@thunderid/javascript 1.0.7 → 1.1.0

package/dist/index.js

@@ -1445,6 +1445,73 @@ const getUsersMeMeta = async ({ baseUrl, fetcher, url,...requestConfig }) => {
 };
 var getUsersMeMeta_default = getUsersMeMeta;
 
+//#endregion
+//#region src/api/updateMeCredentials.ts
+/**
+* Updates one or more of the signed-in user's credentials at the
+* /users/me/update-credentials endpoint.
+*
+* The endpoint responds with `204 No Content` on success, so this function resolves with
+* `void` rather than a parsed body.
+*
+* @param config - Configuration object with URL, payload and optional request config.
+* @returns A promise that resolves once the credentials have been updated.
+* @example
+* ```typescript
+* // Using default fetch
+* await updateMeCredentials({
+*   url: "https://localhost:8090/users/me/update-credentials",
+*   payload: {password: "n3wP@ssword!"}
+* });
+* ```
+*
+* @example
+* ```typescript
+* // Using custom fetcher (e.g. an httpClient that attaches the access token)
+* await updateMeCredentials({
+*   baseUrl: "https://localhost:8090",
+*   payload: {password: "n3wP@ssword!"},
+*   fetcher: async (url, config) => {
+*     const response = await httpClient({url, method: config.method, headers: config.headers, data: config.body});
+*     return {
+*       ok: response.status >= 200 && response.status < 300,
+*       status: response.status,
+*       statusText: response.statusText,
+*       json: () => Promise.resolve(response.data),
+*       text: () => Promise.resolve(typeof response.data === 'string' ? response.data : JSON.stringify(response.data))
+*     } as Response;
+*   }
+* });
+* ```
+*/
+const updateMeCredentials = async ({ url, baseUrl, payload, fetcher,...requestConfig }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1 instanceof Error ? error$1.message : String(error$1)}`, "updateMeCredentials-ValidationError-001", "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	const fetchFn = fetcher ?? fetch;
+	const resolvedUrl = url ?? `${baseUrl?.replace(/\/$/, "")}/users/me/update-credentials`;
+	const requestInit = {
+		...requestConfig,
+		method: "POST",
+		body: JSON.stringify({ attributes: payload }),
+		headers: {
+			...requestConfig.headers,
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		}
+	};
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) throw new ThunderIDAPIError(await response.text(), "updateMeCredentials-ResponseError-001", "javascript", response.status, response.statusText, "Failed to update user credentials");
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, "updateMeCredentials-NetworkError-001", "javascript", 0, "Network Error");
+	}
+};
+var updateMeCredentials_default = updateMeCredentials;
+
 //#endregion
 //#region src/api/updateMeProfile.ts
 /**
@@ -1522,6 +1589,456 @@ const updateMeProfile = async ({ url, baseUrl, payload, fetcher,...requestConfig
 };
 var updateMeProfile_default = updateMeProfile;
 
+//#endregion
+//#region src/utils/requestManagementResource.ts
+/**
+* Performs a request against a management API resource and maps failures onto
+* {@link ThunderIDAPIError}. HTTP 403 and 404 get their own codes so a caller can tell a missing
+* permission from a missing resource.
+*
+* @returns The parsed JSON body, or `undefined` when the server returns no content.
+*/
+const requestManagementResource = async ({ baseUrl, url, fetcher,...requestConfig }, { body, collection, failureMessage, id, method, operation, query }) => {
+	try {
+		new URL(url ?? baseUrl);
+	} catch (error$1) {
+		throw new ThunderIDAPIError(`Invalid URL provided. ${error$1 instanceof Error ? error$1.message : String(error$1)}`, `${operation}-ValidationError-001`, "javascript", 400, "The provided `url` or `baseUrl` path does not adhere to the URL schema.");
+	}
+	if (id?.trim() === "") throw new ThunderIDAPIError("A resource identifier is required.", `${operation}-ValidationError-002`, "javascript", 400, "The provided resource identifier is empty.");
+	const collectionUrl = (url ?? `${baseUrl}/${collection}`).replace(/\/+$/, "");
+	const resourceUrl = id === void 0 ? collectionUrl : `${collectionUrl}/${encodeURIComponent(id)}`;
+	const searchParams = new URLSearchParams();
+	Object.entries(query ?? {}).forEach(([key, value]) => {
+		if (value !== void 0) searchParams.set(key, String(value));
+	});
+	const queryString = searchParams.toString();
+	const resolvedUrl = queryString ? `${resourceUrl}?${queryString}` : resourceUrl;
+	const requestInit = {
+		...requestConfig,
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json",
+			...requestConfig.headers
+		},
+		method,
+		...body !== void 0 ? { body: JSON.stringify(body) } : {}
+	};
+	const fetchFn = fetcher ?? fetch;
+	try {
+		const response = await fetchFn(resolvedUrl, requestInit);
+		if (!response?.ok) {
+			const errorText = await response.text();
+			let reason = "ResponseError";
+			if (response.status === 403) reason = "ForbiddenError";
+			else if (response.status === 404) reason = "NotFoundError";
+			throw new ThunderIDAPIError(errorText, `${operation}-${reason}-001`, "javascript", response.status, response.statusText, failureMessage);
+		}
+		if (response.status === 204 || method === "DELETE") return;
+		return await response.json();
+	} catch (error$1) {
+		if (error$1 instanceof ThunderIDAPIError) throw error$1;
+		throw new ThunderIDAPIError(`Network or parsing error: ${error$1 instanceof Error ? error$1.message : "Unknown error"}`, `${operation}-NetworkError-001`, "javascript", 0, "Network Error");
+	}
+};
+var requestManagementResource_default = requestManagementResource;
+
+//#endregion
+//#region src/api/applications/getApplications.ts
+/**
+* Retrieves a page of applications.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the page of applications.
+*
+* @example
+* ```typescript
+* const {applications, totalResults} = await getApplications({
+*   baseUrl: 'https://localhost:8090',
+*   limit: 10,
+*   offset: 0,
+* });
+* ```
+*/
+const getApplications = async ({ limit, offset,...config }) => requestManagementResource_default(config, {
+	collection: "applications",
+	failureMessage: "Failed to fetch applications",
+	method: "GET",
+	operation: "getApplications",
+	query: {
+		limit,
+		offset
+	}
+});
+var getApplications_default = getApplications;
+
+//#endregion
+//#region src/api/applications/getApplication.ts
+/**
+* Retrieves a single application.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the application.
