@thunderid/nextjs 1.12.0 → 1.14.0

package/dist/client/contexts/ThunderID/ThunderIDProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.js","names":["ThunderIDClientProvider: FC<PropsWithChildren<ThunderIDClientProviderProps>>","reRenderCheckRef: RefObject<boolean>","router: AppRouterInstance","searchParams: ReadonlyURLSearchParams","code: string | null","state: string | null","result: {error?: string; redirectUrl?: string; success: boolean}","result: any","contextValue: ThunderIDContextProps","reactContextValue: ReactThunderIDContextProps","fetchManagementFromServer","ThunderIDContext","ReactThunderIDContext","fetchFlowMetaFromServer"],"sources":["../../../../src/client/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  AttributeSchema,\n  EmbeddedFlowExecuteRequestConfig,\n  FlowMetadataResponse,\n  generateFlattenedUserProfile,\n  UpdateMeProfileConfig,\n  User,\n  UserProfile,\n  ThunderIDRuntimeError,\n  getVendorPrefix,\n} from '@thunderid/node';\nimport {\n  I18nProvider,\n  FlowMetaProvider,\n  FlowProvider,\n  UserProvider,\n  ThemeProvider,\n  ThunderIDContext as ReactThunderIDContext,\n  ThunderIDContextProps as ReactThunderIDContextProps,\n  ThunderIDProviderProps,\n} from '@thunderid/react';\nimport {ReadonlyURLSearchParams} from 'next/dist/client/components/navigation.react-server';\nimport {AppRouterInstance} from 'next/dist/shared/lib/app-router-context.shared-runtime';\nimport {useRouter, useSearchParams} from 'next/navigation';\nimport {FC, PropsWithChildren, RefObject, useEffect, useMemo, useRef, useState} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport {RefreshResult} from '../../../server/actions/refreshToken';\nimport logger from '../../../utils/logger';\nimport fetchFlowMetaFromServer from '../../fetchFlowMetaFromServer';\nimport fetchManagementFromServer from '../../fetchManagementFromServer';\n\n/**\n * Props interface of {@link ThunderIDClientProvider}\n */\nexport type ThunderIDClientProviderProps = Partial<Omit<ThunderIDProviderProps, 'baseUrl' | 'clientId'>> &\n  Pick<ThunderIDProviderProps, 'baseUrl' | 'clientId'> & {\n    applicationId: ThunderIDContextProps['applicationId'];\n    clearSession: () => Promise<void>;\n    handleOAuthCallback: (\n      code: string,\n      state: string,\n    ) => Promise<{error?: string; redirectUrl?: string; success: boolean}>;\n    /**\n     * Flow metadata fetched server-side ahead of time, seeding `FlowMetaProvider` so it can skip\n     * its own initial client-side fetch (avoiding a flash of untranslated i18n keys).\n     */\n    initialMeta?: FlowMetadataResponse | null;\n    isSignedIn: boolean;\n    organizationHandle: ThunderIDContextProps['organizationHandle'];\n    refreshToken: () => Promise<RefreshResult>;\n    signIn: ThunderIDContextProps['signIn'];\n    signOut: ThunderIDContextProps['signOut'];\n    signUp: ThunderIDContextProps['signUp'];\n    updateProfile: (\n      requestConfig: UpdateMeProfileConfig,\n      sessionId?: string,\n    ) => Promise<{data: {user: User}; error: string; success: boolean}>;\n    user: User | null;\n    userProfile: UserProfile;\n    userSchema?: Record<string, AttributeSchema> | null;\n  };\n\nconst ThunderIDClientProvider: FC<PropsWithChildren<ThunderIDClientProviderProps>> = ({\n  baseUrl,\n  children,\n  endpoints,\n  signIn,\n  clearSession,\n  refreshToken,\n  signOut,\n  signUp,\n  handleOAuthCallback,\n  preferences,\n  isSignedIn,\n  signInUrl,\n  signUpUrl,\n  user: _user,\n  userProfile: _userProfile,\n  userSchema: _userSchema = null,\n  updateProfile,\n  applicationId,\n  organizationHandle,\n  scopes,\n  vendor,\n  initialMeta = null,\n}: PropsWithChildren<ThunderIDClientProviderProps>) => {\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const router: AppRouterInstance = useRouter();\n  const searchParams: ReadonlyURLSearchParams = useSearchParams();\n  const [isLoading, setIsLoading] = useState<boolean>(true);\n  const [user, setUser] = useState<User | null>(_user);\n  const [userProfile, setUserProfile] = useState<UserProfile>(_userProfile);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(_userSchema);\n\n  useEffect(() => {\n    setUserProfile(_userProfile);\n  }, [_userProfile]);\n\n  useEffect(() => {\n    setUserSchema(_userSchema);\n  }, [_userSchema]);\n\n  useEffect(() => {\n    setUser(_user);\n  }, [_user]);\n\n  // Handle OAuth callback automatically\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    // Don't handle callback if already signed in\n    if (isSignedIn) return;\n\n    (async (): Promise<void> => {\n      try {\n        const code: string | null = searchParams.get('code');\n        const state: string | null = searchParams.get('state');\n        const error: string | null = searchParams.get('error');\n\n        // Check for OAuth errors first\n        if (error) {\n          logger.error('[ThunderIDClientProvider] An error was received for the initiated sign-in request.');\n\n          return;\n        }\n\n        // Handle OAuth callback if code and state are present\n        if (code && state) {\n          setIsLoading(true);\n\n          const result: {error?: string; redirectUrl?: string; success: boolean} = await handleOAuthCallback(\n            code,\n            state,\n          );\n\n          if (result.success) {\n            // Redirect to the success URL\n            if (result.redirectUrl) {\n              router.push(result.redirectUrl);\n            } else {\n              // Refresh the page to update authentication state\n              window.location.reload();\n            }\n          } else {\n            logger.error(\n              `[ThunderIDClientProvider] An error occurred while signing in: ${result.error || 'Authentication failed'}`,\n            );\n          }\n        }\n      } catch (error) {\n        logger.error('[ThunderIDClientProvider] Failed to handle OAuth callback:', error);\n      }\n    })();\n  }, []);\n\n  useEffect(() => {\n    // Set loading to false when server has resolved authentication state\n    setIsLoading(false);\n  }, [isSignedIn, user]);\n\n  const handleSignIn = async (payload: any, request: EmbeddedFlowExecuteRequestConfig): Promise<any> => {\n    if (!signIn) {\n      throw new ThunderIDRuntimeError(\n        '`signIn` function is not available.',\n        'ThunderIDClientProvider-handleSignIn-RuntimeError-001',\n        'nextjs',\n      );\n    }\n\n    const result: any = await signIn(payload, request);\n\n    // Redirect based flow URL is sent as `signInUrl` in the response.\n    // Use window.location.href instead of router.push() — the OAuth authorization\n    // endpoint is on an external server, and router.push() would send RSC fetch\n    // headers that the identity provider doesn't understand, causing a CORS error.\n    if (result?.data?.signInUrl) {\n      window.location.href = result.data.signInUrl;\n\n      return undefined;\n    }\n\n    // After the Embedded flow is successful, the URL to navigate next is sent as `afterSignInUrl` in the response.\n    if (result?.data?.afterSignInUrl) {\n      router.push(result.data.afterSignInUrl);\n\n      return undefined;\n    }\n\n    if (result?.error) {\n      throw new Error(result.error);\n    }\n\n    return result?.data ?? result;\n  };\n\n  const handleSignUp = async (payload: any, request: EmbeddedFlowExecuteRequestConfig): Promise<any> => {\n    if (!signUp) {\n      throw new ThunderIDRuntimeError(\n        '`signUp` function is not available.',\n        'ThunderIDClientProvider-handleSignUp-RuntimeError-001',\n        'nextjs',\n      );\n    }\n\n    const result: any = await signUp(payload, request);\n\n    // Redirect based flow URL is sent as `signUpUrl` in the response.\n    if (result?.data?.signUpUrl) {\n      router.push(result.data.signUpUrl);\n\n      return undefined;\n    }\n\n    // After the Embedded flow is successful, the URL to navigate next is sent as `afterSignUpUrl` in the response.\n    if (result?.data?.afterSignUpUrl) {\n      router.push(result.data.afterSignUpUrl);\n\n      return undefined;\n    }\n\n    if (result?.error) {\n      throw new Error(result.error);\n    }\n\n    return result?.data ?? result;\n  };\n\n  const handleSignOut = async (): Promise<any> => {\n    logger.debug('[ThunderIDClientProvider][handleSignOut] `handleSignOut` called.');\n\n    try {\n      const result: any = await signOut();\n\n      logger.debug('[ThunderIDClientProvider][handleSignOut] Sign out result:', result);\n\n      if (result?.data?.afterSignOutUrl) {\n        router.push(result.data.afterSignOutUrl);\n\n        return {location: result.data.afterSignOutUrl, redirected: true};\n      }\n\n      if (result?.error) {\n        logger.error(\n          '[ThunderIDClientProvider][handleSignOut] Error result was returned during signing the user out with a button click:',\n          result.error,\n        );\n      }\n\n      return result?.data ?? result;\n    } catch (error) {\n      logger.error(\n        '[ThunderIDClientProvider][handleSignOut] Error occurred during signing the user out with a button click:',\n        error,\n      );\n\n      return undefined;\n    }\n  };\n\n  const contextValue: ThunderIDContextProps = useMemo(\n    () => ({\n      applicationId,\n      baseUrl,\n      clearSession,\n      isLoading,\n      isSignedIn,\n      organizationHandle,\n      preferences,\n      refreshToken,\n      scopes,\n      signIn: handleSignIn,\n      signInUrl,\n      signOut: handleSignOut,\n      signUp: handleSignUp,\n      signUpUrl,\n      user,\n    }),\n    [\n      baseUrl,\n      user,\n      isSignedIn,\n      isLoading,\n      signInUrl,\n      signUpUrl,\n      applicationId,\n      organizationHandle,\n      scopes,\n      preferences,\n    ],\n  );\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile) => ({\n      ...prev,\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  // Bridge into @thunderid/react's own ThunderIDContext. Internal react components rendered by\n  // BaseSignIn/BaseSignUp — most notably FlowMetaProvider, which fetches `/flow/meta` and injects\n  // its i18n bundle — call react's `useThunderID()` directly. Without this bridge they'd only see\n  // react's context default (applicationId/baseUrl undefined, isInitialized false), so the meta\n  // fetch would never fire and flow labels would render as untranslated i18n keys. Fields with no\n  // nextjs equivalent (token/http helpers meant for direct browser API calls) are stubbed out,\n  // since nextjs routes those operations through server actions instead.