@thunderid/nextjs 1.12.0 → 1.14.0

package/dist/client/components/management/ProjectList/ProjectList.d.ts

@@ -0,0 +1,17 @@
+import { ProjectListProps as ReactProjectListProps } from '@thunderid/react';
+import { FC } from 'react';
+export type ProjectListProps = ReactProjectListProps;
+/**
+ * Lists the projects, a page at a time. Projects are served by the control plane only.
+ *
+ * Management requests go through a server action with the signed-in user's server-held session, so
+ * the access token never reaches the browser. Whether a request succeeds is the server's decision.
+ *
+ * @example
+ * ```tsx
+ * <ProjectList onSelect={(project) => router.push(`/admin/projects/${project.id}`)} />
+ * ```
+ */
+declare const ProjectList: FC<ProjectListProps>;
+export default ProjectList;
+//# sourceMappingURL=ProjectList.d.ts.map

package/dist/client/components/management/ProjectList/ProjectList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/ProjectList/ProjectList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAkC,gBAAgB,IAAI,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAA8E,CAAC;AAIrH,eAAe,WAAW,CAAC"}

package/dist/client/components/management/ProjectList/ProjectList.js

@@ -0,0 +1,25 @@
+'use client';
+
+
+import { ProjectList } from "@thunderid/react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/client/components/management/ProjectList/ProjectList.tsx
+/**
+* Lists the projects, a page at a time. Projects are served by the control plane only.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <ProjectList onSelect={(project) => router.push(`/admin/projects/${project.id}`)} />
+* ```
+*/
+const ProjectList$1 = (props) => /* @__PURE__ */ jsx(ProjectList, { ...props });
+ProjectList$1.displayName = "ProjectList";
+var ProjectList_default = ProjectList$1;
+
+//#endregion
+export { ProjectList_default as default };
+//# sourceMappingURL=ProjectList.js.map

package/dist/client/components/management/ProjectList/ProjectList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectList.js","names":["ProjectList: FC<ProjectListProps>","ReactProjectList","ProjectList"],"sources":["../../../../../src/client/components/management/ProjectList/ProjectList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {ProjectList as ReactProjectList, ProjectListProps as ReactProjectListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ProjectListProps = ReactProjectListProps;\n\n/**\n * Lists the projects, a page at a time. Projects are served by the control plane only.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ProjectList onSelect={(project) => router.push(`/admin/projects/${project.id}`)} />\n * ```\n */\nconst ProjectList: FC<ProjectListProps> = (props: ProjectListProps): ReactElement => <ReactProjectList {...props} />;\n\nProjectList.displayName = 'ProjectList';\n\nexport default ProjectList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAqC,UAA0C,oBAACC,eAAiB,GAAI,QAAS;AAEpH,cAAY,cAAc;AAE1B,0BAAeC"}

package/dist/client/components/management/ProjectSwitcher/ProjectSwitcher.d.ts

@@ -0,0 +1,19 @@
+import { ProjectSwitcherProps as ReactProjectSwitcherProps } from '@thunderid/react';
+import { FC } from 'react';
+export type ProjectSwitcherProps = ReactProjectSwitcherProps;
+/**
+ * Lets the user choose the current project. The choice is client-side context kept in the browser, not a sign-in: `useThunderID()` exposes it as `currentProject`.
+ * `ApplicationList` and `AgentList` list the current project, and `ApplicationCreate` and `AgentCreate` place new
+ * resources in it when no organization unit is given.
+ *
+ * Management requests go through a server action with the signed-in user's server-held session, so
+ * the access token never reaches the browser. Whether a request succeeds is the server's decision.
+ *
+ * @example
+ * ```tsx
+ * <ProjectSwitcher onSelect={(project) => router.refresh()} />
+ * ```
+ */
+declare const ProjectSwitcher: FC<ProjectSwitcherProps>;
+export default ProjectSwitcher;
+//# sourceMappingURL=ProjectSwitcher.d.ts.map

package/dist/client/components/management/ProjectSwitcher/ProjectSwitcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectSwitcher.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/ProjectSwitcher/ProjectSwitcher.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/management/ProjectSwitcher/ProjectSwitcher.js

