@thunderid/nextjs 1.4.0 → 1.5.0

package/dist/cjs/client/index.cjs

@@ -1,16 +1,34 @@
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
 const require_useThunderID = require('./contexts/ThunderID/useThunderID.cjs');
-const require_SignedIn = require('./components/control/SignedIn/SignedIn.cjs');
-const require_SignedOut = require('./components/control/SignedOut/SignedOut.cjs');
-const require_SignInButton = require('./components/actions/SignInButton/SignInButton.cjs');
-const require_SignUpButton = require('./components/actions/SignUpButton/SignUpButton.cjs');
-const require_SignIn = require('./components/presentation/SignIn/SignIn.cjs');
-const require_SignOutButton = require('./components/actions/SignOutButton/SignOutButton.cjs');
-const require_User = require('./components/presentation/User/User.cjs');
-const require_SignUp = require('./components/presentation/SignUp/SignUp.cjs');
-const require_UserProfile = require('./components/presentation/UserProfile/UserProfile.cjs');
-const require_UserDropdown = require('./components/presentation/UserDropdown/UserDropdown.cjs');
-const require_UserAvatar = require('./components/presentation/UserAvatar/UserAvatar.cjs');
-const require_ChangeCredential = require('./components/presentation/ChangeCredential/ChangeCredential.cjs');
-const require_UserSelect = require('./components/presentation/UserSelect/UserSelect.cjs');
-const require_AuthFlowSelect = require('./components/presentation/AuthFlowSelect/AuthFlowSelect.cjs');
-const require_UserTypeSelect = require('./components/presentation/UserTypeSelect/UserTypeSelect.cjs');
+const require_SignedIn = require('./components/auth/guards/SignedIn/SignedIn.cjs');
+const require_SignedOut = require('./components/auth/guards/SignedOut/SignedOut.cjs');
+const require_SignInButton = require('./components/auth/buttons/SignInButton/SignInButton.cjs');
+const require_SignUpButton = require('./components/auth/buttons/SignUpButton/SignUpButton.cjs');
+const require_SignIn = require('./components/auth/SignIn/SignIn.cjs');
+const require_SignOutButton = require('./components/auth/buttons/SignOutButton/SignOutButton.cjs');
+const require_User = require('./components/account/User/User.cjs');
+const require_SignUp = require('./components/auth/SignUp/SignUp.cjs');
+const require_UserProfile = require('./components/account/UserProfile/UserProfile.cjs');
+const require_UserDropdown = require('./components/account/UserDropdown/UserDropdown.cjs');
+const require_UserAvatar = require('./components/account/UserAvatar/UserAvatar.cjs');
+const require_ChangeCredential = require('./components/account/ChangeCredential/ChangeCredential.cjs');
+const require_UserSelect = require('./components/primitives/UserSelect/UserSelect.cjs');
+const require_AuthFlowSelect = require('./components/primitives/AuthFlowSelect/AuthFlowSelect.cjs');
+const require_UserTypeSelect = require('./components/primitives/UserTypeSelect/UserTypeSelect.cjs');
+const require_UserList = require('./components/admin/UserList/UserList.cjs');
+const require_UserCreate = require('./components/admin/UserCreate/UserCreate.cjs');
+const require_UserDetails = require('./components/admin/UserDetails/UserDetails.cjs');
+const require_GroupList = require('./components/admin/GroupList/GroupList.cjs');
+const require_GroupCreate = require('./components/admin/GroupCreate/GroupCreate.cjs');
+const require_GroupMembers = require('./components/admin/GroupMembers/GroupMembers.cjs');
+const require_RoleList = require('./components/admin/RoleList/RoleList.cjs');
+const require_RoleCreate = require('./components/admin/RoleCreate/RoleCreate.cjs');
+const require_RoleAssignments = require('./components/admin/RoleAssignments/RoleAssignments.cjs');
+const require_RolePermissions = require('./components/admin/RolePermissions/RolePermissions.cjs');
+const require_AgentList = require('./components/admin/AgentList/AgentList.cjs');
+const require_AgentCreate = require('./components/admin/AgentCreate/AgentCreate.cjs');
+const require_AgentDetails = require('./components/admin/AgentDetails/AgentDetails.cjs');
+const require_useGrantedPermissions = require('./hooks/management/useGrantedPermissions.cjs');
+require('./admin.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);

