@thunderid/nextjs 1.12.0 → 1.14.0

package/dist/server/actions/auth/executeSelfFlowAction.js

@@ -0,0 +1,45 @@
+'use server';
+
+
+import getSessionId_default from "../getSessionId.js";
+import getClient_default from "../../getClient.js";
+import { ThunderIDAPIError, parseSelfFlowRequest } from "@thunderid/node";
+
+//#region src/server/actions/auth/executeSelfFlowAction.ts
+/**
+* Executes one step of a `SELF` flow, such as self attribute verification, for the signed-in
+* user, with the access token of the server-held session. The request carries no session ID, token
+* or user ID: the session comes from the request cookie, and only the fields of a step are forwarded.
+* A new flow must be a `SELF` flow named by its handle.
+*
+* Never throws across the server action boundary. A failure carries only its HTTP status, never the
+* reply of the server, which the browser reports as a refusal.
+*/
+const executeSelfFlowAction = async (request) => {
+	const sessionId = await getSessionId_default();
+	if (!sessionId) return {
+		statusCode: 401,
+		success: false
+	};
+	const checked = parseSelfFlowRequest(request);
+	if ("invalid" in checked) return {
+		statusCode: 400,
+		success: false
+	};
+	try {
+		return {
+			data: await getClient_default().executeEmbeddedSelfFlow(checked.request, sessionId),
+			success: true
+		};
+	} catch (error) {
+		return error instanceof ThunderIDAPIError && error.statusCode ? {
+			statusCode: error.statusCode,
+			success: false
+		} : { success: false };
+	}
+};
+var executeSelfFlowAction_default = executeSelfFlowAction;
+
+//#endregion
+export { executeSelfFlowAction_default as default };
+//# sourceMappingURL=executeSelfFlowAction.js.map

package/dist/server/actions/auth/executeSelfFlowAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeSelfFlowAction.js","names":["sessionId: string | undefined","getSessionId","checked: SelfFlowRequestParseResult","getClient"],"sources":["../../../../src/server/actions/auth/executeSelfFlowAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {\n  EmbeddedSelfFlowResponse,\n  SelfFlowRequestParseResult,\n  ThunderIDAPIError,\n  parseSelfFlowRequest,\n} from '@thunderid/node';\nimport getClient from '../../getClient';\nimport getSessionId from '../getSessionId';\n\nexport type ExecuteSelfFlowActionResult =\n  | {data: EmbeddedSelfFlowResponse; success: true}\n  | {statusCode?: number; success: false};\n\n/**\n * Executes one step of a `SELF` flow, such as self attribute verification, for the signed-in\n * user, with the access token of the server-held session. The request carries no session ID, token\n * or user ID: the session comes from the request cookie, and only the fields of a step are forwarded.\n * A new flow must be a `SELF` flow named by its handle.\n *\n * Never throws across the server action boundary. A failure carries only its HTTP status, never the\n * reply of the server, which the browser reports as a refusal.\n */\nconst executeSelfFlowAction = async (request: unknown): Promise<ExecuteSelfFlowActionResult> => {\n  const sessionId: string | undefined = await getSessionId();\n\n  if (!sessionId) {\n    return {statusCode: 401, success: false};\n  }\n\n  const checked: SelfFlowRequestParseResult = parseSelfFlowRequest(request);\n\n  if ('invalid' in checked) {\n    return {statusCode: 400, success: false};\n  }\n\n  try {\n    const data: EmbeddedSelfFlowResponse = await getClient().executeEmbeddedSelfFlow(checked.request, sessionId);\n\n    return {data, success: true};\n  } catch (error) {\n    return error instanceof ThunderIDAPIError && error.statusCode\n      ? {statusCode: error.statusCode, success: false}\n      : {success: false};\n  }\n};\n\nexport default executeSelfFlowAction;\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,MAAM,wBAAwB,OAAO,YAA2D;CAC9F,MAAMA,YAAgC,MAAMC,sBAAc;AAE1D,KAAI,CAAC,UACH,QAAO;EAAC,YAAY;EAAK,SAAS;EAAM;CAG1C,MAAMC,UAAsC,qBAAqB,QAAQ;AAEzE,KAAI,aAAa,QACf,QAAO;EAAC,YAAY;EAAK,SAAS;EAAM;AAG1C,KAAI;AAGF,SAAO;GAAC,MAF+B,MAAMC,mBAAW,CAAC,wBAAwB,QAAQ,SAAS,UAAU;GAE9F,SAAS;GAAK;UACrB,OAAO;AACd,SAAO,iBAAiB,qBAAqB,MAAM,aAC/C;GAAC,YAAY,MAAM;GAAY,SAAS;GAAM,GAC9C,EAAC,SAAS,OAAM;;;AAIxB,oCAAe"}

package/dist/server/actions/auth/switchOrganizationUnitAction.d.ts

@@ -0,0 +1,30 @@
+export type SwitchOrganizationUnitActionResult = {
+    data: {
+        signInUrl?: string;
+        switched?: boolean;
+    };
+    success: true;
+} | {
+    code: string;
+    statusCode?: number;
+    success: false;
+};
+/**
+ * Starts a switch of the signed-in session to the organization unit `organizationUnitId`.
+ *
+ * - Redirect mode returns the unit's authorization URL (`{baseUrl}/ou/{ouId}/oauth2/authorize`) to send
+ *   the browser to, and marks the session so the OAuth callback redeems the code for it: the code is
+ *   redeemed at the unit's token endpoint and replaces the session. With `redirect: false` it fails
+ *   with `interaction_required` instead, since a server cannot switch silently.
+ * - Embedded mode starts an `AUTHENTICATION` flow with `ouId`. When the SSO session is reused the flow
+ *   completes at once and its assertion replaces the session cookie; a flow that needs input fails
+ *   with `interaction_required`.
+ *
+ * The previous session stays as it was on any failure. The error code is one of
+ * `OrganizationUnitSwitchErrorCodes`.
+ */
+declare const switchOrganizationUnitAction: (organizationUnitId: string, options?: {
+    redirect?: boolean;
+}) => Promise<SwitchOrganizationUnitActionResult>;
+export default switchOrganizationUnitAction;
+//# sourceMappingURL=switchOrganizationUnitAction.d.ts.map

package/dist/server/actions/auth/switchOrganizationUnitAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"switchOrganizationUnitAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/auth/switchOrganizationUnitAction.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,kCAAkC,GAC1C;IAAC,IAAI,EAAE;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAC,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAC,GAC/D;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAC,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,4BAA4B,GAChC,oBAAoB,MAAM,EAC1B,UAAS;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAM,KACjC,OAAO,CAAC,kCAAkC,CA8D5C,CAAC;AAEF,eAAe,4BAA4B,CAAC"}