@@ -0,0 +1,27 @@
+'use client';
+
+
+import { ProjectSwitcher } from "@thunderid/react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/client/components/management/ProjectSwitcher/ProjectSwitcher.tsx
+/**
+* Lets the user choose the current project. The choice is client-side context kept in the browser, not a sign-in: `useThunderID()` exposes it as `currentProject`.
+* `ApplicationList` and `AgentList` list the current project, and `ApplicationCreate` and `AgentCreate` place new
+* resources in it when no organization unit is given.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <ProjectSwitcher onSelect={(project) => router.refresh()} />
+* ```
+*/
+const ProjectSwitcher$1 = (props) => /* @__PURE__ */ jsx(ProjectSwitcher, { ...props });
+ProjectSwitcher$1.displayName = "ProjectSwitcher";
+var ProjectSwitcher_default = ProjectSwitcher$1;
+
+//#endregion
+export { ProjectSwitcher_default as default };
+//# sourceMappingURL=ProjectSwitcher.js.map

package/dist/client/components/management/ProjectSwitcher/ProjectSwitcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectSwitcher.js","names":["ProjectSwitcher: FC<ProjectSwitcherProps>","ReactProjectSwitcher","ProjectSwitcher"],"sources":["../../../../../src/client/components/management/ProjectSwitcher/ProjectSwitcher.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ProjectSwitcher as ReactProjectSwitcher,\n  ProjectSwitcherProps as ReactProjectSwitcherProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ProjectSwitcherProps = ReactProjectSwitcherProps;\n\n/**\n * Lets the user choose the current project. The choice is client-side context kept in the browser, not a sign-in: `useThunderID()` exposes it as `currentProject`.\n * `ApplicationList` and `AgentList` list the current project, and `ApplicationCreate` and `AgentCreate` place new\n * resources in it when no organization unit is given.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ProjectSwitcher onSelect={(project) => router.refresh()} />\n * ```\n */\nconst ProjectSwitcher: FC<ProjectSwitcherProps> = (props: ProjectSwitcherProps): ReactElement => (\n  <ReactProjectSwitcher {...props} />\n);\n\nProjectSwitcher.displayName = 'ProjectSwitcher';\n\nexport default ProjectSwitcher;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA0BA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/management/RoleAssignments/RoleAssignments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/{admin → management}/RoleAssignments/RoleAssignments.js

@@ -4,7 +4,7 @@
 import { RoleAssignments } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/RoleAssignments/RoleAssignments.tsx
+//#region src/client/components/management/RoleAssignments/RoleAssignments.tsx
 /**
 * Lists a role's assignments and assigns or unassigns users, groups and agents.
 *

package/dist/client/components/management/RoleAssignments/RoleAssignments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","ReactRoleAssignments","RoleAssignments"],"sources":["../../../../../src/client/components/management/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RoleAssignments as ReactRoleAssignments,\n  RoleAssignmentsProps as ReactRoleAssignmentsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleAssignmentsProps = ReactRoleAssignmentsProps;\n\n/**\n * Lists a role's assignments and assigns or unassigns users, groups and agents.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={id} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = (props: RoleAssignmentsProps): ReactElement => (\n  <ReactRoleAssignments {...props} />\n);\n\nRoleAssignments.displayName = 'RoleAssignments';\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/management/RoleCreate/RoleCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/RoleCreate/RoleCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAgC,eAAe,IAAI,oBAAoB,EAAC,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAA4E,CAAC;AAIjH,eAAe,UAAU,CAAC"}

package/dist/client/components/{admin → management}/RoleCreate/RoleCreate.js

@@ -4,7 +4,7 @@
 import { RoleCreate } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/RoleCreate/RoleCreate.tsx
+//#region src/client/components/management/RoleCreate/RoleCreate.tsx
 /**
 * Creates a role.
 *

package/dist/client/components/management/RoleCreate/RoleCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleCreate.js","names":["RoleCreate: FC<RoleCreateProps>","ReactRoleCreate","RoleCreate"],"sources":["../../../../../src/client/components/management/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleCreate as ReactRoleCreate, RoleCreateProps as ReactRoleCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleCreateProps = ReactRoleCreateProps;\n\n/**\n * Creates a role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = (props: RoleCreateProps): ReactElement => <ReactRoleCreate {...props} />;\n\nRoleCreate.displayName = 'RoleCreate';\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAmC,UAAyC,oBAACC,cAAgB,GAAI,QAAS;AAEhH,aAAW,cAAc;AAEzB,yBAAeC"}

