@thunderid/nextjs 1.12.0 → 1.14.0

package/dist/cjs/client/components/auth/SignIn/SignIn.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"SignIn.cjs","names":["SignIn: FC<SignInProps>","useThunderID","normalizedError: Error","response: any","EmbeddedFlowType","ThunderIDRuntimeError","BaseSignIn"],"sources":["../../../../../../src/client/components/auth/SignIn/SignIn.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {EmbeddedFlowComponent, EmbeddedFlowType, ThunderIDRuntimeError} from '@thunderid/node';\nimport {BaseSignIn, BaseSignInProps, normalizeFlowResponse, useTranslation} from '@thunderid/react';\nimport {FC, useEffect, useRef, useState} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\n/**\n * Props for the SignIn component.\n * Extends BaseSignInProps for full compatibility with the React BaseSignIn component\n */\nexport type SignInProps = Pick<\n  BaseSignInProps,\n  'children' | 'className' | 'id' | 'onSuccess' | 'onError' | 'variant' | 'size'\n>;\n\n/**\n * A SignIn component for Next.js that provides native authentication flow.\n * This component delegates to the BaseSignIn from @thunderid/react. Unlike BaseSignUp,\n * BaseSignIn does not manage its own flow state, so this component initiates the flow\n * (using the server-action-backed `signIn`) and tracks `components`/`executionId` itself.\n */\nconst SignIn: FC<SignInProps> = ({size = 'medium', variant = 'outlined', onError, ...rest}: SignInProps) => {\n  const {signIn, applicationId, scopes} = useThunderID();\n  const {t} = useTranslation();\n\n  const [components, setComponents] = useState<EmbeddedFlowComponent[]>([]);\n  const [additionalData, setAdditionalData] = useState<Record<string, any>>({});\n  const [executionId, setExecutionId] = useState<string | undefined>(undefined);\n  const [isFlowInitialized, setIsFlowInitialized] = useState(false);\n  const [flowError, setFlowError] = useState<Error | null>(null);\n  const initializationAttemptedRef = useRef(false);\n  // A fresh challenge token is required on every step to prevent replay attacks; the server\n  // rotates it on each response, so it's tracked in a ref (not state) to avoid a stale value\n  // from a closure captured before the previous response's state update committed.\n  const challengeTokenRef = useRef<string | undefined>(undefined);\n\n  const applyFlowResponse = (response: any): void => {\n    const normalized = normalizeFlowResponse(response, t, {resolveTranslations: false});\n\n    challengeTokenRef.current = response?.challengeToken ?? undefined;\n    setExecutionId(normalized.executionId ?? undefined);\n    setComponents(normalized.components);\n    setAdditionalData(normalized.additionalData);\n  };\n\n  const handleFlowError = (error: unknown): void => {\n    const normalizedError: Error = error instanceof Error ? error : new Error(String(error));\n\n    setFlowError(normalizedError);\n    onError?.(normalizedError);\n  };\n\n  useEffect(() => {\n    if (initializationAttemptedRef.current || !signIn) {\n      return;\n    }\n\n    initializationAttemptedRef.current = true;\n\n    (async (): Promise<void> => {\n      try {\n        const response: any = await signIn(\n          {\n            applicationId,\n            flowType: EmbeddedFlowType.Authentication,\n            ...(scopes && {scopes}),\n          },\n          {},\n        );\n\n        // `response` is undefined when the provider already redirected\n        // (OAuth-redirect or completed flows are handled there directly).