package/dist/cjs/index.cjs

@@ -1,3 +1,4 @@
+const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
 const require_ThunderIDNextClient = require('./ThunderIDNextClient.cjs');
 const require_thunderid = require('./server/thunderid.cjs');
 const require_ThunderIDProvider = require('./server/ThunderIDProvider.cjs');
@@ -6,25 +7,129 @@ const require_createRouteMatcher = require('./server/proxy/createRouteMatcher.cj
 const require_backchannelLogout = require('./server/backchannelLogout.cjs');
 require('./server/index.cjs');
 const require_useThunderID = require('./client/contexts/ThunderID/useThunderID.cjs');
-const require_SignedIn = require('./client/components/control/SignedIn/SignedIn.cjs');
-const require_SignedOut = require('./client/components/control/SignedOut/SignedOut.cjs');
-const require_SignInButton = require('./client/components/actions/SignInButton/SignInButton.cjs');
-const require_SignUpButton = require('./client/components/actions/SignUpButton/SignUpButton.cjs');
-const require_SignIn = require('./client/components/presentation/SignIn/SignIn.cjs');
-const require_SignOutButton = require('./client/components/actions/SignOutButton/SignOutButton.cjs');
-const require_User = require('./client/components/presentation/User/User.cjs');
-const require_SignUp = require('./client/components/presentation/SignUp/SignUp.cjs');
-const require_UserProfile = require('./client/components/presentation/UserProfile/UserProfile.cjs');
-const require_UserDropdown = require('./client/components/presentation/UserDropdown/UserDropdown.cjs');
-const require_UserAvatar = require('./client/components/presentation/UserAvatar/UserAvatar.cjs');
-const require_ChangeCredential = require('./client/components/presentation/ChangeCredential/ChangeCredential.cjs');
-const require_UserSelect = require('./client/components/presentation/UserSelect/UserSelect.cjs');
-const require_AuthFlowSelect = require('./client/components/presentation/AuthFlowSelect/AuthFlowSelect.cjs');
-const require_UserTypeSelect = require('./client/components/presentation/UserTypeSelect/UserTypeSelect.cjs');
+const require_SignedIn = require('./client/components/auth/guards/SignedIn/SignedIn.cjs');
+const require_SignedOut = require('./client/components/auth/guards/SignedOut/SignedOut.cjs');
+const require_SignInButton = require('./client/components/auth/buttons/SignInButton/SignInButton.cjs');
+const require_SignUpButton = require('./client/components/auth/buttons/SignUpButton/SignUpButton.cjs');
+const require_SignIn = require('./client/components/auth/SignIn/SignIn.cjs');
+const require_SignOutButton = require('./client/components/auth/buttons/SignOutButton/SignOutButton.cjs');
+const require_User = require('./client/components/account/User/User.cjs');
+const require_SignUp = require('./client/components/auth/SignUp/SignUp.cjs');
+const require_UserProfile = require('./client/components/account/UserProfile/UserProfile.cjs');
+const require_UserDropdown = require('./client/components/account/UserDropdown/UserDropdown.cjs');
+const require_UserAvatar = require('./client/components/account/UserAvatar/UserAvatar.cjs');
+const require_ChangeCredential = require('./client/components/account/ChangeCredential/ChangeCredential.cjs');
+const require_UserSelect = require('./client/components/primitives/UserSelect/UserSelect.cjs');
+const require_AuthFlowSelect = require('./client/components/primitives/AuthFlowSelect/AuthFlowSelect.cjs');
+const require_UserTypeSelect = require('./client/components/primitives/UserTypeSelect/UserTypeSelect.cjs');
+const require_UserList = require('./client/components/admin/UserList/UserList.cjs');
+const require_UserCreate = require('./client/components/admin/UserCreate/UserCreate.cjs');
+const require_UserDetails = require('./client/components/admin/UserDetails/UserDetails.cjs');
+const require_GroupList = require('./client/components/admin/GroupList/GroupList.cjs');
+const require_GroupCreate = require('./client/components/admin/GroupCreate/GroupCreate.cjs');
+const require_GroupMembers = require('./client/components/admin/GroupMembers/GroupMembers.cjs');
+const require_RoleList = require('./client/components/admin/RoleList/RoleList.cjs');
+const require_RoleCreate = require('./client/components/admin/RoleCreate/RoleCreate.cjs');
+const require_RoleAssignments = require('./client/components/admin/RoleAssignments/RoleAssignments.cjs');
+const require_RolePermissions = require('./client/components/admin/RolePermissions/RolePermissions.cjs');
+const require_AgentList = require('./client/components/admin/AgentList/AgentList.cjs');
+const require_AgentCreate = require('./client/components/admin/AgentCreate/AgentCreate.cjs');
+const require_AgentDetails = require('./client/components/admin/AgentDetails/AgentDetails.cjs');
+const require_useGrantedPermissions = require('./client/hooks/management/useGrantedPermissions.cjs');
 require('./client/index.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 
+exports.AgentCreate = require_AgentCreate.default;
+exports.AgentDetails = require_AgentDetails.default;
+exports.AgentList = require_AgentList.default;
 exports.AuthFlowSelect = require_AuthFlowSelect.default;
+Object.defineProperty(exports, 'BaseAgentCreate', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseAgentCreate;
+  }
+});
+Object.defineProperty(exports, 'BaseAgentDetails', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseAgentDetails;
+  }
+});
+Object.defineProperty(exports, 'BaseAgentList', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseAgentList;
+  }
+});
+Object.defineProperty(exports, 'BaseGroupCreate', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseGroupCreate;
+  }
+});
+Object.defineProperty(exports, 'BaseGroupList', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseGroupList;
+  }
+});
+Object.defineProperty(exports, 'BaseGroupMembers', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseGroupMembers;
+  }
+});
+Object.defineProperty(exports, 'BaseRoleAssignments', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseRoleAssignments;
+  }
+});
+Object.defineProperty(exports, 'BaseRoleCreate', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseRoleCreate;
+  }
+});