package/dist/client/components/management/RoleDetails/RoleDetails.d.ts

@@ -0,0 +1,17 @@
+import { RoleDetailsProps as ReactRoleDetailsProps } from '@thunderid/react';
+import { FC } from 'react';
+export type RoleDetailsProps = ReactRoleDetailsProps;
+/**
+ * Shows a role with its permissions and assignments, and optionally manages the assignments and deletes the role.
+ *
+ * Management requests go through a server action with the signed-in user's server-held session, so
+ * the access token never reaches the browser. Whether a request succeeds is the server's decision.
+ *
+ * @example
+ * ```tsx
+ * <RoleDetails roleId={id} editable deletable onDeleted={() => router.push('/admin/roles')} />
+ * ```
+ */
+declare const RoleDetails: FC<RoleDetailsProps>;
+export default RoleDetails;
+//# sourceMappingURL=RoleDetails.d.ts.map

package/dist/client/components/management/RoleDetails/RoleDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleDetails.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/RoleDetails/RoleDetails.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAkC,gBAAgB,IAAI,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAA8E,CAAC;AAIrH,eAAe,WAAW,CAAC"}

package/dist/client/components/management/RoleDetails/RoleDetails.js

@@ -0,0 +1,25 @@
+'use client';
+
+
+import { RoleDetails } from "@thunderid/react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/client/components/management/RoleDetails/RoleDetails.tsx
+/**
+* Shows a role with its permissions and assignments, and optionally manages the assignments and deletes the role.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <RoleDetails roleId={id} editable deletable onDeleted={() => router.push('/admin/roles')} />
+* ```
+*/
+const RoleDetails$1 = (props) => /* @__PURE__ */ jsx(RoleDetails, { ...props });
+RoleDetails$1.displayName = "RoleDetails";
+var RoleDetails_default = RoleDetails$1;
+
+//#endregion
+export { RoleDetails_default as default };
+//# sourceMappingURL=RoleDetails.js.map

package/dist/client/components/management/RoleDetails/RoleDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleDetails.js","names":["RoleDetails: FC<RoleDetailsProps>","ReactRoleDetails","RoleDetails"],"sources":["../../../../../src/client/components/management/RoleDetails/RoleDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleDetails as ReactRoleDetails, RoleDetailsProps as ReactRoleDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleDetailsProps = ReactRoleDetailsProps;\n\n/**\n * Shows a role with its permissions and assignments, and optionally manages the assignments and deletes the role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleDetails roleId={id} editable deletable onDeleted={() => router.push('/admin/roles')} />\n * ```\n */\nconst RoleDetails: FC<RoleDetailsProps> = (props: RoleDetailsProps): ReactElement => <ReactRoleDetails {...props} />;\n\nRoleDetails.displayName = 'RoleDetails';\n\nexport default RoleDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAqC,UAA0C,oBAACC,eAAiB,GAAI,QAAS;AAEpH,cAAY,cAAc;AAE1B,0BAAeC"}

package/dist/client/components/management/RoleList/RoleList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/RoleList/RoleList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAA4B,aAAa,IAAI,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAwE,CAAC;AAIzG,eAAe,QAAQ,CAAC"}

package/dist/client/components/{admin → management}/RoleList/RoleList.js

@@ -4,7 +4,7 @@
 import { RoleList } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/RoleList/RoleList.tsx
+//#region src/client/components/management/RoleList/RoleList.tsx
 /**
 * Lists roles, a page at a time.
 *

package/dist/client/components/management/RoleList/RoleList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleList.js","names":["RoleList: FC<RoleListProps>","ReactRoleList","RoleList"],"sources":["../../../../../src/client/components/management/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleList as ReactRoleList, RoleListProps as ReactRoleListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleListProps = ReactRoleListProps;\n\n/**\n * Lists roles, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = (props: RoleListProps): ReactElement => <ReactRoleList {...props} />;\n\nRoleList.displayName = 'RoleList';\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAA+B,UAAuC,oBAACC,YAAc,GAAI,QAAS;AAExG,WAAS,cAAc;AAEvB,uBAAeC"}

package/dist/client/components/management/RolePermissions/RolePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/{admin → management}/RolePermissions/RolePermissions.js