\n        if (response) {\n          applyFlowResponse(response);\n        }\n      } catch (error) {\n        handleFlowError(error);\n      } finally {\n        setIsFlowInitialized(true);\n      }\n    })();\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [signIn]);\n\n  const handleOnSubmit = async (payload: any): Promise<void> => {\n    if (!signIn) {\n      throw new ThunderIDRuntimeError(\n        '`signIn` function is not available.',\n        'SignIn-handleOnSubmit-RuntimeError-001',\n        'nextjs',\n      );\n    }\n\n    const response: any = await signIn(\n      {\n        ...payload,\n        executionId,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      },\n      {},\n    );\n\n    if (response) {\n      applyFlowResponse(response);\n    }\n  };\n\n  return (\n    <BaseSignIn\n      additionalData={additionalData}\n      components={components}\n      error={flowError}\n      isLoading={!isFlowInitialized}\n      onError={onError}\n      onSubmit={handleOnSubmit}\n      size={size}\n      variant={variant}\n      {...rest}\n    />\n  );\n};\n\nSignIn.displayName = 'SignIn';\n\nexport default SignIn;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,UAA2B,EAAC,OAAO,UAAU,UAAU,YAAY,QAAS,GAAG,WAAuB;CAC1G,MAAM,EAAC,QAAQ,eAAe,WAAUC,8BAAc;CACtD,MAAM,EAAC,6CAAqB;CAE5B,MAAM,CAAC,YAAY,qCAAmD,EAAE,CAAC;CACzE,MAAM,CAAC,gBAAgB,yCAAmD,EAAE,CAAC;CAC7E,MAAM,CAAC,aAAa,sCAA+C,OAAU;CAC7E,MAAM,CAAC,mBAAmB,4CAAiC,MAAM;CACjE,MAAM,CAAC,WAAW,oCAAuC,KAAK;CAC9D,MAAM,+CAAoC,MAAM;CAIhD,MAAM,sCAA+C,OAAU;CAE/D,MAAM,qBAAqB,aAAwB;EACjD,MAAM,0DAAmC,UAAU,GAAG,EAAC,qBAAqB,OAAM,CAAC;AAEnF,oBAAkB,UAAU,UAAU,kBAAkB;AACxD,iBAAe,WAAW,eAAe,OAAU;AACnD,gBAAc,WAAW,WAAW;AACpC,oBAAkB,WAAW,eAAe;;CAG9C,MAAM,mBAAmB,UAAyB;EAChD,MAAMC,kBAAyB,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;AAExF,eAAa,gBAAgB;AAC7B,YAAU,gBAAgB;;AAG5B,4BAAgB;AACd,MAAI,2BAA2B,WAAW,CAAC,OACzC;AAGF,6BAA2B,UAAU;AAErC,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,WAAgB,MAAM,OAC1B;KACE;KACA,UAAUC,kCAAiB;KAC3B,GAAI,UAAU,EAAC,QAAO;KACvB,EACD,EAAE,CACH;AAID,QAAI,SACF,mBAAkB,SAAS;YAEtB,OAAO;AACd,oBAAgB,MAAM;aACd;AACR,yBAAqB,KAAK;;MAE1B;IAEH,CAAC,OAAO,CAAC;CAEZ,MAAM,iBAAiB,OAAO,YAAgC;AAC5D,MAAI,CAAC,OACH,OAAM,IAAIC,uCACR,uCACA,0CACA,SACD;EAGH,MAAMF,WAAgB,MAAM,OAC1B;GACE,GAAG;GACH;GACA,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;GACjF,EACD,EAAE,CACH;AAED,MAAI,SACF,mBAAkB,SAAS;;AAI/B,QACE,2CAACG;EACiB;EACJ;EACZ,OAAO;EACP,WAAW,CAAC;EACH;EACT,UAAU;EACJ;EACG;EACT,GAAI;GACJ;;AAIN,OAAO,cAAc;AAErB,qBAAe"}
+{"version":3,"file":"SignIn.cjs","names":["SignIn: FC<SignInProps>","useThunderID","normalizedError: Error","response: any","EmbeddedFlowType","ThunderIDRuntimeError","BaseSignIn"],"sources":["../../../../../../src/client/components/auth/SignIn/SignIn.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {EmbeddedFlowComponent, EmbeddedFlowType, ThunderIDRuntimeError} from '@thunderid/node';\nimport {BaseSignIn, BaseSignInProps, normalizeFlowResponse, useTranslation} from '@thunderid/react';\nimport {FC, useEffect, useRef, useState} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\n/**\n * Props for the SignIn component.\n * Extends BaseSignInProps for full compatibility with the React BaseSignIn component\n */\nexport type SignInProps = Pick<\n  BaseSignInProps,\n  'children' | 'className' | 'id' | 'onSuccess' | 'onError' | 'variant' | 'size'\n> & {\n  /**\n   * Bounds the sign-in to this organization unit. Sent as `ouId` on the request that starts the\n   * `AUTHENTICATION` flow only, never on a continuation.\n   */\n  organizationUnitId?: string;\n};\n\n/**\n * A SignIn component for Next.js that provides native authentication flow.\n * This component delegates to the BaseSignIn from @thunderid/react. Unlike BaseSignUp,\n * BaseSignIn does not manage its own flow state, so this component initiates the flow\n * (using the server-action-backed `signIn`) and tracks `components`/`executionId` itself.\n */\nconst SignIn: FC<SignInProps> = ({\n  size = 'medium',\n  variant = 'outlined',\n  onError,\n  organizationUnitId,\n  ...rest\n}: SignInProps) => {\n  const {signIn, applicationId, scopes} = useThunderID();\n  const {t} = useTranslation();\n\n  const [components, setComponents] = useState<EmbeddedFlowComponent[]>([]);\n  const [additionalData, setAdditionalData] = useState<Record<string, any>>({});\n  const [executionId, setExecutionId] = useState<string | undefined>(undefined);\n  const [isFlowInitialized, setIsFlowInitialized] = useState(false);\n  const [flowError, setFlowError] = useState<Error | null>(null);\n  const initializationAttemptedRef = useRef(false);\n  // A fresh challenge token is required on every step to prevent replay attacks; the server\n  // rotates it on each response, so it's tracked in a ref (not state) to avoid a stale value\n  // from a closure captured before the previous response's state update committed.