\n  const unsupported = (name: string): (() => Promise<never>) => {\n    return () =>\n      Promise.reject(\n        new ThunderIDRuntimeError(\n          `\\`${name}\\` is not supported in @thunderid/nextjs.`,\n          `ThunderIDClientProvider-${name}-NotSupportedError-001`,\n          'nextjs',\n        ),\n      );\n  };\n\n  const reactContextValue: ReactThunderIDContextProps = useMemo(\n    () => ({\n      afterSignInUrl: undefined,\n      applicationId,\n      baseUrl,\n      clearSession,\n      clientId: undefined,\n      discovery: {wellKnown: null},\n      // Only the management collection overrides arrive here, so the admin hooks build the URLs the\n      // management server action accepts.\n      endpoints,\n      exchangeToken: unsupported('exchangeToken'),\n      getAccessToken: unsupported('getAccessToken'),\n      getDecodedIdToken: unsupported('getDecodedIdToken'),\n      // The Next.js useGrantedPermissions reads them through a server action instead.\n      getGrantedPermissions: unsupported('getGrantedPermissions'),\n      getIdToken: unsupported('getIdToken'),\n      getStorageManager: () => Promise.resolve(null),\n      http: {\n        // The admin components and hooks send management requests through a server action that adds\n        // the server-held access token, so the token never reaches the browser.\n        fetcher: fetchManagementFromServer,\n        request: unsupported('http.request'),\n        requestAll: unsupported('http.requestAll'),\n      },\n      instanceId: 0,\n      isInitialized: !isLoading,\n      isLoading,\n      isMetaLoading: false,\n      isSignedIn,\n      meta: initialMeta ?? null,\n      organizationHandle,\n      reInitialize: unsupported('reInitialize'),\n      recover: unsupported('recover'),\n      resolveFlowTemplateLiterals: (text: string | undefined): string => text ?? '',\n      scopes,\n      signIn: handleSignIn,\n      signInSilently: unsupported('signInSilently'),\n      signInUrl,\n      signOut: handleSignOut,\n      signUp: handleSignUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(vendor),\n    }),\n    [\n      applicationId,\n      baseUrl,\n      clearSession,\n      endpoints,\n      isLoading,\n      isSignedIn,\n      organizationHandle,\n      scopes,\n      signInUrl,\n      signUpUrl,\n      user,\n      userSchema,\n      initialMeta,\n      vendor,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={contextValue}>\n      <ReactThunderIDContext.Provider value={reactContextValue}>\n        <I18nProvider preferences={preferences?.i18n}>\n          <FlowMetaProvider\n            enabled={preferences?.resolveFromMeta !== false}\n            initialMeta={initialMeta}\n            fetchMeta={fetchFlowMetaFromServer}\n          >\n            <ThemeProvider theme={preferences?.theme?.overrides} mode={preferences?.theme?.mode}>\n              <FlowProvider>\n                <UserProvider\n                  profile={userProfile}\n                  userSchema={userSchema}\n                  onUpdateProfile={handleProfileUpdate}\n                  updateProfile={updateProfile}\n                >\n                  {children}\n                </UserProvider>\n              </FlowProvider>\n            </ThemeProvider>\n          </FlowMetaProvider>\n        </I18nProvider>\n      </ReactThunderIDContext.Provider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDClientProvider;\n"],"mappings":";;;;;;;;;;;;;;AAmEA,MAAMA,2BAAgF,EACpF,SACA,UACA,WACA,QACA,cACA,cACA,SACA,QACA,qBACA,aACA,YACA,WACA,WACA,MAAM,OACN,aAAa,cACb,YAAY,cAAc,MAC1B,eACA,eACA,oBACA,QACA,QACA,cAAc,WACuC;CACrD,MAAMC,mBAAuC,OAAO,MAAM;CAC1D,MAAMC,SAA4B,WAAW;CAC7C,MAAMC,eAAwC,iBAAiB;CAC/D,MAAM,CAAC,WAAW,gBAAgB,SAAkB,KAAK;CACzD,MAAM,CAAC,MAAM,WAAW,SAAsB,MAAM;CACpD,MAAM,CAAC,aAAa,kBAAkB,SAAsB,aAAa;CACzE,MAAM,CAAC,YAAY,iBAAiB,SAAiD,YAAY;AAEjG,iBAAgB;AACd,iBAAe,aAAa;IAC3B,CAAC,aAAa,CAAC;AAElB,iBAAgB;AACd,gBAAc,YAAY;IACzB,CAAC,YAAY,CAAC;AAEjB,iBAAgB;AACd,UAAQ,MAAM;IACb,CAAC,MAAM,CAAC;AAGX,iBAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAG3B,MAAI,WAAY;AAEhB,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,OAAsB,aAAa,IAAI,OAAO;IACpD,MAAMC,QAAuB,aAAa,IAAI,QAAQ;AAItD,QAH6B,aAAa,IAAI,QAAQ,EAG3C;AACT,oBAAO,MAAM,qFAAqF;AAElG;;AAIF,QAAI,QAAQ,OAAO;AACjB,kBAAa,KAAK;KAElB,MAAMC,SAAmE,MAAM,oBAC7E,MACA,MACD;AAED,SAAI,OAAO,QAET,KAAI,OAAO,YACT,QAAO,KAAK,OAAO,YAAY;SAG/B,QAAO,SAAS,QAAQ;SAG1B,gBAAO,MACL,iEAAiE,OAAO,SAAS,0BAClF;;YAGE,OAAO;AACd,mBAAO,MAAM,8DAA8D,MAAM;;MAEjF;IACH,EAAE,CAAC;AAEN,iBAAgB;AAEd,eAAa,MAAM;IAClB,CAAC,YAAY,KAAK,CAAC;CAEtB,MAAM,eAAe,OAAO,SAAc,YAA4D;AACpG,MAAI,CAAC,OACH,OAAM,IAAI,sBACR,uCACA,yDACA,SACD;EAGH,MAAMC,SAAc,MAAM,OAAO,SAAS,QAAQ;AAMlD,MAAI,QAAQ,MAAM,WAAW;AAC3B,UAAO,SAAS,OAAO,OAAO,KAAK;AAEnC;;AAIF,MAAI,QAAQ,MAAM,gBAAgB;AAChC,UAAO,KAAK,OAAO,KAAK,eAAe;AAEvC;;AAGF,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,OAAO,MAAM;AAG/B,SAAO,QAAQ,QAAQ;;CAGzB,MAAM,eAAe,OAAO,SAAc,YAA4D;AACpG,MAAI,CAAC,OACH,OAAM,IAAI,sBACR,uCACA,yDACA,SACD;EAGH,MAAMA,SAAc,MAAM,OAAO,SAAS,QAAQ;AAGlD,MAAI,QAAQ,MAAM,WAAW;AAC3B,UAAO,KAAK,OAAO,KAAK,UAAU;AAElC;;AAIF,MAAI,QAAQ,MAAM,gBAAgB;AAChC,UAAO,KAAK,OAAO,KAAK,eAAe;AAEvC;;AAGF,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,OAAO,MAAM;AAG/B,SAAO,QAAQ,QAAQ;;CAGzB,MAAM,gBAAgB,YAA0B;AAC9C,iBAAO,MAAM,mEAAmE;AAEhF,MAAI;GACF,MAAMA,SAAc,MAAM,SAAS;AAEnC,kBAAO,MAAM,6DAA6D,OAAO;AAEjF,OAAI,QAAQ,MAAM,iBAAiB;AACjC,WAAO,KAAK,OAAO,KAAK,gBAAgB;AAExC,WAAO;KAAC,UAAU,OAAO,KAAK;KAAiB,YAAY;KAAK;;AAGlE,OAAI,QAAQ,MACV,gBAAO,MACL,uHACA,OAAO,MACR;AAGH,UAAO,QAAQ,QAAQ;WAChB,OAAO;AACd,kBAAO,MACL,4GACA,MACD;AAED;;;CAIJ,MAAMC,eAAsC,eACnC;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR;EACA,SAAS;EACT,QAAQ;EACR;EACA;EACD,GACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;CAED,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAAuB;GACrC,GAAG;GACH,kBAAkB,6BAA6B,QAAQ;GACvD,SAAS;GACV,EAAE;;CAUL,MAAM,eAAe,SAAyC;AAC5D,eACE,QAAQ,OACN,IAAI,sBACF,KAAK,KAAK,4CACV,2BAA2B,KAAK,yBAChC,SACD,CACF;;CAGL,MAAMC,oBAAgD,eAC7C;EACL,gBAAgB;EAChB;EACA;EACA;EACA,UAAU;EACV,WAAW,EAAC,WAAW,MAAK;EAG5B;EACA,eAAe,YAAY,gBAAgB;EAC3C,gBAAgB,YAAY,iBAAiB;EAC7C,mBAAmB,YAAY,oBAAoB;EAEnD,uBAAuB,YAAY,wBAAwB;EAC3D,YAAY,YAAY,aAAa;EACrC,yBAAyB,QAAQ,QAAQ,KAAK;EAC9C,MAAM;GAGJ,SAASC;GACT,SAAS,YAAY,eAAe;GACpC,YAAY,YAAY,kBAAkB;GAC3C;EACD,YAAY;EACZ,eAAe,CAAC;EAChB;EACA,eAAe;EACf;EACA,MAAM,eAAe;EACrB;EACA,cAAc,YAAY,eAAe;EACzC,SAAS,YAAY,UAAU;EAC/B,8BAA8B,SAAqC,QAAQ;EAC3E;EACA,QAAQ;EACR,gBAAgB,YAAY,iBAAiB;EAC7C;EACA,SAAS;EACT,QAAQ;EACR;EACA;EACA;EACA,QAAQ,gBAAgB,OAAO;EAChC,GACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,oBAACC,yBAAiB;EAAS,OAAO;YAChC,oBAACC,iBAAsB;GAAS,OAAO;aACrC,oBAAC;IAAa,aAAa,aAAa;cACtC,oBAAC;KACC,SAAS,aAAa,oBAAoB;KAC7B;KACb,WAAWC;eAEX,oBAAC;MAAc,OAAO,aAAa,OAAO;MAAW,MAAM,aAAa,OAAO;gBAC7E,oBAAC,0BACC,oBAAC;OACC,SAAS;OACG;OACZ,iBAAiB;OACF;OAEd;QACY,GACF;OACD;MACC;KACN;IACgB;GACP;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.js","names":["ThunderIDClientProvider: FC<PropsWithChildren<ThunderIDClientProviderProps>>","reRenderCheckRef: RefObject<boolean>","router: AppRouterInstance","searchParams: ReadonlyURLSearchParams","code: string | null","state: string | null","result: {error?: string; redirectUrl?: string; success: boolean}","result: SwitchOrganizationUnitActionResult","switchOrganizationUnitAction","sessionId: string | undefined","getSessionId","refreshedUser: User | null","getUserAction","getCurrentOrganizationUnitAction","result: any","contextValue: ThunderIDContextProps","result: Awaited<ReturnType<typeof getUserProfileAction>>","getUserProfileAction","reactContextValue: ReactThunderIDContextProps","fetchManagementFromServer","ThunderIDContext","ReactThunderIDContext","fetchFlowMetaFromServer"],"sources":["../../../../src/client/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  AttributeSchema,\n  EmbeddedFlowExecuteRequestConfig,\n  FlowMetadataResponse,\n  generateFlattenedUserProfile,\n  UpdateMeProfileConfig,\n  User,\n  UserProfile,\n  ThunderIDRuntimeError,\n  getVendorPrefix,\n  CurrentOrganizationUnit,\n  SwitchOrganizationUnitOptions,\n  ThunderIDAPIError,\n} from '@thunderid/node';\nimport {\n  I18nProvider,\n  FlowMetaProvider,\n  FlowProvider,\n  UserProvider,\n  ThemeProvider,\n  ThunderIDContext as ReactThunderIDContext,\n  ThunderIDContextProps as ReactThunderIDContextProps,\n  ThunderIDProviderProps,\n  useCurrentProjectState,\n} from '@thunderid/react';\nimport {ReadonlyURLSearchParams} from 'next/dist/client/components/navigation.react-server';\nimport {AppRouterInstance} from 'next/dist/shared/lib/app-router-context.shared-runtime';\nimport {useRouter, useSearchParams} from 'next/navigation';\nimport {FC, PropsWithChildren, RefObject, useEffect, useMemo, useRef, useState} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport getCurrentOrganizationUnitAction from '../../../server/actions/account/getCurrentOrganizationUnitAction';\nimport getUserAction from '../../../server/actions/account/getUserAction';\nimport getUserProfileAction from '../../../server/actions/account/getUserProfileAction';\nimport switchOrganizationUnitAction, {\n  SwitchOrganizationUnitActionResult,\n} from '../../../server/actions/auth/switchOrganizationUnitAction';\nimport getSessionId from '../../../server/actions/getSessionId';\nimport {RefreshResult} from '../../../server/actions/refreshToken';\nimport logger from '../../../utils/logger';\nimport fetchFlowMetaFromServer from '../../fetchFlowMetaFromServer';\nimport fetchManagementFromServer from '../../fetchManagementFromServer';\n\n/**\n * Props interface of {@link ThunderIDClientProvider}\n */\nexport type ThunderIDClientProviderProps = Partial<Omit<ThunderIDProviderProps, 'baseUrl' | 'clientId'>> &\n  Pick<ThunderIDProviderProps, 'baseUrl' | 'clientId'> & {\n    applicationId: ThunderIDContextProps['applicationId'];\n    clearSession: () => Promise<void>;\n    handleOAuthCallback: (\n      code: string,\n      state: string,\n    ) => Promise<{error?: string; redirectUrl?: string; success: boolean}>;\n    /**\n     * Flow metadata fetched server-side ahead of time, seeding `FlowMetaProvider` so it can skip\n     * its own initial client-side fetch (avoiding a flash of untranslated i18n keys).