package/dist/server/actions/auth/switchOrganizationUnitAction.js

@@ -0,0 +1,82 @@
+'use server';
+
+
+import SessionManager_default from "../../../utils/SessionManager.js";
+import getSessionId_default from "../getSessionId.js";
+import getClient_default from "../../getClient.js";
+import signInAction_default from "./signInAction.js";
+import { EmbeddedFlowType, OrganizationUnitSwitchErrorCodes } from "@thunderid/node";
+import { cookies } from "next/headers";
+
+//#region src/server/actions/auth/switchOrganizationUnitAction.ts
+/**
+* Starts a switch of the signed-in session to the organization unit `organizationUnitId`.
+*
+* - Redirect mode returns the unit's authorization URL (`{baseUrl}/ou/{ouId}/oauth2/authorize`) to send
+*   the browser to, and marks the session so the OAuth callback redeems the code for it: the code is
+*   redeemed at the unit's token endpoint and replaces the session. With `redirect: false` it fails
+*   with `interaction_required` instead, since a server cannot switch silently.
+* - Embedded mode starts an `AUTHENTICATION` flow with `ouId`. When the SSO session is reused the flow
+*   completes at once and its assertion replaces the session cookie; a flow that needs input fails
+*   with `interaction_required`.
+*
+* The previous session stays as it was on any failure. The error code is one of
+* `OrganizationUnitSwitchErrorCodes`.
+*/
+const switchOrganizationUnitAction = async (organizationUnitId, options = {}) => {
+	if (typeof organizationUnitId !== "string" || organizationUnitId.trim() === "") return {
+		code: OrganizationUnitSwitchErrorCodes.InvalidOrganizationUnit,
+		statusCode: 400,
+		success: false
+	};
+	const sessionId = await getSessionId_default();
+	if (!sessionId) return {
+		code: OrganizationUnitSwitchErrorCodes.Failed,
+		statusCode: 401,
+		success: false
+	};
+	try {
+		const client = getClient_default();
+		if (!client.isInitialized) await client.initialize({});
+		const config = await client.getConfiguration();
+		if (config.mode === "embedded") {
+			const result = await signInAction_default({
+				applicationId: config.applicationId,
+				flowType: EmbeddedFlowType.Authentication,
+				ouId: organizationUnitId
+			});
+			if (result.success && result.data?.afterSignInUrl) return {
+				data: { switched: true },
+				success: true
+			};
+			if (result.success) return {
+				code: OrganizationUnitSwitchErrorCodes.InteractionRequired,
+				success: false
+			};
+			return {
+				code: (result.error ?? "").includes("FES-1023") ? OrganizationUnitSwitchErrorCodes.UnauthorizedClient : OrganizationUnitSwitchErrorCodes.Failed,
+				success: false
+			};
+		}
+		if (options.redirect === false) return {
+			code: OrganizationUnitSwitchErrorCodes.InteractionRequired,
+			success: false
+		};
+		const signInUrl = await client.getAuthorizeRequestUrl({ organizationUnitId }, sessionId);
+		(await cookies()).set(SessionManager_default.getTempSessionCookieName(), await SessionManager_default.createTempSession(sessionId), SessionManager_default.getTempSessionCookieOptions());
+		return {
+			data: { signInUrl },
+			success: true
+		};
+	} catch {
+		return {
+			code: OrganizationUnitSwitchErrorCodes.Failed,
+			success: false
+		};
+	}
+};
+var switchOrganizationUnitAction_default = switchOrganizationUnitAction;
+
+//#endregion
+export { switchOrganizationUnitAction_default as default };
+//# sourceMappingURL=switchOrganizationUnitAction.js.map

package/dist/server/actions/auth/switchOrganizationUnitAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"switchOrganizationUnitAction.js","names":["sessionId: string | undefined","getSessionId","getClient","config: ThunderIDNextConfig","result: Awaited<ReturnType<typeof signInAction>>","signInAction","signInUrl: string","SessionManager"],"sources":["../../../../src/server/actions/auth/switchOrganizationUnitAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {EmbeddedFlowType, OrganizationUnitSwitchErrorCodes} from '@thunderid/node';\nimport {cookies} from 'next/headers';\nimport signInAction from './signInAction';\nimport {ThunderIDNextConfig} from '../../../models/config';\nimport SessionManager from '../../../utils/SessionManager';\nimport getClient from '../../getClient';\nimport getSessionId from '../getSessionId';\n\ntype RequestCookies = Awaited<ReturnType<typeof cookies>>;\n\nexport type SwitchOrganizationUnitActionResult =\n  | {data: {signInUrl?: string; switched?: boolean}; success: true}\n  | {code: string; statusCode?: number; success: false};\n\n/**\n * Starts a switch of the signed-in session to the organization unit `organizationUnitId`.\n *\n * - Redirect mode returns the unit's authorization URL (`{baseUrl}/ou/{ouId}/oauth2/authorize`) to send\n *   the browser to, and marks the session so the OAuth callback redeems the code for it: the code is\n *   redeemed at the unit's token endpoint and replaces the session. With `redirect: false` it fails\n *   with `interaction_required` instead, since a server cannot switch silently.\n * - Embedded mode starts an `AUTHENTICATION` flow with `ouId`. When the SSO session is reused the flow\n *   completes at once and its assertion replaces the session cookie; a flow that needs input fails\n *   with `interaction_required`.\n *\n * The previous session stays as it was on any failure. The error code is one of\n * `OrganizationUnitSwitchErrorCodes`.\n */\nconst switchOrganizationUnitAction = async (\n  organizationUnitId: string,\n  options: {redirect?: boolean} = {},\n): Promise<SwitchOrganizationUnitActionResult> => {\n  if (typeof organizationUnitId !== 'string' || organizationUnitId.trim() === '') {\n    return {code: OrganizationUnitSwitchErrorCodes.InvalidOrganizationUnit, statusCode: 400, success: false};\n  }\n\n  const sessionId: string | undefined = await getSessionId();\n\n  if (!sessionId) {\n    return {code: OrganizationUnitSwitchErrorCodes.Failed, statusCode: 401, success: false};\n  }\n\n  try {\n    const client = getClient();\n\n    if (!client.isInitialized) {\n      await client.initialize({} as ThunderIDNextConfig);\n    }\n\n    const config: ThunderIDNextConfig = await client.getConfiguration();\n\n    if (config.mode === 'embedded') {\n      const result: Awaited<ReturnType<typeof signInAction>> = await signInAction({\n        applicationId: config.applicationId,\n        flowType: EmbeddedFlowType.Authentication,\n        ouId: organizationUnitId,\n      });\n\n      if (result.success && (result.data as {afterSignInUrl?: string} | undefined)?.afterSignInUrl) {\n        return {data: {switched: true}, success: true};\n      }\n\n      if (result.success) {\n        return {code: OrganizationUnitSwitchErrorCodes.InteractionRequired, success: false};\n      }\n\n      // FES-1023: a unit the application is not accessible from, or one that does not exist.\n      return {\n        code: (result.error ?? '').includes('FES-1023')\n          ? OrganizationUnitSwitchErrorCodes.UnauthorizedClient\n          : OrganizationUnitSwitchErrorCodes.Failed,\n        success: false,\n      };\n    }\n\n    if (options.redirect === false) {\n      return {code: OrganizationUnitSwitchErrorCodes.InteractionRequired, success: false};\n    }\n\n    const signInUrl: string = await client.getAuthorizeRequestUrl({organizationUnitId}, sessionId);\n    const cookieStore: RequestCookies = await cookies();\n\n    // The OAuth callback finds the session it completes through the temporary session cookie.\n    cookieStore.set(\n      SessionManager.getTempSessionCookieName(),\n      await SessionManager.createTempSession(sessionId),\n      SessionManager.getTempSessionCookieOptions(),\n    );\n\n    return {data: {signInUrl}, success: true};\n  } catch {\n    return {code: OrganizationUnitSwitchErrorCodes.Failed, success: false};\n  }\n};\n\nexport default switchOrganizationUnitAction;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,MAAM,+BAA+B,OACnC,oBACA,UAAgC,EAAE,KACc;AAChD,KAAI,OAAO,uBAAuB,YAAY,mBAAmB,MAAM,KAAK,GAC1E,QAAO;EAAC,MAAM,iCAAiC;EAAyB,YAAY;EAAK,SAAS;EAAM;CAG1G,MAAMA,YAAgC,MAAMC,sBAAc;AAE1D,KAAI,CAAC,UACH,QAAO;EAAC,MAAM,iCAAiC;EAAQ,YAAY;EAAK,SAAS;EAAM;AAGzF,KAAI;EACF,MAAM,SAASC,mBAAW;AAE1B,MAAI,CAAC,OAAO,cACV,OAAM,OAAO,WAAW,EAAE,CAAwB;EAGpD,MAAMC,SAA8B,MAAM,OAAO,kBAAkB;AAEnE,MAAI,OAAO,SAAS,YAAY;GAC9B,MAAMC,SAAmD,MAAMC,qBAAa;IAC1E,eAAe,OAAO;IACtB,UAAU,iBAAiB;IAC3B,MAAM;IACP,CAAC;AAEF,OAAI,OAAO,WAAY,OAAO,MAAgD,eAC5E,QAAO;IAAC,MAAM,EAAC,UAAU,MAAK;IAAE,SAAS;IAAK;AAGhD,OAAI,OAAO,QACT,QAAO;IAAC,MAAM,iCAAiC;IAAqB,SAAS;IAAM;AAIrF,UAAO;IACL,OAAO,OAAO,SAAS,IAAI,SAAS,WAAW,GAC3C,iCAAiC,qBACjC,iCAAiC;IACrC,SAAS;IACV;;AAGH,MAAI,QAAQ,aAAa,MACvB,QAAO;GAAC,MAAM,iCAAiC;GAAqB,SAAS;GAAM;EAGrF,MAAMC,YAAoB,MAAM,OAAO,uBAAuB,EAAC,oBAAmB,EAAE,UAAU;AAI9F,GAHoC,MAAM,SAAS,EAGvC,IACVC,uBAAe,0BAA0B,EACzC,MAAMA,uBAAe,kBAAkB,UAAU,EACjDA,uBAAe,6BAA6B,CAC7C;AAED,SAAO;GAAC,MAAM,EAAC,WAAU;GAAE,SAAS;GAAK;SACnC;AACN,SAAO;GAAC,MAAM,iCAAiC;GAAQ,SAAS;GAAM;;;AAI1E,2CAAe"}

