@thunderid/nextjs 1.4.0 → 1.6.0

package/dist/cjs/client/admin.cjs

@@ -0,0 +1,6 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);

package/dist/cjs/client/components/{presentation → account}/ChangeCredential/ChangeCredential.cjs

@@ -4,7 +4,7 @@
 const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
 const require_getSessionId = require('../../../../server/actions/getSessionId.cjs');
 const require_useThunderID = require('../../../contexts/ThunderID/useThunderID.cjs');
-const require_updateUserCredentialsAction = require('../../../../server/actions/updateUserCredentialsAction.cjs');
+const require_updateUserCredentialsAction = require('../../../../server/actions/account/updateUserCredentialsAction.cjs');
 let __thunderid_node = require("@thunderid/node");
 __thunderid_node = require_rolldown_runtime.__toESM(__thunderid_node);
 let __thunderid_react = require("@thunderid/react");
@@ -14,7 +14,7 @@ react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/presentation/ChangeCredential/ChangeCredential.tsx
+//#region src/client/components/account/ChangeCredential/ChangeCredential.tsx
 /**
 * Title-cases a credential attribute name for use as a display-name fallback when the schema
 * declares no `displayName` for it, e.g. `pin` -> `Pin`.

package/dist/cjs/client/components/account/ChangeCredential/ChangeCredential.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChangeCredential.cjs","names":["ChangeCredential: FC<ChangeCredentialProps>","CredentialConstants","useThunderID","resolvedDisplayName: string","resolvedPolicy: PasswordPolicy","result: UpdateUserCredentialsActionResult","updateUserCredentialsAction","getSessionId","text: string","BaseChangeCredential"],"sources":["../../../../../../src/client/components/account/ChangeCredential/ChangeCredential.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {CredentialConstants, PasswordPolicy, resolveChangeCredentialPolicy, supportsCredential} from '@thunderid/node';\nimport {\n  BaseChangeCredential,\n  BaseChangeCredentialProps,\n  ChangePasswordValues,\n  useTranslation,\n  useUser,\n} from '@thunderid/react';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport updateUserCredentialsAction, {\n  UpdateUserCredentialsActionResult,\n} from '../../../../server/actions/account/updateUserCredentialsAction';\nimport getSessionId from '../../../../server/actions/getSessionId';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\n/**\n * Title-cases a credential attribute name for use as a display-name fallback when the schema\n * declares no `displayName` for it, e.g. `pin` -> `Pin`.\n */\nconst defaultDisplayName = (attribute: string): string => attribute.charAt(0).toUpperCase() + attribute.slice(1);\n\n/**\n * Props for the ChangeCredential component.\n * Mirrors `@thunderid/react`'s `ChangeCredentialProps` exactly, so a consumer moving between\n * the React and Next.js SDKs doesn't need to change how they call it.\n */\nexport type ChangeCredentialProps = Omit<\n  BaseChangeCredentialProps,\n  'credentialDisplayName' | 'error' | 'fieldErrors' | 'loading' | 'onSubmit' | 'success'\n> & {\n  /**\n   * The credential attribute this instance manages, any attribute the user's entity type\n   * schema declares `credential: true` (for example `password` or `pin`). Defaults to\n   * `password`. Render the component once per credential to let a user manage more than one,\n   * for example `<ChangeCredential />` for the password and\n   * `<ChangeCredential attribute=\"pin\" />` for a PIN.\n   */\n  attribute?: string;\n  /**\n   * Called after the credential has been changed successfully.\n   */\n  onSuccess?: () => void;\n};\n\n/**\n * ChangeCredential lets the signed-in user set a new value for one of their own credentials.\n *\n * This is the Next.js-specific implementation: it uses `BaseChangeCredential` from\n * `@thunderid/react` for rendering, but routes the write through\n * `updateUserCredentialsAction` (a server action) instead of calling the ThunderID server\n * directly from the browser, matching how `UserProfile` reaches `updateUserProfileAction`.\n *\n * Defaults to managing the `password` credential. To manage a different one (for example a\n * PIN declared on the user type schema), set `attribute`; render the component once per\n * credential to let a user manage several.\n *\n * @example\n * ```tsx\n * // Basic usage, manages the password\n * <ChangeCredential onSuccess={() => toast('Password updated')} />\n *\n * // Managing a different credential declared on the schema\n * <ChangeCredential attribute=\"pin\" />\n * ```\n */\nconst ChangeCredential: FC<ChangeCredentialProps> = ({\n  attribute = CredentialConstants.PASSWORD,\n  onSuccess,\n  policy,\n  preferences,\n  ...rest\n}: ChangeCredentialProps): ReactElement => {\n  const {preferences: contextPreferences} = useThunderID();\n  const {userSchema} = useUser();\n  const resolvedDisplayName: string = userSchema?.[attribute]?.displayName ?? defaultDisplayName(attribute);\n\n  const resolvedPreferences = useMemo(\n    () => ({\n      ...contextPreferences,\n      ...preferences,\n      user: {...contextPreferences?.user, ...preferences?.user},\n    }),\n    [contextPreferences, preferences],\n  );\n  const {t} = useTranslation(resolvedPreferences?.i18n);\n\n  const [error, setError] = useState<string | null>(null);\n  const [fieldErrors, setFieldErrors] = useState<Record<string, string>>({});\n  const [loading, setLoading] = useState<boolean>(false);\n  const [success, setSuccess] = useState<boolean>(false);\n\n  const resolvedPolicy: PasswordPolicy = useMemo(\n    () => resolveChangeCredentialPolicy(userSchema, attribute, policy),\n    [userSchema, attribute, policy],\n  );\n\n  const handleSubmit = async ({newPassword}: ChangePasswordValues): Promise<void> => {\n    setError(null);\n    setFieldErrors({});\n    setSuccess(false);\n    setLoading(true);\n\n    const result: UpdateUserCredentialsActionResult = await updateUserCredentialsAction(\n      {[attribute]: newPassword},\n      await getSessionId(),\n    );\n\n    if (result.success) {\n      setSuccess(true);\n      onSuccess?.();\n    } else {\n      const text: string =\n        result.message ??\n        t(result.messageKey, {credential: resolvedDisplayName, credentialLower: resolvedDisplayName.toLowerCase()});\n\n      if (result.field) {\n        setFieldErrors({[result.field]: text});\n      } else {\n        setError(text);\n      }\n    }\n\n    setLoading(false);\n  };\n\n  return (\n    <BaseChangeCredential\n      {...rest}\n      credentialDisplayName={resolvedDisplayName}\n      error={error}\n      fieldErrors={fieldErrors}\n      loading={loading}\n      policy={resolvedPolicy}\n      preferences={resolvedPreferences}\n      success={success}\n      unavailable={!supportsCredential(userSchema, attribute)}\n      onSubmit={(values: ChangePasswordValues): void => {\n        void handleSubmit(values);\n      }}\n    />\n  );\n};\n\nexport default ChangeCredential;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,sBAAsB,cAA8B,UAAU,OAAO,EAAE,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;AA8ChH,MAAMA,oBAA+C,EACnD,YAAYC,qCAAoB,UAChC,WACA,QACA,YACA,GAAG,WACsC;CACzC,MAAM,EAAC,aAAa,uBAAsBC,8BAAc;CACxD,MAAM,EAAC,+CAAuB;CAC9B,MAAMC,sBAA8B,aAAa,YAAY,eAAe,mBAAmB,UAAU;CAEzG,MAAM,gDACG;EACL,GAAG;EACH,GAAG;EACH,MAAM;GAAC,GAAG,oBAAoB;GAAM,GAAG,aAAa;GAAK;EAC1D,GACD,CAAC,oBAAoB,YAAY,CAClC;CACD,MAAM,EAAC,4CAAoB,qBAAqB,KAAK;CAErD,MAAM,CAAC,OAAO,gCAAoC,KAAK;CACvD,MAAM,CAAC,aAAa,sCAAmD,EAAE,CAAC;CAC1E,MAAM,CAAC,SAAS,kCAAgC,MAAM;CACtD,MAAM,CAAC,SAAS,kCAAgC,MAAM;CAEtD,MAAMC,8FACgC,YAAY,WAAW,OAAO,EAClE;EAAC;EAAY;EAAW;EAAO,CAChC;CAED,MAAM,eAAe,OAAO,EAAC,kBAAsD;AACjF,WAAS,KAAK;AACd,iBAAe,EAAE,CAAC;AAClB,aAAW,MAAM;AACjB,aAAW,KAAK;EAEhB,MAAMC,SAA4C,MAAMC,4CACtD,GAAE,YAAY,aAAY,EAC1B,MAAMC,8BAAc,CACrB;AAED,MAAI,OAAO,SAAS;AAClB,cAAW,KAAK;AAChB,gBAAa;SACR;GACL,MAAMC,OACJ,OAAO,WACP,EAAE,OAAO,YAAY;IAAC,YAAY;IAAqB,iBAAiB,oBAAoB,aAAa;IAAC,CAAC;AAE7G,OAAI,OAAO,MACT,gBAAe,GAAE,OAAO,QAAQ,MAAK,CAAC;OAEtC,UAAS,KAAK;;AAIlB,aAAW,MAAM;;AAGnB,QACE,2CAACC;EACC,GAAI;EACJ,uBAAuB;EAChB;EACM;EACJ;EACT,QAAQ;EACR,aAAa;EACJ;EACT,aAAa,0CAAoB,YAAY,UAAU;EACvD,WAAW,WAAuC;AAChD,GAAK,aAAa,OAAO;;GAE3B;;AAIN,+BAAe"}