@@ -4,7 +4,7 @@
 import { RolePermissions } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/RolePermissions/RolePermissions.tsx
+//#region src/client/components/management/RolePermissions/RolePermissions.tsx
 /**
 * Shows the permissions a role grants.
 *

package/dist/client/components/management/RolePermissions/RolePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RolePermissions.js","names":["RolePermissions: FC<RolePermissionsProps>","ReactRolePermissions","RolePermissions"],"sources":["../../../../../src/client/components/management/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RolePermissions as ReactRolePermissions,\n  RolePermissionsProps as ReactRolePermissionsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RolePermissionsProps = ReactRolePermissionsProps;\n\n/**\n * Shows the permissions a role grants.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={id} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = (props: RolePermissionsProps): ReactElement => (\n  <ReactRolePermissions {...props} />\n);\n\nRolePermissions.displayName = 'RolePermissions';\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/management/SharingPolicies/SharingPolicies.d.ts

@@ -0,0 +1,17 @@
+import { SharingPoliciesProps as ReactSharingPoliciesProps } from '@thunderid/react';
+import { FC } from 'react';
+export type SharingPoliciesProps = ReactSharingPoliciesProps;
+/**
+ * Lists the sharing policies of a user, an application, a role or a flow, and lets the signed-in user manage them when `editable`.
+ *
+ * Management requests go through a server action with the signed-in user's server-held session, so
+ * the access token never reaches the browser. Whether a request succeeds is the server's decision.
+ *
+ * @example
+ * ```tsx
+ * <SharingPolicies resourceType="role" resourceId={roleId} editable />
+ * ```
+ */
+declare const SharingPolicies: FC<SharingPoliciesProps>;
+export default SharingPolicies;
+//# sourceMappingURL=SharingPolicies.d.ts.map

package/dist/client/components/management/SharingPolicies/SharingPolicies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharingPolicies.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/SharingPolicies/SharingPolicies.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/management/SharingPolicies/SharingPolicies.js

@@ -0,0 +1,25 @@
+'use client';
+
+
+import { SharingPolicies } from "@thunderid/react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/client/components/management/SharingPolicies/SharingPolicies.tsx
+/**
+* Lists the sharing policies of a user, an application, a role or a flow, and lets the signed-in user manage them when `editable`.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <SharingPolicies resourceType="role" resourceId={roleId} editable />
+* ```
+*/
+const SharingPolicies$1 = (props) => /* @__PURE__ */ jsx(SharingPolicies, { ...props });
+SharingPolicies$1.displayName = "SharingPolicies";
+var SharingPolicies_default = SharingPolicies$1;
+
+//#endregion
+export { SharingPolicies_default as default };
+//# sourceMappingURL=SharingPolicies.js.map

package/dist/client/components/management/SharingPolicies/SharingPolicies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharingPolicies.js","names":["SharingPolicies: FC<SharingPoliciesProps>","ReactSharingPolicies","SharingPolicies"],"sources":["../../../../../src/client/components/management/SharingPolicies/SharingPolicies.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  SharingPolicies as ReactSharingPolicies,\n  SharingPoliciesProps as ReactSharingPoliciesProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type SharingPoliciesProps = ReactSharingPoliciesProps;\n\n/**\n * Lists the sharing policies of a user, an application, a role or a flow, and lets the signed-in user manage them when `editable`.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <SharingPolicies resourceType=\"role\" resourceId={roleId} editable />\n * ```\n */\nconst SharingPolicies: FC<SharingPoliciesProps> = (props: SharingPoliciesProps): ReactElement => (\n  <ReactSharingPolicies {...props} />\n);\n\nSharingPolicies.displayName = 'SharingPolicies';\n\nexport default SharingPolicies;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/management/UserCreate/UserCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/UserCreate/UserCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAgC,eAAe,IAAI,oBAAoB,EAAC,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAA4E,CAAC;AAIjH,eAAe,UAAU,CAAC"}

package/dist/client/components/{admin → management}/UserCreate/UserCreate.js

@@ -4,7 +4,7 @@
 import { UserCreate } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/UserCreate/UserCreate.tsx
+//#region src/client/components/management/UserCreate/UserCreate.tsx
 /**
 * Creates a user, or invites one with `mode="invite"`.
 *