package/dist/server/thunderid.d.ts

@@ -1,7 +1,8 @@
-import { TokenExchangeRequestConfig, TokenResponse } from '@thunderid/node';
+import { AccessibleOrganizationUnitList, AccessibleOrganizationUnitsOptions, TokenExchangeRequestConfig, TokenResponse } from '@thunderid/node';
 import { ThunderIDNextConfig } from '../models/config';
 declare const thunderid: () => Promise<{
     exchangeToken: (config: TokenExchangeRequestConfig, sessionId: string) => Promise<TokenResponse | Response>;
+    getAccessibleOrganizationUnits: (options?: AccessibleOrganizationUnitsOptions) => Promise<AccessibleOrganizationUnitList>;
     getAccessToken: (sessionId: string) => Promise<string>;
     getSessionId: () => Promise<string | undefined>;
     reInitialize: (config: Partial<ThunderIDNextConfig>) => Promise<boolean>;

package/dist/server/thunderid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thunderid.d.ts","sourceRoot":"","sources":["../../src/server/thunderid.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,0BAA0B,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAG1E,OAAO,EAAC,mBAAmB,EAAC,MAAM,kBAAkB,CAAC;AAErD,QAAA,MAAM,SAAS,QAAa,OAAO,CAAC;IAClC,aAAa,EAAE,CAAC,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC;IAC5G,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1E,CA2BA,CAAC;AAEF,eAAe,SAAS,CAAC"}
+{"version":3,"file":"thunderid.d.ts","sourceRoot":"","sources":["../../src/server/thunderid.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,EAElC,0BAA0B,EAC1B,aAAa,EACd,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAC,mBAAmB,EAAC,MAAM,kBAAkB,CAAC;AAErD,QAAA,MAAM,SAAS,QAAa,OAAO,CAAC;IAClC,aAAa,EAAE,CAAC,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC;IAC5G,8BAA8B,EAAE,CAC9B,OAAO,CAAC,EAAE,kCAAkC,KACzC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1E,CAmDA,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/dist/server/thunderid.js

@@ -1,5 +1,7 @@
 import getSessionId_default from "./actions/getSessionId.js";
 import getClient_default from "./getClient.js";
+import getAccessibleOrganizationUnitsAction_default from "./actions/account/getAccessibleOrganizationUnitsAction.js";
+import { ThunderIDAPIError } from "@thunderid/node";
 
 //#region src/server/thunderid.ts
 const thunderid = async () => {
@@ -13,8 +15,20 @@ const thunderid = async () => {
 	const reInitialize = async (config) => {
 		return getClient_default().reInitialize(config);
 	};
+	/**
+	* Lists the organization units the signed-in user of this request can access (`/users/me/ous`).
+	*
+	* @throws {ThunderIDAPIError} With the status and code of the failure; the server's message is not
+	*   carried.
+	*/
+	const getAccessibleOrganizationUnits$1 = async (options) => {
+		const result = await getAccessibleOrganizationUnitsAction_default(options);
+		if (!result.success) throw new ThunderIDAPIError("Failed to list the accessible organization units", result.code ?? "getAccessibleOrganizationUnits-ResponseError-001", "nextjs", result.statusCode);
+		return result.data;
+	};
 	return {
 		exchangeToken,
+		getAccessibleOrganizationUnits: getAccessibleOrganizationUnits$1,
 		getAccessToken,
 		getSessionId,
 		reInitialize