\n     */\n    initialMeta?: FlowMetadataResponse | null;\n    isSignedIn: boolean;\n    organizationHandle: ThunderIDContextProps['organizationHandle'];\n    refreshToken: () => Promise<RefreshResult>;\n    signIn: ThunderIDContextProps['signIn'];\n    signOut: ThunderIDContextProps['signOut'];\n    signUp: ThunderIDContextProps['signUp'];\n    updateProfile: (\n      requestConfig: UpdateMeProfileConfig,\n      sessionId?: string,\n    ) => Promise<{data: {user: User}; error: string; success: boolean}>;\n    user: User | null;\n    userProfile: UserProfile;\n    userSchema?: Record<string, AttributeSchema> | null;\n  };\n\nconst ThunderIDClientProvider: FC<PropsWithChildren<ThunderIDClientProviderProps>> = ({\n  baseUrl,\n  children,\n  endpoints,\n  signIn,\n  clearSession,\n  refreshToken,\n  signOut,\n  signUp,\n  handleOAuthCallback,\n  preferences,\n  isSignedIn,\n  signInUrl,\n  signUpUrl,\n  user: _user,\n  userProfile: _userProfile,\n  userSchema: _userSchema = null,\n  updateProfile,\n  applicationId,\n  organizationHandle,\n  scopes,\n  vendor,\n  initialMeta = null,\n}: PropsWithChildren<ThunderIDClientProviderProps>) => {\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const router: AppRouterInstance = useRouter();\n  const searchParams: ReadonlyURLSearchParams = useSearchParams();\n  const [isLoading, setIsLoading] = useState<boolean>(true);\n  const [user, setUser] = useState<User | null>(_user);\n  const [userProfile, setUserProfile] = useState<UserProfile>(_userProfile);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(_userSchema);\n\n  useEffect(() => {\n    setUserProfile(_userProfile);\n  }, [_userProfile]);\n\n  useEffect(() => {\n    setUserSchema(_userSchema);\n  }, [_userSchema]);\n\n  useEffect(() => {\n    setUser(_user);\n  }, [_user]);\n\n  // Handle OAuth callback automatically\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    // Don't handle callback if already signed in\n    if (isSignedIn) return;\n\n    (async (): Promise<void> => {\n      try {\n        const code: string | null = searchParams.get('code');\n        const state: string | null = searchParams.get('state');\n        const error: string | null = searchParams.get('error');\n\n        // Check for OAuth errors first\n        if (error) {\n          logger.error('[ThunderIDClientProvider] An error was received for the initiated sign-in request.');\n\n          return;\n        }\n\n        // Handle OAuth callback if code and state are present\n        if (code && state) {\n          setIsLoading(true);\n\n          const result: {error?: string; redirectUrl?: string; success: boolean} = await handleOAuthCallback(\n            code,\n            state,\n          );\n\n          if (result.success) {\n            // Redirect to the success URL\n            if (result.redirectUrl) {\n              router.push(result.redirectUrl);\n            } else {\n              // Refresh the page to update authentication state\n              window.location.reload();\n            }\n          } else {\n            logger.error(\n              `[ThunderIDClientProvider] An error occurred while signing in: ${result.error || 'Authentication failed'}`,\n            );\n          }\n        }\n      } catch (error) {\n        logger.error('[ThunderIDClientProvider] Failed to handle OAuth callback:', error);\n      }\n    })();\n  }, []);\n\n  useEffect(() => {\n    // Set loading to false when server has resolved authentication state\n    setIsLoading(false);\n  }, [isSignedIn, user]);\n\n  const [currentOrganizationUnit, setCurrentOrganizationUnit] = useState<CurrentOrganizationUnit | null>(null);\n  // The current project is client-side context for the management UI, kept in the browser like the\n  // React SDK's: it changes no session, cookie or token.\n  const {currentProject, setCurrentProject} = useCurrentProjectState(getVendorPrefix(vendor));\n\n  useEffect(() => {\n    if (!isSignedIn) {\n      setCurrentOrganizationUnit(null);\n\n      return;\n    }\n\n    getCurrentOrganizationUnitAction()\n      .then(setCurrentOrganizationUnit)\n      .catch(() => setCurrentOrganizationUnit(null));\n  }, [isSignedIn, user]);\n\n  /**\n   * Signs in again bounded to another organization unit through a server action. Redirect mode sends the\n   * browser to the unit's authorization endpoint and resolves with `undefined`; embedded mode replaces\n   * the session in place and resolves with the refreshed user. A failure keeps the previous session and\n   * rejects with an error whose code is one of `OrganizationUnitSwitchErrorCodes`.\n   */\n  const handleSwitchOrganizationUnit = async (\n    organizationUnitId: string,\n    options?: SwitchOrganizationUnitOptions,\n  ): Promise<User | undefined> => {\n    const result: SwitchOrganizationUnitActionResult = await switchOrganizationUnitAction(organizationUnitId, {\n      redirect: options?.redirect,\n    });\n\n    if (!result.success) {\n      throw new ThunderIDAPIError(\n        JSON.stringify({code: result.code, message: {defaultValue: 'Switching the organization unit failed'}}),\n        result.code,\n        'nextjs',\n        result.statusCode,\n      );\n    }\n\n    if (result.data.signInUrl) {\n      // The authorization endpoint is on the identity server, so leave the app rather than route.\n      window.location.href = result.data.signInUrl;\n\n      return undefined;\n    }\n\n    const sessionId: string | undefined = await getSessionId();\n    const refreshed: Awaited<ReturnType<typeof getUserAction>> | undefined = sessionId\n      ? await getUserAction(sessionId)\n      : undefined;\n    const refreshedUser: User | null = refreshed?.data?.user ?? null;\n\n    if (refreshedUser) {\n      setUser(refreshedUser);\n    }\n\n    setCurrentOrganizationUnit(await getCurrentOrganizationUnitAction());\n    router.refresh();\n\n    return refreshedUser ?? undefined;\n  };\n\n  const handleSignIn = async (payload: any, request: EmbeddedFlowExecuteRequestConfig): Promise<any> => {\n    if (!signIn) {\n      throw new ThunderIDRuntimeError(\n        '`signIn` function is not available.',\n        'ThunderIDClientProvider-handleSignIn-RuntimeError-001',\n        'nextjs',\n      );\n    }\n\n    const result: any = await signIn(payload, request);\n\n    // Redirect based flow URL is sent as `signInUrl` in the response.\n    // Use window.location.href instead of router.push() — the OAuth authorization\n    // endpoint is on an external server, and router.push() would send RSC fetch\n    // headers that the identity provider doesn't understand, causing a CORS error.\n    if (result?.data?.signInUrl) {\n      window.location.href = result.data.signInUrl;\n\n      return undefined;\n    }\n\n    // After the Embedded flow is successful, the URL to navigate next is sent as `afterSignInUrl` in the response.\n    if (result?.data?.afterSignInUrl) {\n      router.push(result.data.afterSignInUrl);\n\n      return undefined;\n    }\n\n    if (result?.error) {\n      throw new Error(result.error);\n    }\n\n    return result?.data ?? result;\n  };\n\n  const handleSignUp = async (payload: any, request: EmbeddedFlowExecuteRequestConfig): Promise<any> => {\n    if (!signUp) {\n      throw new ThunderIDRuntimeError(\n        '`signUp` function is not available.',\n        'ThunderIDClientProvider-handleSignUp-RuntimeError-001',\n        'nextjs',\n      );\n    }\n\n    const result: any = await signUp(payload, request);\n\n    // Redirect based flow URL is sent as `signUpUrl` in the response.\n    if (result?.data?.signUpUrl) {\n      router.push(result.data.signUpUrl);\n\n      return undefined;\n    }\n\n    // After the Embedded flow is successful, the URL to navigate next is sent as `afterSignUpUrl` in the response.\n    if (result?.data?.afterSignUpUrl) {\n      router.push(result.data.afterSignUpUrl);\n\n      return undefined;\n    }\n\n    if (result?.error) {\n      throw new Error(result.error);\n    }\n\n    return result?.data ?? result;\n  };\n\n  const handleSignOut = async (): Promise<any> => {\n    logger.debug('[ThunderIDClientProvider][handleSignOut] `handleSignOut` called.');\n\n    try {\n      const result: any = await signOut();\n\n      logger.debug('[ThunderIDClientProvider][handleSignOut] Sign out result:', result);\n\n      if (result?.data?.afterSignOutUrl) {\n        router.push(result.data.afterSignOutUrl);\n\n        return {location: result.data.afterSignOutUrl, redirected: true};\n      }\n\n      if (result?.error) {\n        logger.error(\n          '[ThunderIDClientProvider][handleSignOut] Error result was returned during signing the user out with a button click:',\n          result.error,\n        );\n      }\n\n      return result?.data ?? result;\n    } catch (error) {\n      logger.error(\n        '[ThunderIDClientProvider][handleSignOut] Error occurred during signing the user out with a button click:',\n        error,\n      );\n\n      return undefined;\n    }\n  };\n\n  const contextValue: ThunderIDContextProps = useMemo(\n    () => ({\n      applicationId,\n      baseUrl,\n      clearSession,\n      currentOrganizationUnit,\n      currentProject,\n      getCurrentOrganizationUnit: getCurrentOrganizationUnitAction,\n      isLoading,\n      isSignedIn,\n      organizationHandle,\n      preferences,\n      refreshToken,\n      setCurrentProject,\n      switchOrganizationUnit: handleSwitchOrganizationUnit,\n      scopes,\n      signIn: handleSignIn,\n      signInUrl,\n      signOut: handleSignOut,\n      signUp: handleSignUp,\n      signUpUrl,\n      user,\n    }),\n    [\n      baseUrl,\n      user,\n      isSignedIn,\n      isLoading,\n      signInUrl,\n      signUpUrl,\n      applicationId,\n      organizationHandle,\n      scopes,\n      preferences,\n      currentOrganizationUnit,\n      currentProject,\n      setCurrentProject,\n    ],\n  );\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile) => ({\n      ...prev,\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  /**\n   * Re-reads `/users/me` through the server-held session, so a change made outside the profile API,\n   * such as a recorded verification, shows.