package/dist/cjs/client/components/{presentation → account}/User/User.cjs

@@ -8,7 +8,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/presentation/User/User.tsx
+//#region src/client/components/account/User/User.tsx
 /**
 * A component that uses render props to expose the authenticated user object.
 * This component automatically retrieves the user from ThunderID context.

package/dist/cjs/client/components/account/User/User.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"User.cjs","names":["User: FC<UserProps>","useThunderID","BaseUser"],"sources":["../../../../../../src/client/components/account/User/User.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {BaseUser, BaseUserProps} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\n/**\n * Props for the User component.\n * Extends BaseUserProps but makes the user prop optional since it will be obtained from useThunderID\n */\nexport interface UserProps extends Omit<BaseUserProps, 'user'> {\n  /**\n   * Render prop that takes the user object and returns a ReactNode.\n   * @param user - The authenticated user object from ThunderID.\n   * @returns A ReactNode to render.\n   */\n  children: (user: any | null) => ReactNode;\n\n  /**\n   * Optional element to render when no user is signed in.\n   */\n  fallback?: ReactNode;\n}\n\n/**\n * A component that uses render props to expose the authenticated user object.\n * This component automatically retrieves the user from ThunderID context.\n *\n * @remarks This component is only supported in browser based React applications (CSR).\n *\n * @example\n * ```tsx\n * import { User } from '@thunderid/auth-react';\n *\n * const App = () => {\n *   return (\n *     <User fallback={<p>Please sign in</p>}>\n *       {(user) => (\n *         <div>\n *           <h1>Welcome, {user.displayName}!</h1>\n *           <p>Email: {user.email}</p>\n *         </div>\n *       )}\n *     </User>\n *   );\n * }\n * ```\n */\nconst User: FC<UserProps> = ({children, fallback = null}: UserProps): ReactElement => {\n  const {user} = useThunderID();\n\n  return (\n    <BaseUser user={user} fallback={fallback}>\n      {children}\n    </BaseUser>\n  );\n};\n\nUser.displayName = 'User';\n\nexport default User;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,MAAMA,QAAuB,EAAC,UAAU,WAAW,WAAmC;CACpF,MAAM,EAAC,SAAQC,8BAAc;AAE7B,QACE,2CAACC;EAAe;EAAgB;EAC7B;GACQ;;AAIf,KAAK,cAAc;AAEnB,mBAAe"}