+*
+* @example
+* ```typescript
+* const application = await getApplication({
+*   baseUrl: 'https://localhost:8090',
+*   applicationId: '550e8400-e29b-41d4-a716-446655440000',
+* });
+* ```
+*/
+const getApplication = async ({ applicationId,...config }) => requestManagementResource_default(config, {
+	collection: "applications",
+	failureMessage: "Failed to fetch application",
+	id: applicationId,
+	method: "GET",
+	operation: "getApplication"
+});
+var getApplication_default = getApplication;
+
+//#endregion
+//#region src/api/applications/createApplication.ts
+/**
+* Creates an application.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the application as the server stored it.
+*
+* @example
+* ```typescript
+* const application = await createApplication({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {name: 'My SPA', url: 'http://localhost:3000'},
+* });
+* ```
+*/
+const createApplication = async ({ payload,...config }) => requestManagementResource_default(config, {
+	body: payload,
+	collection: "applications",
+	failureMessage: "Failed to create application",
+	method: "POST",
+	operation: "createApplication"
+});
+var createApplication_default = createApplication;
+
+//#endregion
+//#region src/api/applications/updateApplication.ts
+/**
+* Updates an application.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the updated application.
+*
+* @example
+* ```typescript
+* const application = await updateApplication({
+*   baseUrl: 'https://localhost:8090',
+*   applicationId: '550e8400-e29b-41d4-a716-446655440000',
+*   payload: {...existing, name: 'Renamed'},
+* });
+* ```
+*/
+const updateApplication = async ({ applicationId, payload,...config }) => requestManagementResource_default(config, {
+	body: payload,
+	collection: "applications",
+	failureMessage: "Failed to update application",
+	id: applicationId,
+	method: "PUT",
+	operation: "updateApplication"
+});
+var updateApplication_default = updateApplication;
+
+//#endregion
+//#region src/api/applications/deleteApplication.ts
+/**
+* Deletes an application.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves once the application is deleted.
+*
+* @example
+* ```typescript
+* await deleteApplication({
+*   baseUrl: 'https://localhost:8090',
+*   applicationId: '550e8400-e29b-41d4-a716-446655440000',
+* });
+* ```
+*/
+const deleteApplication = async ({ applicationId,...config }) => requestManagementResource_default(config, {
+	collection: "applications",
+	failureMessage: "Failed to delete application",
+	id: applicationId,
+	method: "DELETE",
+	operation: "deleteApplication"
+});
+var deleteApplication_default = deleteApplication;
+
+//#endregion
+//#region src/api/users/getUsers.ts
+/**
+* Retrieves a page of users. Each user carries its resolved `display` value.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the page of users.
+*
+* @example
+* ```typescript
+* const {users, totalResults} = await getUsers({
+*   baseUrl: 'https://localhost:8090',
+*   limit: 10,
+*   filter: 'username eq "alice"',
+* });
+* ```
+*/
+const getUsers = async ({ filter, limit, offset,...config }) => requestManagementResource_default(config, {
+	collection: "users",
+	failureMessage: "Failed to fetch users",
+	method: "GET",
+	operation: "getUsers",
+	query: {
+		filter,
+		include: "display",
+		limit,
+		offset
+	}
+});
+var getUsers_default = getUsers;
+
+//#endregion
+//#region src/api/users/getUser.ts
+/**
+* Retrieves a single user, with its resolved `display` value.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the user.
+*
+* @example
+* ```typescript
+* const user = await getUser({
+*   baseUrl: 'https://localhost:8090',
+*   userId: '9a475e1e-b0cb-4b29-8df5-2e5b24fb0ed3',
+* });
+* ```
+*/
+const getUser = async ({ userId,...config }) => requestManagementResource_default(config, {
+	collection: "users",
+	failureMessage: "Failed to fetch user",
+	id: userId,
+	method: "GET",
+	operation: "getUser",
+	query: { include: "display" }
+});
+var getUser_default = getUser;
+
+//#endregion
+//#region src/api/users/createUser.ts
+/**
+* Creates a user.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the user as the server stored it.
+*
+* @example
+* ```typescript
+* const user = await createUser({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {ouId, type: 'customer', attributes: {username: 'alice'}},
+* });
+* ```
+*/
+const createUser = async ({ payload,...config }) => requestManagementResource_default(config, {
+	body: payload,
+	collection: "users",
+	failureMessage: "Failed to create user",
+	method: "POST",
+	operation: "createUser"
+});
+var createUser_default = createUser;
+
+//#endregion
+//#region src/api/users/updateUser.ts
+/**
+* Updates a user.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the updated user.
+*
+* @example
+* ```typescript
+* const user = await updateUser({
+*   baseUrl: 'https://localhost:8090',
+*   userId: '9a475e1e-b0cb-4b29-8df5-2e5b24fb0ed3',
+*   payload: {attributes: {givenName: 'Alice'}},
+* });
+* ```
+*/
+const updateUser = async ({ userId, payload,...config }) => requestManagementResource_default(config, {
+	body: payload,
+	collection: "users",
+	failureMessage: "Failed to update user",
+	id: userId,
+	method: "PUT",
+	operation: "updateUser"
+});
+var updateUser_default = updateUser;
+
+//#endregion
+//#region src/api/users/deleteUser.ts
+/**
+* Deletes a user.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves once the user is deleted.
+*
+* @example
+* ```typescript
+* await deleteUser({
+*   baseUrl: 'https://localhost:8090',
+*   userId: '9a475e1e-b0cb-4b29-8df5-2e5b24fb0ed3',
+* });
+* ```
+*/
+const deleteUser = async ({ userId,...config }) => requestManagementResource_default(config, {
+	collection: "users",
+	failureMessage: "Failed to delete user",
+	id: userId,
+	method: "DELETE",
+	operation: "deleteUser"
+});
+var deleteUser_default = deleteUser;
+
+//#endregion
+//#region src/api/agents/getAgents.ts
+/**
+* Retrieves a page of agents.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the page of agents.
+*
+* @example
+* ```typescript
+* const {agents, totalResults} = await getAgents({
+*   baseUrl: 'https://localhost:8090',
+*   limit: 10,
+* });
+* ```
+*/
+const getAgents = async ({ limit, offset,...config }) => requestManagementResource_default(config, {
+	collection: "agents",
+	failureMessage: "Failed to fetch agents",
+	method: "GET",
+	operation: "getAgents",
+	query: {
+		include: "display",
+		limit,
+		offset
+	}
+});
+var getAgents_default = getAgents;
+
+//#endregion
+//#region src/api/agents/getAgent.ts
+/**
+* Retrieves a single agent.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the agent.