\n  const challengeTokenRef = useRef<string | undefined>(undefined);\n\n  const applyFlowResponse = (response: any): void => {\n    const normalized = normalizeFlowResponse(response, t, {resolveTranslations: false});\n\n    challengeTokenRef.current = response?.challengeToken ?? undefined;\n    setExecutionId(normalized.executionId ?? undefined);\n    setComponents(normalized.components);\n    setAdditionalData(normalized.additionalData);\n  };\n\n  const handleFlowError = (error: unknown): void => {\n    const normalizedError: Error = error instanceof Error ? error : new Error(String(error));\n\n    setFlowError(normalizedError);\n    onError?.(normalizedError);\n  };\n\n  useEffect(() => {\n    if (initializationAttemptedRef.current || !signIn) {\n      return;\n    }\n\n    initializationAttemptedRef.current = true;\n\n    (async (): Promise<void> => {\n      try {\n        const response: any = await signIn(\n          {\n            applicationId,\n            flowType: EmbeddedFlowType.Authentication,\n            ...(scopes && {scopes}),\n            ...(organizationUnitId && {ouId: organizationUnitId}),\n          },\n          {},\n        );\n\n        // `response` is undefined when the provider already redirected\n        // (OAuth-redirect or completed flows are handled there directly).\n        if (response) {\n          applyFlowResponse(response);\n        }\n      } catch (error) {\n        handleFlowError(error);\n      } finally {\n        setIsFlowInitialized(true);\n      }\n    })();\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [signIn]);\n\n  const handleOnSubmit = async (payload: any): Promise<void> => {\n    if (!signIn) {\n      throw new ThunderIDRuntimeError(\n        '`signIn` function is not available.',\n        'SignIn-handleOnSubmit-RuntimeError-001',\n        'nextjs',\n      );\n    }\n\n    const response: any = await signIn(\n      {\n        ...payload,\n        executionId,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      },\n      {},\n    );\n\n    if (response) {\n      applyFlowResponse(response);\n    }\n  };\n\n  return (\n    <BaseSignIn\n      additionalData={additionalData}\n      components={components}\n      error={flowError}\n      isLoading={!isFlowInitialized}\n      onError={onError}\n      onSubmit={handleOnSubmit}\n      size={size}\n      variant={variant}\n      {...rest}\n    />\n  );\n};\n\nSignIn.displayName = 'SignIn';\n\nexport default SignIn;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA+BA,MAAMA,UAA2B,EAC/B,OAAO,UACP,UAAU,YACV,SACA,mBACA,GAAG,WACc;CACjB,MAAM,EAAC,QAAQ,eAAe,WAAUC,8BAAc;CACtD,MAAM,EAAC,6CAAqB;CAE5B,MAAM,CAAC,YAAY,qCAAmD,EAAE,CAAC;CACzE,MAAM,CAAC,gBAAgB,yCAAmD,EAAE,CAAC;CAC7E,MAAM,CAAC,aAAa,sCAA+C,OAAU;CAC7E,MAAM,CAAC,mBAAmB,4CAAiC,MAAM;CACjE,MAAM,CAAC,WAAW,oCAAuC,KAAK;CAC9D,MAAM,+CAAoC,MAAM;CAIhD,MAAM,sCAA+C,OAAU;CAE/D,MAAM,qBAAqB,aAAwB;EACjD,MAAM,0DAAmC,UAAU,GAAG,EAAC,qBAAqB,OAAM,CAAC;AAEnF,oBAAkB,UAAU,UAAU,kBAAkB;AACxD,iBAAe,WAAW,eAAe,OAAU;AACnD,gBAAc,WAAW,WAAW;AACpC,oBAAkB,WAAW,eAAe;;CAG9C,MAAM,mBAAmB,UAAyB;EAChD,MAAMC,kBAAyB,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;AAExF,eAAa,gBAAgB;AAC7B,YAAU,gBAAgB;;AAG5B,4BAAgB;AACd,MAAI,2BAA2B,WAAW,CAAC,OACzC;AAGF,6BAA2B,UAAU;AAErC,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,WAAgB,MAAM,OAC1B;KACE;KACA,UAAUC,kCAAiB;KAC3B,GAAI,UAAU,EAAC,QAAO;KACtB,GAAI,sBAAsB,EAAC,MAAM,oBAAmB;KACrD,EACD,EAAE,CACH;AAID,QAAI,SACF,mBAAkB,SAAS;YAEtB,OAAO;AACd,oBAAgB,MAAM;aACd;AACR,yBAAqB,KAAK;;MAE1B;IAEH,CAAC,OAAO,CAAC;CAEZ,MAAM,iBAAiB,OAAO,YAAgC;AAC5D,MAAI,CAAC,OACH,OAAM,IAAIC,uCACR,uCACA,0CACA,SACD;EAGH,MAAMF,WAAgB,MAAM,OAC1B;GACE,GAAG;GACH;GACA,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;GACjF,EACD,EAAE,CACH;AAED,MAAI,SACF,mBAAkB,SAAS;;AAI/B,QACE,2CAACG;EACiB;EACJ;EACZ,OAAO;EACP,WAAW,CAAC;EACH;EACT,UAAU;EACJ;EACG;EACT,GAAI;GACJ;;AAIN,OAAO,cAAc;AAErB,qBAAe"}

