@thunderid/nextjs 1.4.0 → 1.6.0

package/dist/client/fetchUserTypesFromServer.js

@@ -1,5 +1,5 @@
 import loadPageFromAction_default from "./loadPageFromAction.js";
-import getUserTypesAction_default from "../server/actions/getUserTypesAction.js";
+import getUserTypesAction_default from "../server/actions/management/getUserTypesAction.js";
 
 //#region src/client/fetchUserTypesFromServer.ts
 /**

package/dist/client/fetchUserTypesFromServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchUserTypesFromServer.js","names":["fetchUserTypesFromServer: FetchUserTypes","loadPageFromAction","getUserTypesAction"],"sources":["../../src/client/fetchUserTypesFromServer.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {FetchUserTypes, SelectPage, SelectPageRequest} from '@thunderid/node';\nimport loadPageFromAction from './loadPageFromAction';\nimport getUserTypesAction from '../server/actions/getUserTypesAction';\n\n/**\n * The loader behind `UserTypeSelect`: loads user types through {@link getUserTypesAction} with the signed-in\n * user's server-held session. Requires an existing session. `request.signal` is not forwarded because an\n * `AbortSignal` cannot cross the server action boundary.\n */\nconst fetchUserTypesFromServer: FetchUserTypes = async ({limit, offset}: SelectPageRequest): Promise<SelectPage> =>\n  loadPageFromAction(await getUserTypesAction({limit, offset}), 'getUserTypesAction-Error-001');\n\nexport default fetchUserTypesFromServer;\n"],"mappings":";;;;;;;;;AAYA,MAAMA,2BAA2C,OAAO,EAAC,OAAO,aAC9DC,2BAAmB,MAAMC,2BAAmB;CAAC;CAAO;CAAO,CAAC,EAAE,+BAA+B;AAE/F,uCAAe"}
+{"version":3,"file":"fetchUserTypesFromServer.js","names":["fetchUserTypesFromServer: FetchUserTypes","loadPageFromAction","getUserTypesAction"],"sources":["../../src/client/fetchUserTypesFromServer.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {FetchUserTypes, SelectPage, SelectPageRequest} from '@thunderid/node';\nimport loadPageFromAction from './loadPageFromAction';\nimport getUserTypesAction from '../server/actions/management/getUserTypesAction';\n\n/**\n * The loader behind `UserTypeSelect`: loads user types through {@link getUserTypesAction} with the signed-in\n * user's server-held session. Requires an existing session. `request.signal` is not forwarded because an\n * `AbortSignal` cannot cross the server action boundary.\n */\nconst fetchUserTypesFromServer: FetchUserTypes = async ({limit, offset}: SelectPageRequest): Promise<SelectPage> =>\n  loadPageFromAction(await getUserTypesAction({limit, offset}), 'getUserTypesAction-Error-001');\n\nexport default fetchUserTypesFromServer;\n"],"mappings":";;;;;;;;;AAYA,MAAMA,2BAA2C,OAAO,EAAC,OAAO,aAC9DC,2BAAmB,MAAMC,2BAAmB;CAAC;CAAO;CAAO,CAAC,EAAE,+BAA+B;AAE/F,uCAAe"}

package/dist/client/fetchUsersFromServer.js

@@ -1,5 +1,5 @@
 import loadPageFromAction_default from "./loadPageFromAction.js";
-import getUsersAction_default from "../server/actions/getUsersAction.js";
+import getUsersAction_default from "../server/actions/management/getUsersAction.js";
 
 //#region src/client/fetchUsersFromServer.ts
 /**

package/dist/client/fetchUsersFromServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchUsersFromServer.js","names":["fetchUsersFromServer: FetchUsers","loadPageFromAction","getUsersAction"],"sources":["../../src/client/fetchUsersFromServer.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {FetchUsers, SelectPage, SelectPageRequest} from '@thunderid/node';\nimport loadPageFromAction from './loadPageFromAction';\nimport getUsersAction from '../server/actions/getUsersAction';\n\n/**\n * The loader behind `UserSelect`: loads users through {@link getUsersAction} with the signed-in user's server-held session.\n * Requires an existing session. `request.signal` is not forwarded because an `AbortSignal` cannot cross the server action boundary.\n */\nconst fetchUsersFromServer: FetchUsers = async ({filter, limit, offset}: SelectPageRequest): Promise<SelectPage> =>\n  loadPageFromAction(await getUsersAction({filter, limit, offset}), 'getUsersAction-Error-001');\n\nexport default fetchUsersFromServer;\n"],"mappings":";;;;;;;;AAWA,MAAMA,uBAAmC,OAAO,EAAC,QAAQ,OAAO,aAC9DC,2BAAmB,MAAMC,uBAAe;CAAC;CAAQ;CAAO;CAAO,CAAC,EAAE,2BAA2B;AAE/F,mCAAe"}
+{"version":3,"file":"fetchUsersFromServer.js","names":["fetchUsersFromServer: FetchUsers","loadPageFromAction","getUsersAction"],"sources":["../../src/client/fetchUsersFromServer.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {FetchUsers, SelectPage, SelectPageRequest} from '@thunderid/node';\nimport loadPageFromAction from './loadPageFromAction';\nimport getUsersAction from '../server/actions/management/getUsersAction';\n\n/**\n * The loader behind `UserSelect`: loads users through {@link getUsersAction} with the signed-in user's server-held session.\n * Requires an existing session. `request.signal` is not forwarded because an `AbortSignal` cannot cross the server action boundary.\n */\nconst fetchUsersFromServer: FetchUsers = async ({filter, limit, offset}: SelectPageRequest): Promise<SelectPage> =>\n  loadPageFromAction(await getUsersAction({filter, limit, offset}), 'getUsersAction-Error-001');\n\nexport default fetchUsersFromServer;\n"],"mappings":";;;;;;;;AAWA,MAAMA,uBAAmC,OAAO,EAAC,QAAQ,OAAO,aAC9DC,2BAAmB,MAAMC,uBAAe;CAAC;CAAQ;CAAO;CAAO,CAAC,EAAE,2BAA2B;AAE/F,mCAAe"}

package/dist/client/hooks/management/useGrantedPermissions.d.ts

@@ -0,0 +1,17 @@
+import type { GrantedPermissions } from '@thunderid/react';
+/**
+ * Reads the permissions the signed-in user's access token grants, for example to hide a page the
+ * user cannot use. The token stays on the server: only the list of permissions is sent to the
+ * browser, through a server action. Same shape as `useGrantedPermissions` in `@thunderid/react`.
+ *
+ * @returns The granted permissions and a `can` check.
+ *
+ * @example
+ * ```tsx
+ * const {can} = useGrantedPermissions();
+ * return can('system:group:view') ? <GroupList /> : null;
+ * ```
+ */
+declare const useGrantedPermissions: () => GrantedPermissions;
+export default useGrantedPermissions;
+//# sourceMappingURL=useGrantedPermissions.d.ts.map

package/dist/client/hooks/management/useGrantedPermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGrantedPermissions.d.ts","sourceRoot":"","sources":["../../../../src/client/hooks/management/useGrantedPermissions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAKzD;;;;;;;;;;;;GAYG;AACH,QAAA,MAAM,qBAAqB,QAAO,kBAiCjC,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/client/hooks/management/useGrantedPermissions.js

@@ -0,0 +1,48 @@
+'use client';
+
+
+import useThunderID_default from "../../contexts/ThunderID/useThunderID.js";
+import getGrantedPermissionsAction_default from "../../../server/actions/management/getGrantedPermissionsAction.js";
+import { hasPermission } from "@thunderid/node";
+import { useCallback, useEffect, useMemo, useState } from "react";
+
+//#region src/client/hooks/management/useGrantedPermissions.ts
+/**
+* Reads the permissions the signed-in user's access token grants, for example to hide a page the
+* user cannot use. The token stays on the server: only the list of permissions is sent to the
+* browser, through a server action. Same shape as `useGrantedPermissions` in `@thunderid/react`.
+*
+* @returns The granted permissions and a `can` check.
+*
+* @example
+* ```tsx
+* const {can} = useGrantedPermissions();
+* return can('system:group:view') ? <GroupList /> : null;
+* ```
+*/
+const useGrantedPermissions = () => {
+	const { isSignedIn } = useThunderID_default();
+	const [granted, setGranted] = useState(null);
+	useEffect(() => {
+		if (!isSignedIn) return;
+		let active = true;
+		getGrantedPermissionsAction_default().catch(() => []).then((tokenPermissions) => {
+			if (active) setGranted(tokenPermissions);
+		});
+		return () => {
+			active = false;
+		};
+	}, [isSignedIn]);
+	const permissions = useMemo(() => isSignedIn ? granted ?? [] : [], [granted, isSignedIn]);
+	const isLoading = !!isSignedIn && granted === null;
+	return {
+		can: useCallback((required) => hasPermission(permissions, required), [permissions]),
+		isLoading,
+		permissions
+	};
+};
+var useGrantedPermissions_default = useGrantedPermissions;
+
+//#endregion
+export { useGrantedPermissions_default as default };
+//# sourceMappingURL=useGrantedPermissions.js.map