+*
+* @example
+* ```typescript
+* const agent = await getAgent({
+*   baseUrl: 'https://localhost:8090',
+*   agentId: '6f1e2d3c-4b5a-4978-8a6b-5c4d3e2f1a0b',
+* });
+* ```
+*/
+const getAgent = async ({ agentId,...config }) => requestManagementResource_default(config, {
+	collection: "agents",
+	failureMessage: "Failed to fetch agent",
+	id: agentId,
+	method: "GET",
+	operation: "getAgent",
+	query: { include: "display" }
+});
+var getAgent_default = getAgent;
+
+//#endregion
+//#region src/api/agents/createAgent.ts
+/**
+* Creates an agent.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the agent as the server stored it.
+*
+* @example
+* ```typescript
+* const agent = await createAgent({
+*   baseUrl: 'https://localhost:8090',
+*   payload: {ouId, type: 'default', name: 'Nightly Sync Worker'},
+* });
+* ```
+*/
+const createAgent = async ({ payload,...config }) => requestManagementResource_default(config, {
+	body: payload,
+	collection: "agents",
+	failureMessage: "Failed to create agent",
+	method: "POST",
+	operation: "createAgent"
+});
+var createAgent_default = createAgent;
+
+//#endregion
+//#region src/api/agents/updateAgent.ts
+/**
+* Updates an agent.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves with the updated agent.
+*
+* @example
+* ```typescript
+* const agent = await updateAgent({
+*   baseUrl: 'https://localhost:8090',
+*   agentId: '6f1e2d3c-4b5a-4978-8a6b-5c4d3e2f1a0b',
+*   payload: {name: 'Renamed Agent'},
+* });
+* ```
+*/
+const updateAgent = async ({ agentId, payload,...config }) => requestManagementResource_default(config, {
+	body: payload,
+	collection: "agents",
+	failureMessage: "Failed to update agent",
+	id: agentId,
+	method: "PUT",
+	operation: "updateAgent"
+});
+var updateAgent_default = updateAgent;
+
+//#endregion
+//#region src/api/agents/deleteAgent.ts
+/**
+* Deletes an agent.
+*
+* @param config - Request configuration object.
+* @returns A promise that resolves once the agent is deleted.
+*
+* @example
+* ```typescript
+* await deleteAgent({
+*   baseUrl: 'https://localhost:8090',
+*   agentId: '6f1e2d3c-4b5a-4978-8a6b-5c4d3e2f1a0b',
+* });
+* ```
+*/
+const deleteAgent = async ({ agentId,...config }) => requestManagementResource_default(config, {
+	collection: "agents",
+	failureMessage: "Failed to delete agent",
+	id: agentId,
+	method: "DELETE",
+	operation: "deleteAgent"
+});
+var deleteAgent_default = deleteAgent;
+
 //#endregion
 //#region src/constants/ApplicationNativeAuthenticationConstants.ts
 /**
@@ -1605,6 +2122,28 @@ var OIDCRequestConstants_default = OIDCRequestConstants;
 const VendorConstants = { VENDOR_PREFIX: "thunderid" };
 var VendorConstants_default = VendorConstants;
 
+//#endregion
+//#region src/constants/CredentialConstants.ts
+/**
+* Constants for the credential types the server accepts on the self-service
+* credential write path.
+*
+* The server keys credentials by type. `password` is the one every user type schema
+* declares by default, hence a named constant for it; any other schema-declared
+* `credential: true` attribute (for example `pin`) can be self-managed too, just by its
+* own attribute name rather than a constant here.
+*
+* @example
+* ```typescript
+* await updateMeCredentials({
+*   payload: {[CredentialConstants.PASSWORD]: newPassword},
+*   url,
+* });
+* ```
+*/
+const CredentialConstants = { PASSWORD: "password" };
+var CredentialConstants_default = CredentialConstants;
+
 //#endregion
 //#region src/constants/ConsentConstants.ts
 /**
@@ -1629,6 +2168,42 @@ const ConsentConstants = {
 };
 var ConsentConstants_default = ConsentConstants;
 
+//#endregion
+//#region src/constants/ApplicationQueryKeys.ts
+/**
+* Cache keys for application resources. The SDK's reactive wrappers use them to refetch after a
+* mutation, and an application can reuse them as keys in its own data fetching cache.
+*/
+const ApplicationQueryKeys = {
+	APPLICATION: "application",
+	APPLICATIONS: "applications"
+};
+var ApplicationQueryKeys_default = ApplicationQueryKeys;
+
+//#endregion
+//#region src/constants/UserQueryKeys.ts
+/**
+* Cache keys for user resources. The SDK's reactive wrappers use them to refetch after a mutation,
+* and an application can reuse them as keys in its own data fetching cache.
+*/
+const UserQueryKeys = {
+	USER: "user",
+	USERS: "users"
+};
+var UserQueryKeys_default = UserQueryKeys;
+
+//#endregion
+//#region src/constants/AgentQueryKeys.ts
+/**
+* Cache keys for agent resources. The SDK's reactive wrappers use them to refetch after a mutation,
+* and an application can reuse them as keys in its own data fetching cache.
+*/
+const AgentQueryKeys = {
+	AGENT: "agent",
+	AGENTS: "agents"
+};
+var AgentQueryKeys_default = AgentQueryKeys;
+
 //#endregion
 //#region src/errors/ThunderIDRuntimeError.ts
 /**
@@ -1755,6 +2330,51 @@ let FlowMode = /* @__PURE__ */ function(FlowMode$1) {
 	return FlowMode$1;
 }({});
 
+//#endregion
+//#region src/models/application.ts
+/**
+* OAuth 2.0 grant type values.
+*/
+const OAuth2GrantTypes = {
+	AUTHORIZATION_CODE: "authorization_code",
+	CIBA: "urn:openid:params:grant-type:ciba",
+	CLIENT_CREDENTIALS: "client_credentials",
+	IMPLICIT: "implicit",
+	JWT_BEARER: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+	PASSWORD: "password",
+	REFRESH_TOKEN: "refresh_token",
+	TOKEN_EXCHANGE: "urn:ietf:params:oauth:grant-type:token-exchange"
+};
+/**
+* Grant types that can issue a refresh token.
+*/
+const REFRESH_TOKEN_ISSUING_GRANTS = [OAuth2GrantTypes.AUTHORIZATION_CODE, OAuth2GrantTypes.CIBA];
+/**
+* OAuth 2.0 response type values.
