogsDescription")}
            />

-            <PaidFeaturesAlert />
+            {build == "saas" && !subscription?.subscribed ? (
+                <Alert variant="info" className="mb-6">
+                    <AlertDescription>
+                        {t("subscriptionRequiredToUse")}
+                    </AlertDescription>
+                </Alert>
+            ) : null}
+
+            {build == "enterprise" && !isUnlocked() ? (
+                <Alert variant="info" className="mb-6">
+                    <AlertDescription>
+                        {t("licenseRequiredToUse")}
+                    </AlertDescription>
+                </Alert>
+            ) : null}

            <LogDataTable
                columns={columns}
@@ -498,8 +508,7 @@ export default function GeneralPage() {
                renderExpandedRow={renderExpandedRow}
                disabled={
                    (build == "saas" && !subscription?.subscribed) ||
-                    (build == "enterprise" && !isUnlocked()) ||
-                    build === "oss"
+                    (build == "enterprise" && !isUnlocked())
                }
            />
        </>
--- a/src/app/[orgId]/settings/logs/request/page.tsx
+++ b/src/app/[orgId]/settings/logs/request/page.tsx
@@ -16,7 +16,6 @@ import Link from "next/link";
 import { useParams, useRouter, useSearchParams } from "next/navigation";
 import { useEffect, useState, useTransition } from "react";
 import { useStoredPageSize } from "@app/hooks/useStoredPageSize";
-import { build } from "@server/build";

 export default function GeneralPage() {
    const router = useRouter();
@@ -111,9 +110,6 @@ export default function GeneralPage() {

    // Trigger search with default values on component mount
    useEffect(() => {
-        if (build === "oss") {
-            return;
-        }
        const defaultRange = getDefaultDateRange();
        queryDateTime(
            defaultRange.startDate,
--- a/src/app/[orgId]/settings/resources/proxy/[niceId]/general/page.tsx
+++ b/src/app/[orgId]/settings/resources/proxy/[niceId]/general/page.tsx
@@ -63,7 +63,6 @@ import {
 import { PaidFeaturesAlert } from "@app/components/PaidFeaturesAlert";
 import { GetResourceResponse } from "@server/routers/resource/getResource";
 import type { ResourceContextType } from "@app/contexts/resourceContext";
-import { usePaidStatus } from "@app/hooks/usePaidStatus";

 type MaintenanceSectionFormProps = {
    resource: GetResourceResponse;
@@ -79,7 +78,6 @@ function MaintenanceSectionForm({
    const api = createApiClient({ env });
    const { isUnlocked } = useLicenseStatusContext();
    const subscription = useSubscriptionStatusContext();
-    const { isPaidUser } = usePaidStatus();

    const MaintenanceFormSchema = z.object({
        maintenanceModeEnabled: z.boolean().optional(),
@@ -163,7 +161,7 @@ function MaintenanceSectionForm({
        const isEnterpriseNotLicensed = build === "enterprise" && !isUnlocked();
        const isSaasNotSubscribed =
            build === "saas" && !subscription?.isSubscribed();
-        return isEnterpriseNotLicensed || isSaasNotSubscribed || build === "oss";
+        return isEnterpriseNotLicensed || isSaasNotSubscribed;
    };

    if (!resource.http) {
@@ -415,7 +413,7 @@ function MaintenanceSectionForm({
                <Button
                    type="submit"
                    loading={maintenanceSaveLoading}
-                    disabled={maintenanceSaveLoading || !isPaidUser }
+                    disabled={maintenanceSaveLoading}
                    form="maintenance-settings-form"
                >
                    {t("saveSettings")}
@@ -741,10 +739,12 @@ export default function GeneralForm() {
                    </SettingsSectionFooter>
                </SettingsSection>

-                <MaintenanceSectionForm
-                    resource={resource}
-                    updateResource={updateResource}
-                />
+                {build !== "oss" && (
+                    <MaintenanceSectionForm
+                        resource={resource}
+                        updateResource={updateResource}
+                    />
+                )}
            </SettingsContainer>

            <Credenza
--- a/src/app/[orgId]/settings/sites/[niceId]/credentials/page.tsx
+++ b/src/app/[orgId]/settings/sites/[niceId]/credentials/page.tsx
@@ -72,9 +72,7 @@ export default function CredentialsPage() {
        const isEnterpriseNotLicensed = build === "enterprise" && !isUnlocked();
        const isSaasNotSubscribed =
            build === "saas" && !subscription?.isSubscribed();
-        return (
-            isEnterpriseNotLicensed || isSaasNotSubscribed || build === "oss"
-        );
+        return isEnterpriseNotLicensed || isSaasNotSubscribed;
    };