package/dist/client/hooks/management/useGrantedPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGrantedPermissions.js","names":["useThunderID","getGrantedPermissionsAction","permissions: string[]","isLoading: boolean"],"sources":["../../../../src/client/hooks/management/useGrantedPermissions.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use client';\n\nimport {hasPermission} from '@thunderid/node';\nimport type {GrantedPermissions} from '@thunderid/react';\nimport {useCallback, useEffect, useMemo, useState} from 'react';\nimport getGrantedPermissionsAction from '../../../server/actions/management/getGrantedPermissionsAction';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * Reads the permissions the signed-in user's access token grants, for example to hide a page the\n * user cannot use. The token stays on the server: only the list of permissions is sent to the\n * browser, through a server action. Same shape as `useGrantedPermissions` in `@thunderid/react`.\n *\n * @returns The granted permissions and a `can` check.\n *\n * @example\n * ```tsx\n * const {can} = useGrantedPermissions();\n * return can('system:group:view') ? <GroupList /> : null;\n * ```\n */\nconst useGrantedPermissions = (): GrantedPermissions => {\n  const {isSignedIn} = useThunderID();\n  const [granted, setGranted] = useState<string[] | null>(null);\n\n  useEffect(() => {\n    if (!isSignedIn) {\n      return undefined;\n    }\n\n    let active = true;\n\n    void getGrantedPermissionsAction()\n      .catch((): string[] => [])\n      .then((tokenPermissions: string[]) => {\n        if (active) {\n          setGranted(tokenPermissions);\n        }\n      });\n\n    return (): void => {\n      active = false;\n    };\n  }, [isSignedIn]);\n\n  const permissions: string[] = useMemo(() => (isSignedIn ? (granted ?? []) : []), [granted, isSignedIn]);\n  const isLoading: boolean = !!isSignedIn && granted === null;\n\n  const can: (required: string) => boolean = useCallback(\n    (required: string): boolean => hasPermission(permissions, required),\n    [permissions],\n  );\n\n  return {can, isLoading, permissions};\n};\n\nexport default useGrantedPermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,8BAAkD;CACtD,MAAM,EAAC,eAAcA,sBAAc;CACnC,MAAM,CAAC,SAAS,cAAc,SAA0B,KAAK;AAE7D,iBAAgB;AACd,MAAI,CAAC,WACH;EAGF,IAAI,SAAS;AAEb,EAAKC,qCAA6B,CAC/B,YAAsB,EAAE,CAAC,CACzB,MAAM,qBAA+B;AACpC,OAAI,OACF,YAAW,iBAAiB;IAE9B;AAEJ,eAAmB;AACjB,YAAS;;IAEV,CAAC,WAAW,CAAC;CAEhB,MAAMC,cAAwB,cAAe,aAAc,WAAW,EAAE,GAAI,EAAE,EAAG,CAAC,SAAS,WAAW,CAAC;CACvG,MAAMC,YAAqB,CAAC,CAAC,cAAc,YAAY;AAOvD,QAAO;EAAC,KALmC,aACxC,aAA8B,cAAc,aAAa,SAAS,EACnE,CAAC,YAAY,CACd;EAEY;EAAW;EAAY;;AAGtC,oCAAe"}