+*/
+const OAuth2ResponseTypes = {
+	CODE: "code",
+	CODE_ID_TOKEN: "code id_token",
+	CODE_TOKEN: "code token",
+	ID_TOKEN: "id_token",
+	TOKEN: "token",
+	TOKEN_ID_TOKEN: "token id_token"
+};
+/**
+* Token endpoint authentication methods an application can be configured with.
+*/
+const TokenEndpointAuthMethods = {
+	CLIENT_SECRET_BASIC: "client_secret_basic",
+	CLIENT_SECRET_JWT: "client_secret_jwt",
+	CLIENT_SECRET_POST: "client_secret_post",
+	NONE: "none",
+	PRIVATE_KEY_JWT: "private_key_jwt"
+};
+/**
+* Inbound authentication protocol values.
+*/
+const InboundAuthTypes = { OAUTH2: "oauth2" };
+
 //#endregion
 //#region src/models/field.ts
 let FieldType = /* @__PURE__ */ function(FieldType$1) {
@@ -2280,9 +2900,13 @@ var processOpenIDScopes_default = processOpenIDScopes;
 * endpoints. Used to keep these overrides out of the resolved OIDC provider metadata.
 */
 const RESOURCE_ENDPOINT_KEYS = [
+	"agents",
+	"applications",
 	"flowExecute",
 	"flowMeta",
+	"users",
 	"usersMe",
+	"usersMeCredentials",
 	"usersMeMeta"
 ];
 /**
@@ -4312,6 +4936,182 @@ const resolveFieldName = (field) => {
 };
 var resolveFieldName_default = resolveFieldName;
 
+//#endregion
+//#region src/utils/evaluatePasswordPolicy.ts
+/**
+* Evaluates a password against a policy, returning one result when the policy configures
+* a `regex` and none otherwise.
+*
+* An uncompilable `regex` is treated as passing, matching `evaluateValidationRule`:
+* the SDK stays lenient so a misconfigured schema cannot lock a user out of their own
+* password change.
+*
+* @param value - The candidate password.
+* @param policy - The rule to apply.
+* @returns A single-item list when `policy.regex` is set, otherwise an empty list.
+* @example
+* ```typescript
+* const results = evaluatePasswordPolicy('sh0rt', {regex: '^.{8,}$'});
+* const isValid = results.every(result => result.passed);
+* ```
+*/
+const evaluatePasswordPolicy = (value, policy) => {
+	if (!policy.regex) return [];
+	let matches = true;
+	try {
+		matches = new RegExp(policy.regex).test(value);
+	} catch {
+		matches = true;
+	}
+	return [{
+		key: "regex",
+		messageKey: "validation.password.pattern",
+		passed: matches
+	}];
+};
+var evaluatePasswordPolicy_default = evaluatePasswordPolicy;
+
+//#endregion
+//#region src/utils/evaluateChangePasswordForm.ts
+/**
+* Evaluates a change-password form against a policy.
+*
+* Every predicate a change-password UI needs is derived here so the React and Vue
+* components stay pure rendering concerns and cannot drift apart on what counts as a
+* submittable form.
+*
+* @param values - The current field values.
+* @param policy - The rules the new password must satisfy.
+* @returns The derived flags plus the per-rule results.
+* @example
+* ```typescript
+* const {isValid, ruleResults} = evaluateChangePasswordForm(
+*   {confirmPassword, newPassword},
+*   {regex: '^.{12,}$'},
+* );
+* const canSubmit = !loading && isValid;
+* ```
+*/
+const evaluateChangePasswordForm = (values, policy) => {
+	const { confirmPassword, newPassword } = values;
+	const ruleResults = evaluatePasswordPolicy_default(newPassword, policy);
+	const meetsPolicy = ruleResults.every((rule) => rule.passed);
+	const confirmMatches = newPassword === confirmPassword;
+	return {
+		confirmMatches,
+		isValid: newPassword !== "" && confirmPassword !== "" && meetsPolicy && confirmMatches,
+		meetsPolicy,
+		ruleResults
+	};
+};
+var evaluateChangePasswordForm_default = evaluateChangePasswordForm;
+
+//#endregion
+//#region src/utils/resolveChangeCredentialPolicy.ts
+/**
+* Resolves the rules a change-credential form should enforce for the given credential.
+*
+* The organization's own policy, expressed as the credential attribute's `regex` in
+* `GET /users/me/meta`, is the sole source of truth: the SDK does not layer its own
+* character-class or length rules on top, since doing so could reject a value the
+* organization's policy accepts. When the schema carries no regex for this credential,
+* there is no policy to check client-side and the requirement checklist is simply empty.
+*
+* @param userSchema - The user type schema resolved by the provider, keyed by attribute.
+* @param attribute - The credential attribute this form manages (e.g. `password`, `pin`).
+* @param override - An explicit policy supplied by the caller, which wins outright.
+* @returns The policy to hand to {@link evaluatePasswordPolicy}.
+* @example
+* ```typescript
+* const policy = resolveChangeCredentialPolicy(userSchema, 'pin', undefined);
+* const results = evaluatePasswordPolicy(candidate, policy);
+* ```
+*/
+const resolveChangeCredentialPolicy = (userSchema, attribute, override) => {
+	if (override) return override;
+	const schemaRegex = userSchema?.[attribute]?.regex;
+	return schemaRegex ? { regex: schemaRegex } : {};
+};
+var resolveChangeCredentialPolicy_default = resolveChangeCredentialPolicy;
+
+//#endregion
+//#region src/utils/supportsCredential.ts
+/**
+* Whether the signed-in user's type allows them to set the given credential for themselves.
+*
+* The user type schema from `GET /users/me/meta` is the only thing a client can check before
+* rendering. It says whether the credential is declared on this type at all, which is a property
+* of the type rather than of the account, so it cannot say whether this particular user has one
+* stored today. That second question is the server's to answer.
+*
+* Without this check the form would submit into a guaranteed failure. `POST
+* /users/me/update-credentials` rejects a write for a name not declared on the type, since the
+* entity layer only accepts schema-declared credential keys.
+*
+* An absent schema means the answer is not known yet, either because the profile is still loading
+* or because the consuming app never supplied one. Both resolve to `true` so a change-credential
+* affordance is never hidden on missing information alone, and so apps that do not wire up
+* `userSchema` keep the behaviour they had before this check existed.
+*
+* @param userSchema - The user type schema resolved by the provider, keyed by attribute.