    // Fetch site defaults for wireguard sites to show in obfuscated config
@@ -271,27 +269,29 @@ export default function CredentialsPage() {
                                    </Alert>
                                )}
                            </SettingsSectionBody>
-                            <SettingsSectionFooter>
-                                <Button
-                                    variant="outline"
-                                    onClick={() => {
-                                        setShouldDisconnect(false);
-                                        setModalOpen(true);
-                                    }}
-                                    disabled={isSecurityFeatureDisabled()}
-                                >
-                                    {t("regenerateCredentialsButton")}
-                                </Button>
-                                <Button
-                                    onClick={() => {
-                                        setShouldDisconnect(true);
-                                        setModalOpen(true);
-                                    }}
-                                    disabled={isSecurityFeatureDisabled()}
-                                >
-                                    {t("siteRegenerateAndDisconnect")}
-                                </Button>
-                            </SettingsSectionFooter>
+                            {build !== "oss" && (
+                                <SettingsSectionFooter>
+                                    <Button
+                                        variant="outline"
+                                        onClick={() => {
+                                            setShouldDisconnect(false);
+                                            setModalOpen(true);
+                                        }}
+                                        disabled={isSecurityFeatureDisabled()}
+                                    >
+                                        {t("regenerateCredentialsButton")}
+                                    </Button>
+                                    <Button
+                                        onClick={() => {
+                                            setShouldDisconnect(true);
+                                            setModalOpen(true);
+                                        }}
+                                        disabled={isSecurityFeatureDisabled()}
+                                    >
+                                        {t("siteRegenerateAndDisconnect")}
+                                    </Button>
+                                </SettingsSectionFooter>
+                            )}
                        </SettingsSection>

                        <NewtSiteInstallCommands
@@ -383,14 +383,16 @@ export default function CredentialsPage() {
                                </>
                            )}
                        </SettingsSectionBody>
-                        <SettingsSectionFooter>
-                            <Button
-                                onClick={() => setModalOpen(true)}
-                                disabled={isSecurityFeatureDisabled()}
-                            >
-                                {t("siteRegenerateAndDisconnect")}
-                            </Button>
-                        </SettingsSectionFooter>
+                        {build === "enterprise" && (
+                            <SettingsSectionFooter>
+                                <Button
+                                    onClick={() => setModalOpen(true)}
+                                    disabled={isSecurityFeatureDisabled()}
+                                >
+                                    {t("siteRegenerateAndDisconnect")}
+                                </Button>
+                            </SettingsSectionFooter>
+                        )}
                    </SettingsSection>
                )}
            </SettingsContainer>
--- a/src/app/auth/login/device/page.tsx
+++ b/src/app/auth/login/device/page.tsx
@@ -7,35 +7,22 @@ import { cache } from "react";
 export const dynamic = "force-dynamic";

 type Props = {
-    searchParams: Promise<{ code?: string; user?: string }>;
+    searchParams: Promise<{ code?: string }>;
 };

-function deviceRedirectSearchParams(params: {
-    code?: string;
-    user?: string;
-}): string {
-    const search = new URLSearchParams();
-    if (params.code) search.set("code", params.code);
-    if (params.user) search.set("user", params.user);
-    const q = search.toString();
-    return q ? `?${q}` : "";
-}
-
 export default async function DeviceLoginPage({ searchParams }: Props) {
    const user = await verifySession({ forceLogin: true });

    const params = await searchParams;
    const code = params.code || "";
-    const defaultUser = params.user;

    if (!user) {
-        const redirectDestination = `/auth/login/device${deviceRedirectSearchParams({ code, user: params.user })}`;
-        const loginUrl = new URL("/auth/login", "http://x");
-        loginUrl.searchParams.set("forceLogin", "true");
-        loginUrl.searchParams.set("redirect", redirectDestination);
-        if (defaultUser) loginUrl.searchParams.set("user", defaultUser);
-        console.log("loginUrl", loginUrl.pathname + loginUrl.search);
-        redirect(loginUrl.pathname + loginUrl.search);
+        const redirectDestination = code
+            ? `/auth/login/device?code=${encodeURIComponent(code)}`
+            : "/auth/login/device";
+        redirect(
+            `/auth/login?forceLogin=true&redirect=${encodeURIComponent(redirectDestination)}`
+        );
    }