+Object.defineProperty(exports, 'BaseRoleList', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseRoleList;
+  }
+});
+Object.defineProperty(exports, 'BaseRolePermissions', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseRolePermissions;
+  }
+});
+Object.defineProperty(exports, 'BaseUserCreate', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseUserCreate;
+  }
+});
+Object.defineProperty(exports, 'BaseUserDetails', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseUserDetails;
+  }
+});
+Object.defineProperty(exports, 'BaseUserList', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.BaseUserList;
+  }
+});
 exports.ChangeCredential = require_ChangeCredential.default;
+exports.GroupCreate = require_GroupCreate.default;
+exports.GroupList = require_GroupList.default;
+exports.GroupMembers = require_GroupMembers.default;
+exports.RoleAssignments = require_RoleAssignments.default;
+exports.RoleCreate = require_RoleCreate.default;
+exports.RoleList = require_RoleList.default;
+exports.RolePermissions = require_RolePermissions.default;
 exports.SignIn = require_SignIn.default;
 exports.SignInButton = require_SignInButton.default;
 exports.SignOutButton = require_SignOutButton.default;
@@ -36,7 +141,10 @@ exports.ThunderIDNext = require_ThunderIDNextClient.default;
 exports.ThunderIDProvider = require_ThunderIDProvider.default;
 exports.User = require_User.default;
 exports.UserAvatar = require_UserAvatar.default;
+exports.UserCreate = require_UserCreate.default;
+exports.UserDetails = require_UserDetails.default;
 exports.UserDropdown = require_UserDropdown.default;
+exports.UserList = require_UserList.default;
 exports.UserProfile = require_UserProfile.default;
 exports.UserSelect = require_UserSelect.default;
 exports.UserTypeSelect = require_UserTypeSelect.default;
@@ -46,4 +154,191 @@ exports.removeChunkedCookieFromHeader = require_thunderIDProxy.removeChunkedCook
 exports.replaceChunkedCookieInHeader = require_thunderIDProxy.replaceChunkedCookieInHeader;
 exports.thunderIDProxy = require_thunderIDProxy.default;
 exports.thunderid = require_thunderid.default;
-exports.useThunderID = require_useThunderID.default;
+Object.defineProperty(exports, 'useAddGroupMembers', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useAddGroupMembers;
+  }
+});
+Object.defineProperty(exports, 'useAddRoleAssignments', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useAddRoleAssignments;
+  }
+});
+Object.defineProperty(exports, 'useCreateAgent', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useCreateAgent;
+  }
+});
+Object.defineProperty(exports, 'useCreateGroup', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useCreateGroup;
+  }
+});
+Object.defineProperty(exports, 'useCreateRole', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useCreateRole;
+  }
+});
+Object.defineProperty(exports, 'useCreateUser', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useCreateUser;
+  }
+});
+Object.defineProperty(exports, 'useDeleteAgent', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useDeleteAgent;
+  }
+});
+Object.defineProperty(exports, 'useDeleteGroup', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useDeleteGroup;
+  }
+});
+Object.defineProperty(exports, 'useDeleteRole', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useDeleteRole;
+  }
+});
+Object.defineProperty(exports, 'useDeleteUser', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useDeleteUser;
+  }
+});
+Object.defineProperty(exports, 'useGetAgent', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetAgent;
+  }
+});
+Object.defineProperty(exports, 'useGetAgentGroups', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetAgentGroups;
+  }
+});
+Object.defineProperty(exports, 'useGetAgentRoles', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetAgentRoles;
+  }
+});
+Object.defineProperty(exports, 'useGetAgentTypes', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetAgentTypes;
+  }
+});
+Object.defineProperty(exports, 'useGetAgents', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetAgents;
+  }
+});
+Object.defineProperty(exports, 'useGetGroup', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetGroup;
+  }
+});
+Object.defineProperty(exports, 'useGetGroupMembers', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetGroupMembers;
+  }
+});
+Object.defineProperty(exports, 'useGetGroups', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetGroups;
+  }
+});
+Object.defineProperty(exports, 'useGetRole', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetRole;
+  }
+});
+Object.defineProperty(exports, 'useGetRoleAssignments', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetRoleAssignments;
+  }
+});
+Object.defineProperty(exports, 'useGetRoles', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetRoles;
+  }
+});
+Object.defineProperty(exports, 'useGetUser', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetUser;
+  }
+});
+Object.defineProperty(exports, 'useGetUserGroups', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetUserGroups;
+  }
+});
+Object.defineProperty(exports, 'useGetUserTypes', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetUserTypes;
+  }
+});
+Object.defineProperty(exports, 'useGetUsers', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useGetUsers;
+  }
+});
+exports.useGrantedPermissions = require_useGrantedPermissions.default;
+Object.defineProperty(exports, 'useRemoveGroupMembers', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useRemoveGroupMembers;
+  }
+});
+Object.defineProperty(exports, 'useRemoveRoleAssignments', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useRemoveRoleAssignments;
+  }
+});
+exports.useThunderID = require_useThunderID.default;
+Object.defineProperty(exports, 'useUpdateAgent', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useUpdateAgent;
+  }
+});
+Object.defineProperty(exports, 'useUpdateGroup', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useUpdateGroup;
+  }
+});
+Object.defineProperty(exports, 'useUpdateRole', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useUpdateRole;
+  }
+});
+Object.defineProperty(exports, 'useUpdateUser', {
+  enumerable: true,
+  get: function () {
+    return __thunderid_react.useUpdateUser;
+  }
+});