package/dist/client/index.d.ts

@@ -1,32 +1,60 @@
 export { default as useThunderID } from './contexts/ThunderID/useThunderID';
-export { default as SignedIn } from './components/control/SignedIn/SignedIn';
-export type { SignedInProps } from './components/control/SignedIn/SignedIn';
-export { default as SignedOut } from './components/control/SignedOut/SignedOut';
-export type { SignedOutProps } from './components/control/SignedOut/SignedOut';
-export { default as SignInButton } from './components/actions/SignInButton/SignInButton';
-export type { SignInButtonProps } from './components/actions/SignInButton/SignInButton';
-export { default as SignUpButton } from './components/actions/SignUpButton/SignUpButton';
-export type { SignUpButtonProps } from './components/actions/SignUpButton/SignUpButton';
-export { default as SignIn } from './components/presentation/SignIn/SignIn';
-export type { SignInProps } from './components/presentation/SignIn/SignIn';
-export { default as SignOutButton } from './components/actions/SignOutButton/SignOutButton';
-export type { SignOutButtonProps } from './components/actions/SignOutButton/SignOutButton';
-export { default as User } from './components/presentation/User/User';
-export type { UserProps } from './components/presentation/User/User';
-export { default as SignUp } from './components/presentation/SignUp/SignUp';
-export type { SignUpProps } from './components/presentation/SignUp/SignUp';
-export { default as UserDropdown } from './components/presentation/UserDropdown/UserDropdown';
-export type { UserDropdownProps } from './components/presentation/UserDropdown/UserDropdown';
-export { default as UserAvatar } from './components/presentation/UserAvatar/UserAvatar';
-export type { UserAvatarProps } from './components/presentation/UserAvatar/UserAvatar';
-export { default as UserProfile } from './components/presentation/UserProfile/UserProfile';
-export type { UserProfileProps } from './components/presentation/UserProfile/UserProfile';
-export { default as ChangeCredential } from './components/presentation/ChangeCredential/ChangeCredential';
-export type { ChangeCredentialProps } from './components/presentation/ChangeCredential/ChangeCredential';
-export { default as UserSelect } from './components/presentation/UserSelect/UserSelect';
-export type { UserSelectProps } from './components/presentation/UserSelect/UserSelect';
-export { default as AuthFlowSelect } from './components/presentation/AuthFlowSelect/AuthFlowSelect';
-export type { AuthFlowSelectProps } from './components/presentation/AuthFlowSelect/AuthFlowSelect';
-export { default as UserTypeSelect } from './components/presentation/UserTypeSelect/UserTypeSelect';
-export type { UserTypeSelectProps } from './components/presentation/UserTypeSelect/UserTypeSelect';
+export { default as SignedIn } from './components/auth/guards/SignedIn/SignedIn';
+export type { SignedInProps } from './components/auth/guards/SignedIn/SignedIn';
+export { default as SignedOut } from './components/auth/guards/SignedOut/SignedOut';
+export type { SignedOutProps } from './components/auth/guards/SignedOut/SignedOut';
+export { default as SignInButton } from './components/auth/buttons/SignInButton/SignInButton';
+export type { SignInButtonProps } from './components/auth/buttons/SignInButton/SignInButton';
+export { default as SignUpButton } from './components/auth/buttons/SignUpButton/SignUpButton';
+export type { SignUpButtonProps } from './components/auth/buttons/SignUpButton/SignUpButton';
+export { default as SignIn } from './components/auth/SignIn/SignIn';
+export type { SignInProps } from './components/auth/SignIn/SignIn';
+export { default as SignOutButton } from './components/auth/buttons/SignOutButton/SignOutButton';
+export type { SignOutButtonProps } from './components/auth/buttons/SignOutButton/SignOutButton';
+export { default as User } from './components/account/User/User';
+export type { UserProps } from './components/account/User/User';
+export { default as SignUp } from './components/auth/SignUp/SignUp';
+export type { SignUpProps } from './components/auth/SignUp/SignUp';
+export { default as UserDropdown } from './components/account/UserDropdown/UserDropdown';
+export type { UserDropdownProps } from './components/account/UserDropdown/UserDropdown';
+export { default as UserAvatar } from './components/account/UserAvatar/UserAvatar';
+export type { UserAvatarProps } from './components/account/UserAvatar/UserAvatar';
+export { default as UserProfile } from './components/account/UserProfile/UserProfile';
+export type { UserProfileProps } from './components/account/UserProfile/UserProfile';
+export { default as ChangeCredential } from './components/account/ChangeCredential/ChangeCredential';
+export type { ChangeCredentialProps } from './components/account/ChangeCredential/ChangeCredential';
+export { default as UserSelect } from './components/primitives/UserSelect/UserSelect';
+export type { UserSelectProps } from './components/primitives/UserSelect/UserSelect';
+export { default as AuthFlowSelect } from './components/primitives/AuthFlowSelect/AuthFlowSelect';
+export type { AuthFlowSelectProps } from './components/primitives/AuthFlowSelect/AuthFlowSelect';
+export { default as UserTypeSelect } from './components/primitives/UserTypeSelect/UserTypeSelect';
+export type { UserTypeSelectProps } from './components/primitives/UserTypeSelect/UserTypeSelect';
+export { default as UserList } from './components/admin/UserList/UserList';
+export type { UserListProps } from './components/admin/UserList/UserList';
+export { default as UserCreate } from './components/admin/UserCreate/UserCreate';
+export type { UserCreateProps } from './components/admin/UserCreate/UserCreate';
+export { default as UserDetails } from './components/admin/UserDetails/UserDetails';
+export type { UserDetailsProps } from './components/admin/UserDetails/UserDetails';
+export { default as GroupList } from './components/admin/GroupList/GroupList';
+export type { GroupListProps } from './components/admin/GroupList/GroupList';
+export { default as GroupCreate } from './components/admin/GroupCreate/GroupCreate';
+export type { GroupCreateProps } from './components/admin/GroupCreate/GroupCreate';
+export { default as GroupMembers } from './components/admin/GroupMembers/GroupMembers';
+export type { GroupMembersProps } from './components/admin/GroupMembers/GroupMembers';
+export { default as RoleList } from './components/admin/RoleList/RoleList';
+export type { RoleListProps } from './components/admin/RoleList/RoleList';
+export { default as RoleCreate } from './components/admin/RoleCreate/RoleCreate';
+export type { RoleCreateProps } from './components/admin/RoleCreate/RoleCreate';
+export { default as RoleAssignments } from './components/admin/RoleAssignments/RoleAssignments';
+export type { RoleAssignmentsProps } from './components/admin/RoleAssignments/RoleAssignments';
+export { default as RolePermissions } from './components/admin/RolePermissions/RolePermissions';
+export type { RolePermissionsProps } from './components/admin/RolePermissions/RolePermissions';
+export { default as AgentList } from './components/admin/AgentList/AgentList';
+export type { AgentListProps } from './components/admin/AgentList/AgentList';
+export { default as AgentCreate } from './components/admin/AgentCreate/AgentCreate';
+export type { AgentCreateProps } from './components/admin/AgentCreate/AgentCreate';
+export { default as AgentDetails } from './components/admin/AgentDetails/AgentDetails';
+export type { AgentDetailsProps } from './components/admin/AgentDetails/AgentDetails';
+export { default as useGrantedPermissions } from './hooks/management/useGrantedPermissions';
+export * from './admin';
 //# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,wCAAwC,CAAC;AAC3E,YAAY,EAAC,aAAa,EAAC,MAAM,wCAAwC,CAAC;AAE1E,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,0CAA0C,CAAC;AAC9E,YAAY,EAAC,cAAc,EAAC,MAAM,0CAA0C,CAAC;AAE7E,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,gDAAgD,CAAC;AACvF,YAAY,EAAC,iBAAiB,EAAC,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,gDAAgD,CAAC;AACvF,YAAY,EAAC,iBAAiB,EAAC,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,yCAAyC,CAAC;AAC1E,YAAY,EAAC,WAAW,EAAC,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,kDAAkD,CAAC;AAC1F,YAAY,EAAC,kBAAkB,EAAC,MAAM,kDAAkD,CAAC;AAEzF,OAAO,EAAC,OAAO,IAAI,IAAI,EAAC,MAAM,qCAAqC,CAAC;AACpE,YAAY,EAAC,SAAS,EAAC,MAAM,qCAAqC,CAAC;AAEnE,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,yCAAyC,CAAC;AAC1E,YAAY,EAAC,WAAW,EAAC,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,iDAAiD,CAAC;AACtF,YAAY,EAAC,eAAe,EAAC,MAAM,iDAAiD,CAAC;AAErF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,mDAAmD,CAAC;AACzF,YAAY,EAAC,gBAAgB,EAAC,MAAM,mDAAmD,CAAC;AAExF,OAAO,EAAC,OAAO,IAAI,gBAAgB,EAAC,MAAM,6DAA6D,CAAC;AACxG,YAAY,EAAC,qBAAqB,EAAC,MAAM,6DAA6D,CAAC;AAEvG,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,iDAAiD,CAAC;AACtF,YAAY,EAAC,eAAe,EAAC,MAAM,iDAAiD,CAAC;AAErF,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,yDAAyD,CAAC;AAClG,YAAY,EAAC,mBAAmB,EAAC,MAAM,yDAAyD,CAAC;AAEjG,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,yDAAyD,CAAC;AAClG,YAAY,EAAC,mBAAmB,EAAC,MAAM,yDAAyD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,4CAA4C,CAAC;AAC/E,YAAY,EAAC,aAAa,EAAC,MAAM,4CAA4C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,8CAA8C,CAAC;AAClF,YAAY,EAAC,cAAc,EAAC,MAAM,8CAA8C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,qDAAqD,CAAC;AAC5F,YAAY,EAAC,iBAAiB,EAAC,MAAM,qDAAqD,CAAC;AAE3F,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAC,WAAW,EAAC,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,uDAAuD,CAAC;AAC/F,YAAY,EAAC,kBAAkB,EAAC,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAC,OAAO,IAAI,IAAI,EAAC,MAAM,gCAAgC,CAAC;AAC/D,YAAY,EAAC,SAAS,EAAC,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAC,OAAO,IAAI,MAAM,EAAC,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAC,WAAW,EAAC,MAAM,iCAAiC,CAAC;AAEjE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,gDAAgD,CAAC;AACvF,YAAY,EAAC,iBAAiB,EAAC,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,4CAA4C,CAAC;AACjF,YAAY,EAAC,eAAe,EAAC,MAAM,4CAA4C,CAAC;AAEhF,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,8CAA8C,CAAC;AACpF,YAAY,EAAC,gBAAgB,EAAC,MAAM,8CAA8C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,gBAAgB,EAAC,MAAM,wDAAwD,CAAC;AACnG,YAAY,EAAC,qBAAqB,EAAC,MAAM,wDAAwD,CAAC;AAElG,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,+CAA+C,CAAC;AACpF,YAAY,EAAC,eAAe,EAAC,MAAM,+CAA+C,CAAC;AAEnF,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAE/F,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,uDAAuD,CAAC;AAChG,YAAY,EAAC,mBAAmB,EAAC,MAAM,uDAAuD,CAAC;AAI/F,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,sCAAsC,CAAC;AACzE,YAAY,EAAC,aAAa,EAAC,MAAM,sCAAsC,CAAC;AAExE,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,0CAA0C,CAAC;AAC/E,YAAY,EAAC,eAAe,EAAC,MAAM,0CAA0C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,4CAA4C,CAAC;AAClF,YAAY,EAAC,gBAAgB,EAAC,MAAM,4CAA4C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,wCAAwC,CAAC;AAC5E,YAAY,EAAC,cAAc,EAAC,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,4CAA4C,CAAC;AAClF,YAAY,EAAC,gBAAgB,EAAC,MAAM,4CAA4C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,8CAA8C,CAAC;AACrF,YAAY,EAAC,iBAAiB,EAAC,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAC,OAAO,IAAI,QAAQ,EAAC,MAAM,sCAAsC,CAAC;AACzE,YAAY,EAAC,aAAa,EAAC,MAAM,sCAAsC,CAAC;AAExE,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,0CAA0C,CAAC;AAC/E,YAAY,EAAC,eAAe,EAAC,MAAM,0CAA0C,CAAC;AAE9E,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAC,oBAAoB,EAAC,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,oDAAoD,CAAC;AAC9F,YAAY,EAAC,oBAAoB,EAAC,MAAM,oDAAoD,CAAC;AAE7F,OAAO,EAAC,OAAO,IAAI,SAAS,EAAC,MAAM,wCAAwC,CAAC;AAC5E,YAAY,EAAC,cAAc,EAAC,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,4CAA4C,CAAC;AAClF,YAAY,EAAC,gBAAgB,EAAC,MAAM,4CAA4C,CAAC;AAEjF,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,8CAA8C,CAAC;AACrF,YAAY,EAAC,iBAAiB,EAAC,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAC,OAAO,IAAI,qBAAqB,EAAC,MAAM,0CAA0C,CAAC;AAE1F,cAAc,SAAS,CAAC"}