    const userName = user
@@ -50,7 +37,6 @@ export default async function DeviceLoginPage({ searchParams }: Props) {
            userEmail={user?.email || ""}
            userName={userName}
            initialCode={code}
-            userQueryParam={defaultUser}
        />
    );
 }
--- a/src/app/auth/login/page.tsx
+++ b/src/app/auth/login/page.tsx
@@ -72,8 +72,6 @@ export default async function Page(props: {
        searchParams.redirect = redirectUrl;
    }

-    const defaultUser = searchParams.user as string | undefined;
-
    // Only use SmartLoginForm if NOT (OSS build OR org-only IdP enabled)
    const useSmartLogin =
        build === "saas" || (build === "enterprise" && env.flags.useOrgOnlyIdp);
@@ -153,7 +151,6 @@ export default async function Page(props: {
                            <SmartLoginForm
                                redirect={redirectUrl}
                                forceLogin={forceLogin}
-                                defaultUser={defaultUser}
                            />
                        </CardContent>
                    </Card>
@@ -168,7 +165,6 @@ export default async function Page(props: {
                        (build === "saas" || env.flags.useOrgOnlyIdp)
                    }
                    searchParams={searchParams}
-                    defaultUser={defaultUser}
                />
            )}

--- a/src/app/navigation.tsx
+++ b/src/app/navigation.tsx
@@ -121,16 +121,24 @@ export const orgNavSections = (env?: Env): SidebarNavSection[] => [
                href: "/{orgId}/settings/access/roles",
                icon: <Users className="size-4 flex-none" />
            },
-            {
-                title: "sidebarIdentityProviders",
-                href: "/{orgId}/settings/idp",
-                icon: <Fingerprint className="size-4 flex-none" />
-            },
-            {
-                title: "sidebarApprovals",
-                href: "/{orgId}/settings/access/approvals",
-                icon: <UserCog className="size-4 flex-none" />
-            },
+            ...(build === "saas" || env?.flags.useOrgOnlyIdp
+                ? [
+                      {
+                          title: "sidebarIdentityProviders",
+                          href: "/{orgId}/settings/idp",
+                          icon: <Fingerprint className="size-4 flex-none" />
+                      }
+                  ]
+                : []),
+            ...(build !== "oss"
+                ? [
+                      {
+                          title: "sidebarApprovals",
+                          href: "/{orgId}/settings/access/approvals",
+                          icon: <UserCog className="size-4 flex-none" />
+                      }
+                  ]
+                : []),
            {
                title: "sidebarShareableLinks",
                href: "/{orgId}/settings/share-links",
@@ -147,16 +155,20 @@ export const orgNavSections = (env?: Env): SidebarNavSection[] => [
                    href: "/{orgId}/settings/logs/request",
                    icon: <SquareMousePointer className="size-4 flex-none" />
                },
-                {
-                    title: "sidebarLogsAccess",
-                    href: "/{orgId}/settings/logs/access",
-                    icon: <ScanEye className="size-4 flex-none" />
-                },
-                {
-                    title: "sidebarLogsAction",
-                    href: "/{orgId}/settings/logs/action",
-                    icon: <Logs className="size-4 flex-none" />
-                }
+                ...(build != "oss"
+                    ? [
+                          {
+                              title: "sidebarLogsAccess",
+                              href: "/{orgId}/settings/logs/access",
+                              icon: <ScanEye className="size-4 flex-none" />
+                          },
+                          {
+                              title: "sidebarLogsAction",
+                              href: "/{orgId}/settings/logs/action",
+                              icon: <Logs className="size-4 flex-none" />
+                          }
+                      ]
+                    : [])
            ];

            const analytics = {
--- a/src/components/ApprovalFeed.tsx
+++ b/src/components/ApprovalFeed.tsx
@@ -30,7 +30,6 @@ import {
 import { Separator } from "./ui/separator";
 import { InfoPopup } from "./ui/info-popup";
 import { ApprovalsEmptyState } from "./ApprovalsEmptyState";
-import { usePaidStatus } from "@app/hooks/usePaidStatus";

 export type ApprovalFeedProps = {
    orgId: string;
@@ -51,12 +50,9 @@ export function ApprovalFeed({
        Object.fromEntries(searchParams.entries())
    );