package/dist/server/thunderid.js.map

@@ -1 +1 @@
-{"version":3,"file":"thunderid.js","names":["getClient","getSessionIdAction"],"sources":["../../src/server/thunderid.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {TokenExchangeRequestConfig, TokenResponse} from '@thunderid/node';\nimport getSessionIdAction from './actions/getSessionId';\nimport getClient from './getClient';\nimport {ThunderIDNextConfig} from '../models/config';\n\nconst thunderid = async (): Promise<{\n  exchangeToken: (config: TokenExchangeRequestConfig, sessionId: string) => Promise<TokenResponse | Response>;\n  getAccessToken: (sessionId: string) => Promise<string>;\n  getSessionId: () => Promise<string | undefined>;\n  reInitialize: (config: Partial<ThunderIDNextConfig>) => Promise<boolean>;\n}> => {\n  const getAccessToken = async (sessionId: string): Promise<string> => {\n    const client = getClient();\n    return client.getAccessToken(sessionId);\n  };\n\n  const getSessionId = async (): Promise<string | undefined> => getSessionIdAction();\n\n  const exchangeToken = async (\n    config: TokenExchangeRequestConfig,\n    sessionId: string,\n  ): Promise<TokenResponse | Response> => {\n    const client = getClient();\n    return client.exchangeToken(config, sessionId);\n  };\n\n  const reInitialize = async (config: Partial<ThunderIDNextConfig>): Promise<boolean> => {\n    const client = getClient();\n    return client.reInitialize(config);\n  };\n\n  return {\n    exchangeToken,\n    getAccessToken,\n    getSessionId,\n    reInitialize,\n  };\n};\n\nexport default thunderid;\n"],"mappings":";;;;AAQA,MAAM,YAAY,YAKZ;CACJ,MAAM,iBAAiB,OAAO,cAAuC;AAEnE,SADeA,mBAAW,CACZ,eAAe,UAAU;;CAGzC,MAAM,eAAe,YAAyCC,sBAAoB;CAElF,MAAM,gBAAgB,OACpB,QACA,cACsC;AAEtC,SADeD,mBAAW,CACZ,cAAc,QAAQ,UAAU;;CAGhD,MAAM,eAAe,OAAO,WAA2D;AAErF,SADeA,mBAAW,CACZ,aAAa,OAAO;;AAGpC,QAAO;EACL;EACA;EACA;EACA;EACD;;AAGH,wBAAe"}
+{"version":3,"file":"thunderid.js","names":["getClient","getSessionIdAction","getAccessibleOrganizationUnits","result: GetAccessibleOrganizationUnitsActionResult","getAccessibleOrganizationUnitsAction"],"sources":["../../src/server/thunderid.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccessibleOrganizationUnitList,\n  AccessibleOrganizationUnitsOptions,\n  ThunderIDAPIError,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n} from '@thunderid/node';\nimport getAccessibleOrganizationUnitsAction, {\n  GetAccessibleOrganizationUnitsActionResult,\n} from './actions/account/getAccessibleOrganizationUnitsAction';\nimport getSessionIdAction from './actions/getSessionId';\nimport getClient from './getClient';\nimport {ThunderIDNextConfig} from '../models/config';\n\nconst thunderid = async (): Promise<{\n  exchangeToken: (config: TokenExchangeRequestConfig, sessionId: string) => Promise<TokenResponse | Response>;\n  getAccessibleOrganizationUnits: (\n    options?: AccessibleOrganizationUnitsOptions,\n  ) => Promise<AccessibleOrganizationUnitList>;\n  getAccessToken: (sessionId: string) => Promise<string>;\n  getSessionId: () => Promise<string | undefined>;\n  reInitialize: (config: Partial<ThunderIDNextConfig>) => Promise<boolean>;\n}> => {\n  const getAccessToken = async (sessionId: string): Promise<string> => {\n    const client = getClient();\n    return client.getAccessToken(sessionId);\n  };\n\n  const getSessionId = async (): Promise<string | undefined> => getSessionIdAction();\n\n  const exchangeToken = async (\n    config: TokenExchangeRequestConfig,\n    sessionId: string,\n  ): Promise<TokenResponse | Response> => {\n    const client = getClient();\n    return client.exchangeToken(config, sessionId);\n  };\n\n  const reInitialize = async (config: Partial<ThunderIDNextConfig>): Promise<boolean> => {\n    const client = getClient();\n    return client.reInitialize(config);\n  };\n\n  /**\n   * Lists the organization units the signed-in user of this request can access (`/users/me/ous`).\n   *\n   * @throws {ThunderIDAPIError} With the status and code of the failure; the server's message is not\n   *   carried.\n   */\n  const getAccessibleOrganizationUnits = async (\n    options?: AccessibleOrganizationUnitsOptions,\n  ): Promise<AccessibleOrganizationUnitList> => {\n    const result: GetAccessibleOrganizationUnitsActionResult = await getAccessibleOrganizationUnitsAction(options);\n\n    if (!result.success) {\n      throw new ThunderIDAPIError(\n        'Failed to list the accessible organization units',\n        result.code ?? 'getAccessibleOrganizationUnits-ResponseError-001',\n        'nextjs',\n        result.statusCode,\n      );\n    }\n\n    return result.data;\n  };\n\n  return {\n    exchangeToken,\n    getAccessibleOrganizationUnits,\n    getAccessToken,\n    getSessionId,\n    reInitialize,\n  };\n};\n\nexport default thunderid;\n"],"mappings":";;;;;;AAiBA,MAAM,YAAY,YAQZ;CACJ,MAAM,iBAAiB,OAAO,cAAuC;AAEnE,SADeA,mBAAW,CACZ,eAAe,UAAU;;CAGzC,MAAM,eAAe,YAAyCC,sBAAoB;CAElF,MAAM,gBAAgB,OACpB,QACA,cACsC;AAEtC,SADeD,mBAAW,CACZ,cAAc,QAAQ,UAAU;;CAGhD,MAAM,eAAe,OAAO,WAA2D;AAErF,SADeA,mBAAW,CACZ,aAAa,OAAO;;;;;;;;CASpC,MAAME,mCAAiC,OACrC,YAC4C;EAC5C,MAAMC,SAAqD,MAAMC,6CAAqC,QAAQ;AAE9G,MAAI,CAAC,OAAO,QACV,OAAM,IAAI,kBACR,oDACA,OAAO,QAAQ,oDACf,UACA,OAAO,WACR;AAGH,SAAO,OAAO;;AAGhB,QAAO;EACL;EACA;EACA;EACA;EACA;EACD;;AAGH,wBAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/nextjs",
-  "version": "1.12.0",
+  "version": "1.14.0",
   "description": "Next.js SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -37,8 +37,8 @@
     "directory": "packages/nextjs"
   },
   "dependencies": {
-    "@thunderid/node": "^1.10.0",
-    "@thunderid/react": "^1.13.0",
+    "@thunderid/node": "^1.12.0",
+    "@thunderid/react": "^1.15.0",
     "@types/react": "19.2.14",
     "jose": "6.2.3",
     "tslib": "2.8.1"