package/dist/cjs/server/ThunderIDProvider.cjs

@@ -4,20 +4,21 @@
 const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
 const require_getSessionId = require('./actions/getSessionId.cjs');
 const require_getClient = require('./getClient.cjs');
+const require_getUserAction = require('./actions/account/getUserAction.cjs');
+const require_getUserProfileAction = require('./actions/account/getUserProfileAction.cjs');
+const require_getUserSchemaAction = require('./actions/account/getUserSchemaAction.cjs');
+const require_updateUserProfileAction = require('./actions/account/updateUserProfileAction.cjs');
 const require_logger = require('../utils/logger.cjs');
+const require_handleOAuthCallbackAction = require('./actions/auth/handleOAuthCallbackAction.cjs');
+const require_signInAction = require('./actions/auth/signInAction.cjs');
+const require_signOutAction = require('./actions/auth/signOutAction.cjs');
+const require_signUpAction = require('./actions/auth/signUpAction.cjs');
 const require_clearSession = require('./actions/clearSession.cjs');
 const require_getSessionPayload = require('./actions/getSessionPayload.cjs');
-const require_getUserAction = require('./actions/getUserAction.cjs');
-const require_getUserProfileAction = require('./actions/getUserProfileAction.cjs');
-const require_getUserSchemaAction = require('./actions/getUserSchemaAction.cjs');
-const require_handleOAuthCallbackAction = require('./actions/handleOAuthCallbackAction.cjs');
 const require_isSignedIn = require('./actions/isSignedIn.cjs');
 const require_refreshToken = require('./actions/refreshToken.cjs');
-const require_signInAction = require('./actions/signInAction.cjs');
-const require_signOutAction = require('./actions/signOutAction.cjs');
-const require_signUpAction = require('./actions/signUpAction.cjs');
-const require_updateUserProfileAction = require('./actions/updateUserProfileAction.cjs');
 const require_ThunderIDProvider = require('../client/contexts/ThunderID/ThunderIDProvider.cjs');
+const require_managementCollections = require('../utils/managementCollections.cjs');
 let __thunderid_node = require("@thunderid/node");
 __thunderid_node = require_rolldown_runtime.__toESM(__thunderid_node);
 let react_jsx_runtime = require("react/jsx-runtime");
@@ -124,6 +125,7 @@ const ThunderIDServerProvider = async ({ children, afterSignInUrl, afterSignOutU
 		organizationHandle: config?.organizationHandle,
 		applicationId: config?.applicationId,
 		baseUrl: config?.baseUrl,
+		endpoints: require_managementCollections.pickManagementEndpoints(config?.endpoints),
 		initialMeta: flowMeta,
 		signIn: require_signInAction.default,
 		clearSession: require_clearSession.default,