-    const { isPaidUser } = usePaidStatus();
-
-    const { data, isFetching, refetch } = useQuery({
-        ...approvalQueries.listApprovals(orgId, filters),
-        enabled: isPaidUser
-    });
+    const { data, isFetching, refetch } = useQuery(
+        approvalQueries.listApprovals(orgId, filters)
+    );

    const approvals = data?.approvals ?? [];

@@ -213,19 +209,19 @@ function ApprovalRequest({ approval, orgId, onSuccess }: ApprovalRequestProps) {
                    &nbsp;
                    {approval.type === "user_device" && (
                        <span className="inline-flex items-center gap-1">
-                            {approval.deviceName ? (
-                                <>
-                                    {t("requestingNewDeviceApproval")}:{" "}
-                                    {approval.niceId ? (
-                                        <Link
-                                            href={`/${orgId}/settings/clients/user/${approval.niceId}/general`}
-                                            className="text-primary hover:underline cursor-pointer"
-                                        >
-                                            {approval.deviceName}
-                                        </Link>
-                                    ) : (
-                                        <span>{approval.deviceName}</span>
-                                    )}
+                                    {approval.deviceName ? (
+                                        <>
+                                            {t("requestingNewDeviceApproval")}:{" "}
+                                            {approval.niceId ? (
+                                                <Link
+                                                    href={`/${orgId}/settings/clients/user/${approval.niceId}/general`}
+                                                    className="text-primary hover:underline cursor-pointer"
+                                                >
+                                                    {approval.deviceName}
+                                                </Link>
+                                            ) : (
+                                                <span>{approval.deviceName}</span>
+                                            )}
                                    {approval.fingerprint && (
                                        <InfoPopup>
                                            <div className="space-y-1 text-sm">
@@ -233,10 +229,7 @@ function ApprovalRequest({ approval, orgId, onSuccess }: ApprovalRequestProps) {
                                                    {t("deviceInformation")}
                                                </div>
                                                <div className="text-muted-foreground whitespace-pre-line">
-                                                    {formatFingerprintInfo(
-                                                        approval.fingerprint,
-                                                        t
-                                                    )}
+                                                    {formatFingerprintInfo(approval.fingerprint, t)}
                                                </div>
                                            </div>
                                        </InfoPopup>
--- a/src/components/CreateRoleForm.tsx
+++ b/src/components/CreateRoleForm.tsx
@@ -160,51 +160,56 @@ export default function CreateRoleForm({
                                        </FormItem>
                                    )}
                                />
+                                {build !== "oss" && (
+                                    <div>
+                                        <PaidFeaturesAlert />

-                                <PaidFeaturesAlert />
-
-                                <FormField
-                                    control={form.control}
-                                    name="requireDeviceApproval"
-                                    render={({ field }) => (
-                                        <FormItem className="my-2">
-                                            <FormControl>
-                                                <CheckboxWithLabel
-                                                    {...field}
-                                                    disabled={!isPaidUser}
-                                                    value="on"
-                                                    checked={form.watch(
-                                                        "requireDeviceApproval"
-                                                    )}
-                                                    onCheckedChange={(
-                                                        checked
-                                                    ) => {
-                                                        if (
-                                                            checked !==
-                                                            "indeterminate"
-                                                        ) {
-                                                            form.setValue(
-                                                                "requireDeviceApproval",
+                                        <FormField
+                                            control={form.control}
+                                            name="requireDeviceApproval"
+                                            render={({ field }) => (
+                                                <FormItem className="my-2">
+                                                    <FormControl>
+                                                        <CheckboxWithLabel
+                                                            {...field}
+                                                            disabled={
+                                                                !isPaidUser
+                                                            }
+                                                            value="on"
+                                                            checked={form.watch(
+                                                                "requireDeviceApproval"
+                                                            )}
+                                                            onCheckedChange={(
                                                                checked
-                                                            );
-                                                        }
-                                                    }}
-                                                    label={t(
-                                                        "requireDeviceApproval"
-                                                    )}
-                                                />
-                                            </FormControl>
+                                                            ) => {
+                                                                if (
+                                                                    checked !==
+                                                                    "indeterminate"
+                                                                ) {
+                                                                    form.setValue(
+                                                                        "requireDeviceApproval",
+                                                                        checked
+                                                                    );
+                                                                }
+                                                            }}
+                                                            label={t(
+                                                                "requireDeviceApproval"
+                                                            )}
+                                                        />
+                                                    </FormControl>