package/dist/cjs/client/components/admin/AgentCreate/AgentCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentCreate.cjs","names":["AgentCreate: FC<AgentCreateProps>","ReactAgentCreate"],"sources":["../../../../../../src/client/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentCreate as ReactAgentCreate, AgentCreateProps as ReactAgentCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentCreateProps = ReactAgentCreateProps;\n\n/**\n * Creates an agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = (props: AgentCreateProps): ReactElement => <ReactAgentCreate {...props} />;\n\nAgentCreate.displayName = 'AgentCreate';\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/admin/AgentDetails/AgentDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","ReactAgentDetails"],"sources":["../../../../../../src/client/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentDetails as ReactAgentDetails, AgentDetailsProps as ReactAgentDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentDetailsProps = ReactAgentDetailsProps;\n\n/**\n * Shows an agent's details, groups and roles, and optionally deletes the agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={id} deletable onDeleted={() => router.push('/admin/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = (props: AgentDetailsProps): ReactElement => (\n  <ReactAgentDetails {...props} />\n);\n\nAgentDetails.displayName = 'AgentDetails';\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/admin/AgentList/AgentList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentList.cjs","names":["AgentList: FC<AgentListProps>","ReactAgentList"],"sources":["../../../../../../src/client/components/admin/AgentList/AgentList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentList as ReactAgentList, AgentListProps as ReactAgentListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentListProps = ReactAgentListProps;\n\n/**\n * Lists agents, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentList onSelect={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentList: FC<AgentListProps> = (props: AgentListProps): ReactElement => <ReactAgentList {...props} />;\n\nAgentList.displayName = 'AgentList';\n\nexport default AgentList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,aAAiC,UAAwC,2CAACC,+BAAe,GAAI,QAAS;AAE5G,UAAU,cAAc;AAExB,wBAAe"}

package/dist/cjs/client/components/admin/ApplicationCreate/ApplicationCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationCreate.cjs","names":["ApplicationCreate: FC<ApplicationCreateProps>","ReactApplicationCreate"],"sources":["../../../../../../src/client/components/admin/ApplicationCreate/ApplicationCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationCreate as ReactApplicationCreate,\n  ApplicationCreateProps as ReactApplicationCreateProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationCreateProps = ReactApplicationCreateProps;\n\n/**\n * Creates an application with an OAuth client, and shows its client secret once when the server\n * returns one.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationCreate onCreated={(application) => router.push(`/admin/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationCreate: FC<ApplicationCreateProps> = (props: ApplicationCreateProps): ReactElement => (\n  <ReactApplicationCreate {...props} />\n);\n\nApplicationCreate.displayName = 'ApplicationCreate';\n\nexport default ApplicationCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,qBAAiD,UACrD,2CAACC,uCAAuB,GAAI,QAAS;AAGvC,kBAAkB,cAAc;AAEhC,gCAAe"}

package/dist/cjs/client/components/admin/ApplicationDetails/ApplicationDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationDetails.cjs","names":["ApplicationDetails: FC<ApplicationDetailsProps>","ReactApplicationDetails"],"sources":["../../../../../../src/client/components/admin/ApplicationDetails/ApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationDetails as ReactApplicationDetails,\n  ApplicationDetailsProps as ReactApplicationDetailsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationDetailsProps = ReactApplicationDetailsProps;\n\n/**\n * Shows an application and its OAuth configuration, and optionally edits it, regenerates its client\n * secret or deletes it.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationDetails applicationId={id} editable deletable onDeleted={() => router.push('/admin/applications')} />\n * ```\n */\nconst ApplicationDetails: FC<ApplicationDetailsProps> = (props: ApplicationDetailsProps): ReactElement => (\n  <ReactApplicationDetails {...props} />\n);\n\nApplicationDetails.displayName = 'ApplicationDetails';\n\nexport default ApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,sBAAmD,UACvD,2CAACC,wCAAwB,GAAI,QAAS;AAGxC,mBAAmB,cAAc;AAEjC,iCAAe"}

package/dist/cjs/client/components/admin/ApplicationList/ApplicationList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationList.cjs","names":["ApplicationList: FC<ApplicationListProps>","ReactApplicationList"],"sources":["../../../../../../src/client/components/admin/ApplicationList/ApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationList as ReactApplicationList,\n  ApplicationListProps as ReactApplicationListProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationListProps = ReactApplicationListProps;\n\n/**\n * Lists applications, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationList onSelect={(application) => router.push(`/admin/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationList: FC<ApplicationListProps> = (props: ApplicationListProps): ReactElement => (\n  <ReactApplicationList {...props} />\n);\n\nApplicationList.displayName = 'ApplicationList';\n\nexport default ApplicationList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/admin/GroupCreate/GroupCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","ReactGroupCreate"],"sources":["../../../../../../src/client/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupCreate as ReactGroupCreate, GroupCreateProps as ReactGroupCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupCreateProps = ReactGroupCreateProps;\n\n/**\n * Creates a group.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = (props: GroupCreateProps): ReactElement => <ReactGroupCreate {...props} />;\n\nGroupCreate.displayName = 'GroupCreate';\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/admin/GroupList/GroupList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","ReactGroupList"],"sources":["../../../../../../src/client/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupList as ReactGroupList, GroupListProps as ReactGroupListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupListProps = ReactGroupListProps;\n\n/**\n * Lists groups, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = (props: GroupListProps): ReactElement => <ReactGroupList {...props} />;\n\nGroupList.displayName = 'GroupList';\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,aAAiC,UAAwC,2CAACC,+BAAe,GAAI,QAAS;AAE5G,UAAU,cAAc;AAExB,wBAAe"}

package/dist/cjs/client/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupMembers: FC<GroupMembersProps>","ReactGroupMembers"],"sources":["../../../../../../src/client/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupMembers as ReactGroupMembers, GroupMembersProps as ReactGroupMembersProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupMembersProps = ReactGroupMembersProps;\n\n/**\n * Lists a group's members and adds or removes them.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={id} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = (props: GroupMembersProps): ReactElement => (\n  <ReactGroupMembers {...props} />\n);\n\nGroupMembers.displayName = 'GroupMembers';\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","ReactRoleAssignments"],"sources":["../../../../../../src/client/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RoleAssignments as ReactRoleAssignments,\n  RoleAssignmentsProps as ReactRoleAssignmentsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleAssignmentsProps = ReactRoleAssignmentsProps;\n\n/**\n * Lists a role's assignments and assigns or unassigns users, groups and agents.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={id} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = (props: RoleAssignmentsProps): ReactElement => (\n  <ReactRoleAssignments {...props} />\n);\n\nRoleAssignments.displayName = 'RoleAssignments';\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/admin/RoleCreate/RoleCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","ReactRoleCreate"],"sources":["../../../../../../src/client/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleCreate as ReactRoleCreate, RoleCreateProps as ReactRoleCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleCreateProps = ReactRoleCreateProps;\n\n/**\n * Creates a role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = (props: RoleCreateProps): ReactElement => <ReactRoleCreate {...props} />;\n\nRoleCreate.displayName = 'RoleCreate';\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAAmC,UAAyC,2CAACC,gCAAgB,GAAI,QAAS;AAEhH,WAAW,cAAc;AAEzB,yBAAe"}