package/dist/client/index.js

@@ -1,18 +1,33 @@
 import useThunderID_default from "./contexts/ThunderID/useThunderID.js";
-import SignedIn_default from "./components/control/SignedIn/SignedIn.js";
-import SignedOut_default from "./components/control/SignedOut/SignedOut.js";
-import SignInButton_default from "./components/actions/SignInButton/SignInButton.js";
-import SignUpButton_default from "./components/actions/SignUpButton/SignUpButton.js";
-import SignIn_default from "./components/presentation/SignIn/SignIn.js";
-import SignOutButton_default from "./components/actions/SignOutButton/SignOutButton.js";
-import User_default from "./components/presentation/User/User.js";
-import SignUp_default from "./components/presentation/SignUp/SignUp.js";
-import UserProfile_default from "./components/presentation/UserProfile/UserProfile.js";
-import UserDropdown_default from "./components/presentation/UserDropdown/UserDropdown.js";
-import UserAvatar_default from "./components/presentation/UserAvatar/UserAvatar.js";
-import ChangeCredential_default from "./components/presentation/ChangeCredential/ChangeCredential.js";
-import UserSelect_default from "./components/presentation/UserSelect/UserSelect.js";
-import AuthFlowSelect_default from "./components/presentation/AuthFlowSelect/AuthFlowSelect.js";
-import UserTypeSelect_default from "./components/presentation/UserTypeSelect/UserTypeSelect.js";
+import SignedIn_default from "./components/auth/guards/SignedIn/SignedIn.js";
+import SignedOut_default from "./components/auth/guards/SignedOut/SignedOut.js";
+import SignInButton_default from "./components/auth/buttons/SignInButton/SignInButton.js";
+import SignUpButton_default from "./components/auth/buttons/SignUpButton/SignUpButton.js";
+import SignIn_default from "./components/auth/SignIn/SignIn.js";
+import SignOutButton_default from "./components/auth/buttons/SignOutButton/SignOutButton.js";
+import User_default from "./components/account/User/User.js";
+import SignUp_default from "./components/auth/SignUp/SignUp.js";
+import UserProfile_default from "./components/account/UserProfile/UserProfile.js";
+import UserDropdown_default from "./components/account/UserDropdown/UserDropdown.js";
+import UserAvatar_default from "./components/account/UserAvatar/UserAvatar.js";
+import ChangeCredential_default from "./components/account/ChangeCredential/ChangeCredential.js";
+import UserSelect_default from "./components/primitives/UserSelect/UserSelect.js";
+import AuthFlowSelect_default from "./components/primitives/AuthFlowSelect/AuthFlowSelect.js";
+import UserTypeSelect_default from "./components/primitives/UserTypeSelect/UserTypeSelect.js";
+import UserList_default from "./components/admin/UserList/UserList.js";
+import UserCreate_default from "./components/admin/UserCreate/UserCreate.js";
+import UserDetails_default from "./components/admin/UserDetails/UserDetails.js";
+import GroupList_default from "./components/admin/GroupList/GroupList.js";
+import GroupCreate_default from "./components/admin/GroupCreate/GroupCreate.js";
+import GroupMembers_default from "./components/admin/GroupMembers/GroupMembers.js";
+import RoleList_default from "./components/admin/RoleList/RoleList.js";
+import RoleCreate_default from "./components/admin/RoleCreate/RoleCreate.js";
+import RoleAssignments_default from "./components/admin/RoleAssignments/RoleAssignments.js";
+import RolePermissions_default from "./components/admin/RolePermissions/RolePermissions.js";
+import AgentList_default from "./components/admin/AgentList/AgentList.js";
+import AgentCreate_default from "./components/admin/AgentCreate/AgentCreate.js";
+import AgentDetails_default from "./components/admin/AgentDetails/AgentDetails.js";
+import useGrantedPermissions_default from "./hooks/management/useGrantedPermissions.js";
+import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, useAddGroupMembers, useAddRoleAssignments, useCreateAgent, useCreateGroup, useCreateRole, useCreateUser, useDeleteAgent, useDeleteGroup, useDeleteRole, useDeleteUser, useGetAgent, useGetAgentGroups, useGetAgentRoles, useGetAgentTypes, useGetAgents, useGetGroup, useGetGroupMembers, useGetGroups, useGetRole, useGetRoleAssignments, useGetRoles, useGetUser, useGetUserGroups, useGetUserTypes, useGetUsers, useRemoveGroupMembers, useRemoveRoleAssignments, useUpdateAgent, useUpdateGroup, useUpdateRole, useUpdateUser } from "./admin.js";
 
 export {  };

package/dist/index.js

@@ -6,21 +6,36 @@ import createRouteMatcher_default from "./server/proxy/createRouteMatcher.js";
 import backchannelLogout_default from "./server/backchannelLogout.js";
 import "./server/index.js";
 import useThunderID_default from "./client/contexts/ThunderID/useThunderID.js";
-import SignedIn_default from "./client/components/control/SignedIn/SignedIn.js";
-import SignedOut_default from "./client/components/control/SignedOut/SignedOut.js";
-import SignInButton_default from "./client/components/actions/SignInButton/SignInButton.js";
-import SignUpButton_default from "./client/components/actions/SignUpButton/SignUpButton.js";
-import SignIn_default from "./client/components/presentation/SignIn/SignIn.js";
-import SignOutButton_default from "./client/components/actions/SignOutButton/SignOutButton.js";
-import User_default from "./client/components/presentation/User/User.js";
-import SignUp_default from "./client/components/presentation/SignUp/SignUp.js";
-import UserProfile_default from "./client/components/presentation/UserProfile/UserProfile.js";
-import UserDropdown_default from "./client/components/presentation/UserDropdown/UserDropdown.js";
-import UserAvatar_default from "./client/components/presentation/UserAvatar/UserAvatar.js";
-import ChangeCredential_default from "./client/components/presentation/ChangeCredential/ChangeCredential.js";
-import UserSelect_default from "./client/components/presentation/UserSelect/UserSelect.js";
-import AuthFlowSelect_default from "./client/components/presentation/AuthFlowSelect/AuthFlowSelect.js";
-import UserTypeSelect_default from "./client/components/presentation/UserTypeSelect/UserTypeSelect.js";
+import SignedIn_default from "./client/components/auth/guards/SignedIn/SignedIn.js";
+import SignedOut_default from "./client/components/auth/guards/SignedOut/SignedOut.js";
+import SignInButton_default from "./client/components/auth/buttons/SignInButton/SignInButton.js";
+import SignUpButton_default from "./client/components/auth/buttons/SignUpButton/SignUpButton.js";
+import SignIn_default from "./client/components/auth/SignIn/SignIn.js";
+import SignOutButton_default from "./client/components/auth/buttons/SignOutButton/SignOutButton.js";
+import User_default from "./client/components/account/User/User.js";
+import SignUp_default from "./client/components/auth/SignUp/SignUp.js";
+import UserProfile_default from "./client/components/account/UserProfile/UserProfile.js";
+import UserDropdown_default from "./client/components/account/UserDropdown/UserDropdown.js";
+import UserAvatar_default from "./client/components/account/UserAvatar/UserAvatar.js";
+import ChangeCredential_default from "./client/components/account/ChangeCredential/ChangeCredential.js";
+import UserSelect_default from "./client/components/primitives/UserSelect/UserSelect.js";
+import AuthFlowSelect_default from "./client/components/primitives/AuthFlowSelect/AuthFlowSelect.js";
+import UserTypeSelect_default from "./client/components/primitives/UserTypeSelect/UserTypeSelect.js";
+import UserList_default from "./client/components/admin/UserList/UserList.js";
+import UserCreate_default from "./client/components/admin/UserCreate/UserCreate.js";
+import UserDetails_default from "./client/components/admin/UserDetails/UserDetails.js";
+import GroupList_default from "./client/components/admin/GroupList/GroupList.js";
+import GroupCreate_default from "./client/components/admin/GroupCreate/GroupCreate.js";
+import GroupMembers_default from "./client/components/admin/GroupMembers/GroupMembers.js";
+import RoleList_default from "./client/components/admin/RoleList/RoleList.js";
+import RoleCreate_default from "./client/components/admin/RoleCreate/RoleCreate.js";
+import RoleAssignments_default from "./client/components/admin/RoleAssignments/RoleAssignments.js";
+import RolePermissions_default from "./client/components/admin/RolePermissions/RolePermissions.js";
+import AgentList_default from "./client/components/admin/AgentList/AgentList.js";
+import AgentCreate_default from "./client/components/admin/AgentCreate/AgentCreate.js";
+import AgentDetails_default from "./client/components/admin/AgentDetails/AgentDetails.js";
+import useGrantedPermissions_default from "./client/hooks/management/useGrantedPermissions.js";
+import { BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, useAddGroupMembers, useAddRoleAssignments, useCreateAgent, useCreateGroup, useCreateRole, useCreateUser, useDeleteAgent, useDeleteGroup, useDeleteRole, useDeleteUser, useGetAgent, useGetAgentGroups, useGetAgentRoles, useGetAgentTypes, useGetAgents, useGetGroup, useGetGroupMembers, useGetGroups, useGetRole, useGetRoleAssignments, useGetRoles, useGetUser, useGetUserGroups, useGetUserTypes, useGetUsers, useRemoveGroupMembers, useRemoveRoleAssignments, useUpdateAgent, useUpdateGroup, useUpdateRole, useUpdateUser } from "./client/admin.js";
 import "./client/index.js";
 