-                                            <FormDescription>
-                                                {t(
-                                                    "requireDeviceApprovalDescription"
-                                                )}
-                                            </FormDescription>
+                                                    <FormDescription>
+                                                        {t(
+                                                            "requireDeviceApprovalDescription"
+                                                        )}
+                                                    </FormDescription>

-                                            <FormMessage />
-                                        </FormItem>
-                                    )}
-                                />
+                                                    <FormMessage />
+                                                </FormItem>
+                                            )}
+                                        />
+                                    </div>
+                                )}
                            </form>
                        </Form>
                    </CredenzaBody>
--- a/src/components/DashboardLoginForm.tsx
+++ b/src/components/DashboardLoginForm.tsx
@@ -29,7 +29,6 @@ type DashboardLoginFormProps = {
    searchParams?: {
        [key: string]: string | string[] | undefined;
    };
-    defaultUser?: string;
 };

 export default function DashboardLoginForm({
@@ -37,8 +36,7 @@ export default function DashboardLoginForm({
    idps,
    forceLogin,
    showOrgLogin,
-    searchParams,
-    defaultUser
+    searchParams
 }: DashboardLoginFormProps) {
    const router = useRouter();
    const { env } = useEnvContext();
@@ -77,7 +75,6 @@ export default function DashboardLoginForm({
                    redirect={redirect}
                    idps={idps}
                    forceLogin={forceLogin}
-                    defaultEmail={defaultUser}
                    onLogin={(redirectUrl) => {
                        if (redirectUrl) {
                            const safe = cleanRedirect(redirectUrl);
--- a/src/components/DeviceLoginForm.tsx
+++ b/src/components/DeviceLoginForm.tsx
@@ -55,14 +55,12 @@ type DeviceLoginFormProps = {
    userEmail: string;
    userName?: string;
    initialCode?: string;
-    userQueryParam?: string;
 };

 export default function DeviceLoginForm({
    userEmail,
    userName,
-    initialCode = "",
-    userQueryParam
+    initialCode = ""
 }: DeviceLoginFormProps) {
    const router = useRouter();
    const { env } = useEnvContext();
@@ -221,12 +219,9 @@ export default function DeviceLoginForm({
            const currentSearch =
                typeof window !== "undefined" ? window.location.search : "";
            const redirectTarget = `/auth/login/device${currentSearch || ""}`;
-            const loginUrl = new URL("/auth/login", "http://x");
-            loginUrl.searchParams.set("forceLogin", "true");
-            loginUrl.searchParams.set("redirect", redirectTarget);
-            if (userQueryParam)
-                loginUrl.searchParams.set("user", userQueryParam);
-            router.push(loginUrl.pathname + loginUrl.search);
+            router.push(
+                `/auth/login?forceLogin=true&redirect=${encodeURIComponent(redirectTarget)}`
+            );
            router.refresh();
        }
    }
--- a/src/components/EditRoleForm.tsx
+++ b/src/components/EditRoleForm.tsx
@@ -168,50 +168,56 @@ export default function EditRoleForm({
                                        </FormItem>
                                    )}
                                />
-                                <PaidFeaturesAlert />
+                                {build !== "oss" && (
+                                    <div>
+                                        <PaidFeaturesAlert />

-                                <FormField
-                                    control={form.control}
-                                    name="requireDeviceApproval"
-                                    render={({ field }) => (
-                                        <FormItem className="my-2">
-                                            <FormControl>
-                                                <CheckboxWithLabel
-                                                    {...field}
-                                                    disabled={!isPaidUser}
-                                                    value="on"
-                                                    checked={form.watch(
-                                                        "requireDeviceApproval"
-                                                    )}
-                                                    onCheckedChange={(
-                                                        checked
-                                                    ) => {
-                                                        if (
-                                                            checked !==
-                                                            "indeterminate"
-                                                        ) {
-                                                            form.setValue(
-                                                                "requireDeviceApproval",
+                                        <FormField
+                                            control={form.control}
+                                            name="requireDeviceApproval"
+                                            render={({ field }) => (
+                                                <FormItem className="my-2">
+                                                    <FormControl>
+                                                        <CheckboxWithLabel
+                                                            {...field}
+                                                            disabled={
+                                                                !isPaidUser
+                                                            }
+                                                            value="on"
+                                                            checked={form.watch(
+                                                                "requireDeviceApproval"
+                                                            )}
+                                                            onCheckedChange={(
                                                                checked
-                                                            );
-                                                        }
-                                                    }}
-                                                    label={t(
-                                                        "requireDeviceApproval"
-                                                    )}
-                                                />
-                                            </FormControl>
+                                                            ) => {
+                                                                if (
+                                                                    checked !==
+                                                                    "indeterminate"
+                                                                ) {
+                                                                    form.setValue(
+                                                                        "requireDeviceApproval",
+                                                                        checked
+                                                                    );
+                                                                }
+                                                            }}
+                                                            label={t(
+                                                                "requireDeviceApproval"
+                                                            )}
+                                                        />
+                                                    </FormControl>