package/dist/cjs/client/components/admin/RoleList/RoleList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","ReactRoleList"],"sources":["../../../../../../src/client/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleList as ReactRoleList, RoleListProps as ReactRoleListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleListProps = ReactRoleListProps;\n\n/**\n * Lists roles, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = (props: RoleListProps): ReactElement => <ReactRoleList {...props} />;\n\nRoleList.displayName = 'RoleList';\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,YAA+B,UAAuC,2CAACC,8BAAc,GAAI,QAAS;AAExG,SAAS,cAAc;AAEvB,uBAAe"}

package/dist/cjs/client/components/admin/RolePermissions/RolePermissions.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","ReactRolePermissions"],"sources":["../../../../../../src/client/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RolePermissions as ReactRolePermissions,\n  RolePermissionsProps as ReactRolePermissionsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RolePermissionsProps = ReactRolePermissionsProps;\n\n/**\n * Shows the permissions a role grants.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={id} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = (props: RolePermissionsProps): ReactElement => (\n  <ReactRolePermissions {...props} />\n);\n\nRolePermissions.displayName = 'RolePermissions';\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/admin/UserCreate/UserCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","ReactUserCreate"],"sources":["../../../../../../src/client/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserCreate as ReactUserCreate, UserCreateProps as ReactUserCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserCreateProps = ReactUserCreateProps;\n\n/**\n * Creates a user, or invites one with `mode=\"invite\"`.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = (props: UserCreateProps): ReactElement => <ReactUserCreate {...props} />;\n\nUserCreate.displayName = 'UserCreate';\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAAmC,UAAyC,2CAACC,gCAAgB,GAAI,QAAS;AAEhH,WAAW,cAAc;AAEzB,yBAAe"}

package/dist/cjs/client/components/admin/UserDetails/UserDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","ReactUserDetails"],"sources":["../../../../../../src/client/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserDetails as ReactUserDetails, UserDetailsProps as ReactUserDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserDetailsProps = ReactUserDetailsProps;\n\n/**\n * Shows a user's attributes and groups, and optionally edits or deletes the user.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserDetails userId={id} editable deletable onDeleted={() => router.push('/admin/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = (props: UserDetailsProps): ReactElement => <ReactUserDetails {...props} />;\n\nUserDetails.displayName = 'UserDetails';\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/admin/UserList/UserList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserList.cjs","names":["UserList: FC<UserListProps>","ReactUserList"],"sources":["../../../../../../src/client/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserList as ReactUserList, UserListProps as ReactUserListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserListProps = ReactUserListProps;\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserList: FC<UserListProps> = (props: UserListProps): ReactElement => <ReactUserList {...props} />;\n\nUserList.displayName = 'UserList';\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,YAA+B,UAAuC,2CAACC,8BAAc,GAAI,QAAS;AAExG,SAAS,cAAc;AAEvB,uBAAe"}

package/dist/client/admin.d.ts

@@ -1,3 +0,0 @@
-export { type AdminListRenderProps, BaseUserList, type BaseUserListProps, type BaseUserListRenderProps, BaseUserCreate, type BaseUserCreateProps, type BaseUserCreateRenderProps, BaseUserDetails, type BaseUserDetailsProps, type BaseUserDetailsRenderProps, BaseGroupList, type BaseGroupListProps, type BaseGroupListRenderProps, BaseGroupCreate, type BaseGroupCreateProps, type BaseGroupCreateRenderProps, BaseGroupMembers, type BaseGroupMembersProps, type BaseGroupMembersRenderProps, BaseRoleList, type BaseRoleListProps, type BaseRoleListRenderProps, BaseRoleCreate, type BaseRoleCreateProps, type BaseRoleCreateRenderProps, BaseRoleAssignments, type BaseRoleAssignmentsProps, type BaseRoleAssignmentsRenderProps, BaseRolePermissions, type BaseRolePermissionsProps, type BaseRolePermissionsRenderProps, BaseAgentList, type BaseAgentListProps, type BaseAgentListRenderProps, BaseAgentCreate, type BaseAgentCreateProps, type BaseAgentCreateRenderProps, BaseAgentDetails, type BaseAgentDetailsProps, type BaseAgentDetailsRenderProps, BaseApplicationList, type BaseApplicationListProps, type BaseApplicationListRenderProps, BaseApplicationCreate, type BaseApplicationCreateProps, type BaseApplicationCreateRenderProps, type ApplicationCreateSubmission, BaseApplicationDetails, type BaseApplicationDetailsProps, type BaseApplicationDetailsRenderProps, type ApplicationUpdateSubmission, type ApplicationFormValues, type ApplicationTextField, } from '@thunderid/react';
-export { useManagementRequestConfig, type ManagementCollection, type GrantedPermissions } from '@thunderid/react';
-//# sourceMappingURL=admin.d.ts.map

package/dist/client/admin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/client/admin.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,oBAAoB,EACzB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,mBAAmB,EACnB,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACtC,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAC,0BAA0B,EAAE,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC"}

package/dist/client/admin.js

@@ -1,6 +0,0 @@
-'use client';
-
-
-import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig } from "@thunderid/react";
-
-export { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseApplicationCreate, BaseApplicationDetails, BaseApplicationList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, useManagementRequestConfig };

package/dist/client/components/admin/AgentCreate/AgentCreate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/AgentCreate/AgentCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAkC,gBAAgB,IAAI,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAA8E,CAAC;AAIrH,eAAe,WAAW,CAAC"}

package/dist/client/components/admin/AgentCreate/AgentCreate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentCreate.js","names":["AgentCreate: FC<AgentCreateProps>","ReactAgentCreate","AgentCreate"],"sources":["../../../../../src/client/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentCreate as ReactAgentCreate, AgentCreateProps as ReactAgentCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentCreateProps = ReactAgentCreateProps;\n\n/**\n * Creates an agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = (props: AgentCreateProps): ReactElement => <ReactAgentCreate {...props} />;\n\nAgentCreate.displayName = 'AgentCreate';\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAqC,UAA0C,oBAACC,eAAiB,GAAI,QAAS;AAEpH,cAAY,cAAc;AAE1B,0BAAeC"}

package/dist/client/components/admin/AgentDetails/AgentDetails.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentDetails.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/AgentDetails/AgentDetails.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAoC,iBAAiB,IAAI,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AAChH,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAEvC,CAAC;AAIF,eAAe,YAAY,CAAC"}

package/dist/client/components/admin/AgentDetails/AgentDetails.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentDetails.js","names":["AgentDetails: FC<AgentDetailsProps>","ReactAgentDetails","AgentDetails"],"sources":["../../../../../src/client/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentDetails as ReactAgentDetails, AgentDetailsProps as ReactAgentDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentDetailsProps = ReactAgentDetailsProps;\n\n/**\n * Shows an agent's details, groups and roles, and optionally deletes the agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={id} deletable onDeleted={() => router.push('/admin/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = (props: AgentDetailsProps): ReactElement => (\n  <ReactAgentDetails {...props} />\n);\n\nAgentDetails.displayName = 'AgentDetails';\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,kBAAuC,UAC3C,oBAACC,gBAAkB,GAAI,QAAS;AAGlC,eAAa,cAAc;AAE3B,2BAAeC"}