\n   */\n  const revalidateProfile = async (): Promise<void> => {\n    if (preferences?.user?.fetchUserProfile === false) return;\n\n    const result: Awaited<ReturnType<typeof getUserProfileAction>> = await getUserProfileAction(\n      (await getSessionId()) ?? '',\n    );\n\n    if (result.success) {\n      handleProfileUpdate(result.data.userProfile.profile);\n    }\n  };\n\n  // Bridge into @thunderid/react's own ThunderIDContext. Internal react components rendered by\n  // BaseSignIn/BaseSignUp — most notably FlowMetaProvider, which fetches `/flow/meta` and injects\n  // its i18n bundle — call react's `useThunderID()` directly. Without this bridge they'd only see\n  // react's context default (applicationId/baseUrl undefined, isInitialized false), so the meta\n  // fetch would never fire and flow labels would render as untranslated i18n keys. Fields with no\n  // nextjs equivalent (token/http helpers meant for direct browser API calls) are stubbed out,\n  // since nextjs routes those operations through server actions instead.\n  const unsupported = (name: string): (() => Promise<never>) => {\n    return () =>\n      Promise.reject(\n        new ThunderIDRuntimeError(\n          `\\`${name}\\` is not supported in @thunderid/nextjs.`,\n          `ThunderIDClientProvider-${name}-NotSupportedError-001`,\n          'nextjs',\n        ),\n      );\n  };\n\n  const reactContextValue: ReactThunderIDContextProps = useMemo(\n    () => ({\n      afterSignInUrl: undefined,\n      applicationId,\n      baseUrl,\n      clearSession,\n      clientId: undefined,\n      currentOrganizationUnit,\n      currentProject,\n      discovery: {wellKnown: null},\n      // Only the management collection overrides arrive here, so the admin hooks build the URLs the\n      // management server action accepts.\n      endpoints,\n      exchangeToken: unsupported('exchangeToken'),\n      getAccessToken: unsupported('getAccessToken'),\n      getCurrentOrganizationUnit: getCurrentOrganizationUnitAction,\n      getDecodedIdToken: unsupported('getDecodedIdToken'),\n      // The Next.js useGrantedPermissions reads them through a server action instead.\n      getGrantedPermissions: unsupported('getGrantedPermissions'),\n      getIdToken: unsupported('getIdToken'),\n      getStorageManager: () => Promise.resolve(null),\n      http: {\n        // The admin components and hooks send management requests through a server action that adds\n        // the server-held access token, so the token never reaches the browser.\n        fetcher: fetchManagementFromServer,\n        request: unsupported('http.request'),\n        requestAll: unsupported('http.requestAll'),\n      },\n      instanceId: 0,\n      isInitialized: !isLoading,\n      isLoading,\n      isMetaLoading: false,\n      isSignedIn,\n      meta: initialMeta ?? null,\n      organizationHandle,\n      reInitialize: unsupported('reInitialize'),\n      recover: unsupported('recover'),\n      resolveFlowTemplateLiterals: (text: string | undefined): string => text ?? '',\n      scopes,\n      setCurrentProject,\n      signIn: handleSignIn,\n      signInSilently: unsupported('signInSilently'),\n      signInUrl,\n      signOut: handleSignOut,\n      signUp: handleSignUp,\n      signUpUrl,\n      switchOrganizationUnit: handleSwitchOrganizationUnit,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(vendor),\n    }),\n    [\n      applicationId,\n      baseUrl,\n      clearSession,\n      endpoints,\n      isLoading,\n      isSignedIn,\n      organizationHandle,\n      scopes,\n      signInUrl,\n      signUpUrl,\n      user,\n      userSchema,\n      initialMeta,\n      vendor,\n      currentOrganizationUnit,\n      currentProject,\n      setCurrentProject,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={contextValue}>\n      <ReactThunderIDContext.Provider value={reactContextValue}>\n        <I18nProvider preferences={preferences?.i18n}>\n          <FlowMetaProvider\n            enabled={preferences?.resolveFromMeta !== false}\n            initialMeta={initialMeta}\n            fetchMeta={fetchFlowMetaFromServer}\n          >\n            <ThemeProvider theme={preferences?.theme?.overrides} mode={preferences?.theme?.mode}>\n              <FlowProvider>\n                <UserProvider\n                  profile={userProfile}\n                  userSchema={userSchema}\n                  onUpdateProfile={handleProfileUpdate}\n                  revalidateProfile={revalidateProfile}\n                  updateProfile={updateProfile}\n                >\n                  {children}\n                </UserProvider>\n              </FlowProvider>\n            </ThemeProvider>\n          </FlowMetaProvider>\n        </I18nProvider>\n      </ReactThunderIDContext.Provider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDClientProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA8EA,MAAMA,2BAAgF,EACpF,SACA,UACA,WACA,QACA,cACA,cACA,SACA,QACA,qBACA,aACA,YACA,WACA,WACA,MAAM,OACN,aAAa,cACb,YAAY,cAAc,MAC1B,eACA,eACA,oBACA,QACA,QACA,cAAc,WACuC;CACrD,MAAMC,mBAAuC,OAAO,MAAM;CAC1D,MAAMC,SAA4B,WAAW;CAC7C,MAAMC,eAAwC,iBAAiB;CAC/D,MAAM,CAAC,WAAW,gBAAgB,SAAkB,KAAK;CACzD,MAAM,CAAC,MAAM,WAAW,SAAsB,MAAM;CACpD,MAAM,CAAC,aAAa,kBAAkB,SAAsB,aAAa;CACzE,MAAM,CAAC,YAAY,iBAAiB,SAAiD,YAAY;AAEjG,iBAAgB;AACd,iBAAe,aAAa;IAC3B,CAAC,aAAa,CAAC;AAElB,iBAAgB;AACd,gBAAc,YAAY;IACzB,CAAC,YAAY,CAAC;AAEjB,iBAAgB;AACd,UAAQ,MAAM;IACb,CAAC,MAAM,CAAC;AAGX,iBAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAG3B,MAAI,WAAY;AAEhB,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,OAAsB,aAAa,IAAI,OAAO;IACpD,MAAMC,QAAuB,aAAa,IAAI,QAAQ;AAItD,QAH6B,aAAa,IAAI,QAAQ,EAG3C;AACT,oBAAO,MAAM,qFAAqF;AAElG;;AAIF,QAAI,QAAQ,OAAO;AACjB,kBAAa,KAAK;KAElB,MAAMC,SAAmE,MAAM,oBAC7E,MACA,MACD;AAED,SAAI,OAAO,QAET,KAAI,OAAO,YACT,QAAO,KAAK,OAAO,YAAY;SAG/B,QAAO,SAAS,QAAQ;SAG1B,gBAAO,MACL,iEAAiE,OAAO,SAAS,0BAClF;;YAGE,OAAO;AACd,mBAAO,MAAM,8DAA8D,MAAM;;MAEjF;IACH,EAAE,CAAC;AAEN,iBAAgB;AAEd,eAAa,MAAM;IAClB,CAAC,YAAY,KAAK,CAAC;CAEtB,MAAM,CAAC,yBAAyB,8BAA8B,SAAyC,KAAK;CAG5G,MAAM,EAAC,gBAAgB,sBAAqB,uBAAuB,gBAAgB,OAAO,CAAC;AAE3F,iBAAgB;AACd,MAAI,CAAC,YAAY;AACf,8BAA2B,KAAK;AAEhC;;AAGF,4CAAkC,CAC/B,KAAK,2BAA2B,CAChC,YAAY,2BAA2B,KAAK,CAAC;IAC/C,CAAC,YAAY,KAAK,CAAC;;;;;;;CAQtB,MAAM,+BAA+B,OACnC,oBACA,YAC8B;EAC9B,MAAMC,SAA6C,MAAMC,qCAA6B,oBAAoB,EACxG,UAAU,SAAS,UACpB,CAAC;AAEF,MAAI,CAAC,OAAO,QACV,OAAM,IAAI,kBACR,KAAK,UAAU;GAAC,MAAM,OAAO;GAAM,SAAS,EAAC,cAAc,0CAAyC;GAAC,CAAC,EACtG,OAAO,MACP,UACA,OAAO,WACR;AAGH,MAAI,OAAO,KAAK,WAAW;AAEzB,UAAO,SAAS,OAAO,OAAO,KAAK;AAEnC;;EAGF,MAAMC,YAAgC,MAAMC,sBAAc;EAI1D,MAAMC,iBAHmE,YACrE,MAAMC,sBAAc,UAAU,GAC9B,SAC0C,MAAM,QAAQ;AAE5D,MAAI,cACF,SAAQ,cAAc;AAGxB,6BAA2B,MAAMC,0CAAkC,CAAC;AACpE,SAAO,SAAS;AAEhB,SAAO,iBAAiB;;CAG1B,MAAM,eAAe,OAAO,SAAc,YAA4D;AACpG,MAAI,CAAC,OACH,OAAM,IAAI,sBACR,uCACA,yDACA,SACD;EAGH,MAAMC,SAAc,MAAM,OAAO,SAAS,QAAQ;AAMlD,MAAI,QAAQ,MAAM,WAAW;AAC3B,UAAO,SAAS,OAAO,OAAO,KAAK;AAEnC;;AAIF,MAAI,QAAQ,MAAM,gBAAgB;AAChC,UAAO,KAAK,OAAO,KAAK,eAAe;AAEvC;;AAGF,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,OAAO,MAAM;AAG/B,SAAO,QAAQ,QAAQ;;CAGzB,MAAM,eAAe,OAAO,SAAc,YAA4D;AACpG,MAAI,CAAC,OACH,OAAM,IAAI,sBACR,uCACA,yDACA,SACD;EAGH,MAAMA,SAAc,MAAM,OAAO,SAAS,QAAQ;AAGlD,MAAI,QAAQ,MAAM,WAAW;AAC3B,UAAO,KAAK,OAAO,KAAK,UAAU;AAElC;;AAIF,MAAI,QAAQ,MAAM,gBAAgB;AAChC,UAAO,KAAK,OAAO,KAAK,eAAe;AAEvC;;AAGF,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,OAAO,MAAM;AAG/B,SAAO,QAAQ,QAAQ;;CAGzB,MAAM,gBAAgB,YAA0B;AAC9C,iBAAO,MAAM,mEAAmE;AAEhF,MAAI;GACF,MAAMA,SAAc,MAAM,SAAS;AAEnC,kBAAO,MAAM,6DAA6D,OAAO;AAEjF,OAAI,QAAQ,MAAM,iBAAiB;AACjC,WAAO,KAAK,OAAO,KAAK,gBAAgB;AAExC,WAAO;KAAC,UAAU,OAAO,KAAK;KAAiB,YAAY;KAAK;;AAGlE,OAAI,QAAQ,MACV,gBAAO,MACL,uHACA,OAAO,MACR;AAGH,UAAO,QAAQ,QAAQ;WAChB,OAAO;AACd,kBAAO,MACL,4GACA,MACD;AAED;;;CAIJ,MAAMC,eAAsC,eACnC;EACL;EACA;EACA;EACA;EACA;EACA,4BAA4BF;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA,wBAAwB;EACxB;EACA,QAAQ;EACR;EACA,SAAS;EACT,QAAQ;EACR;EACA;EACD,GACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;CAED,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAAuB;GACrC,GAAG;GACH,kBAAkB,6BAA6B,QAAQ;GACvD,SAAS;GACV,EAAE;;;;;;CAOL,MAAM,oBAAoB,YAA2B;AACnD,MAAI,aAAa,MAAM,qBAAqB,MAAO;EAEnD,MAAMG,SAA2D,MAAMC,6BACpE,MAAMP,sBAAc,IAAK,GAC3B;AAED,MAAI,OAAO,QACT,qBAAoB,OAAO,KAAK,YAAY,QAAQ;;CAWxD,MAAM,eAAe,SAAyC;AAC5D,eACE,QAAQ,OACN,IAAI,sBACF,KAAK,KAAK,4CACV,2BAA2B,KAAK,yBAChC,SACD,CACF;;CAGL,MAAMQ,oBAAgD,eAC7C;EACL,gBAAgB;EAChB;EACA;EACA;EACA,UAAU;EACV;EACA;EACA,WAAW,EAAC,WAAW,MAAK;EAG5B;EACA,eAAe,YAAY,gBAAgB;EAC3C,gBAAgB,YAAY,iBAAiB;EAC7C,4BAA4BL;EAC5B,mBAAmB,YAAY,oBAAoB;EAEnD,uBAAuB,YAAY,wBAAwB;EAC3D,YAAY,YAAY,aAAa;EACrC,yBAAyB,QAAQ,QAAQ,KAAK;EAC9C,MAAM;GAGJ,SAASM;GACT,SAAS,YAAY,eAAe;GACpC,YAAY,YAAY,kBAAkB;GAC3C;EACD,YAAY;EACZ,eAAe,CAAC;EAChB;EACA,eAAe;EACf;EACA,MAAM,eAAe;EACrB;EACA,cAAc,YAAY,eAAe;EACzC,SAAS,YAAY,UAAU;EAC/B,8BAA8B,SAAqC,QAAQ;EAC3E;EACA;EACA,QAAQ;EACR,gBAAgB,YAAY,iBAAiB;EAC7C;EACA,SAAS;EACT,QAAQ;EACR;EACA,wBAAwB;EACxB;EACA;EACA,QAAQ,gBAAgB,OAAO;EAChC,GACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,oBAACC,yBAAiB;EAAS,OAAO;YAChC,oBAACC,iBAAsB;GAAS,OAAO;aACrC,oBAAC;IAAa,aAAa,aAAa;cACtC,oBAAC;KACC,SAAS,aAAa,oBAAoB;KAC7B;KACb,WAAWC;eAEX,oBAAC;MAAc,OAAO,aAAa,OAAO;MAAW,MAAM,aAAa,OAAO;gBAC7E,oBAAC,0BACC,oBAAC;OACC,SAAS;OACG;OACZ,iBAAiB;OACE;OACJ;OAEd;QACY,GACF;OACD;MACC;KACN;IACgB;GACP;;AAIhC,gCAAe"}