package/dist/cjs/client/components/{presentation → account}/UserAvatar/UserAvatar.cjs

@@ -8,7 +8,7 @@ __thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/presentation/UserAvatar/UserAvatar.tsx
+//#region src/client/components/account/UserAvatar/UserAvatar.tsx
 /**
 * UserAvatar component renders an avatar for the currently signed-in user.
 * This component is the Next.js-specific implementation that uses BaseUserAvatar

package/dist/cjs/client/components/account/UserAvatar/UserAvatar.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserAvatar.cjs","names":["UserAvatar: FC<UserAvatarProps>","useThunderID","BaseUserAvatar"],"sources":["../../../../../../src/client/components/account/UserAvatar/UserAvatar.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {BaseUserAvatar, BaseUserAvatarProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport type UserAvatarProps = Omit<BaseUserAvatarProps, 'user'>;\n\n/**\n * UserAvatar component renders an avatar for the currently signed-in user.\n * This component is the Next.js-specific implementation that uses BaseUserAvatar\n * and automatically retrieves the user data from ThunderID context.\n *\n * @example\n * ```tsx\n * <UserAvatar size={48} />\n * ```\n */\nconst UserAvatar: FC<UserAvatarProps> = (props: UserAvatarProps): ReactElement => {\n  const {user} = useThunderID();\n\n  return <BaseUserAvatar user={user} {...props} />;\n};\n\nexport default UserAvatar;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAAmC,UAAyC;CAChF,MAAM,EAAC,SAAQC,8BAAc;AAE7B,QAAO,2CAACC;EAAqB;EAAM,GAAI;GAAS;;AAGlD,yBAAe"}

package/dist/cjs/client/components/{presentation → account}/UserDropdown/UserDropdown.cjs

@@ -11,7 +11,7 @@ react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/presentation/UserDropdown/UserDropdown.tsx
+//#region src/client/components/account/UserDropdown/UserDropdown.tsx
 /**
 * UserDropdown component displays a user avatar with a dropdown menu.
 * When clicked, it shows a popover with customizable menu items.

