@northern.tech/store 0.3.2 → 0.3.3

package/dist/organizationSlice/thunks.cjs

@@ -67,6 +67,14 @@ module.exports = __toCommonJS(thunks_exports);
 
 // src/appSlice/constants.ts
 var import_icons_material = require("@mui/icons-material");
+
+// ../../assets/img/flag-eu.svg
+var flag_eu_default = "../flag-eu-5477R2P4.svg";
+
+// ../../assets/img/flag-us.svg
+var flag_us_default = "../flag-us-HNQAF66I.svg";
+
+// src/appSlice/constants.ts
 var startingDeviceCount = {
   os: "for first 50 devices",
   professional: "for first 250 devices"
@@ -89,36 +97,36 @@ var emptyChartSelection = { software: "", group: "", chartType: chartTypes.bar.k
 var defaultReportType = "distribution";
 var defaultReports = [{ ...emptyChartSelection, group: null, attribute: "artifact_name", type: defaultReportType }];
 var locations = {
-  eu: { key: "eu", title: "EU", location: "eu.hosted.mender.io" },
-  us: { key: "us", title: "US", location: "hosted.mender.io" }
+  eu: { key: "eu", title: "EU", location: "eu.hosted.mender.io", icon: flag_eu_default },
+  us: { key: "us", title: "US", location: "hosted.mender.io", icon: flag_us_default }
 };
 var PLANS = {
   os: {
     id: "os",
     name: "Basic",
     offer: true,
-    price: "$32/month",
+    price: "$32 / month",
     deviceCount: startingDeviceCount.os,
-    offerprice: "$23/month for first 50 devices",
+    offerprice: "$23 / month for first 50 devices",
     price2: "for first 6 months;\n$29/month thereafter",
-    features: ["Basic OTA features"]
+    features: ["Access to core features of Mender", "Basic support"]
   },
   professional: {
     id: "professional",
     name: "Professional",
     offer: true,
-    price: "$269/month",
+    price: "$269 / month",
     deviceCount: startingDeviceCount.professional,
-    offerprice: "$200/month for first 50 devices",
+    offerprice: "$200 / month for first 50 devices",
     price2: "for first 6 months;\n$249/month thereafter",
-    features: ["+ Advanced OTA features", "+ Standard support"]
+    features: ["Advanced OTA features", "Higher priority support"]
   },
   enterprise: {
     id: "enterprise",
     name: "Enterprise",
     price: "Custom pricing",
-    deviceCount: "unlimited devices",
-    features: ["+ Enterprise-grade OTA features", "+ Premium support"]
+    deviceCount: "Unlimited devices",
+    features: ["All Mender features", "Advanced security features", "SLA-backed support"]
   }
 };
 var ADDONS = {
@@ -589,6 +597,7 @@ var DEVICE_STATES = {
   rejected: "rejected"
 };
 var geoAttributes = ["geo-lat", "geo-lon"].map((attribute) => ({ attribute, scope: "inventory" }));
+var REPORT_CHART_SIZE_LIMIT = 6;
 
 // src/monitorSlice/constants.ts
 var alertChannels = { email: "email" };
@@ -670,13 +679,16 @@ var SSO_TYPES = {
     configDetails: [{ key: "startURL", label: "Start Url", getValue: getOidcStartUrl }]
   }
 };
-var AUDIT_LOGS_TYPES = [
-  { title: "Artifact", queryParameter: "object_type", value: "artifact" },
-  { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
-  { title: "Device", queryParameter: "object_id", value: "device" },
-  { title: "User", queryParameter: "object_id", value: "user" }
-];
-var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
+var auditlogTypes = {
+  artifact: { title: "Artifact", queryParameter: "object_type", value: "artifact" },
+  deployment: { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
+  device: { title: "Device", queryParameter: "object_id", value: "device" },
+  user_access_token: { title: "Personal Access Token", queryParameter: "user_access_token", value: "user_access_token" },
+  user: { title: "User", queryParameter: "object_id", value: "user" },
+  tenant: { title: "Tenant", queryParameter: "object_id", value: "tenant" }
+};
+var AUDIT_LOGS_TYPES = [auditlogTypes.artifact, auditlogTypes.deployment, auditlogTypes.device, auditlogTypes.user_access_token, auditlogTypes.user];
+var SP_AUDIT_LOGS_TYPES = [auditlogTypes.user, auditlogTypes.tenant];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -809,7 +821,7 @@ var uiPermissionsByArea = {
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
     key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
-    title: "System audit log"
+    title: "System Audit Log"
   },
   deployments: {
     endpoints: [
@@ -960,7 +972,7 @@ var serviceProviderRolesById = {
   },
   readOnly: {
     name: "Read access",
-    value: staticRolesByName.admin,
+    value: staticRolesByName.readOnly,
     description: "This role can see all linked organizations but cannot make any changes",
     permissions: [],
     uiPermissions: {
@@ -2037,6 +2049,9 @@ var Api = {
 };
 var general_api_default = Api;
 
+// src/devicesSlice/thunks.tsx
+var import_react_router_dom = require("react-router-dom");
+
 // src/appSlice/selectors.ts
 var import_helpers2 = require("@northern.tech/utils/helpers");
 var import_toolkit9 = require("@reduxjs/toolkit");
@@ -2165,7 +2180,7 @@ var getGroups = (0, import_toolkit11.createSelector)([getGroupsById], (groupsByI
     (accu, [groupname, group]) => {
       const name = groupname === UNGROUPED_GROUP.id ? UNGROUPED_GROUP.name : groupname;
       const groupItem = { ...group, groupId: name, name: groupname };
-      if (group.filters.length > 0) {
+      if (group.filters?.length > 0) {
         if (groupname !== UNGROUPED_GROUP.id) {
           accu.dynamic.push(groupItem);
         } else {
@@ -2240,14 +2255,15 @@ var getAuditLogEntry = (0, import_toolkit12.createSelector)([getAuditLog, getAud
 // src/utils.ts
 var import_helpers4 = require("@northern.tech/utils/helpers");
 var filterProcessors = {
-  $gt: (val) => Number(val) || val,
-  $gte: (val) => Number(val) || val,
-  $lt: (val) => Number(val) || val,
-  $lte: (val) => Number(val) || val,
-  $in: (val) => ("" + val).split(",").map((i) => i.trim()),
-  $nin: (val) => ("" + val).split(",").map((i) => i.trim()),
-  $exists: import_helpers4.yes,
-  $nexists: () => false
+  [DEVICE_FILTERING_OPTIONS.$gt.key]: (val) => Number(val) || val,
+  [DEVICE_FILTERING_OPTIONS.$gte.key]: (val) => Number(val) || val,
+  [DEVICE_FILTERING_OPTIONS.$lt.key]: (val) => Number(val) || val,
+  [DEVICE_FILTERING_OPTIONS.$lte.key]: (val) => Number(val) || val,
+  [DEVICE_FILTERING_OPTIONS.$ltne.key]: (val) => Number(val) || val,
+  [DEVICE_FILTERING_OPTIONS.$in.key]: (val) => ("" + val).split(",").map((i) => i.trim()),
+  [DEVICE_FILTERING_OPTIONS.$nin.key]: (val) => ("" + val).split(",").map((i) => i.trim()),
+  [DEVICE_FILTERING_OPTIONS.$exists.key]: import_helpers4.yes,
+  [DEVICE_FILTERING_OPTIONS.$nexists.key]: () => false
 };
 var filterAliases = {
   $nexists: { alias: DEVICE_FILTERING_OPTIONS.$exists.key, value: false }
@@ -2371,8 +2387,13 @@ var getTooltipsById = (state) => state.users.tooltips.byId;
 var getGlobalSettings = (state) => state.users.globalSettings;
 var getCurrentUserId = (state) => state.users.currentUser;
 var getUsersById = (state) => state.users.byId;
+var getUsersList = (0, import_toolkit14.createSelector)([getUsersById], (usersById) => Object.values(usersById));
 var getCurrentUser = (0, import_toolkit14.createSelector)([getUsersById, getCurrentUserId], (usersById, userId) => usersById[userId] ?? {});
 var getUserSettings = (state) => state.users.userSettings;
+var getSelectedDeviceAttribute = (0, import_toolkit14.createSelector)(
+  [getUserSettings],
+  ({ columnSelection }) => columnSelection.map((attribute) => ({ attribute: attribute.key, scope: attribute.scope }))
+);
 var getIsDarkMode = (0, import_toolkit14.createSelector)([getUserSettings], ({ mode }) => isDarkMode(mode));
 var getShowHelptips = (0, import_toolkit14.createSelector)(
   [getTooltipsById],
@@ -2397,7 +2418,7 @@ var getOfflineThresholdSettings = (0, import_toolkit14.createSelector)([getGloba
   interval: offlineThreshold?.interval || DEVICE_ONLINE_CUTOFF.interval,
   intervalUnit: offlineThreshold?.intervalUnit || DEVICE_ONLINE_CUTOFF.intervalName
 }));
-var getRolesList = (0, import_toolkit14.createSelector)([getRolesById], (rolesById2) => Object.entries(rolesById2).map(([id, role]) => ({ id, ...role })));
+var getRolesList = (0, import_toolkit14.createSelector)([getRolesById], (rolesById2) => Object.entries(rolesById2).map(([value, role]) => ({ value, ...role })));
 var getCurrentSession = (state) => state.users.currentSession;
 
 // src/commonSelectors.ts
@@ -2459,12 +2480,18 @@ var getUserCapabilities = (0, import_toolkit15.createSelector)([getUserRoles, ge
 });
 var getTenantCapabilities = (0, import_toolkit15.createSelector)(
   [getFeatures, getOrganization, getIsEnterprise],
-  ({ hasAuditlogs: isAuditlogEnabled, hasDeviceConfig: isDeviceConfigEnabled, hasDeviceConnect: isDeviceConnectEnabled, hasMonitor: isMonitorEnabled }, { addons = [], plan = PLANS.os.id }, isEnterprise) => {
+  ({
+    hasAuditlogs: isAuditlogEnabled,
+    hasDeviceConfig: isDeviceConfigEnabled,
+    hasDeviceConnect: isDeviceConnectEnabled,
+    hasMonitor: isMonitorEnabled,
+    isHosted
+  }, { addons = [], plan = PLANS.os.id }, isEnterprise) => {
     const canDelta = isEnterprise || plan === PLANS.professional.id;
     const hasAuditlogs = isAuditlogEnabled && isEnterprise;
-    const hasDeviceConfig = isDeviceConfigEnabled && addons.some((addon) => addon.name === "configure" && Boolean(addon.enabled));
-    const hasDeviceConnect = isDeviceConnectEnabled && (!isEnterprise || addons.some((addon) => addon.name === "troubleshoot" && Boolean(addon.enabled)));
-    const hasMonitor = isMonitorEnabled && addons.some((addon) => addon.name === "monitor" && Boolean(addon.enabled));
+    const hasDeviceConfig = addons.some((addon) => addon.name === ADDONS.configure.id && addon.enabled) || isDeviceConfigEnabled && !isHosted;
+    const hasDeviceConnect = addons.some((addon) => addon.name === ADDONS.troubleshoot.id && addon.enabled) || isDeviceConnectEnabled && !isHosted;
+    const hasMonitor = isMonitorEnabled && addons.some((addon) => addon.name === ADDONS.monitor.id && addon.enabled);
     return {
       canDelta,
       canRetry: canDelta,
@@ -2594,7 +2621,7 @@ var getAuditlogDevice = (0, import_toolkit15.createSelector)([getAuditLogEntry,
 var getRelevantRoles = (0, import_toolkit15.createSelector)([getOrganization, getRolesList], ({ service_provider }, roles) => {
   if (service_provider) {
     return roles.reduce((accu, role) => {
-      if (rolesById[role.id]) {
+      if (rolesById[role.value]) {
         return accu;
       }
       accu.push(role);
@@ -2602,20 +2629,19 @@ var getRelevantRoles = (0, import_toolkit15.createSelector)([getOrganization, ge
     }, Object.values(serviceProviderRolesById));
   }
   return Object.keys(rolesById).reverse().reduce((accu, key) => {
-    const index = accu.findIndex(({ id }) => id === key);
+    const index = accu.findIndex(({ value }) => value === key);
     accu = [accu[index], ...accu.filter((item, itemIndex) => index !== itemIndex)];
     return accu;
   }, roles);
 });
 
 // src/store.ts
+var import_react_redux = require("react-redux");
 var import_helpers6 = require("@northern.tech/utils/helpers");
 var import_toolkit16 = require("@reduxjs/toolkit");
 var { setSnackbar, uploadProgress } = actions_default;
 var keys = ["sessionDeploymentChecker", settingsKeys.initialized];
-var resetEnvironment = () => {
-  keys.map((key) => window.sessionStorage.removeItem(key));
-};
+var resetEnvironment = () => keys.forEach((key) => window.sessionStorage.removeItem(key));
 resetEnvironment();
 var commonErrorFallback = "Please check your connection.";
 var commonErrorHandler = (err, errorContext, dispatch, fallback, mightBeAuthRelated = false) => {
@@ -2641,6 +2667,14 @@ var sessionReducer = (state, action) => {
   }
   return rootReducer(state, action);
 };
+var rejectionLoggerMiddleware = () => (next) => (action) => {
+  if (action.type.endsWith("/rejected")) {
+    const { error } = action;
+    console.error("Rejection in action:", action);
+    console.error(error.stack);
+  }
+  return next(action);
+};
 var getConfiguredStore = (options = {}) => {
   const { preloadedState = {}, ...config } = options;
   return (0, import_toolkit16.configureStore)({
@@ -2656,7 +2690,7 @@ var getConfiguredStore = (options = {}) => {
         ignoredActionPaths: ["uploads", "snackbar", /payload\..*$/],
         ignoredPaths: ["app.uploadsById", "app.snackbar", "organization.externalDeviceIntegrations"]
       }
-    })
+    }).concat(rejectionLoggerMiddleware)
   });
 };
 var store = getConfiguredStore({
@@ -2773,6 +2807,7 @@ var setSearchState = (0, import_toolkit17.createAsyncThunk)(`${sliceName}/setSea
 
 // src/deploymentsSlice/thunks.ts
 var import_helpers8 = require("@northern.tech/utils/helpers");
+var import_tracking = __toESM(require("@northern.tech/utils/tracking"), 1);
 var import_toolkit18 = require("@reduxjs/toolkit");
 var import_validator = require("validator");
 var { receivedDevice, setSnackbar: setSnackbar2 } = actions_default;
@@ -2829,6 +2864,26 @@ var getDeploymentsByStatus2 = (0, import_toolkit18.createAsyncThunk)(`${sliceNam
     return Promise.all(tasks);
   });
 });
+var isWithinFirstMonth = (expirationDate) => {
+  if (!expirationDate) {
+    return false;
+  }
+  const endOfFirstMonth = new Date(expirationDate);
+  endOfFirstMonth.setMonth(endOfFirstMonth.getMonth() - 11);
+  return endOfFirstMonth > /* @__PURE__ */ new Date();
+};
+var trackDeploymentCreation = (totalDeploymentCount, hasDeployments, trial_expiration) => {
+  import_tracking.default.event({ category: "deployments", action: "create" });
+  if (!totalDeploymentCount) {
+    if (!hasDeployments) {
+      import_tracking.default.event({ category: "deployments", action: "create_initial_deployment" });
+      if (isWithinFirstMonth(trial_expiration)) {
+        import_tracking.default.event({ category: "deployments", action: "create_initial_deployment_first_month" });
+      }
+    }
+    import_tracking.default.event({ category: "deployments", action: "create_initial_deployment_user" });
+  }
+};
 var MAX_PREVIOUS_PHASES_COUNT = 5;
 var createDeployment = (0, import_toolkit18.createAsyncThunk)(`${sliceName2}/createDeployment`, ({ newDeployment, hasNewRetryDefault = false }, { dispatch, getState }) => {
   let request;
@@ -2839,6 +2894,9 @@ var createDeployment = (0, import_toolkit18.createAsyncThunk)(`${sliceName2}/cre
   } else {
     request = general_api_default.post(`${deploymentsApiUrl}/deployments`, newDeployment);
   }
+  const totalDeploymentCount = Object.values(getDeploymentsByStatus(getState())).reduce((accu, item) => accu + item.total, 0);
+  const { hasDeployments } = getGlobalSettings(getState());
+  const { trial_expiration } = getOrganization(getState());
   return request.catch((err) => commonErrorHandler(err, "Error creating deployment.", dispatch)).then((data) => {
     const lastslashindex = data.headers.location.lastIndexOf("/");
     const deploymentId = data.headers.location.substring(lastslashindex + 1);
@@ -2853,6 +2911,7 @@ var createDeployment = (0, import_toolkit18.createAsyncThunk)(`${sliceName2}/cre
       dispatch(getSingleDeployment(deploymentId)),
       dispatch(setSnackbar2("Deployment created successfully", TIMEOUTS.fiveSeconds))
     ];
+    trackDeploymentCreation(totalDeploymentCount, hasDeployments, trial_expiration);
     const { canManageUsers } = getUserCapabilities(getState());
     if (canManageUsers) {
       const { phases, retries } = newDeployment;
@@ -3090,1610 +3149,1604 @@ var saveDeltaDeploymentsConfig = (0, import_toolkit18.createAsyncThunk)(`${slice
   });
 });
 
-// src/devicesSlice/thunks.tsx
-var import_react_router_dom = require("react-router-dom");
-var import_helpers9 = require("@northern.tech/utils/helpers");
+// src/monitorSlice/thunks.ts
 var import_toolkit19 = require("@reduxjs/toolkit");
-var import_axios2 = require("axios");
-var import_pluralize = __toESM(require("pluralize"), 1);
-var import_uuid = require("uuid");
-var import_jsx_runtime2 = require("react/jsx-runtime");
-var { cleanUpUpload, initUpload, setSnackbar: setSnackbar3, uploadProgress: uploadProgress2 } = actions_default;
 var { page: defaultPage2, perPage: defaultPerPage2 } = DEVICE_LIST_DEFAULTS;
-var defaultAttributes = [
-  { scope: "identity", attribute: "status" },
-  { scope: "inventory", attribute: "artifact_name" },
-  { scope: "inventory", attribute: "device_type" },
-  { scope: "inventory", attribute: "mender_is_gateway" },
-  { scope: "inventory", attribute: "mender_gateway_system_id" },
-  { scope: "inventory", attribute: rootfsImageVersion },
-  { scope: "monitor", attribute: "alerts" },
-  { scope: "system", attribute: "created_ts" },
-  { scope: "system", attribute: "updated_ts" },
-  { scope: "system", attribute: "check_in_time" },
-  { scope: "system", attribute: "group" },
-  { scope: "tags", attribute: "name" }
-];
-var getGroups2 = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getGroups`,
-  (_, { dispatch, getState }) => general_api_default.get(`${inventoryApiUrl}/groups`).then((res) => {
-    const state = getGroupsById(getState());
-    const dynamicGroups = Object.entries(state).reduce((accu, [id, group]) => {
-      if (group.id || group.filters?.length && id !== UNGROUPED_GROUP.id) {
-        accu[id] = group;
-      }
-      return accu;
-    }, {});
-    const groups = res.data.reduce((accu, group) => {
-      accu[group] = { deviceIds: [], filters: [], total: 0, ...state[group] };
-      return accu;
-    }, dynamicGroups);
-    const filters = [{ key: "group", value: res.data, operator: DEVICE_FILTERING_OPTIONS.$nin.key, scope: "system" }];
-    return Promise.all([
-      dispatch(actions3.receivedGroups(groups)),
-      dispatch(getDevicesByStatus2({ filterSelection: filters, group: 0, page: 1, perPage: 1, status: void 0 }))
-    ]).then((promises) => {
-      const devicesRetrieval = promises[promises.length - 1] || [];
-      const { payload } = devicesRetrieval || {};
-      const result = payload[payload.length - 1] || {};
-      if (!result.total) {
-        return Promise.resolve();
-      }
-      return Promise.resolve(
-        dispatch(
-          actions3.addGroup({
-            groupName: UNGROUPED_GROUP.id,
-            group: { filters: [{ key: "group", value: res.data, operator: DEVICE_FILTERING_OPTIONS.$nin.key, scope: "system" }] }
-          })
-        )
-      );
-    });
-  })
-);
-var addDevicesToGroup = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/addDevicesToGroup`,
-  ({ group, deviceIds, isCreation }, { dispatch }) => general_api_default.patch(`${inventoryApiUrl}/groups/${group}/devices`, deviceIds).then(() => dispatch(actions3.addToGroup({ group, deviceIds }))).finally(() => isCreation ? Promise.resolve(dispatch(getGroups2())) : {})
-);
-var removeDevicesFromGroup = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/removeDevicesFromGroup`,
-  ({ group, deviceIds }, { dispatch }) => general_api_default.delete(`${inventoryApiUrl}/groups/${group}/devices`, deviceIds).then(
-    () => Promise.all([
-      dispatch(actions3.removeFromGroup({ group, deviceIds })),
-      dispatch(setSnackbar3(`The ${(0, import_pluralize.default)("devices", deviceIds.length)} ${(0, import_pluralize.default)("were", deviceIds.length)} removed from the group`, TIMEOUTS.fiveSeconds))
+var cutoffLength = 75;
+var ellipsis = "...";
+var longTextTrimmer = (text) => text.length >= cutoffLength + ellipsis.length ? `${text.substring(0, cutoffLength + ellipsis.length)}${ellipsis}` : text;
+var sanitizeDeviceAlerts = (alerts) => alerts.map((alert) => ({ ...alert, fullName: alert.name, name: longTextTrimmer(alert.name) }));
+var getDeviceAlerts = (0, import_toolkit19.createAsyncThunk)(`${sliceName4}/getDeviceAlerts`, ({ id, config = {} }, { dispatch }) => {
+  const { page = defaultPage2, perPage = defaultPerPage2, issuedBefore, issuedAfter, sortAscending = false } = config;
+  const issued_after = issuedAfter ? `&issued_after=${issuedAfter}` : "";
+  const issued_before = issuedBefore ? `&issued_before=${issuedBefore}` : "";
+  return general_api_default.get(`${monitorApiUrlv1}/devices/${id}/alerts?page=${page}&per_page=${perPage}${issued_after}${issued_before}&sort_ascending=${sortAscending}`).catch((err) => commonErrorHandler(err, `Retrieving device alerts for device ${id} failed:`, dispatch)).then(
+    (res) => Promise.all([
+      dispatch(actions4.receiveDeviceAlerts({ deviceId: id, alerts: sanitizeDeviceAlerts(res.data) })),
+      dispatch(actions4.setAlertListState({ total: Number(res.headers[headerNames.total]) }))
     ])
-  )
+  );
+});
+var getLatestDeviceAlerts = (0, import_toolkit19.createAsyncThunk)(`${sliceName4}/getLatestDeviceAlerts`, ({ id, config = {} }, { dispatch }) => {
+  const { page = defaultPage2, perPage = 10 } = config;
+  return general_api_default.get(`${monitorApiUrlv1}/devices/${id}/alerts/latest?page=${page}&per_page=${perPage}`).catch((err) => commonErrorHandler(err, `Retrieving device alerts for device ${id} failed:`, dispatch)).then((res) => Promise.resolve(dispatch(actions4.receiveLatestDeviceAlerts({ deviceId: id, alerts: sanitizeDeviceAlerts(res.data) }))));
+});
+var getIssueCountsByType2 = (0, import_toolkit19.createAsyncThunk)(`${sliceName4}/getIssueCountsByType`, ({ type, options = {} }, { dispatch, getState }) => {
+  const state = getState();
+  const { filters = getDeviceFilters(state), group, status, ...remainder } = options;
+  const { applicableFilters: nonMonitorFilters, filterTerms } = convertDeviceListStateToFilters({
+    ...remainder,
+    filters,
+    group,
+    offlineThreshold: state.app.offlineThreshold,
+    selectedIssues: [type],
+    status
+  });
+  return general_api_default.post(getSearchEndpoint(getState()), {
+    page: 1,
+    per_page: 1,
+    filters: filterTerms,
+    attributes: [{ scope: "identity", attribute: "status" }]
+  }).catch((err) => commonErrorHandler(err, `Retrieving issue counts failed:`, dispatch, commonErrorFallback)).then((res) => {
+    const total = nonMonitorFilters.length ? state.monitor.issueCounts.byType[type].total : Number(res.headers[headerNames.total]);
+    const filtered = nonMonitorFilters.length ? Number(res.headers[headerNames.total]) : total;
+    if (total === state.monitor.issueCounts.byType[type].total && filtered === state.monitor.issueCounts.byType[type].filtered) {
+      return Promise.resolve();
+    }
+    return Promise.resolve(dispatch(actions4.receiveDeviceIssueCounts({ counts: { filtered, total }, issueType: type })));
+  });
+});
+var getDeviceMonitorConfig = (0, import_toolkit19.createAsyncThunk)(
+  `${sliceName4}/getDeviceMonitorConfig`,
+  (id, { dispatch }) => general_api_default.get(`${monitorApiUrlv1}/devices/${id}/config`).catch((err) => commonErrorHandler(err, `Retrieving device monitor config for device ${id} failed:`, dispatch)).then(({ data }) => Promise.all([dispatch(actions_default.receivedDevice({ id, monitors: data }), Promise.resolve(data))]))
 );
-var getGroupNotification = (newGroup, selectedGroup) => {
-  const successMessage = "The group was updated successfully";
-  if (newGroup === selectedGroup) {
-    return [successMessage, TIMEOUTS.fiveSeconds];
+var changeNotificationSetting = (0, import_toolkit19.createAsyncThunk)(
+  `${sliceName4}/changeNotificationSetting`,
+  ({ enabled, channel = alertChannels.email }, { dispatch }) => {
+    return general_api_default.put(`${monitorApiUrlv1}/settings/global/channel/alerts/${channel}/status`, { enabled }).catch((err) => commonErrorHandler(err, `${enabled ? "En" : "Dis"}abling  ${channel} alerts failed:`, dispatch)).then(
+      () => Promise.all([
+        dispatch(actions4.changeAlertChannel({ channel, enabled })),
+        dispatch(actions_default.setSnackbar(`Successfully ${enabled ? "en" : "dis"}abled ${channel} alerts`, TIMEOUTS.fiveSeconds))
+      ])
+    );
   }
-  return [
-    /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(import_jsx_runtime2.Fragment, { children: [
-      successMessage,
-      " - ",
-      /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_react_router_dom.Link, { to: `/devices?inventory=group:eq:${newGroup}`, children: "click here" }),
-      " to see it."