package/dist/cjs/client/components/{admin → management}/AgentCreate/AgentCreate.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/AgentCreate/AgentCreate.tsx
+//#region src/client/components/management/AgentCreate/AgentCreate.tsx
 /**
 * Creates an agent.
 *

package/dist/cjs/client/components/management/AgentCreate/AgentCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentCreate.cjs","names":["AgentCreate: FC<AgentCreateProps>","ReactAgentCreate"],"sources":["../../../../../../src/client/components/management/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentCreate as ReactAgentCreate, AgentCreateProps as ReactAgentCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentCreateProps = ReactAgentCreateProps;\n\n/**\n * Creates an agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = (props: AgentCreateProps): ReactElement => <ReactAgentCreate {...props} />;\n\nAgentCreate.displayName = 'AgentCreate';\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/{admin → management}/AgentDetails/AgentDetails.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/AgentDetails/AgentDetails.tsx
+//#region src/client/components/management/AgentDetails/AgentDetails.tsx
 /**
 * Shows an agent's details, groups and roles, and optionally deletes the agent.
 *

package/dist/cjs/client/components/management/AgentDetails/AgentDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","ReactAgentDetails"],"sources":["../../../../../../src/client/components/management/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentDetails as ReactAgentDetails, AgentDetailsProps as ReactAgentDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentDetailsProps = ReactAgentDetailsProps;\n\n/**\n * Shows an agent's details, groups and roles, and optionally deletes the agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={id} deletable onDeleted={() => router.push('/admin/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = (props: AgentDetailsProps): ReactElement => (\n  <ReactAgentDetails {...props} />\n);\n\nAgentDetails.displayName = 'AgentDetails';\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/{admin → management}/AgentList/AgentList.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/AgentList/AgentList.tsx
+//#region src/client/components/management/AgentList/AgentList.tsx
 /**
 * Lists agents, a page at a time.
 *

package/dist/cjs/client/components/management/AgentList/AgentList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentList.cjs","names":["AgentList: FC<AgentListProps>","ReactAgentList"],"sources":["../../../../../../src/client/components/management/AgentList/AgentList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentList as ReactAgentList, AgentListProps as ReactAgentListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentListProps = ReactAgentListProps;\n\n/**\n * Lists agents, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentList onSelect={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentList: FC<AgentListProps> = (props: AgentListProps): ReactElement => <ReactAgentList {...props} />;\n\nAgentList.displayName = 'AgentList';\n\nexport default AgentList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,aAAiC,UAAwC,2CAACC,+BAAe,GAAI,QAAS;AAE5G,UAAU,cAAc;AAExB,wBAAe"}

package/dist/cjs/client/components/{admin → management}/ApplicationCreate/ApplicationCreate.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/ApplicationCreate/ApplicationCreate.tsx
+//#region src/client/components/management/ApplicationCreate/ApplicationCreate.tsx
 /**
 * Creates an application with an OAuth client, and shows its client secret once when the server
 * returns one.

package/dist/cjs/client/components/management/ApplicationCreate/ApplicationCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationCreate.cjs","names":["ApplicationCreate: FC<ApplicationCreateProps>","ReactApplicationCreate"],"sources":["../../../../../../src/client/components/management/ApplicationCreate/ApplicationCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationCreate as ReactApplicationCreate,\n  ApplicationCreateProps as ReactApplicationCreateProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationCreateProps = ReactApplicationCreateProps;\n\n/**\n * Creates an application with an OAuth client, and shows its client secret once when the server\n * returns one.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationCreate onCreated={(application) => router.push(`/admin/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationCreate: FC<ApplicationCreateProps> = (props: ApplicationCreateProps): ReactElement => (\n  <ReactApplicationCreate {...props} />\n);\n\nApplicationCreate.displayName = 'ApplicationCreate';\n\nexport default ApplicationCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,qBAAiD,UACrD,2CAACC,uCAAuB,GAAI,QAAS;AAGvC,kBAAkB,cAAc;AAEhC,gCAAe"}

package/dist/cjs/client/components/{admin → management}/ApplicationDetails/ApplicationDetails.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/ApplicationDetails/ApplicationDetails.tsx
+//#region src/client/components/management/ApplicationDetails/ApplicationDetails.tsx
 /**
 * Shows an application and its OAuth configuration, and optionally edits it, regenerates its client
 * secret or deletes it.

package/dist/cjs/client/components/management/ApplicationDetails/ApplicationDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationDetails.cjs","names":["ApplicationDetails: FC<ApplicationDetailsProps>","ReactApplicationDetails"],"sources":["../../../../../../src/client/components/management/ApplicationDetails/ApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationDetails as ReactApplicationDetails,\n  ApplicationDetailsProps as ReactApplicationDetailsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationDetailsProps = ReactApplicationDetailsProps;\n\n/**\n * Shows an application and its OAuth configuration, and optionally edits it, regenerates its client\n * secret or deletes it.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationDetails applicationId={id} editable deletable onDeleted={() => router.push('/admin/applications')} />\n * ```\n */\nconst ApplicationDetails: FC<ApplicationDetailsProps> = (props: ApplicationDetailsProps): ReactElement => (\n  <ReactApplicationDetails {...props} />\n);\n\nApplicationDetails.displayName = 'ApplicationDetails';\n\nexport default ApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,sBAAmD,UACvD,2CAACC,wCAAwB,GAAI,QAAS;AAGxC,mBAAmB,cAAc;AAEjC,iCAAe"}

package/dist/cjs/client/components/{admin → management}/ApplicationList/ApplicationList.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/ApplicationList/ApplicationList.tsx
+//#region src/client/components/management/ApplicationList/ApplicationList.tsx
 /**
 * Lists applications, a page at a time.
 *

package/dist/cjs/client/components/management/ApplicationList/ApplicationList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationList.cjs","names":["ApplicationList: FC<ApplicationListProps>","ReactApplicationList"],"sources":["../../../../../../src/client/components/management/ApplicationList/ApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationList as ReactApplicationList,\n  ApplicationListProps as ReactApplicationListProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationListProps = ReactApplicationListProps;\n\n/**\n * Lists applications, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationList onSelect={(application) => router.push(`/admin/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationList: FC<ApplicationListProps> = (props: ApplicationListProps): ReactElement => (\n  <ReactApplicationList {...props} />\n);\n\nApplicationList.displayName = 'ApplicationList';\n\nexport default ApplicationList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/{admin → management}/GroupCreate/GroupCreate.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/GroupCreate/GroupCreate.tsx
+//#region src/client/components/management/GroupCreate/GroupCreate.tsx
 /**
 * Creates a group.
 *