package/dist/client/components/admin/AgentList/AgentList.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/AgentList/AgentList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAA8B,cAAc,IAAI,mBAAmB,EAAC,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,SAAS,EAAE,EAAE,CAAC,cAAc,CAA0E,CAAC;AAI7G,eAAe,SAAS,CAAC"}

package/dist/client/components/admin/AgentList/AgentList.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AgentList.js","names":["AgentList: FC<AgentListProps>","ReactAgentList","AgentList"],"sources":["../../../../../src/client/components/admin/AgentList/AgentList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentList as ReactAgentList, AgentListProps as ReactAgentListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentListProps = ReactAgentListProps;\n\n/**\n * Lists agents, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentList onSelect={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentList: FC<AgentListProps> = (props: AgentListProps): ReactElement => <ReactAgentList {...props} />;\n\nAgentList.displayName = 'AgentList';\n\nexport default AgentList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAiC,UAAwC,oBAACC,aAAe,GAAI,QAAS;AAE5G,YAAU,cAAc;AAExB,wBAAeC"}

package/dist/client/components/admin/ApplicationCreate/ApplicationCreate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/ApplicationCreate/ApplicationCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,sBAAsB,IAAI,2BAA2B,EACtD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAEjE;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,iBAAiB,EAAE,EAAE,CAAC,sBAAsB,CAEjD,CAAC;AAIF,eAAe,iBAAiB,CAAC"}

package/dist/client/components/admin/ApplicationCreate/ApplicationCreate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationCreate.js","names":["ApplicationCreate: FC<ApplicationCreateProps>","ReactApplicationCreate","ApplicationCreate"],"sources":["../../../../../src/client/components/admin/ApplicationCreate/ApplicationCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationCreate as ReactApplicationCreate,\n  ApplicationCreateProps as ReactApplicationCreateProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationCreateProps = ReactApplicationCreateProps;\n\n/**\n * Creates an application with an OAuth client, and shows its client secret once when the server\n * returns one.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationCreate onCreated={(application) => router.push(`/admin/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationCreate: FC<ApplicationCreateProps> = (props: ApplicationCreateProps): ReactElement => (\n  <ReactApplicationCreate {...props} />\n);\n\nApplicationCreate.displayName = 'ApplicationCreate';\n\nexport default ApplicationCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,uBAAiD,UACrD,oBAACC,qBAAuB,GAAI,QAAS;AAGvC,oBAAkB,cAAc;AAEhC,gCAAeC"}

package/dist/client/components/admin/ApplicationDetails/ApplicationDetails.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationDetails.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/ApplicationDetails/ApplicationDetails.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,uBAAuB,IAAI,4BAA4B,EACxD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,kBAAkB,EAAE,EAAE,CAAC,uBAAuB,CAEnD,CAAC;AAIF,eAAe,kBAAkB,CAAC"}

package/dist/client/components/admin/ApplicationDetails/ApplicationDetails.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationDetails.js","names":["ApplicationDetails: FC<ApplicationDetailsProps>","ReactApplicationDetails","ApplicationDetails"],"sources":["../../../../../src/client/components/admin/ApplicationDetails/ApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationDetails as ReactApplicationDetails,\n  ApplicationDetailsProps as ReactApplicationDetailsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationDetailsProps = ReactApplicationDetailsProps;\n\n/**\n * Shows an application and its OAuth configuration, and optionally edits it, regenerates its client\n * secret or deletes it.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationDetails applicationId={id} editable deletable onDeleted={() => router.push('/admin/applications')} />\n * ```\n */\nconst ApplicationDetails: FC<ApplicationDetailsProps> = (props: ApplicationDetailsProps): ReactElement => (\n  <ReactApplicationDetails {...props} />\n);\n\nApplicationDetails.displayName = 'ApplicationDetails';\n\nexport default ApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAyBA,MAAMA,wBAAmD,UACvD,oBAACC,sBAAwB,GAAI,QAAS;AAGxC,qBAAmB,cAAc;AAEjC,iCAAeC"}

package/dist/client/components/admin/ApplicationList/ApplicationList.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/ApplicationList/ApplicationList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/admin/ApplicationList/ApplicationList.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationList.js","names":["ApplicationList: FC<ApplicationListProps>","ReactApplicationList","ApplicationList"],"sources":["../../../../../src/client/components/admin/ApplicationList/ApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  ApplicationList as ReactApplicationList,\n  ApplicationListProps as ReactApplicationListProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type ApplicationListProps = ReactApplicationListProps;\n\n/**\n * Lists applications, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <ApplicationList onSelect={(application) => router.push(`/admin/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationList: FC<ApplicationListProps> = (props: ApplicationListProps): ReactElement => (\n  <ReactApplicationList {...props} />\n);\n\nApplicationList.displayName = 'ApplicationList';\n\nexport default ApplicationList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/admin/GroupCreate/GroupCreate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/GroupCreate/GroupCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAkC,gBAAgB,IAAI,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAA8E,CAAC;AAIrH,eAAe,WAAW,CAAC"}

package/dist/client/components/admin/GroupCreate/GroupCreate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupCreate.js","names":["GroupCreate: FC<GroupCreateProps>","ReactGroupCreate","GroupCreate"],"sources":["../../../../../src/client/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupCreate as ReactGroupCreate, GroupCreateProps as ReactGroupCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupCreateProps = ReactGroupCreateProps;\n\n/**\n * Creates a group.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = (props: GroupCreateProps): ReactElement => <ReactGroupCreate {...props} />;\n\nGroupCreate.displayName = 'GroupCreate';\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAqC,UAA0C,oBAACC,eAAiB,GAAI,QAAS;AAEpH,cAAY,cAAc;AAE1B,0BAAeC"}

package/dist/client/components/admin/GroupList/GroupList.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/GroupList/GroupList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAA8B,cAAc,IAAI,mBAAmB,EAAC,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,SAAS,EAAE,EAAE,CAAC,cAAc,CAA0E,CAAC;AAI7G,eAAe,SAAS,CAAC"}

package/dist/client/components/admin/GroupList/GroupList.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupList.js","names":["GroupList: FC<GroupListProps>","ReactGroupList","GroupList"],"sources":["../../../../../src/client/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupList as ReactGroupList, GroupListProps as ReactGroupListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupListProps = ReactGroupListProps;\n\n/**\n * Lists groups, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = (props: GroupListProps): ReactElement => <ReactGroupList {...props} />;\n\nGroupList.displayName = 'GroupList';\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAiC,UAAwC,oBAACC,aAAe,GAAI,QAAS;AAE5G,YAAU,cAAc;AAExB,wBAAeC"}

package/dist/client/components/admin/GroupMembers/GroupMembers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupMembers.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/GroupMembers/GroupMembers.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAoC,iBAAiB,IAAI,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AAChH,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAEvC,CAAC;AAIF,eAAe,YAAY,CAAC"}