package/dist/client/index.d.ts

@@ -25,44 +25,68 @@ export { default as UserProfile } from './components/account/UserProfile/UserPro
 export type { UserProfileProps } from './components/account/UserProfile/UserProfile';
 export { default as ChangeCredential } from './components/account/ChangeCredential/ChangeCredential';
 export type { ChangeCredentialProps } from './components/account/ChangeCredential/ChangeCredential';
+export { default as OrganizationUnitSwitcher } from './components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher';
+export type { OrganizationUnitSwitcherProps } from './components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher';
+export { default as VerifyAttribute } from './components/account/VerifyAttribute/VerifyAttribute';
+export type { VerifyAttributeProps } from './components/account/VerifyAttribute/VerifyAttribute';
 export { default as UserSelect } from './components/primitives/UserSelect/UserSelect';
 export type { UserSelectProps } from './components/primitives/UserSelect/UserSelect';
 export { default as AuthFlowSelect } from './components/primitives/AuthFlowSelect/AuthFlowSelect';
 export type { AuthFlowSelectProps } from './components/primitives/AuthFlowSelect/AuthFlowSelect';
 export { default as UserTypeSelect } from './components/primitives/UserTypeSelect/UserTypeSelect';
 export type { UserTypeSelectProps } from './components/primitives/UserTypeSelect/UserTypeSelect';
-export { default as UserList } from './components/admin/UserList/UserList';
-export type { UserListProps } from './components/admin/UserList/UserList';
-export { default as UserCreate } from './components/admin/UserCreate/UserCreate';
-export type { UserCreateProps } from './components/admin/UserCreate/UserCreate';
-export { default as UserDetails } from './components/admin/UserDetails/UserDetails';
-export type { UserDetailsProps } from './components/admin/UserDetails/UserDetails';
-export { default as GroupList } from './components/admin/GroupList/GroupList';
-export type { GroupListProps } from './components/admin/GroupList/GroupList';
-export { default as GroupCreate } from './components/admin/GroupCreate/GroupCreate';
-export type { GroupCreateProps } from './components/admin/GroupCreate/GroupCreate';
-export { default as GroupMembers } from './components/admin/GroupMembers/GroupMembers';
-export type { GroupMembersProps } from './components/admin/GroupMembers/GroupMembers';
-export { default as RoleList } from './components/admin/RoleList/RoleList';
-export type { RoleListProps } from './components/admin/RoleList/RoleList';
-export { default as RoleCreate } from './components/admin/RoleCreate/RoleCreate';
-export type { RoleCreateProps } from './components/admin/RoleCreate/RoleCreate';
-export { default as RoleAssignments } from './components/admin/RoleAssignments/RoleAssignments';
-export type { RoleAssignmentsProps } from './components/admin/RoleAssignments/RoleAssignments';
-export { default as RolePermissions } from './components/admin/RolePermissions/RolePermissions';
-export type { RolePermissionsProps } from './components/admin/RolePermissions/RolePermissions';
-export { default as AgentList } from './components/admin/AgentList/AgentList';
-export type { AgentListProps } from './components/admin/AgentList/AgentList';
-export { default as AgentCreate } from './components/admin/AgentCreate/AgentCreate';
-export type { AgentCreateProps } from './components/admin/AgentCreate/AgentCreate';
-export { default as AgentDetails } from './components/admin/AgentDetails/AgentDetails';
-export type { AgentDetailsProps } from './components/admin/AgentDetails/AgentDetails';
-export { default as ApplicationList } from './components/admin/ApplicationList/ApplicationList';
-export type { ApplicationListProps } from './components/admin/ApplicationList/ApplicationList';
-export { default as ApplicationCreate } from './components/admin/ApplicationCreate/ApplicationCreate';
-export type { ApplicationCreateProps } from './components/admin/ApplicationCreate/ApplicationCreate';
-export { default as ApplicationDetails } from './components/admin/ApplicationDetails/ApplicationDetails';
-export type { ApplicationDetailsProps } from './components/admin/ApplicationDetails/ApplicationDetails';
+export { default as UserList } from './components/management/UserList/UserList';
+export type { UserListProps } from './components/management/UserList/UserList';
+export { default as UserCreate } from './components/management/UserCreate/UserCreate';
+export type { UserCreateProps } from './components/management/UserCreate/UserCreate';
+export { default as UserDetails } from './components/management/UserDetails/UserDetails';
+export type { UserDetailsProps } from './components/management/UserDetails/UserDetails';
+export { default as GroupList } from './components/management/GroupList/GroupList';
+export type { GroupListProps } from './components/management/GroupList/GroupList';
+export { default as GroupCreate } from './components/management/GroupCreate/GroupCreate';
+export type { GroupCreateProps } from './components/management/GroupCreate/GroupCreate';
+export { default as GroupMembers } from './components/management/GroupMembers/GroupMembers';
+export type { GroupMembersProps } from './components/management/GroupMembers/GroupMembers';
+export { default as RoleList } from './components/management/RoleList/RoleList';
+export type { RoleListProps } from './components/management/RoleList/RoleList';
+export { default as RoleCreate } from './components/management/RoleCreate/RoleCreate';
+export type { RoleCreateProps } from './components/management/RoleCreate/RoleCreate';
+export { default as RoleAssignments } from './components/management/RoleAssignments/RoleAssignments';
+export type { RoleAssignmentsProps } from './components/management/RoleAssignments/RoleAssignments';
+export { default as RolePermissions } from './components/management/RolePermissions/RolePermissions';
+export type { RolePermissionsProps } from './components/management/RolePermissions/RolePermissions';
+export { default as GroupDetails } from './components/management/GroupDetails/GroupDetails';
+export type { GroupDetailsProps } from './components/management/GroupDetails/GroupDetails';
+export { default as RoleDetails } from './components/management/RoleDetails/RoleDetails';
+export type { RoleDetailsProps } from './components/management/RoleDetails/RoleDetails';
+export { default as AgentList } from './components/management/AgentList/AgentList';
+export type { AgentListProps } from './components/management/AgentList/AgentList';
+export { default as AgentCreate } from './components/management/AgentCreate/AgentCreate';
+export type { AgentCreateProps } from './components/management/AgentCreate/AgentCreate';
+export { default as AgentDetails } from './components/management/AgentDetails/AgentDetails';
+export type { AgentDetailsProps } from './components/management/AgentDetails/AgentDetails';
+export { default as ApplicationList } from './components/management/ApplicationList/ApplicationList';
+export type { ApplicationListProps } from './components/management/ApplicationList/ApplicationList';
+export { default as ApplicationCreate } from './components/management/ApplicationCreate/ApplicationCreate';
+export type { ApplicationCreateProps } from './components/management/ApplicationCreate/ApplicationCreate';
+export { default as ApplicationDetails } from './components/management/ApplicationDetails/ApplicationDetails';
+export type { ApplicationDetailsProps } from './components/management/ApplicationDetails/ApplicationDetails';
+export { default as ProjectList } from './components/management/ProjectList/ProjectList';
+export type { ProjectListProps } from './components/management/ProjectList/ProjectList';
+export { default as ProjectCreate } from './components/management/ProjectCreate/ProjectCreate';
+export type { ProjectCreateProps } from './components/management/ProjectCreate/ProjectCreate';
+export { default as ProjectDetails } from './components/management/ProjectDetails/ProjectDetails';
+export type { ProjectDetailsProps } from './components/management/ProjectDetails/ProjectDetails';
+export { default as ProjectSwitcher } from './components/management/ProjectSwitcher/ProjectSwitcher';
+export type { ProjectSwitcherProps } from './components/management/ProjectSwitcher/ProjectSwitcher';
+export { default as OrganizationUnitList } from './components/management/OrganizationUnitList/OrganizationUnitList';
+export type { OrganizationUnitListProps } from './components/management/OrganizationUnitList/OrganizationUnitList';
+export { default as OrganizationUnitCreate } from './components/management/OrganizationUnitCreate/OrganizationUnitCreate';
+export type { OrganizationUnitCreateProps } from './components/management/OrganizationUnitCreate/OrganizationUnitCreate';
+export { default as OrganizationUnitDetails } from './components/management/OrganizationUnitDetails/OrganizationUnitDetails';
+export type { OrganizationUnitDetailsProps } from './components/management/OrganizationUnitDetails/OrganizationUnitDetails';
+export { default as SharingPolicies } from './components/management/SharingPolicies/SharingPolicies';
+export type { SharingPoliciesProps } from './components/management/SharingPolicies/SharingPolicies';
 export { default as useGrantedPermissions } from './hooks/management/useGrantedPermissions';
-export * from './admin';
+export * from './management';
 //# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,4CAA4C,CAAC;AAC/E,YAAY,EAAC,aAAa,EAAC,MAAM,4CAA4C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,8CAA8C,CAAC;AAClF,YAAY,EAAC,cAAc,EAAC,MAAM,8CAA8C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAC,WAAW,EAAC,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,2CAA2C,CAAC;AACjF,YAAY,EAAC,gBAAgB,EAAC,MAAM,2CAA2C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,uDAAuD,CAAC;AAC/F,YAAY,EAAC,kBAAkB,EAAC,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAC,OAAO,IAAI,IAAI,EAAC,MAAM,gCAAgC,CAAC;AAC/D,YAAY,EAAC,SAAS,EAAC,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAC,WAAW,EAAC,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,gDAAgD,CAAC;AACvF,YAAY,EAAC,iBAAiB,EAAC,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,4CAA4C,CAAC;AACjF,YAAY,EAAC,eAAe,EAAC,MAAM,4CAA4C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,8CAA8C,CAAC;AACpF,YAAY,EAAC,gBAAgB,EAAC,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,gBAAgB,EAAC,MAAM,wDAAwD,CAAC;AACnG,YAAY,EAAC,qBAAqB,EAAC,MAAM,wDAAwD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,+CAA+C,CAAC;AACpF,YAAY,EAAC,eAAe,EAAC,MAAM,+CAA+C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAE/F,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAI/F,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,sCAAsC,CAAC;AACzE,YAAY,EAAC,aAAa,EAAC,MAAM,sCAAsC,CAAC;AAExE,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,0CAA0C,CAAC;AAC/E,YAAY,EAAC,eAAe,EAAC,MAAM,0CAA0C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,4CAA4C,CAAC;AAClF,YAAY,EAAC,gBAAgB,EAAC,MAAM,4CAA4C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,wCAAwC,CAAC;AAC5E,YAAY,EAAC,cAAc,EAAC,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,4CAA4C,CAAC;AAClF,YAAY,EAAC,gBAAgB,EAAC,MAAM,4CAA4C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,8CAA8C,CAAC;AACrF,YAAY,EAAC,iBAAiB,EAAC,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,sCAAsC,CAAC;AACzE,YAAY,EAAC,aAAa,EAAC,MAAM,sCAAsC,CAAC;AAExE,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,0CAA0C,CAAC;AAC/E,YAAY,EAAC,eAAe,EAAC,MAAM,0CAA0C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAC,oBAAoB,EAAC,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAC,oBAAoB,EAAC,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,wCAAwC,CAAC;AAC5E,YAAY,EAAC,cAAc,EAAC,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,4CAA4C,CAAC;AAClF,YAAY,EAAC,gBAAgB,EAAC,MAAM,4CAA4C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,8CAA8C,CAAC;AACrF,YAAY,EAAC,iBAAiB,EAAC,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAC,oBAAoB,EAAC,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAC,OAAO,IAAI,iBAAiB,EAAC,MAAM,wDAAwD,CAAC;AACpG,YAAY,EAAC,sBAAsB,EAAC,MAAM,wDAAwD,CAAC;AAEnG,OAAO,EAAC,OAAO,IAAI,kBAAkB,EAAC,MAAM,0DAA0D,CAAC;AACvG,YAAY,EAAC,uBAAuB,EAAC,MAAM,0DAA0D,CAAC;AAEtG,OAAO,EAAC,OAAO,IAAI,qBAAqB,EAAC,MAAM,0CAA0C,CAAC;AAE1F,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,4CAA4C,CAAC;AAC/E,YAAY,EAAC,aAAa,EAAC,MAAM,4CAA4C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,8CAA8C,CAAC;AAClF,YAAY,EAAC,cAAc,EAAC,MAAM,8CAA8C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAC,WAAW,EAAC,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,2CAA2C,CAAC;AACjF,YAAY,EAAC,gBAAgB,EAAC,MAAM,2CAA2C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,uDAAuD,CAAC;AAC/F,YAAY,EAAC,kBAAkB,EAAC,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAC,OAAO,IAAI,IAAI,EAAC,MAAM,gCAAgC,CAAC;AAC/D,YAAY,EAAC,SAAS,EAAC,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAC,WAAW,EAAC,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,gDAAgD,CAAC;AACvF,YAAY,EAAC,iBAAiB,EAAC,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,4CAA4C,CAAC;AACjF,YAAY,EAAC,eAAe,EAAC,MAAM,4CAA4C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,8CAA8C,CAAC;AACpF,YAAY,EAAC,gBAAgB,EAAC,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,gBAAgB,EAAC,MAAM,wDAAwD,CAAC;AACnG,YAAY,EAAC,qBAAqB,EAAC,MAAM,wDAAwD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,wBAAwB,EAAC,MAAM,wEAAwE,CAAC;AAC3H,YAAY,EAAC,6BAA6B,EAAC,MAAM,wEAAwE,CAAC;AAC1H,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,sDAAsD,CAAC;AAChG,YAAY,EAAC,oBAAoB,EAAC,MAAM,sDAAsD,CAAC;AAE/F,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,+CAA+C,CAAC;AACpF,YAAY,EAAC,eAAe,EAAC,MAAM,+CAA+C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAE/F,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAI/F,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,2CAA2C,CAAC;AAC9E,YAAY,EAAC,aAAa,EAAC,MAAM,2CAA2C,CAAC;AAE7E,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,+CAA+C,CAAC;AACpF,YAAY,EAAC,eAAe,EAAC,MAAM,+CAA+C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,iDAAiD,CAAC;AACvF,YAAY,EAAC,gBAAgB,EAAC,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,6CAA6C,CAAC;AACjF,YAAY,EAAC,cAAc,EAAC,MAAM,6CAA6C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,iDAAiD,CAAC;AACvF,YAAY,EAAC,gBAAgB,EAAC,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mDAAmD,CAAC;AAC1F,YAAY,EAAC,iBAAiB,EAAC,MAAM,mDAAmD,CAAC;AAEzF,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,2CAA2C,CAAC;AAC9E,YAAY,EAAC,aAAa,EAAC,MAAM,2CAA2C,CAAC;AAE7E,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,+CAA+C,CAAC;AACpF,YAAY,EAAC,eAAe,EAAC,MAAM,+CAA+C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yDAAyD,CAAC;AACnG,YAAY,EAAC,oBAAoB,EAAC,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yDAAyD,CAAC;AACnG,YAAY,EAAC,oBAAoB,EAAC,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mDAAmD,CAAC;AAC1F,YAAY,EAAC,iBAAiB,EAAC,MAAM,mDAAmD,CAAC;AAEzF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,iDAAiD,CAAC;AACvF,YAAY,EAAC,gBAAgB,EAAC,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,6CAA6C,CAAC;AACjF,YAAY,EAAC,cAAc,EAAC,MAAM,6CAA6C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,iDAAiD,CAAC;AACvF,YAAY,EAAC,gBAAgB,EAAC,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mDAAmD,CAAC;AAC1F,YAAY,EAAC,iBAAiB,EAAC,MAAM,mDAAmD,CAAC;AAEzF,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yDAAyD,CAAC;AACnG,YAAY,EAAC,oBAAoB,EAAC,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,iBAAiB,EAAC,MAAM,6DAA6D,CAAC;AACzG,YAAY,EAAC,sBAAsB,EAAC,MAAM,6DAA6D,CAAC;AAExG,OAAO,EAAC,OAAO,IAAI,kBAAkB,EAAC,MAAM,+DAA+D,CAAC;AAC5G,YAAY,EAAC,uBAAuB,EAAC,MAAM,+DAA+D,CAAC;AAE3G,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,iDAAiD,CAAC;AACvF,YAAY,EAAC,gBAAgB,EAAC,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,qDAAqD,CAAC;AAC7F,YAAY,EAAC,kBAAkB,EAAC,MAAM,qDAAqD,CAAC;AAE5F,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAE/F,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yDAAyD,CAAC;AACnG,YAAY,EAAC,oBAAoB,EAAC,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,oBAAoB,EAAC,MAAM,mEAAmE,CAAC;AAClH,YAAY,EAAC,yBAAyB,EAAC,MAAM,mEAAmE,CAAC;AAEjH,OAAO,EAAC,OAAO,IAAI,sBAAsB,EAAC,MAAM,uEAAuE,CAAC;AACxH,YAAY,EAAC,2BAA2B,EAAC,MAAM,uEAAuE,CAAC;AAEvH,OAAO,EAAC,OAAO,IAAI,uBAAuB,EAAC,MAAM,yEAAyE,CAAC;AAC3H,YAAY,EAAC,4BAA4B,EAAC,MAAM,yEAAyE,CAAC;AAE1H,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yDAAyD,CAAC;AACnG,YAAY,EAAC,oBAAoB,EAAC,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,qBAAqB,EAAC,MAAM,0CAA0C,CAAC;AAE1F,cAAc,cAAc,CAAC"}