package/dist/cjs/server/ThunderIDProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.cjs","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","ThunderIDRuntimeError","flowMeta: FlowMetadataResponse | null","FlowMetaType","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","userSchema: Record<string, AttributeSchema> | null","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        }","getUserSchemaAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  AttributeSchema,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport getUserAction from './actions/getUserAction';\nimport getUserProfileAction from './actions/getUserProfileAction';\nimport getUserSchemaAction from './actions/getUserSchemaAction';\nimport handleOAuthCallbackAction from './actions/handleOAuthCallbackAction';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport signInAction from './actions/signInAction';\nimport signOutAction from './actions/signOutAction';\nimport signUpAction from './actions/signUpAction';\nimport updateUserProfileAction from './actions/updateUserProfileAction';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      url: resolveResourceEndpoint('flowMeta', config),\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n  let userSchema: Record<string, AttributeSchema> | null = null;\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n        const userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserSchemaAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n        userSchema = userSchemaResponse.data?.userSchema ?? null;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      userSchema={userSchema}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,2BAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,yBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,yBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAIC,uCACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,0EAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,wCAAkB;GAC3B,SAAS,QAAQ;GACjB,mDAA6B,YAAY,OAAO;GAChD,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAMC,8BAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,yBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,mCAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,8BAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,2BAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CACD,IAAIC,aAAqD;CAEzD,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,8BAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,qCAAqB,UAAU;GACzC,MAAMC,qBAIF,MAAMC,oCAAoB,UAAU;AAExC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;AACvD,gBAAa,mBAAmB,MAAM,cAAc;WAC7C,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,4DAD0B,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,2CAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACD;EACZ,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}
+{"version":3,"file":"ThunderIDProvider.cjs","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","ThunderIDRuntimeError","flowMeta: FlowMetadataResponse | null","FlowMetaType","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","userSchema: Record<string, AttributeSchema> | null","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        }","getUserSchemaAction","ThunderIDClientProvider","pickManagementEndpoints","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  AttributeSchema,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport getUserAction from './actions/account/getUserAction';\nimport getUserProfileAction from './actions/account/getUserProfileAction';\nimport getUserSchemaAction from './actions/account/getUserSchemaAction';\nimport updateUserProfileAction from './actions/account/updateUserProfileAction';\nimport handleOAuthCallbackAction from './actions/auth/handleOAuthCallbackAction';\nimport signInAction from './actions/auth/signInAction';\nimport signOutAction from './actions/auth/signOutAction';\nimport signUpAction from './actions/auth/signUpAction';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {pickManagementEndpoints} from '../utils/managementCollections';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      url: resolveResourceEndpoint('flowMeta', config),\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n  let userSchema: Record<string, AttributeSchema> | null = null;\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n        const userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserSchemaAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n        userSchema = userSchemaResponse.data?.userSchema ?? null;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      endpoints={pickManagementEndpoints(config?.endpoints)}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      userSchema={userSchema}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,2BAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,yBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,yBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAIC,uCACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,0EAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,wCAAkB;GAC3B,SAAS,QAAQ;GACjB,mDAA6B,YAAY,OAAO;GAChD,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAMC,8BAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,yBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,mCAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,8BAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,2BAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CACD,IAAIC,aAAqD;CAEzD,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,8BAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,qCAAqB,UAAU;GACzC,MAAMC,qBAIF,MAAMC,oCAAoB,UAAU;AAExC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;AACvD,gBAAa,mBAAmB,MAAM,cAAc;WAC7C,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,4DAD0B,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,0BAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,2CAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,WAAWC,sDAAwB,QAAQ,UAAU;EACrD,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACD;EACZ,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}

package/dist/cjs/server/actions/{getUserAction.cjs → account/getUserAction.cjs}

@@ -1,9 +1,9 @@
 'use server';
 