-    ] }),
-    5e3,
-    void 0,
-    void 0,
-    () => {
+);
+
+// src/usersSlice/thunks.ts
+var import_helptips = require("@northern.tech/common-ui/helptips");
+
+// src/api/users-api.ts
+var import_axios2 = __toESM(require("axios"), 1);
+var Api2 = {
+  postLogin: (url, { email: username, password, ...body }) => import_axios2.default.post(url, body, { ...commonRequestConfig, auth: { username, password } }).then((res) => ({ text: res.data, code: res.status, contentType: res.headers?.["content-type"] })),
+  putVerifyTFA: (url, userData) => {
+    let body = {};
+    if (userData.hasOwnProperty("token2fa")) {
+      body = { token2fa: userData.token2fa };
     }
-  ];
+    return import_axios2.default.put(url, body, { ...commonRequestConfig, headers: { ...commonRequestConfig.headers, Authorization: `Bearer ${getToken()}` } });
+  }
 };
-var addStaticGroup = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/addStaticGroup`,
-  ({ group, devices }, { dispatch, getState }) => Promise.resolve(dispatch(addDevicesToGroup({ group, deviceIds: devices.map(({ id }) => id), isCreation: true }))).then(
-    () => Promise.resolve(
-      dispatch(
-        actions3.addGroup({
-          group: { deviceIds: [], total: 0, filters: [], ...getState().devices.groups.byId[group] },
-          groupName: group
-        })
-      )
-    ).then(
-      () => Promise.all([
-        dispatch(setDeviceListState({ setOnly: true })),
-        dispatch(getGroups2()),
-        dispatch(setSnackbar3(...getGroupNotification(group, getState().devices.groups.selectedGroup)))
-      ])
-    )
-  ).catch((err) => commonErrorHandler(err, `Group could not be updated:`, dispatch))
+var users_api_default = Api2;
+
+// src/usersSlice/thunks.ts
+var import_helpers9 = require("@northern.tech/utils/helpers");
+var import_retrytimer = require("@northern.tech/utils/retrytimer");
+var import_toolkit20 = require("@reduxjs/toolkit");
+var import_md5 = __toESM(require("md5"), 1);
+var import_universal_cookie3 = __toESM(require("universal-cookie"), 1);
+var cookies3 = new import_universal_cookie3.default();
+var { setAnnouncement, setSnackbar: setSnackbar3 } = actions_default;
+var handleLoginError = (err, { token2fa: has2FA, password }, rejectWithValue) => (dispatch) => {
+  const errorText = (0, import_helpers9.extractErrorMessage)(err);
+  const is2FABackend = errorText.includes("2fa");
+  if (is2FABackend && !has2FA) {
+    return rejectWithValue({ error: "2fa code missing" });
+  }
+  if (password === void 0) {
+    return Promise.reject();
+  }
+  const twoFAError = is2FABackend ? " and verification code" : "";
+  const errorMessage = `There was a problem logging in. Please check your email${twoFAError ? "," : " and"} password${twoFAError}. If you still have problems, contact an administrator.`;
+  return Promise.reject(dispatch(setSnackbar3({ message: (0, import_helpers9.preformatWithRequestID)(err.response, errorMessage), action: "Copy to clipboard" })));
+};
+var loginUser = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/loginUser`,
+  ({ stayLoggedIn, ...userData }, { dispatch, rejectWithValue }) => users_api_default.postLogin(`${useradmApiUrlv1}/auth/login`, { ...userData, no_expiry: stayLoggedIn }).catch((err) => {
+    cleanUp();
+    return Promise.reject(dispatch(handleLoginError(err, userData, rejectWithValue)));
+  }).then(({ text: response, contentType }) => {
+    if (contentType.includes(APPLICATION_JSON_CONTENT_TYPE)) {
+      const { id, kind } = response;
+      const type = kind.split("/")[1];
+      const ssoLoginUrl = SSO_TYPES[type].getStartUrl(id);
+      window.location.replace(ssoLoginUrl);
+      return;
+    }
+    const token = response;
+    if (contentType !== APPLICATION_JWT_CONTENT_TYPE || !token) {
+      return;
+    }
+    let now = /* @__PURE__ */ new Date();
+    now.setSeconds(now.getSeconds() + maxSessionAge);
+    const expiresAt = stayLoggedIn ? void 0 : now.toISOString();
+    setSessionInfo({ token, expiresAt });
+    cookies3.remove("JWT", { path: "/" });
+    return dispatch(getUser(OWN_USER_ID)).unwrap().catch((e) => {
+      cleanUp();
+      return Promise.reject(dispatch(setSnackbar3((0, import_helpers9.extractErrorMessage)(e))));
+    }).then(() => {
+      window.sessionStorage.removeItem("pendings-redirect");
+      if (window.location.pathname !== "/ui/") {
+        window.location.replace("/ui/");
+      }
+      return Promise.resolve(dispatch(actions8.successfullyLoggedIn({ expiresAt, token })));
+    });
+  })
 );
-var removeStaticGroup = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/removeStaticGroup`,
-  (groupName, { dispatch }) => general_api_default.delete(`${inventoryApiUrl}/groups/${groupName}`).then(
-    () => Promise.all([
-      dispatch(actions3.removeGroup(groupName)),
-      dispatch(getGroups2()),
-      dispatch(setSnackbar3("Group was removed successfully", TIMEOUTS.fiveSeconds))
-    ])
+var logoutUser = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/logoutUser`, (_, { dispatch, getState }) => {
+  if (Object.keys(getState().app.uploadsById).length) {
+    return Promise.reject();
+  }
+  return general_api_default.post(`${useradmApiUrlv1}/auth/logout`).finally(() => {
+    cleanUp();
+    (0, import_retrytimer.clearAllRetryTimers)(setSnackbar3);
+    return Promise.resolve(dispatch({ type: USER_LOGOUT }));
+  });
+});
+var switchUserOrganization = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/switchUserOrganization`, (tenantId, { getState }) => {
+  if (Object.keys(getState().app.uploadsById).length) {
+    return Promise.reject();
+  }
+  return general_api_default.get(`${useradmApiUrlv1}/users/tenants/${tenantId}/token`).then(({ data: token }) => {
+    window.sessionStorage.setItem("tenantChanged", "true");
+    setSessionInfo({ ...getSessionInfo(), token });
+    window.location.reload();
+  });
+});
+var passwordResetStart = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/passwordResetStart`,
+  (email, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/auth/password-reset/start`, { email }).catch(
+    (err) => commonErrorHandler(err, `The password reset request cannot be processed:`, dispatch, void 0, true)
   )
 );
-var getDynamicGroups = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDynamicGroups`,
-  (_, { dispatch, getState }) => general_api_default.get(`${inventoryApiUrlV2}/filters?per_page=${MAX_PAGE_SIZE}`).then(({ data: filters }) => {
-    const state = getGroupsById(getState());
-    const staticGroups = Object.entries(state).reduce((accu, [id, group]) => {
-      if (!(group.id || group.filters?.length)) {
-        accu[id] = group;
-      }
-      return accu;
-    }, {});
-    const groups = (filters || []).reduce((accu, filter) => {
-      accu[filter.name] = {
-        deviceIds: [],
-        total: 0,
-        ...state[filter.name],
-        id: filter.id,
-        filters: mapTermsToFilters(filter.terms)
-      };
-      return accu;
-    }, staticGroups);
-    return Promise.resolve(dispatch(actions3.receivedGroups(groups)));
-  }).catch(() => console.log("Dynamic group retrieval failed - likely accessing a non-enterprise backend"))
+var passwordResetComplete = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/passwordResetComplete`,
+  ({ secretHash, newPassword }, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/auth/password-reset/complete`, { secret_hash: secretHash, password: newPassword }).catch((err = {}) => {
+    const { error, response = {} } = err;
+    let errorMsg = "";
+    if (response.status == 400) {
+      errorMsg = "the link you are using expired or the request is not valid, please try again.";
+    } else {
+      errorMsg = error;
+    }
+    dispatch(setSnackbar3("The password reset request cannot be processed: " + errorMsg));
+    return Promise.reject(err);
+  })
 );
-var addDynamicGroup = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/addDynamicGroup`,
-  ({ groupName, filterPredicates }, { dispatch, getState }) => general_api_default.post(`${inventoryApiUrlV2}/filters`, { name: groupName, terms: mapFiltersToTerms(filterPredicates) }).then(
-    (res) => Promise.resolve(
-      dispatch(
-        actions3.addGroup({
-          groupName,
-          group: {
-            id: res.headers[headerNames.location].substring(res.headers[headerNames.location].lastIndexOf("/") + 1),
-            filters: filterPredicates
-          }
-        })
-      )
-    ).then(() => {
-      const { cleanedFilters } = getGroupFilters(groupName, getState().devices.groups);
-      return Promise.all([
-        dispatch(actions3.setDeviceFilters(cleanedFilters)),
-        dispatch(setSnackbar3(...getGroupNotification(groupName, getState().devices.groups.selectedGroup))),
-        dispatch(getDynamicGroups())
-      ]);
-    })
-  ).catch((err) => commonErrorHandler(err, `Group could not be updated:`, dispatch))
+var verifyEmailStart = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/verifyEmailStart`,
+  (_, { dispatch, getState }) => general_api_default.post(`${useradmApiUrlv1}/auth/verify-email/start`, { email: getCurrentUser(getState()).email }).catch((err) => commonErrorHandler(err, "An error occured starting the email verification process:", dispatch)).finally(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))))
 );
-var updateDynamicGroup = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/updateDynamicGroup`, ({ groupName, filterPredicates }, { dispatch, getState }) => {
-  const filterId = getState().devices.groups.byId[groupName].id;
-  return general_api_default.delete(`${inventoryApiUrlV2}/filters/${filterId}`).then(() => Promise.resolve(dispatch(addDynamicGroup({ groupName, filterPredicates }))));
-});
-var removeDynamicGroup = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/removeDynamicGroup`, (groupName, { dispatch, getState }) => {
-  const filterId = getState().devices.groups.byId[groupName].id;
-  return general_api_default.delete(`${inventoryApiUrlV2}/filters/${filterId}`).then(
-    () => Promise.all([dispatch(actions3.removeGroup(groupName)), dispatch(setSnackbar3("Group was removed successfully", TIMEOUTS.fiveSeconds))])
-  );
-});
-var getGroupFilters = (group, groupsState, filters = []) => {
-  const groupName = group === UNGROUPED_GROUP.id || group === UNGROUPED_GROUP.name ? UNGROUPED_GROUP.id : group;
-  const selectedGroup = groupsState.byId[groupName];
-  const groupFilterLength = selectedGroup?.filters?.length || 0;
-  const cleanedFilters = groupFilterLength ? [...filters, ...selectedGroup.filters].filter(filtersFilter) : filters;
-  return { cleanedFilters, groupName, selectedGroup, groupFilterLength };
-};
-var selectGroup = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/selectGroup`, ({ group, filters = [] }, { dispatch, getState }) => {
-  const { cleanedFilters, groupName, selectedGroup, groupFilterLength } = getGroupFilters(group, getState().devices.groups, filters);
-  if (getSelectedGroup(getState()) === groupName && (filters.length === 0 && !groupFilterLength || filters.length === cleanedFilters.length)) {
-    return Promise.resolve();
-  }
-  let tasks = [];
-  if (groupFilterLength) {
-    tasks.push(dispatch(actions3.setDeviceFilters(cleanedFilters)));
+var verifyEmailComplete = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/verifyEmailComplete`,
+  (secret_hash, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/auth/verify-email/complete`, { secret_hash }).catch((err) => commonErrorHandler(err, "An error occured completing the email verification process:", dispatch)).finally(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))))
+);
+var verify2FA = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/verify2FA`,
+  (tfaData, { dispatch }) => users_api_default.putVerifyTFA(`${useradmApiUrlv1}/2faverify`, tfaData).then(() => Promise.resolve(dispatch(getUser(OWN_USER_ID)))).catch(
+    (err) => commonErrorHandler(err, "An error occured validating the verification code: failed to verify token, please try again.", dispatch, void 0, true)
+  )
+);
+var getUserList = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getUserList`,
+  (_, { dispatch, getState }) => general_api_default.get(`${useradmApiUrlv1}/users`).then((res) => {
+    const currentUsersById = getUsersById(getState());
+    const users = res.data.reduce(
+      (accu, item) => {
+        accu[item.id] = {
+          ...accu[item.id],
+          ...item
+        };
+        return accu;
+      },
+      { ...currentUsersById }
+    );
+    return dispatch(actions8.receivedUserList(users));
+  }).catch((err) => commonErrorHandler(err, `Users couldn't be loaded.`, dispatch, commonErrorFallback))
+);
+var getUser = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getUser`,
+  (id, { dispatch, rejectWithValue }) => general_api_default.get(`${useradmApiUrlv1}/users/${id}`).then(
+    ({ data: user }) => Promise.all([
+      dispatch(actions8.receivedUser(user)),
+      dispatch(setHideAnnouncement({ shouldHide: false, userId: user.id })),
+      dispatch(updateUserColumnSettings({ currentUserId: user.id })),
+      user
+    ])
+  ).catch((e) => rejectWithValue(e))
+);
+var initializeSelf = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/initializeSelf`, (_, { dispatch }) => dispatch(getUser(OWN_USER_ID)));
+var updateUserColumnSettings = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/updateUserColumnSettings`, ({ columns, currentUserId }, { dispatch, getState }) => {
+  const userId = currentUserId ?? getCurrentUser(getState()).id;
+  const storageKey = `${userId}-column-widths`;
+  let customColumns = [];
+  if (!columns) {
+    try {
+      customColumns = JSON.parse(window.localStorage.getItem(storageKey)) || customColumns;
+    } catch {
+    }
   } else {
-    tasks.push(dispatch(actions3.setDeviceFilters(filters)));
-    tasks.push(dispatch(getGroupDevices({ group: groupName, perPage: 1, shouldIncludeAllStates: true })));
+    customColumns = columns;
   }
-  const selectedGroupName = selectedGroup || !Object.keys(getGroupsById(getState())).length ? groupName : void 0;
-  tasks.push(dispatch(actions3.selectGroup(selectedGroupName)));
-  return Promise.all(tasks);
+  window.localStorage.setItem(storageKey, JSON.stringify(customColumns));
+  return Promise.resolve(dispatch(actions8.setCustomColumns(customColumns)));
 });
-var getEarliestTs = (dateA = "", dateB = "") => !dateA || !dateB ? dateA || dateB : dateA < dateB ? dateA : dateB;
-var reduceReceivedDevices = (devices, ids, state, status) => devices.reduce(
-  (accu, device) => {
-    const stateDevice = getDeviceById(state, device.id);
-    const {
-      attributes: storedAttributes = {},
-      identity_data: storedIdentity = {},
-      monitor: storedMonitor = {},
-      tags: storedTags = {},
-      group: storedGroup
-    } = stateDevice;
-    const { identity, inventory, monitor, system = {}, tags } = mapDeviceAttributes(device.attributes);
-    device.tags = { ...storedTags, ...tags };
-    device.group = system.group ?? storedGroup;
-    device.monitor = { ...storedMonitor, ...monitor };
-    device.identity_data = { ...storedIdentity, ...identity, ...device.identity_data ? device.identity_data : {} };
-    device.status = status ? status : device.status || identity.status;
-    device.check_in_time_rounded = system.check_in_time ?? stateDevice.check_in_time_rounded;
-    device.check_in_time_exact = device.check_in_time ?? stateDevice.check_in_time_exact;
-    device.created_ts = getEarliestTs(getEarliestTs(system.created_ts, device.created_ts), stateDevice.created_ts);
-    device.updated_ts = device.attributes ? device.updated_ts : stateDevice.updated_ts;
-    device.isNew = new Date(device.created_ts) > new Date(state.app.newThreshold);
-    device.isOffline = new Date(device.check_in_time_rounded) < new Date(state.app.offlineThreshold) || device.check_in_time_rounded === void 0;
-    device.attributes = device.attributes ? { ...storedAttributes, ...inventory } : storedAttributes;
-    accu.devicesById[device.id] = { ...stateDevice, ...device };
-    accu.ids.push(device.id);
-    return accu;
+var userActions = {
+  add: {
+    successMessage: "The user was added successfully.",
+    errorMessage: "adding"
   },
-  { ids, devicesById: {} }
-);
-var getGroupDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getGroupDevices`, (options, { dispatch, getState }) => {
-  const { group, shouldIncludeAllStates, ...remainder } = options;
-  const { cleanedFilters: filterSelection } = getGroupFilters(group, getState().devices.groups);
-  return Promise.resolve(
-    dispatch(getDevicesByStatus2({ ...remainder, filterSelection, group, status: shouldIncludeAllStates ? void 0 : DEVICE_STATES.accepted }))
-  ).unwrap().then((results) => {
-    if (!group) {
-      return Promise.resolve();
-    }
-    const { deviceAccu, total } = results[results.length - 1];
-    const stateGroup = getState().devices.groups.byId[group];
-    if (!stateGroup && !total && !deviceAccu.ids.length) {
-      return Promise.resolve();
-    }
-    return Promise.resolve(
-      dispatch(
-        actions3.addGroup({
-          group: {
-            deviceIds: deviceAccu.ids.length === total || deviceAccu.ids.length > stateGroup?.deviceIds ? deviceAccu.ids : stateGroup.deviceIds,
-            total
-          },
-          groupName: group
-        })
-      )
-    );
-  });
-});
-var getAllGroupDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getAllGroupDevices`, (group, { dispatch, getState }) => {
-  if (!group || !!group && (!getGroupsById(getState())[group] || getGroupsById(getState())[group].filters.length)) {
-    return Promise.resolve();
+  create: {
+    successMessage: "The user was created successfully.",
+    errorMessage: "creating"
+  },
+  edit: {
+    successMessage: "The user has been updated.",
+    errorMessage: "editing"
+  },
+  remove: {
+    successMessage: "The user was removed from the system.",
+    errorMessage: "removing"
   }
-  const { attributes, filterTerms } = prepareSearchArguments({
-    filters: [],
-    group,
-    state: getState(),
-    status: DEVICE_STATES.accepted
-  });
-  const getAllDevices = (perPage = MAX_PAGE_SIZE, page = defaultPage2, devices = []) => general_api_default.post(getSearchEndpoint(getState()), {
-    page,
-    per_page: perPage,
-    filters: filterTerms,
-    attributes
-  }).then((res) => {
-    const state = getState();
-    const deviceAccu = reduceReceivedDevices(res.data, devices, state);
-    dispatch(actions3.receivedDevices(deviceAccu.devicesById));
-    const total = Number(res.headers[headerNames.total]);
-    if (total > perPage * page) {
-      return getAllDevices(perPage, page + 1, deviceAccu.ids);
-    }
-    return Promise.resolve(dispatch(actions3.addGroup({ group: { deviceIds: deviceAccu.ids, total: deviceAccu.ids.length }, groupName: group })));
-  });
-  return getAllDevices();
+};
+var userActionErrorHandler = (err, type, dispatch) => commonErrorHandler(err, `There was an error ${userActions[type].errorMessage} the user.`, dispatch);
+var createUser = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/createUser`,
+  ({ shouldResetPassword, ...userData }, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/users`, { ...userData, send_reset_password: shouldResetPassword }).then(() => Promise.all([dispatch(actions8.createdUser(userData)), dispatch(getUserList()), dispatch(setSnackbar3(userActions.create.successMessage))])).catch((err) => userActionErrorHandler(err, "create", dispatch))
+);
+var removeUser = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/removeUser`,
+  (userId, { dispatch }) => general_api_default.delete(`${useradmApiUrlv1}/users/${userId}`).then(() => Promise.all([dispatch(actions8.removedUser(userId)), dispatch(getUserList()), dispatch(setSnackbar3(userActions.remove.successMessage))])).catch((err) => userActionErrorHandler(err, "remove", dispatch))
+);
+var editUser = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/editUser`,
+  ({ id, ...userData }, { dispatch, getState }) => general_api_default.put(`${useradmApiUrlv1}/users/${id}`, userData).then(
+    () => Promise.all([
+      dispatch(actions8.updatedUser({ ...userData, id: id === OWN_USER_ID ? getCurrentUser(getState()).id : id })),
+      dispatch(setSnackbar3(userActions.edit.successMessage))
+    ])
+  )
+);
+var addUserToCurrentTenant = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/addUserToTenant`, (userId, { dispatch, getState }) => {
+  const { id } = getOrganization(getState());
+  return general_api_default.post(`${useradmApiUrlv1}/users/${userId}/assign`, { tenant_ids: [id] }).catch((err) => commonErrorHandler(err, `There was an error adding the user to your organization:`, dispatch)).then(() => Promise.all([dispatch(setSnackbar3(userActions.add.successMessage)), dispatch(getUserList())]));
 });
-var getAllDynamicGroupDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getAllDynamicGroupDevices`, (group, { dispatch, getState }) => {
-  if (!!group && (!getGroupsById(getState())[group] || !getGroupsById(getState())[group].filters.length)) {
-    return Promise.resolve();
-  }
-  const { attributes, filterTerms: filters } = prepareSearchArguments({
-    filters: getState().devices.groups.byId[group].filters,
-    state: getState(),
-    status: DEVICE_STATES.accepted
-  });
-  const getAllDevices = (perPage = MAX_PAGE_SIZE, page = defaultPage2, devices = []) => general_api_default.post(getSearchEndpoint(getState()), { page, per_page: perPage, filters, attributes }).then((res) => {
-    const state = getState();
-    const deviceAccu = reduceReceivedDevices(res.data, devices, state);
-    dispatch(actions3.receivedDevices(deviceAccu.devicesById));
-    const total = Number(res.headers[headerNames.total]);
-    if (total > deviceAccu.ids.length) {
-      return getAllDevices(perPage, page + 1, deviceAccu.ids);
+var enableUser2fa = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/enableUser2fa`,
+  (userId = OWN_USER_ID, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/users/${userId}/2fa/enable`).catch((err) => commonErrorHandler(err, `There was an error enabling Two Factor authentication for the user.`, dispatch)).then(() => Promise.resolve(dispatch(getUser(userId))))
+);
+var disableUser2fa = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/disableUser2fa`,
+  (userId = OWN_USER_ID, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/users/${userId}/2fa/disable`).catch((err) => commonErrorHandler(err, `There was an error disabling Two Factor authentication for the user.`, dispatch)).then(() => Promise.all([dispatch(getUser(userId)), dispatch(actions8.receivedQrCode(null))]))
+);
+var mapHttpPermission = (permission) => Object.entries(uiPermissionsByArea).reduce(
+  (accu, [area, definition]) => {
+    const endpointMatches = definition.endpoints.filter(
+      (endpoint) => endpoint.path.test(permission.value) && (endpoint.types.includes(permission.type) || permission.type === PermissionTypes.Any)
+    );
+    if (permission.value === PermissionTypes.Any || permission.value.includes(apiRoot) && endpointMatches.length) {
+      const endpointUiPermission = endpointMatches.reduce((endpointAccu, endpoint) => [...endpointAccu, ...endpoint.uiPermissions], []);
+      const collector = (endpointUiPermission || definition.uiPermissions).reduce((permissionsAccu, uiPermission) => {
+        if (permission.type === PermissionTypes.Any || !endpointMatches.length && uiPermission.verbs.some((verb) => verb === permission.type)) {
+          permissionsAccu.push(uiPermission.value);
+        }
+        return permissionsAccu;
+      }, []).filter(import_helpers9.duplicateFilter);
+      if (Array.isArray(accu[area])) {
+        accu[area] = [...accu[area], ...collector].filter(import_helpers9.duplicateFilter);
+      } else {
+        accu[area] = mergePermissions(accu[area], { [scopedPermissionAreas[area].excessiveAccessSelector]: collector });
+      }
     }
-    return Promise.resolve(dispatch(actions3.addGroup({ group: { deviceIds: deviceAccu.ids, total }, groupName: group })));
-  });
-  return getAllDevices();
-});