-export { AuthFlowSelect_default as AuthFlowSelect, ChangeCredential_default as ChangeCredential, SignIn_default as SignIn, SignInButton_default as SignInButton, SignOutButton_default as SignOutButton, SignUp_default as SignUp, SignUpButton_default as SignUpButton, SignedIn_default as SignedIn, SignedOut_default as SignedOut, ThunderIDNextClient_default as ThunderIDNext, ThunderIDProvider_default as ThunderIDProvider, User_default as User, UserAvatar_default as UserAvatar, UserDropdown_default as UserDropdown, UserProfile_default as UserProfile, UserSelect_default as UserSelect, UserTypeSelect_default as UserTypeSelect, backchannelLogout_default as backchannelLogout, createRouteMatcher_default as createRouteMatcher, removeChunkedCookieFromHeader, replaceChunkedCookieInHeader, thunderIDProxy_default as thunderIDProxy, thunderid_default as thunderid, useThunderID_default as useThunderID };
+export { AgentCreate_default as AgentCreate, AgentDetails_default as AgentDetails, AgentList_default as AgentList, AuthFlowSelect_default as AuthFlowSelect, BaseAgentCreate, BaseAgentDetails, BaseAgentList, BaseGroupCreate, BaseGroupList, BaseGroupMembers, BaseRoleAssignments, BaseRoleCreate, BaseRoleList, BaseRolePermissions, BaseUserCreate, BaseUserDetails, BaseUserList, ChangeCredential_default as ChangeCredential, GroupCreate_default as GroupCreate, GroupList_default as GroupList, GroupMembers_default as GroupMembers, RoleAssignments_default as RoleAssignments, RoleCreate_default as RoleCreate, RoleList_default as RoleList, RolePermissions_default as RolePermissions, SignIn_default as SignIn, SignInButton_default as SignInButton, SignOutButton_default as SignOutButton, SignUp_default as SignUp, SignUpButton_default as SignUpButton, SignedIn_default as SignedIn, SignedOut_default as SignedOut, ThunderIDNextClient_default as ThunderIDNext, ThunderIDProvider_default as ThunderIDProvider, User_default as User, UserAvatar_default as UserAvatar, UserCreate_default as UserCreate, UserDetails_default as UserDetails, UserDropdown_default as UserDropdown, UserList_default as UserList, UserProfile_default as UserProfile, UserSelect_default as UserSelect, UserTypeSelect_default as UserTypeSelect, backchannelLogout_default as backchannelLogout, createRouteMatcher_default as createRouteMatcher, removeChunkedCookieFromHeader, replaceChunkedCookieInHeader, thunderIDProxy_default as thunderIDProxy, thunderid_default as thunderid, useAddGroupMembers, useAddRoleAssignments, useCreateAgent, useCreateGroup, useCreateRole, useCreateUser, useDeleteAgent, useDeleteGroup, useDeleteRole, useDeleteUser, useGetAgent, useGetAgentGroups, useGetAgentRoles, useGetAgentTypes, useGetAgents, useGetGroup, useGetGroupMembers, useGetGroups, useGetRole, useGetRoleAssignments, useGetRoles, useGetUser, useGetUserGroups, useGetUserTypes, useGetUsers, useGrantedPermissions_default as useGrantedPermissions, useRemoveGroupMembers, useRemoveRoleAssignments, useThunderID_default as useThunderID, useUpdateAgent, useUpdateGroup, useUpdateRole, useUpdateUser };

package/dist/server/ThunderIDProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../src/server/ThunderIDProvider.tsx"],"names":[],"mappings":"AAiBA,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAC,EAAE,EAAE,iBAAiB,EAAe,MAAM,OAAO,CAAC;AAoB1D;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;OAYG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,uBAAuB,EAAE,EAAE,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAsJhF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../src/server/ThunderIDProvider.tsx"],"names":[],"mappings":"AAiBA,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAC,EAAE,EAAE,iBAAiB,EAAe,MAAM,OAAO,CAAC;AAqB1D;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;OAYG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,uBAAuB,EAAE,EAAE,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAuJhF,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/server/ThunderIDProvider.js

@@ -3,20 +3,21 @@
 
 import getSessionId_default from "./actions/getSessionId.js";
 import getClient_default from "./getClient.js";
+import getUserAction_default from "./actions/account/getUserAction.js";
+import getUserProfileAction_default from "./actions/account/getUserProfileAction.js";
+import getUserSchemaAction_default from "./actions/account/getUserSchemaAction.js";
+import updateUserProfileAction_default from "./actions/account/updateUserProfileAction.js";
 import logger_default from "../utils/logger.js";
+import handleOAuthCallbackAction_default from "./actions/auth/handleOAuthCallbackAction.js";
+import signInAction_default from "./actions/auth/signInAction.js";
+import signOutAction_default from "./actions/auth/signOutAction.js";
+import signUpAction_default from "./actions/auth/signUpAction.js";
 import clearSession_default from "./actions/clearSession.js";
 import getSessionPayload_default from "./actions/getSessionPayload.js";
-import getUserAction_default from "./actions/getUserAction.js";
-import getUserProfileAction_default from "./actions/getUserProfileAction.js";
-import getUserSchemaAction_default from "./actions/getUserSchemaAction.js";
-import handleOAuthCallbackAction_default from "./actions/handleOAuthCallbackAction.js";
 import isSignedIn_default from "./actions/isSignedIn.js";
 import refreshToken_default from "./actions/refreshToken.js";
-import signInAction_default from "./actions/signInAction.js";
-import signOutAction_default from "./actions/signOutAction.js";
-import signUpAction_default from "./actions/signUpAction.js";
-import updateUserProfileAction_default from "./actions/updateUserProfileAction.js";
 import ThunderIDProvider_default from "../client/contexts/ThunderID/ThunderIDProvider.js";
+import { pickManagementEndpoints } from "../utils/managementCollections.js";
 import { FlowMetaType, ThunderIDRuntimeError, extractUserClaimsFromIdToken, getFlowMeta, resolveResourceEndpoint } from "@thunderid/node";
 import { Fragment, jsx } from "react/jsx-runtime";
 
@@ -121,6 +122,7 @@ const ThunderIDServerProvider = async ({ children, afterSignInUrl, afterSignOutU
 		organizationHandle: config?.organizationHandle,
 		applicationId: config?.applicationId,
 		baseUrl: config?.baseUrl,
+		endpoints: pickManagementEndpoints(config?.endpoints),
 		initialMeta: flowMeta,
 		signIn: signInAction_default,
 		clearSession: clearSession_default,