+* @param attribute - The credential attribute to check (e.g. `password`, `pin`).
+* @returns `false` only when the schema is known and either defines no attribute named
+* `attribute` or defines one that isn't marked `credential: true`.
+* @example
+* ```typescript
+* if (!supportsCredential(userSchema, 'pin')) {
+*   return null;
+* }
+* ```
+*/
+const supportsCredential = (userSchema, attribute) => {
+	if (!userSchema) return true;
+	return userSchema[attribute]?.credential === true;
+};
+var supportsCredential_default = supportsCredential;
+
+//#endregion
+//#region src/utils/mapCredentialUpdateError.ts
+/**
+* Maps a failure from the credential write path onto the field that caused it.
+*
+* `400` is the new password failing a server-side check. Everything else, including a
+* `403`, has no single field to blame here: this form collects no current-value field for
+* a `403` to attach to, since the server does not verify one on this path today.
+*
+* @param error - The value thrown by the credential update call.
+* @returns Where to show the failure and what to show.
+* @example
+* ```typescript
+* const {field, message, messageKey} = mapCredentialUpdateError(caughtError);
+* const text = message ?? t(messageKey);
+*
+* if (field) {
+*   setFieldErrors({[field]: text});
+* } else {
+*   setError(text);
+* }
+* ```
+*/
+const GENERIC_MESSAGE_KEY = "user.change_password.generic.error";
+const mapCredentialUpdateError = (error$1) => {
+	if ((error$1 instanceof ThunderIDAPIError ? error$1.statusCode : void 0) === 400 && error$1 instanceof ThunderIDError) return {
+		field: "newPassword",
+		message: error$1.message,
+		messageKey: GENERIC_MESSAGE_KEY
+	};
+	if (error$1 instanceof ThunderIDError) return {
+		field: null,
+		message: error$1.message,
+		messageKey: GENERIC_MESSAGE_KEY
+	};
+	return {
+		field: null,
+		messageKey: GENERIC_MESSAGE_KEY
+	};
+};
+var mapCredentialUpdateError_default = mapCredentialUpdateError;
+
 //#endregion
 //#region src/utils/resolveMeta.ts
 /**
@@ -4945,6 +5745,19 @@ const en_US = {
 		"passkey.register.description": "Create a passkey to securely sign in to your account without a password.",
 		"user.profile.heading": "Profile",
 		"user.profile.update.generic.error": "An error occurred while updating your profile. Please try again.",
+		"user.change_password.heading": "Change {credential}",
+		"user.change_password.new.label": "New {credential}",
+		"user.change_password.new.placeholder": "Enter your new {credentialLower}",
+		"user.change_password.confirm.label": "Confirm New {credential}",
+		"user.change_password.confirm.placeholder": "Re-enter your new {credentialLower}",
+		"user.change_password.requirements.heading": "Your {credentialLower} must have:",
+		"user.change_password.submit": "Update {credential}",
+		"user.change_password.success": "Your {credentialLower} has been updated.",
+		"user.change_password.mismatch.error": "{credential}s do not match.",
+		"user.change_password.generic.error": "An error occurred while updating your {credentialLower}. Please try again.",
+		"user.change_password.unavailable.heading": "{credential} changes unavailable",
+		"user.change_password.unavailable.description": "Please contact your administrator.",
+		"validation.password.pattern": "Matches the required format",
 		"organization.switcher.switch.organization": "Switch Organization",
 		"organization.switcher.loading.placeholder.organizations": "Loading organizations...",
 		"organization.switcher.members": "members",
@@ -5066,6 +5879,19 @@ const fr_FR = {
 		"passkey.register.description": "Créez une clé d'accès pour vous connecter en toute sécurité à votre compte sans mot de passe.",
 		"user.profile.heading": "Profil",
 		"user.profile.update.generic.error": "Une erreur est survenue lors de la mise à jour de votre profil. Veuillez réessayer.",
+		"user.change_password.heading": "Modifier {credential}",
+		"user.change_password.new.label": "Nouveau {credential}",
+		"user.change_password.new.placeholder": "Entrez votre nouveau {credentialLower}",
+		"user.change_password.confirm.label": "Confirmer le nouveau {credential}",
+		"user.change_password.confirm.placeholder": "Saisissez à nouveau votre nouveau {credentialLower}",
+		"user.change_password.requirements.heading": "Votre {credentialLower} doit contenir :",
+		"user.change_password.submit": "Mettre à jour {credential}",
+		"user.change_password.success": "Votre {credentialLower} a été mis à jour.",
+		"user.change_password.mismatch.error": "Les {credentialLower}s ne correspondent pas.",
+		"user.change_password.generic.error": "Une erreur est survenue lors de la mise à jour de votre {credentialLower}. Veuillez réessayer.",
+		"user.change_password.unavailable.heading": "Modification du {credentialLower} indisponible",
+		"user.change_password.unavailable.description": "Veuillez contacter votre administrateur.",
+		"validation.password.pattern": "Correspond au format requis",
 		"organization.switcher.switch.organization": "Changer d'organisation",
 		"organization.switcher.loading.placeholder.organizations": "Chargement des organisations...",
 		"organization.switcher.members": "membres",
@@ -5187,6 +6013,19 @@ const te_IN = {
 		"passkey.register.description": "పాస్‌వర్డ్ లేకుండా మీ ఖాతాలోకి సురక్షితంగా సైన్ ఇన్ చేయడానికి Passkey ని సృష్టించండి.",
 		"user.profile.heading": "ప్రొఫైల్",
 		"user.profile.update.generic.error": "ప్రొఫైల్ అప్‌డేట్ చేస్తూ లోపం వచ్చింది. దయచేసి మళ్లీ ప్రయత్నించండి.",
+		"user.change_password.heading": "{credential} మార్చండి",
+		"user.change_password.new.label": "కొత్త {credential}",
+		"user.change_password.new.placeholder": "మీ కొత్త {credentialLower} నమోదు చేయండి",