package/dist/cjs/client/components/account/UserDropdown/UserDropdown.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDropdown.cjs","names":["UserDropdown: FC<UserDropdownProps>","useThunderID","renderProps: UserDropdownRenderProps","UserProfile","BaseUserDropdown"],"sources":["../../../../../../src/client/components/account/UserDropdown/UserDropdown.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {BaseUserDropdown, BaseUserDropdownProps} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode, useState} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\nimport UserProfile from '../UserProfile/UserProfile.js';\n\n/**\n * Render props data passed to the children function\n */\nexport interface UserDropdownRenderProps {\n  /** Function to close the profile dialog */\n  closeProfile: () => void;\n  /** Whether user data is currently loading */\n  isLoading: boolean;\n  /** Whether the profile dialog is currently open */\n  isProfileOpen: boolean;\n  /** Function to open the user profile dialog */\n  openProfile: () => void;\n  /** Function to sign out the user */\n  signOut: () => void;\n  /** The authenticated user object */\n  user: any;\n}\n\n/**\n * Props for the UserDropdown component.\n * Extends BaseUserDropdownProps but excludes user, onManageProfile, and onSignOut since they're handled internally\n */\nexport type UserDropdownProps = Omit<BaseUserDropdownProps, 'user' | 'onManageProfile'> & {\n  /**\n   * Render prop function that receives user state and actions.\n   * When provided, this completely replaces the default dropdown rendering.\n   */\n  children?: (props: UserDropdownRenderProps) => ReactNode;\n  /**\n   * Called instead of opening the built-in \"Manage Profile\" popup when the \"Manage Profile\"\n   * menu item (see `manageProfileLabel`) is clicked. Use this when the app has its own\n   * profile/account page it wants to navigate to instead, for example with the router's\n   * `push()`.\n   *\n   * @example\n   * ```tsx\n   * <UserDropdown manageProfileLabel=\"Manage Account\" onManageProfile={() => router.push('/account')} />\n   * ```\n   */\n  onManageProfile?: () => void;\n  /**\n   * Custom render function for the dropdown content.\n   * When provided, this replaces just the dropdown content while keeping the trigger.\n   */\n  renderDropdown?: (props: UserDropdownRenderProps) => ReactNode;\n  /**\n   * Custom render function for the trigger button.\n   * When provided, this replaces just the trigger button while keeping the dropdown.\n   */\n  renderTrigger?: (props: UserDropdownRenderProps) => ReactNode;\n};\n\n/**\n * UserDropdown component displays a user avatar with a dropdown menu.\n * When clicked, it shows a popover with customizable menu items.\n * This component is the React-specific implementation that uses the BaseUserDropdown\n * and automatically retrieves the user data from ThunderID context.\n *\n * Supports render props for complete customization of the dropdown appearance and behavior.\n *\n * @example\n * ```tsx\n * // Basic usage - will use user from ThunderID context\n * <UserDropdown menuItems={[\n *   { label: 'Profile', onClick: () => {} },\n *   { label: 'Settings', href: '/settings' },\n *   { label: 'Sign Out', onClick: () => {} }\n * ]} />\n *\n * // With custom configuration\n * <UserDropdown\n *   showTriggerLabel={true}\n *   avatarSize={40}\n *   fallback={<div>Please sign in</div>}\n * />\n *\n * // Using render props for complete customization\n * <UserDropdown>\n *   {({ user, isLoading, openProfile, signOut }) => (\n *     <div>\n *       <button onClick={openProfile}>\n *         {user?.name || 'Loading...'}\n *       </button>\n *       <button onClick={signOut}>Logout</button>\n *     </div>\n *   )}\n * </UserDropdown>\n *\n * // Using partial render props\n * <UserDropdown\n *   renderTrigger={({ user, openProfile }) => (\n *     <button onClick={openProfile} className=\"custom-trigger\">\n *       Welcome, {user?.name}!\n *     </button>\n *   )}\n * />\n * ```\n */\nconst UserDropdown: FC<UserDropdownProps> = ({\n  children,\n  renderTrigger,\n  renderDropdown,\n  onManageProfile: onManageProfileOverride,\n  onSignOut,\n  ...rest\n}: UserDropdownProps): ReactElement => {\n  const {user, isLoading, signOut} = useThunderID();\n  const [isProfileOpen, setIsProfileOpen] = useState(false);\n\n  const handleManageProfile = (): void => {\n    if (onManageProfileOverride) {\n      onManageProfileOverride();\n      return;\n    }\n    setIsProfileOpen(true);\n  };\n\n  const handleSignOut = (): void => {\n    signOut();\n    if (onSignOut) {\n      onSignOut();\n    }\n  };\n\n  const closeProfile = (): void => {\n    setIsProfileOpen(false);\n  };\n\n  // Prepare render props data\n  const renderProps: UserDropdownRenderProps = {\n    closeProfile,\n    isLoading: isLoading!,\n    isProfileOpen,\n    openProfile: handleManageProfile,\n    signOut: handleSignOut,\n    user,\n  };\n\n  // If children render prop is provided, use it for complete customization\n  if (children) {\n    return (\n      <>\n        {children(renderProps)}\n        {!onManageProfileOverride && <UserProfile mode=\"popup\" open={isProfileOpen} onOpenChange={setIsProfileOpen} />}\n      </>\n    );\n  }\n\n  // If partial render props are provided, customize specific parts\n  if (renderTrigger || renderDropdown) {\n    // This would require significant changes to BaseUserDropdown to support partial customization\n    // For now, we'll provide a simple implementation that shows how it could work\n    return (\n      <>\n        {renderTrigger ? (\n          renderTrigger(renderProps)\n        ) : (\n          <BaseUserDropdown\n            user={user}\n            isLoading={isLoading}\n            onManageProfile={handleManageProfile}\n            onSignOut={handleSignOut}\n            {...rest}\n          />\n        )}\n        {/* Note: renderDropdown would need BaseUserDropdown modifications to implement properly */}\n        {!onManageProfileOverride && <UserProfile mode=\"popup\" open={isProfileOpen} onOpenChange={setIsProfileOpen} />}\n      </>\n    );\n  }\n\n  // Default behavior - use BaseUserDropdown as before\n  return (\n    <>\n      <BaseUserDropdown\n        user={user}\n        isLoading={isLoading}\n        onManageProfile={handleManageProfile}\n        onSignOut={handleSignOut}\n        {...rest}\n      />\n      {!onManageProfileOverride && isProfileOpen && (\n        <UserProfile mode=\"popup\" open={isProfileOpen} onOpenChange={setIsProfileOpen} />\n      )}\n    </>\n  );\n};\n\nexport default UserDropdown;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4GA,MAAMA,gBAAuC,EAC3C,UACA,eACA,gBACA,iBAAiB,yBACjB,UACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAM,WAAW,YAAWC,8BAAc;CACjD,MAAM,CAAC,eAAe,wCAA6B,MAAM;CAEzD,MAAM,4BAAkC;AACtC,MAAI,yBAAyB;AAC3B,4BAAyB;AACzB;;AAEF,mBAAiB,KAAK;;CAGxB,MAAM,sBAA4B;AAChC,WAAS;AACT,MAAI,UACF,YAAW;;CAIf,MAAM,qBAA2B;AAC/B,mBAAiB,MAAM;;CAIzB,MAAMC,cAAuC;EAC3C;EACW;EACX;EACA,aAAa;EACb,SAAS;EACT;EACD;AAGD,KAAI,SACF,QACE,qFACG,SAAS,YAAY,EACrB,CAAC,2BAA2B,2CAACC;EAAY,MAAK;EAAQ,MAAM;EAAe,cAAc;GAAoB,IAC7G;AAKP,KAAI,iBAAiB,eAGnB,QACE,qFACG,gBACC,cAAc,YAAY,GAE1B,2CAACC;EACO;EACK;EACX,iBAAiB;EACjB,WAAW;EACX,GAAI;GACJ,EAGH,CAAC,2BAA2B,2CAACD;EAAY,MAAK;EAAQ,MAAM;EAAe,cAAc;GAAoB,IAC7G;AAKP,QACE,qFACE,2CAACC;EACO;EACK;EACX,iBAAiB;EACjB,WAAW;EACX,GAAI;GACJ,EACD,CAAC,2BAA2B,iBAC3B,2CAACD;EAAY,MAAK;EAAQ,MAAM;EAAe,cAAc;GAAoB,IAElF;;AAIP,2BAAe"}

package/dist/cjs/client/components/{presentation → account}/UserProfile/UserProfile.cjs