package/dist/client/components/admin/GroupMembers/GroupMembers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupMembers.js","names":["GroupMembers: FC<GroupMembersProps>","ReactGroupMembers","GroupMembers"],"sources":["../../../../../src/client/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupMembers as ReactGroupMembers, GroupMembersProps as ReactGroupMembersProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupMembersProps = ReactGroupMembersProps;\n\n/**\n * Lists a group's members and adds or removes them.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={id} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = (props: GroupMembersProps): ReactElement => (\n  <ReactGroupMembers {...props} />\n);\n\nGroupMembers.displayName = 'GroupMembers';\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,kBAAuC,UAC3C,oBAACC,gBAAkB,GAAI,QAAS;AAGlC,eAAa,cAAc;AAE3B,2BAAeC"}

package/dist/client/components/admin/RoleAssignments/RoleAssignments.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/admin/RoleAssignments/RoleAssignments.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","ReactRoleAssignments","RoleAssignments"],"sources":["../../../../../src/client/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RoleAssignments as ReactRoleAssignments,\n  RoleAssignmentsProps as ReactRoleAssignmentsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleAssignmentsProps = ReactRoleAssignmentsProps;\n\n/**\n * Lists a role's assignments and assigns or unassigns users, groups and agents.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={id} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = (props: RoleAssignmentsProps): ReactElement => (\n  <ReactRoleAssignments {...props} />\n);\n\nRoleAssignments.displayName = 'RoleAssignments';\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/admin/RoleCreate/RoleCreate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/RoleCreate/RoleCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAgC,eAAe,IAAI,oBAAoB,EAAC,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAA4E,CAAC;AAIjH,eAAe,UAAU,CAAC"}

package/dist/client/components/admin/RoleCreate/RoleCreate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleCreate.js","names":["RoleCreate: FC<RoleCreateProps>","ReactRoleCreate","RoleCreate"],"sources":["../../../../../src/client/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleCreate as ReactRoleCreate, RoleCreateProps as ReactRoleCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleCreateProps = ReactRoleCreateProps;\n\n/**\n * Creates a role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = (props: RoleCreateProps): ReactElement => <ReactRoleCreate {...props} />;\n\nRoleCreate.displayName = 'RoleCreate';\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAmC,UAAyC,oBAACC,cAAgB,GAAI,QAAS;AAEhH,aAAW,cAAc;AAEzB,yBAAeC"}

package/dist/client/components/admin/RoleList/RoleList.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/RoleList/RoleList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAA4B,aAAa,IAAI,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAwE,CAAC;AAIzG,eAAe,QAAQ,CAAC"}

package/dist/client/components/admin/RoleList/RoleList.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleList.js","names":["RoleList: FC<RoleListProps>","ReactRoleList","RoleList"],"sources":["../../../../../src/client/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleList as ReactRoleList, RoleListProps as ReactRoleListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleListProps = ReactRoleListProps;\n\n/**\n * Lists roles, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = (props: RoleListProps): ReactElement => <ReactRoleList {...props} />;\n\nRoleList.displayName = 'RoleList';\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAA+B,UAAuC,oBAACC,YAAc,GAAI,QAAS;AAExG,WAAS,cAAc;AAEvB,uBAAeC"}

package/dist/client/components/admin/RolePermissions/RolePermissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAKA,OAAO,EAEL,oBAAoB,IAAI,yBAAyB,EAClD,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAE7C,CAAC;AAIF,eAAe,eAAe,CAAC"}

package/dist/client/components/admin/RolePermissions/RolePermissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RolePermissions.js","names":["RolePermissions: FC<RolePermissionsProps>","ReactRolePermissions","RolePermissions"],"sources":["../../../../../src/client/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RolePermissions as ReactRolePermissions,\n  RolePermissionsProps as ReactRolePermissionsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RolePermissionsProps = ReactRolePermissionsProps;\n\n/**\n * Shows the permissions a role grants.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={id} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = (props: RolePermissionsProps): ReactElement => (\n  <ReactRolePermissions {...props} />\n);\n\nRolePermissions.displayName = 'RolePermissions';\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAMA,qBAA6C,UACjD,oBAACC,mBAAqB,GAAI,QAAS;AAGrC,kBAAgB,cAAc;AAE9B,8BAAeC"}

package/dist/client/components/admin/UserCreate/UserCreate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserCreate.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/UserCreate/UserCreate.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAgC,eAAe,IAAI,oBAAoB,EAAC,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAA4E,CAAC;AAIjH,eAAe,UAAU,CAAC"}

package/dist/client/components/admin/UserCreate/UserCreate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserCreate.js","names":["UserCreate: FC<UserCreateProps>","ReactUserCreate","UserCreate"],"sources":["../../../../../src/client/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserCreate as ReactUserCreate, UserCreateProps as ReactUserCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserCreateProps = ReactUserCreateProps;\n\n/**\n * Creates a user, or invites one with `mode=\"invite\"`.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = (props: UserCreateProps): ReactElement => <ReactUserCreate {...props} />;\n\nUserCreate.displayName = 'UserCreate';\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAmC,UAAyC,oBAACC,cAAgB,GAAI,QAAS;AAEhH,aAAW,cAAc;AAEzB,yBAAeC"}

package/dist/client/components/admin/UserDetails/UserDetails.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserDetails.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/UserDetails/UserDetails.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAkC,gBAAgB,IAAI,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAA8E,CAAC;AAIrH,eAAe,WAAW,CAAC"}

package/dist/client/components/admin/UserDetails/UserDetails.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserDetails.js","names":["UserDetails: FC<UserDetailsProps>","ReactUserDetails","UserDetails"],"sources":["../../../../../src/client/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserDetails as ReactUserDetails, UserDetailsProps as ReactUserDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserDetailsProps = ReactUserDetailsProps;\n\n/**\n * Shows a user's attributes and groups, and optionally edits or deletes the user.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserDetails userId={id} editable deletable onDeleted={() => router.push('/admin/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = (props: UserDetailsProps): ReactElement => <ReactUserDetails {...props} />;\n\nUserDetails.displayName = 'UserDetails';\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,iBAAqC,UAA0C,oBAACC,eAAiB,GAAI,QAAS;AAEpH,cAAY,cAAc;AAE1B,0BAAeC"}

package/dist/client/components/admin/UserList/UserList.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserList.d.ts","sourceRoot":"","sources":["../../../../../src/client/components/admin/UserList/UserList.tsx"],"names":[],"mappings":"AAKA,OAAO,EAA4B,aAAa,IAAI,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AAEvC,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAwE,CAAC;AAIzG,eAAe,QAAQ,CAAC"}

package/dist/client/components/admin/UserList/UserList.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserList.js","names":["UserList: FC<UserListProps>","ReactUserList","UserList"],"sources":["../../../../../src/client/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserList as ReactUserList, UserListProps as ReactUserListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserListProps = ReactUserListProps;\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserList: FC<UserListProps> = (props: UserListProps): ReactElement => <ReactUserList {...props} />;\n\nUserList.displayName = 'UserList';\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAA+B,UAAuC,oBAACC,YAAc,GAAI,QAAS;AAExG,WAAS,cAAc;AAEvB,uBAAeC"}