package/dist/client/index.js

@@ -8,30 +8,42 @@ import DeviceGrant_default from "./components/auth/DeviceGrant/DeviceGrant.js";
 import SignOutButton_default from "./components/auth/buttons/SignOutButton/SignOutButton.js";
 import User_default from "./components/account/User/User.js";
 import SignUp_default from "./components/auth/SignUp/SignUp.js";
+import VerifyAttribute_default from "./components/account/VerifyAttribute/VerifyAttribute.js";
 import UserProfile_default from "./components/account/UserProfile/UserProfile.js";
 import UserDropdown_default from "./components/account/UserDropdown/UserDropdown.js";
 import UserAvatar_default from "./components/account/UserAvatar/UserAvatar.js";
 import ChangeCredential_default from "./components/account/ChangeCredential/ChangeCredential.js";
+import OrganizationUnitSwitcher_default from "./components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher.js";
 import UserSelect_default from "./components/primitives/UserSelect/UserSelect.js";
 import AuthFlowSelect_default from "./components/primitives/AuthFlowSelect/AuthFlowSelect.js";
 import UserTypeSelect_default from "./components/primitives/UserTypeSelect/UserTypeSelect.js";
-import UserList_default from "./components/admin/UserList/UserList.js";
-import UserCreate_default from "./components/admin/UserCreate/UserCreate.js";
-import UserDetails_default from "./components/admin/UserDetails/UserDetails.js";
-import GroupList_default from "./components/admin/GroupList/GroupList.js";
-import GroupCreate_default from "./components/admin/GroupCreate/GroupCreate.js";
-import GroupMembers_default from "./components/admin/GroupMembers/GroupMembers.js";
-import RoleList_default from "./components/admin/RoleList/RoleList.js";
-import RoleCreate_default from "./components/admin/RoleCreate/RoleCreate.js";
-import RoleAssignments_default from "./components/admin/RoleAssignments/RoleAssignments.js";
-import RolePermissions_default from "./components/admin/RolePermissions/RolePermissions.js";
-import AgentList_default from "./components/admin/AgentList/AgentList.js";
-import AgentCreate_default from "./components/admin/AgentCreate/AgentCreate.js";
-import AgentDetails_default from "./components/admin/AgentDetails/AgentDetails.js";
-import ApplicationList_default from "./components/admin/ApplicationList/ApplicationList.js";
-import ApplicationCreate_default from "./components/admin/ApplicationCreate/ApplicationCreate.js";
-import ApplicationDetails_default from "./components/admin/ApplicationDetails/ApplicationDetails.js";
+import UserList_default from "./components/management/UserList/UserList.js";
+import UserCreate_default from "./components/management/UserCreate/UserCreate.js";
+import UserDetails_default from "./components/management/UserDetails/UserDetails.js";
+import GroupList_default from "./components/management/GroupList/GroupList.js";
+import GroupCreate_default from "./components/management/GroupCreate/GroupCreate.js";
+import GroupMembers_default from "./components/management/GroupMembers/GroupMembers.js";
+import RoleList_default from "./components/management/RoleList/RoleList.js";
+import RoleCreate_default from "./components/management/RoleCreate/RoleCreate.js";
+import RoleAssignments_default from "./components/management/RoleAssignments/RoleAssignments.js";
+import RolePermissions_default from "./components/management/RolePermissions/RolePermissions.js";
+import GroupDetails_default from "./components/management/GroupDetails/GroupDetails.js";
+import RoleDetails_default from "./components/management/RoleDetails/RoleDetails.js";
+import AgentList_default from "./components/management/AgentList/AgentList.js";
+import AgentCreate_default from "./components/management/AgentCreate/AgentCreate.js";
+import AgentDetails_default from "./components/management/AgentDetails/AgentDetails.js";
+import ApplicationList_default from "./components/management/ApplicationList/ApplicationList.js";
+import ApplicationCreate_default from "./components/management/ApplicationCreate/ApplicationCreate.js";
+import ApplicationDetails_default from "./components/management/ApplicationDetails/ApplicationDetails.js";
+import ProjectList_default from "./components/management/ProjectList/ProjectList.js";
+import ProjectCreate_default from "./components/management/ProjectCreate/ProjectCreate.js";
+import ProjectDetails_default from "./components/management/ProjectDetails/ProjectDetails.js";
+import ProjectSwitcher_default from "./components/management/ProjectSwitcher/ProjectSwitcher.js";
+import OrganizationUnitList_default from "./components/management/OrganizationUnitList/OrganizationUnitList.js";
+import OrganizationUnitCreate_default from "./components/management/OrganizationUnitCreate/OrganizationUnitCreate.js";
+import OrganizationUnitDetails_default from "./components/management/OrganizationUnitDetails/OrganizationUnitDetails.js";
+import SharingPolicies_default from "./components/management/SharingPolicies/SharingPolicies.js";
 import useGrantedPermissions_default from "./hooks/management/useGrantedPermissions.js";
-import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig } from "./admin.js";
+import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupDetails, BaseGroupList, BaseGroupMembers, BaseOrganizationUnitCreate, BaseOrganizationUnitDetails, BaseOrganizationUnitList, BaseProjectCreate, BaseProjectDetails, BaseProjectList, BaseProjectSwitcher, BaseRoleAssignments, BaseRoleCreate, BaseRoleDetails, BaseRoleList, BaseRolePermissions, BaseSharingPolicies, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig } from "./management.js";
 
 export {  };

package/dist/client/management.d.ts

@@ -0,0 +1,3 @@
+export { type AdminListRenderProps, BaseUserList, type BaseUserListProps, type BaseUserListRenderProps, BaseUserCreate, type BaseUserCreateProps, type BaseUserCreateRenderProps, BaseUserDetails, type BaseUserDetailsProps, type BaseUserDetailsRenderProps, BaseGroupList, type BaseGroupListProps, type BaseGroupListRenderProps, BaseGroupCreate, type BaseGroupCreateProps, type BaseGroupCreateRenderProps, BaseGroupMembers, type BaseGroupMembersProps, type BaseGroupMembersRenderProps, BaseRoleList, type BaseRoleListProps, type BaseRoleListRenderProps, BaseRoleCreate, type BaseRoleCreateProps, type BaseRoleCreateRenderProps, BaseRoleAssignments, type BaseRoleAssignmentsProps, type BaseRoleAssignmentsRenderProps, BaseRolePermissions, type BaseRolePermissionsProps, type BaseRolePermissionsRenderProps, type RolePermissionChange, type RolePermissionResourceServer, BaseGroupDetails, type BaseGroupDetailsProps, type BaseGroupDetailsRenderProps, BaseRoleDetails, type BaseRoleDetailsProps, type BaseRoleDetailsRenderProps, BaseAgentList, type BaseAgentListProps, type BaseAgentListRenderProps, BaseAgentCreate, type BaseAgentCreateProps, type BaseAgentCreateRenderProps, BaseAgentDetails, type BaseAgentDetailsProps, type BaseAgentDetailsRenderProps, BaseApplicationList, type BaseApplicationListProps, type BaseApplicationListRenderProps, BaseApplicationCreate, type BaseApplicationCreateProps, type BaseApplicationCreateRenderProps, type ApplicationCreateSubmission, BaseApplicationDetails, type BaseApplicationDetailsProps, type BaseApplicationDetailsRenderProps, type ApplicationUpdateSubmission, type ApplicationFormValues, type ApplicationTextField, BaseProjectList, type BaseProjectListProps, type BaseProjectListRenderProps, BaseProjectCreate, type BaseProjectCreateProps, type BaseProjectCreateRenderProps, type ProjectCreateSubmission, type ProjectCreateField, BaseProjectDetails, type BaseProjectDetailsProps, type BaseProjectDetailsRenderProps, type ProjectUpdateSubmission, BaseProjectSwitcher, type BaseProjectSwitcherProps, type BaseProjectSwitcherRenderProps, BaseOrganizationUnitList, type BaseOrganizationUnitListProps, type BaseOrganizationUnitListRenderProps, BaseOrganizationUnitCreate, type BaseOrganizationUnitCreateProps, type BaseOrganizationUnitCreateRenderProps, type OrganizationUnitCreateSubmission, type OrganizationUnitCreateField, BaseOrganizationUnitDetails, type BaseOrganizationUnitDetailsProps, type BaseOrganizationUnitDetailsRenderProps, type OrganizationUnitUpdateSubmission, type OrganizationUnitContents, BaseSharingPolicies, type BaseSharingPoliciesProps, type BaseSharingPoliciesRenderProps, } from '@thunderid/react';
+export { useManagementRequestConfig, type ManagementCollection, type GrantedPermissions } from '@thunderid/react';
+//# sourceMappingURL=management.d.ts.map