-var getDeviceById2 = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceById`,
-  (id, { dispatch, getState }) => general_api_default.get(`${inventoryApiUrl}/devices/${id}`).then((res) => {
-    const device = reduceReceivedDevices([res.data], [], getState()).devicesById[id];
-    device.etag = res.headers.etag;
-    dispatch(actions3.receivedDevice(device));
-    return Promise.resolve(device);
-  }).catch((err) => {
-    const errMsg = (0, import_helpers9.extractErrorMessage)(err);
-    if (errMsg.includes("Not Found")) {
-      console.log(`${id} does not have any inventory information`);
-      const device = reduceReceivedDevices(
-        [
-          {
-            id,
-            attributes: [
-              { name: "status", value: "decomissioned", scope: "identity" },
-              { name: "decomissioned", value: "true", scope: "inventory" }
-            ]
-          }
-        ],
-        [],
-        getState()
-      ).devicesById[id];
-      dispatch(actions3.receivedDevice(device));
-    }
-  })
+    return accu;
+  },
+  { ...emptyUiPermissions }
 );
-var getDeviceInfo = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getDeviceInfo`, (deviceId, { dispatch, getState }) => {
-  const device = getDeviceById(getState(), deviceId);
-  const { hasDeviceConfig, hasDeviceConnect, hasMonitor } = getTenantCapabilities(getState());
-  const { canConfigure } = getUserCapabilities(getState());
-  const integrations = getDeviceTwinIntegrations(getState());
-  let tasks = [dispatch(getDeviceAuth(deviceId)), ...integrations.map((integration) => dispatch(getDeviceTwin({ deviceId, integration })))];
-  if (hasDeviceConfig && canConfigure && [DEVICE_STATES.accepted, DEVICE_STATES.preauth].includes(device.status)) {
-    tasks.push(dispatch(getDeviceConfig(deviceId)));
-  }
-  if (device.status === DEVICE_STATES.accepted) {
-    tasks.push(dispatch(getDeviceById2(deviceId)));
-    if (hasDeviceConnect) {
-      tasks.push(dispatch(getDeviceConnect(deviceId)));
-    }
-    if (hasMonitor) {
-      tasks.push(dispatch(getLatestDeviceAlerts({ id: deviceId })));
-      tasks.push(dispatch(getDeviceMonitorConfig(deviceId)));
-    }
+var permissionActionTypes = {
+  any: mapHttpPermission,
+  CREATE_DEPLOYMENT: (permission) => permission.type === PermissionTypes.DeviceGroup ? {
+    deployments: [uiPermissionsById.deploy.value],
+    groups: { [permission.value]: [uiPermissionsById.deploy.value] }
+  } : {},
+  http: mapHttpPermission,
+  REMOTE_TERMINAL: (permission) => permission.type === PermissionTypes.DeviceGroup ? {
+    groups: { [permission.value]: [uiPermissionsById.connect.value] }
+  } : {},
+  VIEW_DEVICE: (permission) => permission.type === PermissionTypes.DeviceGroup ? {
+    groups: { [permission.value]: [uiPermissionsById.read.value] }
+  } : {}
+};
+var combinePermissions = (existingPermissions, additionalPermissions = {}) => Object.entries(additionalPermissions).reduce((accu, [name, permissions]) => {
+  let maybeExistingPermissions = accu[name] || [];
+  accu[name] = [...permissions, ...maybeExistingPermissions].filter(import_helpers9.duplicateFilter);
+  return accu;
+}, existingPermissions);
+var tryParseCustomPermission = (permission) => {
+  const uiPermissions = permissionActionTypes[permission.action](permission.object);
+  const result = mergePermissions({ ...emptyUiPermissions }, uiPermissions);
+  return { isCustom: true, permission, result };
+};
+var customPermissionHandler = (accu, permission) => {
+  let processor = tryParseCustomPermission(permission);
+  return {
+    ...accu,
+    isCustom: accu.isCustom || processor.isCustom,
+    uiPermissions: mergePermissions(accu.uiPermissions, processor.result)
+  };
+};
+var mapPermissionSet = (permissionSetName, names, scope, existingGroupsPermissions = {}) => {
+  const permission = Object.values(uiPermissionsById).find((permission2) => permission2.permissionSets[scope] === permissionSetName).value;
+  const scopedPermissions = names.reduce((accu, name) => combinePermissions(accu, { [name]: [permission] }), existingGroupsPermissions);
+  return Object.entries(scopedPermissions).reduce((accu, [key, permissions]) => ({ ...accu, [key]: deriveImpliedAreaPermissions(scope, permissions) }), {});
+};
+var isEmptyPermissionSet = (permissionSet) => !Object.values(permissionSet).reduce((accu, permissions) => {
+  if (Array.isArray(permissions)) {
+    return accu || !!permissions.length;
   }
-  return Promise.all(tasks);
-});
-var deriveInactiveDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/deriveInactiveDevices`, (deviceIds, { dispatch, getState }) => {
-  const yesterday = /* @__PURE__ */ new Date();
-  yesterday.setDate(yesterday.getDate() - 1);
-  const yesterdaysIsoString = yesterday.toISOString();
-  const devices = deviceIds.reduce(
-    (accu, id) => {
-      const device = getDeviceById(getState(), id);
-      if (device && device.updated_ts > yesterdaysIsoString) {
-        accu.active.push(id);
-      } else {
-        accu.inactive.push(id);
+  return accu || !(0, import_helpers9.isEmpty)(permissions);
+}, false);
+var parseRolePermissions = ({ permission_sets_with_scope = [], permissions = [] }, permissionSets) => {
+  const preliminaryResult = permission_sets_with_scope.reduce(
+    (accu, permissionSet) => {
+      let processor = permissionSets[permissionSet.name];
+      if (!processor) {
+        return accu;
       }
-      return accu;
+      const scope = Object.keys(scopedPermissionAreas).find((scope2) => uiPermissionsByArea[scope2].scope === permissionSet.scope?.type);
+      if (scope) {
+        const result = mapPermissionSet(permissionSet.name, permissionSet.scope.value, scope, accu.uiPermissions[scope]);
+        return { ...accu, uiPermissions: { ...accu.uiPermissions, [scope]: result } };
+      } else if (isEmptyPermissionSet(processor.result)) {
+        return processor.permissions.reduce(customPermissionHandler, accu);
+      }
+      return {
+        ...accu,
+        isCustom: accu.isCustom || processor.isCustom,
+        uiPermissions: mergePermissions(accu.uiPermissions, processor.result)
+      };
     },
-    { active: [], inactive: [] }
+    { isCustom: false, uiPermissions: { ...emptyUiPermissions, groups: {}, releases: {} } }
   );
-  return dispatch(actions3.setInactiveDevices({ activeDeviceTotal: devices.active.length, inactiveDeviceTotal: devices.inactive.length }));
-});
-var getDeviceCount = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceCount`,
-  (status, { dispatch, getState }) => general_api_default.post(getSearchEndpoint(getState()), {
-    page: 1,
-    per_page: 1,
-    filters: mapFiltersToTerms([{ key: "status", value: status, operator: DEVICE_FILTERING_OPTIONS.$eq.key, scope: "identity" }]),
-    attributes: defaultAttributes
-  }).then((response) => {
-    const count = Number(response.headers[headerNames.total]);
-    if (status) {
-      return dispatch(actions3.setDevicesCountByStatus({ count, status }));
+  return permissions.reduce(customPermissionHandler, preliminaryResult);
+};
+var normalizeRbacRoles = (roles, rolesById2, permissionSets) => roles.reduce(
+  (accu, role) => {
+    let normalizedPermissions;
+    let isCustom = false;
+    if (rolesById2[role.name]) {
+      normalizedPermissions = {
+        ...rolesById2[role.name].uiPermissions,
+        groups: { ...rolesById2[role.name].uiPermissions.groups },
+        releases: { ...rolesById2[role.name].uiPermissions.releases }
+      };
+    } else {
+      const result = parseRolePermissions(role, permissionSets);
+      normalizedPermissions = result.uiPermissions;
+      isCustom = result.isCustom;
     }
-    return dispatch(actions3.setTotalDevices(count));
-  })
-);
-var getAllDeviceCounts = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getAllDeviceCounts`,
-  (_, { dispatch }) => Promise.all([DEVICE_STATES.accepted, DEVICE_STATES.pending].map((status) => dispatch(getDeviceCount(status))))
+    const roleState = accu[role.name] ?? { ...emptyRole };
+    accu[role.name] = {
+      ...roleState,
+      ...role,
+      description: roleState.description ? roleState.description : role.description,
+      editable: !rolesById[role.name] && !isCustom && (typeof roleState.editable !== "undefined" ? roleState.editable : true),
+      isCustom,
+      name: roleState.name ? roleState.name : role.name,
+      uiPermissions: normalizedPermissions
+    };
+    return accu;
+  },
+  { ...rolesById2 }
 );
-var getDeviceLimit2 = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceLimit`,
-  (_, { dispatch }) => general_api_default.get(`${deviceAuthV2}/limits/max_devices`).then((res) => dispatch(actions3.setDeviceLimit(res.data.limit)))
+var getPermissionSets = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getPermissionSets`,
+  (_, { dispatch, getState }) => general_api_default.get(`${useradmApiUrlv2}/permission_sets?per_page=500`).then(({ data }) => {
+    const permissionSets = data.reduce(
+      (accu, permissionSet) => {
+        const permissionSetState = accu[permissionSet.name] ?? {};
+        let permissionSetObject = { ...permissionSetState, ...permissionSet };
+        permissionSetObject.result = Object.values(uiPermissionsById).reduce(
+          (accu2, item) => Object.entries(item.permissionSets).reduce((collector, [area, permissionSet2]) => {
+            if (scopedPermissionAreas[area]) {
+              return collector;
+            }
+            if (permissionSet2 === permissionSetObject.name) {
+              collector[area] = [...collector[area], item.value].filter(import_helpers9.duplicateFilter);
+            }
+            return collector;
+          }, accu2),
+          { ...emptyUiPermissions, ...permissionSetObject.result ?? {} }
+        );
+        const scopes = Object.values(scopedPermissionAreas).reduce((accu2, { key, scopeType }) => {
+          if (permissionSetObject.supported_scope_types?.includes(key) || permissionSetObject.supported_scope_types?.includes(scopeType)) {
+            accu2.push(key);
+          }
+          return accu2;
+        }, []);
+        permissionSetObject = scopes.reduce((accu2, scope) => {
+          accu2.result[scope] = mapPermissionSet(permissionSetObject.name, [scopedPermissionAreas[scope].excessiveAccessSelector], scope);
+          return accu2;
+        }, permissionSetObject);
+        accu[permissionSet.name] = permissionSetObject;
+        return accu;
+      },
+      { ...getState().users.permissionSetsById }
+    );
+    return Promise.all([dispatch(actions8.receivedPermissionSets(permissionSets)), permissionSets]);
+  }).catch(() => console.log("Permission set retrieval failed - likely accessing a non-RBAC backend"))
 );
-var setDeviceListState = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/setDeviceListState`,
-  ({ shouldSelectDevices = true, forceRefresh, fetchAuth = true, ...selectionState }, { dispatch, getState }) => {
-    const currentState = getDeviceListState(getState());
-    const refreshTrigger = forceRefresh ? !currentState.refreshTrigger : selectionState.refreshTrigger;
-    let nextState = {
-      ...currentState,
-      setOnly: false,
-      refreshTrigger,
-      ...selectionState,
-      sort: { ...currentState.sort, ...selectionState.sort }
-    };
-    let tasks = [];
-    const { isLoading: currentLoading, deviceIds: currentDevices, selection: currentSelection, ...currentRequestState } = currentState;
-    const { isLoading: nextLoading, deviceIds: nextDevices, selection: nextSelection, ...nextRequestState } = nextState;
-    if (!nextState.setOnly && !(0, import_helpers9.deepCompare)(currentRequestState, nextRequestState)) {
-      const { direction: sortDown = SORTING_OPTIONS.desc, key: sortCol, scope: sortScope } = nextState.sort ?? {};
-      const sortBy = sortCol ? [{ attribute: sortCol, order: sortDown, scope: sortScope }] : void 0;
-      const applicableSelectedState = nextState.state === ALL_DEVICE_STATES ? void 0 : nextState.state;
-      nextState.isLoading = true;
-      tasks.push(
-        dispatch(getDevicesByStatus2({ ...nextState, status: applicableSelectedState, sortOptions: sortBy, fetchAuth })).unwrap().then((results) => {
-          const { deviceAccu, total } = results[results.length - 1];
-          const devicesState = shouldSelectDevices ? { deviceIds: deviceAccu.ids, total, isLoading: false } : { isLoading: false };
-          return Promise.resolve(dispatch(actions3.setDeviceListState(devicesState)));
-        }).catch(() => Promise.resolve({ isLoading: false }))
-      );
+var getRoles = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getRoles`,
+  (_, { dispatch, getState }) => Promise.all([general_api_default.get(`${useradmApiUrlv2}/roles?per_page=500`), dispatch(getPermissionSets())]).then((results) => {
+    if (!results) {
+      return Promise.resolve();
     }
-    tasks.push(dispatch(actions3.setDeviceListState(nextState)));
-    return Promise.all(tasks);
-  }
+    const [{ data: roles }, { payload: permissionSetTasks }] = results;
+    const rolesById2 = normalizeRbacRoles(roles, getRolesById(getState()), permissionSetTasks[permissionSetTasks.length - 1]);
+    return Promise.resolve(dispatch(actions8.receivedRoles(rolesById2)));
+  }).catch(() => console.log("Role retrieval failed - likely accessing a non-RBAC backend"))
 );
-var getDevicesByStatus2 = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getDevicesByStatus`, (options, { dispatch, getState }) => {
-  const {
-    status,
-    fetchAuth = true,
-    filterSelection,
-    group,
-    selectedIssues = [],
-    page = defaultPage2,
-    perPage = defaultPerPage2,
-    sortOptions = [],
-    selectedAttributes = []
-  } = options;
-  const state = getState();
-  const { applicableFilters, filterTerms } = convertDeviceListStateToFilters({
-    filters: filterSelection ?? getDeviceFilters(state),
-    group: group ?? getSelectedGroup(state),
-    groups: state.devices.groups,
-    offlineThreshold: state.app.offlineThreshold,
-    selectedIssues,
-    status
-  });
-  const attributes = [...defaultAttributes, getIdAttribute(getState()), ...selectedAttributes];
-  return general_api_default.post(getSearchEndpoint(getState()), {
-    page,
-    per_page: perPage,
-    filters: filterTerms,
-    sort: sortOptions,
-    attributes
-  }).then((response) => {
-    const state2 = getState();
-    const deviceAccu = reduceReceivedDevices(response.data, [], state2, status);
-    let total = !applicableFilters.length ? Number(response.headers[headerNames.total]) : null;
-    if (status && state2.devices.byStatus[status].total === deviceAccu.ids.length) {
-      total = deviceAccu.ids.length;
-    }
-    let tasks = [dispatch(actions3.receivedDevices(deviceAccu.devicesById))];
-    if (status) {
-      tasks.push(dispatch(actions3.setDevicesByStatus({ deviceIds: deviceAccu.ids, status, total })));
-    }
-    const receivedDevices = Object.values(deviceAccu.devicesById);
-    if (receivedDevices.length && fetchAuth) {
-      tasks.push(dispatch(getDevicesWithAuth(receivedDevices)));
-    }
-    tasks.push(Promise.resolve({ deviceAccu, total: Number(response.headers[headerNames.total]) }));
-    return Promise.all(tasks);
-  }).catch((err) => commonErrorHandler(err, `${status} devices couldn't be loaded.`, dispatch, commonErrorFallback));
-});
-var getAllDevicesByStatus = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getAllDevicesByStatus`, (status, { dispatch, getState }) => {
-  const attributes = [...defaultAttributes, getIdAttribute(getState())];
-  const getAllDevices = (perPage = MAX_PAGE_SIZE, page = 1, devices = []) => general_api_default.post(getSearchEndpoint(getState()), {
-    page,
-    per_page: perPage,
-    filters: mapFiltersToTerms([{ key: "status", value: status, operator: DEVICE_FILTERING_OPTIONS.$eq.key, scope: "identity" }]),
-    attributes
-  }).then((res) => {
-    const state = getState();
-    const deviceAccu = reduceReceivedDevices(res.data, devices, state, status);
-    dispatch(actions3.receivedDevices(deviceAccu.devicesById));
-    const total = Number(res.headers[headerNames.total]);
-    if (total > state.deployments.deploymentDeviceLimit) {
-      return Promise.resolve();
-    }
-    if (total > perPage * page) {
-      return getAllDevices(perPage, page + 1, deviceAccu.ids);
+var deriveImpliedAreaPermissions = (area, areaPermissions, skipPermissions = []) => {
+  const highestAreaPermissionLevelSelected = areaPermissions.reduce(
+    (highest, current) => uiPermissionsById[current].permissionLevel > highest ? uiPermissionsById[current].permissionLevel : highest,
+    1
+  );
+  return uiPermissionsByArea[area].uiPermissions.reduce((permissions, current) => {
+    if ((current.permissionLevel < highestAreaPermissionLevelSelected || areaPermissions.includes(current.value)) && !skipPermissions.includes(current.value)) {
+      permissions.push(current.value);
     }
-    let tasks = [dispatch(actions3.setDevicesByStatus({ deviceIds: deviceAccu.ids, forceUpdate: true, status, total: deviceAccu.ids.length }))];
-    if (status === DEVICE_STATES.accepted && deviceAccu.ids.length === total) {
-      tasks.push(dispatch(deriveInactiveDevices(deviceAccu.ids)));
-      tasks.push(dispatch(deriveReportsData()));
+    return permissions;
+  }, []);
+};
+var transformAreaRoleDataToScopedPermissionsSets = (area, areaPermissions, excessiveAccessSelector) => {
+  const permissionSetObject = areaPermissions.reduce((accu, { item, uiPermissions }) => {
+    const skipPermissions = scopedPermissionAreas.releases.key === area && item !== ALL_RELEASES ? [uiPermissionsById.upload.value] : [];
+    const impliedPermissions = deriveImpliedAreaPermissions(area, uiPermissions, skipPermissions);
+    accu = impliedPermissions.reduce((itemPermissionAccu, impliedPermission) => {
+      const permissionSetState = itemPermissionAccu[uiPermissionsById[impliedPermission].permissionSets[area]] ?? {
+        type: uiPermissionsByArea[area].scope,
+        value: []
+      };
+      itemPermissionAccu[uiPermissionsById[impliedPermission].permissionSets[area]] = {
+        ...permissionSetState,
+        value: [...permissionSetState.value, item]
+      };
+      return itemPermissionAccu;
+    }, accu);
+    return accu;
+  }, {});
+  return Object.entries(permissionSetObject).map(([name, { value, ...scope }]) => {
+    if (value.includes(excessiveAccessSelector)) {
+      return { name };
     }
-    return Promise.all(tasks);
+    return { name, scope: { ...scope, value: value.filter(import_helpers9.duplicateFilter) } };
   });
-  return getAllDevices();
-});
-var searchDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/searchDevices`, (passedOptions = {}, { dispatch, getState }) => {
-  const state = getState();
-  let options = { ...state.app.searchState, ...passedOptions };
-  const { page = defaultPage2, searchTerm, sortOptions = [] } = options;
-  const { columnSelection = [] } = getUserSettings(state);
-  const selectedAttributes = columnSelection.map((column) => ({ attribute: column.key, scope: column.scope }));
-  const attributes = (0, import_helpers9.attributeDuplicateFilter)([...defaultAttributes, getIdAttribute(state), ...selectedAttributes], "attribute");
-  return general_api_default.post(getSearchEndpoint(getState()), {
-    page,
-    per_page: 10,
-    filters: [],
-    sort: sortOptions,
-    text: searchTerm,
-    attributes
-  }).then((response) => {
-    const deviceAccu = reduceReceivedDevices(response.data, [], getState());
-    return Promise.all([
-      dispatch(actions3.receivedDevices(deviceAccu.devicesById)),
-      Promise.resolve({ deviceIds: deviceAccu.ids, searchTotal: Number(response.headers[headerNames.total]) })
-    ]);
-  }).catch((err) => commonErrorHandler(err, `devices couldn't be searched.`, dispatch, commonErrorFallback));
-});
-var ATTRIBUTE_LIST_CUTOFF = 100;
-var attributeReducer = (attributes = []) => attributes.slice(0, ATTRIBUTE_LIST_CUTOFF).reduce(
-  (accu, { name, scope }) => {
-    if (!accu[scope]) {
-      accu[scope] = [];
+};
+var transformRoleDataToRole = (roleData, roleState = {}) => {
+  const role = { ...roleState, ...roleData };
+  const { description = "", name, uiPermissions = emptyUiPermissions } = role;
+  const { maybeUiPermissions, remainderKeys } = Object.entries(emptyUiPermissions).reduce(
+    (accu, [key, emptyPermissions]) => {
+      if (!scopedPermissionAreas[key]) {
+        accu.remainderKeys.push(key);
+      } else if (uiPermissions[key]) {
+        accu.maybeUiPermissions[key] = uiPermissions[key].reduce(itemUiPermissionsReducer, emptyPermissions);
+      }
+      return accu;
+    },
+    { maybeUiPermissions: {}, remainderKeys: [] }
+  );
+  const { permissionSetsWithScope, roleUiPermissions } = remainderKeys.reduce(
+    (accu, area) => {
+      const areaPermissions = role.uiPermissions[area];
+      if (!Array.isArray(areaPermissions)) {
+        return accu;
+      }
+      const impliedPermissions = deriveImpliedAreaPermissions(area, areaPermissions);
+      accu.roleUiPermissions[area] = impliedPermissions;
+      const mappedPermissions = impliedPermissions.map((uiPermission) => ({ name: uiPermissionsById[uiPermission].permissionSets[area] }));
+      accu.permissionSetsWithScope.push(...mappedPermissions);
+      return accu;
+    },
+    { permissionSetsWithScope: [{ name: defaultPermissionSets.Basic.name }], roleUiPermissions: {} }
+  );
+  const scopedPermissionSets = Object.values(scopedPermissionAreas).reduce((accu, { key, excessiveAccessSelector }) => {
+    if (!uiPermissions[key]) {
+      return accu;
     }
-    accu[scope].push(name);
+    accu.push(...transformAreaRoleDataToScopedPermissionsSets(key, uiPermissions[key], excessiveAccessSelector));
     return accu;
+  }, []);
+  return {
+    permissionSetsWithScope: [...permissionSetsWithScope, ...scopedPermissionSets],
+    role: {
+      ...emptyRole,
+      name,
+      description: description ? description : roleState.description,
+      uiPermissions: {
+        ...emptyUiPermissions,
+        ...roleUiPermissions,
+        ...maybeUiPermissions
+      }
+    }
+  };
+};
+var roleActions = {
+  create: {
+    successMessage: "The role was created successfully.",
+    errorMessage: "creating"
   },
-  { identity: [], inventory: [], system: [], tags: [] }
+  edit: {
+    successMessage: "The role has been updated.",
+    errorMessage: "editing"
+  },
+  remove: {
+    successMessage: "The role was deleted successfully.",
+    errorMessage: "removing"
+  }
+};
+var roleActionErrorHandler = (err, type, dispatch) => commonErrorHandler(err, `There was an error ${roleActions[type].errorMessage} the role.`, dispatch);
+var createRole = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/createRole`, (roleData, { dispatch }) => {
+  const { permissionSetsWithScope, role } = transformRoleDataToRole(roleData);
+  return general_api_default.post(`${useradmApiUrlv2}/roles`, {
+    name: role.name,
+    description: role.description,
+    permission_sets_with_scope: permissionSetsWithScope
+  }).then(() => Promise.all([dispatch(actions8.createdRole(role)), dispatch(getRoles()), dispatch(setSnackbar3(roleActions.create.successMessage))])).catch((err) => roleActionErrorHandler(err, "create", dispatch));
+});
+var editRole = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/editRole`, (roleData, { dispatch, getState }) => {
+  const { permissionSetsWithScope, role } = transformRoleDataToRole(roleData, getRolesById(getState())[roleData.name]);
+  return general_api_default.put(`${useradmApiUrlv2}/roles/${role.name}`, {
+    description: role.description,
+    name: role.name,
+    permission_sets_with_scope: permissionSetsWithScope
+  }).then(() => Promise.all([dispatch(actions8.createdRole(role)), dispatch(getRoles()), dispatch(setSnackbar3(roleActions.edit.successMessage))])).catch((err) => roleActionErrorHandler(err, "edit", dispatch));
+});
+var removeRole = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/removeRole`,
+  (roleId, { dispatch }) => general_api_default.delete(`${useradmApiUrlv2}/roles/${roleId}`).then(() => Promise.all([dispatch(actions8.removedRole(roleId)), dispatch(getRoles()), dispatch(setSnackbar3(roleActions.remove.successMessage))])).catch((err) => roleActionErrorHandler(err, "remove", dispatch))