+		"user.change_password.confirm.label": "కొత్త {credential} నిర్ధారించండి",
+		"user.change_password.confirm.placeholder": "మీ కొత్త {credentialLower}ని మళ్లీ నమోదు చేయండి",
+		"user.change_password.requirements.heading": "మీ {credentialLower} కింది వాటిని కలిగి ఉండాలి:",
+		"user.change_password.submit": "{credential} నవీకరించండి",
+		"user.change_password.success": "మీ {credentialLower} నవీకరించబడింది.",
+		"user.change_password.mismatch.error": "{credentialLower} సరిపోలలేదు.",
+		"user.change_password.generic.error": "మీ {credentialLower} నవీకరించేటప్పుడు లోపం వచ్చింది. దయచేసి మళ్లీ ప్రయత్నించండి.",
+		"user.change_password.unavailable.heading": "{credential} మార్పులు అందుబాటులో లేవు",
+		"user.change_password.unavailable.description": "దయచేసి మీ నిర్వాహకుడిని సంప్రదించండి.",
+		"validation.password.pattern": "అవసరమైన ఫార్మాట్‌కు సరిపోతుంది",
 		"organization.switcher.switch.organization": "ఆర్గనైజేషన్ మార్చండి",
 		"organization.switcher.loading.placeholder.organizations": "ఆర్గనైజేషన్‌లు లోడ్ అవుతున్నాయి...",
 		"organization.switcher.members": "సభ్యులు",
@@ -5308,6 +6147,19 @@ const hi_IN = {
 		"passkey.register.description": "बिना पासवर्ड के अपने खाते में सुरक्षित रूप से साइन इन करने के लिए एक Passkey बनाएं।",
 		"user.profile.heading": "प्रोफ़ाइल",
 		"user.profile.update.generic.error": "प्रोफ़ाइल अपडेट करते समय त्रुटि हुई। कृपया पुनः प्रयास करें।",
+		"user.change_password.heading": "{credential} बदलें",
+		"user.change_password.new.label": "नया {credential}",
+		"user.change_password.new.placeholder": "अपना नया {credentialLower} दर्ज करें",
+		"user.change_password.confirm.label": "नए {credential} की पुष्टि करें",
+		"user.change_password.confirm.placeholder": "अपना नया {credentialLower} फिर से दर्ज करें",
+		"user.change_password.requirements.heading": "आपके {credentialLower} में यह होना चाहिए:",
+		"user.change_password.submit": "{credential} अपडेट करें",
+		"user.change_password.success": "आपका {credentialLower} अपडेट कर दिया गया है।",
+		"user.change_password.mismatch.error": "{credential} मेल नहीं खाते।",
+		"user.change_password.generic.error": "आपका {credentialLower} अपडेट करते समय त्रुटि हुई। कृपया पुनः प्रयास करें।",
+		"user.change_password.unavailable.heading": "{credential} परिवर्तन उपलब्ध नहीं है",
+		"user.change_password.unavailable.description": "कृपया अपने व्यवस्थापक से संपर्क करें।",
+		"validation.password.pattern": "आवश्यक प्रारूप से मेल खाता है",
 		"organization.switcher.switch.organization": "संगठन बदलें",
 		"organization.switcher.loading.placeholder.organizations": "संगठन लोड हो रहे हैं...",
 		"organization.switcher.members": "सदस्य",
@@ -5429,6 +6281,19 @@ const pt_BR = {
 		"passkey.register.description": "Crie uma passkey para entrar em sua conta com segurança sem uma senha.",
 		"user.profile.heading": "Perfil",
 		"user.profile.update.generic.error": "Ocorreu um erro ao atualizar seu perfil. Tente novamente.",
+		"user.change_password.heading": "Alterar {credential}",
+		"user.change_password.new.label": "Novo {credential}",
+		"user.change_password.new.placeholder": "Digite seu novo {credentialLower}",
+		"user.change_password.confirm.label": "Confirmar novo {credential}",
+		"user.change_password.confirm.placeholder": "Digite novamente seu novo {credentialLower}",
+		"user.change_password.requirements.heading": "Seu {credentialLower} deve conter:",
+		"user.change_password.submit": "Atualizar {credential}",
+		"user.change_password.success": "Seu {credentialLower} foi atualizado.",
+		"user.change_password.mismatch.error": "Os {credentialLower}s não coincidem.",
+		"user.change_password.generic.error": "Ocorreu um erro ao atualizar seu {credentialLower}. Tente novamente.",
+		"user.change_password.unavailable.heading": "Alteração de {credentialLower} indisponível",
+		"user.change_password.unavailable.description": "Entre em contato com o administrador.",
+		"validation.password.pattern": "Corresponde ao formato exigido",
 		"organization.switcher.switch.organization": "Trocar Organização",
 		"organization.switcher.loading.placeholder.organizations": "Carregando organizações...",
 		"organization.switcher.members": "membros",
@@ -5550,6 +6415,19 @@ const pt_PT = {
 		"passkey.register.description": "Crie uma passkey para iniciar sessão na sua conta com segurança sem palavra-passe.",
 		"user.profile.heading": "Perfil",
 		"user.profile.update.generic.error": "Ocorreu um erro ao actualizar o seu perfil. Tente novamente.",
+		"user.change_password.heading": "Alterar {credential}",
+		"user.change_password.new.label": "Novo {credential}",
+		"user.change_password.new.placeholder": "Introduza o seu novo {credentialLower}",
+		"user.change_password.confirm.label": "Confirmar novo {credential}",
+		"user.change_password.confirm.placeholder": "Introduza novamente o seu novo {credentialLower}",
+		"user.change_password.requirements.heading": "O seu {credentialLower} deve conter:",
+		"user.change_password.submit": "Atualizar {credential}",
+		"user.change_password.success": "O seu {credentialLower} foi atualizado.",
+		"user.change_password.mismatch.error": "Os {credentialLower}s não coincidem.",
+		"user.change_password.generic.error": "Ocorreu um erro ao actualizar o seu {credentialLower}. Tente novamente.",
+		"user.change_password.unavailable.heading": "Alteração de {credentialLower} indisponível",
+		"user.change_password.unavailable.description": "Contacte o seu administrador.",
+		"validation.password.pattern": "Corresponde ao formato exigido",
 		"organization.switcher.switch.organization": "Trocar Organização",
 		"organization.switcher.loading.placeholder.organizations": "A carregar organizações...",