package/dist/client/components/management/UserCreate/UserCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserCreate.js","names":["UserCreate: FC<UserCreateProps>","ReactUserCreate","UserCreate"],"sources":["../../../../../src/client/components/management/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserCreate as ReactUserCreate, UserCreateProps as ReactUserCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserCreateProps = ReactUserCreateProps;\n\n/**\n * Creates a user, or invites one with `mode=\"invite\"`.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = (props: UserCreateProps): ReactElement => <ReactUserCreate {...props} />;\n\nUserCreate.displayName = 'UserCreate';\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAmC,UAAyC,oBAACC,cAAgB,GAAI,QAAS;AAEhH,aAAW,cAAc;AAEzB,yBAAeC"}

package/dist/client/components/management/UserDetails/UserDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDetails.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/UserDetails/UserDetails.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAkC,gBAAgB,IAAI,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAA8E,CAAC;AAIrH,eAAe,WAAW,CAAC"}

package/dist/client/components/{admin → management}/UserDetails/UserDetails.js

@@ -4,7 +4,7 @@
 import { UserDetails } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/UserDetails/UserDetails.tsx
+//#region src/client/components/management/UserDetails/UserDetails.tsx
 /**
 * Shows a user's attributes and groups, and optionally edits or deletes the user.
 *

package/dist/client/components/management/UserDetails/UserDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDetails.js","names":["UserDetails: FC<UserDetailsProps>","ReactUserDetails","UserDetails"],"sources":["../../../../../src/client/components/management/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserDetails as ReactUserDetails, UserDetailsProps as ReactUserDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserDetailsProps = ReactUserDetailsProps;\n\n/**\n * Shows a user's attributes and groups, and optionally edits or deletes the user.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserDetails userId={id} editable deletable onDeleted={() => router.push('/admin/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = (props: UserDetailsProps): ReactElement => <ReactUserDetails {...props} />;\n\nUserDetails.displayName = 'UserDetails';\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAqC,UAA0C,oBAACC,eAAiB,GAAI,QAAS;AAEpH,cAAY,cAAc;AAE1B,0BAAeC"}

package/dist/client/components/management/UserList/UserList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/management/UserList/UserList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAA4B,aAAa,IAAI,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAwE,CAAC;AAIzG,eAAe,QAAQ,CAAC"}

package/dist/client/components/{admin → management}/UserList/UserList.js

@@ -4,7 +4,7 @@
 import { UserList } from "@thunderid/react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/client/components/admin/UserList/UserList.tsx
+//#region src/client/components/management/UserList/UserList.tsx
 /**
 * Lists the users the signed-in user is allowed to see, a page at a time.
 *

package/dist/client/components/management/UserList/UserList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserList.js","names":["UserList: FC<UserListProps>","ReactUserList","UserList"],"sources":["../../../../../src/client/components/management/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserList as ReactUserList, UserListProps as ReactUserListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserListProps = ReactUserListProps;\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserList: FC<UserListProps> = (props: UserListProps): ReactElement => <ReactUserList {...props} />;\n\nUserList.displayName = 'UserList';\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAA+B,UAAuC,oBAACC,YAAc,GAAI,QAAS;AAExG,WAAS,cAAc;AAEvB,uBAAeC"}