@@ -13,7 +13,7 @@ react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/presentation/UserProfile/UserProfile.tsx
+//#region src/client/components/account/UserProfile/UserProfile.tsx
 /**
 * UserProfile component displays the authenticated user's profile information in a
 * structured and styled format. It shows user details such as display name, email,

package/dist/cjs/client/components/account/UserProfile/UserProfile.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserProfile.cjs","names":["UserProfile: FC<UserProfileProps>","useThunderID","isEditableProfile: boolean","result: {data: {user: User}; error: string; success: boolean}","getSessionId","BaseUserProfile"],"sources":["../../../../../../src/client/components/account/UserProfile/UserProfile.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {deepMerge, User} from '@thunderid/node';\nimport {BaseUserProfile, BaseUserProfileProps, useUser, useTranslation} from '@thunderid/react';\nimport {FC, ReactElement, useState} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\nimport getSessionId from '../../../../server/actions/getSessionId';\n\n/**\n * Props for the UserProfile component.\n * Extends BaseUserProfileProps but makes the user prop optional since it will be obtained from useThunderID\n */\nexport type UserProfileProps = Omit<BaseUserProfileProps, 'user' | 'profile' | 'flattenedProfile'>;\n\n/**\n * UserProfile component displays the authenticated user's profile information in a\n * structured and styled format. It shows user details such as display name, email,\n * username, and other available profile information from ThunderID.\n *\n * This component is the React-specific implementation that uses the BaseUserProfile\n * and automatically retrieves the user data from ThunderID context if not provided.\n *\n * @example\n * ```tsx\n * // Basic usage - will use user from ThunderID context\n * <UserProfile />\n *\n * // With explicit user data\n * <UserProfile user={specificUser} />\n *\n * // With card layout and custom fallback\n * <UserProfile\n *   cardLayout={true}\n *   fallback={<div>Please sign in to view your profile</div>}\n * />\n * ```\n */\nconst UserProfile: FC<UserProfileProps> = ({preferences, editable = true, ...rest}: UserProfileProps): ReactElement => {\n  const {preferences: contextPreferences} = useThunderID();\n  const {profile, flattenedProfile, onUpdateProfile, updateProfile, userSchema} = useUser();\n  const resolvedPreferences = {\n    ...contextPreferences,\n    ...preferences,\n    user: {\n      ...contextPreferences?.user,\n      ...preferences?.user,\n    },\n  };\n  const {t} = useTranslation(resolvedPreferences?.i18n);\n  const isEditableProfile: boolean = resolvedPreferences?.user?.fetchUserProfile === false ? false : editable;\n\n  const [error, setError] = useState<string | null>(null);\n\n  const handleProfileUpdate = async (payload: any): Promise<void> => {\n    setError(null);\n\n    const updatedAttributes = deepMerge((profile?.['attributes'] as Record<string, unknown>) ?? {}, payload);\n\n    Object.keys(updatedAttributes).forEach((key) => {\n      if (updatedAttributes[key] === undefined || updatedAttributes[key] === null) {\n        delete updatedAttributes[key];\n      }\n    });\n\n    const result: {data: {user: User}; error: string; success: boolean} = await updateProfile(\n      {payload: updatedAttributes},\n      await getSessionId(),\n    );\n\n    if (result.success) {\n      onUpdateProfile(result.data.user);\n    } else {\n      setError(result.error || t('user.profile.update.generic.error'));\n    }\n  };\n\n  return (\n    <BaseUserProfile\n      profile={profile!}\n      flattenedProfile={flattenedProfile!}\n      userSchema={userSchema}\n      editable={isEditableProfile}\n      onUpdate={isEditableProfile ? handleProfileUpdate : undefined}\n      error={error}\n      preferences={resolvedPreferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserProfile;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,MAAMA,eAAqC,EAAC,aAAa,WAAW,KAAM,GAAG,WAA0C;CACrH,MAAM,EAAC,aAAa,uBAAsBC,8BAAc;CACxD,MAAM,EAAC,SAAS,kBAAkB,iBAAiB,eAAe,+CAAuB;CACzF,MAAM,sBAAsB;EAC1B,GAAG;EACH,GAAG;EACH,MAAM;GACJ,GAAG,oBAAoB;GACvB,GAAG,aAAa;GACjB;EACF;CACD,MAAM,EAAC,4CAAoB,qBAAqB,KAAK;CACrD,MAAMC,oBAA6B,qBAAqB,MAAM,qBAAqB,QAAQ,QAAQ;CAEnG,MAAM,CAAC,OAAO,gCAAoC,KAAK;CAEvD,MAAM,sBAAsB,OAAO,YAAgC;AACjE,WAAS,KAAK;EAEd,MAAM,oDAA+B,UAAU,iBAA6C,EAAE,EAAE,QAAQ;AAExG,SAAO,KAAK,kBAAkB,CAAC,SAAS,QAAQ;AAC9C,OAAI,kBAAkB,SAAS,UAAa,kBAAkB,SAAS,KACrE,QAAO,kBAAkB;IAE3B;EAEF,MAAMC,SAAgE,MAAM,cAC1E,EAAC,SAAS,mBAAkB,EAC5B,MAAMC,8BAAc,CACrB;AAED,MAAI,OAAO,QACT,iBAAgB,OAAO,KAAK,KAAK;MAEjC,UAAS,OAAO,SAAS,EAAE,oCAAoC,CAAC;;AAIpE,QACE,2CAACC;EACU;EACS;EACN;EACZ,UAAU;EACV,UAAU,oBAAoB,sBAAsB;EAC7C;EACP,aAAa;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/client/components/admin/AgentCreate/AgentCreate.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/AgentCreate/AgentCreate.tsx
+/**
+* Creates an agent.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <AgentCreate onCreated={(agent) => router.push(`/admin/agents/${agent.id}`)} />
+* ```
+*/
+const AgentCreate = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.AgentCreate, { ...props });
+AgentCreate.displayName = "AgentCreate";
+var AgentCreate_default = AgentCreate;
+
+//#endregion
+exports.default = AgentCreate_default;
+//# sourceMappingURL=AgentCreate.cjs.map