-                                            <FormDescription>
-                                                {t(
-                                                    "requireDeviceApprovalDescription"
-                                                )}
-                                            </FormDescription>
+                                                    <FormDescription>
+                                                        {t(
+                                                            "requireDeviceApprovalDescription"
+                                                        )}
+                                                    </FormDescription>

-                                            <FormMessage />
-                                        </FormItem>
-                                    )}
-                                />
+                                                    <FormMessage />
+                                                </FormItem>
+                                            )}
+                                        />
+                                    </div>
+                                )}
                            </form>
                        </Form>
                    </CredenzaBody>
--- a/src/components/LoginForm.tsx
+++ b/src/components/LoginForm.tsx
@@ -54,7 +54,6 @@ type LoginFormProps = {
    idps?: LoginFormIDP[];
    orgId?: string;
    forceLogin?: boolean;
-    defaultEmail?: string;
 };

 export default function LoginForm({
@@ -62,8 +61,7 @@ export default function LoginForm({
    onLogin,
    idps,
    orgId,
-    forceLogin,
-    defaultEmail
+    forceLogin
 }: LoginFormProps) {
    const router = useRouter();

@@ -118,7 +116,7 @@ export default function LoginForm({
    const form = useForm({
        resolver: zodResolver(formSchema),
        defaultValues: {
-            email: defaultEmail ?? "",
+            email: "",
            password: ""
        }
    });
--- a/src/components/PaidFeaturesAlert.tsx
+++ b/src/components/PaidFeaturesAlert.tsx
@@ -1,16 +1,8 @@
 "use client";
-import { Card, CardContent } from "@app/components/ui/card";
+import { Alert, AlertDescription } from "@app/components/ui/alert";
 import { build } from "@server/build";
-import { usePaidStatus } from "@app/hooks/usePaidStatus";
-import { ExternalLink, KeyRound, Sparkles } from "lucide-react";
 import { useTranslations } from "next-intl";
-import Link from "next/link";
-
-const bannerClassName =
-    "mb-6 border-primary/30 bg-linear-to-br from-primary/10 via-background to-background overflow-hidden";
-const bannerContentClassName = "py-3 px-4";
-const bannerRowClassName =
-    "flex items-center gap-2.5 text-sm text-muted-foreground";
+import { usePaidStatus } from "@app/hooks/usePaidStatus";

 export function PaidFeaturesAlert() {
    const t = useTranslations();
@@ -18,50 +10,19 @@ export function PaidFeaturesAlert() {
    return (
        <>
            {build === "saas" && !hasSaasSubscription ? (
-                <Card className={bannerClassName}>
-                    <CardContent className={bannerContentClassName}>
-                        <div className={bannerRowClassName}>
-                            <KeyRound className="size-4 shrink-0 text-primary" />
-                            <span>{t("subscriptionRequiredToUse")}</span>
-                        </div>
-                    </CardContent>
-                </Card>
+                <Alert variant="info" className="mb-6">
+                    <AlertDescription>
+                        {t("subscriptionRequiredToUse")}
+                    </AlertDescription>
+                </Alert>
            ) : null}