package/dist/server/ThunderIDProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.js","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","flowMeta: FlowMetadataResponse | null","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","userSchema: Record<string, AttributeSchema> | null","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        }","getUserSchemaAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  AttributeSchema,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport getUserAction from './actions/getUserAction';\nimport getUserProfileAction from './actions/getUserProfileAction';\nimport getUserSchemaAction from './actions/getUserSchemaAction';\nimport handleOAuthCallbackAction from './actions/handleOAuthCallbackAction';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport signInAction from './actions/signInAction';\nimport signOutAction from './actions/signOutAction';\nimport signUpAction from './actions/signUpAction';\nimport updateUserProfileAction from './actions/updateUserProfileAction';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      url: resolveResourceEndpoint('flowMeta', config),\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n  let userSchema: Record<string, AttributeSchema> | null = null;\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n        const userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserSchemaAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n        userSchema = userSchemaResponse.data?.userSchema ?? null;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      userSchema={userSchema}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,mBAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,iBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,iBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAI,sBACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,iCAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,MAAM,YAAY;GAC3B,SAAS,QAAQ;GACjB,KAAK,wBAAwB,YAAY,OAAO;GAChD,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAM,aAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,iBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,2BAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,sBAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,mBAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CACD,IAAIC,aAAqD;CAEzD,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,sBAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,6BAAqB,UAAU;GACzC,MAAMC,qBAIF,MAAMC,4BAAoB,UAAU;AAExC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;AACvD,gBAAa,mBAAmB,MAAM,cAAc;WAC7C,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,SAAS,6BADiB,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,oBAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACD;EACZ,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}
+{"version":3,"file":"ThunderIDProvider.js","names":["ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>>","getClient","config: Partial<ThunderIDNextConfig>","flowMeta: FlowMetadataResponse | null","sessionPayload: SessionTokenPayload | undefined","getSessionPayload","sessionId: string","getSessionId","signedIn: boolean","isSignedIn","user: User","userProfile: UserProfile","userSchema: Record<string, AttributeSchema> | null","updatedBaseUrl: string | undefined","userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        }","getUserAction","userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        }","getUserProfileAction","userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        }","getUserSchemaAction","ThunderIDClientProvider","signInAction","clearSession","refreshToken","signOutAction","signUpAction","handleOAuthCallbackAction","updateUserProfileAction"],"sources":["../../src/server/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {\n  ThunderIDRuntimeError,\n  AttributeSchema,\n  FlowMetadataResponse,\n  FlowMetaType,\n  IdToken,\n  User,\n  UserProfile,\n  getFlowMeta,\n  extractUserClaimsFromIdToken,\n  resolveResourceEndpoint,\n} from '@thunderid/node';\nimport {ThunderIDProviderProps} from '@thunderid/react';\nimport {FC, PropsWithChildren, ReactElement} from 'react';\nimport getUserAction from './actions/account/getUserAction';\nimport getUserProfileAction from './actions/account/getUserProfileAction';\nimport getUserSchemaAction from './actions/account/getUserSchemaAction';\nimport updateUserProfileAction from './actions/account/updateUserProfileAction';\nimport handleOAuthCallbackAction from './actions/auth/handleOAuthCallbackAction';\nimport signInAction from './actions/auth/signInAction';\nimport signOutAction from './actions/auth/signOutAction';\nimport signUpAction from './actions/auth/signUpAction';\nimport clearSession from './actions/clearSession';\nimport getSessionId from './actions/getSessionId';\nimport getSessionPayload from './actions/getSessionPayload';\nimport isSignedIn from './actions/isSignedIn';\nimport refreshToken from './actions/refreshToken';\nimport getClient from './getClient';\nimport ThunderIDClientProvider from '../client/contexts/ThunderID/ThunderIDProvider.js';\nimport {ThunderIDNextConfig} from '../models/config';\nimport logger from '../utils/logger';\nimport {pickManagementEndpoints} from '../utils/managementCollections';\nimport {SessionTokenPayload} from '../utils/SessionManager';\n\n/**\n * Props interface of {@link ThunderIDServerProvider}\n */\nexport type ThunderIDServerProviderProps = Partial<ThunderIDProviderProps> & {\n  clientSecret?: string;\n  /**\n   * Session cookie lifetime in seconds. Determines how long the session cookie\n   * remains valid in the browser after sign-in.\n   *\n   * Resolution order (first defined value wins):\n   *   1. This prop — set here when mounting the provider.\n   *   2. `THUNDERID_SESSION_COOKIE_EXPIRY_TIME` environment variable.\n   *   3. Built-in default of 86400 seconds (24 hours).\n   *\n   * @example\n   * // 8-hour session cookie\n   * <ThunderIDServerProvider sessionCookieExpiryTime={28800} ... />\n   */\n  sessionCookieExpiryTime?: number;\n};\n\n/**\n * Server-side provider component for ThunderID authentication.\n * Wraps the client-side provider and handles server-side authentication logic.\n * Uses the singleton ThunderIDNextClient instance for consistent authentication state.\n *\n * @param props - Props injected into the component.\n *\n * @example\n * ```tsx\n * <ThunderIDServerProvider config={thunderidConfig}>\n *   <YourApp />\n * </ThunderIDServerProvider>\n * ```\n *\n * @returns ThunderIDServerProvider component.\n */\nconst ThunderIDServerProvider: FC<PropsWithChildren<ThunderIDServerProviderProps>> = async ({\n  children,\n  afterSignInUrl,\n  afterSignOutUrl,\n  ..._config\n}: PropsWithChildren<ThunderIDServerProviderProps>): Promise<ReactElement> => {\n  const thunderIDClient = getClient();\n  let config: Partial<ThunderIDNextConfig> = {};\n\n  try {\n    await thunderIDClient.initialize(_config as ThunderIDNextConfig);\n\n    logger.debug('[ThunderIDServerProvider] ThunderID client initialized successfully.');\n\n    config = await thunderIDClient.getConfiguration();\n  } catch (error) {\n    logger.error('[ThunderIDServerProvider] Failed to initialize ThunderID client:', error?.toString());\n\n    throw new ThunderIDRuntimeError(\n      `Failed to initialize ThunderID client: ${error?.toString()}`,\n      'next-ConfigurationError-001',\n      'next',\n      'An error occurred while initializing the ThunderID client. Please check your configuration.',\n    );\n  }\n\n  if (!thunderIDClient.isInitialized) {\n    return <></>;\n  }\n\n  // Fetch flow metadata (design config + i18n bundle) server-side so `FlowMetaProvider` can seed\n  // its state and skip a redundant client-side fetch — avoiding a flash of untranslated i18n keys\n  // (e.g. raw `signin.forms.credentials.title`) while embedded flow components first render.\n  let flowMeta: FlowMetadataResponse | null = null;\n  try {\n    flowMeta = await getFlowMeta({\n      baseUrl: config?.baseUrl,\n      url: resolveResourceEndpoint('flowMeta', config),\n      ...(config?.applicationId ? {id: config.applicationId, type: FlowMetaType.App} : {}),\n    });\n  } catch (error) {\n    logger.warn('[ThunderIDServerProvider] Failed to fetch flow metadata:', error?.toString());\n  }\n\n  // Try to get session information from JWT first, then fall back to legacy\n  const sessionPayload: SessionTokenPayload | undefined = await getSessionPayload();\n  const sessionId: string = sessionPayload?.sessionId || (await getSessionId()) || '';\n  const signedIn: boolean = await isSignedIn(sessionId);\n\n  let user: User = {};\n  let userProfile: UserProfile = {\n    flattenedProfile: {},\n    profile: {},\n  };\n  let userSchema: Record<string, AttributeSchema> | null = null;\n\n  const resolvedPreferences = {\n    ...config?.preferences,\n    ..._config.preferences,\n    user: {\n      ...config?.preferences?.user,\n      ..._config.preferences?.user,\n    },\n  };\n\n  if (signedIn) {\n    let updatedBaseUrl: string | undefined = config?.baseUrl;\n\n    if (sessionPayload?.organizationId) {\n      updatedBaseUrl = `${config?.baseUrl}/o`;\n      config = {...config, baseUrl: updatedBaseUrl};\n    } else if (sessionId) {\n      try {\n        const idToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        if (idToken?.['user_org']) {\n          updatedBaseUrl = `${config?.baseUrl}/o`;\n          config = {...config, baseUrl: updatedBaseUrl};\n        }\n      } catch {\n        // Continue without organization info\n      }\n    }\n\n    // Check if user profile fetching is enabled (default: true)\n    const shouldFetchUserProfile: boolean = resolvedPreferences?.user?.fetchUserProfile !== false;\n\n    if (shouldFetchUserProfile) {\n      try {\n        const userResponse: {\n          data: {user: User | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserAction(sessionId);\n        const userProfileResponse: {\n          data: {userProfile: UserProfile};\n          error: string | null;\n          success: boolean;\n        } = await getUserProfileAction(sessionId);\n        const userSchemaResponse: {\n          data: {userSchema: Record<string, AttributeSchema> | null};\n          error: string | null;\n          success: boolean;\n        } = await getUserSchemaAction(sessionId);\n\n        user = userResponse.data?.user || {};\n        userProfile = userProfileResponse.data?.userProfile ?? userProfile;\n        userSchema = userSchemaResponse.data?.userSchema ?? null;\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to fetch user profile from /users/me:', error?.toString());\n      }\n    } else {\n      try {\n        const decodedIdToken: IdToken = await thunderIDClient.getDecodedIdToken(sessionId);\n        const claims = extractUserClaimsFromIdToken(decodedIdToken);\n        user = claims;\n        userProfile = {\n          flattenedProfile: claims,\n          profile: claims,\n        };\n      } catch (error) {\n        logger.warn('[ThunderIDServerProvider] Failed to extract user claims from ID token:', error?.toString());\n      }\n    }\n  }\n\n  return (\n    <ThunderIDClientProvider\n      organizationHandle={config?.organizationHandle}\n      applicationId={config?.applicationId}\n      baseUrl={config?.baseUrl}\n      endpoints={pickManagementEndpoints(config?.endpoints)}\n      initialMeta={flowMeta}\n      signIn={signInAction}\n      clearSession={clearSession}\n      refreshToken={refreshToken}\n      signOut={signOutAction}\n      signUp={signUpAction}\n      handleOAuthCallback={handleOAuthCallbackAction}\n      signInUrl={config?.signInUrl}\n      signUpUrl={config?.signUpUrl}\n      preferences={resolvedPreferences}\n      clientId={config?.clientId}\n      user={user}\n      userProfile={userProfile}\n      userSchema={userSchema}\n      updateProfile={updateUserProfileAction}\n      isSignedIn={signedIn}\n    >\n      {children}\n    </ThunderIDClientProvider>\n  );\n};\n\nexport default ThunderIDServerProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EA,MAAMA,0BAA+E,OAAO,EAC1F,UACA,gBACA,gBACA,GAAG,cACyE;CAC5E,MAAM,kBAAkBC,mBAAW;CACnC,IAAIC,SAAuC,EAAE;AAE7C,KAAI;AACF,QAAM,gBAAgB,WAAW,QAA+B;AAEhE,iBAAO,MAAM,uEAAuE;AAEpF,WAAS,MAAM,gBAAgB,kBAAkB;UAC1C,OAAO;AACd,iBAAO,MAAM,oEAAoE,OAAO,UAAU,CAAC;AAEnG,QAAM,IAAI,sBACR,0CAA0C,OAAO,UAAU,IAC3D,+BACA,QACA,8FACD;;AAGH,KAAI,CAAC,gBAAgB,cACnB,QAAO,iCAAK;CAMd,IAAIC,WAAwC;AAC5C,KAAI;AACF,aAAW,MAAM,YAAY;GAC3B,SAAS,QAAQ;GACjB,KAAK,wBAAwB,YAAY,OAAO;GAChD,GAAI,QAAQ,gBAAgB;IAAC,IAAI,OAAO;IAAe,MAAM,aAAa;IAAI,GAAG,EAAE;GACpF,CAAC;UACK,OAAO;AACd,iBAAO,KAAK,4DAA4D,OAAO,UAAU,CAAC;;CAI5F,MAAMC,iBAAkD,MAAMC,2BAAmB;CACjF,MAAMC,YAAoB,gBAAgB,aAAc,MAAMC,sBAAc,IAAK;CACjF,MAAMC,WAAoB,MAAMC,mBAAW,UAAU;CAErD,IAAIC,OAAa,EAAE;CACnB,IAAIC,cAA2B;EAC7B,kBAAkB,EAAE;EACpB,SAAS,EAAE;EACZ;CACD,IAAIC,aAAqD;CAEzD,MAAM,sBAAsB;EAC1B,GAAG,QAAQ;EACX,GAAG,QAAQ;EACX,MAAM;GACJ,GAAG,QAAQ,aAAa;GACxB,GAAG,QAAQ,aAAa;GACzB;EACF;AAED,KAAI,UAAU;EACZ,IAAIC,iBAAqC,QAAQ;AAEjD,MAAI,gBAAgB,gBAAgB;AAClC,oBAAiB,GAAG,QAAQ,QAAQ;AACpC,YAAS;IAAC,GAAG;IAAQ,SAAS;IAAe;aACpC,UACT,KAAI;AAEF,QADyB,MAAM,gBAAgB,kBAAkB,UAAU,IAC7D,aAAa;AACzB,qBAAiB,GAAG,QAAQ,QAAQ;AACpC,aAAS;KAAC,GAAG;KAAQ,SAAS;KAAe;;UAEzC;AAQV,MAFwC,qBAAqB,MAAM,qBAAqB,MAGtF,KAAI;GACF,MAAMC,eAIF,MAAMC,sBAAc,UAAU;GAClC,MAAMC,sBAIF,MAAMC,6BAAqB,UAAU;GACzC,MAAMC,qBAIF,MAAMC,4BAAoB,UAAU;AAExC,UAAO,aAAa,MAAM,QAAQ,EAAE;AACpC,iBAAc,oBAAoB,MAAM,eAAe;AACvD,gBAAa,mBAAmB,MAAM,cAAc;WAC7C,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;MAG1G,KAAI;GAEF,MAAM,SAAS,6BADiB,MAAM,gBAAgB,kBAAkB,UAAU,CACvB;AAC3D,UAAO;AACP,iBAAc;IACZ,kBAAkB;IAClB,SAAS;IACV;WACM,OAAO;AACd,kBAAO,KAAK,0EAA0E,OAAO,UAAU,CAAC;;;AAK9G,QACE,oBAACC;EACC,oBAAoB,QAAQ;EAC5B,eAAe,QAAQ;EACvB,SAAS,QAAQ;EACjB,WAAW,wBAAwB,QAAQ,UAAU;EACrD,aAAa;EACb,QAAQC;EACR,cAAcC;EACd,cAAcC;EACd,SAASC;EACT,QAAQC;EACR,qBAAqBC;EACrB,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB,aAAa;EACb,UAAU,QAAQ;EACZ;EACO;EACD;EACZ,eAAeC;EACf,YAAY;EAEX;GACuB;;AAI9B,kCAAe"}