package/dist/client/contexts/ThunderID/ThunderIDProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../../../src/client/contexts/ThunderID/ThunderIDProvider.tsx"],"names":[],"mappings":"AAKA,OAAO,EACL,eAAe,EAEf,oBAAoB,EAEpB,qBAAqB,EACrB,IAAI,EACJ,WAAW,EAGZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAQL,sBAAsB,EACvB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAC,EAAE,EAAE,iBAAiB,EAAkD,MAAM,OAAO,CAAC;AAC7F,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAC,aAAa,EAAC,MAAM,sCAAsC,CAAC;AAKnE;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC,GACtG,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,UAAU,CAAC,GAAG;IACrD,aAAa,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACtD,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,KACV,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAC,CAAC,CAAC;IACvE;;;OAGG;IACH,WAAW,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IAChE,YAAY,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxC,aAAa,EAAE,CACb,aAAa,EAAE,qBAAqB,EACpC,SAAS,CAAC,EAAE,MAAM,KACf,OAAO,CAAC;QAAC,IAAI,EAAE;YAAC,IAAI,EAAE,IAAI,CAAA;SAAC,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAC,CAAC,CAAC;IACpE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAAC;CACrD,CAAC;AAEJ,QAAA,MAAM,uBAAuB,EAAE,EAAE,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAoWhF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../../../src/client/contexts/ThunderID/ThunderIDProvider.tsx"],"names":[],"mappings":"AAKA,OAAO,EACL,eAAe,EAEf,oBAAoB,EAEpB,qBAAqB,EACrB,IAAI,EACJ,WAAW,EAMZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAQL,sBAAsB,EAEvB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAC,EAAE,EAAE,iBAAiB,EAAkD,MAAM,OAAO,CAAC;AAC7F,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAQ3E,OAAO,EAAC,aAAa,EAAC,MAAM,sCAAsC,CAAC;AAKnE;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC,GACtG,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,UAAU,CAAC,GAAG;IACrD,aAAa,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACtD,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,mBAAmB,EAAE,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,KACV,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAC,CAAC,CAAC;IACvE;;;OAGG;IACH,WAAW,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IAChE,YAAY,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxC,aAAa,EAAE,CACb,aAAa,EAAE,qBAAqB,EACpC,SAAS,CAAC,EAAE,MAAM,KACf,OAAO,CAAC;QAAC,IAAI,EAAE;YAAC,IAAI,EAAE,IAAI,CAAA;SAAC,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAC,CAAC,CAAC;IACpE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAAC;CACrD,CAAC;AAEJ,QAAA,MAAM,uBAAuB,EAAE,EAAE,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAochF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/client/contexts/ThunderID/ThunderIDProvider.js

@@ -1,12 +1,17 @@
 'use client';
 