            {build === "enterprise" && !hasEnterpriseLicense ? (
-                <Card className={bannerClassName}>
-                    <CardContent className={bannerContentClassName}>
-                        <div className={bannerRowClassName}>
-                            <KeyRound className="size-4 shrink-0 text-primary" />
-                            <span>{t("licenseRequiredToUse")}</span>
-                        </div>
-                    </CardContent>
-                </Card>
-            ) : null}
-
-            {build === "oss" && !hasEnterpriseLicense ? (
-                <Card className={bannerClassName}>
-                    <CardContent className={bannerContentClassName}>
-                        <div className={bannerRowClassName}>
-                            <KeyRound className="size-4 shrink-0 text-primary" />
-                            <span>
-                                {t.rich("ossEnterpriseEditionRequired", {
-                                    enterpriseEditionLink: (chunks) => (
-                                        <Link
-                                            href="https://docs.pangolin.net/self-host/enterprise-edition"
-                                            target="_blank"
-                                            rel="noopener noreferrer"
-                                            className="inline-flex items-center gap-1 font-medium text-foreground underline"
-                                        >
-                                            {chunks}
-                                            <ExternalLink className="size-3.5 shrink-0" />
-                                        </Link>
-                                    )
-                                })}
-                            </span>
-                        </div>
-                    </CardContent>
-                </Card>
+                <Alert variant="info" className="mb-6">
+                    <AlertDescription>
+                        {t("licenseRequiredToUse")}
+                    </AlertDescription>
+                </Alert>
            ) : null}
        </>
    );
--- a/src/components/SmartLoginForm.tsx
+++ b/src/components/SmartLoginForm.tsx
@@ -1,6 +1,6 @@
 "use client";

-import { useEffect, useRef, useState } from "react";
+import { useState } from "react";
 import { useForm } from "react-hook-form";
 import { zodResolver } from "@hookform/resolvers/zod";
 import * as z from "zod";
@@ -42,7 +42,6 @@ const isValidEmail = (str: string): boolean => {
 type SmartLoginFormProps = {
    redirect?: string;
    forceLogin?: boolean;
-    defaultUser?: string;
 };

 type ViewState =
@@ -60,8 +59,7 @@ type ViewState =

 export default function SmartLoginForm({
    redirect,
-    forceLogin,
-    defaultUser
+    forceLogin
 }: SmartLoginFormProps) {
    const router = useRouter();
    const { lookup, loading, error } = useUserLookup();
@@ -74,18 +72,10 @@ export default function SmartLoginForm({
    const form = useForm<z.infer<typeof identifierSchema>>({
        resolver: zodResolver(identifierSchema),
        defaultValues: {
-            identifier: defaultUser ?? ""
+            identifier: ""
        }
    });

-    const hasAutoLookedUp = useRef(false);
-    useEffect(() => {
-        if (defaultUser?.trim() && !hasAutoLookedUp.current) {
-            hasAutoLookedUp.current = true;
-            void handleLookup({ identifier: defaultUser.trim() });
-        }
-    }, [defaultUser]);
-
    const handleLookup = async (values: z.infer<typeof identifierSchema>) => {
        const identifier = values.identifier.trim();
        const isEmail = isValidEmail(identifier);
--- a/src/components/UserDevicesTable.tsx
+++ b/src/components/UserDevicesTable.tsx
@@ -190,7 +190,7 @@ export default function UserDevicesTable({ userClients }: ClientTableProps) {
            const approvalsRes = await api.get<{
                data: { approvals: Array<{ approvalId: number; clientId: number }> };
            }>(`/org/${clientRow.orgId}/approvals?approvalState=pending&clientId=${clientRow.id}`);
-
+            
            const approval = approvalsRes.data.data.approvals[0];

            if (!approval) {
@@ -232,7 +232,7 @@ export default function UserDevicesTable({ userClients }: ClientTableProps) {
            const approvalsRes = await api.get<{
                data: { approvals: Array<{ approvalId: number; clientId: number }> };
            }>(`/org/${clientRow.orgId}/approvals?approvalState=pending&clientId=${clientRow.id}`);
-
+            
            const approval = approvalsRes.data.data.approvals[0];

            if (!approval) {
@@ -548,7 +548,7 @@ export default function UserDevicesTable({ userClients }: ClientTableProps) {
                                </Button>
                            </DropdownMenuTrigger>
                            <DropdownMenuContent align="end">
-                                {clientRow.approvalState === "pending" && (
+                                {clientRow.approvalState === "pending" && build !== "oss" && (
                                    <>
                                        <DropdownMenuItem
                                            onClick={() => approveDevice(clientRow)}
@@ -652,10 +652,17 @@ export default function UserDevicesTable({ userClients }: ClientTableProps) {
            }
        ];