package/dist/cjs/client/components/admin/AgentCreate/AgentCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentCreate.cjs","names":["AgentCreate: FC<AgentCreateProps>","ReactAgentCreate"],"sources":["../../../../../../src/client/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentCreate as ReactAgentCreate, AgentCreateProps as ReactAgentCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentCreateProps = ReactAgentCreateProps;\n\n/**\n * Creates an agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = (props: AgentCreateProps): ReactElement => <ReactAgentCreate {...props} />;\n\nAgentCreate.displayName = 'AgentCreate';\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/admin/AgentDetails/AgentDetails.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/AgentDetails/AgentDetails.tsx
+/**
+* Shows an agent's details, groups and roles, and optionally deletes the agent.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <AgentDetails agentId={id} deletable onDeleted={() => router.push('/admin/agents')} />
+* ```
+*/
+const AgentDetails = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.AgentDetails, { ...props });
+AgentDetails.displayName = "AgentDetails";
+var AgentDetails_default = AgentDetails;
+
+//#endregion
+exports.default = AgentDetails_default;
+//# sourceMappingURL=AgentDetails.cjs.map

package/dist/cjs/client/components/admin/AgentDetails/AgentDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","ReactAgentDetails"],"sources":["../../../../../../src/client/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentDetails as ReactAgentDetails, AgentDetailsProps as ReactAgentDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentDetailsProps = ReactAgentDetailsProps;\n\n/**\n * Shows an agent's details, groups and roles, and optionally deletes the agent.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={id} deletable onDeleted={() => router.push('/admin/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = (props: AgentDetailsProps): ReactElement => (\n  <ReactAgentDetails {...props} />\n);\n\nAgentDetails.displayName = 'AgentDetails';\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/admin/AgentList/AgentList.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/AgentList/AgentList.tsx
+/**
+* Lists agents, a page at a time.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <AgentList onSelect={(agent) => router.push(`/admin/agents/${agent.id}`)} />
+* ```
+*/
+const AgentList = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.AgentList, { ...props });
+AgentList.displayName = "AgentList";
+var AgentList_default = AgentList;
+
+//#endregion
+exports.default = AgentList_default;
+//# sourceMappingURL=AgentList.cjs.map

package/dist/cjs/client/components/admin/AgentList/AgentList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentList.cjs","names":["AgentList: FC<AgentListProps>","ReactAgentList"],"sources":["../../../../../../src/client/components/admin/AgentList/AgentList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {AgentList as ReactAgentList, AgentListProps as ReactAgentListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type AgentListProps = ReactAgentListProps;\n\n/**\n * Lists agents, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <AgentList onSelect={(agent) => router.push(`/admin/agents/${agent.id}`)} />\n * ```\n */\nconst AgentList: FC<AgentListProps> = (props: AgentListProps): ReactElement => <ReactAgentList {...props} />;\n\nAgentList.displayName = 'AgentList';\n\nexport default AgentList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,aAAiC,UAAwC,2CAACC,+BAAe,GAAI,QAAS;AAE5G,UAAU,cAAc;AAExB,wBAAe"}

package/dist/cjs/client/components/admin/GroupCreate/GroupCreate.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/GroupCreate/GroupCreate.tsx
+/**
+* Creates a group.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <GroupCreate onCreated={(group) => router.push(`/admin/groups/${group.id}`)} />
+* ```
+*/
+const GroupCreate = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.GroupCreate, { ...props });
+GroupCreate.displayName = "GroupCreate";
+var GroupCreate_default = GroupCreate;
+
+//#endregion
+exports.default = GroupCreate_default;
+//# sourceMappingURL=GroupCreate.cjs.map

package/dist/cjs/client/components/admin/GroupCreate/GroupCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","ReactGroupCreate"],"sources":["../../../../../../src/client/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupCreate as ReactGroupCreate, GroupCreateProps as ReactGroupCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupCreateProps = ReactGroupCreateProps;\n\n/**\n * Creates a group.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = (props: GroupCreateProps): ReactElement => <ReactGroupCreate {...props} />;\n\nGroupCreate.displayName = 'GroupCreate';\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/admin/GroupList/GroupList.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/GroupList/GroupList.tsx
+/**
+* Lists groups, a page at a time.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <GroupList onSelect={(group) => router.push(`/admin/groups/${group.id}`)} />
+* ```
+*/
+const GroupList = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.GroupList, { ...props });
+GroupList.displayName = "GroupList";
+var GroupList_default = GroupList;
+
+//#endregion
+exports.default = GroupList_default;
+//# sourceMappingURL=GroupList.cjs.map