 
-const require_getClient = require('../getClient.cjs');
+const require_getClient = require('../../getClient.cjs');
 
-//#region src/server/actions/getUserAction.ts
+//#region src/server/actions/account/getUserAction.ts
 /**
 * Server action to get the current user.
 * Returns the user profile if signed in.

package/dist/cjs/server/actions/account/getUserAction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAction.cjs","names":["getClient"],"sources":["../../../../../src/server/actions/account/getUserAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {User} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the current user.\n * Returns the user profile if signed in.\n */\nconst getUserAction = async (\n  sessionId: string,\n): Promise<{data: {user: User | null}; error: string | null; success: boolean}> => {\n  try {\n    const client = getClient();\n    const user: User = await client.getUser(sessionId);\n    return {data: {user}, error: null, success: true};\n  } catch (error) {\n    return {data: {user: null}, error: 'Failed to get user', success: false};\n  }\n};\n\nexport default getUserAction;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,gBAAgB,OACpB,cACiF;AACjF,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,MADI,MADJA,2BAAW,CACM,QAAQ,UAAU,EAC9B;GAAE,OAAO;GAAM,SAAS;GAAK;UAC1C,OAAO;AACd,SAAO;GAAC,MAAM,EAAC,MAAM,MAAK;GAAE,OAAO;GAAsB,SAAS;GAAM;;;AAI5E,4BAAe"}

package/dist/cjs/server/actions/{getUserProfileAction.cjs → account/getUserProfileAction.cjs}

@@ -1,9 +1,9 @@
 'use server';
 
 
-const require_getClient = require('../getClient.cjs');
+const require_getClient = require('../../getClient.cjs');
 
-//#region src/server/actions/getUserProfileAction.ts
+//#region src/server/actions/account/getUserProfileAction.ts
 /**
 * Server action to get the current user.
 * Returns the user profile if signed in.

package/dist/cjs/server/actions/account/getUserProfileAction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserProfileAction.cjs","names":["getClient"],"sources":["../../../../../src/server/actions/account/getUserProfileAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {UserProfile} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the current user.\n * Returns the user profile if signed in.\n */\nconst getUserProfileAction = async (\n  sessionId: string,\n): Promise<{data: {userProfile: UserProfile}; error: string | null; success: boolean}> => {\n  try {\n    const client = getClient();\n    const updatedProfile: UserProfile = await client.getUserProfile(sessionId);\n    return {data: {userProfile: updatedProfile}, error: null, success: true};\n  } catch (error) {\n    return {\n      data: {\n        userProfile: {\n          flattenedProfile: {},\n          profile: {},\n        },\n      },\n      error: 'Failed to get user profile',\n      success: false,\n    };\n  }\n};\n\nexport default getUserProfileAction;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,uBAAuB,OAC3B,cACwF;AACxF,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,aADqB,MADrBA,2BAAW,CACuB,eAAe,UAAU,EAC/B;GAAE,OAAO;GAAM,SAAS;GAAK;UACjE,OAAO;AACd,SAAO;GACL,MAAM,EACJ,aAAa;IACX,kBAAkB,EAAE;IACpB,SAAS,EAAE;IACZ,EACF;GACD,OAAO;GACP,SAAS;GACV;;;AAIL,mCAAe"}

package/dist/cjs/server/actions/{getUserSchemaAction.cjs → account/getUserSchemaAction.cjs}

@@ -1,9 +1,9 @@
 'use server';
 
 
-const require_getClient = require('../getClient.cjs');
+const require_getClient = require('../../getClient.cjs');
 