package/dist/server/actions/account/getUserAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/getUserAction.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,IAAI,EAAC,MAAM,iBAAiB,CAAC;AAGrC;;;GAGG;AACH,QAAA,MAAM,aAAa,GACjB,WAAW,MAAM,KAChB,OAAO,CAAC;IAAC,IAAI,EAAE;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAC,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAQ7E,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/server/actions/{getUserAction.js → account/getUserAction.js}

@@ -1,9 +1,9 @@
 'use server';
 
 
-import getClient_default from "../getClient.js";
+import getClient_default from "../../getClient.js";
 
-//#region src/server/actions/getUserAction.ts
+//#region src/server/actions/account/getUserAction.ts
 /**
 * Server action to get the current user.
 * Returns the user profile if signed in.

package/dist/server/actions/account/getUserAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAction.js","names":["getClient"],"sources":["../../../../src/server/actions/account/getUserAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {User} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the current user.\n * Returns the user profile if signed in.\n */\nconst getUserAction = async (\n  sessionId: string,\n): Promise<{data: {user: User | null}; error: string | null; success: boolean}> => {\n  try {\n    const client = getClient();\n    const user: User = await client.getUser(sessionId);\n    return {data: {user}, error: null, success: true};\n  } catch (error) {\n    return {data: {user: null}, error: 'Failed to get user', success: false};\n  }\n};\n\nexport default getUserAction;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,gBAAgB,OACpB,cACiF;AACjF,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,MADI,MADJA,mBAAW,CACM,QAAQ,UAAU,EAC9B;GAAE,OAAO;GAAM,SAAS;GAAK;UAC1C,OAAO;AACd,SAAO;GAAC,MAAM,EAAC,MAAM,MAAK;GAAE,OAAO;GAAsB,SAAS;GAAM;;;AAI5E,4BAAe"}

package/dist/server/actions/account/getUserProfileAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserProfileAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/getUserProfileAction.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AAG5C;;;GAGG;AACH,QAAA,MAAM,oBAAoB,GACxB,WAAW,MAAM,KAChB,OAAO,CAAC;IAAC,IAAI,EAAE;QAAC,WAAW,EAAE,WAAW,CAAA;KAAC,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAiBpF,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/server/actions/{getUserProfileAction.js → account/getUserProfileAction.js}

@@ -1,9 +1,9 @@
 'use server';
 
 
-import getClient_default from "../getClient.js";
+import getClient_default from "../../getClient.js";
 
-//#region src/server/actions/getUserProfileAction.ts
+//#region src/server/actions/account/getUserProfileAction.ts
 /**
 * Server action to get the current user.
 * Returns the user profile if signed in.

package/dist/server/actions/account/getUserProfileAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserProfileAction.js","names":["getClient"],"sources":["../../../../src/server/actions/account/getUserProfileAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {UserProfile} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the current user.\n * Returns the user profile if signed in.\n */\nconst getUserProfileAction = async (\n  sessionId: string,\n): Promise<{data: {userProfile: UserProfile}; error: string | null; success: boolean}> => {\n  try {\n    const client = getClient();\n    const updatedProfile: UserProfile = await client.getUserProfile(sessionId);\n    return {data: {userProfile: updatedProfile}, error: null, success: true};\n  } catch (error) {\n    return {\n      data: {\n        userProfile: {\n          flattenedProfile: {},\n          profile: {},\n        },\n      },\n      error: 'Failed to get user profile',\n      success: false,\n    };\n  }\n};\n\nexport default getUserProfileAction;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,uBAAuB,OAC3B,cACwF;AACxF,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,aADqB,MADrBA,mBAAW,CACuB,eAAe,UAAU,EAC/B;GAAE,OAAO;GAAM,SAAS;GAAK;UACjE,OAAO;AACd,SAAO;GACL,MAAM,EACJ,aAAa;IACX,kBAAkB,EAAE;IACpB,SAAS,EAAE;IACZ,EACF;GACD,OAAO;GACP,SAAS;GACV;;;AAIL,mCAAe"}

package/dist/server/actions/account/getUserSchemaAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserSchemaAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/getUserSchemaAction.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAGhD;;;;GAIG;AACH,QAAA,MAAM,mBAAmB,GACvB,WAAW,MAAM,KAChB,OAAO,CAAC;IAAC,IAAI,EAAE;QAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAAA;KAAC,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAY9G,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/server/actions/{getUserSchemaAction.js → account/getUserSchemaAction.js}