package/dist/cjs/client/components/management/GroupCreate/GroupCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","ReactGroupCreate"],"sources":["../../../../../../src/client/components/management/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupCreate as ReactGroupCreate, GroupCreateProps as ReactGroupCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupCreateProps = ReactGroupCreateProps;\n\n/**\n * Creates a group.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = (props: GroupCreateProps): ReactElement => <ReactGroupCreate {...props} />;\n\nGroupCreate.displayName = 'GroupCreate';\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/management/GroupDetails/GroupDetails.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/GroupDetails/GroupDetails.tsx
+/**
+* Shows a group with its members, and optionally manages the members and deletes the group.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <GroupDetails groupId={id} editable deletable onDeleted={() => router.push('/admin/groups')} />
+* ```
+*/
+const GroupDetails = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.GroupDetails, { ...props });
+GroupDetails.displayName = "GroupDetails";
+var GroupDetails_default = GroupDetails;
+
+//#endregion
+exports.default = GroupDetails_default;
+//# sourceMappingURL=GroupDetails.cjs.map

package/dist/cjs/client/components/management/GroupDetails/GroupDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupDetails.cjs","names":["GroupDetails: FC<GroupDetailsProps>","ReactGroupDetails"],"sources":["../../../../../../src/client/components/management/GroupDetails/GroupDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupDetails as ReactGroupDetails, GroupDetailsProps as ReactGroupDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupDetailsProps = ReactGroupDetailsProps;\n\n/**\n * Shows a group with its members, and optionally manages the members and deletes the group.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupDetails groupId={id} editable deletable onDeleted={() => router.push('/admin/groups')} />\n * ```\n */\nconst GroupDetails: FC<GroupDetailsProps> = (props: GroupDetailsProps): ReactElement => (\n  <ReactGroupDetails {...props} />\n);\n\nGroupDetails.displayName = 'GroupDetails';\n\nexport default GroupDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/{admin → management}/GroupList/GroupList.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/GroupList/GroupList.tsx
+//#region src/client/components/management/GroupList/GroupList.tsx
 /**
 * Lists groups, a page at a time.
 *

package/dist/cjs/client/components/management/GroupList/GroupList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","ReactGroupList"],"sources":["../../../../../../src/client/components/management/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupList as ReactGroupList, GroupListProps as ReactGroupListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupListProps = ReactGroupListProps;\n\n/**\n * Lists groups, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = (props: GroupListProps): ReactElement => <ReactGroupList {...props} />;\n\nGroupList.displayName = 'GroupList';\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,aAAiC,UAAwC,2CAACC,+BAAe,GAAI,QAAS;AAE5G,UAAU,cAAc;AAExB,wBAAe"}

package/dist/cjs/client/components/{admin → management}/GroupMembers/GroupMembers.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/GroupMembers/GroupMembers.tsx
+//#region src/client/components/management/GroupMembers/GroupMembers.tsx
 /**
 * Lists a group's members and adds or removes them.
 *

package/dist/cjs/client/components/management/GroupMembers/GroupMembers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupMembers.cjs","names":["GroupMembers: FC<GroupMembersProps>","ReactGroupMembers"],"sources":["../../../../../../src/client/components/management/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupMembers as ReactGroupMembers, GroupMembersProps as ReactGroupMembersProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupMembersProps = ReactGroupMembersProps;\n\n/**\n * Lists a group's members and adds or removes them.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={id} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = (props: GroupMembersProps): ReactElement => (\n  <ReactGroupMembers {...props} />\n);\n\nGroupMembers.displayName = 'GroupMembers';\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/management/OrganizationUnitCreate/OrganizationUnitCreate.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/OrganizationUnitCreate/OrganizationUnitCreate.tsx
+/**
+* Creates an organization unit.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <OrganizationUnitCreate parentId={unitId} onCreated={(unit) => router.push(`/admin/units/${unit.id}`)} />
+* ```
+*/
+const OrganizationUnitCreate = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.OrganizationUnitCreate, { ...props });
+OrganizationUnitCreate.displayName = "OrganizationUnitCreate";
+var OrganizationUnitCreate_default = OrganizationUnitCreate;
+
+//#endregion
+exports.default = OrganizationUnitCreate_default;
+//# sourceMappingURL=OrganizationUnitCreate.cjs.map

package/dist/cjs/client/components/management/OrganizationUnitCreate/OrganizationUnitCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationUnitCreate.cjs","names":["OrganizationUnitCreate: FC<OrganizationUnitCreateProps>","ReactOrganizationUnitCreate"],"sources":["../../../../../../src/client/components/management/OrganizationUnitCreate/OrganizationUnitCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  OrganizationUnitCreate as ReactOrganizationUnitCreate,\n  OrganizationUnitCreateProps as ReactOrganizationUnitCreateProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type OrganizationUnitCreateProps = ReactOrganizationUnitCreateProps;\n\n/**\n * Creates an organization unit.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <OrganizationUnitCreate parentId={unitId} onCreated={(unit) => router.push(`/admin/units/${unit.id}`)} />\n * ```\n */\nconst OrganizationUnitCreate: FC<OrganizationUnitCreateProps> = (props: OrganizationUnitCreateProps): ReactElement => (\n  <ReactOrganizationUnitCreate {...props} />\n);\n\nOrganizationUnitCreate.displayName = 'OrganizationUnitCreate';\n\nexport default OrganizationUnitCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,0BAA2D,UAC/D,2CAACC,4CAA4B,GAAI,QAAS;AAG5C,uBAAuB,cAAc;AAErC,qCAAe"}