 );
-var getDeviceAttributes = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceAttributes`,
-  (_, { dispatch, getState }) => general_api_default.get(getAttrsEndpoint(getState())).then(({ data }) => {
-    const { identity: identityAttributes, inventory: inventoryAttributes, system: systemAttributes, tags: tagAttributes } = attributeReducer(data || []);
-    return dispatch(actions3.setFilterAttributes({ identityAttributes, inventoryAttributes, systemAttributes, tagAttributes }));
+var getGlobalSettings2 = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getGlobalSettings`,
+  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/settings`).then(({ data: settings, headers: { etag } }) => {
+    window.sessionStorage.setItem(settingsKeys.initialized, true);
+    return Promise.all([dispatch(actions8.setGlobalSettings(settings)), dispatch(setOfflineThreshold()), etag]);
   })
 );
-var getReportingLimits = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getReportingLimits`,
-  (_, { dispatch }) => general_api_default.get(`${reportingApiUrl}/devices/attributes`).catch((err) => commonErrorHandler(err, `filterable attributes limit & usage could not be retrieved.`, dispatch, commonErrorFallback)).then(({ data }) => {
-    const { attributes, count, limit } = data;
-    const groupedAttributes = attributeReducer(attributes);
-    return Promise.resolve(dispatch(actions3.setFilterablesConfig({ count, limit, attributes: groupedAttributes })));
+var saveGlobalSettings = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/saveGlobalSettings`,
+  ({ beOptimistic = false, notify = false, ...settings }, { dispatch, getState }) => {
+    if (!window.sessionStorage.getItem(settingsKeys.initialized) && !beOptimistic) {
+      return;
+    }
+    return dispatch(getGlobalSettings2()).unwrap().then((result) => {
+      let updatedSettings = { ...getState().users.globalSettings, ...settings };
+      if (getCurrentUser(getState()).verified) {
+        updatedSettings["2fa"] = twoFAStates.enabled;
+      } else {
+        delete updatedSettings["2fa"];
+      }
+      let tasks = [dispatch(actions8.setGlobalSettings(updatedSettings))];
+      const headers = result[result.length - 1] ? { "If-Match": result[result.length - 1] } : {};
+      return general_api_default.post(`${useradmApiUrlv1}/settings`, updatedSettings, { headers }).then(() => {
+        if (notify) {
+          tasks.push(dispatch(setSnackbar3("Settings saved successfully")));
+        }
+        return Promise.all(tasks);
+      }).catch((err) => {
+        if (beOptimistic) {
+          return Promise.all([tasks]);
+        }
+        console.log(err);
+        return commonErrorHandler(err, `The settings couldn't be saved.`, dispatch);
+      });
+    });
+  }
+);
+var getUserSettings2 = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getUserSettings`,
+  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/settings/me`).then(({ data: settings, headers: { etag } }) => {
+    window.sessionStorage.setItem(settingsKeys.initialized, true);
+    return Promise.all([dispatch(actions8.setUserSettings(settings)), etag]);
   })
 );
-var ensureVersionString = (software, fallback) => software.length && software !== "artifact_name" ? software.endsWith(".version") ? software : `${software}.version` : fallback;
-var REPORT_CHART_SIZE_LIMIT = 6;
-var getSingleReportData = (reportConfig, groups) => {
-  const { attribute, group, software = "" } = reportConfig;
-  const filters = [{ key: "status", scope: "identity", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: "accepted" }];
-  if (group) {
-    const staticGroupFilter = { key: "group", scope: "system", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: group };
-    const { cleanedFilters: groupFilters } = getGroupFilters(group, groups);
-    filters.push(...groupFilters.length ? groupFilters : [staticGroupFilter]);
+var saveUserSettings = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/saveUserSettings`, (settings = { onboarding: {} }, { dispatch, getState }) => {
+  if (!getCurrentUser(getState()).id) {
+    return Promise.resolve();
   }
-  const aggregationAttribute = ensureVersionString(software, attribute);
-  return general_api_default.post(`${reportingApiUrl}/devices/aggregate`, {
-    aggregations: [{ attribute: aggregationAttribute, name: "*", scope: "inventory", size: REPORT_CHART_SIZE_LIMIT }],
-    filters: mapFiltersToTerms(filters)
-  }).then(({ data }) => ({ data, reportConfig }));
-};
-var getReportsData = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getReportsData`, (_, { dispatch, getState }) => {
-  const state = getState();
-  const currentUserId = getCurrentUser(state).id;
-  const reports = getUserSettings(state).reports || getGlobalSettings(state)[`${currentUserId}-reports`] || (Object.keys(getDevicesById(state)).length ? defaultReports : []);
-  return Promise.all(reports.map((report) => getSingleReportData(report, getState().devices.groups))).then((results) => {
-    const devicesState = getState().devices;
-    const totalDeviceCount = devicesState.byStatus.accepted.total;
-    const newReports = results.map(({ data, reportConfig }) => {
-      let { items, other_count } = data[0];
-      const { attribute, group, software = "" } = reportConfig;
-      const dataCount = items.reduce((accu, item) => accu + item.count, 0);
-      const otherCount = !group && (software === rootfsImageVersion || attribute === "artifact_name") ? totalDeviceCount - dataCount : other_count;
-      return { items, otherCount, total: otherCount + dataCount };
-    });
-    return Promise.resolve(dispatch(actions3.setDeviceReports(newReports)));
-  });
-});
-var initializeDistributionData = (report, groups, devices, totalDeviceCount) => {
-  const { attribute, group = "", software = "" } = report;
-  const effectiveAttribute = software ? software : attribute;
-  const { deviceIds, total = 0 } = groups[group] || {};
-  const relevantDevices = groups[group] ? deviceIds.map((id) => devices[id]) : Object.values(devices);
-  const distributionByAttribute = relevantDevices.reduce((accu, item) => {
-    if (!item.attributes || item.status !== DEVICE_STATES.accepted) return accu;
-    if (!accu[item.attributes[effectiveAttribute]]) {
-      accu[item.attributes[effectiveAttribute]] = 0;
-    }
-    accu[item.attributes[effectiveAttribute]] = accu[item.attributes[effectiveAttribute]] + 1;
-    return accu;
-  }, {});
-  const distributionByAttributeSorted = Object.entries(distributionByAttribute).sort((pairA, pairB) => pairB[1] - pairA[1]);
-  const items = distributionByAttributeSorted.map(([key, count]) => ({ key, count }));
-  const dataCount = items.reduce((accu, item) => accu + item.count, 0);
-  const otherCount = (groups[group] ? total : totalDeviceCount) - dataCount;
-  return { items, otherCount, total: otherCount + dataCount };
-};
-var deriveReportsData = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/deriveReportsData`, (_, { dispatch, getState }) => {
-  const state = getState();
-  const {
-    groups: { byId: groupsById },
-    byId,
-    byStatus: {
-      accepted: { total }
-    }
-  } = state.devices;
-  const reports = getUserSettings(state).reports || state.users.globalSettings[`${state.users.currentUser}-reports`] || (Object.keys(byId).length ? defaultReports : []);
-  const newReports = reports.map((report) => initializeDistributionData(report, groupsById, byId, total));
-  return Promise.resolve(dispatch(actions3.setDeviceReports(newReports)));
-});
-var getReportsDataWithoutBackendSupport = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getReportsDataWithoutBackendSupport`,
-  (_, { dispatch, getState }) => Promise.all([dispatch(getAllDevicesByStatus(DEVICE_STATES.accepted)), dispatch(getGroups2()), dispatch(getDynamicGroups())]).then(() => {
-    const { dynamic: dynamicGroups, static: staticGroups } = getGroups(getState());
+  return dispatch(getUserSettings2()).unwrap().then((result) => {
+    const userSettings = getUserSettings(getState());
+    const onboardingState = getOnboardingState(getState());
+    const tooltipState = getTooltipsState(getState());
+    const updatedSettings = {
+      ...userSettings,
+      ...settings,
+      onboarding: {
+        ...onboardingState,
+        ...settings.onboarding
+      },
+      tooltips: tooltipState
+    };
+    const headers = result[result.length - 1] ? { "If-Match": result[result.length - 1] } : {};
     return Promise.all([
-      ...staticGroups.map(({ groupId }) => dispatch(getAllGroupDevices(groupId))),
-      ...dynamicGroups.map(({ groupId }) => dispatch(getAllDynamicGroupDevices(groupId)))
-    ]).then(() => dispatch(deriveReportsData()));
-  })
-);
-var getDeviceConnect = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceConnect`,
-  (id, { dispatch }) => general_api_default.get(`${deviceConnect}/devices/${id}`).then(
-    ({ data }) => Promise.all([dispatch(actions3.receivedDevice({ connect_status: data.status, connect_updated_ts: data.updated_ts, id })), Promise.resolve(data)])
-  )
-);
-var getSessionDetails = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getSessionDetails`, ({ sessionId, deviceId, userId, startDate, endDate }) => {
-  const { start: startUnix, end: endUnix } = (0, import_helpers9.dateRangeToUnix)(startDate, endDate);
-  const createdAfter = startDate ? `&created_after=${startUnix}` : "";
-  const createdBefore = endDate ? `&created_before=${endUnix}` : "";
-  const objectSearch = `&object_id=${deviceId}`;
-  return general_api_default.get(`${auditLogsApiUrl}/logs?per_page=500${createdAfter}${createdBefore}&actor_id=${userId}${objectSearch}`).then(
-    ({ data: auditLogEntries }) => {
-      const { start, end } = auditLogEntries.reduce(
-        (accu, item) => {
-          if (item.meta?.session_id?.includes(sessionId)) {
-            accu.start = new Date(item.action.startsWith("open") ? item.time : accu.start);
-            accu.end = new Date(item.action.startsWith("close") ? item.time : accu.end);
-          }
-          return accu;
-        },
-        { start: startDate || endDate, end: endDate || startDate }
-      );
-      return Promise.resolve({ start, end });
-    }
-  );
+      Promise.resolve(dispatch(actions8.setUserSettings(updatedSettings))),
+      general_api_default.post(`${useradmApiUrlv1}/settings/me`, updatedSettings, { headers })
+    ]).catch(() => dispatch(actions8.setUserSettings(userSettings)));
+  });
 });
-var getDeviceFileDownloadLink = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceFileDownloadLink`,
-  ({ deviceId, path }) => Promise.resolve(`${window.location.origin}${deviceConnect}/devices/${deviceId}/download?path=${encodeURIComponent(path)}`)
+var get2FAQRCode = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/get2FAQRCode`,
+  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/2faqr`).then((res) => dispatch(actions8.receivedQrCode(res.data.qr)))
 );
-var deviceFileUpload = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/deviceFileUpload`, ({ deviceId, path, file }, { dispatch }) => {
-  let formData = new FormData();
-  formData.append("path", path);
-  formData.append("file", file);
-  const uploadId = (0, import_uuid.v4)();
-  const cancelSource = new AbortController();
-  return Promise.all([
-    dispatch(setSnackbar3("Uploading file")),
-    dispatch(initUpload({ id: uploadId, upload: { inprogress: true, uploadProgress: 0, cancelSource } })),
-    general_api_default.uploadPut(
-      `${deviceConnect}/devices/${deviceId}/upload`,
-      formData,
-      (e) => dispatch(uploadProgress2({ id: uploadId, progress: progress(e) })),
-      cancelSource.signal
-    )
-  ]).then(() => Promise.resolve(dispatch(setSnackbar3("Upload successful", TIMEOUTS.fiveSeconds)))).catch((err) => {
-    if ((0, import_axios2.isCancel)(err)) {
-      return dispatch(setSnackbar3("The upload has been cancelled", TIMEOUTS.fiveSeconds));
-    }
-    return commonErrorHandler(err, `Error uploading file to device.`, dispatch);
-  }).finally(() => dispatch(cleanUpUpload(uploadId)));
+var setHideAnnouncement = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/setHideAnnouncement`, ({ shouldHide, userId }, { dispatch, getState }) => {
+  const currentUserId = userId || getCurrentUser(getState()).id;
+  const hash = getState().app.hostedAnnouncement ? (0, import_md5.default)(getState().app.hostedAnnouncement) : "";
+  const announceCookie = cookies3.get(`${currentUserId}${hash}`);
+  if (shouldHide || hash.length && typeof announceCookie !== "undefined") {
+    cookies3.set(`${currentUserId}${hash}`, true, { maxAge: 604800 });
+    return Promise.resolve(dispatch(setAnnouncement()));
+  }
+  return Promise.resolve();
 });
-var getDeviceAuth = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceAuth`,
-  (id, { dispatch }) => dispatch(getDevicesWithAuth([{ id }])).unwrap().then((results) => {
-    if (results[results.length - 1]) {
-      return Promise.resolve(results[results.length - 1][0]);
-    }
-    return Promise.resolve();
+var getTokens = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/getTokens`,
+  (_, { dispatch, getState }) => general_api_default.get(`${useradmApiUrlv1}/settings/tokens`).then(({ data: tokens }) => {
+    const user = getCurrentUser(getState());
+    const updatedUser = {
+      ...user,
+      tokens
+    };
+    return Promise.resolve(dispatch(actions8.updatedUser(updatedUser)));
   })
 );
-var getDevicesWithAuth = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDevicesWithAuth`,
-  (devices, { dispatch, getState }) => devices.length ? general_api_default.get(`${deviceAuthV2}/devices?id=${devices.map((device) => device.id).join("&id=")}`).then(({ data: receivedDevices }) => {
-    const { devicesById } = reduceReceivedDevices(receivedDevices, [], getState());
-    return Promise.all([dispatch(actions3.receivedDevices(devicesById)), Promise.resolve(receivedDevices)]);
-  }).catch((err) => commonErrorHandler(err, `Error: ${err}`, dispatch)) : Promise.resolve([[], []])
+var ONE_YEAR = 31536e3;
+var generateToken = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/generateToken`,
+  ({ expiresIn = ONE_YEAR, name }, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/settings/tokens`, { name, expires_in: expiresIn }).then(({ data: token }) => Promise.all([dispatch(getTokens()), token])).catch((err) => commonErrorHandler(err, "There was an error creating the token:", dispatch))
 );
-var updateDeviceAuth = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/updateDeviceAuth`,
-  ({ deviceId, authId, status }, { dispatch, getState }) => general_api_default.put(`${deviceAuthV2}/devices/${deviceId}/auth/${authId}/status`, { status }).then(() => Promise.all([dispatch(getDeviceAuth(deviceId)), dispatch(setSnackbar3("Device authorization status was updated successfully"))])).catch((err) => commonErrorHandler(err, "There was a problem updating the device authorization status:", dispatch)).then(() => Promise.resolve(dispatch(actions3.maybeUpdateDevicesByStatus({ deviceId, authId })))).finally(() => dispatch(setDeviceListState({ refreshTrigger: !getDeviceListState(getState()).refreshTrigger })))
+var revokeToken = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/revokeToken`,
+  (token, { dispatch }) => general_api_default.delete(`${useradmApiUrlv1}/settings/tokens/${token.id}`).then(() => Promise.resolve(dispatch(getTokens())))
 );
-var updateDevicesAuth = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/updateDevicesAuth`, ({ deviceIds, status }, { dispatch, getState }) => {
-  let devices = getDevicesById(getState());
-  const deviceIdsWithoutAuth = deviceIds.reduce((accu, id) => devices[id].auth_sets ? accu : [...accu, { id }], []);
-  return dispatch(getDevicesWithAuth(deviceIdsWithoutAuth)).then(() => {
-    devices = getDevicesById(getState());
-    const deviceAuthUpdates = deviceIds.map((id) => {
-      const device = devices[id];
-      if (device.auth_sets.length !== 1) {
-        return Promise.reject();
+var setTooltipReadState = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/setTooltipReadState`, ({ persist, ...remainder }, { dispatch }) => {
+  let tasks = [dispatch(actions8.setTooltipState(remainder))];
+  if (persist) {
+    tasks.push(dispatch(saveUserSettings()));
+  }
+  return Promise.all(tasks);
+});
+var setAllTooltipsReadState = (0, import_toolkit20.createAsyncThunk)(`${sliceName8}/toggleHelptips`, (readState = READ_STATES.read, { dispatch }) => {
+  const updatedTips = Object.keys(import_helptips.HELPTOOLTIPS).reduce((accu, id) => ({ ...accu, [id]: { readState } }), {});
+  return Promise.resolve(dispatch(actions8.setTooltipsState(updatedTips))).then(() => dispatch(saveUserSettings()));
+});
+var submitFeedback = (0, import_toolkit20.createAsyncThunk)(
+  `${sliceName8}/submitFeedback`,
+  ({ satisfaction, feedback, ...meta }, { dispatch }) => general_api_default.post(`${tenantadmApiUrlv2}/contact/support`, {
+    subject: "feedback submission",
+    body: JSON.stringify({ feedback, satisfaction, meta })
+  }).then(() => {
+    const today = /* @__PURE__ */ new Date();
+    dispatch(saveUserSettings({ feedbackCollectedAt: today.toISOString().split("T")[0] }));
+    setTimeout(() => dispatch(actions8.setShowFeedbackDialog(false)), TIMEOUTS.threeSeconds);
+  })
+);
+
+// src/devicesSlice/thunks.tsx
+var import_helpers10 = require("@northern.tech/utils/helpers");
+var import_toolkit21 = require("@reduxjs/toolkit");
+var import_axios3 = require("axios");
+var import_pluralize = __toESM(require("pluralize"), 1);
+var import_uuid = require("uuid");
+var import_jsx_runtime2 = require("react/jsx-runtime");
+var { cleanUpUpload, initUpload, setSnackbar: setSnackbar4, uploadProgress: uploadProgress2 } = actions_default;
+var { page: defaultPage3, perPage: defaultPerPage3 } = DEVICE_LIST_DEFAULTS;
+var defaultAttributes = [
+  { scope: "identity", attribute: "status" },
+  { scope: "inventory", attribute: "artifact_name" },
+  { scope: "inventory", attribute: "device_type" },
+  { scope: "inventory", attribute: "mender_is_gateway" },
+  { scope: "inventory", attribute: "mender_gateway_system_id" },
+  { scope: "inventory", attribute: rootfsImageVersion },
+  { scope: "monitor", attribute: "alerts" },
+  { scope: "system", attribute: "created_ts" },
+  { scope: "system", attribute: "updated_ts" },
+  { scope: "system", attribute: "check_in_time" },
+  { scope: "system", attribute: "group" },
+  { scope: "tags", attribute: "name" }
+];
+var getGroups2 = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getGroups`,
+  (_, { dispatch, getState }) => general_api_default.get(`${inventoryApiUrl}/groups`).then((res) => {
+    const state = getGroupsById(getState());
+    const dynamicGroups = Object.entries(state).reduce((accu, [id, group]) => {
+      if (group.id || group.filters?.length && id !== UNGROUPED_GROUP.id) {
+        accu[id] = group;
       }
-      return dispatch(updateDeviceAuth({ authId: device.auth_sets[0].id, deviceId: device.id, status })).unwrap().catch((err) => commonErrorHandler(err, "The action was stopped as there was a problem updating a device authorization status: ", dispatch, "", false));
-    });
-    return Promise.allSettled(deviceAuthUpdates).then((results) => {
-      const { skipped, count } = results.reduce(
-        (accu, item) => {
-          if (item.status === "rejected") {
-            accu.skipped = accu.skipped + 1;
-          } else {
-            accu.count = accu.count + 1;
-          }
-          return accu;
-        },
-        { skipped: 0, count: 0 }
+      return accu;
+    }, {});
+    const groups = res.data.reduce((accu, group) => {
+      accu[group] = { deviceIds: [], filters: [], total: 0, ...state[group] };
+      return accu;
+    }, dynamicGroups);
+    const filters = [{ key: "group", value: res.data, operator: DEVICE_FILTERING_OPTIONS.$nin.key, scope: "system" }];
+    return Promise.all([
+      dispatch(actions3.receivedGroups(groups)),
+      dispatch(getDevicesByStatus2({ filterSelection: filters, group: 0, page: 1, perPage: 1, status: void 0 }))
+    ]).then((promises) => {
+      const devicesRetrieval = promises[promises.length - 1] || [];
+      const { payload } = devicesRetrieval || {};
+      const result = payload[payload.length - 1] || {};
+      if (!result.total) {
+        return Promise.resolve();
+      }
+      return Promise.resolve(
+        dispatch(
+          actions3.addGroup({
+            groupName: UNGROUPED_GROUP.id,
+            group: { filters: [{ key: "group", value: res.data, operator: DEVICE_FILTERING_OPTIONS.$nin.key, scope: "system" }] }
+          })
+        )
       );
-      const message = (0, import_helpers9.getSnackbarMessage)(skipped, count);
-      return dispatch(setSnackbar3(message));
     });
-  });
-});
-var deleteAuthset = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/deleteAuthset`,
-  ({ deviceId, authId }, { dispatch, getState }) => general_api_default.delete(`${deviceAuthV2}/devices/${deviceId}/auth/${authId}`).then(() => Promise.all([dispatch(setSnackbar3("Device authorization status was updated successfully"))])).catch((err) => commonErrorHandler(err, "There was a problem updating the device authorization status:", dispatch)).then(() => Promise.resolve(dispatch(actions3.maybeUpdateDevicesByStatus({ deviceId, authId })))).finally(() => dispatch(setDeviceListState({ refreshTrigger: !getState().devices.deviceList.refreshTrigger })))
-);
-var preauthDevice = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/preauthDevice`,
-  (authset, { dispatch }) => general_api_default.post(`${deviceAuthV2}/devices`, authset).catch((err) => {
-    if (err.response.status === 409) {
-      return Promise.reject("A device with a matching identity data set already exists");
-    }
-    return commonErrorHandler(err, "The device could not be added:", dispatch);
-  }).then(() => Promise.resolve(dispatch(setSnackbar3("Device was successfully added to the preauthorization list", TIMEOUTS.fiveSeconds))))
-);
-var decommissionDevice = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/decommissionDevice`,
-  ({ deviceId, authId }, { dispatch, getState }) => general_api_default.delete(`${deviceAuthV2}/devices/${deviceId}`).then(() => Promise.resolve(dispatch(setSnackbar3("Device was decommissioned successfully")))).catch((err) => commonErrorHandler(err, "There was a problem decommissioning the device:", dispatch)).then(() => Promise.resolve(dispatch(actions3.maybeUpdateDevicesByStatus({ deviceId, authId })))).finally(() => dispatch(setDeviceListState({ refreshTrigger: !getState().devices.deviceList.refreshTrigger })))
-);
-var getDeviceConfig = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/getDeviceConfig`,
-  (deviceId, { dispatch }) => general_api_default.get(`${deviceConfig}/${deviceId}`).then(({ data }) => Promise.all([dispatch(actions3.receivedDevice({ id: deviceId, config: data })), Promise.resolve(data)])).catch((err) => {
-    if (err.response?.data?.error.status_code !== 404) {
-      return commonErrorHandler(err, `There was an error retrieving the configuration for device ${deviceId}.`, dispatch, commonErrorFallback);
-    }
   })
 );
-var setDeviceConfig = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/setDeviceConfig`,
-  ({ deviceId, config }, { dispatch }) => general_api_default.put(`${deviceConfig}/${deviceId}`, config).catch((err) => commonErrorHandler(err, `There was an error setting the configuration for device ${deviceId}.`, dispatch, commonErrorFallback)).then(() => Promise.resolve(dispatch(getDeviceConfig(deviceId))))
+var addDevicesToGroup = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/addDevicesToGroup`,
+  ({ group, deviceIds, isCreation }, { dispatch }) => general_api_default.patch(`${inventoryApiUrl}/groups/${group}/devices`, deviceIds).then(() => dispatch(actions3.addToGroup({ group, deviceIds }))).finally(() => isCreation ? Promise.resolve(dispatch(getGroups2())) : {})
 );
-var applyDeviceConfig = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/applyDeviceConfig`,