 
+import getSessionId_default from "../../../server/actions/getSessionId.js";
+import getUserAction_default from "../../../server/actions/account/getUserAction.js";
+import getUserProfileAction_default from "../../../server/actions/account/getUserProfileAction.js";
 import logger_default from "../../../utils/logger.js";
 import ThunderIDContext_default from "./ThunderIDContext.js";
+import getCurrentOrganizationUnitAction_default from "../../../server/actions/account/getCurrentOrganizationUnitAction.js";
+import switchOrganizationUnitAction_default from "../../../server/actions/auth/switchOrganizationUnitAction.js";
 import fetchFlowMetaFromServer_default from "../../fetchFlowMetaFromServer.js";
 import fetchManagementFromServer_default from "../../fetchManagementFromServer.js";
-import { ThunderIDRuntimeError, generateFlattenedUserProfile, getVendorPrefix } from "@thunderid/node";
-import { FlowMetaProvider, FlowProvider, I18nProvider, ThemeProvider, ThunderIDContext, UserProvider } from "@thunderid/react";
+import { ThunderIDAPIError, ThunderIDRuntimeError, generateFlattenedUserProfile, getVendorPrefix } from "@thunderid/node";
+import { FlowMetaProvider, FlowProvider, I18nProvider, ThemeProvider, ThunderIDContext, UserProvider, useCurrentProjectState } from "@thunderid/react";
 import { useRouter, useSearchParams } from "next/navigation";
 import { useEffect, useMemo, useRef, useState } from "react";
 import { jsx } from "react/jsx-runtime";
@@ -56,6 +61,38 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 	useEffect(() => {
 		setIsLoading(false);
 	}, [isSignedIn, user]);
+	const [currentOrganizationUnit, setCurrentOrganizationUnit] = useState(null);
+	const { currentProject, setCurrentProject } = useCurrentProjectState(getVendorPrefix(vendor));
+	useEffect(() => {
+		if (!isSignedIn) {
+			setCurrentOrganizationUnit(null);
+			return;
+		}
+		getCurrentOrganizationUnitAction_default().then(setCurrentOrganizationUnit).catch(() => setCurrentOrganizationUnit(null));
+	}, [isSignedIn, user]);
+	/**
+	* Signs in again bounded to another organization unit through a server action. Redirect mode sends the
+	* browser to the unit's authorization endpoint and resolves with `undefined`; embedded mode replaces
+	* the session in place and resolves with the refreshed user. A failure keeps the previous session and
+	* rejects with an error whose code is one of `OrganizationUnitSwitchErrorCodes`.
+	*/
+	const handleSwitchOrganizationUnit = async (organizationUnitId, options) => {
+		const result = await switchOrganizationUnitAction_default(organizationUnitId, { redirect: options?.redirect });
+		if (!result.success) throw new ThunderIDAPIError(JSON.stringify({
+			code: result.code,
+			message: { defaultValue: "Switching the organization unit failed" }
+		}), result.code, "nextjs", result.statusCode);
+		if (result.data.signInUrl) {
+			window.location.href = result.data.signInUrl;
+			return;
+		}
+		const sessionId = await getSessionId_default();
+		const refreshedUser = (sessionId ? await getUserAction_default(sessionId) : void 0)?.data?.user ?? null;
+		if (refreshedUser) setUser(refreshedUser);
+		setCurrentOrganizationUnit(await getCurrentOrganizationUnitAction_default());
+		router.refresh();
+		return refreshedUser ?? void 0;
+	};
 	const handleSignIn = async (payload, request) => {
 		if (!signIn) throw new ThunderIDRuntimeError("`signIn` function is not available.", "ThunderIDClientProvider-handleSignIn-RuntimeError-001", "nextjs");
 		const result = await signIn(payload, request);
@@ -107,11 +144,16 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 		applicationId,
 		baseUrl,
 		clearSession,
+		currentOrganizationUnit,
+		currentProject,
+		getCurrentOrganizationUnit: getCurrentOrganizationUnitAction_default,
 		isLoading,
 		isSignedIn,
 		organizationHandle,
 		preferences,
 		refreshToken,
+		setCurrentProject,
+		switchOrganizationUnit: handleSwitchOrganizationUnit,
 		scopes,
 		signIn: handleSignIn,
 		signInUrl,
@@ -129,7 +171,10 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 		applicationId,
 		organizationHandle,
 		scopes,
-		preferences
+		preferences,
+		currentOrganizationUnit,
+		currentProject,
+		setCurrentProject
 	]);
 	const handleProfileUpdate = (payload) => {
 		setUser(payload);
@@ -139,6 +184,15 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 			profile: payload
 		}));
 	};
+	/**
+	* Re-reads `/users/me` through the server-held session, so a change made outside the profile API,
+	* such as a recorded verification, shows.
+	*/
+	const revalidateProfile = async () => {
+		if (preferences?.user?.fetchUserProfile === false) return;
+		const result = await getUserProfileAction_default(await getSessionId_default() ?? "");
+		if (result.success) handleProfileUpdate(result.data.userProfile.profile);
+	};
 	const unsupported = (name) => {
 		return () => Promise.reject(new ThunderIDRuntimeError(`\`${name}\` is not supported in @thunderid/nextjs.`, `ThunderIDClientProvider-${name}-NotSupportedError-001`, "nextjs"));
 	};
@@ -148,10 +202,13 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 		baseUrl,
 		clearSession,
 		clientId: void 0,
+		currentOrganizationUnit,
+		currentProject,
 		discovery: { wellKnown: null },
 		endpoints,
 		exchangeToken: unsupported("exchangeToken"),
 		getAccessToken: unsupported("getAccessToken"),
+		getCurrentOrganizationUnit: getCurrentOrganizationUnitAction_default,
 		getDecodedIdToken: unsupported("getDecodedIdToken"),
 		getGrantedPermissions: unsupported("getGrantedPermissions"),
 		getIdToken: unsupported("getIdToken"),
@@ -172,12 +229,14 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 		recover: unsupported("recover"),
 		resolveFlowTemplateLiterals: (text) => text ?? "",
 		scopes,
+		setCurrentProject,
 		signIn: handleSignIn,
 		signInSilently: unsupported("signInSilently"),
 		signInUrl,
 		signOut: handleSignOut,
 		signUp: handleSignUp,
 		signUpUrl,
+		switchOrganizationUnit: handleSwitchOrganizationUnit,
 		user,
 		userSchema,
 		vendor: getVendorPrefix(vendor)
@@ -195,7 +254,10 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 		user,
 		userSchema,
 		initialMeta,
-		vendor
+		vendor,
+		currentOrganizationUnit,
+		currentProject,
+		setCurrentProject
 	]);
 	return /* @__PURE__ */ jsx(ThunderIDContext_default.Provider, {
 		value: contextValue,
@@ -214,6 +276,7 @@ const ThunderIDClientProvider = ({ baseUrl, children, endpoints, signIn, clearSe
 							profile: userProfile,
 							userSchema,
 							onUpdateProfile: handleProfileUpdate,
+							revalidateProfile,
 							updateProfile,
 							children
 						}) })