package/dist/cjs/client/components/management/OrganizationUnitDetails/OrganizationUnitDetails.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/OrganizationUnitDetails/OrganizationUnitDetails.tsx
+/**
+* Shows an organization unit with its child units and the users, groups and roles in it, and lets the signed-in user edit and delete it.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <OrganizationUnitDetails organizationUnitId={unitId} editable deletable />
+* ```
+*/
+const OrganizationUnitDetails = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.OrganizationUnitDetails, { ...props });
+OrganizationUnitDetails.displayName = "OrganizationUnitDetails";
+var OrganizationUnitDetails_default = OrganizationUnitDetails;
+
+//#endregion
+exports.default = OrganizationUnitDetails_default;
+//# sourceMappingURL=OrganizationUnitDetails.cjs.map

package/dist/cjs/client/components/management/OrganizationUnitDetails/OrganizationUnitDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationUnitDetails.cjs","names":["OrganizationUnitDetails: FC<OrganizationUnitDetailsProps>","ReactOrganizationUnitDetails"],"sources":["../../../../../../src/client/components/management/OrganizationUnitDetails/OrganizationUnitDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  OrganizationUnitDetails as ReactOrganizationUnitDetails,\n  OrganizationUnitDetailsProps as ReactOrganizationUnitDetailsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type OrganizationUnitDetailsProps = ReactOrganizationUnitDetailsProps;\n\n/**\n * Shows an organization unit with its child units and the users, groups and roles in it, and lets the signed-in user edit and delete it.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <OrganizationUnitDetails organizationUnitId={unitId} editable deletable />\n * ```\n */\nconst OrganizationUnitDetails: FC<OrganizationUnitDetailsProps> = (\n  props: OrganizationUnitDetailsProps,\n): ReactElement => <ReactOrganizationUnitDetails {...props} />;\n\nOrganizationUnitDetails.displayName = 'OrganizationUnitDetails';\n\nexport default OrganizationUnitDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,2BACJ,UACiB,2CAACC,6CAA6B,GAAI,QAAS;AAE9D,wBAAwB,cAAc;AAEtC,sCAAe"}

package/dist/cjs/client/components/management/OrganizationUnitList/OrganizationUnitList.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/OrganizationUnitList/OrganizationUnitList.tsx
+/**
+* Lists organization units, a page at a time: the root units, or the children of `parentId`.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <OrganizationUnitList parentId={projectId} onSelect={(unit) => router.push(`/admin/units/${unit.id}`)} />
+* ```
+*/
+const OrganizationUnitList = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.OrganizationUnitList, { ...props });
+OrganizationUnitList.displayName = "OrganizationUnitList";
+var OrganizationUnitList_default = OrganizationUnitList;
+
+//#endregion
+exports.default = OrganizationUnitList_default;
+//# sourceMappingURL=OrganizationUnitList.cjs.map

package/dist/cjs/client/components/management/OrganizationUnitList/OrganizationUnitList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationUnitList.cjs","names":["OrganizationUnitList: FC<OrganizationUnitListProps>","ReactOrganizationUnitList"],"sources":["../../../../../../src/client/components/management/OrganizationUnitList/OrganizationUnitList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  OrganizationUnitList as ReactOrganizationUnitList,\n  OrganizationUnitListProps as ReactOrganizationUnitListProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type OrganizationUnitListProps = ReactOrganizationUnitListProps;\n\n/**\n * Lists organization units, a page at a time: the root units, or the children of `parentId`.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <OrganizationUnitList parentId={projectId} onSelect={(unit) => router.push(`/admin/units/${unit.id}`)} />\n * ```\n */\nconst OrganizationUnitList: FC<OrganizationUnitListProps> = (props: OrganizationUnitListProps): ReactElement => (\n  <ReactOrganizationUnitList {...props} />\n);\n\nOrganizationUnitList.displayName = 'OrganizationUnitList';\n\nexport default OrganizationUnitList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,wBAAuD,UAC3D,2CAACC,0CAA0B,GAAI,QAAS;AAG1C,qBAAqB,cAAc;AAEnC,mCAAe"}

package/dist/cjs/client/components/management/ProjectCreate/ProjectCreate.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/ProjectCreate/ProjectCreate.tsx
+/**
+* Creates a project.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <ProjectCreate onCreated={(project) => router.push(`/admin/projects/${project.id}`)} />
+* ```
+*/
+const ProjectCreate = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.ProjectCreate, { ...props });
+ProjectCreate.displayName = "ProjectCreate";
+var ProjectCreate_default = ProjectCreate;
+
+//#endregion
+exports.default = ProjectCreate_default;
+//# sourceMappingURL=ProjectCreate.cjs.map

package/dist/cjs/client/components/management/ProjectCreate/ProjectCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectCreate.cjs","names":["ProjectCreate: FC<ProjectCreateProps>","ReactProjectCreate"],"sources":["../../../../../../src/client/components/management/ProjectCreate/ProjectCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {ProjectCreate as ReactProjectCreate, ProjectCreateProps as ReactProjectCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ProjectCreateProps = ReactProjectCreateProps;\n\n/**\n * Creates a project.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ProjectCreate onCreated={(project) => router.push(`/admin/projects/${project.id}`)} />\n * ```\n */\nconst ProjectCreate: FC<ProjectCreateProps> = (props: ProjectCreateProps): ReactElement => (\n  <ReactProjectCreate {...props} />\n);\n\nProjectCreate.displayName = 'ProjectCreate';\n\nexport default ProjectCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAyC,UAC7C,2CAACC,mCAAmB,GAAI,QAAS;AAGnC,cAAc,cAAc;AAE5B,4BAAe"}