-  ({ deviceId, configDeploymentConfiguration, isDefault, config }, { dispatch, getState }) => general_api_default.post(`${deviceConfig}/${deviceId}/deploy`, configDeploymentConfiguration).catch((err) => commonErrorHandler(err, `There was an error deploying the configuration to device ${deviceId}.`, dispatch, commonErrorFallback)).then(({ data }) => {
-    const device = getDeviceById(getState(), deviceId);
-    const { canManageUsers } = getUserCapabilities(getState());
-    let tasks = [
-      dispatch(actions3.receivedDevice({ ...device, config: { ...device.config, deployment_id: data.deployment_id } })),
-      new Promise((resolve) => setTimeout(() => resolve(dispatch(getSingleDeployment(data.deployment_id))), TIMEOUTS.oneSecond))
-    ];
-    if (isDefault && canManageUsers) {
-      const { previous } = getGlobalSettings(getState()).defaultDeviceConfig ?? {};
-      tasks.push(dispatch(saveGlobalSettings({ defaultDeviceConfig: { current: config, previous } })));
-    }
-    return Promise.all(tasks);
-  })
+var removeDevicesFromGroup = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/removeDevicesFromGroup`,
+  ({ group, deviceIds }, { dispatch }) => general_api_default.delete(`${inventoryApiUrl}/groups/${group}/devices`, deviceIds).then(
+    () => Promise.all([
+      dispatch(actions3.removeFromGroup({ group, deviceIds })),
+      dispatch(setSnackbar4(`The ${(0, import_pluralize.default)("devices", deviceIds.length)} ${(0, import_pluralize.default)("were", deviceIds.length)} removed from the group`, TIMEOUTS.fiveSeconds))
+    ])
+  )
 );
-var setDeviceTags = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/setDeviceTags`,
-  ({ deviceId, tags }, { dispatch }) => (
-    // to prevent tag set failures, retrieve the device & use the freshest etag we can get
-    Promise.resolve(dispatch(getDeviceById2(deviceId))).then((device) => {
-      const headers = device.etag ? { "If-Match": device.etag } : {};
-      return general_api_default.put(
-        `${inventoryApiUrl}/devices/${deviceId}/tags`,
-        Object.entries(tags).map(([name, value]) => ({ name, value })),
-        { headers }
-      ).catch((err) => commonErrorHandler(err, `There was an error setting tags for device ${deviceId}.`, dispatch, "Please check your connection.")).then(() => Promise.all([dispatch(actions3.receivedDevice({ ...device, id: deviceId, tags })), dispatch(setSnackbar3("Device name changed"))]));
-    })
-  )
-);
-var getDeviceTwin = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getDeviceTwin`, ({ deviceId, integration }, { dispatch, getState }) => {
-  let providerResult = {};
-  return general_api_default.get(`${iotManagerBaseURL}/devices/${deviceId}/state`).then(({ data }) => {
-    providerResult = { ...data, twinError: "" };
-  }).catch((err) => {
-    providerResult = {
-      twinError: `There was an error getting the ${EXTERNAL_PROVIDER[integration.provider].twinTitle.toLowerCase()} for device ${deviceId}. ${err}`
-    };
-  }).finally(() => {
-    const device = getDeviceById(getState(), deviceId);
-    Promise.resolve(dispatch(actions3.receivedDevice({ ...device, twinsByIntegration: { ...device.twinsByIntegration, ...providerResult } })));
-  });
-});
-var setDeviceTwin = (0, import_toolkit19.createAsyncThunk)(
-  `${sliceName3}/setDeviceTwin`,
-  ({ deviceId, integration, settings }, { dispatch, getState }) => general_api_default.put(`${iotManagerBaseURL}/devices/${deviceId}/state/${integration.id}`, { desired: settings }).catch(
-    (err) => commonErrorHandler(
-      err,
-      `There was an error updating the ${EXTERNAL_PROVIDER[integration.provider].twinTitle.toLowerCase()} for device ${deviceId}.`,
-      dispatch
-    )
-  ).then(() => {
-    const device = getDeviceById(getState(), deviceId);
-    const { twinsByIntegration = {} } = device;
-    const { [integration.id]: currentState = {} } = twinsByIntegration;
-    return Promise.resolve(
-      dispatch(actions3.receivedDevice({ ...device, twinsByIntegration: { ...twinsByIntegration, [integration.id]: { ...currentState, desired: settings } } }))
-    );
-  })
-);
-var prepareSearchArguments = ({ filters, group, state, status }) => {
-  const { filterTerms } = convertDeviceListStateToFilters({ filters, group, offlineThreshold: state.app.offlineThreshold, selectedIssues: [], status });
-  const { columnSelection = [] } = getUserSettings(state);
-  const selectedAttributes = columnSelection.map((column) => ({ attribute: column.key, scope: column.scope }));
-  const attributes = [...defaultAttributes, getIdAttribute(state), ...selectedAttributes];
-  return { attributes, filterTerms };
-};
-var getSystemDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getSystemDevices`, (options, { dispatch, getState }) => {
-  const { id, page = defaultPage2, perPage = defaultPerPage2, sortOptions = [] } = options;
-  const state = getState();
-  const { hasFullFiltering } = getTenantCapabilities(state);
-  if (!hasFullFiltering) {
-    return Promise.resolve();
+var getGroupNotification = (newGroup, selectedGroup) => {
+  const successMessage = "The group was updated successfully";
+  if (newGroup === selectedGroup) {
+    return [successMessage, TIMEOUTS.fiveSeconds];
   }
-  const { attributes: deviceAttributes = {} } = getDeviceById(state, id);
-  const { mender_gateway_system_id = "" } = deviceAttributes;
-  const filters = [
-    { ...emptyFilter, key: "mender_is_gateway", operator: DEVICE_FILTERING_OPTIONS.$ne.key, value: "true", scope: "inventory" },
-    { ...emptyFilter, key: "mender_gateway_system_id", value: mender_gateway_system_id, scope: "inventory" }
-  ];
-  const { attributes, filterTerms } = prepareSearchArguments({ filters, state });
-  return general_api_default.post(getSearchEndpoint(getState()), {
-    page,
-    per_page: perPage,
-    filters: filterTerms,
-    sort: sortOptions,
-    attributes
-  }).catch((err) => commonErrorHandler(err, `There was an error getting system devices device ${id}.`, dispatch, "Please check your connection.")).then(({ data, headers }) => {
-    const state2 = getState();
-    const { devicesById, ids } = reduceReceivedDevices(data, [], state2);
-    const device = {
-      ...getDeviceById(state2, id),
-      systemDeviceIds: ids,
-      systemDeviceTotal: Number(headers[headerNames.total])
-    };
-    return Promise.resolve(dispatch(actions3.receivedDevices({ ...devicesById, [id]: device })));
-  });
-});
-var getGatewayDevices = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getGatewayDevices`, (deviceId, { dispatch, getState }) => {
-  const state = getState();
-  const { attributes = {} } = getDeviceById(state, deviceId);
-  const { mender_gateway_system_id = "" } = attributes;
-  const filters = [
-    { ...emptyFilter, key: "id", operator: DEVICE_FILTERING_OPTIONS.$ne.key, value: deviceId, scope: "identity" },
-    { ...emptyFilter, key: "mender_is_gateway", value: "true", scope: "inventory" },
-    { ...emptyFilter, key: "mender_gateway_system_id", value: mender_gateway_system_id, scope: "inventory" }
+  return [
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(import_jsx_runtime2.Fragment, { children: [
+      successMessage,
+      " - ",
+      /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_react_router_dom.Link, { to: `/devices?inventory=group:eq:${newGroup}`, children: "click here" }),
+      " to see it."
+    ] }),
+    5e3,
+    void 0,
+    void 0,
+    () => {
+    }
   ];
-  const { attributes: attributeSelection, filterTerms } = prepareSearchArguments({ filters, state });
-  return general_api_default.post(getSearchEndpoint(getState()), {
-    page: 1,
-    per_page: MAX_PAGE_SIZE,
-    filters: filterTerms,
-    attributes: attributeSelection
-  }).then(({ data }) => {
-    const { ids } = reduceReceivedDevices(data, [], getState());
-    let tasks = ids.map((deviceId2) => dispatch(getDeviceInfo(deviceId2)));
-    tasks.push(dispatch(actions3.receivedDevice({ id: deviceId, gatewayIds: ids })));
-    return Promise.all(tasks);
-  });
-});
-var getDevicesInBounds = (0, import_toolkit19.createAsyncThunk)(`${sliceName3}/getDevicesInBounds`, ({ bounds, group }, { dispatch, getState }) => {
-  const state = getState();
-  const { filterTerms } = convertDeviceListStateToFilters({
-    group: group === ALL_DEVICES ? void 0 : group,
-    groups: state.devices.groups,
-    status: DEVICE_STATES.accepted
-  });
-  return general_api_default.post(getSearchEndpoint(getState()), {
-    page: 1,
-    per_page: MAX_PAGE_SIZE,
-    filters: filterTerms,
-    attributes: geoAttributes,
-    geo_bounding_box_filter: {
-      geo_bounding_box: {
-        location: {
-          top_left: { lat: bounds._northEast.lat, lon: bounds._southWest.lng },
-          bottom_right: { lat: bounds._southWest.lat, lon: bounds._northEast.lng }
-        }
+};
+var addStaticGroup = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/addStaticGroup`,
+  ({ group, devices }, { dispatch, getState }) => Promise.resolve(dispatch(addDevicesToGroup({ group, deviceIds: devices.map(({ id }) => id), isCreation: true }))).then(
+    () => Promise.resolve(
+      dispatch(
+        actions3.addGroup({
+          group: { deviceIds: [], total: 0, filters: [], ...getState().devices.groups.byId[group] },
+          groupName: group
+        })
+      )
+    ).then(
+      () => Promise.all([
+        dispatch(setDeviceListState({ setOnly: true })),
+        dispatch(getGroups2()),
+        dispatch(setSnackbar4(...getGroupNotification(group, getState().devices.groups.selectedGroup)))
+      ])
+    )
+  ).catch((err) => commonErrorHandler(err, `Group could not be updated:`, dispatch))
+);
+var removeStaticGroup = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/removeStaticGroup`,
+  (groupName, { dispatch }) => general_api_default.delete(`${inventoryApiUrl}/groups/${groupName}`).then(
+    () => Promise.all([
+      dispatch(actions3.removeGroup(groupName)),
+      dispatch(getGroups2()),
+      dispatch(setSnackbar4("Group was removed successfully", TIMEOUTS.fiveSeconds))
+    ])
+  )
+);
+var getDynamicGroups = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDynamicGroups`,
+  (_, { dispatch, getState }) => general_api_default.get(`${inventoryApiUrlV2}/filters?per_page=${MAX_PAGE_SIZE}`).then(({ data: filters }) => {
+    const state = getGroupsById(getState());
+    const staticGroups = Object.entries(state).reduce((accu, [id, group]) => {
+      if (!(group.id || group.filters?.length)) {
+        accu[id] = group;
       }
-    }
-  }).then(({ data }) => {
-    const { devicesById } = reduceReceivedDevices(data, [], getState());
-    return Promise.resolve(dispatch(actions3.receivedDevices(devicesById)));
-  });
+      return accu;
+    }, {});
+    const groups = (filters || []).reduce((accu, filter) => {
+      accu[filter.name] = {
+        deviceIds: [],
+        total: 0,
+        ...state[filter.name],
+        id: filter.id,
+        filters: mapTermsToFilters(filter.terms)
+      };
+      return accu;
+    }, staticGroups);
+    return Promise.resolve(dispatch(actions3.receivedGroups(groups)));
+  }).catch(() => console.log("Dynamic group retrieval failed - likely accessing a non-enterprise backend"))
+);
+var addDynamicGroup = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/addDynamicGroup`,
+  ({ groupName, filterPredicates }, { dispatch, getState }) => general_api_default.post(`${inventoryApiUrlV2}/filters`, { name: groupName, terms: mapFiltersToTerms(filterPredicates) }).then(
+    (res) => Promise.resolve(
+      dispatch(
+        actions3.addGroup({
+          groupName,
+          group: {
+            id: res.headers[headerNames.location].substring(res.headers[headerNames.location].lastIndexOf("/") + 1),
+            filters: filterPredicates
+          }
+        })
+      )
+    ).then(() => {
+      const { cleanedFilters } = getGroupFilters(groupName, getState().devices.groups);
+      return Promise.all([
+        dispatch(actions3.setDeviceFilters(cleanedFilters)),
+        dispatch(setSnackbar4(...getGroupNotification(groupName, getState().devices.groups.selectedGroup))),
+        dispatch(getDynamicGroups())
+      ]);
+    })
+  ).catch((err) => commonErrorHandler(err, `Group could not be updated:`, dispatch))
+);
+var updateDynamicGroup = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/updateDynamicGroup`, ({ groupName, filterPredicates }, { dispatch, getState }) => {
+  const filterId = getState().devices.groups.byId[groupName].id;
+  return general_api_default.delete(`${inventoryApiUrlV2}/filters/${filterId}`).then(() => Promise.resolve(dispatch(addDynamicGroup({ groupName, filterPredicates }))));
 });
-
-// src/monitorSlice/thunks.ts
-var import_toolkit20 = require("@reduxjs/toolkit");
-var { page: defaultPage3, perPage: defaultPerPage3 } = DEVICE_LIST_DEFAULTS;
-var cutoffLength = 75;
-var ellipsis = "...";
-var longTextTrimmer = (text) => text.length >= cutoffLength + ellipsis.length ? `${text.substring(0, cutoffLength + ellipsis.length)}${ellipsis}` : text;
-var sanitizeDeviceAlerts = (alerts) => alerts.map((alert) => ({ ...alert, fullName: alert.name, name: longTextTrimmer(alert.name) }));
-var getDeviceAlerts = (0, import_toolkit20.createAsyncThunk)(`${sliceName4}/getDeviceAlerts`, ({ id, config = {} }, { dispatch }) => {
-  const { page = defaultPage3, perPage = defaultPerPage3, issuedBefore, issuedAfter, sortAscending = false } = config;
-  const issued_after = issuedAfter ? `&issued_after=${issuedAfter}` : "";
-  const issued_before = issuedBefore ? `&issued_before=${issuedBefore}` : "";
-  return general_api_default.get(`${monitorApiUrlv1}/devices/${id}/alerts?page=${page}&per_page=${perPage}${issued_after}${issued_before}&sort_ascending=${sortAscending}`).catch((err) => commonErrorHandler(err, `Retrieving device alerts for device ${id} failed:`, dispatch)).then(
-    (res) => Promise.all([
-      dispatch(actions4.receiveDeviceAlerts({ deviceId: id, alerts: sanitizeDeviceAlerts(res.data) })),
-      dispatch(actions4.setAlertListState({ total: Number(res.headers[headerNames.total]) }))
-    ])
+var removeDynamicGroup = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/removeDynamicGroup`, (groupName, { dispatch, getState }) => {
+  const filterId = getState().devices.groups.byId[groupName].id;
+  return general_api_default.delete(`${inventoryApiUrlV2}/filters/${filterId}`).then(
+    () => Promise.all([dispatch(actions3.removeGroup(groupName)), dispatch(setSnackbar4("Group was removed successfully", TIMEOUTS.fiveSeconds))])
   );
 });
-var getLatestDeviceAlerts = (0, import_toolkit20.createAsyncThunk)(`${sliceName4}/getLatestDeviceAlerts`, ({ id, config = {} }, { dispatch }) => {
-  const { page = defaultPage3, perPage = 10 } = config;
-  return general_api_default.get(`${monitorApiUrlv1}/devices/${id}/alerts/latest?page=${page}&per_page=${perPage}`).catch((err) => commonErrorHandler(err, `Retrieving device alerts for device ${id} failed:`, dispatch)).then((res) => Promise.resolve(dispatch(actions4.receiveLatestDeviceAlerts({ deviceId: id, alerts: sanitizeDeviceAlerts(res.data) }))));
-});
-var getIssueCountsByType2 = (0, import_toolkit20.createAsyncThunk)(`${sliceName4}/getIssueCountsByType`, ({ type, options = {} }, { dispatch, getState }) => {
-  const state = getState();
-  const { filters = getDeviceFilters(state), group, status, ...remainder } = options;
-  const { applicableFilters: nonMonitorFilters, filterTerms } = convertDeviceListStateToFilters({
-    ...remainder,
-    filters,
-    group,
-    offlineThreshold: state.app.offlineThreshold,
-    selectedIssues: [type],
-    status
-  });
-  return general_api_default.post(getSearchEndpoint(getState()), {
-    page: 1,
-    per_page: 1,
-    filters: filterTerms,
-    attributes: [{ scope: "identity", attribute: "status" }]
-  }).catch((err) => commonErrorHandler(err, `Retrieving issue counts failed:`, dispatch, commonErrorFallback)).then((res) => {
-    const total = nonMonitorFilters.length ? state.monitor.issueCounts.byType[type].total : Number(res.headers[headerNames.total]);
-    const filtered = nonMonitorFilters.length ? Number(res.headers[headerNames.total]) : total;
-    if (total === state.monitor.issueCounts.byType[type].total && filtered === state.monitor.issueCounts.byType[type].filtered) {
-      return Promise.resolve();
-    }
-    return Promise.resolve(dispatch(actions4.receiveDeviceIssueCounts({ counts: { filtered, total }, issueType: type })));
-  });
-});
-var getDeviceMonitorConfig = (0, import_toolkit20.createAsyncThunk)(
-  `${sliceName4}/getDeviceMonitorConfig`,
-  (id, { dispatch }) => general_api_default.get(`${monitorApiUrlv1}/devices/${id}/config`).catch((err) => commonErrorHandler(err, `Retrieving device monitor config for device ${id} failed:`, dispatch)).then(({ data }) => Promise.all([dispatch(actions_default.receivedDevice({ id, monitors: data }), Promise.resolve(data))]))
-);
-var changeNotificationSetting = (0, import_toolkit20.createAsyncThunk)(
-  `${sliceName4}/changeNotificationSetting`,
-  ({ enabled, channel = alertChannels.email }, { dispatch }) => {
-    return general_api_default.put(`${monitorApiUrlv1}/settings/global/channel/alerts/${channel}/status`, { enabled }).catch((err) => commonErrorHandler(err, `${enabled ? "En" : "Dis"}abling  ${channel} alerts failed:`, dispatch)).then(
-      () => Promise.all([
-        dispatch(actions4.changeAlertChannel({ channel, enabled })),
-        dispatch(actions_default.setSnackbar(`Successfully ${enabled ? "en" : "dis"}abled ${channel} alerts`, TIMEOUTS.fiveSeconds))
-      ])
-    );
-  }
-);
-
-// src/api/users-api.ts
-var import_axios3 = __toESM(require("axios"), 1);
-var Api2 = {
-  postLogin: (url, { email: username, password, ...body }) => import_axios3.default.post(url, body, { ...commonRequestConfig, auth: { username, password } }).then((res) => ({ text: res.data, code: res.status, contentType: res.headers?.["content-type"] })),
-  putVerifyTFA: (url, userData) => {
-    let body = {};
-    if (userData.hasOwnProperty("token2fa")) {
-      body = { token2fa: userData.token2fa };
-    }
-    return import_axios3.default.put(url, body, { ...commonRequestConfig, headers: { ...commonRequestConfig.headers, Authorization: `Bearer ${getToken()}` } });
-  }
+var getGroupFilters = (group, groupsState, filters = []) => {
+  const groupName = group === UNGROUPED_GROUP.id || group === UNGROUPED_GROUP.name ? UNGROUPED_GROUP.id : group;
+  const selectedGroup = groupsState.byId[groupName];
+  const groupFilterLength = selectedGroup?.filters?.length || 0;
+  const cleanedFilters = groupFilterLength ? [...filters, ...selectedGroup.filters].filter(filtersFilter) : filters;
+  return { cleanedFilters, groupName, selectedGroup, groupFilterLength };
 };
-var users_api_default = Api2;
-
-// src/usersSlice/thunks.ts
-var import_helpers10 = require("@northern.tech/utils/helpers");
-var import_retrytimer = require("@northern.tech/utils/retrytimer");
-var import_toolkit21 = require("@reduxjs/toolkit");
-var import_md5 = __toESM(require("md5"), 1);
-var import_universal_cookie3 = __toESM(require("universal-cookie"), 1);
-var cookies3 = new import_universal_cookie3.default();
-var { setAnnouncement, setSnackbar: setSnackbar4 } = actions_default;
-var handleLoginError = (err, { token2fa: has2FA, password }, rejectWithValue) => (dispatch) => {
-  const errorText = (0, import_helpers10.extractErrorMessage)(err);
-  const is2FABackend = errorText.includes("2fa");
-  if (is2FABackend && !has2FA) {
-    return rejectWithValue({ error: "2fa code missing" });
+var selectGroup = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/selectGroup`, ({ group, filters = [] }, { dispatch, getState }) => {
+  const { cleanedFilters, groupName, selectedGroup, groupFilterLength } = getGroupFilters(group, getState().devices.groups, filters);
+  if (getSelectedGroup(getState()) === groupName && (filters.length === 0 && !groupFilterLength || filters.length === cleanedFilters.length)) {
+    return Promise.resolve();
   }
-  if (password === void 0) {
-    return Promise.reject();
+  let tasks = [];
+  if (groupFilterLength) {
+    tasks.push(dispatch(actions3.setDeviceFilters(cleanedFilters)));
+  } else {
+    tasks.push(dispatch(actions3.setDeviceFilters(filters)));
+    tasks.push(dispatch(getGroupDevices({ group: groupName, perPage: 1, shouldIncludeAllStates: true })));
   }
-  const twoFAError = is2FABackend ? " and verification code" : "";
-  const errorMessage = `There was a problem logging in. Please check your email${twoFAError ? "," : " and"} password${twoFAError}. If you still have problems, contact an administrator.`;
-  return Promise.reject(dispatch(setSnackbar4((0, import_helpers10.preformatWithRequestID)(err.response, errorMessage), null, "Copy to clipboard")));
-};
-var loginUser = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/loginUser`,
-  ({ stayLoggedIn, ...userData }, { dispatch, rejectWithValue }) => users_api_default.postLogin(`${useradmApiUrlv1}/auth/login`, { ...userData, no_expiry: stayLoggedIn }).catch((err) => {
-    cleanUp();
-    return Promise.reject(dispatch(handleLoginError(err, userData, rejectWithValue)));
-  }).then(({ text: response, contentType }) => {
-    if (contentType.includes(APPLICATION_JSON_CONTENT_TYPE)) {
-      const { id, kind } = response;
-      const type = kind.split("/")[1];
-      const ssoLoginUrl = SSO_TYPES[type].getStartUrl(id);
-      window.location.replace(ssoLoginUrl);
-      return;
+  const selectedGroupName = selectedGroup || !Object.keys(getGroupsById(getState())).length ? groupName : void 0;
+  tasks.push(dispatch(actions3.selectGroup(selectedGroupName)));
+  return Promise.all(tasks);
+});
+var getEarliestTs = (dateA = "", dateB = "") => !dateA || !dateB ? dateA || dateB : dateA < dateB ? dateA : dateB;
+var reduceReceivedDevices = (devices, ids, state, status) => devices.reduce(
+  (accu, device) => {
+    const stateDevice = getDeviceById(state, device.id);
+    const {
+      attributes: storedAttributes = {},
+      identity_data: storedIdentity = {},
+      monitor: storedMonitor = {},
+      tags: storedTags = {},
+      group: storedGroup
+    } = stateDevice;
+    const { identity, inventory, monitor, system = {}, tags } = mapDeviceAttributes(device.attributes);
+    device.tags = { ...storedTags, ...tags };
+    device.group = system.group ?? storedGroup;
+    device.monitor = { ...storedMonitor, ...monitor };
+    device.identity_data = { ...storedIdentity, ...identity, ...device.identity_data ? device.identity_data : {} };
+    device.status = status ? status : device.status || identity.status;
+    device.check_in_time_rounded = system.check_in_time ?? stateDevice.check_in_time_rounded;
+    device.check_in_time_exact = device.check_in_time ?? stateDevice.check_in_time_exact;
+    device.created_ts = getEarliestTs(getEarliestTs(system.created_ts, device.created_ts), stateDevice.created_ts);
+    device.updated_ts = device.attributes ? device.updated_ts : stateDevice.updated_ts;
+    device.isNew = new Date(device.created_ts) > new Date(state.app.newThreshold);
+    device.isOffline = new Date(device.check_in_time_rounded) < new Date(state.app.offlineThreshold) || device.check_in_time_rounded === void 0;
+    device.attributes = device.attributes ? { ...storedAttributes, ...inventory } : storedAttributes;
+    accu.devicesById[device.id] = { ...stateDevice, ...device };
+    accu.ids.push(device.id);
+    return accu;
+  },
+  { ids, devicesById: {} }
+);
+var getGroupDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getGroupDevices`, (options, { dispatch, getState }) => {
+  const { group, shouldIncludeAllStates, ...remainder } = options;
+  const { cleanedFilters: filterSelection } = getGroupFilters(group, getState().devices.groups);
+  return Promise.resolve(
+    dispatch(getDevicesByStatus2({ ...remainder, filterSelection, group, status: shouldIncludeAllStates ? void 0 : DEVICE_STATES.accepted }))
+  ).unwrap().then((results) => {
+    if (!group) {
+      return Promise.resolve();
     }
-    const token = response;