-//#region src/server/actions/getUserSchemaAction.ts
+//#region src/server/actions/account/getUserSchemaAction.ts
 /**
 * Server action to get the user attribute schema from `/users/me/meta`.
 * Used to render profile fields dynamically (labels, required/regex validation)

package/dist/cjs/server/actions/account/getUserSchemaAction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserSchemaAction.cjs","names":["getClient"],"sources":["../../../../../src/server/actions/account/getUserSchemaAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {AttributeSchema} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the user attribute schema from `/users/me/meta`.\n * Used to render profile fields dynamically (labels, required/regex validation)\n * instead of falling back to raw, unlabeled attribute keys.\n */\nconst getUserSchemaAction = async (\n  sessionId: string,\n): Promise<{data: {userSchema: Record<string, AttributeSchema> | null}; error: string | null; success: boolean}> => {\n  try {\n    const client = getClient();\n    const userSchema: Record<string, AttributeSchema> | null = await client.getUserSchema(sessionId);\n    return {data: {userSchema}, error: null, success: true};\n  } catch (error) {\n    return {\n      data: {userSchema: null},\n      error: 'Failed to get user schema',\n      success: false,\n    };\n  }\n};\n\nexport default getUserSchemaAction;\n"],"mappings":";;;;;;;;;;;AAaA,MAAM,sBAAsB,OAC1B,cACkH;AAClH,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,YAD4C,MAD5CA,2BAAW,CAC8C,cAAc,UAAU,EACtE;GAAE,OAAO;GAAM,SAAS;GAAK;UAChD,OAAO;AACd,SAAO;GACL,MAAM,EAAC,YAAY,MAAK;GACxB,OAAO;GACP,SAAS;GACV;;;AAIL,kCAAe"}

package/dist/cjs/server/actions/{updateUserCredentialsAction.cjs → account/updateUserCredentialsAction.cjs}

@@ -1,12 +1,12 @@
 'use server';
 
 
-const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
-const require_getClient = require('../getClient.cjs');
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_getClient = require('../../getClient.cjs');
 let __thunderid_node = require("@thunderid/node");
 __thunderid_node = require_rolldown_runtime.__toESM(__thunderid_node);
 
-//#region src/server/actions/updateUserCredentialsAction.ts
+//#region src/server/actions/account/updateUserCredentialsAction.ts
 /**
 * Server action to update one of the signed-in user's own credentials (e.g. `password`).
 *

package/dist/cjs/server/actions/account/updateUserCredentialsAction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserCredentialsAction.cjs","names":["getClient"],"sources":["../../../../../src/server/actions/account/updateUserCredentialsAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {CredentialUpdateErrorResult, mapCredentialUpdateError} from '@thunderid/node';\nimport getClient from '../../getClient';\n\nexport interface UpdateUserCredentialsActionResult extends CredentialUpdateErrorResult {\n  success: boolean;\n}\n\n/**\n * Server action to update one of the signed-in user's own credentials (e.g. `password`).\n *\n * Never throws across the server action boundary — a thrown class instance loses its\n * prototype chain crossing it, so `error instanceof ThunderIDAPIError` would no longer hold on\n * the client. Instead, the real error is mapped to a field/message here, server-side, while it\n * is still the genuine `ThunderIDAPIError` the core `updateMeCredentials` call threw, and only\n * the plain, serializable result crosses back.\n */\nconst updateUserCredentialsAction = async (\n  payload: Record<string, string>,\n  sessionId?: string,\n): Promise<UpdateUserCredentialsActionResult> => {\n  try {\n    const client = getClient();\n    await client.updateUserCredentials(payload, sessionId);\n    return {field: null, messageKey: '', success: true};\n  } catch (error) {\n    const {field, message, messageKey}: CredentialUpdateErrorResult = mapCredentialUpdateError(error);\n    return {field, message, messageKey, success: false};\n  }\n};\n\nexport default updateUserCredentialsAction;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAM,8BAA8B,OAClC,SACA,cAC+C;AAC/C,KAAI;AAEF,QADeA,2BAAW,CACb,sBAAsB,SAAS,UAAU;AACtD,SAAO;GAAC,OAAO;GAAM,YAAY;GAAI,SAAS;GAAK;UAC5C,OAAO;EACd,MAAM,EAAC,OAAO,SAAS,8DAAoE,MAAM;AACjG,SAAO;GAAC;GAAO;GAAS;GAAY,SAAS;GAAM;;;AAIvD,0CAAe"}

package/dist/cjs/server/actions/{updateUserProfileAction.cjs → account/updateUserProfileAction.cjs}

@@ -1,9 +1,9 @@
 'use server';
 
 
-const require_getClient = require('../getClient.cjs');
+const require_getClient = require('../../getClient.cjs');
 
-//#region src/server/actions/updateUserProfileAction.ts
+//#region src/server/actions/account/updateUserProfileAction.ts
 /**
 * Server action to get the current user.
 * Returns the user profile if signed in.