+        if (build === "oss") {
+            return allOptions.filter((option) => option.value !== "pending" && option.value !== "denied");
+        }
+
        return allOptions;
    }, [t]);

    const statusFilterDefaultValues = useMemo(() => {
+        if (build === "oss") {
+            return ["active"];
+        }
        return ["active", "pending"];
    }, []);

--- a/src/components/olm-install-commands.tsx
+++ b/src/components/olm-install-commands.tsx
@@ -43,11 +43,11 @@ export function OlmInstallCommands({
            All: [
                {
                    title: t("install"),
-                    command: `curl -fsSL https://static.pangolin.net/get-cli.sh | bash`
+                    command: `curl -fsSL https://static.pangolin.net/get-olm.sh | bash`
                },
                {
                    title: t("run"),
-                    command: `sudo pangolin up --id ${id} --secret ${secret} --endpoint ${endpoint} --attach`
+                    command: `sudo olm --id ${id} --secret ${secret} --endpoint ${endpoint}`
                }
            ]
        },
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -2,6 +2,29 @@ import { NextRequest, NextResponse } from "next/server";
 import { build } from "@server/build";

 export function middleware(request: NextRequest) {
+    // If build is OSS, block access to private routes
+    if (build === "oss") {
+        const pathname = request.nextUrl.pathname;
+
+        // Define private route patterns that should be blocked in OSS build
+        const privateRoutes = [
+            "/settings/billing",
+            "/settings/remote-exit-nodes",
+            "/settings/idp",
+            "/auth/org"
+        ];
+
+        // Check if current path matches any private route pattern
+        const isPrivateRoute = privateRoutes.some((route) =>
+            pathname.includes(route)
+        );
+
+        if (isPrivateRoute) {
+            // Return 404 to make it seem like the route doesn't exist
+            return new NextResponse(null, { status: 404 });
+        }
+    }
+
    return NextResponse.next();
 }
Author	SHA1	Message	Date
dependabot[bot]	46c63ae2d8	Bump the dev-patch-updates group across 1 directory with 5 updates Bumps the dev-patch-updates group with 5 updates in the / directory: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) \| `5.91.1` \| `5.91.3` \| \| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) \| `0.31.8` \| `0.31.9` \| \| [esbuild](https://github.com/evanw/esbuild) \| `0.27.2` \| `0.27.3` \| \| [prettier](https://github.com/prettier/prettier) \| `3.8.0` \| `3.8.1` \| \| [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email) \| `5.2.5` \| `5.2.8` \| Updates `@tanstack/react-query-devtools` from 5.91.1 to 5.91.3 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.91.3/packages/react-query-devtools) Updates `drizzle-kit` from 0.31.8 to 0.31.9 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.8...drizzle-kit@0.31.9) Updates `esbuild` from 0.27.2 to 0.27.3 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](https://github.com/evanw/esbuild/compare/v0.27.2...v0.27.3) Updates `prettier` from 3.8.0 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.0...3.8.1) Updates `react-email` from 5.2.5 to 5.2.8 - [Release notes](https://github.com/resend/react-email/releases) - [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md) - [Commits](https://github.com/resend/react-email/commits/react-email@5.2.8/packages/react-email) --- updated-dependencies: - dependency-name: "@tanstack/react-query-devtools" dependency-version: 5.91.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: drizzle-kit dependency-version: 0.31.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: esbuild dependency-version: 0.27.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: react-email dependency-version: 5.2.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>	2026-02-10 02:45:08 +00:00
Owen	b4c01349d1	Merge branch 'dev'	2026-02-04 21:44:07 -08:00
Owen	e4d4c62833	Dont create newt sites with exit node or subnet	2026-02-02 18:19:13 -08:00
Owen	20ae903d7f	Subscribed limits for domains is higher	2026-02-02 16:46:48 -08:00
MoweME	b0566d3c6f	fix(i18n): correct German site terminology Updates the German translation to use "Standort" (site) instead of "Seite" (page) for consistency with the site context.	2026-01-29 10:01:30 -08:00
MoweME	5dda8c384f	fix(i18n): correct German translation strings Corrects mistranslation of device timestamp labels and fixes product name reference in site tunnel settings.	2026-01-29 10:01:30 -08:00
Owen	cb569ff14d	Properly insert PANGOLIN_SETUP_TOKEN into db Fixes #2361	2026-01-28 15:03:31 -08:00