-    if (contentType !== APPLICATION_JWT_CONTENT_TYPE || !token) {
-      return;
+    const { deviceAccu, total } = results[results.length - 1];
+    const stateGroup = getState().devices.groups.byId[group];
+    if (!stateGroup && !total && !deviceAccu.ids.length) {
+      return Promise.resolve();
     }
-    let now = /* @__PURE__ */ new Date();
-    now.setSeconds(now.getSeconds() + maxSessionAge);
-    const expiresAt = stayLoggedIn ? void 0 : now.toISOString();
-    setSessionInfo({ token, expiresAt });
-    cookies3.remove("JWT", { path: "/" });
-    return (
-      // @ts-ignore
-      Promise.resolve(dispatch(getUser(OWN_USER_ID))).unwrap().catch((e) => {
-        cleanUp();
-        return Promise.reject(dispatch(setSnackbar4((0, import_helpers10.extractErrorMessage)(e))));
-      }).then(() => {
-        window.sessionStorage.removeItem("pendings-redirect");
-        if (window.location.pathname !== "/ui/") {
-          window.location.replace("/ui/");
-        }
-        return Promise.resolve(dispatch(actions8.successfullyLoggedIn({ expiresAt, token })));
-      })
+    return Promise.resolve(
+      dispatch(
+        actions3.addGroup({
+          group: {
+            deviceIds: deviceAccu.ids.length === total || deviceAccu.ids.length > stateGroup?.deviceIds ? deviceAccu.ids : stateGroup.deviceIds,
+            total
+          },
+          groupName: group
+        })
+      )
     );
-  })
-);
-var logoutUser = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/logoutUser`, (_, { dispatch, getState }) => {
-  if (Object.keys(getState().app.uploadsById).length) {
-    return Promise.reject();
-  }
-  return general_api_default.post(`${useradmApiUrlv1}/auth/logout`).finally(() => {
-    cleanUp();
-    (0, import_retrytimer.clearAllRetryTimers)(setSnackbar4);
-    return Promise.resolve(dispatch({ type: USER_LOGOUT }));
   });
 });
-var switchUserOrganization = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/switchUserOrganization`, (tenantId, { getState }) => {
-  if (Object.keys(getState().app.uploadsById).length) {
-    return Promise.reject();
+var getAllGroupDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getAllGroupDevices`, (group, { dispatch, getState }) => {
+  if (!group || !!group && (!getGroupsById(getState())[group] || getGroupsById(getState())[group].filters.length)) {
+    return Promise.resolve();
   }
-  return general_api_default.get(`${useradmApiUrlv1}/users/tenants/${tenantId}/token`).then(({ data: token }) => {
-    setSessionInfo({ ...getSessionInfo(), token });
-    window.location.reload();
+  const { attributes, filterTerms } = prepareSearchArguments({
+    filters: [],
+    group,
+    state: getState(),
+    status: DEVICE_STATES.accepted
   });
-});
-var passwordResetStart = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/passwordResetStart`,
-  (email, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/auth/password-reset/start`, { email }).catch(
-    (err) => commonErrorHandler(err, `The password reset request cannot be processed:`, dispatch, void 0, true)
-  )
-);
-var passwordResetComplete = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/passwordResetComplete`,
-  ({ secretHash, newPassword }, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/auth/password-reset/complete`, { secret_hash: secretHash, password: newPassword }).catch((err = {}) => {
-    const { error, response = {} } = err;
-    let errorMsg = "";
-    if (response.status == 400) {
-      errorMsg = "the link you are using expired or the request is not valid, please try again.";
-    } else {
-      errorMsg = error;
-    }
-    dispatch(setSnackbar4("The password reset request cannot be processed: " + errorMsg));
-    return Promise.reject(err);
-  })
-);
-var verifyEmailStart = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/verifyEmailStart`,
-  (_, { dispatch, getState }) => general_api_default.post(`${useradmApiUrlv1}/auth/verify-email/start`, { email: getCurrentUser(getState()).email }).catch((err) => commonErrorHandler(err, "An error occured starting the email verification process:", dispatch)).finally(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))))
-);
-var verifyEmailComplete = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/verifyEmailComplete`,
-  (secret_hash, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/auth/verify-email/complete`, { secret_hash }).catch((err) => commonErrorHandler(err, "An error occured completing the email verification process:", dispatch)).finally(() => Promise.resolve(dispatch(getUser(OWN_USER_ID))))
-);
-var verify2FA = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/verify2FA`,
-  (tfaData, { dispatch }) => users_api_default.putVerifyTFA(`${useradmApiUrlv1}/2faverify`, tfaData).then(() => Promise.resolve(dispatch(getUser(OWN_USER_ID)))).catch(
-    (err) => commonErrorHandler(err, "An error occured validating the verification code: failed to verify token, please try again.", dispatch, void 0, true)
-  )
-);
-var getUserList = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getUserList`,
-  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/users`).then((res) => {
-    const users = res.data.reduce((accu, item) => {
-      accu[item.id] = item;
-      return accu;
-    }, {});
-    return dispatch(actions8.receivedUserList(users));
-  }).catch((err) => commonErrorHandler(err, `Users couldn't be loaded.`, dispatch, commonErrorFallback))
-);
-var getUser = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getUser`,
-  (id, { dispatch, rejectWithValue }) => general_api_default.get(`${useradmApiUrlv1}/users/${id}`).then(
-    ({ data: user }) => Promise.all([
-      dispatch(actions8.receivedUser(user)),
-      // @ts-ignore
-      dispatch(setHideAnnouncement({ shouldHide: false, userId: user.id })),
-      // @ts-ignore
-      dispatch(updateUserColumnSettings({ currentUserId: user.id })),
-      user
-    ])
-  ).catch((e) => rejectWithValue(e))
-);
-var initializeSelf = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/initializeSelf`, (_, { dispatch }) => dispatch(getUser(OWN_USER_ID)));
-var updateUserColumnSettings = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/updateUserColumnSettings`, ({ columns, currentUserId }, { dispatch, getState }) => {
-  const userId = currentUserId ?? getCurrentUser(getState()).id;
-  const storageKey = `${userId}-column-widths`;
-  let customColumns = [];
-  if (!columns) {
-    try {
-      customColumns = JSON.parse(window.localStorage.getItem(storageKey)) || customColumns;
-    } catch {
+  const getAllDevices = (perPage = MAX_PAGE_SIZE, page = defaultPage3, devices = []) => general_api_default.post(getSearchEndpoint(getState()), {
+    page,
+    per_page: perPage,
+    filters: filterTerms,
+    attributes
+  }).then((res) => {
+    const state = getState();
+    const deviceAccu = reduceReceivedDevices(res.data, devices, state);
+    dispatch(actions3.receivedDevices(deviceAccu.devicesById));
+    const total = Number(res.headers[headerNames.total]);
+    if (total > perPage * page) {
+      return getAllDevices(perPage, page + 1, deviceAccu.ids);
     }
-  } else {
-    customColumns = columns;
-  }
-  window.localStorage.setItem(storageKey, JSON.stringify(customColumns));
-  return Promise.resolve(dispatch(actions8.setCustomColumns(customColumns)));
+    return Promise.resolve(dispatch(actions3.addGroup({ group: { deviceIds: deviceAccu.ids, total: deviceAccu.ids.length }, groupName: group })));
+  });
+  return getAllDevices();
 });
-var userActions = {
-  add: {
-    successMessage: "The user was added successfully.",
-    errorMessage: "adding"
-  },
-  create: {
-    successMessage: "The user was created successfully.",
-    errorMessage: "creating"
-  },
-  edit: {
-    successMessage: "The user has been updated.",
-    errorMessage: "editing"
-  },
-  remove: {
-    successMessage: "The user was removed from the system.",
-    errorMessage: "removing"
+var getAllDynamicGroupDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getAllDynamicGroupDevices`, (group, { dispatch, getState }) => {
+  if (!!group && (!getGroupsById(getState())[group] || !getGroupsById(getState())[group].filters.length)) {
+    return Promise.resolve();
   }
-};
-var userActionErrorHandler = (err, type, dispatch) => commonErrorHandler(err, `There was an error ${userActions[type].errorMessage} the user.`, dispatch);
-var createUser = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/createUser`,
-  ({ shouldResetPassword, ...userData }, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/users`, { ...userData, send_reset_password: shouldResetPassword }).then(() => Promise.all([dispatch(actions8.createdUser(userData)), dispatch(getUserList()), dispatch(setSnackbar4(userActions.create.successMessage))])).catch((err) => userActionErrorHandler(err, "create", dispatch))
-);
-var removeUser = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/removeUser`,
-  (userId, { dispatch }) => (
-    // @ts-ignore
-    general_api_default.delete(`${useradmApiUrlv1}/users/${userId}`).then(() => Promise.all([dispatch(actions8.removedUser(userId)), dispatch(getUserList()), dispatch(setSnackbar4(userActions.remove.successMessage))])).catch((err) => userActionErrorHandler(err, "remove", dispatch))
-  )
-);
-var editUser = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/editUser`,
-  ({ id, ...userData }, { dispatch, getState }) => general_api_default.put(`${useradmApiUrlv1}/users/${id}`, userData).then(
-    () => Promise.all([
-      dispatch(actions8.updatedUser({ ...userData, id: id === OWN_USER_ID ? getCurrentUser(getState()).id : id })),
-      dispatch(setSnackbar4(userActions.edit.successMessage))
-    ])
-  )
-);
-var addUserToCurrentTenant = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/addUserToTenant`, (userId, { dispatch, getState }) => {
-  const { id } = getOrganization(getState());
-  return general_api_default.post(`${useradmApiUrlv1}/users/${userId}/assign`, { tenant_ids: [id] }).catch((err) => commonErrorHandler(err, `There was an error adding the user to your organization:`, dispatch)).then(() => Promise.all([dispatch(setSnackbar4(userActions.add.successMessage)), dispatch(getUserList())]));
+  const { attributes, filterTerms: filters } = prepareSearchArguments({
+    filters: getState().devices.groups.byId[group].filters,
+    state: getState(),
+    status: DEVICE_STATES.accepted
+  });
+  const getAllDevices = (perPage = MAX_PAGE_SIZE, page = defaultPage3, devices = []) => general_api_default.post(getSearchEndpoint(getState()), { page, per_page: perPage, filters, attributes }).then((res) => {
+    const state = getState();
+    const deviceAccu = reduceReceivedDevices(res.data, devices, state);
+    dispatch(actions3.receivedDevices(deviceAccu.devicesById));
+    const total = Number(res.headers[headerNames.total]);
+    if (total > deviceAccu.ids.length) {
+      return getAllDevices(perPage, page + 1, deviceAccu.ids);
+    }
+    return Promise.resolve(dispatch(actions3.addGroup({ group: { deviceIds: deviceAccu.ids, total }, groupName: group })));
+  });
+  return getAllDevices();
 });
-var enableUser2fa = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/enableUser2fa`,
-  (userId = OWN_USER_ID, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/users/${userId}/2fa/enable`).catch((err) => commonErrorHandler(err, `There was an error enabling Two Factor authentication for the user.`, dispatch)).then(() => Promise.resolve(dispatch(getUser(userId))))
-);
-var disableUser2fa = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/disableUser2fa`,
-  (userId = OWN_USER_ID, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/users/${userId}/2fa/disable`).catch((err) => commonErrorHandler(err, `There was an error disabling Two Factor authentication for the user.`, dispatch)).then(() => Promise.resolve(dispatch(getUser(userId))))
-);
-var mapHttpPermission = (permission) => Object.entries(uiPermissionsByArea).reduce(
-  (accu, [area, definition]) => {
-    const endpointMatches = definition.endpoints.filter(
-      (endpoint) => endpoint.path.test(permission.value) && (endpoint.types.includes(permission.type) || permission.type === PermissionTypes.Any)
-    );
-    if (permission.value === PermissionTypes.Any || permission.value.includes(apiRoot) && endpointMatches.length) {
-      const endpointUiPermission = endpointMatches.reduce((endpointAccu, endpoint) => [...endpointAccu, ...endpoint.uiPermissions], []);
-      const collector = (endpointUiPermission || definition.uiPermissions).reduce((permissionsAccu, uiPermission) => {
-        if (permission.type === PermissionTypes.Any || !endpointMatches.length && uiPermission.verbs.some((verb) => verb === permission.type)) {
-          permissionsAccu.push(uiPermission.value);
-        }
-        return permissionsAccu;
-      }, []).filter(import_helpers10.duplicateFilter);
-      if (Array.isArray(accu[area])) {
-        accu[area] = [...accu[area], ...collector].filter(import_helpers10.duplicateFilter);
-      } else {
-        accu[area] = mergePermissions(accu[area], { [scopedPermissionAreas[area].excessiveAccessSelector]: collector });
-      }
+var getDeviceById2 = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceById`,
+  (id, { dispatch, getState }) => general_api_default.get(`${inventoryApiUrl}/devices/${id}`).then((res) => {
+    const device = reduceReceivedDevices([res.data], [], getState()).devicesById[id];
+    device.etag = res.headers.etag;
+    dispatch(actions3.receivedDevice(device));
+    return Promise.resolve(device);
+  }).catch((err) => {
+    const errMsg = (0, import_helpers10.extractErrorMessage)(err);
+    if (errMsg.includes("Not Found")) {
+      console.log(`${id} does not have any inventory information`);
+      const device = reduceReceivedDevices(
+        [
+          {
+            id,
+            attributes: [
+              { name: "status", value: "decomissioned", scope: "identity" },
+              { name: "decomissioned", value: "true", scope: "inventory" }
+            ]
+          }
+        ],
+        [],
+        getState()
+      ).devicesById[id];
+      dispatch(actions3.receivedDevice(device));
     }
-    return accu;
-  },
-  { ...emptyUiPermissions }
+  })
 );
-var permissionActionTypes = {
-  any: mapHttpPermission,
-  CREATE_DEPLOYMENT: (permission) => permission.type === PermissionTypes.DeviceGroup ? {
-    deployments: [uiPermissionsById.deploy.value],
-    groups: { [permission.value]: [uiPermissionsById.deploy.value] }
-  } : {},
-  http: mapHttpPermission,
-  REMOTE_TERMINAL: (permission) => permission.type === PermissionTypes.DeviceGroup ? {
-    groups: { [permission.value]: [uiPermissionsById.connect.value] }
-  } : {},
-  VIEW_DEVICE: (permission) => permission.type === PermissionTypes.DeviceGroup ? {
-    groups: { [permission.value]: [uiPermissionsById.read.value] }
-  } : {}
-};
-var combinePermissions = (existingPermissions, additionalPermissions = {}) => Object.entries(additionalPermissions).reduce((accu, [name, permissions]) => {
-  let maybeExistingPermissions = accu[name] || [];
-  accu[name] = [...permissions, ...maybeExistingPermissions].filter(import_helpers10.duplicateFilter);
-  return accu;
-}, existingPermissions);
-var tryParseCustomPermission = (permission) => {
-  const uiPermissions = permissionActionTypes[permission.action](permission.object);
-  const result = mergePermissions({ ...emptyUiPermissions }, uiPermissions);
-  return { isCustom: true, permission, result };
-};
-var customPermissionHandler = (accu, permission) => {
-  let processor = tryParseCustomPermission(permission);
-  return {
-    ...accu,
-    isCustom: accu.isCustom || processor.isCustom,
-    uiPermissions: mergePermissions(accu.uiPermissions, processor.result)
-  };
-};
-var mapPermissionSet = (permissionSetName, names, scope, existingGroupsPermissions = {}) => {
-  const permission = Object.values(uiPermissionsById).find((permission2) => permission2.permissionSets[scope] === permissionSetName).value;
-  const scopedPermissions = names.reduce((accu, name) => combinePermissions(accu, { [name]: [permission] }), existingGroupsPermissions);
-  return Object.entries(scopedPermissions).reduce((accu, [key, permissions]) => ({ ...accu, [key]: deriveImpliedAreaPermissions(scope, permissions) }), {});
-};
-var isEmptyPermissionSet = (permissionSet) => !Object.values(permissionSet).reduce((accu, permissions) => {
-  if (Array.isArray(permissions)) {
-    return accu || !!permissions.length;
+var getDeviceInfo = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getDeviceInfo`, (deviceId, { dispatch, getState }) => {
+  const device = getDeviceById(getState(), deviceId);
+  const { hasDeviceConfig, hasDeviceConnect, hasMonitor } = getTenantCapabilities(getState());
+  const { canConfigure } = getUserCapabilities(getState());
+  const integrations = getDeviceTwinIntegrations(getState());
+  let tasks = [dispatch(getDeviceAuth(deviceId)), ...integrations.map((integration) => dispatch(getDeviceTwin({ deviceId, integration })))];
+  if (hasDeviceConfig && canConfigure && [DEVICE_STATES.accepted, DEVICE_STATES.preauth].includes(device.status)) {
+    tasks.push(dispatch(getDeviceConfig(deviceId)));
   }
-  return accu || !(0, import_helpers10.isEmpty)(permissions);
-}, false);
-var parseRolePermissions = ({ permission_sets_with_scope = [], permissions = [] }, permissionSets) => {
-  const preliminaryResult = permission_sets_with_scope.reduce(
-    (accu, permissionSet) => {
-      let processor = permissionSets[permissionSet.name];
-      if (!processor) {
-        return accu;
-      }
-      const scope = Object.keys(scopedPermissionAreas).find((scope2) => uiPermissionsByArea[scope2].scope === permissionSet.scope?.type);
-      if (scope) {
-        const result = mapPermissionSet(permissionSet.name, permissionSet.scope.value, scope, accu.uiPermissions[scope]);
-        return { ...accu, uiPermissions: { ...accu.uiPermissions, [scope]: result } };
-      } else if (isEmptyPermissionSet(processor.result)) {
-        return processor.permissions.reduce(customPermissionHandler, accu);
+  if (device.status === DEVICE_STATES.accepted) {
+    tasks.push(dispatch(getDeviceById2(deviceId)));
+    if (hasDeviceConnect) {
+      tasks.push(dispatch(getDeviceConnect(deviceId)));
+    }
+    if (hasMonitor) {
+      tasks.push(dispatch(getLatestDeviceAlerts({ id: deviceId })));
+      tasks.push(dispatch(getDeviceMonitorConfig(deviceId)));
+    }
+  }
+  return Promise.all(tasks);
+});
+var deriveInactiveDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/deriveInactiveDevices`, (deviceIds, { dispatch, getState }) => {
+  const yesterday = /* @__PURE__ */ new Date();
+  yesterday.setDate(yesterday.getDate() - 1);
+  const yesterdaysIsoString = yesterday.toISOString();
+  const devices = deviceIds.reduce(
+    (accu, id) => {
+      const device = getDeviceById(getState(), id);
+      if (device && device.updated_ts > yesterdaysIsoString) {
+        accu.active.push(id);
+      } else {
+        accu.inactive.push(id);
       }
-      return {
-        ...accu,
-        isCustom: accu.isCustom || processor.isCustom,
-        uiPermissions: mergePermissions(accu.uiPermissions, processor.result)
-      };
+      return accu;
     },
-    { isCustom: false, uiPermissions: { ...emptyUiPermissions, groups: {}, releases: {} } }
+    { active: [], inactive: [] }
   );
-  return permissions.reduce(customPermissionHandler, preliminaryResult);
-};
-var normalizeRbacRoles = (roles, rolesById2, permissionSets) => roles.reduce(
-  (accu, role) => {
-    let normalizedPermissions;
-    let isCustom = false;
-    if (rolesById2[role.name]) {
-      normalizedPermissions = {
-        ...rolesById2[role.name].uiPermissions,
-        groups: { ...rolesById2[role.name].uiPermissions.groups },
-        releases: { ...rolesById2[role.name].uiPermissions.releases }
-      };
-    } else {
-      const result = parseRolePermissions(role, permissionSets);
-      normalizedPermissions = result.uiPermissions;
-      isCustom = result.isCustom;
+  return dispatch(actions3.setInactiveDevices({ activeDeviceTotal: devices.active.length, inactiveDeviceTotal: devices.inactive.length }));
+});
+var getDeviceCount = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceCount`,
+  (status, { dispatch, getState }) => general_api_default.post(getSearchEndpoint(getState()), {
+    page: 1,
+    per_page: 1,
+    filters: mapFiltersToTerms([{ key: "status", value: status, operator: DEVICE_FILTERING_OPTIONS.$eq.key, scope: "identity" }]),
+    attributes: defaultAttributes
+  }).then((response) => {
+    const count = Number(response.headers[headerNames.total]);
+    if (status) {
+      return dispatch(actions3.setDevicesCountByStatus({ count, status }));
     }
-    const roleState = accu[role.name] ?? { ...emptyRole };
-    accu[role.name] = {
-      ...roleState,
-      ...role,
-      description: roleState.description ? roleState.description : role.description,
-      editable: !rolesById[role.name] && !isCustom && (typeof roleState.editable !== "undefined" ? roleState.editable : true),
-      isCustom,
-      name: roleState.name ? roleState.name : role.name,
-      uiPermissions: normalizedPermissions
+    return dispatch(actions3.setTotalDevices(count));
+  })
+);
+var getAllDeviceCounts = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getAllDeviceCounts`,
+  (_, { dispatch }) => Promise.all([DEVICE_STATES.accepted, DEVICE_STATES.pending].map((status) => dispatch(getDeviceCount(status))))
+);
+var getDeviceLimit2 = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceLimit`,
+  (_, { dispatch }) => general_api_default.get(`${deviceAuthV2}/limits/max_devices`).then((res) => dispatch(actions3.setDeviceLimit(res.data.limit)))
+);
+var setDeviceListState = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/setDeviceListState`,
+  ({ shouldSelectDevices = true, forceRefresh, fetchAuth = true, ...selectionState }, { dispatch, getState }) => {
+    const currentState = getDeviceListState(getState());
+    const refreshTrigger = forceRefresh ? !currentState.refreshTrigger : selectionState.refreshTrigger;
+    let nextState = {
+      ...currentState,
+      setOnly: false,
+      refreshTrigger,
+      ...selectionState,
+      sort: { ...currentState.sort, ...selectionState.sort }
     };
+    let tasks = [];
+    const { isLoading: currentLoading, deviceIds: currentDevices, selection: currentSelection, ...currentRequestState } = currentState;
+    const { isLoading: nextLoading, deviceIds: nextDevices, selection: nextSelection, ...nextRequestState } = nextState;
+    if (!nextState.setOnly && !(0, import_helpers10.deepCompare)(currentRequestState, nextRequestState)) {
+      const { direction: sortDown = SORTING_OPTIONS.desc, key: sortCol, scope: sortScope } = nextState.sort ?? {};
+      const sortBy = sortCol ? [{ attribute: sortCol, order: sortDown, scope: sortScope }] : void 0;
+      const applicableSelectedState = nextState.state === ALL_DEVICE_STATES ? void 0 : nextState.state;
+      nextState.isLoading = true;
+      tasks.push(
+        dispatch(getDevicesByStatus2({ ...nextState, status: applicableSelectedState, sortOptions: sortBy, fetchAuth })).unwrap().then((results) => {
+          const { deviceAccu, total } = results[results.length - 1];
+          const devicesState = shouldSelectDevices ? { deviceIds: deviceAccu.ids, total, isLoading: false } : { isLoading: false };
+          return Promise.resolve(dispatch(actions3.setDeviceListState(devicesState)));
+        }).catch(() => Promise.resolve({ isLoading: false }))
+      );
+    }
+    tasks.push(dispatch(actions3.setDeviceListState(nextState)));
+    return Promise.all(tasks);
+  }
+);
+var getDevicesByStatus2 = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getDevicesByStatus`, (options, { dispatch, getState }) => {
+  const {
+    status,
+    fetchAuth = true,
+    filterSelection,
+    group,
+    selectedIssues = [],
+    page = defaultPage3,
+    perPage = defaultPerPage3,
+    sortOptions = [],
+    selectedAttributes = getSelectedDeviceAttribute(getState())