package/dist/client/management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management.d.ts","sourceRoot":"","sources":["../../src/client/management.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,oBAAoB,EACzB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACtC,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,wBAAwB,EACxB,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EACxC,0BAA0B,EAC1B,KAAK,+BAA+B,EACpC,KAAK,qCAAqC,EAC1C,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,2BAA2B,EAC3B,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC7B,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,GACpC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAC,0BAA0B,EAAE,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC"}

package/dist/client/management.js

@@ -0,0 +1,6 @@
+'use client';
+
+
+import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupDetails, BaseGroupList, BaseGroupMembers, BaseOrganizationUnitCreate, BaseOrganizationUnitDetails, BaseOrganizationUnitList, BaseProjectCreate, BaseProjectDetails, BaseProjectList, BaseProjectSwitcher, BaseRoleAssignments, BaseRoleCreate, BaseRoleDetails, BaseRoleList, BaseRolePermissions, BaseSharingPolicies, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig } from "@thunderid/react";
+
+export { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupDetails, BaseGroupList, BaseGroupMembers, BaseOrganizationUnitCreate, BaseOrganizationUnitDetails, BaseOrganizationUnitList, BaseProjectCreate, BaseProjectDetails, BaseProjectList, BaseProjectSwitcher, BaseRoleAssignments, BaseRoleCreate, BaseRoleDetails, BaseRoleList, BaseRolePermissions, BaseSharingPolicies, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig };

package/dist/index.js

@@ -15,31 +15,43 @@ import DeviceGrant_default from "./client/components/auth/DeviceGrant/DeviceGran
 import SignOutButton_default from "./client/components/auth/buttons/SignOutButton/SignOutButton.js";
 import User_default from "./client/components/account/User/User.js";
 import SignUp_default from "./client/components/auth/SignUp/SignUp.js";
+import VerifyAttribute_default from "./client/components/account/VerifyAttribute/VerifyAttribute.js";
 import UserProfile_default from "./client/components/account/UserProfile/UserProfile.js";
 import UserDropdown_default from "./client/components/account/UserDropdown/UserDropdown.js";
 import UserAvatar_default from "./client/components/account/UserAvatar/UserAvatar.js";
 import ChangeCredential_default from "./client/components/account/ChangeCredential/ChangeCredential.js";
+import OrganizationUnitSwitcher_default from "./client/components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher.js";
 import UserSelect_default from "./client/components/primitives/UserSelect/UserSelect.js";
 import AuthFlowSelect_default from "./client/components/primitives/AuthFlowSelect/AuthFlowSelect.js";
 import UserTypeSelect_default from "./client/components/primitives/UserTypeSelect/UserTypeSelect.js";
-import UserList_default from "./client/components/admin/UserList/UserList.js";
-import UserCreate_default from "./client/components/admin/UserCreate/UserCreate.js";
-import UserDetails_default from "./client/components/admin/UserDetails/UserDetails.js";
-import GroupList_default from "./client/components/admin/GroupList/GroupList.js";
-import GroupCreate_default from "./client/components/admin/GroupCreate/GroupCreate.js";
-import GroupMembers_default from "./client/components/admin/GroupMembers/GroupMembers.js";
-import RoleList_default from "./client/components/admin/RoleList/RoleList.js";
-import RoleCreate_default from "./client/components/admin/RoleCreate/RoleCreate.js";
-import RoleAssignments_default from "./client/components/admin/RoleAssignments/RoleAssignments.js";
-import RolePermissions_default from "./client/components/admin/RolePermissions/RolePermissions.js";
-import AgentList_default from "./client/components/admin/AgentList/AgentList.js";
-import AgentCreate_default from "./client/components/admin/AgentCreate/AgentCreate.js";
-import AgentDetails_default from "./client/components/admin/AgentDetails/AgentDetails.js";
-import ApplicationList_default from "./client/components/admin/ApplicationList/ApplicationList.js";
-import ApplicationCreate_default from "./client/components/admin/ApplicationCreate/ApplicationCreate.js";
-import ApplicationDetails_default from "./client/components/admin/ApplicationDetails/ApplicationDetails.js";
+import UserList_default from "./client/components/management/UserList/UserList.js";
+import UserCreate_default from "./client/components/management/UserCreate/UserCreate.js";
+import UserDetails_default from "./client/components/management/UserDetails/UserDetails.js";
+import GroupList_default from "./client/components/management/GroupList/GroupList.js";
+import GroupCreate_default from "./client/components/management/GroupCreate/GroupCreate.js";
+import GroupMembers_default from "./client/components/management/GroupMembers/GroupMembers.js";
+import RoleList_default from "./client/components/management/RoleList/RoleList.js";
+import RoleCreate_default from "./client/components/management/RoleCreate/RoleCreate.js";
+import RoleAssignments_default from "./client/components/management/RoleAssignments/RoleAssignments.js";
+import RolePermissions_default from "./client/components/management/RolePermissions/RolePermissions.js";
+import GroupDetails_default from "./client/components/management/GroupDetails/GroupDetails.js";
+import RoleDetails_default from "./client/components/management/RoleDetails/RoleDetails.js";
+import AgentList_default from "./client/components/management/AgentList/AgentList.js";
+import AgentCreate_default from "./client/components/management/AgentCreate/AgentCreate.js";
+import AgentDetails_default from "./client/components/management/AgentDetails/AgentDetails.js";
+import ApplicationList_default from "./client/components/management/ApplicationList/ApplicationList.js";
+import ApplicationCreate_default from "./client/components/management/ApplicationCreate/ApplicationCreate.js";
+import ApplicationDetails_default from "./client/components/management/ApplicationDetails/ApplicationDetails.js";
+import ProjectList_default from "./client/components/management/ProjectList/ProjectList.js";
+import ProjectCreate_default from "./client/components/management/ProjectCreate/ProjectCreate.js";
+import ProjectDetails_default from "./client/components/management/ProjectDetails/ProjectDetails.js";
+import ProjectSwitcher_default from "./client/components/management/ProjectSwitcher/ProjectSwitcher.js";
+import OrganizationUnitList_default from "./client/components/management/OrganizationUnitList/OrganizationUnitList.js";
+import OrganizationUnitCreate_default from "./client/components/management/OrganizationUnitCreate/OrganizationUnitCreate.js";
+import OrganizationUnitDetails_default from "./client/components/management/OrganizationUnitDetails/OrganizationUnitDetails.js";
+import SharingPolicies_default from "./client/components/management/SharingPolicies/SharingPolicies.js";
 import useGrantedPermissions_default from "./client/hooks/management/useGrantedPermissions.js";
-import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig } from "./client/admin.js";
+import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupDetails, BaseGroupList, BaseGroupMembers, BaseOrganizationUnitCreate, BaseOrganizationUnitDetails, BaseOrganizationUnitList, BaseProjectCreate, BaseProjectDetails, BaseProjectList, BaseProjectSwitcher, BaseRoleAssignments, BaseRoleCreate, BaseRoleDetails, BaseRoleList, BaseRolePermissions, BaseSharingPolicies, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig } from "./client/management.js";
 import "./client/index.js";
 
-export { AgentCreate_default as AgentCreate, AgentDetails_default as AgentDetails, AgentList_default as AgentList, ApplicationCreate_default as ApplicationCreate, ApplicationDetails_default as ApplicationDetails, ApplicationList_default as ApplicationList, AuthFlowSelect_default as AuthFlowSelect, BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, ChangeCredential_default as ChangeCredential, DeviceGrant_default as DeviceGrant, GroupCreate_default as GroupCreate, GroupList_default as GroupList, GroupMembers_default as GroupMembers, RoleAssignments_default as RoleAssignments, RoleCreate_default as RoleCreate, RoleList_default as RoleList, RolePermissions_default as RolePermissions, SignIn_default as SignIn, SignInButton_default as SignInButton, SignOutButton_default as SignOutButton, SignUp_default as SignUp, SignUpButton_default as SignUpButton, SignedIn_default as SignedIn, SignedOut_default as SignedOut, ThunderIDNextClient_default as ThunderIDNext, ThunderIDProvider_default as ThunderIDProvider, User_default as User, UserAvatar_default as UserAvatar, UserCreate_default as UserCreate, UserDetails_default as UserDetails, UserDropdown_default as UserDropdown, UserList_default as UserList, UserProfile_default as UserProfile, UserSelect_default as UserSelect, UserTypeSelect_default as UserTypeSelect, backchannelLogout_default as backchannelLogout, createRouteMatcher_default as createRouteMatcher, removeChunkedCookieFromHeader, replaceChunkedCookieInHeader, thunderIDProxy_default as thunderIDProxy, thunderid_default as thunderid, useGrantedPermissions_default as useGrantedPermissions, useManagementRequestConfig, useThunderID_default as useThunderID };
+export { AgentCreate_default as AgentCreate, AgentDetails_default as AgentDetails, AgentList_default as AgentList, ApplicationCreate_default as ApplicationCreate, ApplicationDetails_default as ApplicationDetails, ApplicationList_default as ApplicationList, AuthFlowSelect_default as AuthFlowSelect, BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupDetails, BaseGroupList, BaseGroupMembers, BaseOrganizationUnitCreate, BaseOrganizationUnitDetails, BaseOrganizationUnitList, BaseProjectCreate, BaseProjectDetails, BaseProjectList, BaseProjectSwitcher, BaseRoleAssignments, BaseRoleCreate, BaseRoleDetails, BaseRoleList, BaseRolePermissions, BaseSharingPolicies, BaseUserCreate, BaseUserDetails, BaseUserList, ChangeCredential_default as ChangeCredential, DeviceGrant_default as DeviceGrant, GroupCreate_default as GroupCreate, GroupDetails_default as GroupDetails, GroupList_default as GroupList, GroupMembers_default as GroupMembers, OrganizationUnitCreate_default as OrganizationUnitCreate, OrganizationUnitDetails_default as OrganizationUnitDetails, OrganizationUnitList_default as OrganizationUnitList, OrganizationUnitSwitcher_default as OrganizationUnitSwitcher, ProjectCreate_default as ProjectCreate, ProjectDetails_default as ProjectDetails, ProjectList_default as ProjectList, ProjectSwitcher_default as ProjectSwitcher, RoleAssignments_default as RoleAssignments, RoleCreate_default as RoleCreate, RoleDetails_default as RoleDetails, RoleList_default as RoleList, RolePermissions_default as RolePermissions, SharingPolicies_default as SharingPolicies, SignIn_default as SignIn, SignInButton_default as SignInButton, SignOutButton_default as SignOutButton, SignUp_default as SignUp, SignUpButton_default as SignUpButton, SignedIn_default as SignedIn, SignedOut_default as SignedOut, ThunderIDNextClient_default as ThunderIDNext, ThunderIDProvider_default as ThunderIDProvider, User_default as User, UserAvatar_default as UserAvatar, UserCreate_default as UserCreate, UserDetails_default as UserDetails, UserDropdown_default as UserDropdown, UserList_default as UserList, UserProfile_default as UserProfile, UserSelect_default as UserSelect, UserTypeSelect_default as UserTypeSelect, VerifyAttribute_default as VerifyAttribute, backchannelLogout_default as backchannelLogout, createRouteMatcher_default as createRouteMatcher, removeChunkedCookieFromHeader, replaceChunkedCookieInHeader, thunderIDProxy_default as thunderIDProxy, thunderid_default as thunderid, useGrantedPermissions_default as useGrantedPermissions, useManagementRequestConfig, useThunderID_default as useThunderID };

package/dist/server/actions/account/getAccessibleOrganizationUnitsAction.d.ts

@@ -0,0 +1,20 @@
+import { AccessibleOrganizationUnitList, AccessibleOrganizationUnitsOptions } from '@thunderid/node';
+export type GetAccessibleOrganizationUnitsActionResult = {
+    data: AccessibleOrganizationUnitList;
+    success: true;
+} | {
+    code?: string;
+    statusCode?: number;
+    success: false;
+};
+/**
+ * Lists the organization units the signed-in user can access (`/users/me/ous`) with the session's
+ * access token, which stays on the server. Only `scope`, `limit` and `offset` are taken from the caller;
+ * the session is the one in the request's cookie.
+ *
+ * Failures are returned rather than thrown, so the error crosses the server action boundary with its
+ * status and code, and without the server's message.
+ */
+declare const getAccessibleOrganizationUnitsAction: ({ limit, offset, scope, }?: AccessibleOrganizationUnitsOptions) => Promise<GetAccessibleOrganizationUnitsActionResult>;
+export default getAccessibleOrganizationUnitsAction;
+//# sourceMappingURL=getAccessibleOrganizationUnitsAction.d.ts.map