package/dist/cjs/server/actions/account/updateUserProfileAction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserProfileAction.cjs","names":["getClient"],"sources":["../../../../../src/server/actions/account/updateUserProfileAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {UpdateMeProfileConfig, User} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the current user.\n * Returns the user profile if signed in.\n */\nconst updateUserProfileAction = async (\n  payload: UpdateMeProfileConfig,\n  sessionId?: string,\n): Promise<{data: {user: User}; error: string; success: boolean}> => {\n  try {\n    const client = getClient();\n    const user: User = await client.updateUserProfile(payload, sessionId);\n    return {data: {user}, error: '', success: true};\n  } catch (error) {\n    return {\n      data: {\n        user: {},\n      },\n      error: `Failed to get user profile: ${error instanceof Error ? error.message : String(error)}`,\n      success: false,\n    };\n  }\n};\n\nexport default updateUserProfileAction;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,0BAA0B,OAC9B,SACA,cACmE;AACnE,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,MADI,MADJA,2BAAW,CACM,kBAAkB,SAAS,UAAU,EACjD;GAAE,OAAO;GAAI,SAAS;GAAK;UACxC,OAAO;AACd,SAAO;GACL,MAAM,EACJ,MAAM,EAAE,EACT;GACD,OAAO,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC5F,SAAS;GACV;;;AAIL,sCAAe"}

package/dist/cjs/server/actions/{getAuthFlowsAction.cjs → auth/getAuthFlowsAction.cjs}

@@ -1,12 +1,12 @@
 'use server';
 
 
-const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
-const require_runSelectPageAction = require('./runSelectPageAction.cjs');
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_runSelectPageAction = require('../runSelectPageAction.cjs');
 let __thunderid_node = require("@thunderid/node");
 __thunderid_node = require_rolldown_runtime.__toESM(__thunderid_node);
 
-//#region src/server/actions/getAuthFlowsAction.ts
+//#region src/server/actions/auth/getAuthFlowsAction.ts
 /**
 * Loads one page of authentication flows for an `AUTH_FLOW_SELECT` picker using the signed-in user's
 * server-held session.

package/dist/cjs/server/actions/auth/getAuthFlowsAction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthFlowsAction.cjs","names":["runSelectPageAction","AuthFlowSelectConstants"],"sources":["../../../../../src/server/actions/auth/getAuthFlowsAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {AuthFlowSelectConstants, capPageSize, toAuthFlowSelectPage} from '@thunderid/node';\nimport runSelectPageAction, {SelectPageActionResult} from '../runSelectPageAction';\n\n/**\n * Request from the browser. Carries only paging; the session comes from the request cookie and the flow\n * type is fixed to authentication on the server.\n */\nexport interface GetAuthFlowsActionRequest {\n  limit?: number;\n  offset?: number;\n}\n\nexport type GetAuthFlowsActionResult = SelectPageActionResult;\n\n/**\n * Loads one page of authentication flows for an `AUTH_FLOW_SELECT` picker using the signed-in user's\n * server-held session.\n *\n * Never throws across the server action boundary; failures are mapped to a plain result.\n */\nconst getAuthFlowsAction = async ({limit, offset}: GetAuthFlowsActionRequest = {}): Promise<GetAuthFlowsActionResult> =>\n  runSelectPageAction('auth flows', {limit, offset}, async (client, sessionId, query) =>\n    toAuthFlowSelectPage(\n      await client.getFlows(\n        {flowType: AuthFlowSelectConstants.FLOW_TYPE, limit: capPageSize(query.limit), offset: query.offset},\n        sessionId,\n      ),\n      query.offset ?? 0,\n    ),\n  );\n\nexport default getAuthFlowsAction;\n"],"mappings":";;;;;;;;;;;;;;;AAyBA,MAAM,qBAAqB,OAAO,EAAC,OAAO,WAAqC,EAAE,KAC/EA,oCAAoB,cAAc;CAAC;CAAO;CAAO,EAAE,OAAO,QAAQ,WAAW,qDAEzE,MAAM,OAAO,SACX;CAAC,UAAUC,yCAAwB;CAAW,yCAAmB,MAAM,MAAM;CAAE,QAAQ,MAAM;CAAO,EACpG,UACD,EACD,MAAM,UAAU,EACjB,CACF;AAEH,iCAAe"}