@@ -1,9 +1,9 @@
 'use server';
 
 
-import getClient_default from "../getClient.js";
+import getClient_default from "../../getClient.js";
 
-//#region src/server/actions/getUserSchemaAction.ts
+//#region src/server/actions/account/getUserSchemaAction.ts
 /**
 * Server action to get the user attribute schema from `/users/me/meta`.
 * Used to render profile fields dynamically (labels, required/regex validation)

package/dist/server/actions/account/getUserSchemaAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserSchemaAction.js","names":["getClient"],"sources":["../../../../src/server/actions/account/getUserSchemaAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {AttributeSchema} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the user attribute schema from `/users/me/meta`.\n * Used to render profile fields dynamically (labels, required/regex validation)\n * instead of falling back to raw, unlabeled attribute keys.\n */\nconst getUserSchemaAction = async (\n  sessionId: string,\n): Promise<{data: {userSchema: Record<string, AttributeSchema> | null}; error: string | null; success: boolean}> => {\n  try {\n    const client = getClient();\n    const userSchema: Record<string, AttributeSchema> | null = await client.getUserSchema(sessionId);\n    return {data: {userSchema}, error: null, success: true};\n  } catch (error) {\n    return {\n      data: {userSchema: null},\n      error: 'Failed to get user schema',\n      success: false,\n    };\n  }\n};\n\nexport default getUserSchemaAction;\n"],"mappings":";;;;;;;;;;;AAaA,MAAM,sBAAsB,OAC1B,cACkH;AAClH,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,YAD4C,MAD5CA,mBAAW,CAC8C,cAAc,UAAU,EACtE;GAAE,OAAO;GAAM,SAAS;GAAK;UAChD,OAAO;AACd,SAAO;GACL,MAAM,EAAC,YAAY,MAAK;GACxB,OAAO;GACP,SAAS;GACV;;;AAIL,kCAAe"}

package/dist/server/actions/account/updateUserCredentialsAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserCredentialsAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/updateUserCredentialsAction.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,2BAA2B,EAA2B,MAAM,iBAAiB,CAAC;AAGtF,MAAM,WAAW,iCAAkC,SAAQ,2BAA2B;IACpF,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,QAAA,MAAM,2BAA2B,GAC/B,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,MAAM,KACjB,OAAO,CAAC,iCAAiC,CAS3C,CAAC;AAEF,eAAe,2BAA2B,CAAC"}

package/dist/server/actions/{updateUserCredentialsAction.js → account/updateUserCredentialsAction.js}

@@ -1,10 +1,10 @@
 'use server';
 
 
-import getClient_default from "../getClient.js";
+import getClient_default from "../../getClient.js";
 import { mapCredentialUpdateError } from "@thunderid/node";
 
-//#region src/server/actions/updateUserCredentialsAction.ts
+//#region src/server/actions/account/updateUserCredentialsAction.ts
 /**
 * Server action to update one of the signed-in user's own credentials (e.g. `password`).
 *

package/dist/server/actions/account/updateUserCredentialsAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserCredentialsAction.js","names":["getClient"],"sources":["../../../../src/server/actions/account/updateUserCredentialsAction.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {CredentialUpdateErrorResult, mapCredentialUpdateError} from '@thunderid/node';\nimport getClient from '../../getClient';\n\nexport interface UpdateUserCredentialsActionResult extends CredentialUpdateErrorResult {\n  success: boolean;\n}\n\n/**\n * Server action to update one of the signed-in user's own credentials (e.g. `password`).\n *\n * Never throws across the server action boundary — a thrown class instance loses its\n * prototype chain crossing it, so `error instanceof ThunderIDAPIError` would no longer hold on\n * the client. Instead, the real error is mapped to a field/message here, server-side, while it\n * is still the genuine `ThunderIDAPIError` the core `updateMeCredentials` call threw, and only\n * the plain, serializable result crosses back.\n */\nconst updateUserCredentialsAction = async (\n  payload: Record<string, string>,\n  sessionId?: string,\n): Promise<UpdateUserCredentialsActionResult> => {\n  try {\n    const client = getClient();\n    await client.updateUserCredentials(payload, sessionId);\n    return {field: null, messageKey: '', success: true};\n  } catch (error) {\n    const {field, message, messageKey}: CredentialUpdateErrorResult = mapCredentialUpdateError(error);\n    return {field, message, messageKey, success: false};\n  }\n};\n\nexport default updateUserCredentialsAction;\n"],"mappings":";;;;;;;;;;;;;;;;AAqBA,MAAM,8BAA8B,OAClC,SACA,cAC+C;AAC/C,KAAI;AAEF,QADeA,mBAAW,CACb,sBAAsB,SAAS,UAAU;AACtD,SAAO;GAAC,OAAO;GAAM,YAAY;GAAI,SAAS;GAAK;UAC5C,OAAO;EACd,MAAM,EAAC,OAAO,SAAS,eAA2C,yBAAyB,MAAM;AACjG,SAAO;GAAC;GAAO;GAAS;GAAY,SAAS;GAAM;;;AAIvD,0CAAe"}

package/dist/server/actions/account/updateUserProfileAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserProfileAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/account/updateUserProfileAction.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,qBAAqB,EAAE,IAAI,EAAC,MAAM,iBAAiB,CAAC;AAG5D;;;GAGG;AACH,QAAA,MAAM,uBAAuB,GAC3B,SAAS,qBAAqB,EAC9B,YAAY,MAAM,KACjB,OAAO,CAAC;IAAC,IAAI,EAAE;QAAC,IAAI,EAAE,IAAI,CAAA;KAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAc/D,CAAC;AAEF,eAAe,uBAAuB,CAAC"}

package/dist/server/actions/{updateUserProfileAction.js → account/updateUserProfileAction.js}

@@ -1,9 +1,9 @@
 'use server';
 
 
-import getClient_default from "../getClient.js";
+import getClient_default from "../../getClient.js";
 
-//#region src/server/actions/updateUserProfileAction.ts
+//#region src/server/actions/account/updateUserProfileAction.ts
 /**
 * Server action to get the current user.
 * Returns the user profile if signed in.

package/dist/server/actions/account/updateUserProfileAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserProfileAction.js","names":["getClient"],"sources":["../../../../src/server/actions/account/updateUserProfileAction.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n'use server';\n\nimport {UpdateMeProfileConfig, User} from '@thunderid/node';\nimport getClient from '../../getClient';\n\n/**\n * Server action to get the current user.\n * Returns the user profile if signed in.\n */\nconst updateUserProfileAction = async (\n  payload: UpdateMeProfileConfig,\n  sessionId?: string,\n): Promise<{data: {user: User}; error: string; success: boolean}> => {\n  try {\n    const client = getClient();\n    const user: User = await client.updateUserProfile(payload, sessionId);\n    return {data: {user}, error: '', success: true};\n  } catch (error) {\n    return {\n      data: {\n        user: {},\n      },\n      error: `Failed to get user profile: ${error instanceof Error ? error.message : String(error)}`,\n      success: false,\n    };\n  }\n};\n\nexport default updateUserProfileAction;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,0BAA0B,OAC9B,SACA,cACmE;AACnE,KAAI;AAGF,SAAO;GAAC,MAAM,EAAC,MADI,MADJA,mBAAW,CACM,kBAAkB,SAAS,UAAU,EACjD;GAAE,OAAO;GAAI,SAAS;GAAK;UACxC,OAAO;AACd,SAAO;GACL,MAAM,EACJ,MAAM,EAAE,EACT;GACD,OAAO,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC5F,SAAS;GACV;;;AAIL,sCAAe"}

package/dist/server/actions/{getAuthFlowsAction.d.ts → auth/getAuthFlowsAction.d.ts}

@@ -1,4 +1,4 @@
-import { SelectPageActionResult } from './runSelectPageAction';
+import { SelectPageActionResult } from '../runSelectPageAction';
 /**
  * Request from the browser. Carries only paging; the session comes from the request cookie and the flow
  * type is fixed to authentication on the server.

package/dist/server/actions/auth/getAuthFlowsAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthFlowsAction.d.ts","sourceRoot":"","sources":["../../../../src/server/actions/auth/getAuthFlowsAction.ts"],"names":[],"mappings":"AAMA,OAA4B,EAAC,sBAAsB,EAAC,MAAM,wBAAwB,CAAC;AAEnF;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE9D;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,GAAU,oBAAiB,yBAA8B,KAAG,OAAO,CAAC,wBAAwB,CASjH,CAAC;AAEJ,eAAe,kBAAkB,CAAC"}