package/dist/cjs/client/components/management/ProjectDetails/ProjectDetails.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/ProjectDetails/ProjectDetails.tsx
+/**
+* Shows a project, and lets the signed-in user edit and delete it.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <ProjectDetails projectId={projectId} editable deletable onDeleted={() => router.push('/admin/projects')} />
+* ```
+*/
+const ProjectDetails = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.ProjectDetails, { ...props });
+ProjectDetails.displayName = "ProjectDetails";
+var ProjectDetails_default = ProjectDetails;
+
+//#endregion
+exports.default = ProjectDetails_default;
+//# sourceMappingURL=ProjectDetails.cjs.map

package/dist/cjs/client/components/management/ProjectDetails/ProjectDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectDetails.cjs","names":["ProjectDetails: FC<ProjectDetailsProps>","ReactProjectDetails"],"sources":["../../../../../../src/client/components/management/ProjectDetails/ProjectDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {ProjectDetails as ReactProjectDetails, ProjectDetailsProps as ReactProjectDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ProjectDetailsProps = ReactProjectDetailsProps;\n\n/**\n * Shows a project, and lets the signed-in user edit and delete it.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ProjectDetails projectId={projectId} editable deletable onDeleted={() => router.push('/admin/projects')} />\n * ```\n */\nconst ProjectDetails: FC<ProjectDetailsProps> = (props: ProjectDetailsProps): ReactElement => (\n  <ReactProjectDetails {...props} />\n);\n\nProjectDetails.displayName = 'ProjectDetails';\n\nexport default ProjectDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,kBAA2C,UAC/C,2CAACC,oCAAoB,GAAI,QAAS;AAGpC,eAAe,cAAc;AAE7B,6BAAe"}

package/dist/cjs/client/components/management/ProjectList/ProjectList.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/ProjectList/ProjectList.tsx
+/**
+* Lists the projects, a page at a time. Projects are served by the control plane only.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <ProjectList onSelect={(project) => router.push(`/admin/projects/${project.id}`)} />
+* ```
+*/
+const ProjectList = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.ProjectList, { ...props });
+ProjectList.displayName = "ProjectList";
+var ProjectList_default = ProjectList;
+
+//#endregion
+exports.default = ProjectList_default;
+//# sourceMappingURL=ProjectList.cjs.map

package/dist/cjs/client/components/management/ProjectList/ProjectList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectList.cjs","names":["ProjectList: FC<ProjectListProps>","ReactProjectList"],"sources":["../../../../../../src/client/components/management/ProjectList/ProjectList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {ProjectList as ReactProjectList, ProjectListProps as ReactProjectListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ProjectListProps = ReactProjectListProps;\n\n/**\n * Lists the projects, a page at a time. Projects are served by the control plane only.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ProjectList onSelect={(project) => router.push(`/admin/projects/${project.id}`)} />\n * ```\n */\nconst ProjectList: FC<ProjectListProps> = (props: ProjectListProps): ReactElement => <ReactProjectList {...props} />;\n\nProjectList.displayName = 'ProjectList';\n\nexport default ProjectList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/management/ProjectSwitcher/ProjectSwitcher.cjs

@@ -0,0 +1,30 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/ProjectSwitcher/ProjectSwitcher.tsx
+/**
+* Lets the user choose the current project. The choice is client-side context kept in the browser, not a sign-in: `useThunderID()` exposes it as `currentProject`.
+* `ApplicationList` and `AgentList` list the current project, and `ApplicationCreate` and `AgentCreate` place new
+* resources in it when no organization unit is given.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <ProjectSwitcher onSelect={(project) => router.refresh()} />
+* ```
+*/
+const ProjectSwitcher = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.ProjectSwitcher, { ...props });
+ProjectSwitcher.displayName = "ProjectSwitcher";
+var ProjectSwitcher_default = ProjectSwitcher;
+
+//#endregion
+exports.default = ProjectSwitcher_default;
+//# sourceMappingURL=ProjectSwitcher.cjs.map

package/dist/cjs/client/components/management/ProjectSwitcher/ProjectSwitcher.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectSwitcher.cjs","names":["ProjectSwitcher: FC<ProjectSwitcherProps>","ReactProjectSwitcher"],"sources":["../../../../../../src/client/components/management/ProjectSwitcher/ProjectSwitcher.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ProjectSwitcher as ReactProjectSwitcher,\n  ProjectSwitcherProps as ReactProjectSwitcherProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ProjectSwitcherProps = ReactProjectSwitcherProps;\n\n/**\n * Lets the user choose the current project. The choice is client-side context kept in the browser, not a sign-in: `useThunderID()` exposes it as `currentProject`.\n * `ApplicationList` and `AgentList` list the current project, and `ApplicationCreate` and `AgentCreate` place new\n * resources in it when no organization unit is given.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ProjectSwitcher onSelect={(project) => router.refresh()} />\n * ```\n */\nconst ProjectSwitcher: FC<ProjectSwitcherProps> = (props: ProjectSwitcherProps): ReactElement => (\n  <ReactProjectSwitcher {...props} />\n);\n\nProjectSwitcher.displayName = 'ProjectSwitcher';\n\nexport default ProjectSwitcher;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/{admin → management}/RoleAssignments/RoleAssignments.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/RoleAssignments/RoleAssignments.tsx
+//#region src/client/components/management/RoleAssignments/RoleAssignments.tsx
 /**
 * Lists a role's assignments and assigns or unassigns users, groups and agents.
 *