package/dist/server/actions/account/getAccessibleOrganizationUnitsAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAccessibleOrganizationUnitsAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/getAccessibleOrganizationUnitsAction.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,EAInC,MAAM,iBAAiB,CAAC;AAKzB,MAAM,MAAM,0CAA0C,GAClD;IAAC,IAAI,EAAE,8BAA8B,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAC,GACrD;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAC,CAAC;AAEzD;;;;;;;GAOG;AACH,QAAA,MAAM,oCAAoC,GAAU,4BAIjD,kCAAuC,KAAG,OAAO,CAAC,0CAA0C,CAgC9F,CAAC;AAEF,eAAe,oCAAoC,CAAC"}

package/dist/server/actions/account/getAccessibleOrganizationUnitsAction.js

@@ -0,0 +1,51 @@
+'use server';
+
+
+import getClient_default from "../../getClient.js";
+import getAccessToken_default from "../getAccessToken.js";
+import { ThunderIDAPIError, getAccessibleOrganizationUnits, resolveResourceEndpoint } from "@thunderid/node";
+
+//#region src/server/actions/account/getAccessibleOrganizationUnitsAction.ts
+/**
+* Lists the organization units the signed-in user can access (`/users/me/ous`) with the session's
+* access token, which stays on the server. Only `scope`, `limit` and `offset` are taken from the caller;
+* the session is the one in the request's cookie.
+*
+* Failures are returned rather than thrown, so the error crosses the server action boundary with its
+* status and code, and without the server's message.
+*/
+const getAccessibleOrganizationUnitsAction = async ({ limit, offset, scope } = {}) => {
+	const accessToken = await getAccessToken_default();
+	if (!accessToken) return {
+		statusCode: 401,
+		success: false
+	};
+	try {
+		const client = getClient_default();
+		if (!client.isInitialized) await client.initialize({});
+		const config = await client.getConfiguration();
+		return {
+			data: await getAccessibleOrganizationUnits({
+				baseUrl: config.baseUrl,
+				headers: { Authorization: `Bearer ${accessToken}` },
+				limit,
+				offset,
+				scope: scope === "siblings" ? "siblings" : void 0,
+				url: resolveResourceEndpoint("usersMeOrganizationUnits", config)
+			}),
+			success: true
+		};
+	} catch (error) {
+		if (error instanceof ThunderIDAPIError) return {
+			code: error.code,
+			statusCode: error.statusCode,
+			success: false
+		};
+		return { success: false };
+	}
+};
+var getAccessibleOrganizationUnitsAction_default = getAccessibleOrganizationUnitsAction;
+
+//#endregion
+export { getAccessibleOrganizationUnitsAction_default as default };
+//# sourceMappingURL=getAccessibleOrganizationUnitsAction.js.map

package/dist/server/actions/account/getAccessibleOrganizationUnitsAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAccessibleOrganizationUnitsAction.js","names":["accessToken: string | undefined","getAccessToken","getClient","config: ThunderIDNextConfig"],"sources":["../../../../src/server/actions/account/getAccessibleOrganizationUnitsAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {\n  AccessibleOrganizationUnitList,\n  AccessibleOrganizationUnitsOptions,\n  ThunderIDAPIError,\n  getAccessibleOrganizationUnits,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDNextConfig} from '../../../models/config';\nimport getClient from '../../getClient';\nimport getAccessToken from '../getAccessToken';\n\nexport type GetAccessibleOrganizationUnitsActionResult =\n  | {data: AccessibleOrganizationUnitList; success: true}\n  | {code?: string; statusCode?: number; success: false};\n\n/**\n * Lists the organization units the signed-in user can access (`/users/me/ous`) with the session's\n * access token, which stays on the server. Only `scope`, `limit` and `offset` are taken from the caller;\n * the session is the one in the request's cookie.\n *\n * Failures are returned rather than thrown, so the error crosses the server action boundary with its\n * status and code, and without the server's message.\n */\nconst getAccessibleOrganizationUnitsAction = async ({\n  limit,\n  offset,\n  scope,\n}: AccessibleOrganizationUnitsOptions = {}): Promise<GetAccessibleOrganizationUnitsActionResult> => {\n  const accessToken: string | undefined = await getAccessToken();\n\n  if (!accessToken) {\n    return {statusCode: 401, success: false};\n  }\n\n  try {\n    const client = getClient();\n\n    if (!client.isInitialized) {\n      await client.initialize({} as ThunderIDNextConfig);\n    }\n\n    const config: ThunderIDNextConfig = await client.getConfiguration();\n    const data: AccessibleOrganizationUnitList = await getAccessibleOrganizationUnits({\n      baseUrl: config.baseUrl,\n      headers: {Authorization: `Bearer ${accessToken}`},\n      limit,\n      offset,\n      scope: scope === 'siblings' ? 'siblings' : undefined,\n      url: resolveResourceEndpoint('usersMeOrganizationUnits', config),\n    });\n\n    return {data, success: true};\n  } catch (error) {\n    if (error instanceof ThunderIDAPIError) {\n      return {code: error.code, statusCode: error.statusCode, success: false};\n    }\n\n    return {success: false};\n  }\n};\n\nexport default getAccessibleOrganizationUnitsAction;\n"],"mappings":";;;;;;;;;;;;;;;;AA4BA,MAAM,uCAAuC,OAAO,EAClD,OACA,QACA,UACsC,EAAE,KAA0D;CAClG,MAAMA,cAAkC,MAAMC,wBAAgB;AAE9D,KAAI,CAAC,YACH,QAAO;EAAC,YAAY;EAAK,SAAS;EAAM;AAG1C,KAAI;EACF,MAAM,SAASC,mBAAW;AAE1B,MAAI,CAAC,OAAO,cACV,OAAM,OAAO,WAAW,EAAE,CAAwB;EAGpD,MAAMC,SAA8B,MAAM,OAAO,kBAAkB;AAUnE,SAAO;GAAC,MATqC,MAAM,+BAA+B;IAChF,SAAS,OAAO;IAChB,SAAS,EAAC,eAAe,UAAU,eAAc;IACjD;IACA;IACA,OAAO,UAAU,aAAa,aAAa;IAC3C,KAAK,wBAAwB,4BAA4B,OAAO;IACjE,CAAC;GAEY,SAAS;GAAK;UACrB,OAAO;AACd,MAAI,iBAAiB,kBACnB,QAAO;GAAC,MAAM,MAAM;GAAM,YAAY,MAAM;GAAY,SAAS;GAAM;AAGzE,SAAO,EAAC,SAAS,OAAM;;;AAI3B,mDAAe"}

package/dist/server/actions/account/getCurrentOrganizationUnitAction.d.ts

@@ -0,0 +1,10 @@
+import { CurrentOrganizationUnit } from '@thunderid/node';
+/**
+ * Reads the organization unit the signed-in session was issued for from the `ouId`, `ouHandle` and
+ * `ouName` claims of the session's token, or `null` when they are absent (an access token carries
+ * `ouId` only when the application's token configuration asks for it). For display only, never for
+ * an authorization decision.
+ */
+declare const getCurrentOrganizationUnitAction: () => Promise<CurrentOrganizationUnit | null>;
+export default getCurrentOrganizationUnitAction;
+//# sourceMappingURL=getCurrentOrganizationUnitAction.d.ts.map

package/dist/server/actions/account/getCurrentOrganizationUnitAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCurrentOrganizationUnitAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/getCurrentOrganizationUnitAction.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,uBAAuB,EAAuC,MAAM,iBAAiB,CAAC;AAI9F;;;;;GAKG;AACH,QAAA,MAAM,gCAAgC,QAAa,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAYxF,CAAC;AAEF,eAAe,gCAAgC,CAAC"}

package/dist/server/actions/account/getCurrentOrganizationUnitAction.js

@@ -0,0 +1,28 @@
+'use server';
+
+
+import getAccessToken_default from "../getAccessToken.js";
+import { getCurrentOrganizationUnitFromClaims } from "@thunderid/node";
+import { decodeJwt } from "jose";
+
+//#region src/server/actions/account/getCurrentOrganizationUnitAction.ts
+/**
+* Reads the organization unit the signed-in session was issued for from the `ouId`, `ouHandle` and
+* `ouName` claims of the session's token, or `null` when they are absent (an access token carries
+* `ouId` only when the application's token configuration asks for it). For display only, never for
+* an authorization decision.
+*/
+const getCurrentOrganizationUnitAction = async () => {
+	const accessToken = await getAccessToken_default();
+	if (!accessToken) return null;
+	try {
+		return getCurrentOrganizationUnitFromClaims(decodeJwt(accessToken));
+	} catch {
+		return null;
+	}
+};
+var getCurrentOrganizationUnitAction_default = getCurrentOrganizationUnitAction;
+
+//#endregion
+export { getCurrentOrganizationUnitAction_default as default };
+//# sourceMappingURL=getCurrentOrganizationUnitAction.js.map

package/dist/server/actions/account/getCurrentOrganizationUnitAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCurrentOrganizationUnitAction.js","names":["accessToken: string | undefined","getAccessToken"],"sources":["../../../../src/server/actions/account/getCurrentOrganizationUnitAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {CurrentOrganizationUnit, getCurrentOrganizationUnitFromClaims} from '@thunderid/node';\nimport {decodeJwt} from 'jose';\nimport getAccessToken from '../getAccessToken';\n\n/**\n * Reads the organization unit the signed-in session was issued for from the `ouId`, `ouHandle` and\n * `ouName` claims of the session's token, or `null` when they are absent (an access token carries\n * `ouId` only when the application's token configuration asks for it). For display only, never for\n * an authorization decision.\n */\nconst getCurrentOrganizationUnitAction = async (): Promise<CurrentOrganizationUnit | null> => {\n  const accessToken: string | undefined = await getAccessToken();\n\n  if (!accessToken) {\n    return null;\n  }\n\n  try {\n    return getCurrentOrganizationUnitFromClaims(decodeJwt(accessToken) as Record<string, unknown>);\n  } catch {\n    return null;\n  }\n};\n\nexport default getCurrentOrganizationUnitAction;\n"],"mappings":";;;;;;;;;;;;;;AAeA,MAAM,mCAAmC,YAAqD;CAC5F,MAAMA,cAAkC,MAAMC,wBAAgB;AAE9D,KAAI,CAAC,YACH,QAAO;AAGT,KAAI;AACF,SAAO,qCAAqC,UAAU,YAAY,CAA4B;SACxF;AACN,SAAO;;;AAIX,+CAAe"}

package/dist/server/actions/auth/executeSelfFlowAction.d.ts

@@ -0,0 +1,20 @@
+import { EmbeddedSelfFlowResponse } from '@thunderid/node';
+export type ExecuteSelfFlowActionResult = {
+    data: EmbeddedSelfFlowResponse;
+    success: true;
+} | {
+    statusCode?: number;
+    success: false;
+};
+/**
+ * Executes one step of a `SELF` flow, such as self attribute verification, for the signed-in
+ * user, with the access token of the server-held session. The request carries no session ID, token
+ * or user ID: the session comes from the request cookie, and only the fields of a step are forwarded.
+ * A new flow must be a `SELF` flow named by its handle.
+ *
+ * Never throws across the server action boundary. A failure carries only its HTTP status, never the
+ * reply of the server, which the browser reports as a refusal.
+ */
+declare const executeSelfFlowAction: (request: unknown) => Promise<ExecuteSelfFlowActionResult>;
+export default executeSelfFlowAction;
+//# sourceMappingURL=executeSelfFlowAction.d.ts.map

package/dist/server/actions/auth/executeSelfFlowAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeSelfFlowAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/auth/executeSelfFlowAction.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,wBAAwB,EAIzB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,MAAM,2BAA2B,GACnC;IAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAC,GAC/C;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAC,CAAC;AAE1C;;;;;;;;GAQG;AACH,QAAA,MAAM,qBAAqB,GAAU,SAAS,OAAO,KAAG,OAAO,CAAC,2BAA2B,CAsB1F,CAAC;AAEF,eAAe,qBAAqB,CAAC"}