+  } = options;
+  const state = getState();
+  const { applicableFilters, filterTerms } = convertDeviceListStateToFilters({
+    filters: filterSelection ?? getDeviceFilters(state),
+    group: group ?? getSelectedGroup(state),
+    groups: state.devices.groups,
+    offlineThreshold: state.app.offlineThreshold,
+    selectedIssues,
+    status
+  });
+  const attributes = [...defaultAttributes, getIdAttribute(getState()), ...selectedAttributes];
+  return general_api_default.post(getSearchEndpoint(getState()), {
+    page,
+    per_page: perPage,
+    filters: filterTerms,
+    sort: sortOptions,
+    attributes
+  }).then((response) => {
+    const state2 = getState();
+    const deviceAccu = reduceReceivedDevices(response.data, [], state2, status);
+    let total = !applicableFilters.length ? Number(response.headers[headerNames.total]) : null;
+    if (status && state2.devices.byStatus[status].total === deviceAccu.ids.length) {
+      total = deviceAccu.ids.length;
+    }
+    let tasks = [dispatch(actions3.receivedDevices(deviceAccu.devicesById))];
+    if (status) {
+      tasks.push(dispatch(actions3.setDevicesByStatus({ deviceIds: deviceAccu.ids, status, total })));
+    }
+    const receivedDevices = Object.values(deviceAccu.devicesById);
+    if (receivedDevices.length && fetchAuth) {
+      tasks.push(dispatch(getDevicesWithAuth(receivedDevices)));
+    }
+    tasks.push(Promise.resolve({ deviceAccu, total: Number(response.headers[headerNames.total]) }));
+    return Promise.all(tasks);
+  }).catch((err) => commonErrorHandler(err, `${status} devices couldn't be loaded.`, dispatch, commonErrorFallback));
+});
+var getAllDevicesByStatus = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getAllDevicesByStatus`, (status, { dispatch, getState }) => {
+  const attributes = [...defaultAttributes, getIdAttribute(getState())];
+  const getAllDevices = (perPage = MAX_PAGE_SIZE, page = 1, devices = []) => general_api_default.post(getSearchEndpoint(getState()), {
+    page,
+    per_page: perPage,
+    filters: mapFiltersToTerms([{ key: "status", value: status, operator: DEVICE_FILTERING_OPTIONS.$eq.key, scope: "identity" }]),
+    attributes
+  }).then((res) => {
+    const state = getState();
+    const deviceAccu = reduceReceivedDevices(res.data, devices, state, status);
+    dispatch(actions3.receivedDevices(deviceAccu.devicesById));
+    const total = Number(res.headers[headerNames.total]);
+    if (total > state.deployments.deploymentDeviceLimit) {
+      return Promise.resolve();
+    }
+    if (total > perPage * page) {
+      return getAllDevices(perPage, page + 1, deviceAccu.ids);
+    }
+    let tasks = [dispatch(actions3.setDevicesByStatus({ deviceIds: deviceAccu.ids, forceUpdate: true, status, total: deviceAccu.ids.length }))];
+    if (status === DEVICE_STATES.accepted && deviceAccu.ids.length === total) {
+      tasks.push(dispatch(deriveInactiveDevices(deviceAccu.ids)));
+      tasks.push(dispatch(deriveReportsData()));
+    }
+    return Promise.all(tasks);
+  });
+  return getAllDevices();
+});
+var searchDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/searchDevices`, (passedOptions = {}, { dispatch, getState }) => {
+  const state = getState();
+  let options = { ...state.app.searchState, ...passedOptions };
+  const { page = defaultPage3, searchTerm, sortOptions = [] } = options;
+  const { columnSelection = [] } = getUserSettings(state);
+  const selectedAttributes = columnSelection.map((column) => ({ attribute: column.key, scope: column.scope }));
+  const attributes = (0, import_helpers10.attributeDuplicateFilter)([...defaultAttributes, getIdAttribute(state), ...selectedAttributes], "attribute");
+  return general_api_default.post(getSearchEndpoint(getState()), {
+    page,
+    per_page: 10,
+    filters: [],
+    sort: sortOptions,
+    text: searchTerm,
+    attributes
+  }).then((response) => {
+    const deviceAccu = reduceReceivedDevices(response.data, [], getState());
+    return Promise.all([
+      dispatch(actions3.receivedDevices(deviceAccu.devicesById)),
+      Promise.resolve({ deviceIds: deviceAccu.ids, searchTotal: Number(response.headers[headerNames.total]) })
+    ]);
+  }).catch((err) => commonErrorHandler(err, `devices couldn't be searched.`, dispatch, commonErrorFallback));
+});
+var ATTRIBUTE_LIST_CUTOFF = 100;
+var attributeReducer = (attributes = []) => attributes.slice(0, ATTRIBUTE_LIST_CUTOFF).reduce(
+  (accu, { name, scope }) => {
+    if (!accu[scope]) {
+      accu[scope] = [];
+    }
+    accu[scope].push(name);
     return accu;
   },
-  { ...rolesById2 }
+  { identity: [], inventory: [], system: [], tags: [] }
 );
-var getPermissionSets = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getPermissionSets`,
-  (_, { dispatch, getState }) => general_api_default.get(`${useradmApiUrlv2}/permission_sets?per_page=500`).then(({ data }) => {
-    const permissionSets = data.reduce(
-      (accu, permissionSet) => {
-        const permissionSetState = accu[permissionSet.name] ?? {};
-        let permissionSetObject = { ...permissionSetState, ...permissionSet };
-        permissionSetObject.result = Object.values(uiPermissionsById).reduce(
-          (accu2, item) => Object.entries(item.permissionSets).reduce((collector, [area, permissionSet2]) => {
-            if (scopedPermissionAreas[area]) {
-              return collector;
-            }
-            if (permissionSet2 === permissionSetObject.name) {
-              collector[area] = [...collector[area], item.value].filter(import_helpers10.duplicateFilter);
-            }
-            return collector;
-          }, accu2),
-          { ...emptyUiPermissions, ...permissionSetObject.result ?? {} }
-        );
-        const scopes = Object.values(scopedPermissionAreas).reduce((accu2, { key, scopeType }) => {
-          if (permissionSetObject.supported_scope_types?.includes(key) || permissionSetObject.supported_scope_types?.includes(scopeType)) {
-            accu2.push(key);
-          }
-          return accu2;
-        }, []);
-        permissionSetObject = scopes.reduce((accu2, scope) => {
-          accu2.result[scope] = mapPermissionSet(permissionSetObject.name, [scopedPermissionAreas[scope].excessiveAccessSelector], scope);
-          return accu2;
-        }, permissionSetObject);
-        accu[permissionSet.name] = permissionSetObject;
-        return accu;
-      },
-      // @ts-ignore
-      { ...getState().users.permissionSetsById }
-    );
-    return Promise.all([dispatch(actions8.receivedPermissionSets(permissionSets)), permissionSets]);
-  }).catch(() => console.log("Permission set retrieval failed - likely accessing a non-RBAC backend"))
+var getDeviceAttributes = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceAttributes`,
+  (_, { dispatch, getState }) => general_api_default.get(getAttrsEndpoint(getState())).then(({ data }) => {
+    const { identity: identityAttributes, inventory: inventoryAttributes, system: systemAttributes, tags: tagAttributes } = attributeReducer(data || []);
+    return dispatch(actions3.setFilterAttributes({ identityAttributes, inventoryAttributes, systemAttributes, tagAttributes }));
+  })
 );
-var getRoles = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getRoles`,
-  (_, { dispatch, getState }) => Promise.all([general_api_default.get(`${useradmApiUrlv2}/roles?per_page=500`), dispatch(getPermissionSets())]).then((results) => {
-    if (!results) {
-      return Promise.resolve();
-    }
-    const [{ data: roles }, { payload: permissionSetTasks }] = results;
-    const rolesById2 = normalizeRbacRoles(roles, getRolesById(getState()), permissionSetTasks[permissionSetTasks.length - 1]);
-    return Promise.resolve(dispatch(actions8.receivedRoles(rolesById2)));
-  }).catch(() => console.log("Role retrieval failed - likely accessing a non-RBAC backend"))
+var getReportingLimits = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getReportingLimits`,
+  (_, { dispatch }) => general_api_default.get(`${reportingApiUrl}/devices/attributes`).catch((err) => commonErrorHandler(err, `filterable attributes limit & usage could not be retrieved.`, dispatch, commonErrorFallback)).then(({ data }) => {
+    const { attributes, count, limit } = data;
+    const groupedAttributes = attributeReducer(attributes);
+    return Promise.resolve(dispatch(actions3.setFilterablesConfig({ count, limit, attributes: groupedAttributes })));
+  })
 );
-var deriveImpliedAreaPermissions = (area, areaPermissions, skipPermissions = []) => {
-  const highestAreaPermissionLevelSelected = areaPermissions.reduce(
-    (highest, current) => uiPermissionsById[current].permissionLevel > highest ? uiPermissionsById[current].permissionLevel : highest,
-    1
-  );
-  return uiPermissionsByArea[area].uiPermissions.reduce((permissions, current) => {
-    if ((current.permissionLevel < highestAreaPermissionLevelSelected || areaPermissions.includes(current.value)) && !skipPermissions.includes(current.value)) {
-      permissions.push(current.value);
-    }
-    return permissions;
-  }, []);
+var ensureVersionString = (software, fallback) => software.length && software !== "artifact_name" ? software.endsWith(".version") ? software : `${software}.version` : fallback;
+var getSingleReportData = (reportConfig, groups) => {
+  const { attribute, group, software = "" } = reportConfig;
+  const filters = [{ key: "status", scope: "identity", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: "accepted" }];
+  if (group) {
+    const staticGroupFilter = { key: "group", scope: "system", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: group };
+    const { cleanedFilters: groupFilters } = getGroupFilters(group, groups);
+    filters.push(...groupFilters.length ? groupFilters : [staticGroupFilter]);
+  }
+  const aggregationAttribute = ensureVersionString(software, attribute);
+  return general_api_default.post(`${reportingApiUrl}/devices/aggregate`, {
+    aggregations: [{ attribute: aggregationAttribute, name: "*", scope: "inventory", size: REPORT_CHART_SIZE_LIMIT }],
+    filters: mapFiltersToTerms(filters)
+  }).then(({ data }) => ({ data, reportConfig }));
 };
-var transformAreaRoleDataToScopedPermissionsSets = (area, areaPermissions, excessiveAccessSelector) => {
-  const permissionSetObject = areaPermissions.reduce((accu, { item, uiPermissions }) => {
-    const skipPermissions = scopedPermissionAreas.releases.key === area && item !== ALL_RELEASES ? [uiPermissionsById.upload.value] : [];
-    const impliedPermissions = deriveImpliedAreaPermissions(area, uiPermissions, skipPermissions);
-    accu = impliedPermissions.reduce((itemPermissionAccu, impliedPermission) => {
-      const permissionSetState = itemPermissionAccu[uiPermissionsById[impliedPermission].permissionSets[area]] ?? {
-        type: uiPermissionsByArea[area].scope,
-        value: []
-      };
-      itemPermissionAccu[uiPermissionsById[impliedPermission].permissionSets[area]] = {
-        ...permissionSetState,
-        value: [...permissionSetState.value, item]
-      };
-      return itemPermissionAccu;
-    }, accu);
+var getReportsData = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getReportsData`, (_, { dispatch, getState }) => {
+  const state = getState();
+  const currentUserId = getCurrentUser(state).id;
+  const reports = getUserSettings(state).reports || getGlobalSettings(state)[`${currentUserId}-reports`] || (Object.keys(getDevicesById(state)).length ? defaultReports : []);
+  return Promise.all(reports.map((report) => getSingleReportData(report, getState().devices.groups))).then((results) => {
+    const devicesState = getState().devices;
+    const totalDeviceCount = devicesState.byStatus.accepted.total;
+    const newReports = results.map(({ data, reportConfig }) => {
+      let { items, other_count } = data[0];
+      const { attribute, group, software = "" } = reportConfig;
+      const dataCount = items.reduce((accu, item) => accu + item.count, 0);
+      const otherCount = !group && (software === rootfsImageVersion || attribute === "artifact_name") ? totalDeviceCount - dataCount : other_count;
+      return { items, otherCount, total: otherCount + dataCount };
+    });
+    return Promise.resolve(dispatch(actions3.setDeviceReports(newReports)));
+  });
+});
+var initializeDistributionData = (report, groups, devices, totalDeviceCount) => {
+  const { attribute, group = "", software = "" } = report;
+  const effectiveAttribute = software ? software : attribute;
+  const { deviceIds, total = 0 } = groups[group] || {};
+  const relevantDevices = groups[group] ? deviceIds.map((id) => devices[id]) : Object.values(devices);
+  const distributionByAttribute = relevantDevices.reduce((accu, item) => {
+    if (!item.attributes || item.status !== DEVICE_STATES.accepted) return accu;
+    if (!accu[item.attributes[effectiveAttribute]]) {
+      accu[item.attributes[effectiveAttribute]] = 0;
+    }
+    accu[item.attributes[effectiveAttribute]] = accu[item.attributes[effectiveAttribute]] + 1;
     return accu;
   }, {});
-  return Object.entries(permissionSetObject).map(([name, { value, ...scope }]) => {
-    if (value.includes(excessiveAccessSelector)) {
-      return { name };
-    }
-    return { name, scope: { ...scope, value: value.filter(import_helpers10.duplicateFilter) } };
-  });
+  const distributionByAttributeSorted = Object.entries(distributionByAttribute).sort((pairA, pairB) => pairB[1] - pairA[1]);
+  const items = distributionByAttributeSorted.map(([key, count]) => ({ key, count }));
+  const dataCount = items.reduce((accu, item) => accu + item.count, 0);
+  const otherCount = (groups[group] ? total : totalDeviceCount) - dataCount;
+  return { items, otherCount, total: otherCount + dataCount };
 };
-var transformRoleDataToRole = (roleData, roleState = {}) => {
-  const role = { ...roleState, ...roleData };
-  const { description = "", name, uiPermissions = emptyUiPermissions } = role;
-  const { maybeUiPermissions, remainderKeys } = Object.entries(emptyUiPermissions).reduce(
-    (accu, [key, emptyPermissions]) => {
-      if (!scopedPermissionAreas[key]) {
-        accu.remainderKeys.push(key);
-      } else if (uiPermissions[key]) {
-        accu.maybeUiPermissions[key] = uiPermissions[key].reduce(itemUiPermissionsReducer, emptyPermissions);
-      }
-      return accu;
-    },
-    { maybeUiPermissions: {}, remainderKeys: [] }
-  );
-  const { permissionSetsWithScope, roleUiPermissions } = remainderKeys.reduce(
-    (accu, area) => {
-      const areaPermissions = role.uiPermissions[area];
-      if (!Array.isArray(areaPermissions)) {
-        return accu;
-      }
-      const impliedPermissions = deriveImpliedAreaPermissions(area, areaPermissions);
-      accu.roleUiPermissions[area] = impliedPermissions;
-      const mappedPermissions = impliedPermissions.map((uiPermission) => ({ name: uiPermissionsById[uiPermission].permissionSets[area] }));
-      accu.permissionSetsWithScope.push(...mappedPermissions);
-      return accu;
-    },
-    { permissionSetsWithScope: [{ name: defaultPermissionSets.Basic.name }], roleUiPermissions: {} }
-  );
-  const scopedPermissionSets = Object.values(scopedPermissionAreas).reduce((accu, { key, excessiveAccessSelector }) => {
-    if (!uiPermissions[key]) {
-      return accu;
+var deriveReportsData = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/deriveReportsData`, (_, { dispatch, getState }) => {
+  const state = getState();
+  const {
+    groups: { byId: groupsById },
+    byId,
+    byStatus: {
+      accepted: { total }
     }
-    accu.push(...transformAreaRoleDataToScopedPermissionsSets(key, uiPermissions[key], excessiveAccessSelector));
-    return accu;
-  }, []);
-  return {
-    permissionSetsWithScope: [...permissionSetsWithScope, ...scopedPermissionSets],
-    role: {
-      ...emptyRole,
-      name,
-      // @ts-ignore
-      description: description ? description : roleState.description,
-      uiPermissions: {
-        ...emptyUiPermissions,
-        ...roleUiPermissions,
-        ...maybeUiPermissions
-      }
+  } = state.devices;
+  const reports = getUserSettings(state).reports || state.users.globalSettings[`${state.users.currentUser}-reports`] || (Object.keys(byId).length ? defaultReports : []);
+  const newReports = reports.map((report) => initializeDistributionData(report, groupsById, byId, total));
+  return Promise.resolve(dispatch(actions3.setDeviceReports(newReports)));
+});
+var getReportsDataWithoutBackendSupport = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getReportsDataWithoutBackendSupport`,
+  (_, { dispatch, getState }) => Promise.all([dispatch(getAllDevicesByStatus(DEVICE_STATES.accepted)), dispatch(getGroups2()), dispatch(getDynamicGroups())]).then(() => {
+    const { dynamic: dynamicGroups, static: staticGroups } = getGroups(getState());
+    return Promise.all([
+      ...staticGroups.map(({ groupId }) => dispatch(getAllGroupDevices(groupId))),
+      ...dynamicGroups.map(({ groupId }) => dispatch(getAllDynamicGroupDevices(groupId)))
+    ]).then(() => dispatch(deriveReportsData()));
+  })
+);
+var getDeviceConnect = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceConnect`,
+  (id, { dispatch }) => general_api_default.get(`${deviceConnect}/devices/${id}`).then(
+    ({ data }) => Promise.all([dispatch(actions3.receivedDevice({ connect_status: data.status, connect_updated_ts: data.updated_ts, id })), Promise.resolve(data)])
+  )
+);
+var updateTypeMap = { deploymentUpdate: "check-update", inventoryUpdate: "send-inventory" };
+var triggerDeviceUpdate = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/triggerDeviceUpdate`,
+  ({ id, type }, { dispatch }) => general_api_default.post(`${deviceConnect}/devices/${id}/${updateTypeMap[type] ?? updateTypeMap.deploymentUpdate}`).then(
+    () => new Promise((resolve) => setTimeout(() => resolve(dispatch(getDeviceById2(id))), TIMEOUTS.threeSeconds))
+  )
+);
+var getSessionDetails = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getSessionDetails`, ({ sessionId, deviceId, userId, startDate, endDate }) => {
+  const { start: startUnix, end: endUnix } = (0, import_helpers10.dateRangeToUnix)(startDate, endDate);
+  const createdAfter = startDate ? `&created_after=${startUnix}` : "";
+  const createdBefore = endDate ? `&created_before=${endUnix}` : "";
+  const objectSearch = `&object_id=${deviceId}`;
+  return general_api_default.get(`${auditLogsApiUrl}/logs?per_page=500${createdAfter}${createdBefore}&actor_id=${userId}${objectSearch}`).then(
+    ({ data: auditLogEntries }) => {
+      const { start, end } = auditLogEntries.reduce(
+        (accu, item) => {
+          if (item.meta?.session_id?.includes(sessionId)) {
+            accu.start = new Date(item.action.startsWith("open") ? item.time : accu.start);
+            accu.end = new Date(item.action.startsWith("close") ? item.time : accu.end);
+          }
+          return accu;
+        },
+        { start: startDate || endDate, end: endDate || startDate }
+      );
+      return Promise.resolve({ start, end });
     }
-  };
-};
-var roleActions = {
-  create: {
-    successMessage: "The role was created successfully.",
-    errorMessage: "creating"
-  },
-  edit: {
-    successMessage: "The role has been updated.",
-    errorMessage: "editing"
-  },
-  remove: {
-    successMessage: "The role was deleted successfully.",
-    errorMessage: "removing"
-  }
-};
-var roleActionErrorHandler = (err, type, dispatch) => commonErrorHandler(err, `There was an error ${roleActions[type].errorMessage} the role.`, dispatch);
-var createRole = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/createRole`, (roleData, { dispatch }) => {
-  const { permissionSetsWithScope, role } = transformRoleDataToRole(roleData);
-  return general_api_default.post(`${useradmApiUrlv2}/roles`, {
-    name: role.name,
-    description: role.description,
-    permission_sets_with_scope: permissionSetsWithScope
-  }).then(() => Promise.all([dispatch(actions8.createdRole(role)), dispatch(getRoles()), dispatch(setSnackbar4(roleActions.create.successMessage))])).catch((err) => roleActionErrorHandler(err, "create", dispatch));
+  );
 });
-var editRole = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/editRole`, (roleData, { dispatch, getState }) => {
-  const { permissionSetsWithScope, role } = transformRoleDataToRole(roleData, getRolesById(getState())[roleData.name]);
-  return general_api_default.put(`${useradmApiUrlv2}/roles/${role.name}`, {
-    description: role.description,
-    name: role.name,
-    permission_sets_with_scope: permissionSetsWithScope
-  }).then(() => Promise.all([dispatch(actions8.createdRole(role)), dispatch(getRoles()), dispatch(setSnackbar4(roleActions.edit.successMessage))])).catch((err) => roleActionErrorHandler(err, "edit", dispatch));
+var getDeviceFileDownloadLink = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceFileDownloadLink`,
+  ({ deviceId, path }) => Promise.resolve(`${window.location.origin}${deviceConnect}/devices/${deviceId}/download?path=${encodeURIComponent(path)}`)
+);
+var deviceFileUpload = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/deviceFileUpload`, ({ deviceId, path, file }, { dispatch }) => {
+  let formData = new FormData();
+  formData.append("path", path);
+  formData.append("file", file);
+  const uploadId = (0, import_uuid.v4)();
+  const cancelSource = new AbortController();
+  return Promise.all([
+    dispatch(setSnackbar4("Uploading file")),
+    dispatch(initUpload({ id: uploadId, upload: { inprogress: true, uploadProgress: 0, cancelSource } })),
+    general_api_default.uploadPut(
+      `${deviceConnect}/devices/${deviceId}/upload`,
+      formData,
+      (e) => dispatch(uploadProgress2({ id: uploadId, progress: progress(e) })),
+      cancelSource.signal
+    )
+  ]).then(() => Promise.resolve(dispatch(setSnackbar4("Upload successful", TIMEOUTS.fiveSeconds)))).catch((err) => {
+    if ((0, import_axios3.isCancel)(err)) {
+      return dispatch(setSnackbar4("The upload has been cancelled", TIMEOUTS.fiveSeconds));
+    }
+    return commonErrorHandler(err, `Error uploading file to device.`, dispatch);
+  }).finally(() => dispatch(cleanUpUpload(uploadId)));
+});
+var getDeviceAuth = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceAuth`,
+  (id, { dispatch }) => dispatch(getDevicesWithAuth([{ id }])).unwrap().then((results) => {
+    if (results[results.length - 1]) {
+      return Promise.resolve(results[results.length - 1][0]);
+    }
+    return Promise.resolve();
+  })
+);
+var getDevicesWithAuth = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDevicesWithAuth`,
+  (devices, { dispatch, getState }) => devices.length ? general_api_default.get(`${deviceAuthV2}/devices?id=${devices.map((device) => device.id).join("&id=")}`).then(({ data: receivedDevices }) => {
+    const { devicesById } = reduceReceivedDevices(receivedDevices, [], getState());
+    return Promise.all([dispatch(actions3.receivedDevices(devicesById)), Promise.resolve(receivedDevices)]);
+  }).catch((err) => commonErrorHandler(err, `Error: ${err}`, dispatch)) : Promise.resolve([[], []])
+);
+var updateDeviceAuth = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/updateDeviceAuth`,
+  ({ deviceId, authId, status }, { dispatch, getState }) => general_api_default.put(`${deviceAuthV2}/devices/${deviceId}/auth/${authId}/status`, { status }).then(() => Promise.all([dispatch(getDeviceAuth(deviceId)), dispatch(setSnackbar4("Device authorization status was updated successfully"))])).catch((err) => commonErrorHandler(err, "There was a problem updating the device authorization status:", dispatch)).then(() => Promise.resolve(dispatch(actions3.maybeUpdateDevicesByStatus({ deviceId, authId })))).finally(() => dispatch(setDeviceListState({ refreshTrigger: !getDeviceListState(getState()).refreshTrigger })))
+);
+var updateDevicesAuth = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/updateDevicesAuth`, ({ deviceIds, status }, { dispatch, getState }) => {
+  let devices = getDevicesById(getState());
+  const deviceIdsWithoutAuth = deviceIds.reduce((accu, id) => devices[id].auth_sets ? accu : [...accu, { id }], []);