package/dist/cjs/client/components/admin/GroupList/GroupList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","ReactGroupList"],"sources":["../../../../../../src/client/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupList as ReactGroupList, GroupListProps as ReactGroupListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupListProps = ReactGroupListProps;\n\n/**\n * Lists groups, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => router.push(`/admin/groups/${group.id}`)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = (props: GroupListProps): ReactElement => <ReactGroupList {...props} />;\n\nGroupList.displayName = 'GroupList';\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,aAAiC,UAAwC,2CAACC,+BAAe,GAAI,QAAS;AAE5G,UAAU,cAAc;AAExB,wBAAe"}

package/dist/cjs/client/components/admin/GroupMembers/GroupMembers.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/GroupMembers/GroupMembers.tsx
+/**
+* Lists a group's members and adds or removes them.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <GroupMembers groupId={id} />
+* ```
+*/
+const GroupMembers = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.GroupMembers, { ...props });
+GroupMembers.displayName = "GroupMembers";
+var GroupMembers_default = GroupMembers;
+
+//#endregion
+exports.default = GroupMembers_default;
+//# sourceMappingURL=GroupMembers.cjs.map

package/dist/cjs/client/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupMembers.cjs","names":["GroupMembers: FC<GroupMembersProps>","ReactGroupMembers"],"sources":["../../../../../../src/client/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {GroupMembers as ReactGroupMembers, GroupMembersProps as ReactGroupMembersProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type GroupMembersProps = ReactGroupMembersProps;\n\n/**\n * Lists a group's members and adds or removes them.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={id} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = (props: GroupMembersProps): ReactElement => (\n  <ReactGroupMembers {...props} />\n);\n\nGroupMembers.displayName = 'GroupMembers';\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,gBAAuC,UAC3C,2CAACC,kCAAkB,GAAI,QAAS;AAGlC,aAAa,cAAc;AAE3B,2BAAe"}

package/dist/cjs/client/components/admin/RoleAssignments/RoleAssignments.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/RoleAssignments/RoleAssignments.tsx
+/**
+* Lists a role's assignments and assigns or unassigns users, groups and agents.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <RoleAssignments roleId={id} />
+* ```
+*/
+const RoleAssignments = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.RoleAssignments, { ...props });
+RoleAssignments.displayName = "RoleAssignments";
+var RoleAssignments_default = RoleAssignments;
+
+//#endregion
+exports.default = RoleAssignments_default;
+//# sourceMappingURL=RoleAssignments.cjs.map

package/dist/cjs/client/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","ReactRoleAssignments"],"sources":["../../../../../../src/client/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RoleAssignments as ReactRoleAssignments,\n  RoleAssignmentsProps as ReactRoleAssignmentsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleAssignmentsProps = ReactRoleAssignmentsProps;\n\n/**\n * Lists a role's assignments and assigns or unassigns users, groups and agents.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={id} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = (props: RoleAssignmentsProps): ReactElement => (\n  <ReactRoleAssignments {...props} />\n);\n\nRoleAssignments.displayName = 'RoleAssignments';\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/admin/RoleCreate/RoleCreate.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/RoleCreate/RoleCreate.tsx
+/**
+* Creates a role.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <RoleCreate onCreated={(role) => router.push(`/admin/roles/${role.id}`)} />
+* ```
+*/
+const RoleCreate = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.RoleCreate, { ...props });
+RoleCreate.displayName = "RoleCreate";
+var RoleCreate_default = RoleCreate;
+
+//#endregion
+exports.default = RoleCreate_default;
+//# sourceMappingURL=RoleCreate.cjs.map

package/dist/cjs/client/components/admin/RoleCreate/RoleCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","ReactRoleCreate"],"sources":["../../../../../../src/client/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleCreate as ReactRoleCreate, RoleCreateProps as ReactRoleCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleCreateProps = ReactRoleCreateProps;\n\n/**\n * Creates a role.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = (props: RoleCreateProps): ReactElement => <ReactRoleCreate {...props} />;\n\nRoleCreate.displayName = 'RoleCreate';\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAAmC,UAAyC,2CAACC,gCAAgB,GAAI,QAAS;AAEhH,WAAW,cAAc;AAEzB,yBAAe"}

package/dist/cjs/client/components/admin/RoleList/RoleList.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/RoleList/RoleList.tsx
+/**
+* Lists roles, a page at a time.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <RoleList onSelect={(role) => router.push(`/admin/roles/${role.id}`)} />
+* ```
+*/
+const RoleList = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.RoleList, { ...props });
+RoleList.displayName = "RoleList";
+var RoleList_default = RoleList;
+
+//#endregion
+exports.default = RoleList_default;
+//# sourceMappingURL=RoleList.cjs.map

package/dist/cjs/client/components/admin/RoleList/RoleList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","ReactRoleList"],"sources":["../../../../../../src/client/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {RoleList as ReactRoleList, RoleListProps as ReactRoleListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RoleListProps = ReactRoleListProps;\n\n/**\n * Lists roles, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => router.push(`/admin/roles/${role.id}`)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = (props: RoleListProps): ReactElement => <ReactRoleList {...props} />;\n\nRoleList.displayName = 'RoleList';\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,YAA+B,UAAuC,2CAACC,8BAAc,GAAI,QAAS;AAExG,SAAS,cAAc;AAEvB,uBAAe"}

package/dist/cjs/client/components/admin/RolePermissions/RolePermissions.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/RolePermissions/RolePermissions.tsx
+/**
+* Shows the permissions a role grants.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <RolePermissions roleId={id} />
+* ```
+*/
+const RolePermissions = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.RolePermissions, { ...props });
+RolePermissions.displayName = "RolePermissions";
+var RolePermissions_default = RolePermissions;
+
+//#endregion
+exports.default = RolePermissions_default;
+//# sourceMappingURL=RolePermissions.cjs.map