 		"organization.switcher.members": "membros",
@@ -5671,6 +6549,19 @@ const ta_IN = {
 		"passkey.register.description": "கடவுச்சொல் இல்லாமல் பாதுகாப்பாக உள்நுழைய ஒரு passkey-ஐ உருவாக்கவும்.",
 		"user.profile.heading": "சுயவிவரம்",
 		"user.profile.update.generic.error": "உங்கள் சுயவிவரத்தை புதுப்பிக்கும் போது பிழை ஏற்பட்டது. மீண்டும் முயற்சிக்கவும்.",
+		"user.change_password.heading": "{credential} மாற்றவும்",
+		"user.change_password.new.label": "புதிய {credential}",
+		"user.change_password.new.placeholder": "உங்கள் புதிய {credentialLower}-ஐ உள்ளிடவும்",
+		"user.change_password.confirm.label": "புதிய {credential}-ஐ உறுதிப்படுத்தவும்",
+		"user.change_password.confirm.placeholder": "உங்கள் புதிய {credentialLower}-ஐ மீண்டும் உள்ளிடவும்",
+		"user.change_password.requirements.heading": "உங்கள் {credentialLower} பின்வருவனவற்றைக் கொண்டிருக்க வேண்டும்:",
+		"user.change_password.submit": "{credential}-ஐ புதுப்பிக்கவும்",
+		"user.change_password.success": "உங்கள் {credentialLower} புதுப்பிக்கப்பட்டது.",
+		"user.change_password.mismatch.error": "{credentialLower} பொருந்தவில்லை.",
+		"user.change_password.generic.error": "உங்கள் {credentialLower}-ஐ புதுப்பிக்கும் போது பிழை ஏற்பட்டது. மீண்டும் முயற்சிக்கவும்.",
+		"user.change_password.unavailable.heading": "{credential} மாற்றங்கள் கிடைக்கவில்லை",
+		"user.change_password.unavailable.description": "உங்கள் நிர்வாகியை தொடர்பு கொள்ளவும்.",
+		"validation.password.pattern": "தேவையான வடிவமைப்பிற்கு பொருந்துகிறது",
 		"organization.switcher.switch.organization": "அமைப்பை மாற்று",
 		"organization.switcher.loading.placeholder.organizations": "அமைப்புகள் ஏற்றப்படுகின்றன...",
 		"organization.switcher.members": "உறுப்பினர்கள்",
@@ -5792,6 +6683,19 @@ const si_LK = {
 		"passkey.register.description": "මුරපදයක් නොමැතිව ඔබේ ගිණුමට ආරක්ෂිතව ඇතුල් වීමට passkey එකක් සාදන්න.",
 		"user.profile.heading": "පැතිකඩ",
 		"user.profile.update.generic.error": "ඔබේ පැතිකඩ යාවත්කාලීන කිරීමේදී දෝෂයක් ඇතිවිය.කරුණාකර නැවත උත්සාහ කරන්න",
+		"user.change_password.heading": "{credential} වෙනස් කරන්න",
+		"user.change_password.new.label": "නව {credential}",
+		"user.change_password.new.placeholder": "ඔබේ නව {credentialLower} ඇතුළත් කරන්න",
+		"user.change_password.confirm.label": "නව {credential} තහවුරු කරන්න",
+		"user.change_password.confirm.placeholder": "ඔබේ නව {credentialLower} නැවත ඇතුළත් කරන්න",
+		"user.change_password.requirements.heading": "ඔබේ {credentialLower} තුළ තිබිය යුතුය:",
+		"user.change_password.submit": "{credential} යාවත්කාලීන කරන්න",
+		"user.change_password.success": "ඔබේ {credentialLower} යාවත්කාලීන කර ඇත.",
+		"user.change_password.mismatch.error": "{credentialLower} නොගැලපේ.",
+		"user.change_password.generic.error": "ඔබේ {credentialLower} යාවත්කාලීන කිරීමේදී දෝෂයක් ඇතිවිය. කරුණාකර නැවත උත්සාහ කරන්න.",
+		"user.change_password.unavailable.heading": "{credential} වෙනස් කිරීම් ලබා ගත නොහැක",
+		"user.change_password.unavailable.description": "කරුණාකර ඔබේ පරිපාලක සම්බන්ධ කර ගන්න.",
+		"validation.password.pattern": "අවශ්‍ය ආකෘතියට ගැලපේ",
 		"organization.switcher.switch.organization": "සංවිධානය මාරු කරන්න",
 		"organization.switcher.loading.placeholder.organizations": "සංවිධාන ලෝඩ් වෙමින්...",
 		"organization.switcher.members": "සාමාජිකයන්",
@@ -5929,4 +6833,4 @@ const normalizeTranslations = (translations) => {
 var normalizeTranslations_default = normalizeTranslations;
 
 //#endregion
-export { ApplicationNativeAuthenticationConstants_default as ApplicationNativeAuthenticationConstants, AuthenticationHelper_default as AuthenticationHelper, ConsentConstants_default as ConsentConstants, DEFAULT_THEME, DEFAULT_VALIDATION_MESSAGE_KEYS, EMOJI_URI_SCHEME, EmbeddedFlowActionVariant, EmbeddedFlowComponentType, EmbeddedFlowEventType, EmbeddedFlowResponseType, EmbeddedFlowTextVariant, EmbeddedFlowType, EmbeddedRecoveryFlowStatus, EmbeddedRecoveryFlowType, EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, EmbeddedSignUpFlowStatus, EmbeddedSignUpFlowType, FieldType, FlowMetaType, FlowMode, HttpClient, IsomorphicCrypto, OIDCRequestConstants_default as OIDCRequestConstants, StorageManager_default as StorageManager, ThunderIDAPIError, ThunderIDAuthException, ThunderIDError, ThunderIDJavaScriptClient_default as ThunderIDJavaScriptClient, ThunderIDRuntimeError, TokenConstants_default as TokenConstants, TranslationBundleConstants_default as TranslationBundleConstants, VendorConstants_default as VendorConstants, arrayBufferToBase64url_default as arrayBufferToBase64url, base64urlToArrayBuffer_default as base64urlToArrayBuffer, bem_default as bem, buildValidatorFromRules_default as buildValidatorFromRules, configure as configureLogger, countryCodeToFlagEmoji, createComponentLogger, createLogger, createPackageComponentLogger, createPackageLogger, createTheme_default as createTheme, debug, deepMerge_default as deepMerge, error, evaluateValidationRule_default as evaluateValidationRule, executeEmbeddedRecoveryFlow_default as executeEmbeddedRecoveryFlow, executeEmbeddedSignInFlow_default as executeEmbeddedSignInFlow, executeEmbeddedSignUpFlow_default as executeEmbeddedSignUpFlow, executeEmbeddedUserOnboardingFlow_default as executeEmbeddedUserOnboardingFlow, extractEmojiFromUri_default as extractEmojiFromUri, extractPkceStorageKeyFromState_default as extractPkceStorageKeyFromState, extractUserClaimsFromIdToken_default as extractUserClaimsFromIdToken, formatDate_default as formatDate, generateFlattenedUserProfile_default as generateFlattenedUserProfile, get_default as get, getBaseLanguage, getDefaultI18nBundles_default as getDefaultI18nBundles, getFlowMeta_default as getFlowMeta, getLatestStateParam_default as getLatestStateParam, getOrganizationUnitChildren_default as