package/dist/cjs/client/components/management/RoleAssignments/RoleAssignments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","ReactRoleAssignments"],"sources":["../../../../../../src/client/components/management/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RoleAssignments as ReactRoleAssignments,\n  RoleAssignmentsProps as ReactRoleAssignmentsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleAssignmentsProps = ReactRoleAssignmentsProps;\n\n/**\n * Lists a role's assignments and assigns or unassigns users, groups and agents.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={id} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = (props: RoleAssignmentsProps): ReactElement => (\n  <ReactRoleAssignments {...props} />\n);\n\nRoleAssignments.displayName = 'RoleAssignments';\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/{admin → management}/RoleCreate/RoleCreate.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/RoleCreate/RoleCreate.tsx
+//#region src/client/components/management/RoleCreate/RoleCreate.tsx
 /**
 * Creates a role.
 *

package/dist/cjs/client/components/management/RoleCreate/RoleCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","ReactRoleCreate"],"sources":["../../../../../../src/client/components/management/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleCreate as ReactRoleCreate, RoleCreateProps as ReactRoleCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleCreateProps = ReactRoleCreateProps;\n\n/**\n * Creates a role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = (props: RoleCreateProps): ReactElement => <ReactRoleCreate {...props} />;\n\nRoleCreate.displayName = 'RoleCreate';\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAAmC,UAAyC,2CAACC,gCAAgB,GAAI,QAAS;AAEhH,WAAW,cAAc;AAEzB,yBAAe"}

package/dist/cjs/client/components/management/RoleDetails/RoleDetails.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/RoleDetails/RoleDetails.tsx
+/**
+* Shows a role with its permissions and assignments, and optionally manages the assignments and deletes the role.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <RoleDetails roleId={id} editable deletable onDeleted={() => router.push('/admin/roles')} />
+* ```
+*/
+const RoleDetails = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.RoleDetails, { ...props });
+RoleDetails.displayName = "RoleDetails";
+var RoleDetails_default = RoleDetails;
+
+//#endregion
+exports.default = RoleDetails_default;
+//# sourceMappingURL=RoleDetails.cjs.map

package/dist/cjs/client/components/management/RoleDetails/RoleDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleDetails.cjs","names":["RoleDetails: FC<RoleDetailsProps>","ReactRoleDetails"],"sources":["../../../../../../src/client/components/management/RoleDetails/RoleDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleDetails as ReactRoleDetails, RoleDetailsProps as ReactRoleDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleDetailsProps = ReactRoleDetailsProps;\n\n/**\n * Shows a role with its permissions and assignments, and optionally manages the assignments and deletes the role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleDetails roleId={id} editable deletable onDeleted={() => router.push('/admin/roles')} />\n * ```\n */\nconst RoleDetails: FC<RoleDetailsProps> = (props: RoleDetailsProps): ReactElement => <ReactRoleDetails {...props} />;\n\nRoleDetails.displayName = 'RoleDetails';\n\nexport default RoleDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/{admin → management}/RoleList/RoleList.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/RoleList/RoleList.tsx
+//#region src/client/components/management/RoleList/RoleList.tsx
 /**
 * Lists roles, a page at a time.
 *

package/dist/cjs/client/components/management/RoleList/RoleList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","ReactRoleList"],"sources":["../../../../../../src/client/components/management/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleList as ReactRoleList, RoleListProps as ReactRoleListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleListProps = ReactRoleListProps;\n\n/**\n * Lists roles, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = (props: RoleListProps): ReactElement => <ReactRoleList {...props} />;\n\nRoleList.displayName = 'RoleList';\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,YAA+B,UAAuC,2CAACC,8BAAc,GAAI,QAAS;AAExG,SAAS,cAAc;AAEvB,uBAAe"}

package/dist/cjs/client/components/{admin → management}/RolePermissions/RolePermissions.cjs

@@ -7,7 +7,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/admin/RolePermissions/RolePermissions.tsx
+//#region src/client/components/management/RolePermissions/RolePermissions.tsx
 /**
 * Shows the permissions a role grants.
 *

package/dist/cjs/client/components/management/RolePermissions/RolePermissions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","ReactRolePermissions"],"sources":["../../../../../../src/client/components/management/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RolePermissions as ReactRolePermissions,\n  RolePermissionsProps as ReactRolePermissionsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RolePermissionsProps = ReactRolePermissionsProps;\n\n/**\n * Shows the permissions a role grants.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={id} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = (props: RolePermissionsProps): ReactElement => (\n  <ReactRolePermissions {...props} />\n);\n\nRolePermissions.displayName = 'RolePermissions';\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/management/SharingPolicies/SharingPolicies.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/management/SharingPolicies/SharingPolicies.tsx
+/**
+* Lists the sharing policies of a user, an application, a role or a flow, and lets the signed-in user manage them when `editable`.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <SharingPolicies resourceType="role" resourceId={roleId} editable />
+* ```
+*/
+const SharingPolicies = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.SharingPolicies, { ...props });
+SharingPolicies.displayName = "SharingPolicies";
+var SharingPolicies_default = SharingPolicies;
+
+//#endregion
+exports.default = SharingPolicies_default;
+//# sourceMappingURL=SharingPolicies.cjs.map