package/dist/cjs/client/components/admin/RolePermissions/RolePermissions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","ReactRolePermissions"],"sources":["../../../../../../src/client/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {\n  RolePermissions as ReactRolePermissions,\n  RolePermissionsProps as ReactRolePermissionsProps,\n} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type RolePermissionsProps = ReactRolePermissionsProps;\n\n/**\n * Shows the permissions a role grants.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={id} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = (props: RolePermissionsProps): ReactElement => (\n  <ReactRolePermissions {...props} />\n);\n\nRolePermissions.displayName = 'RolePermissions';\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAMA,mBAA6C,UACjD,2CAACC,qCAAqB,GAAI,QAAS;AAGrC,gBAAgB,cAAc;AAE9B,8BAAe"}

package/dist/cjs/client/components/admin/UserCreate/UserCreate.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/UserCreate/UserCreate.tsx
+/**
+* Creates a user, or invites one with `mode="invite"`.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <UserCreate onCreated={(user) => router.push(`/admin/users/${user.id}`)} />
+* ```
+*/
+const UserCreate = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.UserCreate, { ...props });
+UserCreate.displayName = "UserCreate";
+var UserCreate_default = UserCreate;
+
+//#endregion
+exports.default = UserCreate_default;
+//# sourceMappingURL=UserCreate.cjs.map

package/dist/cjs/client/components/admin/UserCreate/UserCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","ReactUserCreate"],"sources":["../../../../../../src/client/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserCreate as ReactUserCreate, UserCreateProps as ReactUserCreateProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserCreateProps = ReactUserCreateProps;\n\n/**\n * Creates a user, or invites one with `mode=\"invite\"`.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = (props: UserCreateProps): ReactElement => <ReactUserCreate {...props} />;\n\nUserCreate.displayName = 'UserCreate';\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,cAAmC,UAAyC,2CAACC,gCAAgB,GAAI,QAAS;AAEhH,WAAW,cAAc;AAEzB,yBAAe"}

package/dist/cjs/client/components/admin/UserDetails/UserDetails.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/UserDetails/UserDetails.tsx
+/**
+* Shows a user's attributes and groups, and optionally edits or deletes the user.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <UserDetails userId={id} editable deletable onDeleted={() => router.push('/admin/users')} />
+* ```
+*/
+const UserDetails = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.UserDetails, { ...props });
+UserDetails.displayName = "UserDetails";
+var UserDetails_default = UserDetails;
+
+//#endregion
+exports.default = UserDetails_default;
+//# sourceMappingURL=UserDetails.cjs.map

package/dist/cjs/client/components/admin/UserDetails/UserDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","ReactUserDetails"],"sources":["../../../../../../src/client/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserDetails as ReactUserDetails, UserDetailsProps as ReactUserDetailsProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserDetailsProps = ReactUserDetailsProps;\n\n/**\n * Shows a user's attributes and groups, and optionally edits or deletes the user.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserDetails userId={id} editable deletable onDeleted={() => router.push('/admin/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = (props: UserDetailsProps): ReactElement => <ReactUserDetails {...props} />;\n\nUserDetails.displayName = 'UserDetails';\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,eAAqC,UAA0C,2CAACC,iCAAiB,GAAI,QAAS;AAEpH,YAAY,cAAc;AAE1B,0BAAe"}

package/dist/cjs/client/components/admin/UserList/UserList.cjs

@@ -0,0 +1,28 @@
+'use client';
+
+
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.cjs');
+let __thunderid_react = require("@thunderid/react");
+__thunderid_react = require_rolldown_runtime.__toESM(__thunderid_react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/client/components/admin/UserList/UserList.tsx
+/**
+* Lists the users the signed-in user is allowed to see, a page at a time.
+*
+* Management requests go through a server action with the signed-in user's server-held session, so
+* the access token never reaches the browser. Whether a request succeeds is the server's decision.
+*
+* @example
+* ```tsx
+* <UserList onSelect={(user) => router.push(`/admin/users/${user.id}`)} />
+* ```
+*/
+const UserList = (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__thunderid_react.UserList, { ...props });
+UserList.displayName = "UserList";
+var UserList_default = UserList;
+
+//#endregion
+exports.default = UserList_default;
+//# sourceMappingURL=UserList.cjs.map

package/dist/cjs/client/components/admin/UserList/UserList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserList.cjs","names":["UserList: FC<UserListProps>","ReactUserList"],"sources":["../../../../../../src/client/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {UserList as ReactUserList, UserListProps as ReactUserListProps} from '@thunderid/react';\nimport {FC, ReactElement} from 'react';\n\nexport type UserListProps = ReactUserListProps;\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * Management requests go through a server action with the signed-in user's server-held session, so\n * the access token never reaches the browser. Whether a request succeeds is the server's decision.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => router.push(`/admin/users/${user.id}`)} />\n * ```\n */\nconst UserList: FC<UserListProps> = (props: UserListProps): ReactElement => <ReactUserList {...props} />;\n\nUserList.displayName = 'UserList';\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAMA,YAA+B,UAAuC,2CAACC,8BAAc,GAAI,QAAS;AAExG,SAAS,cAAc;AAEvB,uBAAe"}

package/dist/cjs/client/components/{presentation → auth}/SignIn/SignIn.cjs

@@ -12,7 +12,7 @@ react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
-//#region src/client/components/presentation/SignIn/SignIn.tsx
+//#region src/client/components/auth/SignIn/SignIn.tsx
 /**
 * A SignIn component for Next.js that provides native authentication flow.
 * This component delegates to the BaseSignIn from @thunderid/react. Unlike BaseSignUp,