getOrganizationUnitChildren, getRedirectBasedSignUpUrl_default as getRedirectBasedSignUpUrl, getUserInfo_default as getUserInfo, getUsersMe_default as getUsersMe, getUsersMeMeta_default as getUsersMeMeta, getVendorPrefix_default as getVendorPrefix, hasUnresolvedTranslationParams, info, isEmojiUri_default as isEmojiUri, isEmpty_default as isEmpty, isRecognizedBaseUrlPattern_default as isRecognizedBaseUrlPattern, logger_default as logger, normalizeLocaleTag, normalizeTranslations_default as normalizeTranslations, processOpenIDScopes_default as processOpenIDScopes, removeTrailingSlash_default as removeTrailingSlash, resolveFieldName_default as resolveFieldName, resolveFlowTemplateLiterals, resolveLocaleDisplayName, resolveLocaleEmoji_default as resolveLocaleEmoji, resolveMeta, resolveResourceEndpoint_default as resolveResourceEndpoint, set_default as set, startCase_default as startCase, substituteTranslationParams_default as substituteTranslationParams, updateMeProfile_default as updateMeProfile, warn, withVendorCSSClassPrefix_default as withVendorCSSClassPrefix };
+export { AgentQueryKeys_default as AgentQueryKeys, ApplicationNativeAuthenticationConstants_default as ApplicationNativeAuthenticationConstants, ApplicationQueryKeys_default as ApplicationQueryKeys, AuthenticationHelper_default as AuthenticationHelper, ConsentConstants_default as ConsentConstants, CredentialConstants_default as CredentialConstants, DEFAULT_THEME, DEFAULT_VALIDATION_MESSAGE_KEYS, EMOJI_URI_SCHEME, EmbeddedFlowActionVariant, EmbeddedFlowComponentType, EmbeddedFlowEventType, EmbeddedFlowResponseType, EmbeddedFlowTextVariant, EmbeddedFlowType, EmbeddedRecoveryFlowStatus, EmbeddedRecoveryFlowType, EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, EmbeddedSignUpFlowStatus, EmbeddedSignUpFlowType, FieldType, FlowMetaType, FlowMode, HttpClient, InboundAuthTypes, IsomorphicCrypto, OAuth2GrantTypes, OAuth2ResponseTypes, OIDCRequestConstants_default as OIDCRequestConstants, REFRESH_TOKEN_ISSUING_GRANTS, StorageManager_default as StorageManager, ThunderIDAPIError, ThunderIDAuthException, ThunderIDError, ThunderIDJavaScriptClient_default as ThunderIDJavaScriptClient, ThunderIDRuntimeError, TokenConstants_default as TokenConstants, TokenEndpointAuthMethods, TranslationBundleConstants_default as TranslationBundleConstants, UserQueryKeys_default as UserQueryKeys, VendorConstants_default as VendorConstants, arrayBufferToBase64url_default as arrayBufferToBase64url, base64urlToArrayBuffer_default as base64urlToArrayBuffer, bem_default as bem, buildValidatorFromRules_default as buildValidatorFromRules, configure as configureLogger, countryCodeToFlagEmoji, createAgent_default as createAgent, createApplication_default as createApplication, createComponentLogger, createLogger, createPackageComponentLogger, createPackageLogger, createTheme_default as createTheme, createUser_default as createUser, debug, deepMerge_default as deepMerge, deleteAgent_default as deleteAgent, deleteApplication_default as deleteApplication, deleteUser_default as deleteUser, error, evaluateChangePasswordForm_default as evaluateChangePasswordForm, evaluatePasswordPolicy_default as evaluatePasswordPolicy, evaluateValidationRule_default as evaluateValidationRule, executeEmbeddedRecoveryFlow_default as executeEmbeddedRecoveryFlow, executeEmbeddedSignInFlow_default as executeEmbeddedSignInFlow, executeEmbeddedSignUpFlow_default as executeEmbeddedSignUpFlow, executeEmbeddedUserOnboardingFlow_default as executeEmbeddedUserOnboardingFlow, extractEmojiFromUri_default as extractEmojiFromUri, extractPkceStorageKeyFromState_default as extractPkceStorageKeyFromState, extractUserClaimsFromIdToken_default as extractUserClaimsFromIdToken, formatDate_default as formatDate, generateFlattenedUserProfile_default as generateFlattenedUserProfile, get_default as get, getAgent_default as getAgent, getAgents_default as getAgents, getApplication_default as getApplication, getApplications_default as getApplications, getBaseLanguage, getDefaultI18nBundles_default as getDefaultI18nBundles, getFlowMeta_default as getFlowMeta, getLatestStateParam_default as getLatestStateParam, getOrganizationUnitChildren_default as getOrganizationUnitChildren, getRedirectBasedSignUpUrl_default as getRedirectBasedSignUpUrl, getUser_default as getUser, getUserInfo_default as getUserInfo, getUsers_default as getUsers, getUsersMe_default as getUsersMe, getUsersMeMeta_default as getUsersMeMeta, getVendorPrefix_default as getVendorPrefix, hasUnresolvedTranslationParams, info, isEmojiUri_default as isEmojiUri, isEmpty_default as isEmpty, isRecognizedBaseUrlPattern_default as isRecognizedBaseUrlPattern, logger_default as logger, mapCredentialUpdateError_default as mapCredentialUpdateError, normalizeLocaleTag, normalizeTranslations_default as normalizeTranslations, processOpenIDScopes_default as processOpenIDScopes, removeTrailingSlash_default as removeTrailingSlash, resolveChangeCredentialPolicy_default as resolveChangeCredentialPolicy, resolveFieldName_default as resolveFieldName, resolveFlowTemplateLiterals, resolveLocaleDisplayName, resolveLocaleEmoji_default as resolveLocaleEmoji, resolveMeta, resolveResourceEndpoint_default as resolveResourceEndpoint, set_default as set, startCase_default as startCase, substituteTranslationParams_default as substituteTranslationParams, supportsCredential_default as supportsCredential, updateAgent_default as updateAgent, updateApplication_default as updateApplication, updateMeCredentials_default as updateMeCredentials, updateMeProfile_default as updateMeProfile, updateUser_default as updateUser, warn, withVendorCSSClassPrefix_default as withVendorCSSClassPrefix };