+  return dispatch(getDevicesWithAuth(deviceIdsWithoutAuth)).then(() => {
+    devices = getDevicesById(getState());
+    const deviceAuthUpdates = deviceIds.map((id) => {
+      const device = devices[id];
+      if (device.auth_sets.length !== 1) {
+        return Promise.reject();
+      }
+      return dispatch(updateDeviceAuth({ authId: device.auth_sets[0].id, deviceId: device.id, status })).unwrap().catch((err) => commonErrorHandler(err, "The action was stopped as there was a problem updating a device authorization status: ", dispatch, "", false));
+    });
+    return Promise.allSettled(deviceAuthUpdates).then((results) => {
+      const { skipped, count } = results.reduce(
+        (accu, item) => {
+          if (item.status === "rejected") {
+            accu.skipped = accu.skipped + 1;
+          } else {
+            accu.count = accu.count + 1;
+          }
+          return accu;
+        },
+        { skipped: 0, count: 0 }
+      );
+      const message = (0, import_helpers10.getSnackbarMessage)(skipped, count);
+      return dispatch(setSnackbar4(message));
+    });
+  });
 });
-var removeRole = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/removeRole`,
-  (roleId, { dispatch }) => (
-    // @ts-ignore
-    general_api_default.delete(`${useradmApiUrlv2}/roles/${roleId}`).then(() => Promise.all([dispatch(actions8.removedRole(roleId)), dispatch(getRoles()), dispatch(setSnackbar4(roleActions.remove.successMessage))])).catch((err) => roleActionErrorHandler(err, "remove", dispatch))
-  )
+var deleteAuthset = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/deleteAuthset`,
+  ({ deviceId, authId }, { dispatch, getState }) => general_api_default.delete(`${deviceAuthV2}/devices/${deviceId}/auth/${authId}`).then(() => Promise.all([dispatch(setSnackbar4("Device authorization status was updated successfully"))])).catch((err) => commonErrorHandler(err, "There was a problem updating the device authorization status:", dispatch)).then(() => Promise.resolve(dispatch(actions3.maybeUpdateDevicesByStatus({ deviceId, authId })))).finally(() => dispatch(setDeviceListState({ refreshTrigger: !getState().devices.deviceList.refreshTrigger })))
 );
-var getGlobalSettings2 = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getGlobalSettings`,
-  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/settings`).then(({ data: settings, headers: { etag } }) => {
-    window.sessionStorage.setItem(settingsKeys.initialized, true);
-    return Promise.all([dispatch(actions8.setGlobalSettings(settings)), dispatch(setOfflineThreshold()), etag]);
+var preauthDevice = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/preauthDevice`,
+  (authset, { dispatch, rejectWithValue }) => general_api_default.post(`${deviceAuthV2}/devices`, authset).then(() => Promise.resolve(dispatch(setSnackbar4("Device was successfully added to the preauthorization list", TIMEOUTS.fiveSeconds)))).catch((err) => {
+    if (err.response.status === 409) {
+      return rejectWithValue("A device with a matching identity data set already exists");
+    }
+    return commonErrorHandler(err, "The device could not be added:", dispatch);
   })
 );
-var saveGlobalSettings = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/saveGlobalSettings`,
-  // @ts-ignore
-  ({ beOptimistic = false, notify = false, ...settings }, { dispatch, getState }) => {
-    if (!window.sessionStorage.getItem(settingsKeys.initialized) && !beOptimistic) {
-      return;
+var decommissionDevice = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/decommissionDevice`,
+  ({ deviceId, authId }, { dispatch, getState }) => general_api_default.delete(`${deviceAuthV2}/devices/${deviceId}`).then(() => Promise.resolve(dispatch(setSnackbar4("Device was decommissioned successfully")))).catch((err) => commonErrorHandler(err, "There was a problem decommissioning the device:", dispatch)).then(() => Promise.resolve(dispatch(actions3.maybeUpdateDevicesByStatus({ deviceId, authId })))).finally(() => dispatch(setDeviceListState({ refreshTrigger: !getState().devices.deviceList.refreshTrigger })))
+);
+var getDeviceConfig = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/getDeviceConfig`,
+  (deviceId, { dispatch }) => general_api_default.get(`${deviceConfig}/${deviceId}`).then(({ data }) => Promise.all([dispatch(actions3.receivedDevice({ id: deviceId, config: data })), Promise.resolve(data)])).catch((err) => {
+    if (err.response?.data?.error.status_code !== 404) {
+      return commonErrorHandler(err, `There was an error retrieving the configuration for device ${deviceId}.`, dispatch, commonErrorFallback);
     }
-    return dispatch(getGlobalSettings2()).unwrap().then((result) => {
-      let updatedSettings = { ...getState().users.globalSettings, ...settings };
-      if (getCurrentUser(getState()).verified) {
-        updatedSettings["2fa"] = twoFAStates.enabled;
-      } else {
-        delete updatedSettings["2fa"];
-      }
-      let tasks = [dispatch(actions8.setGlobalSettings(updatedSettings))];
-      const headers = result[result.length - 1] ? { "If-Match": result[result.length - 1] } : {};
-      return general_api_default.post(`${useradmApiUrlv1}/settings`, updatedSettings, { headers }).then(() => {
-        if (notify) {
-          tasks.push(dispatch(setSnackbar4("Settings saved successfully")));
-        }
-        return Promise.all(tasks);
-      }).catch((err) => {
-        if (beOptimistic) {
-          return Promise.all([tasks]);
-        }
-        console.log(err);
-        return commonErrorHandler(err, `The settings couldn't be saved.`, dispatch);
-      });
-    });
-  }
+  })
 );
-var getUserSettings2 = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getUserSettings`,
-  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/settings/me`).then(({ data: settings, headers: { etag } }) => {
-    window.sessionStorage.setItem(settingsKeys.initialized, true);
-    return Promise.all([dispatch(actions8.setUserSettings(settings)), etag]);
+var setDeviceConfig = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/setDeviceConfig`,
+  ({ deviceId, config }, { dispatch }) => general_api_default.put(`${deviceConfig}/${deviceId}`, config).catch((err) => commonErrorHandler(err, `There was an error setting the configuration for device ${deviceId}.`, dispatch, commonErrorFallback)).then(() => Promise.resolve(dispatch(getDeviceConfig(deviceId))))
+);
+var applyDeviceConfig = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/applyDeviceConfig`,
+  ({ deviceId, configDeploymentConfiguration, isDefault, config }, { dispatch, getState }) => general_api_default.post(`${deviceConfig}/${deviceId}/deploy`, configDeploymentConfiguration).catch((err) => commonErrorHandler(err, `There was an error deploying the configuration to device ${deviceId}.`, dispatch, commonErrorFallback)).then(({ data }) => {
+    const device = getDeviceById(getState(), deviceId);
+    const { canManageUsers } = getUserCapabilities(getState());
+    let tasks = [
+      dispatch(actions3.receivedDevice({ ...device, config: { ...device.config, deployment_id: data.deployment_id } })),
+      new Promise((resolve) => setTimeout(() => resolve(dispatch(getSingleDeployment(data.deployment_id))), TIMEOUTS.oneSecond))
+    ];
+    if (isDefault && canManageUsers) {
+      const { previous } = getGlobalSettings(getState()).defaultDeviceConfig ?? {};
+      tasks.push(dispatch(saveGlobalSettings({ defaultDeviceConfig: { current: config, previous } })));
+    }
+    return Promise.all(tasks);
   })
 );
-var saveUserSettings = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/saveUserSettings`, (settings = { onboarding: {} }, { dispatch, getState }) => {
-  if (!getCurrentUser(getState()).id) {
-    return Promise.resolve();
-  }
-  return dispatch(getUserSettings2()).unwrap().then((result) => {
-    const userSettings = getUserSettings(getState());
-    const onboardingState = getOnboardingState(getState());
-    const tooltipState = getTooltipsState(getState());
-    const updatedSettings = {
-      ...userSettings,
-      // @ts-ignore
-      ...settings,
-      onboarding: {
-        ...onboardingState,
-        // @ts-ignore
-        ...settings.onboarding
-      },
-      tooltips: tooltipState
+var setDeviceTags = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/setDeviceTags`,
+  ({ deviceId, tags }, { dispatch }) => (
+    // to prevent tag set failures, retrieve the device & use the freshest etag we can get
+    Promise.resolve(dispatch(getDeviceById2(deviceId))).then((device) => {
+      const headers = device.etag ? { "If-Match": device.etag } : {};
+      return general_api_default.put(
+        `${inventoryApiUrl}/devices/${deviceId}/tags`,
+        Object.entries(tags).map(([name, value]) => ({ name, value })),
+        { headers }
+      ).catch((err) => commonErrorHandler(err, `There was an error setting tags for device ${deviceId}.`, dispatch, "Please check your connection.")).then(() => Promise.all([dispatch(actions3.receivedDevice({ ...device, id: deviceId, tags })), dispatch(setSnackbar4("Device name changed"))]));
+    })
+  )
+);
+var getDeviceTwin = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getDeviceTwin`, ({ deviceId, integration }, { dispatch, getState }) => {
+  let providerResult = {};
+  return general_api_default.get(`${iotManagerBaseURL}/devices/${deviceId}/state`).then(({ data }) => {
+    providerResult = { ...data, twinError: "" };
+  }).catch((err) => {
+    providerResult = {
+      twinError: `There was an error getting the ${EXTERNAL_PROVIDER[integration.provider].twinTitle.toLowerCase()} for device ${deviceId}. ${err}`
     };
-    const headers = result[result.length - 1] ? { "If-Match": result[result.length - 1] } : {};
-    return Promise.all([
-      Promise.resolve(dispatch(actions8.setUserSettings(updatedSettings))),
-      general_api_default.post(`${useradmApiUrlv1}/settings/me`, updatedSettings, { headers })
-    ]).catch(() => dispatch(actions8.setUserSettings(userSettings)));
+  }).finally(() => {
+    const device = getDeviceById(getState(), deviceId);
+    Promise.resolve(dispatch(actions3.receivedDevice({ ...device, twinsByIntegration: { ...device.twinsByIntegration, ...providerResult } })));
   });
 });
-var get2FAQRCode = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/get2FAQRCode`,
-  (_, { dispatch }) => general_api_default.get(`${useradmApiUrlv1}/2faqr`).then((res) => dispatch(actions8.receivedQrCode(res.data.qr)))
-);
-var setHideAnnouncement = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/setHideAnnouncement`, ({ shouldHide, userId }, { dispatch, getState }) => {
-  const currentUserId = userId || getCurrentUser(getState()).id;
-  const hash = getState().app.hostedAnnouncement ? (0, import_md5.default)(getState().app.hostedAnnouncement) : "";
-  const announceCookie = cookies3.get(`${currentUserId}${hash}`);
-  if (shouldHide || hash.length && typeof announceCookie !== "undefined") {
-    cookies3.set(`${currentUserId}${hash}`, true, { maxAge: 604800 });
-    return Promise.resolve(dispatch(setAnnouncement()));
-  }
-  return Promise.resolve();
-});
-var getTokens = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/getTokens`,
-  (_, { dispatch, getState }) => general_api_default.get(`${useradmApiUrlv1}/settings/tokens`).then(({ data: tokens }) => {
-    const user = getCurrentUser(getState());
-    const updatedUser = {
-      ...user,
-      tokens
-    };
-    return Promise.resolve(dispatch(actions8.updatedUser(updatedUser)));
+var setDeviceTwin = (0, import_toolkit21.createAsyncThunk)(
+  `${sliceName3}/setDeviceTwin`,
+  ({ deviceId, integration, settings }, { dispatch, getState }) => general_api_default.put(`${iotManagerBaseURL}/devices/${deviceId}/state/${integration.id}`, { desired: settings }).catch(
+    (err) => commonErrorHandler(
+      err,
+      `There was an error updating the ${EXTERNAL_PROVIDER[integration.provider].twinTitle.toLowerCase()} for device ${deviceId}.`,
+      dispatch
+    )
+  ).then(() => {
+    const device = getDeviceById(getState(), deviceId);
+    const { twinsByIntegration = {} } = device;
+    const { [integration.id]: currentState = {} } = twinsByIntegration;
+    return Promise.resolve(
+      dispatch(actions3.receivedDevice({ ...device, twinsByIntegration: { ...twinsByIntegration, [integration.id]: { ...currentState, desired: settings } } }))
+    );
   })
 );
-var ONE_YEAR = 31536e3;
-var generateToken = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/generateToken`,
-  ({ expiresIn = ONE_YEAR, name }, { dispatch }) => general_api_default.post(`${useradmApiUrlv1}/settings/tokens`, { name, expires_in: expiresIn }).then(({ data: token }) => Promise.all([dispatch(getTokens()), token])).catch((err) => commonErrorHandler(err, "There was an error creating the token:", dispatch))
-);
-var revokeToken = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/revokeToken`,
-  (token, { dispatch }) => (
-    // @ts-ignore
-    general_api_default.delete(`${useradmApiUrlv1}/settings/tokens/${token.id}`).then(() => Promise.resolve(dispatch(getTokens())))
-  )
-);
-var setTooltipReadState = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/setTooltipReadState`, ({ persist, ...remainder }, { dispatch }) => {
-  let tasks = [dispatch(actions8.setTooltipState(remainder))];
-  if (persist) {
-    tasks.push(dispatch(saveUserSettings()));
+var prepareSearchArguments = ({ filters, group, state, status }) => {
+  const { filterTerms } = convertDeviceListStateToFilters({ filters, group, offlineThreshold: state.app.offlineThreshold, selectedIssues: [], status });
+  const { columnSelection = [] } = getUserSettings(state);
+  const selectedAttributes = columnSelection.map((column) => ({ attribute: column.key, scope: column.scope }));
+  const attributes = [...defaultAttributes, getIdAttribute(state), ...selectedAttributes];
+  return { attributes, filterTerms };
+};
+var getSystemDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getSystemDevices`, (options, { dispatch, getState }) => {
+  const { id, page = defaultPage3, perPage = defaultPerPage3, sortOptions = [] } = options;
+  const state = getState();
+  const { hasFullFiltering } = getTenantCapabilities(state);
+  if (!hasFullFiltering) {
+    return Promise.resolve();
   }
-  return Promise.all(tasks);
+  const { attributes: deviceAttributes = {} } = getDeviceById(state, id);
+  const { mender_gateway_system_id = "" } = deviceAttributes;
+  const filters = [
+    { ...emptyFilter, key: "mender_is_gateway", operator: DEVICE_FILTERING_OPTIONS.$ne.key, value: "true", scope: "inventory" },
+    { ...emptyFilter, key: "mender_gateway_system_id", value: mender_gateway_system_id, scope: "inventory" }
+  ];
+  const { attributes, filterTerms } = prepareSearchArguments({ filters, state });
+  return general_api_default.post(getSearchEndpoint(getState()), {
+    page,
+    per_page: perPage,
+    filters: filterTerms,
+    sort: sortOptions,
+    attributes
+  }).catch((err) => commonErrorHandler(err, `There was an error getting system devices device ${id}.`, dispatch, "Please check your connection.")).then(({ data, headers }) => {
+    const state2 = getState();
+    const { devicesById, ids } = reduceReceivedDevices(data, [], state2);
+    const device = {
+      ...getDeviceById(state2, id),
+      systemDeviceIds: ids,
+      systemDeviceTotal: Number(headers[headerNames.total])
+    };
+    return Promise.resolve(dispatch(actions3.receivedDevices({ ...devicesById, [id]: device })));
+  });
 });
-var setAllTooltipsReadState = (0, import_toolkit21.createAsyncThunk)(`${sliceName8}/toggleHelptips`, ({ readState = READ_STATES.read, tooltips }, { dispatch }) => {
-  const updatedTips = tooltips.reduce((accu, id) => ({ ...accu, [id]: { readState } }), {});
-  return Promise.resolve(dispatch(actions8.setTooltipsState(updatedTips))).then(() => dispatch(saveUserSettings()));
+var getGatewayDevices = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getGatewayDevices`, (deviceId, { dispatch, getState }) => {
+  const state = getState();
+  const { attributes = {} } = getDeviceById(state, deviceId);
+  const { mender_gateway_system_id = "" } = attributes;
+  const filters = [
+    { ...emptyFilter, key: "id", operator: DEVICE_FILTERING_OPTIONS.$ne.key, value: deviceId, scope: "identity" },
+    { ...emptyFilter, key: "mender_is_gateway", value: "true", scope: "inventory" },
+    { ...emptyFilter, key: "mender_gateway_system_id", value: mender_gateway_system_id, scope: "inventory" }
+  ];
+  const { attributes: attributeSelection, filterTerms } = prepareSearchArguments({ filters, state });
+  return general_api_default.post(getSearchEndpoint(getState()), {
+    page: 1,
+    per_page: MAX_PAGE_SIZE,
+    filters: filterTerms,
+    attributes: attributeSelection
+  }).then(({ data }) => {
+    const { ids } = reduceReceivedDevices(data, [], getState());
+    let tasks = ids.map((deviceId2) => dispatch(getDeviceInfo(deviceId2)));
+    tasks.push(dispatch(actions3.receivedDevice({ id: deviceId, gatewayIds: ids })));
+    return Promise.all(tasks);
+  });
+});
+var getDevicesInBounds = (0, import_toolkit21.createAsyncThunk)(`${sliceName3}/getDevicesInBounds`, ({ bounds, group }, { dispatch, getState }) => {
+  const state = getState();
+  const { filterTerms } = convertDeviceListStateToFilters({
+    group: group === ALL_DEVICES ? void 0 : group,
+    groups: state.devices.groups,
+    status: DEVICE_STATES.accepted
+  });
+  return general_api_default.post(getSearchEndpoint(getState()), {
+    page: 1,
+    per_page: MAX_PAGE_SIZE,
+    filters: filterTerms,
+    attributes: geoAttributes,
+    geo_bounding_box_filter: {
+      geo_bounding_box: {
+        location: {
+          top_left: { lat: bounds._northEast.lat, lon: bounds._southWest.lng },
+          bottom_right: { lat: bounds._southWest.lat, lon: bounds._northEast.lng }
+        }
+      }
+    }
+  }).then(({ data }) => {
+    const { devicesById } = reduceReceivedDevices(data, [], getState());
+    return Promise.resolve(dispatch(actions3.receivedDevices(devicesById)));
+  });
 });
-var submitFeedback = (0, import_toolkit21.createAsyncThunk)(
-  `${sliceName8}/submitFeedback`,
-  // @ts-ignore
-  ({ satisfaction, feedback, ...meta }, { dispatch }) => {
-    return general_api_default.post(`${tenantadmApiUrlv2}/contact/support`, {
-      subject: "feedback submission",
-      body: JSON.stringify({ feedback, satisfaction, meta })
-    }).then(() => {
-      const today = /* @__PURE__ */ new Date();
-      dispatch(saveUserSettings({ feedbackCollectedAt: today.toISOString().split("T")[0] }));
-      setTimeout(() => dispatch(actions8.setShowFeedbackDialog(false)), TIMEOUTS.threeSeconds);
-    });
-  }
-);
 
 // src/organizationSlice/thunks.ts
 var import_helpers11 = require("@northern.tech/utils/helpers");
@@ -4770,7 +4823,7 @@ var startUpgrade = (0, import_toolkit22.createAsyncThunk)(
 var cancelUpgrade = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/cancelUpgrade`, (tenantId) => general_api_default.post(`${tenantadmApiUrlv2}/tenants/${tenantId}/upgrade/cancel`));
 var completeUpgrade = (0, import_toolkit22.createAsyncThunk)(
   `${sliceName6}/completeUpgrade`,
-  ({ tenantId, plan }, { dispatch }) => general_api_default.post(`${tenantadmApiUrlv2}/tenants/${tenantId}/upgrade/complete`, { plan }).catch((err) => commonErrorHandler(err, `There was an error upgrading your account:`, dispatch)).then(() => Promise.resolve(dispatch(getUserOrganization())))
+  ({ tenantId, plan, billing_profile }, { dispatch }) => general_api_default.post(`${tenantadmApiUrlv2}/tenants/${tenantId}/upgrade/complete`, { plan, billing_profile }).catch((err) => commonErrorHandler(err, `There was an error upgrading your account:`, dispatch)).then(() => Promise.all([dispatch(getDeviceLimit2()), dispatch(getUserOrganization())]))
 );
 var prepareAuditlogQuery = ({ startDate, endDate, user: userFilter, type, detail: detailFilter, sort = {} }) => {
   const userId = userFilter?.id || userFilter;
@@ -4819,7 +4872,12 @@ var setAuditlogsState = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/se
 });
 var tenantDataDivergedMessage = "The system detected there is a change in your plan or purchased add-ons. Please log out and log in again";
 var addTenant = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/createTenant`, (selectionState, { dispatch }) => {
-  return general_api_default.post(`${tenantadmApiUrlv2}/tenants`, selectionState).then(() => Promise.all([dispatch(getTenants()), dispatch(setSnackbar5("Tenant was created successfully."))])).catch((err) => commonErrorHandler(err, "There was an error creating tenant", dispatch, commonErrorFallback));
+  return general_api_default.post(`${tenantadmApiUrlv2}/tenants`, selectionState).then(
+    () => Promise.all([
+      dispatch(setSnackbar5("Tenant was created successfully.")),
+      new Promise((resolve) => setTimeout(() => resolve(dispatch(getTenants())), TIMEOUTS.oneSecond))
+    ])
+  ).catch((err) => commonErrorHandler(err, "There was an error creating tenant", dispatch, commonErrorFallback));
 });
 var tenantListRetrieval = async (config) => {
   const { page, perPage } = config;
@@ -4847,15 +4905,20 @@ var setTenantsListState = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/
 });
 var editTenantDeviceLimit = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/editDeviceLimit`, ({ newLimit, id, name }, { dispatch }) => {
   return general_api_default.put(`${tenantadmApiUrlv2}/tenants/${id}/child`, { device_limit: newLimit, name }).catch((err) => commonErrorHandler(err, `Device Limit cannot be changed`, dispatch)).then(() => {
-    const tasks = [Promise.resolve(dispatch(setSnackbar5("Device Limit was changed successfully")))];
-    tasks.push(dispatch(getTenants()));
-    tasks.push(dispatch(getUserOrganization()));
-    return Promise.all(tasks);
+    return Promise.all([
+      dispatch(setSnackbar5("Device Limit was changed successfully")),
+      dispatch(getUserOrganization()),
+      new Promise((resolve) => setTimeout(() => resolve(dispatch(getTenants())), TIMEOUTS.oneSecond))
+    ]);
   });
 });
 var removeTenant = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/editDeviceLimit`, ({ id }, { dispatch }) => {
   return general_api_default.post(`${tenantadmApiUrlv2}/tenants/${id}/remove/start`).catch((err) => commonErrorHandler(err, `There was an error removing the tenant`, dispatch)).then(
-    () => Promise.all([Promise.resolve(dispatch(setSnackbar5("Device Limit was changed successfully"))), dispatch(getTenants()), dispatch(getUserOrganization())])
+    () => Promise.all([
+      dispatch(setSnackbar5("The tenant was removed successfully")),
+      dispatch(getUserOrganization()),
+      new Promise((resolve) => setTimeout(() => resolve(dispatch(getTenants())), TIMEOUTS.oneSecond))
+    ])
   );
 });
 var getUserOrganization = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/getUserOrganization`, (_, { dispatch, getState }) => {
@@ -4879,7 +4942,10 @@ var sendSupportMessage = (0, import_toolkit22.createAsyncThunk)(
 );
 var requestPlanChange = (0, import_toolkit22.createAsyncThunk)(
   `${sliceName6}/requestPlanChange`,
-  ({ content, tenantId }, { dispatch }) => general_api_default.post(`${tenantadmApiUrlv2}/tenants/${tenantId}/plan`, content).catch((err) => commonErrorHandler(err, "There was an error sending your request", dispatch, commonErrorFallback)).then(() => Promise.resolve(dispatch(setSnackbar5({ message: "Your request was sent successfully", autoHideDuration: TIMEOUTS.fiveSeconds }))))
+  ({ content, tenantId }, { dispatch, rejectWithValue }) => general_api_default.post(`${tenantadmApiUrlv2}/tenants/${tenantId}/plan`, content).catch(async (err) => {
+    await commonErrorHandler(err, "There was an error sending your request", dispatch, commonErrorFallback);
+    rejectWithValue(err);
+  }).then(() => Promise.resolve(dispatch(setSnackbar5({ message: "Your request was sent successfully", autoHideDuration: TIMEOUTS.fiveSeconds }))))
 );
 var downloadLicenseReport = (0, import_toolkit22.createAsyncThunk)(
   `${sliceName6}/downloadLicenseReport`,